feat: ship dual-signed online module marketplace

product-source/hololake-native-desktop/scripts/zero-point-nucleus.test.mjs

@@ -7,6 +7,8 @@ const contract = JSON.parse(read('contracts/zero-point-nucleus-channel.json'))
 const stageOne = JSON.parse(read('contracts/stage-one-platform.json'))
 const foundation = JSON.parse(read('foundation.json'))
 const rust = read('src-tauri/src/zero_point.rs')
+const distribution = read('src-tauri/src/public_zero_core_distribution.rs')
+const trust = JSON.parse(read('contracts/public-zero-core-trust.json'))
 const lib = read('src-tauri/src/lib.rs')
 const ui = read('src/main.tsx')
 
@@ -20,13 +22,28 @@ test('zero-point nucleus is a system runtime and never an inferred persona bindi
   assert.match(ui, /验证结果不构成人格绑定、模型载体绑定或执行授权/)
 })
 
-test('protocol comparison starts below the public surface and fails closed', () => {
+test('dual-signed protocol synchronization starts below the public surface and uses only provisioned public trust', () => {
   assert.equal(contract.current_implementation.boot_time_silent_version_comparison, true)
-  assert.equal(contract.current_implementation.signed_protocol_payload_installation, false)
+  assert.equal(contract.current_implementation.signed_protocol_payload_installation, true)
+  assert.equal(contract.current_implementation.production_dual_signer_trust_provisioned, true)
+  assert.equal(stageOne.zero_point_nucleus_client_runtime.signed_protocol_payload_installation_implemented, true)
+  assert.equal(stageOne.zero_point_nucleus_client_runtime.production_dual_signer_trust_provisioned, true)
+  assert.equal(trust.state, 'PROVISIONED')
+  assert.equal(trust.signers.length, 2)
+  assert.ok(trust.signers.every((signer) => signer.algorithm === 'Ed25519' && Buffer.from(signer.publicKeyBase64, 'base64').length === 32))
+  assert.deepEqual(trust.requiredSignerClasses, [
+    'ZERO_POINT_ORIGIN_PUBLIC_SCOPE_SIGNER',
+    'ENTERPRISE_ZERO_CORE_DISTRIBUTION_SIGNER',
+  ])
   assert.equal(contract.security.unsigned_protocol_update_allowed, false)
   assert.match(lib, /sync_protocol_runtime/)
-  assert.match(rust, /UPDATE_PENDING_SIGNATURE_KEY_ABSENT/)
-  assert.match(rust, /UPDATE_FOUND_GATE_PENDING/)
+  assert.match(rust, /sync_public_zero_core/)
+  assert.match(distribution, /verify_dual_signatures/)
+  assert.match(distribution, /HOLOLAKE_PUBLIC_ZERO_CORE_ROLLBACK_REJECTED/)
+  assert.match(distribution, /HOLOLAKE_PUBLIC_ZERO_CORE_EPOCH_EQUIVOCATION_REJECTED/)
+  assert.match(distribution, /distribution-state\.sqlite3/)
+  assert.match(distribution, /TransactionBehavior::Immediate/)
+  assert.match(distribution, /reqwest::header::IF_NONE_MATCH/)
   assert.doesNotMatch(lib, /zero_point_save_api|zero_point_api_config|generic_layer_chat/)
   assert.doesNotMatch(ui, /模型 API 配置|通用AI运行层|AGENT PARLOR|会客厅/)
 })