diff --git a/product-source/hololake-native-desktop/deployment/receipts/GH-HOLOLAKE-JD-RELEASE-ROUTE-GATE-20260813-001.json b/product-source/hololake-native-desktop/deployment/receipts/GH-HOLOLAKE-JD-RELEASE-ROUTE-GATE-20260813-001.json new file mode 100644 index 0000000..5115b49 --- /dev/null +++ b/product-source/hololake-native-desktop/deployment/receipts/GH-HOLOLAKE-JD-RELEASE-ROUTE-GATE-20260813-001.json @@ -0,0 +1,40 @@ +{ + "schema": "hololake.jd-release-route-gate-receipt/v1", + "receiptId": "GH-HOLOLAKE-JD-RELEASE-ROUTE-GATE-20260813-001", + "observedAt": "2026-08-13T15:10:55+08:00", + "state": "BLOCKED_BEFORE_SERVER_CONNECTION", + "requestedCapability": "HOST_HOLOLAKE_SIGNED_RELEASE_BROADCAST_ON_JD_CONTROLLER", + "target": { + "nodeId": "JD-FD-PRIMARY", + "targetResolvedExactly": true, + "route": "INTENT-JD-SERVER-OPERATION-001", + "transport": "LOCAL_DEDICATED_KEY_SSH", + "authority": "CURRENT_USER_TASK_SCOPE_ONLY_NOT_BLANKET_SERVER_AUTHORITY" + }, + "localPrivateRegistryReadback": { + "exactRouteCount": 1, + "dedicatedIdentityReadable": true, + "strictHostKeyCheckingRequired": true, + "expectedDmiInstanceUuidRegistered": true, + "hostKeyFingerprintRegistered": false, + "directAccessReceiptRegistered": false + }, + "stopCondition": "STRICT_HOST_KEY_VERIFICATION_CANNOT_BE_PROVEN_FROM_CURRENT_REGISTRY", + "actions": { + "sshSessionEstablished": false, + "serverMutationAttempted": false, + "releaseEndpointProvisioned": false, + "updaterPublicKeyProvisioned": false, + "releaseUploadAttempted": false, + "productionCutoverAttempted": false, + "workorderEmailCreated": false + }, + "requiredBeforeRetry": [ + "REGISTER_CURRENT_JD_HOST_KEY_FINGERPRINT", + "REGISTER_OR_REFRESH_DIRECT_ACCESS_RECEIPT", + "VERIFY_DMI_INSTANCE_UUID_AFTER_STRICT_LOGIN", + "READ_BACK_CURRENT_SERVER_RUNTIME_AND_RELEASE_SERVICE_STATE", + "BIND_ANY_WRITE_TO_IMMUTABLE_SOURCE_ROLLBACK_AND_SERVER_OWNED_RECEIPT" + ], + "truthBoundary": "A local signed-notarized release pipeline is implemented, but no JD release service, endpoint, public key, upload, activation or server health is claimed." +}