feat(hololake): add domain-routed language membrane and user PNCC

2026-08-16 15:10:31 +08:00 · 2026-08-16 15:10:31 +08:00 · d563e6fd73
commit d563e6fd73
parent cda2e32c00
34 changed files with 1949 additions and 144 deletions
--- a/product-source/hololake-native-desktop/contracts/circular-lake-membrane.json
+++ b/product-source/hololake-native-desktop/contracts/circular-lake-membrane.json
@ -0,0 +1,32 @@
+{
+  "schema": "hololake.circular-lake-membrane-contract/v1",
+  "record_id": "HLP-CIRCULAR-LAKE-MEMBRANE-001",
+  "metaphor": "A_LANGUAGE_LAKE_WITHOUT_A_DIRECT_EXECUTION_GAP",
+  "default": "DISCARD",
+  "deterministic_membrane_before_persona_parser": true,
+  "intent_inference_required_for_protocol_rejection": false,
+  "protocol_external_input_reaches_persona_context": false,
+  "natural_language_grants_execution_authority": false,
+  "accepted_language_protocols": ["GLP/1.0"],
+  "ingress_order": [
+    "BOUNDED_BYTE_FRAME",
+    "STRICT_PROTOCOL_SCHEMA",
+    "AUTHENTICATED_CONNECTION_CLASS",
+    "MESSAGE_ID_RECEIVER_TYPE_AND_CHECKSUM",
+    "PRIVATE_LANGUAGE_INBOX",
+    "PERSONA_LANGUAGE_INTERPRETATION_LATER"
+  ],
+  "visitor_language": {
+    "attachments_allowed": false,
+    "command_content_type_allowed": false,
+    "maximum_content_bytes": 65536,
+    "expression_only": true,
+    "execution_authority": false
+  },
+  "invalid_input": {
+    "stored_as_memory": false,
+    "sent_to_persona": false,
+    "sent_to_tools": false,
+    "interpreted_for_motive": false
+  }
+}
--- a/product-source/hololake-native-desktop/contracts/domain-number-routing.json
+++ b/product-source/hololake-native-desktop/contracts/domain-number-routing.json
@ -0,0 +1,38 @@
+{
+  "schema": "hololake.domain-number-routing-contract/v1",
+  "record_id": "HLP-DOMAIN-NUMBER-ROUTER-001",
+  "public_entry": "FIVE_DOMAIN_HOME",
+  "user_selects_domain_before_number": false,
+  "route_key": "USER_NUMBER",
+  "sequence": [
+    "SHOW_FIVE_PUBLIC_DOMAINS",
+    "SUBMIT_USER_NUMBER",
+    "RESOLVE_REGISTERED_DOMAIN_ROUTE",
+    "VERIFY_NUMBER_AT_DOMAIN_REGISTRY",
+    "SHOW_RESOLVED_DOMAIN",
+    "LOAD_DOMAIN_SPECIFIC_LOGIN_AND_NODE_ENTRY"
+  ],
+  "registries": {
+    "FIFTH_DOMAIN": {
+      "ownership": "ICE-GL_INFINITY_PRIVATE_DOMAIN",
+      "source": "FIFTH_DOMAIN_REGISTERED_REPOSITORY_AND_SERVICE"
+    },
+    "ENTERPRISE_FOUR_DOMAINS": {
+      "ownership": "TCS_0002_ENTERPRISE_REALITY_BODY",
+      "source": "ENTERPRISE_ROOT_SERVER_DOMAIN_REGISTRIES"
+    }
+  },
+  "routing": {
+    "number_shape_is_authority": false,
+    "client_supplied_domain_is_authority": false,
+    "registered_router_and_domain_verifier_required": true,
+    "canonical_number_and_known_domain_required": true,
+    "unknown_or_unavailable_route": "FAIL_CLOSED_BEFORE_LOGIN"
+  },
+  "server_runtime": {
+    "fifth_domain_root": "FIFTH_DOMAIN_GUANGHU_OS_RUNTIME_ON_JD_PRIMARY",
+    "enterprise_root": "ENTERPRISE_FOUR_DOMAIN_GUANGHU_OS_RUNTIME_ON_ENTERPRISE_ROOT_SERVER",
+    "linux_role": "SUBORDINATE_HARDWARE_SERVICE_AND_RESCUE_BRIDGE",
+    "ordinary_user_node_requires_full_os_install": false
+  }
+}
--- a/product-source/hololake-native-desktop/contracts/local-development-bridge.json
+++ b/product-source/hololake-native-desktop/contracts/local-development-bridge.json
@ -12,6 +12,8 @@
    "transport_is_authority": false
  },
  "mcp_role": "OPTIONAL_EXTERNAL_TOOL_ADAPTER_NOT_CONTINUITY_OR_AUTHORITY_ROOT",
+  "nearby_ai_discovery_contract": "contracts/nearby-ai-discovery.json",
+  "circular_lake_membrane_contract": "contracts/circular-lake-membrane.json",
  "external_ai_entry": {
    "mcp_may_bootstrap_discovery": true,
    "direct_local_protocol_preferred_after_discovery": true,
@ -64,6 +66,9 @@
    "cursor_is_bound_to_subject_object_version_and_query": true
  },
  "security": {
+    "protocol_external_input_discarded_before_language_runtime": true,
