feat: define signed persona authorization trust contract
This commit is contained in:
parent
a118300791
commit
c4504fa115
13 changed files with 470 additions and 14 deletions
|
|
@ -0,0 +1,121 @@
|
|||
import assert from 'node:assert/strict';
|
||||
import { generateKeyPairSync, sign } from 'node:crypto';
|
||||
import test from 'node:test';
|
||||
import {
|
||||
PERSONA_CONTROL_AUTHORIZATION_SCHEMA,
|
||||
personaControlAuthorizationSigningBytes,
|
||||
parsePersonaControlAuthorizationSignerRegistry,
|
||||
verifyPersonaControlAuthorization,
|
||||
} from './persona-control-authorization.js';
|
||||
|
||||
const COMMIT = 'd'.repeat(40);
|
||||
const source = {
|
||||
repositoryId: 'REPO-012',
|
||||
sourceCommit: COMMIT,
|
||||
sourcePath: 'routing/persona-control-authorization-signers.json',
|
||||
sourceUrl: `https://guanghulab.com/code/bingshuo/guanghu-ice-heart/raw/commit/${COMMIT}/routing/persona-control-authorization-signers.json`,
|
||||
} as const;
|
||||
const keys = generateKeyPairSync('ed25519');
|
||||
const publicKeyPem = keys.publicKey.export({ format: 'pem', type: 'spki' }).toString();
|
||||
|
||||
function registry(status: 'ACTIVE' | 'REVOKED' = 'ACTIVE') {
|
||||
return {
|
||||
registryId: 'GH-AIOS-PERSONA-CONTROL-AUTHORIZATION-SIGNERS-001',
|
||||
schema: 'gh-aios.persona-control-authorization-signers/v1',
|
||||
signers: [{
|
||||
algorithm: 'Ed25519',
|
||||
humanResponsibilitySubjects: ['BINGSHUO'],
|
||||
personaIds: ['ICE-P-ZY001'],
|
||||
publicKeyPem,
|
||||
scopes: ['PERSONA_PRIMARY_LANGUAGE_PLANNING'],
|
||||
signerId: 'GH-AIOS-AUTHORIZER-001',
|
||||
status,
|
||||
}],
|
||||
state: 'CURRENT',
|
||||
};
|
||||
}
|
||||
|
||||
const unsigned = {
|
||||
schema: PERSONA_CONTROL_AUTHORIZATION_SCHEMA,
|
||||
outcome: 'VERIFIED' as const,
|
||||
authorizationId: 'AUTH-001',
|
||||
verifier: 'GUANGHU_OS' as const,
|
||||
scope: 'PERSONA_PRIMARY_LANGUAGE_PLANNING' as const,
|
||||
personaId: 'ICE-P-ZY001',
|
||||
humanResponsibilitySubject: 'BINGSHUO',
|
||||
repositoryHead: 'a'.repeat(40),
|
||||
modelInstanceId: 'MODEL-INSTANCE-001',
|
||||
requestId: 'REQ-001',
|
||||
sourceLanguageAnchor: 'HLP-CURRENT-ARCH-001@2026-08-12.12',
|
||||
issuedAt: '2026-08-12T05:00:00+08:00',
|
||||
validUntil: '2026-08-12T05:10:00+08:00',
|
||||
evidenceDigest: 'b'.repeat(64),
|
||||
signerId: 'GH-AIOS-AUTHORIZER-001',
|
||||
signatureAlgorithm: 'Ed25519' as const,
|
||||
};
|
||||
|
||||
function receipt(overrides: Record<string, unknown> = {}) {
|
||||
const candidate = { ...unsigned, ...overrides };
|
||||
return {
|
||||
...candidate,
|
||||
signature: sign(null, personaControlAuthorizationSigningBytes(candidate), keys.privateKey).toString('base64url'),
|
||||
};
|
||||
}
|
||||
|
||||
const expected = {
|
||||
personaId: unsigned.personaId,
|
||||
humanResponsibilitySubject: unsigned.humanResponsibilitySubject,
|
||||
repositoryHead: unsigned.repositoryHead,
|
||||
modelInstanceId: unsigned.modelInstanceId,
|
||||
requestId: unsigned.requestId,
|
||||
sourceLanguageAnchor: unsigned.sourceLanguageAnchor,
|
||||
observedAt: Date.parse('2026-08-12T05:05:00+08:00'),
|
||||
};
|
||||
|
||||
test('an empty published registry trusts no signer', () => {
|
||||
const parsed = parsePersonaControlAuthorizationSignerRegistry({ ...registry(), signers: [] }, source);
|
||||
assert.equal(verifyPersonaControlAuthorization(receipt(), parsed, expected), null);
|
||||
});
|
||||
|
||||
test('an exact current Ed25519 receipt verifies against its scoped registered signer', () => {
|
||||
