feat: ship dual-signed online module marketplace

2026-08-19 18:24:50 +08:00 · 2026-08-19 18:24:50 +08:00 · b0eeade03d
commit b0eeade03d
parent 3153771bf2
40 changed files with 5774 additions and 111 deletions
--- a/product-source/hololake-native-desktop/contracts/distribution-plane-router.json
+++ b/product-source/hololake-native-desktop/contracts/distribution-plane-router.json
@ -0,0 +1,186 @@
+{
+  "schema": "hololake.distribution-plane-router/v1",
+  "record_id": "HLP-DISTRIBUTION-PLANE-ROUTER-001",
+  "state": "CONTRACT_CURRENT_PUBLIC_ZERO_CORE_CLIENT_RUNTIME_IMPLEMENTED_SERVER_AND_CATALOG_INTEGRATION_PENDING",
+  "classification": {
+    "authority": "EXPLICIT_SIGNED_RELEASE_ENVELOPE",
+    "semantic_guessing_allowed": false,
+    "missing_or_conflicting_scope": "FAIL_CLOSED",
+    "required_fields": [
+      "releaseId",
+      "scope",
+      "ownerNumber",
+      "authorityDomain",
+      "sourceRepository",
+      "sourceCommit",
+      "artifactKind",
+      "targetNamespace",
+      "minimumHostVersion",
+      "contentSha256",
+      "permissionDelta",
+      "rollbackReference",
+      "signerId"
+    ],
+    "human_source_rule": "THE_PUBLISHER_STATES_PUBLIC_OR_PRIVATE_SCOPE_AND_REVIEWS_THE_EXACT_IMMUTABLE_CANDIDATE_BEFORE_SERVER_PUBLICATION",
+    "system_rule": "CONTENT_INSPECTION_MAY_REJECT_A_SCOPE_MISMATCH_BUT_MUST_NOT_INVENT_OR_EXPAND_SCOPE"
+  },
+  "planes": [
+    {
+      "plane_number": "HLP-DIST-PLANE-0001",
+      "scope": "PUBLIC_ZERO_CORE_PROTOCOL",
+      "physical_node": "GH-CVM-MAIN-PROD-01",
+      "logical_source": "ZERO_POINT_ORIGIN_PUBLIC_PROJECTION_HOSTED_OUTSIDE_PRIVATE_FIFTH_DOMAIN",
+      "logical_authority": "ZERO_POINT_ORIGIN_WITH_ICE_GL_INFINITY_PUBLIC_SCOPE_APPROVAL",
+      "management_entry": "FIFTH_DOMAIN_PORTAL_TO_ENTERPRISE_ZERO_CORE_WITH_ONE_TIME_AUDIENCE_BOUND_HANDOFF",
+      "public_read_access": "SIGNED_MANIFEST_AND_ARTIFACT_NO_ACCOUNT_REQUIRED",
+      "allowed_artifacts": [
+        "DECLARATIVE_LANGUAGE_PROTOCOL",
+        "NUMBERING_PROTOCOL",
+        "COMPATIBILITY_RULE",
+        "BOUNDED_MIGRATION_RULE"
+      ],
+      "arbitrary_native_code_allowed": false,
+      "arbitrary_webview_javascript_allowed": false,
+      "publisher_human_confirmation_required": true,
+      "per_device_human_install_confirmation_required": false,
+      "automatic_check": true,
+      "automatic_download_after_verification": true,
+      "automatic_atomic_activation_after_self_test": true,
+      "visible_human_receipt_required": true,
+      "public_propagation_allowed": true,
+      "required_signer_classes": [
+        "ZERO_POINT_ORIGIN_PUBLIC_SCOPE_SIGNER",
+        "ENTERPRISE_ZERO_CORE_DISTRIBUTION_SIGNER"
+      ],
