bingshuo/hololake-system-architecture
Watch
1
0
Fork
You've already forked hololake-system-architecture
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

fix: enforce one human one independent node

Browse source
This commit is contained in:
冰朔 2026-08-10 21:07:30 +08:00
commit cec261174d
32 changed files with 474 additions and 75 deletions
Download patch file Download diff file Expand all files Collapse all files

13
product-source/hololake-platform/docs/ARCHITECTURE.md
View file

@ -1,5 +1,18 @@
# Architecture
## User-node sovereignty
HoloLake has no platform-hosted user runtime. Each human has one canonical, independently operated node:
either a `LOCAL_TERMINAL_NODE` on their own computer or a `USER_OWNED_REMOTE_NODE` on a server they own or
purchase. A user may explicitly authorize the Guanghu team to deploy to the user's own IDE server, but that
assistance never transfers ownership or data custody. Servers are optional; the local terminal is a complete
canonical node.
Guanghu provides zero runtime servers for users, has no pooled multi-tenant node, does not custody private
user data, and does not absorb user workload concurrency. If the user's node is offline, that user's runtime
is offline. Migration is a receipt-backed rebind of the single canonical root, not duplication. The machine
contract is `src/lib/domainRuntimeContract.ts`; see [ADR 0174](./adr/0174-one-human-one-independent-node-and-zero-platform-hosting.md).
## Hot-pluggable language-shell UI
The language shell accepts a complete declarative UI package through