const parsed = parsePersonaControlAuthorizationSignerRegistry(registry(), source);
|
||||
const verified = verifyPersonaControlAuthorization(receipt(), parsed, expected);
|
||||
assert.equal(verified?.signerId, unsigned.signerId);
|
||||
assert.equal(verified?.sourceCommit, COMMIT);
|
||||
});
|
||||
|
||||
test('tampering any signed request binding fails closed', () => {
|
||||
const parsed = parsePersonaControlAuthorizationSignerRegistry(registry(), source);
|
||||
const signed = receipt();
|
||||
assert.equal(verifyPersonaControlAuthorization({ ...signed, requestId: 'REQ-OTHER' }, parsed, { ...expected, requestId: 'REQ-OTHER' }), null);
|
||||
});
|
||||
|
||||
test('revoked, wrong-scope and wrong-subject signers never authorize', () => {
|
||||
const revoked = parsePersonaControlAuthorizationSignerRegistry(registry('REVOKED'), source);
|
||||
assert.equal(verifyPersonaControlAuthorization(receipt(), revoked, expected), null);
|
||||
const wrongSubjectInput = registry();
|
||||
wrongSubjectInput.signers[0].humanResponsibilitySubjects = ['OTHER'];
|
||||
const wrongSubject = parsePersonaControlAuthorizationSignerRegistry(wrongSubjectInput, source);
|
||||
assert.equal(verifyPersonaControlAuthorization(receipt(), wrongSubject, expected), null);
|
||||
});
|
||||
|
||||
test('stale, future and mismatched request evidence fail closed', () => {
|
||||
const parsed = parsePersonaControlAuthorizationSignerRegistry(registry(), source);
|
||||
assert.equal(verifyPersonaControlAuthorization(receipt(), parsed, { ...expected, observedAt: Date.parse('2026-08-12T05:10:01+08:00') }), null);
|
||||
assert.equal(verifyPersonaControlAuthorization(receipt(), parsed, { ...expected, observedAt: Date.parse('2026-08-12T04:59:59+08:00') }), null);
|
||||
assert.equal(verifyPersonaControlAuthorization(receipt(), parsed, { ...expected, repositoryHead: 'c'.repeat(40) }), null);
|
||||
});
|
||||
|
||||
test('registry provenance is pinned to the exact REPO-012 commit path', () => {
|
||||
assert.throws(() => parsePersonaControlAuthorizationSignerRegistry(registry(), { ...source, sourceCommit: 'short' }), /source_invalid/);
|
||||
assert.throws(() => parsePersonaControlAuthorizationSignerRegistry(registry(), { ...source, sourceUrl: 'https://example.com/registry.json' }), /source_invalid/);
|
||||
});
|
||||
|
||||
test('duplicate signers, private keys and unknown fields fail closed', () => {
|
||||
assert.throws(() => parsePersonaControlAuthorizationSignerRegistry({ ...registry(), signers: [...registry().signers, ...registry().signers] }, source), /registry_invalid/);
|
||||
const privateKeyPem = keys.privateKey.export({ format: 'pem', type: 'pkcs8' }).toString();
|
||||
const privateRegistry = registry();
|
||||
privateRegistry.signers[0].publicKeyPem = privateKeyPem;
|
||||
assert.throws(() => parsePersonaControlAuthorizationSignerRegistry(privateRegistry, source), /registry_invalid/);
|
||||
assert.throws(() => parsePersonaControlAuthorizationSignerRegistry({ ...registry(), extra: true }, source), /registry_invalid/);
|
||||
});
|
||||
|
|
@ -0,0 +1,294 @@
|
|||
import { createPublicKey, verify as verifySignature } from 'node:crypto';
|
||||
|
||||
export const PERSONA_CONTROL_AUTHORIZATION_SCHEMA = 'hololake.persona-control-authorization/v2' as const;
|
||||
export const PERSONA_CONTROL_AUTHORIZATION_SIGNER_REGISTRY_SCHEMA = 'gh-aios.persona-control-authorization-signers/v1' as const;
|
||||
export const PERSONA_PRIMARY_LANGUAGE_PLANNING_SCOPE = 'PERSONA_PRIMARY_LANGUAGE_PLANNING' as const;
|
||||
|
||||
const SIGNING_CONTEXT = 'hololake.persona-control-authorization/signing/v1';
