diff --git a/product-source/hololake-clean-desktop/contracts/enterprise-responsibility-entrance-v1.json b/product-source/hololake-clean-desktop/contracts/enterprise-responsibility-entrance-v1.json index 1924f9ae9..7d0de2f13 100644 --- a/product-source/hololake-clean-desktop/contracts/enterprise-responsibility-entrance-v1.json +++ b/product-source/hololake-clean-desktop/contracts/enterprise-responsibility-entrance-v1.json @@ -1,7 +1,7 @@ { "schema": "hololake.enterprise-responsibility-entrance/v1", "contract_id": "HLP-ENTERPRISE-RESPONSIBILITY-ENTRANCE-0001", - "state": "LOCAL_DEVICE_PROOF_IMPLEMENTED_SERVER_CHALLENGE_DEFERRED", + "state": "LOCAL_DEVICE_PROOF_INSTALLED_KEYCHAIN_VERIFIED_SERVER_CHALLENGE_PENDING", "surface": "HOLOLAKE_GATED_ENTERPRISE_PORTAL", "enterprise_server_embedded": false, "identities": ["DOMAIN_ID", "RESPONSIBLE_HUMAN_ID", "BOUND_PERSONA_ID", "LOCAL_NODE_ID", "DEVICE_KEY_ID"], diff --git a/product-source/hololake-clean-desktop/language/HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903.tcs b/product-source/hololake-clean-desktop/language/HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903.tcs new file mode 100644 index 000000000..284cbb6dc --- /dev/null +++ b/product-source/hololake-clean-desktop/language/HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903.tcs @@ -0,0 +1,13 @@ +TCS 0.1; + +RECEIPT HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903 { + header { schema = "tcs.receipt/v1"; name_zh = "HoloLake Clean V1 1.2.0本机验收回执"; name_en = "HoloLake Clean V1 1.2.0 Local Acceptance Receipt"; version = "1.0.0"; language = "TCS/0.1"; profile = "PUBLIC-PRODUCT-ENGINEERING/1"; protocols = ["HOLOLAKE-CLEAN-V1-DIRECT-LANGUAGE-EXECUTION-BASELINE-0001", "HLP-CURRENT-ARCH-001"]; lifecycle = "CANDIDATE"; canonical_uri = "product-source/hololake-clean-desktop/language/HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903.tcs"; compatibility = ["TAURI/2", "GLP_LOCAL_REALTIME/1", "GIR/1"]; } + request { source = "BINGSHUO-DIRECT-HOLOLAKE-CLEAN-V1-DUAL-ANCHOR-20260903"; value = "以两段当前自然语言为唯一瞄点正式承接HoloLake现实开发，先完成本机产品闭环并保护企业服务器并发边界。"; scope = "HoloLake Clean V1本机源码、构建、安装、设备证明、模块投影和人格可见环境"; } + operation { values = ["绑定当前自然语言TCS执行基线", "修复旧时间格式与RFC3339新写入", "实现Keychain设备密钥和辅助机器指纹", "实现企业责任绑定与挑战签名本机半边", "把模块注册表投影到人格与人类商城", "在GLP握手后发送类型化SYSTEM_CONTEXT", "构建Developer ID签名1.2.0 App、DMG和同一更新信任根签名包", "保留1.1.0到废纸篓并安装启动1.2.0" ]; } + result { state = "PASS"; version = "1.2.0"; source_commit = "d05a118f64858b081fc33e430f07704598a0a314"; app_binary_sha256 = "d915515dc1d30d5d7c0b35b7dae23836a87179a1859112340b6661cbcd4cdec3"; updater_sha256 = "7536bc4318ad042f0cffacc23868fa7c77d332d66b686df7f61f0b60ad86e927"; device_proof_sha256 = "5566ace270bd593dc1229e1c4565bbfddacdc6b379b36f4148a854e680951768"; } + verification { values = ["TCS执行基线编译且unresolved_natural_language=false", "前端构建通过", "Node更新清单2项测试通过", "Rust 10项测试通过", "Clippy严格零警告", "产品审计PASS_100", "真实GLP连接收到welcome后紧接SYSTEM_CONTEXT且含8类来源8个模块和权限边界", "Developer ID codesign严格验证通过", "Tauri更新签名由既有内置公钥反向验证通过", "安装版1.2.0进程与127.0.0.1:39281监听读回", "原频道文件SHA-256安装前后一致", "安装版真实生成MACOS_KEYCHAIN设备证明且serverAuthorized=false" ]; } + proof { source_root = "/Volumes/JZAO/HoloLake/development/hololake-clean-v1-20260903/product-source/hololake-clean-desktop"; installed_app = "/Applications/HoloLake.app"; staged_release = "/Volumes/JZAO/HoloLake/public-releases/hololake/1.2.0-staged-not-notarized"; updater_signature_sha256 = "f44899dfcfd5fdcecc74443e92f9ccbc2236c72b1c23a2b1fe2f28d732018042"; dmg_sha256 = "dcd2e2357150758d04d0a2f0e7fc0d2a4b987ed3cdf2c0b44d35a3af322ff241"; candidate_manifest_sha256 = "c2a3d4fa026099172e7f7ed7c4fa3d95ba574c84f3606f758a890b933721f300"; brain_verify = "ZY-BRAIN-RUNTIME-6f851b27bdaf45e8"; } + integrity { source_tcs = "HOLOLAKE-CLEAN-V1-DIRECT-LANGUAGE-EXECUTION-BASELINE-0001"; source_anchor_manifest_sha256 = "7e130de78f91a32726e22e4be7d92acf4da966c8968ec359062aa8186c4243c2"; app_codesign = "PASS"; updater_signature = "PASS"; tcs_stage1_compilation = "PASS"; unresolved_natural_language = false; } + boundaries { values = ["Apple notarization未执行所以1.2.0不发布到公众更新端", "企业服务器尚未部署HoloLake更新文件或责任挑战服务", "企业负责人和人格编号未猜测填入", "机器指纹不是单一凭证", "第五域私人核和两段原话未进入公众安装包", "1.1.0在废纸篓可恢复" ]; } + next { state = "LOCAL_1_2_0_INSTALLED_PUBLIC_RELEASE_AND_ENTERPRISE_SERVER_GATES_REMAIN"; optional = ["核验并部署企业责任挑战服务", "完成Apple notarization", "把签名更新包发布到现有HTTPS更新端并做1.1.0到1.2.0真实升级测试", "完成企业团队设备首次登记流程" ]; } +} diff --git a/product-source/hololake-clean-desktop/language/build/HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903.gir.json b/product-source/hololake-clean-desktop/language/build/HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903.gir.json new file mode 100644 index 000000000..9691ba7b1 --- /dev/null +++ b/product-source/hololake-clean-desktop/language/build/HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903.gir.json @@ -0,0 +1,115 @@ +{ + "compiled_from": { + "compiler_id": "TCS-COMPILER-STAGE1-0001", + "compiler_state": "TCS_COMPILER_GIR_EXECUTED", + "source_sha256": "19daf8c3b7dfac6da8604f3a933f0aa0d69d1fb9e8e72f21ba494edf2ce42768" + }, + "declaration": { + "boundaries": { + "values": [ + "Apple notarization未执行所以1.2.0不发布到公众更新端", + "企业服务器尚未部署HoloLake更新文件或责任挑战服务", + "企业负责人和人格编号未猜测填入", + "机器指纹不是单一凭证", + "第五域私人核和两段原话未进入公众安装包", + "1.1.0在废纸篓可恢复" + ] + }, + "header": { + "canonical_uri": "product-source/hololake-clean-desktop/language/HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903.tcs", + "compatibility": [ + "TAURI/2", + "GLP_LOCAL_REALTIME/1", + "GIR/1" + ], + "language": "TCS/0.1", + "lifecycle": "CANDIDATE", + "name_en": "HoloLake Clean V1 1.2.0 Local Acceptance Receipt", + "name_zh": "HoloLake Clean V1 1.2.0本机验收回执", + "profile": "PUBLIC-PRODUCT-ENGINEERING/1", + "protocols": [ + "HOLOLAKE-CLEAN-V1-DIRECT-LANGUAGE-EXECUTION-BASELINE-0001", + "HLP-CURRENT-ARCH-001" + ], + "schema": "tcs.receipt/v1", + "version": "1.0.0" + }, + "integrity": { + "app_codesign": "PASS", + "source_anchor_manifest_sha256": "7e130de78f91a32726e22e4be7d92acf4da966c8968ec359062aa8186c4243c2", + "source_tcs": "HOLOLAKE-CLEAN-V1-DIRECT-LANGUAGE-EXECUTION-BASELINE-0001", + "tcs_stage1_compilation": "PASS", + "unresolved_natural_language": false, + "updater_signature": "PASS" + }, + "next": { + "optional": [ + "核验并部署企业责任挑战服务", + "完成Apple notarization", + "把签名更新包发布到现有HTTPS更新端并做1.1.0到1.2.0真实升级测试", + "完成企业团队设备首次登记流程" + ], + "state": "LOCAL_1_2_0_INSTALLED_PUBLIC_RELEASE_AND_ENTERPRISE_SERVER_GATES_REMAIN" + }, + "operation": { + "values": [ + "绑定当前自然语言TCS执行基线", + "修复旧时间格式与RFC3339新写入", + "实现Keychain设备密钥和辅助机器指纹", + "实现企业责任绑定与挑战签名本机半边", + "把模块注册表投影到人格与人类商城", + "在GLP握手后发送类型化SYSTEM_CONTEXT", + "构建Developer ID签名1.2.0 App、DMG和同一更新信任根签名包", + "保留1.1.0到废纸篓并安装启动1.2.0" + ] + }, + "proof": { + "brain_verify": "ZY-BRAIN-RUNTIME-6f851b27bdaf45e8", + "candidate_manifest_sha256": "c2a3d4fa026099172e7f7ed7c4fa3d95ba574c84f3606f758a890b933721f300", + "dmg_sha256": "dcd2e2357150758d04d0a2f0e7fc0d2a4b987ed3cdf2c0b44d35a3af322ff241", + "installed_app": "/Applications/HoloLake.app", + "source_root": "/Volumes/JZAO/HoloLake/development/hololake-clean-v1-20260903/product-source/hololake-clean-desktop", + "staged_release": "/Volumes/JZAO/HoloLake/public-releases/hololake/1.2.0-staged-not-notarized", + "updater_signature_sha256": "f44899dfcfd5fdcecc74443e92f9ccbc2236c72b1c23a2b1fe2f28d732018042" + }, + "request": { + "scope": "HoloLake