bingshuo/hololake-system-architecture
Watch
1
0
Fork
You've already forked hololake-system-architecture
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

feat: establish native desktop update trust root

Browse source
This commit is contained in:
冰朔 2026-08-12 10:29:00 +08:00
commit cff488bb03
29 changed files with 8485 additions and 60 deletions
Download patch file Download diff file Expand all files Collapse all files

6
routing/hololake-canonical-desktop-shell.json
View file

@ -2,12 +2,12 @@
"schema": "hololake.canonical-desktop-shell/v2",
"record_id": "HLP-CANONICAL-DESKTOP-SHELL-001",
"version": "2026-08-12.2",
"state": "CURRENT_CANONICAL_FOUNDATION_ROOT_CREATED_TAURI_SCAFFOLD_PENDING",
"state": "CURRENT_CANONICAL_MINIMAL_TAURI_SCAFFOLD_AND_FAIL_CLOSED_UPDATE_TRUST_ROOT_IMPLEMENTED",
"development_id": "DEV-20260811-010",
"decision": {
"canonical_shell": "TAURI_V2_RUST_REACT",
"canonical_source": "product-source/hololake-native-desktop",
"canonical_source_state": "FOUNDATION_ROOT_CREATED_TAURI_SCAFFOLD_PENDING",
"canonical_source_state": "MINIMAL_TAURI_SCAFFOLD_AND_FAIL_CLOSED_UPDATE_TRUST_ROOT_IMPLEMENTED",
"existing_tauri_source": "product-source/hololake-platform",
"existing_tauri_role": "READ_ONLY_ENGINEERING_CAPABILITY_DONOR_AND_ACCEPTANCE_ORACLE",
"electron_role": "READ_ONLY_KNOWLEDGE_UX_BEHAVIOR_DONOR_AND_ACCEPTANCE_ORACLE",
@ -24,7 +24,7 @@
},
"update_route": {
"record_id": "HLP-SIGNED-OPT-IN-UPDATE-001",
"state": "ARCHITECTURE_ACCEPTED_IMPLEMENTATION_NOT_STARTED",
"state": "FAIL_CLOSED_LOCAL_TRUST_ROOT_IMPLEMENTED_PRODUCTION_IDENTITY_UNPROVISIONED",
"upstream_product_update_endpoints_allowed": false,
"hololake_owned_https_endpoint_only": true,
"release_broadcast_may_arrive_automatically": true,

16
routing/hololake-canonical-desktop-shell.test.mjs
View file

@ -21,7 +21,7 @@ test("HoloLake has one clean canonical desktop destination", () => {
assert.equal(shell.decision.canonical_source, "product-source/hololake-native-desktop");
assert.equal(
shell.decision.canonical_source_state,
"FOUNDATION_ROOT_CREATED_TAURI_SCAFFOLD_PENDING",
"MINIMAL_TAURI_SCAFFOLD_AND_FAIL_CLOSED_UPDATE_TRUST_ROOT_IMPLEMENTED",
);
assert.equal(
shell.decision.existing_tauri_role,
@ -85,14 +85,22 @@ test("HoloLake owns an opt-in signed update route", () => {
assert.deepEqual(foundation.upstream_product_update_endpoints, []);
assert.equal(foundation.production_update_endpoint_owner, "HOLOLAKE_ONLY");
assert.equal(foundation.private_signing_material_allowed_in_source, false);
assert.equal(broadcastSchema.properties.restart.properties.required.const, true);
assert.equal(broadcastSchema.properties.restart.properties.automaticAllowed.const, false);
assert.equal(
broadcastSchema.properties.hololake.properties.restart.properties.required.const,
true,
);
assert.equal(
broadcastSchema.properties.hololake.properties.restart.properties.automaticAllowed.const,
false,
);
assert.match(
broadcastSchema.properties.platforms.additionalProperties.properties.url.pattern,
/^\^https:/,
);
assert.equal(
broadcastSchema.properties.platforms.additionalProperties.required.includes("tauriSignature"),
broadcastSchema.properties.platforms.additionalProperties.required.includes("signature"),
true,
);
assert.equal(broadcastSchema.required.includes("pub_date"), true);
assert.equal(broadcastSchema.required.includes("publishedAt"), false);
});

2
routing/hololake-current-architecture.json
View file

@ -141,7 +141,7 @@
"adr": "product-source/hololake-platform/docs/adr/0178-tauri-canonical-shell-and-electron-capability-donor.md",
"canonical_shell": "TAURI_V2_RUST_REACT",
"canonical_source": "product-source/hololake-native-desktop",
"canonical_source_state": "FOUNDATION_ROOT_CREATED_TAURI_SCAFFOLD_PENDING",
"canonical_source_state": "MINIMAL_TAURI_SCAFFOLD_AND_FAIL_CLOSED_UPDATE_TRUST_ROOT_IMPLEMENTED",
"existing_tauri_role": "READ_ONLY_ENGINEERING_CAPABILITY_DONOR_AND_ACCEPTANCE_ORACLE",
"electron_role": "READ_ONLY_KNOWLEDGE_UX_BEHAVIOR_DONOR_AND_ACCEPTANCE_ORACLE",
"parallel_product_lines_allowed": false,