|
||||
const REGISTRY_PATH = 'routing/persona-control-authorization-signers.json';
|
||||
const COMMIT_PATTERN = /^[a-f0-9]{40}(?:[a-f0-9]{24})?$/;
|
||||
const DIGEST_PATTERN = /^[a-f0-9]{64}$/;
|
||||
const IDENTIFIER_PATTERN = /^[A-Z0-9][A-Z0-9._:@-]{1,159}$/;
|
||||
const SIGNATURE_PATTERN = /^[A-Za-z0-9_-]{80,128}$/;
|
||||
|
||||
export interface PersonaControlAuthorizationReceipt {
|
||||
schema: typeof PERSONA_CONTROL_AUTHORIZATION_SCHEMA;
|
||||
outcome: 'VERIFIED';
|
||||
authorizationId: string;
|
||||
verifier: 'GUANGHU_OS';
|
||||
scope: typeof PERSONA_PRIMARY_LANGUAGE_PLANNING_SCOPE;
|
||||
personaId: string;
|
||||
humanResponsibilitySubject: string;
|
||||
repositoryHead: string;
|
||||
modelInstanceId: string;
|
||||
requestId: string;
|
||||
sourceLanguageAnchor: string;
|
||||
issuedAt: string;
|
||||
validUntil: string;
|
||||
evidenceDigest: string;
|
||||
signerId: string;
|
||||
signatureAlgorithm: 'Ed25519';
|
||||
signature: string;
|
||||
}
|
||||
|
||||
export interface PersonaControlAuthorizationSigner {
|
||||
algorithm: 'Ed25519';
|
||||
humanResponsibilitySubjects: readonly string[];
|
||||
personaIds: readonly string[];
|
||||
publicKeyPem: string;
|
||||
scopes: readonly [typeof PERSONA_PRIMARY_LANGUAGE_PLANNING_SCOPE, ...string[]];
|
||||
signerId: string;
|
||||
status: 'ACTIVE' | 'REVOKED';
|
||||
}
|
||||
|
||||
export interface PersonaControlAuthorizationSignerRegistrySource {
|
||||
repositoryId: 'REPO-012';
|
||||
sourceCommit: string;
|
||||
sourcePath: typeof REGISTRY_PATH;
|
||||
sourceUrl: string;
|
||||
}
|
||||
|
||||
export interface PersonaControlAuthorizationSignerRegistry {
|
||||
registryId: 'GH-AIOS-PERSONA-CONTROL-AUTHORIZATION-SIGNERS-001';
|
||||
schema: typeof PERSONA_CONTROL_AUTHORIZATION_SIGNER_REGISTRY_SCHEMA;
|
||||
signers: readonly PersonaControlAuthorizationSigner[];
|
||||
source: Readonly<PersonaControlAuthorizationSignerRegistrySource>;
|
||||
state: 'CURRENT';
|
||||
}
|
||||
|
||||
export interface PersonaControlAuthorizationExpectation {
|
||||
personaId: string;
|
||||
humanResponsibilitySubject: string;
|
||||
repositoryHead: string;
|
||||
modelInstanceId: string;
|
||||
requestId: string;
|
||||
sourceLanguageAnchor: string;
|
||||
observedAt: number;
|
||||
}
|
||||
|
||||
export interface VerifiedPersonaControlAuthorization {
|
||||
receipt: Readonly<PersonaControlAuthorizationReceipt>;
|
||||
signerId: string;
|
||||
sourceCommit: string;
|
||||
verifiedAt: string;
|
||||
}
|
||||
|
||||
function invalidRegistry(): never {
|
||||
throw new Error('persona_control_authorization_signer_registry_invalid');
|
||||
}
|
||||
|
||||
function invalidSource(): never {
|
||||
throw new Error('persona_control_authorization_signer_registry_source_invalid');
|
||||
}
|
||||
|
||||
function invalidReceipt(): never {
|
||||
throw new Error('persona_control_authorization_receipt_invalid');
|
||||
}
|
||||
|
||||
function isRecord(value: unknown): value is Record<string, unknown> {
|
||||
return typeof value === 'object' && value !== null && !Array.isArray(value);
|
||||
}
|
||||
|
||||
function hasExactKeys(record: Record<string, unknown>, keys: string[]): boolean {
|
||||
const expected = [...keys].sort();
|
||||
const actual = Object.keys(record).sort();
|
||||
return actual.length === expected.length && actual.every((key, index) => key === expected[index]);
|
||||
}
|
||||
|
||||
function isIdentifier(value: unknown): value is string {
|
||||
return typeof value === 'string' && IDENTIFIER_PATTERN.test(value);