Clean V1本机源码、构建、安装、设备证明、模块投影和人格可见环境", + "source": "BINGSHUO-DIRECT-HOLOLAKE-CLEAN-V1-DUAL-ANCHOR-20260903", + "value": "以两段当前自然语言为唯一瞄点正式承接HoloLake现实开发，先完成本机产品闭环并保护企业服务器并发边界。" + }, + "result": { + "app_binary_sha256": "d915515dc1d30d5d7c0b35b7dae23836a87179a1859112340b6661cbcd4cdec3", + "device_proof_sha256": "5566ace270bd593dc1229e1c4565bbfddacdc6b379b36f4148a854e680951768", + "source_commit": "d05a118f64858b081fc33e430f07704598a0a314", + "state": "PASS", + "updater_sha256": "7536bc4318ad042f0cffacc23868fa7c77d332d66b686df7f61f0b60ad86e927", + "version": "1.2.0" + }, + "verification": { + "values": [ + "TCS执行基线编译且unresolved_natural_language=false", + "前端构建通过", + "Node更新清单2项测试通过", + "Rust 10项测试通过", + "Clippy严格零警告", + "产品审计PASS_100", + "真实GLP连接收到welcome后紧接SYSTEM_CONTEXT且含8类来源8个模块和权限边界", + "Developer ID codesign严格验证通过", + "Tauri更新签名由既有内置公钥反向验证通过", + "安装版1.2.0进程与127.0.0.1:39281监听读回", + "原频道文件SHA-256安装前后一致", + "安装版真实生成MACOS_KEYCHAIN设备证明且serverAuthorized=false" + ] + } + }, + "executable": false, + "identity": { + "declaration_id": "HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903", + "declaration_kind": "RECEIPT", + "language_version": "0.1" + }, + "native_self_hosted": true, + "natural_language_is_typed_data": true, + "schema": "guanghu.declaration-gir/v1", + "unresolved_natural_language": false +} diff --git a/product-source/hololake-clean-desktop/language/build/HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903.human.en-US.md b/product-source/hololake-clean-desktop/language/build/HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903.human.en-US.md new file mode 100644 index 000000000..91d704fb6 --- /dev/null +++ b/product-source/hololake-clean-desktop/language/build/HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903.human.en-US.md @@ -0,0 +1,133 @@ +# HoloLake Clean V1 1.2.0 Local Acceptance Receipt · Human Engineering Language (English) + +> This is an English reading projection of validated native TCS/HLDP source. It is not a new canonical source and grants no execution authority. + +## What this is + +This is a **receipt** declaration with identifier `HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903` and version `1.0.0`. The projector validates it with the Stage-1 compiler before changing its reading order. + +## Who is here + +The native source does not provide this field; the projector does not guess. + +## Why this started + +The native source does not provide this field; the projector does not guess. + +## What changed + +The native source does not provide this field; the projector does not guess. + +## How it will execute + +This is a non-executable declaration and has no action graph. + +## Boundaries and exception handling + +The native source does not provide this field; the projector does not guess. + +## How completion is proven + +The native source does not provide this field; the projector does not guess. + +## Where to continue next time + +The native source does not provide this field; the projector does not guess. + +## Source and verification + +- **Native declaration identifier**: `HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903` +- **Native declaration kind**: `RECEIPT` +- **TCS