+      "signer_class": "DUAL_ORIGIN_AND_ENTERPRISE_ZERO_CORE_SIGNERS"
+    },
+    {
+      "plane_number": "HLP-DIST-PLANE-0002",
+      "scope": "PRIVATE_FIFTH_DOMAIN",
+      "physical_node": "JD-FD-PRIMARY",
+      "logical_source": "DOM-FIFTH-0001_PRIVATE_BODY",
+      "audience": "EXACT_BOUND_OWNER_AND_EXPLICITLY_AUTHORIZED_PRIVATE_NODES",
+      "publisher_human_confirmation_required": true,
+      "per_device_human_install_confirmation_required": false,
+      "automatic_check": true,
+      "public_propagation_allowed": false,
+      "cross_domain_replication_allowed": false,
+      "signer_class": "PRIVATE_FIFTH_DOMAIN_SIGNER"
+    },
+    {
+      "plane_number": "HLP-DIST-PLANE-0003",
+      "scope": "PUBLIC_ENTERPRISE_MODULE_CATALOG",
+      "physical_node": "GH-CVM-MAIN-PROD-01",
+      "logical_source": "GUANGHU_CHANNEL_AGGREGATE",
+      "producer_model": "FIVE_RESPONSIBILITY_REPOSITORIES_TO_ONE_REVIEWED_AGGREGATE",
+      "allowed_artifacts": [
+        "DECLARATIVE_GHMOD_PACKAGE",
+        "MODULE_METADATA",
+        "PERSONA_BRAIN_SKILL_PACKAGE"
+      ],
+      "raw_repository_is_executable_input": false,
+      "client_full_repository_clone_required": false,
+      "catalog_index_automatic_sync": true,
+      "module_package_download_on_human_selection": true,
+      "module_install_human_confirmation_required": true,
+      "permission_expansion_human_confirmation_required": true,
+      "lighthouse_number_registration_required": true,
+      "isolated_preflight_and_self_test_required": true,
+      "signer_class": "ENTERPRISE_MODULE_RELEASE_SIGNER"
+    },
+    {
+      "plane_number": "HLP-DIST-PLANE-0004",
+      "scope": "APPLICATION_BINARY",
+      "physical_node": "HOLOLAKE_RELEASE_BROADCAST",
+      "allowed_artifacts": [
+        "SIGNED_NOTARIZED_DESKTOP_APPLICATION",
+        "SIGNED_UPDATER_ARCHIVE"
+      ],
+      "source_commit_must_be_immutable": true,
+      "platform_signing_required": true,
+      "updater_signature_required": true,
+      "per_device_human_install_confirmation_required": true,
+      "automatic_restart_allowed": false,
+      "signer_class": "HOLOLAKE_APPLICATION_RELEASE_SIGNER"
+    }
+  ],
+  "lamp_protocol": {
+    "transport": "HTTPS_CONDITIONAL_GET",
+    "git_role": "DURABLE_AUTHORING_AND_EVIDENCE_NOT_CLIENT_REALTIME_TRANSPORT",
+    "signal": "SIGNED_MONOTONIC_EPOCH_AND_CONTENT_ROOT",
+    "cache_validation": ["ETAG", "IF_NONE_MATCH"],
+    "check_events": ["APPLICATION_START", "NETWORK_RESUME", "BOUNDED_PERIODIC_TIMER"],
+    "minimum_periodic_interval_seconds": 900,
+    "jitter_required": true,
+    "full_repository_clone_for_LIGHT_SIGNAL": false,
+    "required_manifest_fields": [
+      "schema",
+      "planeNumber",