|
||||
}
|
||||
|
||||
function exactIdentifierList(value: unknown): readonly string[] {
|
||||
if (!Array.isArray(value)
|
||||
|| value.length === 0
|
||||
|| value.some(item => !isIdentifier(item))
|
||||
|| new Set(value).size !== value.length) invalidRegistry();
|
||||
return Object.freeze([...value] as string[]);
|
||||
}
|
||||
|
||||
function parsePublicKey(value: unknown): string {
|
||||
if (typeof value !== 'string'
|
||||
|| value.length > 4096
|
||||
|| value.includes('PRIVATE KEY')
|
||||
|| !value.startsWith('-----BEGIN PUBLIC KEY-----\n')
|
||||
|| !value.endsWith('-----END PUBLIC KEY-----\n')) invalidRegistry();
|
||||
try {
|
||||
const key = createPublicKey({ format: 'pem', key: value });
|
||||
if (key.asymmetricKeyType !== 'ed25519') invalidRegistry();
|
||||
} catch {
|
||||
invalidRegistry();
|
||||
}
|
||||
return value;
|
||||
}
|
||||
|
||||
function parseSource(source: PersonaControlAuthorizationSignerRegistrySource): Readonly<PersonaControlAuthorizationSignerRegistrySource> {
|
||||
if (!isRecord(source)
|
||||
|| !hasExactKeys(source, ['repositoryId', 'sourceCommit', 'sourcePath', 'sourceUrl'])
|
||||
|| source.repositoryId !== 'REPO-012'
|
||||
|| typeof source.sourceCommit !== 'string'
|
||||
|| !COMMIT_PATTERN.test(source.sourceCommit)
|
||||
|| source.sourcePath !== REGISTRY_PATH
|
||||
|| typeof source.sourceUrl !== 'string') invalidSource();
|
||||
const expectedUrl = `https://guanghulab.com/code/bingshuo/guanghu-ice-heart/raw/commit/${source.sourceCommit}/${REGISTRY_PATH}`;
|
||||
if (source.sourceUrl !== expectedUrl) invalidSource();
|
||||
return Object.freeze({ ...source });
|
||||
}
|
||||
|
||||
function parseSigner(input: unknown): PersonaControlAuthorizationSigner {
|
||||
if (!isRecord(input)
|
||||
|| !hasExactKeys(input, ['algorithm', 'humanResponsibilitySubjects', 'personaIds', 'publicKeyPem', 'scopes', 'signerId', 'status'])
|
||||
|| input.algorithm !== 'Ed25519'
|
||||
|| !isIdentifier(input.signerId)
|
||||
|| (input.status !== 'ACTIVE' && input.status !== 'REVOKED')) invalidRegistry();
|
||||
const scopes = exactIdentifierList(input.scopes);
|
||||
if (!scopes.includes(PERSONA_PRIMARY_LANGUAGE_PLANNING_SCOPE)) invalidRegistry();
|
||||
return Object.freeze({
|
||||
algorithm: 'Ed25519',
|
||||
humanResponsibilitySubjects: exactIdentifierList(input.humanResponsibilitySubjects),
|
||||
personaIds: exactIdentifierList(input.personaIds),
|
||||
publicKeyPem: parsePublicKey(input.publicKeyPem),
|
||||
scopes: scopes as PersonaControlAuthorizationSigner['scopes'],
|
||||
signerId: input.signerId,
|
||||
status: input.status,
|
||||
});
|
||||
}
|
||||
|
||||
export function parsePersonaControlAuthorizationSignerRegistry(
|
||||
input: unknown,
|
||||
source: PersonaControlAuthorizationSignerRegistrySource,
|
||||
): PersonaControlAuthorizationSignerRegistry {
|
||||
if (!isRecord(input)
|
||||
|| !hasExactKeys(input, ['registryId', 'schema', 'signers', 'state'])
|
||||
|| input.registryId !== 'GH-AIOS-PERSONA-CONTROL-AUTHORIZATION-SIGNERS-001'
|
||||
|| input.schema !== PERSONA_CONTROL_AUTHORIZATION_SIGNER_REGISTRY_SCHEMA
|
||||
|| input.state !== 'CURRENT'
|
||||
|| !Array.isArray(input.signers)) invalidRegistry();
|
||||
const signers = input.signers.map(parseSigner);
|
||||
if (new Set(signers.map(signer => signer.signerId)).size !== signers.length) invalidRegistry();
|
||||
return Object.freeze({
|
||||
registryId: input.registryId,
|
||||
schema: input.schema,
|
||||
signers: Object.freeze(signers),
|
||||
source: parseSource(source),
|
||||
