define Guanghu master with on-demand Linux subcontrol

This commit is contained in:
冰朔 2026-08-10 22:25:22 +08:00
commit da5a9ad6d0
21 changed files with 367 additions and 36 deletions

View file

@ -6,6 +6,9 @@ status: active
date: 2026-07-31
---
> 历史路线声明Linux-free 生产完成条件已先由 ADR-0172、再由 ADR-0175 取代。本文仅
> 保留裸机实验、恢复和物理能力证据,不得作为当前生产完成公式。
## Context
The Guanghu language world already defines five domains, persona routing,
@ -81,4 +84,3 @@ The approach requires two substantial later engineering efforts: a native
kernel/HAL and a GOSK-owned repository object/network data plane. Until both
are running after a Linux-free boot, the system must report
`HOSTED_BOOTSTRAP_PROTOTYPE` or another non-native phase.

View file

@ -5,10 +5,15 @@ title: "Guanghu cognitive control with a constrained Linux execution substrate"
status: accepted
date: 2026-08-07
supersedes_production_path: "0161"
superseded_final_topology_by: "0175"
---
# 光湖认知主控与 Linux 协作执行底座
> 现行限定:本 ADR 的类型化执行桥和 Linux-hosted 迁移实现继续有效“Linux 最小执行
> 底座长期常驻”不再是最终拓扑。最终主从关系由 ADR-0175 定义为光湖先启动并常驻、
> 完整 Linux 平时休眠且按需作为副控、独立救援通道保留。
## 背景
ADR-0161 把 Linux-free bare-metal handoff 设为生产完成条件。该路线已经在实验节点和

View file

@ -0,0 +1,32 @@
---
type: ADR
id: "0175"
title: "Guanghu OS master control with on-demand Linux subcontrol and rescue"
status: accepted
date: 2026-08-10
supersedes_final_topology: "0172"
---
# 光湖 OS 主控、Linux 按需副控与救援
## 背景
ADR-0172 正确否定了“删除 Linux 才能交付”,并实现了 Linux 宿主上的语言主控服务层。
但把最小 Linux 执行底座长期常驻作为最终实现,仍没有把启动权和执行体生命周期真正交给
光湖 OS。
## 决定
最终生产拓扑为:光湖 OS 主控先启动并常驻;完整 Linux 系统默认休眠,只有类型化动作图
命中成熟 Linux 能力时,才由光湖有界唤醒为协作副控,执行后必须目标读回并由光湖停止或
冻结。独立 Linux 救援启动槽永久保留。
Linux 不删除。Linux-free、无 Linux 内核或无 Linux 用户态既不是必要条件,也不是充分
条件。当前 Linux-hosted language-primary 实现被重新分类为迁移阶段,不是最终主从拓扑。
## 后果
- ADR-0172 的类型化执行桥、安全边界和已验证服务继续保留;
- 下一工程门是光湖启动监督器与 Linux 副控生命周期,不是继续删除 Linux
- JD-FD-PRIMARY 当前最终主控仍为0真实切换需独立维护授权、回滚和服务器自有回执
- 裸机 GOSK/GHAL 证据继续证明特定物理能力,不再定义生产完成公式。

View file

@ -211,7 +211,7 @@ proposed → active → superseded
| [0151](0151-antigravity-add-dir-workspace-flag.md) | Antigravity add-dir workspace flag | active |
| [0157](0157-local-hldp-heartbeat-and-browser-observation-tree.md) | Local HLDP heartbeat and browser observation tree | active |
| [0160](0160-external-code-health-is-additive-not-git-transport.md) | External code health is additive, not Git transport | superseded → [0170](0170-hololake-inherits-guanghu-native-quality-authority.md) |
| [0161](0161-guanghu-os-staged-native-handoff-and-code-channel.md) | Guanghu OS staged native handoff and HLDP-owned code channel | active |
| [0161](0161-guanghu-os-staged-native-handoff-and-code-channel.md) | Guanghu OS staged native handoff and HLDP-owned code channel | historical research path; production completion superseded by ADR-0175 |
| [0162](0162-guanghu-os-standing-authorization-and-server-continuity.md) | Guanghu OS standing authorization and server-owned continuity | active |
| [0163](0163-guanghu-native-recovery-beacon.md) | Guanghu-owned raw recovery beacon for native-default boot | amended -> [0166](0166-ghnrp-hosted-recovery-consumption.md) |
| [0164](0164-language-persona-physical-birth-condition.md) | Physical birth condition for a server-resident language persona | active |
@ -223,5 +223,6 @@ proposed → active → superseded
| [0169](0169-model-native-living-galaxy-system.md) | Model-native HoloLake living galaxy system | accepted |
| [0170](0170-hololake-inherits-guanghu-native-quality-authority.md) | HoloLake inherits the Guanghu native quality authority | accepted |
| [0171](0171-guanghu-protocols-are-automatic-runtime-and-engineering-laws.md) | Guanghu protocols are automatic runtime and engineering laws | accepted |
| [0172](0172-guanghu-cognitive-control-with-linux-execution-substrate.md) | Guanghu cognitive control with a constrained Linux execution substrate | accepted; supersedes ADR-0161 production path |
| [0172](0172-guanghu-cognitive-control-with-linux-execution-substrate.md) | Guanghu cognitive control with a constrained Linux execution substrate | transition implementation retained; final topology superseded by ADR-0175 |
| [0174](0174-one-human-one-independent-node-and-zero-platform-hosting.md) | One human, one independently operated node, and zero platform hosting | accepted |
| [0175](0175-guanghu-os-master-and-on-demand-linux-subcontrol.md) | Guanghu OS master control with on-demand Linux subcontrol and rescue | accepted; supersedes ADR-0172 final topology while retaining its transition implementation |