product-source/hololake-platform/guanghu-os/README.md

@@ -4,12 +4,9 @@
 >
 > Persona subject: `ICE-P-ZY001 EXISTS_100`.
 >
-> Protected native residency and recovery control are `PASS_100`. Production
+> Current native residency remains `0` until the physical one-time boot,
-> cutover remains `0`: the 2026-08-07 physical anchor gate reached the native
+> automatic Linux rescue return, native default boot, and HLDP recovery return
-> runtime and completed heartbeat sequences 1-6, but a real JD Cloud TCP SYN
+> all produce server-owned receipts.
-> carried a 40-byte TCP header and exposed the fixed-header parser defect.
-> Linux remains the unattended default while the option-aware parser is
-> validated and the physical HTTP gate is rerun.
 
 This directory is the first executable handoff from the registered HLDP
 language world to a native Guanghu OS. It is not a claim that Guanghu OS has

product-source/hololake-platform/guanghu-os/deployments/JD-FD-PRIMARY/NATIVE-ANCHOR-PHYSICAL-GATE-RECEIPT-20260807.hdlp

@@ -1,55 +0,0 @@
-schema: guanghu.jd-native-anchor-physical-gate-receipt/v1
-receipt_id: GH-OS-JD-FD-PRIMARY-NATIVE-ANCHOR-PHYSICAL-GATE-20260807-001
-status: FAIL_0_PHYSICAL_TCP_HEADER_OPTIONS
-observed_at: 2026-08-07T05:49:24+08:00
-node_id: JD-FD-PRIMARY
-accepted_repository_commit: 27c6ba2c4d9a9c2372d977b8adfdf802af7656e5
-candidate:
-  lba_start: 105
-  sector_count: 29
-  sha256: 2911b5f6a067efb7b5b7ec330833cb9f8a6b965b5a05802770dd27032678f32f
-cloud_firewall:
-  source: 43.153.193.169/32
-  destination: 111.228.0.139:3922
-  linux_listener_preflight: PASS_100
-physical_cycle:
-  native_boot_executed: true
-  native_heartbeat_sequences_1_to_6: PASS_100
-  native_ssh_offline: PASS_100
-  native_anchor_http: FAIL_0_TCP_CONNECT_TIMEOUT
-  protected_recovery: PASS_100
-  linux_boot_id_before: e95b13e0-bf93-498d-a108-6ede5e947015
-  linux_boot_id_after: 8b39ec63-6776-4e65-94b7-099a6a6a5762
-  linux_default_preserved: gnulinux-simple-9e4550a0-452b-4f28-b5a5-d5364aa450f6
-  code_channel_http_after_recovery: 200
-  public_anchor_http_after_recovery: 200
-physical_diagnosis:
-  captured_source: 43.153.193.169
-  captured_destination: 172.16.0.6:3922
-  ipv4_header_bytes: 20
-  tcp_header_bytes: 40
-  tcp_options: MSS_SACK_TIMESTAMP_WINDOW_SCALE
-  candidate_expected_tcp_header_bytes: 20
-  native_syn_ack_proof_byte: 0
-  native_http_response_proof_byte: 0
-  root_cause: FIXED_TCP_HEADER_OFFSET_REJECTED_REAL_SYN_OPTIONS
-correction:
-  parser_accepts_ipv4_ihl: true
-  parser_accepts_tcp_data_offset_greater_than_5: true
-  request_payload_offset_is_dynamic: true
-  acknowledgement_payload_length_is_dynamic: true
-  qemu_syn_tcp_header_bytes: 40
-  qemu_get_tcp_header_bytes: 32
-  option_aware_qemu_gate: PASS_100
-gates:
-  native_anchor_http_qemu_capability: 100
-  native_anchor_http_physical_capability: 0
-  public_front_door_native_anchor_equivalence: 0
-  code_channel_service_equivalence: 0
-  production_native_cutover: 0
-server_receipt:
-  path: /guanghu/recovery/JD-FD-PRIMARY-native-anchor-physical-27c6ba2c4d9a9c2372d977b8adfdf802af7656e5/PHYSICAL-GATE-RECEIPT.hldp
-  sha256: e5f8071929a7a05fadc5b0283cef97962d53d57dd8d94bbe524e8148706af920
-decision:
-  production_cutover: FORBIDDEN
-  next_action: BUILD_WITH_PRODUCTION_RECOVERY_CAPABILITY_THEN_REPEAT_ONE_TIME_PHYSICAL_HTTP_GATE