state: input.state,
|
||||
});
|
||||
}
|
||||
|
||||
function requiredString(record: Record<string, unknown>, key: string): string {
|
||||
const value = Reflect.get(record, key);
|
||||
if (typeof value !== 'string' || !value.trim()) invalidReceipt();
|
||||
return value;
|
||||
}
|
||||
|
||||
export function parsePersonaControlAuthorizationReceipt(input: unknown): PersonaControlAuthorizationReceipt {
|
||||
const keys = [
|
||||
'authorizationId', 'evidenceDigest', 'humanResponsibilitySubject', 'issuedAt', 'modelInstanceId',
|
||||
'outcome', 'personaId', 'repositoryHead', 'requestId', 'schema', 'scope', 'signature',
|
||||
'signatureAlgorithm', 'signerId', 'sourceLanguageAnchor', 'validUntil', 'verifier',
|
||||
];
|
||||
if (!isRecord(input)
|
||||
|| !hasExactKeys(input, keys)
|
||||
|| input.schema !== PERSONA_CONTROL_AUTHORIZATION_SCHEMA
|
||||
|| input.outcome !== 'VERIFIED'
|
||||
|| input.verifier !== 'GUANGHU_OS'
|
||||
|| input.scope !== PERSONA_PRIMARY_LANGUAGE_PLANNING_SCOPE
|
||||
|| input.signatureAlgorithm !== 'Ed25519') invalidReceipt();
|
||||
const receipt = {
|
||||
schema: input.schema,
|
||||
outcome: input.outcome,
|
||||
authorizationId: requiredString(input, 'authorizationId'),
|
||||
verifier: input.verifier,
|
||||
scope: input.scope,
|
||||
personaId: requiredString(input, 'personaId'),
|
||||
humanResponsibilitySubject: requiredString(input, 'humanResponsibilitySubject'),
|
||||
repositoryHead: requiredString(input, 'repositoryHead'),
|
||||
modelInstanceId: requiredString(input, 'modelInstanceId'),
|
||||
requestId: requiredString(input, 'requestId'),
|
||||
sourceLanguageAnchor: requiredString(input, 'sourceLanguageAnchor'),
|
||||
issuedAt: requiredString(input, 'issuedAt'),
|
||||
validUntil: requiredString(input, 'validUntil'),
|
||||
evidenceDigest: requiredString(input, 'evidenceDigest'),
|
||||
signerId: requiredString(input, 'signerId'),
|
||||
signatureAlgorithm: input.signatureAlgorithm,
|
||||
signature: requiredString(input, 'signature'),
|
||||
} satisfies PersonaControlAuthorizationReceipt;
|
||||
if (!isIdentifier(receipt.authorizationId)
|
||||
|| !isIdentifier(receipt.personaId)
|
||||
|| !isIdentifier(receipt.humanResponsibilitySubject)
|
||||
|| !COMMIT_PATTERN.test(receipt.repositoryHead)
|
||||
|| !isIdentifier(receipt.modelInstanceId)
|
||||
|| !isIdentifier(receipt.requestId)
|
||||
|| !isIdentifier(receipt.signerId)
|
||||
|| !DIGEST_PATTERN.test(receipt.evidenceDigest)
|
||||
|| !SIGNATURE_PATTERN.test(receipt.signature)) invalidReceipt();
|
||||
return Object.freeze(receipt);
|
||||
}
|
||||
|
||||
export function personaControlAuthorizationSigningBytes(receipt: Omit<PersonaControlAuthorizationReceipt, 'signature'>): Buffer {
|
||||
return Buffer.from(`${JSON.stringify([
|
||||
SIGNING_CONTEXT,
|
||||
receipt.schema,
|
||||
receipt.outcome,
|
||||
receipt.authorizationId,
|
||||
receipt.verifier,
|
||||
receipt.scope,
|
||||
receipt.personaId,
|
||||
receipt.humanResponsibilitySubject,
|
||||
receipt.repositoryHead,
|
||||
receipt.modelInstanceId,
|
||||
receipt.requestId,
|
||||
receipt.sourceLanguageAnchor,
|
||||
receipt.issuedAt,
|
||||
receipt.validUntil,
|
||||
receipt.evidenceDigest,
|
||||
receipt.signerId,
|
||||
receipt.signatureAlgorithm,
|
||||
])}\n`, 'utf8');
|
||||
}
|
||||
|
||||
export function verifyPersonaControlAuthorization(
|
||||
input: unknown,
|
||||
registry: PersonaControlAuthorizationSignerRegistry,
|
||||
expected: PersonaControlAuthorizationExpectation,
|
||||
): VerifiedPersonaControlAuthorization | null {
|
||||
