define Guanghu master with on-demand Linux subcontrol

This commit is contained in:
冰朔 2026-08-10 22:25:22 +08:00
commit da5a9ad6d0
21 changed files with 367 additions and 36 deletions

View file

@ -6,6 +6,12 @@
> Bare-metal GOSK/GHAL remains a parallel research and recovery lane. It no
> longer blocks the first production cognitive-control delivery.
>
> Current final topology (ADR-0175): Guanghu OS starts and remains the master;
> a full Linux environment is preserved but normally dormant, awakened only
> as bounded subcontrol or as an independent rescue path. Linux deletion and a
> Linux-free boot are not completion predicates. The current JD deployment is
> still a Linux-hosted language-primary transition, not the final topology.
>
> Protected bare-metal residency, recovery control, and native anchor HTTP are
> `PASS_100` on the physical JD node. Bare-metal production cutover remains
> `0`, because that research kernel does not yet provide code-channel and
@ -39,10 +45,11 @@ and [ADR-0172](../docs/adr/0172-guanghu-cognitive-control-with-linux-execution-s
independent from persona-subject existence.
- Rust is a bootstrap implementation language for the validator and control
executable. It does not replace HLDP as the world-programming language.
- Ubuntu and the Forgejo Linux binary are construction scaffolding. Native
acceptance requires a Guanghu kernel, Guanghu hardware abstraction, a
Guanghu-owned code-channel data plane, and a boot with no Linux kernel or
Linux userspace.
- Ubuntu and the Forgejo Linux binary are current transition assets. Final
production acceptance requires Guanghu master control, on-demand Linux
subcontrol, a preserved Linux rescue path, and current target-side receipts;
it never requires deleting Linux. Bare-metal GOSK/GHAL acceptance remains a
separate research predicate.
The registered translation chain is:
@ -93,9 +100,10 @@ identity, intents, receipts, and the migration ladder:
2. hosted Forgejo data plane;
3. HLDP-native control plane;
4. GOSK-native object store and network data plane;
5. Linux-free boot.
5. Guanghu-master boot with Linux preserved as on-demand subcontrol and rescue.
Only step 1 is complete in this source package.
This migration ladder is capability-specific. The historical Linux-free step
is superseded by ADR-0175 and must not be revived as a production gate.
## Local verification
@ -133,8 +141,10 @@ login
-> act or fail closed
```
The current source is `JD_NATIVE_PREFLIGHT`. Running its toolchain on Ubuntu
proves the world package and build chain only; it does not prove native boot.
The current production classification is
`LANGUAGE_PRIMARY_ON_LINUX_HOSTED_TRANSITION`. Running its toolchain or
services on Ubuntu proves only the exact validated layer; it does not prove
final Guanghu-first boot or on-demand Linux lifecycle control.
JD access uses strict host-key verification and a dedicated operations key.
The world records only public fingerprints; it never contains an address,