feat(native): add protected JD final residency control

This commit is contained in:
冰朔 2026-08-07 00:27:55 +08:00
commit 8b5328993e
8 changed files with 503 additions and 24 deletions

View file

@ -0,0 +1,34 @@
schema: guanghu.jd-final-native-residency-control-gate/v1
gate_id: GH-OS-JD-FD-PRIMARY-001-FINAL-RESIDENCY-CONTROL
status: SOURCE_READY_QEMU_PASS_PHYSICAL_PENDING
node_id: JD-FD-PRIMARY
problem:
previous_native_default: PASS_100
previous_native_runtime_selected_recovery_itself: true
final_native_residency_proven: false
required_model:
normal_state: GUANGHU_OS_NATIVE_RESIDENT
native_runtime_autonomously_selects_recovery: false
outbound_relay_keeps_nat_path_alive: true
ordinary_reply: HLDP-NATIVE-ACK
recovery_reply: PER_DEPLOYMENT_128_BIT_CAPABILITY
recovery_request_authority: EXPLICIT_ROOT_ACTION_ON_BS-SG-003
token_repository_exposure: forbidden
wrong_capability: IGNORE_AND_REMAIN_NATIVE
qemu_acceptance:
native_initial_pipeline: PASS_100
native_remained_resident_before_authorized_recovery: PASS_100
wrong_capability_ignored: PASS_100
protected_recovery_capability_returned_to_linux: PASS_100
physical_acceptance:
source_published: pending
relay_installed: pending
one_time_final_candidate_booted: pending
sustained_native_residency_observed: pending
explicit_recovery_request_verified: pending
returned_linux_and_beacon_cleared: pending
final_native_residency_proven: false
boundary:
qemu_capability: 100
physical_server_capability: 0
do_not_claim_final_residency_until_physical_gate: true