+      "epoch",
+      "version",
+      "contentRootSha256",
+      "artifactManifestUrl",
+      "signatureUrl",
+      "publishedAt",
+      "minimumHostVersion"
+    ]
+  },
+  "cross_node_management_handoff": {
+    "source_node": "JD-FD-PRIMARY",
+    "target_node": "GH-CVM-MAIN-PROD-01",
+    "source_surface": "PRIVATE_FIFTH_DOMAIN",
+    "target_surface": "PUBLIC_ZERO_CORE_MANAGEMENT_CHANNEL",
+    "credential_reuse_allowed": false,
+    "password_forwarding_allowed": false,
+    "ticket_properties": [
+      "ONE_TIME",
+      "SHORT_LIVED",
+      "BOUND_TO_HUMAN_NUMBER",
+      "BOUND_TO_HOLOLAKE_CLIENT_INSTANCE",
+      "BOUND_TO_TARGET_NODE",
+      "BOUND_TO_PUBLIC_ZERO_CORE_RESOURCE",
+      "NON_TRANSFERABLE",
+      "REPLAY_PROTECTED"
+    ],
+    "exit_behavior": "DESTROY_ENTERPRISE_ZERO_CORE_SESSION_AND_RESTORE_EXISTING_PRIVATE_FIFTH_DOMAIN_SESSION",
+    "enterprise_four_domain_authority_inherited": false,
+    "private_fifth_domain_authority_exported": false,
+    "current_state": "NOT_IMPLEMENTED"
+  },
+  "activation_pipeline": [
+    "READ_EXPLICIT_RELEASE_ENVELOPE",
+    "VERIFY_SCOPE_OWNER_DOMAIN_REPOSITORY_AND_IMMUTABLE_COMMIT",
+    "BUILD_BOUNDED_CONTENT_ADDRESSED_ARTIFACT",
+    "RUN_ISOLATED_SCHEMA_PERMISSION_COMPATIBILITY_AND_SELF_TEST",
+    "ALLOCATE_OR_VERIFY_LIGHTHOUSE_NUMBER",
+    "SHOW_EXACT_CANDIDATE_TO_AUTHORIZED_PUBLISHER",
+    "REQUIRE_PUBLISHER_CONFIRMATION",
+    "SIGN_WITH_PLANE_SPECIFIC_KEY",
+    "APPEND_HASH_CHAINED_PUBLICATION_RECEIPT",
+    "ADVANCE_SIGNED_LAMP_EPOCH_ATOMICALLY"
+  ],
+  "client_protocol_activation": [
+    "COMPARE_SIGNED_LAMP_EPOCH_WITH_CONDITIONAL_GET",
+    "VERIFY_PLANE_SOURCE_SIGNATURE_CONTENT_ROOT_AND_MONOTONIC_VERSION",
+    "DOWNLOAD_TO_ISOLATED_STAGING",
+    "REJECT_EXECUTABLE_OR_OUT_OF_SCOPE_PAYLOAD",
+    "RUN_LOCAL_COMPATIBILITY_AND_SELF_TEST",
+    "ATOMICALLY_SWITCH_CURRENT_POINTER",
+    "WRITE_LOCAL_HASH_CHAINED_RECEIPT",
+    "KEEP_LAST_KNOWN_GOOD_ROLLBACK",
+    "NOTIFY_HUMAN_WITHOUT_REQUIRING_PER_DEVICE_APPROVAL"
+  ],
+  "current_observed_gaps_2026_08_19": {
+    "enterprise_public_zero_core_projection": "NOT_DEPLOYED",
+    "jd_to_enterprise_zero_core_handoff": "NOT_IMPLEMENTED",
+    "zero_point_signed_payload_activation": "CLIENT_IMPLEMENTED_DUAL_SIGNER_TRUST_NOT_PROVISIONED",
+    "enterprise_guanghu_channel_aggregate_repository": "NOT_PRESENT",
+    "enterprise_public_gitea_repositories_observed": [
+      "bingshuo/hololake-world",
+      "bingshuo/lighthouse"
+    ],
+    "online_module_catalog_registry": "NOT_IMPLEMENTED",
+    "local_signed_module_lifecycle": "IMPLEMENTED_FOR_BUNDLED_PACKAGES",
+    "application_release_signing": "PERSONAL_APPLE_DEVELOPER_TRANSITION"
+  }
+}