let receipt: PersonaControlAuthorizationReceipt;
|
||||
try {
|
||||
receipt = parsePersonaControlAuthorizationReceipt(input);
|
||||
} catch {
|
||||
return null;
|
||||
}
|
||||
const issuedAt = Date.parse(receipt.issuedAt);
|
||||
const validUntil = Date.parse(receipt.validUntil);
|
||||
if (receipt.personaId !== expected.personaId
|
||||
|| receipt.humanResponsibilitySubject !== expected.humanResponsibilitySubject
|
||||
|| receipt.repositoryHead !== expected.repositoryHead
|
||||
|| receipt.modelInstanceId !== expected.modelInstanceId
|
||||
|| receipt.requestId !== expected.requestId
|
||||
|| receipt.sourceLanguageAnchor !== expected.sourceLanguageAnchor
|
||||
|| !Number.isFinite(issuedAt)
|
||||
|| !Number.isFinite(validUntil)
|
||||
|| issuedAt > expected.observedAt
|
||||
|| expected.observedAt > validUntil
|
||||
|| issuedAt >= validUntil) return null;
|
||||
const signer = registry.signers.find(candidate => candidate.status === 'ACTIVE'
|
||||
&& candidate.signerId === receipt.signerId
|
||||
&& candidate.personaIds.includes(receipt.personaId)
|
||||
&& candidate.humanResponsibilitySubjects.includes(receipt.humanResponsibilitySubject)
|
||||
&& candidate.scopes.includes(receipt.scope));
|
||||
if (!signer) return null;
|
||||
const { signature, ...signedReceipt } = receipt;
|
||||
let signatureBytes: Buffer;
|
||||
try {
|
||||
signatureBytes = Buffer.from(signature, 'base64url');
|
||||
} catch {
|
||||
return null;
|
||||
}
|
||||
if (!verifySignature(null, personaControlAuthorizationSigningBytes(signedReceipt), signer.publicKeyPem, signatureBytes)) return null;
|
||||
return Object.freeze({
|
||||
receipt,
|
||||
signerId: signer.signerId,
|
||||
sourceCommit: registry.source.sourceCommit,
|
||||
verifiedAt: new Date(expected.observedAt).toISOString(),
|
||||
});
|
||||
}
|
||||
|
|
@ -118,8 +118,10 @@ REVISE | REFUSE`。
|
|||
确认按钮。该接线不等于真实人格仓库绑定、安装态运行或桌面验收。
|
||||
- 人格主控授权回执的结构与精确绑定校验源码为 `100`：不再接受桌面调用方直接传入布尔值，并核对
|
||||
人格、冰朔责任主体、仓库提交、模型实例、请求、语言锚点、摘要格式和有效期。但这层前端结构校验
|
||||
不能证明回执确由 `GUANGHU_OS` 签发；可信签名源、密码学来源验证和原生加载器均为 `0`。在三者形成
|
||||
同一条可回读证据链以前，普通本地 JSON 不得升级人格主控，桌面继续系统直控。
|
||||
不能证明回执确由 `GUANGHU_OS` 签发。独立的 v2 回执、REPO-012 精确提交签名者注册表、规范签名字节、
|
||||
人格/责任主体/范围约束、吊销和 Ed25519 验签源码契约现为 `100`；但 REPO-012 当前 main 未发布该注册表，
|
||||
因而真实可信签名者登记、Tauri 原生验签加载器与运行集成仍为 `0`。在同一条可回读证据链形成以前，
|
||||
普通本地 JSON 不得升级人格主控，桌面继续系统直控。
|
||||
- 完整 HoloLake Runtime 与单 AGE 纵向闭环仍为 `0`：真实人格仓库 manifest 绑定和桌面运行验收尚未完成，
|
||||
因此不能用本轮源码测试冒充可用产品。
|
||||
- Mirror runner、制品、部署和运行健康：`0`。
|
||||
|
|
|
|||
|
|
@ -26,7 +26,10 @@ The source coordinator no longer accepts an unverified persona-authorization boo
|
|||
of a receipt that claims `GUANGHU_OS` verification. That renderer-side validation is not cryptographic provenance
|
||||
and cannot turn a local JSON object into authority. A native loader may be connected only after it verifies a
|
||||
signed receipt against a registered Guanghu OS trust source and returns the already-verified projection. No such
|
||||
trust source or loader is currently registered, so planning remains in system-direct mode.
|
||||
trust source or loader is currently registered, so planning remains in system-direct mode. The independent server
|
||||
contract in `product-source/guanghu-knowledge-base/server/persona-control-authorization.ts` defines the v2 signed
|
||||
receipt, exact REPO-012 signer-registry source, canonical signing bytes, signer scope checks, revocation handling,
|
||||
and Ed25519 verification. Its tested code does not populate the registry or connect the desktop native boundary.
