docs(hololake): record blocked JD release route

product-source/hololake-native-desktop/deployment/receipts/GH-HOLOLAKE-JD-RELEASE-ROUTE-GATE-20260813-001.json

@@ -0,0 +1,40 @@
+{
+  "schema": "hololake.jd-release-route-gate-receipt/v1",
+  "receiptId": "GH-HOLOLAKE-JD-RELEASE-ROUTE-GATE-20260813-001",
+  "observedAt": "2026-08-13T15:10:55+08:00",
+  "state": "BLOCKED_BEFORE_SERVER_CONNECTION",
+  "requestedCapability": "HOST_HOLOLAKE_SIGNED_RELEASE_BROADCAST_ON_JD_CONTROLLER",
+  "target": {
+    "nodeId": "JD-FD-PRIMARY",
+    "targetResolvedExactly": true,
+    "route": "INTENT-JD-SERVER-OPERATION-001",
+    "transport": "LOCAL_DEDICATED_KEY_SSH",
+    "authority": "CURRENT_USER_TASK_SCOPE_ONLY_NOT_BLANKET_SERVER_AUTHORITY"
+  },
+  "localPrivateRegistryReadback": {
+    "exactRouteCount": 1,
+    "dedicatedIdentityReadable": true,
+    "strictHostKeyCheckingRequired": true,
+    "expectedDmiInstanceUuidRegistered": true,
+    "hostKeyFingerprintRegistered": false,
+    "directAccessReceiptRegistered": false
+  },
+  "stopCondition": "STRICT_HOST_KEY_VERIFICATION_CANNOT_BE_PROVEN_FROM_CURRENT_REGISTRY",
+  "actions": {
+    "sshSessionEstablished": false,
+    "serverMutationAttempted": false,
+    "releaseEndpointProvisioned": false,
+    "updaterPublicKeyProvisioned": false,
+    "releaseUploadAttempted": false,
+    "productionCutoverAttempted": false,
+    "workorderEmailCreated": false
+  },
+  "requiredBeforeRetry": [
+    "REGISTER_CURRENT_JD_HOST_KEY_FINGERPRINT",
+    "REGISTER_OR_REFRESH_DIRECT_ACCESS_RECEIPT",
+    "VERIFY_DMI_INSTANCE_UUID_AFTER_STRICT_LOGIN",
+    "READ_BACK_CURRENT_SERVER_RUNTIME_AND_RELEASE_SERVICE_STATE",
+    "BIND_ANY_WRITE_TO_IMMUTABLE_SOURCE_ROLLBACK_AND_SERVER_OWNED_RECEIPT"
+  ],
+  "truthBoundary": "A local signed-notarized release pipeline is implemented, but no JD release service, endpoint, public key, upload, activation or server health is claimed."
+}