feat(domain): project verified runtime policy to desktop

product-source/guanghu-knowledge-base/src/components/DomainConnectionSheet.tsx

@@ -1,5 +1,5 @@
 import { Cloud, Laptop, ShieldCheck, X } from 'lucide-react';
-import { projectDomainConnectionSteps, projectDomainTrustSource, type DomainAccessProjection } from '../domain-connection';
+import { projectDomainConnectionSteps, projectDomainRuntimePolicyReceipt, projectDomainTrustSource, type DomainAccessProjection } from '../domain-connection';
 import { canEnterSelectedDomainRuntime, projectDomainRuntimeBoundary, type DomainEntryTarget, type DomainNodeType } from '../domain-entry-state';
 import { publicDomainDirectory, type DomainRouteId } from '../public-domain-directory';
 
@@ -17,6 +17,7 @@ interface Props {
 export function DomainConnectionSheet({ access, target, open, onClose, onSelectTarget, onSelectNodeType, onEnterRuntime, onOpenCodeChannel }: Props) {
   if (!open) return null;
   const steps = projectDomainConnectionSteps(access);
+  const policyReceipt = projectDomainRuntimePolicyReceipt(access);
   const canEnter = canEnterSelectedDomainRuntime(target, access);
 
   return (
@@ -54,6 +55,13 @@ export function DomainConnectionSheet({ access, target, open, onClose, onSelectT
           ))}
         </ol>
 
+        {policyReceipt.length > 0 && <section className="domain-policy-receipt" aria-labelledby="domain-policy-receipt-title">
+          <h3 id="domain-policy-receipt-title">可信域运行策略</h3>
+          <dl>
+            {policyReceipt.map(row => <div key={row.label}><dt>{row.label}</dt><dd>{row.value}</dd></div>)}
+          </dl>
+        </section>}
+
         <p className="domain-connection-boundary">{projectDomainRuntimeBoundary(target, access)} 代码频道账号只用于仓库与同步，不能单独签发域权限。</p>
         </>}