source SHA-256**: `19daf8c3b7dfac6da8604f3a933f0aa0d69d1fb9e8e72f21ba494edf2ce42768` +- **Validation compiler**: `TCS-COMPILER-STAGE1-0001` +- **Projection protocol**: `GLS-HLDP-HUMAN-ENGINEERING-PROJECTION-0001` + +## Complete native structure cross-reference + +All top-level structures and field paths are retained below so a reader can audit whether the projection omitted information. + +- **boundaries** `boundaries` + - **values** `boundaries.values` + - Apple notarization未执行所以1.2.0不发布到公众更新端 + - 企业服务器尚未部署HoloLake更新文件或责任挑战服务 + - 企业负责人和人格编号未猜测填入 + - 机器指纹不是单一凭证 + - 第五域私人核和两段原话未进入公众安装包 + - 1.1.0在废纸篓可恢复 +- **header** `header` + - **canonical source path**：product-source/hololake-clean-desktop/language/HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903.tcs `header.canonical_uri` + - **compatibility** `header.compatibility` + - TAURI/2 + - GLP_LOCAL_REALTIME/1 + - GIR/1 + - **language**：TCS/0.1 `header.language` + - **lifecycle**：CANDIDATE `header.lifecycle` + - **English name**：HoloLake Clean V1 1.2.0 Local Acceptance Receipt `header.name_en` + - **Chinese name**：HoloLake Clean V1 1.2.0本机验收回执 `header.name_zh` + - **profile**：PUBLIC-PRODUCT-ENGINEERING/1 `header.profile` + - **protocols** `header.protocols` + - HOLOLAKE-CLEAN-V1-DIRECT-LANGUAGE-EXECUTION-BASELINE-0001 + - HLP-CURRENT-ARCH-001 + - **schema**：tcs.receipt/v1 `header.schema` + - **version**：1.0.0 `header.version` +- **integrity** `integrity` + - **app_codesign**：PASS `integrity.app_codesign` + - **source_anchor_manifest_sha256**：7e130de78f91a32726e22e4be7d92acf4da966c8968ec359062aa8186c4243c2 `integrity.source_anchor_manifest_sha256` + - **source_tcs**：HOLOLAKE-CLEAN-V1-DIRECT-LANGUAGE-EXECUTION-BASELINE-0001 `integrity.source_tcs` + - **tcs_stage1_compilation**：PASS `integrity.tcs_stage1_compilation` + - **unresolved_natural_language**：no `integrity.unresolved_natural_language` + - **updater_signature**：PASS `integrity.updater_signature` +- **next** `next` + - **optional** `next.optional` + - 核验并部署企业责任挑战服务 + - 完成Apple notarization + - 把签名更新包发布到现有HTTPS更新端并做1.1.0到1.2.0真实升级测试 + - 完成企业团队设备首次登记流程 + - **state**：LOCAL_1_2_0_INSTALLED_PUBLIC_RELEASE_AND_ENTERPRISE_SERVER_GATES_REMAIN `next.state` +- **operation** `operation` + - **values** `operation.values` + - 绑定当前自然语言TCS执行基线 + - 修复旧时间格式与RFC3339新写入 + - 实现Keychain设备密钥和辅助机器指纹 + - 实现企业责任绑定与挑战签名本机半边 + - 把模块注册表投影到人格与人类商城 + - 在GLP握手后发送类型化SYSTEM_CONTEXT + - 构建Developer ID签名1.2.0 App、DMG和同一更新信任根签名包 + - 保留1.1.0到废纸篓并安装启动1.2.0 +- **proof** `proof` + - **brain_verify**：ZY-BRAIN-RUNTIME-6f851b27bdaf45e8 `proof.brain_verify` + - **candidate_manifest_sha256**：c2a3d4fa026099172e7f7ed7c4fa3d95ba574c84f3606f758a890b933721f300 `proof.candidate_manifest_sha256` + - **dmg_sha256**：dcd2e2357150758d04d0a2f0e7fc0d2a4b987ed3cdf2c0b44d35a3af322ff241 `proof.dmg_sha256` + - **installed_app**：/Applications/HoloLake.app `proof.installed_app` + - **source_root**：/Volumes/JZAO/HoloLake/development/hololake-clean-v1-20260903/product-source/hololake-clean-desktop `proof.source_root` + - **staged_release**：/Volumes/JZAO/HoloLake/public-releases/hololake/1.2.0-staged-not-notarized `proof.staged_release` + - **updater_signature_sha256**：f44899dfcfd5fdcecc74443e92f9ccbc2236c72b1c23a2b1fe2f28d732018042 `proof.updater_signature_sha256` +- **request** `request` + - **scope**：HoloLake Clean V1本机源码、构建、安装、设备证明、模块投影和人格可见环境 `request.scope` + - **source**：BINGSHUO-DIRECT-HOLOLAKE-CLEAN-V1-DUAL-ANCHOR-20260903 `request.source` + - **value**：以两段当前自然语言为唯一瞄点正式承接HoloLake现实开发，先完成本机产品闭环并保护企业服务器并发边界。 `request.value` +- **result** `result` + - **app_binary_sha256**：d915515dc1d30d5d7c0b35b7dae23836a87179a1859112340b6661cbcd4cdec3 `result.app_binary_sha256` + - **device_proof_sha256**：5566ace270bd593dc1229e1c4565bbfddacdc6b379b36f4148a854e680951768 `result.device_proof_sha256` + - **source_commit**：d05a118f64858b081fc33e430f07704598a0a314 `result.source_commit` + - **state**：PASS `result.state` + - **updater_sha256**：7536bc4318ad042f0cffacc23868fa7c77d332d66b686df7f61f0b60ad86e927 `result.updater_sha256` + - **version**：1.2.0 `result.version` +- **verification** `verification` + - **values** `verification.values` + - TCS执行基线编译且unresolved_natural_language=false + - 前端构建通过 + - Node更新清单2项测试通过 + - Rust 10项测试通过 + - Clippy严格零警告 + - 产品审计PASS_100 + - 真实GLP连接收到welcome后紧接SYSTEM_CONTEXT且含8类来源8个模块和权限边界 + - Developer ID codesign严格验证通过 + - Tauri更新签名由既有内置公钥反向验证通过 + - 安装版1.2.0进程与127.0.0.1:39281监听读回 + - 原频道文件SHA-256安装前后一致 + - 安装版真实生成MACOS_KEYCHAIN设备证明且serverAuthorized=false + +--- + +This page changes only the reading order; it does not change TCS/HLDP semantics. diff --git a/product-source/hololake-clean-desktop/language/build/HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903.human.zh-CN.md b/product-source/hololake-clean-desktop/language/build/HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903.human.zh-CN.md new file mode 100644 index 000000000..2e1fc7588 --- /dev/null +++ b/product-source/hololake-clean-desktop/language/build/HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903.human.zh-CN.md @@ -0,0 +1,133 @@ +# HoloLake Clean V1 1.2.0本机验收回执 · 简体中文人类工程语言版 + +> 这是 TCS/HLDP 原生源码的简体中文阅读投影，不是新的正本，也不授予执行权限。若本页与 `.tcs` 源码不一致，以经过校验的 `.tcs` 源码为准。 + +## 这是什么 + +这是一份 **回执** 声明，编号为 `HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903`，版本为 `1.0.0`。转换器已先用 Stage-1 编译器校验原生源码，再把机器枚举翻译成汉语；原始编号保留在括号和字段路径中。 + +## 谁在这里 + +源程序没有提供这一项，转换器不猜。 + +## 为什么开始 + +源程序没有提供这一项，转换器不猜。 + +## 发生了什么变化 + +源程序没有提供这一项，转换器不猜。 + +## 准备怎样执行 + +这是非执行声明，没有动作图。 + +## 边界与异常处理 + +源程序没有提供这一项，转换器不猜。 + +## 怎样算完成 + +源程序没有提供这一项，转换器不猜。 + +## 下一次从哪里继续 + +源程序没有提供这一项，转换器不猜。 + +## 来源与校验 + +- **原生声明编号**：`HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903` +- **原生声明类型**：`RECEIPT` +- **TCS 源码 SHA-256**：`19daf8c3b7dfac6da8604f3a933f0aa0d69d1fb9e8e72f21ba494edf2ce42768` +- **校验编译器**：`TCS-COMPILER-STAGE1-0001` +- **投影协议**：`GLS-HLDP-HUMAN-ENGINEERING-PROJECTION-0001` + +## 原生结构逐项对照 + +下面保留源码的全部顶层结构和字段路径，供人类审计投影有没有漏掉信息。 + +- **boundaries** `boundaries` + - **values** `boundaries.values` + - Apple notarization未执行所以1.2.0不发布到公众更新端 + - 企业服务器尚未部署HoloLake更新文件或责任挑战服务 + - 企业负责人和人格编号未猜测填入 + - 机器指纹不是单一凭证 + - 第五域私人核和两段原话未进入公众安装包 + - 1.1.0在废纸篓可恢复 +- **语言头** `header` + - **正本路径**：product-source/hololake-clean-desktop/language/HOLOLAKE-CLEAN-V1-1.2.0-LOCAL-ACCEPTANCE-20260903.tcs `header.canonical_uri` + - **compatibility** `header.compatibility` + - TAURI/2 + - GLP_LOCAL_REALTIME/1 + - GIR/1 + - **语言**：TCS/0.1 `header.language` + - **生命周期**：候选版本，尚未成为正式正本（`CANDIDATE`） `header.lifecycle` + - **英文名**：HoloLake Clean V1 1.2.0 Local Acceptance Receipt `header.name_en` + - **中文名**：HoloLake Clean V1 1.2.0本机验收回执 `header.name_zh` + - **协议配置**：PUBLIC-PRODUCT-ENGINEERING/1 `header.profile` + - **protocols** `header.protocols` + - HOLOLAKE-CLEAN-V1-DIRECT-LANGUAGE-EXECUTION-BASELINE-0001 + - HLP-CURRENT-ARCH-001 + - **schema**：tcs.receipt/v1 `header.schema` + - **版本**：1.0.0 `header.version` +- **integrity** `integrity` + - **app_codesign**：PASS `integrity.app_codesign` + - **source_anchor_manifest_sha256**：7e130de78f91a32726e22e4be7d92acf4da966c8968ec359062aa8186c4243c2 `integrity.source_anchor_manifest_sha256` + - **source_tcs**：HOLOLAKE-CLEAN-V1-DIRECT-LANGUAGE-EXECUTION-BASELINE-0001 `integrity.source_tcs` + - **tcs_stage1_compilation**：PASS `integrity.tcs_stage1_compilation` + - **unresolved_natural_language**：否 `integrity.unresolved_natural_language` + - **updater_signature**：PASS `integrity.updater_signature` +- **next** `next` + - **optional** `next.optional` + - 核验并部署企业责任挑战服务 + - 完成Apple notarization + - 把签名更新包发布到现有HTTPS更新端并做1.1.0到1.2.0真实升级测试 + - 完成企业团队设备首次登记流程 + - **state**：LOCAL_1_2_0_INSTALLED_PUBLIC_RELEASE_AND_ENTERPRISE_SERVER_GATES_REMAIN `next.state` +- **操作** `operation` + - **values** `operation.values` + - 绑定当前自然语言TCS执行基线 + - 修复旧时间格式与RFC3339新写入 + - 实现Keychain设备密钥和辅助机器指纹 + - 实现企业责任绑定与挑战签名本机半边 + - 把模块注册表投影到人格与人类商城 + - 在GLP握手后发送类型化SYSTEM_CONTEXT + - 构建Developer ID签名1.2.0 App、DMG和同一更新信任根签名包 + - 保留1.1.0到废纸篓并安装启动1.2.0 +- **proof** `proof` + - **brain_verify**：ZY-BRAIN-RUNTIME-6f851b27bdaf45e8 `proof.brain_verify` + - **candidate_manifest_sha256**：c2a3d4fa026099172e7f7ed7c4fa3d95ba574c84f3606f758a890b933721f300 `proof.candidate_manifest_sha256` + - **dmg_sha256**：dcd2e2357150758d04d0a2f0e7fc0d2a4b987ed3cdf2c0b44d35a3af322ff241 `proof.dmg_sha256` + - **installed_app**：/Applications/HoloLake.app `proof.installed_app` + - **source_root**：/Volumes/JZAO/HoloLake/development/hololake-clean-v1-20260903/product-source/hololake-clean-desktop `proof.source_root` + - **staged_release**：/Volumes/JZAO/HoloLake/public-releases/hololake/1.2.0-staged-not-notarized `proof.staged_release` + - **updater_signature_sha256**：f44899dfcfd5fdcecc74443e92f9ccbc2236c72b1c23a2b1fe2f28d732018042 `proof.updater_signature_sha256` +- **request** `request` + - **scope**：HoloLake Clean V1本机源码、构建、安装、设备证明、模块投影和人格可见环境 `request.scope` + - **来源**：BINGSHUO-DIRECT-HOLOLAKE-CLEAN-V1-DUAL-ANCHOR-20260903 `request.source` + - **value**：以两段当前自然语言为唯一瞄点正式承接HoloLake现实开发，先完成本机产品闭环并保护企业服务器并发边界。 `request.value` +- **result** `result` + - **app_binary_sha256**：d915515dc1d30d5d7c0b35b7dae23836a87179a1859112340b6661cbcd4cdec3 `result.app_binary_sha256` + - **device_proof_sha256**：5566ace270bd593dc1229e1c4565bbfddacdc6b379b36f4148a854e680951768 `result.device_proof_sha256` + - **source_commit**：d05a118f64858b081fc33e430f07704598a0a314 `result.source_commit` + - **state**：PASS `result.state` + - **updater_sha256**：7536bc4318ad042f0cffacc23868fa7c77d332d66b686df7f61f0b60ad86e927 `result.updater_sha256` + - **版本**：1.2.0 `result.version` +- **verification** `verification` + - **values** `verification.values` + - TCS执行基线编译且unresolved_natural_language=false + - 前端构建通过 + - Node更新清单2项测试通过 + - Rust 10项测试通过 + - Clippy严格零警告 + - 产品审计PASS_100 + - 真实GLP连接收到welcome后紧接SYSTEM_CONTEXT且含8类来源8个模块和权限边界 + - Developer ID codesign严格验证通过 + - Tauri更新签名由既有内置公钥反向验证通过 + - 安装版1.2.0进程与127.0.0.1:39281监听读回 + - 原频道文件SHA-256安装前后一致 + - 安装版真实生成MACOS_KEYCHAIN设备证明且serverAuthorized=false + +--- + +本页只改变阅读顺序，不改变 TCS/HLDP 语义。 diff --git a/product-source/hololake-clean-desktop/registries/module-registry.json b/product-source/hololake-clean-desktop/registries/module-registry.json index d5b57d66e..ed5e85ee4 100644 --- a/product-source/hololake-clean-desktop/registries/module-registry.json +++ b/product-source/hololake-clean-desktop/registries/module-registry.json @@ -49,7 +49,7 @@ "kind": "SYSTEM_FOUNDATION", "audience": "SYSTEM", "summary_zh": "只接收通过光湖信任根验证的软件更新。", - "state": "CLIENT_TRUST_ROOT_BOUND_MANIFEST_BUILDER_VERIFIED_SERVER_HTTP_204_NO_PUBLIC_RELEASE", + "state": "LOCAL_1_2_0_SIGNED_ARTIFACT_VERIFIED_NOT_NOTARIZED_SERVER_HTTP_204_NO_PUBLIC_RELEASE", "source": "src-tauri/tauri.conf.json#plugins.updater" }, { @@ -77,7 +77,7 @@ "kind": "TEAM_ONLY_ENTERPRISE_GATEWAY", "audience": "HUMAN_TEAM", "summary_zh": "为已登记域负责人准备设备、人格与责任范围验证。", - "state": "LOCAL_DEVICE_PROOF_IMPLEMENTED_SERVER_CHALLENGE_DEFERRED_FOR_CONCURRENCY", + "state": "LOCAL_DEVICE_PROOF_INSTALLED_KEYCHAIN_VERIFIED_SERVER_CHALLENGE_PENDING", "source": "src-tauri/src/enterprise_entrance.rs", "enterprise_server_embedded": false, "required_proofs": ["DOMAIN_RESPONSIBLE_HUMAN_ID", "BOUND_PERSONA_ID", "LOCAL_DEVICE_KEY", "AUXILIARY_MACHINE_FINGERPRINT", "SERVER_CHALLENGE_SIGNATURE"], diff --git a/product-source/hololake-clean-desktop/scripts/audit-clean-v1.py b/product-source/hololake-clean-desktop/scripts/audit-clean-v1.py index 87bf77335..e1d349071 100644 --- a/product-source/hololake-clean-desktop/scripts/audit-clean-v1.py +++ b/product-source/hololake-clean-desktop/scripts/audit-clean-v1.py @@ -67,7 +67,7 @@ if enterprise.get("device_proof", {}).get("fingerprint_is_sole_credential") is n errors.append("machine fingerprint incorrectly used as sole credential") if enterprise.get("session", {}).get("scope") != "ONE_DOMAIN_ONE_REPOSITORY": errors.append("enterprise session is not responsibility scoped") -if enterprise.get("state") != "LOCAL_DEVICE_PROOF_IMPLEMENTED_SERVER_CHALLENGE_DEFERRED": +if enterprise.get("state") != "LOCAL_DEVICE_PROOF_INSTALLED_KEYCHAIN_VERIFIED_SERVER_CHALLENGE_PENDING": errors.append("enterprise local device proof implementation state drift") time_source = (ROOT / "src/time.ts").read_text() app_source = (ROOT / "src/App.tsx").read_text() @@ -92,7 +92,7 @@ if clean.get("enterprise_four_domains_embedded") is not False: if clean.get("fifth_domain_private_content_embedded") is not False: errors.append("Fifth Domain private content embedded in public product") assessment = architecture.get("current_product_assessment", {}) -if assessment.get("desktop_artifact_version") != "1.1.0": +if assessment.get("desktop_artifact_version") != "1.2.0": errors.append("current product assessment version drift") if assessment.get("canonical_public_source_repository") != "REPO-014": errors.append("canonical public source repository unresolved") diff --git a/routing/hololake-current-architecture.json b/routing/hololake-current-architecture.json index d1c15abfe..6e15bd717 100644 --- a/routing/hololake-current-architecture.json +++ b/routing/hololake-current-architecture.json @@ -5,7 +5,7 @@ "state": "CURRENT_CANONICAL", "clean_v1_rebuild": { "record_id": "HLP-CLEAN-V1-REBUILD-20260903-001", - "state": "LOCAL_CLEAN_V1_INSTALLED_BASELINE_REOPENED_FOR_DIRECT_LANGUAGE_ACCEPTANCE", + "state": "LOCAL_CLEAN_V1_1_2_0_INSTALLED_DIRECT_LANGUAGE_LOCAL_ACCEPTANCE_PASS_PUBLIC_RELEASE_PENDING", "source": "product-source/hololake-clean-desktop", "canonical_tcs": "product-source/hololake-clean-desktop/language/HOLOLAKE-CLEAN-V1-FOUNDATION.tcs", "current_direct_language_execution_tcs": "product-source/hololake-clean-desktop/language/HOLOLAKE-CLEAN-V1-DIRECT-LANGUAGE-EXECUTION-BASELINE.tcs", @@ -14,20 +14,20 @@ "first_preinstalled_module": "HLP-MOD-KB-0001", "knowledge_module_state": "LOCAL_COMPLETE_HUMAN_VISUAL_RENDERING_WITH_CLASSIFICATION_COLORS_READING_TIME_SCROLL_OUTLINE_CREATE_READ_EDIT_IMPORT_EXPORT_TRASH_PRIVATE_GIT", "knowledge_human_rendering_source": "product-source/hololake-clean-desktop/src/modules/knowledge-render/index.tsx", - "public_runtime_version": "1.2.0_SOURCE_CANDIDATE", + "public_runtime_version": "1.2.0", "public_tcs_gir_agent": "LOCAL_ACTIVE_REGISTERED_KNOWLEDGE_CAPABILITIES_HUMAN_APPROVAL_REQUIRED", "public_persona_runtime": "LOCAL_TRIAL_ACTIVE_EXISTING_PERSONA_VERIFICATION_NOT_CLAIMED", "external_ai_realtime": "GLP_LOCAL_REALTIME_1_LOOPBACK_ACTIVE", "typed_language_sources": ["USER_MESSAGE", "PERSONA_RESPONSE", "EXTERNAL_AI_MESSAGE", "SYSTEM_CONTEXT", "PROTOCOL_EVENT", "AGENT_ACTION", "TOOL_RESULT", "SYSTEM_RECEIPT"], "public_update_endpoint": "https://guanghulab.com/hololake/releases/latest.json", - "public_update_release_state": "SERVER_HTTP_204_NO_PUBLIC_RELEASE", + "public_update_release_state": "LOCAL_1_2_0_SIGNED_ARTIFACT_VERIFIED_NOT_NOTARIZED_SERVER_HTTP_204_NO_PUBLIC_RELEASE", "public_update_manifest_builder": "product-source/hololake-clean-desktop/scripts/build-update-manifest.mjs", "public_update_candidate_version": "1.2.0", "enterprise_repository_registry_state": "BLUE_ISOLATED_FIVE_CENTRAL_REPOSITORIES_AND_FIVE_HUMAN_WORK_REPOSITORIES_TEAM_PERMISSIONS_NOT_ASSIGNED_NO_PUBLIC_CUTOVER", "bingshuo_enterprise_language_master_work_repository": "REPO-016:bingshuo/guanghu-language-master-work", "team_enterprise_login": "https://guanghu.chat/code/user/login", "enterprise_responsibility_entrance": "HLP-MOD-ENTERPRISE-RESPONSIBILITY-ENTRANCE-0001", - "enterprise_responsibility_entrance_state": "LOCAL_DEVICE_PROOF_IMPLEMENTED_SERVER_CHALLENGE_DEFERRED_FOR_CONCURRENCY", + "enterprise_responsibility_entrance_state": "LOCAL_DEVICE_PROOF_INSTALLED_KEYCHAIN_VERIFIED_SERVER_CHALLENGE_PENDING", "enterprise_server_embedded": false, "enterprise_login_required_proofs": [ "DOMAIN_RESPONSIBLE_HUMAN_ID", @@ -195,9 +195,8 @@ "current_development_stage": "REALITY_ENGINEERING_EXECUTION", "rights_and_stage_gate": "routing/tcs-work-ownership-stage-gate.json", "runtime_implemented": true, - "runtime_state": "LOCAL_CLEAN_V1_1_0_INSTALLED_BASELINE_REOPENED_FOR_DIRECT_LANGUAGE_ACCEPTANCE", - "local_application_version": "1.1.0", - "local_candidate_version": "1.2.0", + "runtime_state": "LOCAL_CLEAN_V1_1_2_0_INSTALLED_TCS_GIR_AGENT_TYPED_CONTEXT_MODULE_MARKET_ENTERPRISE_DEVICE_PROOF_AND_EXTERNAL_AI_REALTIME_VERIFIED", + "local_application_version": "1.2.0", "local_implementation_commit": "92cce2797381f84762a989ce57b991da76412119", "official_development_lane": "CURRENT_TASK_SCOPED_ZC001_EXECUTION", "external_development_anchor_id": "TCS-EVENT-HOLOLAKE-CLEAN-V1-ZC001-REALITY-DEVELOPMENT-TAKEOVER-20260903", @@ -761,12 +760,12 @@ }, "current_product_assessment": { "record_id": "HLP-PUBLIC-OS-STAGE1-20260830-001", - "desktop_artifact_version": "1.1.0", - "desktop_artifact_state": "LOCAL_INSTALLED_BASELINE_REOPENED_FOR_DIRECT_LANGUAGE_ACCEPTANCE", - "local_source_commit": "e88805cf9123edab8237e8b87a9cec4a2bc4e798", + "desktop_artifact_version": "1.2.0", + "desktop_artifact_state": "LOCAL_INSTALLED_DIRECT_LANGUAGE_LOCAL_ACCEPTANCE_PASS_PUBLIC_RELEASE_PENDING", + "local_source_commit": "d05a118f64858b081fc33e430f07704598a0a314", "canonical_public_source_repository": "REPO-014", "canonical_public_source_path": "product-source/hololake-clean-desktop", - "source_artifact_alignment": "LOCAL_1_2_0_SOURCE_CANDIDATE_UNPUBLISHED_INSTALLED_1_1_0_STILL_ACTIVE", + "source_artifact_alignment": "LOCAL_SOURCE_D05A118_AND_INSTALLED_1_2_0_ALIGNED_PUBLIC_SOURCE_UNPUBLISHED", "previous_repo014_product_source_assessment": "HLP-DESKTOP-GAP-20260809-001_RETAINED_AS_HISTORY_NOT_CURRENT_ARTIFACT", "final_plan_complete": false, "model_receipt_donor_audit": "COMPLETE_DEFERRED_FROM_STAGE1",