feat: ship dual-signed online module marketplace

2026-08-19 18:24:50 +08:00 · 2026-08-19 18:24:50 +08:00 · b0eeade03d
commit b0eeade03d
parent 3153771bf2
40 changed files with 5774 additions and 111 deletions
--- a/product-source/hololake-native-desktop/marketplace/skills/HLP-SKILL-OFFICIAL-DELIVERY-VERIFICATION-0001-0.1.0.ghskill
+++ b/product-source/hololake-native-desktop/marketplace/skills/HLP-SKILL-OFFICIAL-DELIVERY-VERIFICATION-0001-0.1.0.ghskill
@ -0,0 +1,44 @@
+{
+  "schema": "hololake.cognitive-skill-package/v1",
+  "manifest": {
+    "skillNumber": "HLP-SKILL-OFFICIAL-DELIVERY-VERIFICATION-0001",
+    "displayName": "真实交付验收思维",
+    "version": "0.1.0",
+    "minimumHostVersion": "0.5.0",
+    "contentDigest": "0d31d0ef659ddb2125d8faa92a180c237efc45c8a4384394236226ab724e8914",
+    "executionAuthority": false,
+    "skillReadonlyGuarantee": true,
+    "permissions": []
+  },
+  "payload": {
+    "purpose": "把完成定义为可运行、可核验、可回退的真实结果，而不是文件存在或口头声称。",
+    "triggers": [
+      "用户要求开发、部署、安装或交付",
+      "任务包含线上服务、本机应用或跨端同步",
+      "准备声称功能已经完成"
+    ],
+    "method": [
+      "先列出用户能直接观察到的终态与失败态",
+      "把每个终态连接到真实运行路径、回执与验证动作",
+      "依次验证源码、构建产物、线上读回和最终用户入口",
+      "只根据最新一次可复现验证报告完成状态"
+    ],
+    "constraints": [
+      "不得把设计文档、测试替身或静态界面当作真实交付",
+      "不得因为测试通过就省略线上读回或安装版验证",
+      "验证失败时保留上一个可用版本并明确失败位置",
+      "本技能不调用工具、不取得终端或部署权限"
+    ],
+    "outputContract": [
+      "交付物的真实位置或入口",
+      "执行过的验证及其可核验结果",
+      "尚未完成或被拒绝的边界",
+      "回退方式与保留的数据"
+    ],
+    "capabilityReferences": [
+      "HLP-NIPC-OP-0151",
+      "HLP-NIPC-OP-0152",
+      "HLP-NIPC-OP-0154"
+    ]
+  }
+}
--- a/product-source/hololake-native-desktop/marketplace/skills/HLP-SKILL-OFFICIAL-MODULE-BOUNDARY-REVIEW-0001-0.1.0.ghskill
+++ b/product-source/hololake-native-desktop/marketplace/skills/HLP-SKILL-OFFICIAL-MODULE-BOUNDARY-REVIEW-0001-0.1.0.ghskill
@ -0,0 +1,44 @@
+{
+  "schema": "hololake.cognitive-skill-package/v1",
+  "manifest": {
+    "skillNumber": "HLP-SKILL-OFFICIAL-MODULE-BOUNDARY-REVIEW-0001",
+    "displayName": "模块边界审查思维",
+    "version": "0.1.0",
+    "minimumHostVersion": "0.5.0",
+    "contentDigest": "7491d5f861802e0b3567297225d9623a07b72f8817c6767b57e728875ab33f18",
+    "executionAuthority": false,
+    "skillReadonlyGuarantee": true,
+    "permissions": []
+  },
+  "payload": {
+    "purpose": "在模块进入频道前分清模块本体、用户数据、现实权限、来源证据与人格认知边界。",
+    "triggers": [
+      "新增或更新一个成品模块",
+      "从行业工作区提取可安装功能",
+      "审查模块删除、停用、回退或迁移方案"
+    ],
+    "method": [
+      "确认模块有唯一编号、版本、适配器与精确来源提交",
+      "把代码仓库限定为来源证据，把可安装物限定为不可变验签包",
+      "逐项核对现实权限并标出新增权限的人类确认点",
+      "验证停用保留用户数据、更新保留回执、回退只使用已验签历史包"
+    ],
+    "constraints": [
+      "思维技能不得冒充成品模块或获得现实执行权",
+      "成品模块不得获得人格记忆、人格身份或语言主控权",
+      "客户端不得克隆并直接执行来源仓库",
+      "本技能只提供审查方法，不执行删除、安装、迁移或回退"
+    ],
+    "outputContract": [
+      "模块身份和来源证据",
+      "现实权限与人类确认点",
+      "数据保留、停用和回退边界",
+      "拒绝接入的原因与待修正项"
+    ],
+    "capabilityReferences": [
+      "HLP-NIPC-OP-0150",
+      "HLP-NIPC-OP-0152",
+      "HLP-NIPC-OP-0153"
+    ]
+  }
+}