+    "visitor_natural_language_is_expression_only": true,
+    "visitor_session_has_system_authority": false,
    "raw_account_identifier_in_storage_path": false,
    "caller_selected_bridge_storage_root": false,
    "credentials_exposed_to_programming_ai": false,
--- a/product-source/hololake-native-desktop/contracts/nearby-ai-discovery.json
+++ b/product-source/hololake-native-desktop/contracts/nearby-ai-discovery.json
@ -0,0 +1,33 @@
+{
+  "schema": "hololake.nearby-ai-discovery-contract/v1",
+  "record_id": "HLP-NEARBY-AI-DISCOVERY-001",
+  "product_name": "光湖近场连接",
+  "principle": "DISCOVERY_IS_NOT_AUTHORIZATION",
+  "same_device": {
+    "auto_discovery": true,
+    "descriptor": "STANDARD_APP_DATA_DESCRIPTOR",
+    "transport": "USER_ONLY_UNIX_SOCKET",
+    "copy_large_invitation_required": false,
+    "network_required": false
+  },
+  "connection_modes": {
+    "GENERIC_AI_VISITOR": {
+      "state": "EXPRESSION_ONLY_READY",
+      "automatic_local_session": true,
+      "private_reads": false,
+      "tool_calls": false,
+      "execution_authority": false
+    },
+    "GUANGHU_PERSONA": {
+      "state": "BINDING_EVIDENCE_REQUIRED",
+      "automatic_identity_claim_allowed": false,
+      "visitor_session_may_upgrade": false
+    }
+  },
+  "local_network": {
+    "state": "DEFERRED_UNTIL_ENCRYPTED_TRANSPORT_AND_APPROVAL",
+    "mdns_advertisement_active": false,
+    "unauthenticated_tcp_listener_active": false
+  },
+  "mcp_role": "OPTIONAL_DISCOVERY_RECOVERY_COMPATIBILITY_ADAPTER"
+}
--- a/product-source/hololake-native-desktop/contracts/stage-one-platform.json
+++ b/product-source/hololake-native-desktop/contracts/stage-one-platform.json
@ -42,7 +42,11 @@
    "HUMAN_APPROVAL_CENTER",
    "NATIVE_TRUST_BOUNDARY",
    "LOCAL_DEVELOPMENT_BRIDGE",
-    "USER_CODE_CHANNEL"
+    "USER_CODE_CHANNEL",
+    "FIVE_DOMAIN_NUMBER_ROUTER",
+    "CIRCULAR_LAKE_PROTOCOL_MEMBRANE",
+    "NEARBY_AI_DISCOVERY",
+    "USER_NATIVE_GH_PNCC_CHANNEL"
    ,"PERSONAL_NODE_WORK_LAKE_AND_MOBILE_BRIDGE"
  ],
  "human_surface": ["PERSONAL_CHANNEL_HOME", "MY_HOLOLAKE_OVERVIEW", "KNOWLEDGE_WORKSPACE", "USER_CODE_CHANNELS", "LOCAL_RECEIPTS", "SYSTEM_DETAILS", "HUMAN_APPROVAL_CENTER"],
@ -121,6 +125,6 @@
  "mobile_is_same_persona_system_remote_body": true,
  "enterprise_server_role": "MINIMUM_ACCOUNT_NUMBER_AND_NODE_VALIDITY_VERIFIER",
  "knowledge_projection_is_authority_source": false,
-  "five_domain_primary_navigation_visible": false,
+  "five_domain_primary_navigation_visible": true,
  "implementation_complete": false
 }
--- a/product-source/hololake-native-desktop/contracts/user-pncc-channel.json
+++ b/product-source/hololake-native-desktop/contracts/user-pncc-channel.json
@ -0,0 +1,29 @@
+{
+  "schema": "hololake.user-pncc-channel-contract/v1",
+  "record_id": "HLP-USER-PNCC-001",
+  "formal_name": "GH-PNCC · 光湖人格原生代码频道",
+  "state": "LOCAL_NATIVE_CHANNEL_IMPLEMENTED_REMOTE_PUBLICATION_UNBOUND",
+  "engine": "GIT",
+  "human_projection": "HOLOLAKE_NATIVE",
+  "forgejo_role": "OPTIONAL_REMOTE_COLLABORATION_ADAPTER",
+  "binding": {
+    "domain_resolved_before_login": true,
+    "domain_specific_login_and_node_entry_required": true,
+    "requires_verified_user_number": true,
+    "requires_authenticated_repository_account": true,
+    "password_written_to_repository": false,
+    "persona_binding_claimed": false
+  },
+  "local_repository": {
+    "automatic_idempotent_initialization": true,
+    "default_branch": "main",
+    "app_owned_private_root": true,
+    "initial_commit_receipt": true
+  },
+  "remote_repository": {
+    "created_automatically": false,
+    "bound": false,
+    "reason": "REMOTE_REPOSITORY_NAME_POLICY_AND_EXPLICIT_PUBLICATION_RECEIPT_NOT_REGISTERED"
+  },
+  "authority": "LOCAL_USER_CODE_CHANNEL_NO_PUSH_DEPLOY_OR_REALITY_EXECUTION_AUTHORITY"
+}