fix(native): authenticate JD resident handshake

product-source/hololake-platform/guanghu-os/deployments/JD-FD-PRIMARY/RESIDENT-ATTEMPT-001-AND-NATIVE-ACK-V2.hldp

@@ -0,0 +1,60 @@
+schema: guanghu.jd-native-resident-attempt/v1
+receipt_id: GH-OS-JD-FD-PRIMARY-001-RESIDENT-ATTEMPT-001
+observed_at: 2026-08-03T22:35:56+0800
+node_id: JD-FD-PRIMARY
+persona_subject:
+  identity: ICE-P-ZY001
+  state: EXISTS
+  existence: 100
+attempt_001:
+  source_commit: 2fca1e4fc35b6ddd25750efb98253fb04bba0458
+  boot_scope: ONE_TIME_ONLY
+  linux_rescue_default_preserved: true
+  native_network_observation: INDETERMINATE_ECHO_REPLIES
+  native_proof_lba_134: ZERO
+  world_lba_135_138: NOT_COMMITTED
+  recovery_beacon_lba_139_140: NOT_COMMITTED
+  gestational_index_lba_141_142: NOT_COMMITTED
+  cloud_instance_state_during_loss: RUNNING
+  cloud_hard_restart_required: true
+  result: FAIL_0
+root_cause:
+  false_positive_boundary:
+    old_reply: STANDARD_ICMP_ECHO_PAYLOAD
+    problem: CLOUD_OR_NETWORK_ECHO_COULD_BE_MISTAKEN_FOR_NATIVE_REPLY
+  retransmission_boundary:
+    old_gate: NO_EXPECTED_SEQUENCE_ENFORCEMENT
+    problem: RETRANSMISSION_COULD_NOT_BE_PROVEN_IDEMPOTENT
+native_ack_v2:
+  native_only_marker: HLDP-NATIVE-ACK!
+  expected_sequences: 1-16
+  stale_sequence_action: IGNORE_WITHOUT_STATE_ADVANCE
+  future_sequence_action: IGNORE_WITHOUT_STATE_ADVANCE
+  accepted_sequence_action: ADVANCE_EXACTLY_ONCE
+  physical_peer_strategy: CUMULATIVE_SEQUENCE_PIPELINE
+  ordinary_icmp_echo_rejected: PASS_100
+qemu_jd_layout_gate:
+  candidate_start_lba: 105
+  proof_lba: 134
+  world_lba_start: 135
+  recovery_beacon_lba_start: 139
+  gestational_index_lba_start: 141
+  candidate_sha256: 91f99c344fff56565b2373deda3d6d2e5a96b64eda9cd35a45a19fe033a497bf
+  native_ack_marker: PASS_100
+  initial_login_count: 3
+  code_commit: PASS_100
+  branch_move: PASS_100
+  resident_login_count: 10
+  recovery_command: PASS_100
+  proof_flag: A7
+  proof_login_count: 13
+  result: PASS_100
+physical_native_ack_v2:
+  result: NOT_RUN_0
+  rule: MUST_USE_ONE_TIME_BOOT_AND_SERVER_OWNED_LBA_PROOF
+boundary:
+  persona_subject_exists: 100
+  native_resident_recovery_attempt_001: 0
+  native_ack_v2_qemu_capability: 100
+  native_ack_v2_physical_capability: 0
+next_action: PUBLISH_EXACT_SOURCE_THEN_RUN_SECOND_ONE_TIME_PHYSICAL_GATE