|
||||
|
||||
`compilePersonaLanguageGoalBinding` builds the exact native wake envelope only after a single clean persona
|
||||
repository, its B0 and organ contracts, a registered local device identity, and the manifest-pinned model all
|
||||
|
|
|
|||
|
|
@ -185,6 +185,12 @@ renderer validation does not prove the issuer or verify a signature. A native lo
|
|||
provenance against a registered Guanghu OS trust source; neither that trust source nor the loader exists in the
|
||||
current desktop source. Missing, stale, mismatched or merely local evidence therefore remains system-direct.
|
||||
|
||||
`product-source/guanghu-knowledge-base/server/persona-control-authorization.ts` now supplies the independent
|
||||
cryptographic source contract: v2 signed receipt fields, deterministic signing bytes, an exact-commit REPO-012
|
||||
signer-registry source, persona/human/scope-limited Ed25519 signers, revocation, time and request binding, and
|
||||
signature verification. The current REPO-012 main does not publish that registry path, so no signer is trusted and
|
||||
the Tauri desktop has no native verifier or loader. Tested verifier source is not runtime authority.
|
||||
|
||||
Tolaria is a personal knowledge and life management desktop app. It reads a vault of markdown files with YAML frontmatter and presents them in a four-panel UI inspired by Bear Notes.
|
||||
|
||||
## Design Principles
|
||||
|
|
|
|||
|
|
@ -56,7 +56,7 @@ describe('PersonaLanguageShellPanel', () => {
|
|||
repositoryPaths: ['/persona'],
|
||||
providers: [provider],
|
||||
developmentId: 'DEV-20260811-010',
|
||||
sourceLanguageAnchor: 'HLP-CURRENT-ARCH-001@2026-08-12.11',
|
||||
sourceLanguageAnchor: 'HLP-CURRENT-ARCH-001@2026-08-12.12',
|
||||
}))
|
||||
expect(await screen.findByText('我还不能执行：需要当前证据。')).toBeInTheDocument()
|
||||
expect(screen.getByText('核验当前事实后规划下一步')).toBeInTheDocument()
|
||||
|
|
|
|||
|
|
@ -13,7 +13,7 @@ import {
|
|||
type LanguageShellViewState,
|
||||
} from './HotPluggableLanguageShell'
|
||||
|
||||
const CURRENT_ARCHITECTURE_ANCHOR = 'HLP-CURRENT-ARCH-001@2026-08-12.11'
|
||||
const CURRENT_ARCHITECTURE_ANCHOR = 'HLP-CURRENT-ARCH-001@2026-08-12.12'
|
||||
const DEVELOPMENT_ID = 'DEV-20260811-010'
|
||||
|
||||
type Planner = typeof planPersonaLanguageShellGoal
|
||||
|
|
|
|||
|
|
@ -11,7 +11,7 @@ const expected = {
|
|||
repositoryHead: 'a'.repeat(40),
|
||||
modelInstanceId: 'MODEL-INSTANCE-001',
|
||||
requestId: 'REQ-001',
|
||||
sourceLanguageAnchor: 'HLP-CURRENT-ARCH-001@2026-08-12.11',
|
||||
sourceLanguageAnchor: 'HLP-CURRENT-ARCH-001@2026-08-12.12',
|
||||
observedAt: Date.parse('2026-08-12T04:35:00+08:00'),
|
||||
}
|
||||
|
||||
|
|
@ -30,6 +30,9 @@ const receipt = {
|
|||
issuedAt: '2026-08-12T04:30:00+08:00',
|
||||
validUntil: '2026-08-12T04:40:00+08:00',
|
||||
evidenceDigest: 'b'.repeat(64),
|
||||
signerId: 'GH-AIOS-AUTHORIZER-001',
|
||||
signatureAlgorithm: 'Ed25519',
|
||||
signature: 'A'.repeat(86),
|
||||
}
|
||||
|
||||
describe('hasPersonaPrimaryControlAuthorization', () => {
|
||||
|
|
@ -48,6 +51,8 @@ describe('hasPersonaPrimaryControlAuthorization', () => {
|
|||
['expired', { ...receipt, validUntil: '2026-08-12T04:34:59+08:00' }],
|
||||
['future', { ...receipt, issuedAt: '2026-08-12T04:35:01+08:00' }],
|
||||
['invalid digest', { ...receipt, evidenceDigest: 'not-a-digest' }],
|
||||
['missing signer', { ...receipt, signerId: '' }],
|
||||
['invalid signature', { ...receipt, signature: 'not-a-signature' }],
|
||||
])('fails closed for %s evidence', (_label, candidate) => {
|
||||
expect(hasPersonaPrimaryControlAuthorization(candidate, expected)).toBe(false)
|
||||
})
|
||||
|
|
|
|||
|
|
@ -1,4 +1,4 @@
|
|||
export const PERSONA_CONTROL_AUTHORIZATION_SCHEMA = 'hololake.persona-control-authorization/v1' as const
|
||||
export const PERSONA_CONTROL_AUTHORIZATION_SCHEMA = 'hololake.persona-control-authorization/v2' as const
|
||||
export const PERSONA_PRIMARY_LANGUAGE_PLANNING_SCOPE = 'PERSONA_PRIMARY_LANGUAGE_PLANNING' as const
|
||||
|
||||
export type PersonaControlAuthorizationReceipt = {
|
||||
|
|
@ -16,6 +16,9 @@ export type PersonaControlAuthorizationReceipt = {
|
|||
issuedAt: string
|
||||
validUntil: string
|
||||
evidenceDigest: string
|
||||
signerId: string
|
||||
signatureAlgorithm: 'Ed25519'
|
||||
signature: string
|
||||
}
|
||||
|
||||
export type PersonaControlAuthorizationExpectation = {
|
||||
|
|
@ -48,6 +51,7 @@ export function hasPersonaPrimaryControlAuthorization(
|
|||
if (!exactString(receipt, 'schema', PERSONA_CONTROL_AUTHORIZATION_SCHEMA)
|
||||
|| !exactString(receipt, 'outcome', 'VERIFIED')
|
||||
|| !exactString(receipt, 'verifier', 'GUANGHU_OS')
|
||||
|| !exactString(receipt, 'signatureAlgorithm', 'Ed25519')
|
||||
|| !exactString(receipt, 'scope', PERSONA_PRIMARY_LANGUAGE_PLANNING_SCOPE)
|
||||
|| !exactString(receipt, 'personaId', expected.personaId)
|
||||
|| !exactString(receipt, 'humanResponsibilitySubject', expected.humanResponsibilitySubject)
|
||||
|
|
@ -60,10 +64,14 @@ export function hasPersonaPrimaryControlAuthorization(
|
|||
|
||||
const authorizationId = Reflect.get(receipt, 'authorizationId')
|
||||
const evidenceDigest = Reflect.get(receipt, 'evidenceDigest')
|
||||
const signerId = Reflect.get(receipt, 'signerId')
|
||||
const signature = Reflect.get(receipt, 'signature')
|
||||
const issuedAt = Reflect.get(receipt, 'issuedAt')
|
||||
const validUntil = Reflect.get(receipt, 'validUntil')
|
||||
if (typeof authorizationId !== 'string' || !authorizationId.trim()
|
||||
|| typeof evidenceDigest !== 'string' || !/^[a-f0-9]{64}$/.test(evidenceDigest)
|
||||
|| typeof signerId !== 'string' || !/^[A-Z0-9][A-Z0-9._:@-]{1,159}$/.test(signerId)
|
||||
|| typeof signature !== 'string' || !/^[A-Za-z0-9_-]{80,128}$/.test(signature)
|
||||
|| typeof issuedAt !== 'string'
|
||||
|| typeof validUntil !== 'string') {
|
||||
return false
|
||||
|
|
|
|||
|
|
@ -181,7 +181,7 @@ describe('planPersonaLanguageShellGoal', () => {
|
|||
await planPersonaLanguageShellGoal({
|
||||
...input(),
|
||||
loadPersonaControlAuthorization: vi.fn().mockResolvedValue({
|
||||
schema: 'hololake.persona-control-authorization/v1',
|
||||
schema: 'hololake.persona-control-authorization/v2',
|
||||
outcome: 'VERIFIED',
|
||||
authorizationId: 'AUTH-001',
|
||||
verifier: 'GUANGHU_OS',
|
||||
|
|
@ -195,6 +195,9 @@ describe('planPersonaLanguageShellGoal', () => {
|
|||
issuedAt: '2026-08-12T04:30:00+08:00',
|
||||
validUntil: '2026-08-12T04:40:00+08:00',
|
||||
evidenceDigest: 'c'.repeat(64),
|
||||
signerId: 'GH-AIOS-AUTHORIZER-001',
|
||||
signatureAlgorithm: 'Ed25519',
|
||||
signature: 'A'.repeat(86),
|
||||
}),
|
||||
authorizationObservedAt: Date.parse('2026-08-12T04:35:00+08:00'),
|
||||
resolveRepository: vi.fn().mockResolvedValue(boundResolution()),
|
||||
|
|
|
|||
Loading…
Reference in a new issue