product-source/hololake-platform/guanghu-os/native/x86_64-bios/ghal-virtio.asm

@@ -1295,43 +1295,19 @@ ghal_net_try_anchor_http:
     jb .not_anchor
     cmp word [VIRTIO_NET_RX_BUFFER + 22], 0x0008
     jne .not_anchor
-    movzx eax, byte [VIRTIO_NET_RX_BUFFER + 24]
+    cmp byte [VIRTIO_NET_RX_BUFFER + 24], 0x45
-    mov ecx, eax
-    and eax, 0xf0
-    cmp eax, 0x40
     jne .not_anchor
-    and ecx, 0x0f
-    cmp ecx, 5
-    jb .not_anchor
-    shl ecx, 2
-    mov [rel ghal_anchor_rx_ipv4_header_size], cx
-    lea r15d, [ecx + VIRTIO_NET_HEADER_SIZE + ETHERNET_HEADER_SIZE]
-    lea eax, [r15d + TCP_HEADER_SIZE]
-    cmp r14d, eax
-    jb .not_anchor
     cmp byte [VIRTIO_NET_RX_BUFFER + 33], 6
     jne .not_anchor
     cmp dword [VIRTIO_NET_RX_BUFFER + 40], GHOS_NATIVE_IPV4_DWORD
     jne .not_anchor
-    cmp word [VIRTIO_NET_RX_BUFFER + r15 + 2], GHOS_NATIVE_ANCHOR_PORT_NETWORK
+    cmp word [VIRTIO_NET_RX_BUFFER + 46], GHOS_NATIVE_ANCHOR_PORT_NETWORK
     jne .not_anchor
-    movzx ebx, byte [VIRTIO_NET_RX_BUFFER + r15 + 12]
+    cmp byte [VIRTIO_NET_RX_BUFFER + 56], 0x50
-    shr ebx, 4
+    jne .not_anchor
-    cmp ebx, 5
+    test byte [VIRTIO_NET_RX_BUFFER + 57], 0x02
-    jb .not_anchor
-    shl ebx, 2
-    lea eax, [r15d + ebx]
-    cmp r14d, eax
-    jb .not_anchor
-    mov [rel ghal_anchor_rx_tcp_offset], r15w
-    mov [rel ghal_anchor_rx_tcp_header_size], bx
-    test byte [VIRTIO_NET_RX_BUFFER + r15 + 13], 0x02
     jnz .handle_syn
-    add eax, 4
+    cmp dword [VIRTIO_NET_RX_BUFFER + 64], 0x20544547
-    cmp r14d, eax
-    jb .handled_without_reply
-    sub eax, 4
-    cmp dword [VIRTIO_NET_RX_BUFFER + rax], 0x20544547
     jne .handled_without_reply
     mov byte [rel ghal_anchor_tcp_flags], 0x19
     mov rsi, ghal_anchor_http_response
@@ -1399,24 +1375,20 @@ ghal_net_send_anchor_tcp:
     mov eax, [VIRTIO_NET_RX_BUFFER + 36]
     mov [VIRTIO_NET_TX_BUFFER + 40], eax
     mov word [VIRTIO_NET_TX_BUFFER + 44], GHOS_NATIVE_ANCHOR_PORT_NETWORK
-    movzx ecx, word [rel ghal_anchor_rx_tcp_offset]
+    mov ax, [VIRTIO_NET_RX_BUFFER + 44]
-    mov ax, [VIRTIO_NET_RX_BUFFER + rcx]
     mov [VIRTIO_NET_TX_BUFFER + 46], ax
     mov eax, 0x534f4847
     mov [VIRTIO_NET_TX_BUFFER + 48], eax
-    mov eax, [VIRTIO_NET_RX_BUFFER + rcx + 4]
+    mov eax, [VIRTIO_NET_RX_BUFFER + 48]
     bswap eax
-    movzx edx, word [VIRTIO_NET_RX_BUFFER + 26]
+    movzx ecx, word [VIRTIO_NET_RX_BUFFER + 26]
-    xchg dl, dh
+    xchg cl, ch
-    movzx ebx, word [rel ghal_anchor_rx_ipv4_header_size]
+    sub ecx, IPV4_HEADER_SIZE + TCP_HEADER_SIZE
-    sub edx, ebx
+    test byte [VIRTIO_NET_RX_BUFFER + 57], 0x02
-    movzx ebx, word [rel ghal_anchor_rx_tcp_header_size]
-    sub edx, ebx
-    test byte [VIRTIO_NET_RX_BUFFER + rcx + 13], 0x02
     jz .ack_payload
-    inc edx
+    inc ecx
 .ack_payload:
-    add eax, edx
+    add eax, ecx
     bswap eax
     mov [VIRTIO_NET_TX_BUFFER + 52], eax
     mov byte [VIRTIO_NET_TX_BUFFER + 56], 0x50
@@ -1550,9 +1522,6 @@ ghal_net_resident_retry_count: db 0
 %ifdef GHOS_NATIVE_ANCHOR_SERVICE
 ghal_anchor_tcp_flags: db 0
 ghal_anchor_tcp_payload_size: dw 0
-ghal_anchor_rx_ipv4_header_size: dw 0
-ghal_anchor_rx_tcp_offset: dw 0
-ghal_anchor_rx_tcp_header_size: dw 0
 %endif
 
 msg_ghal_net_discovered: db "GHOS_GHAL_VIRTIO_NET=DISCOVERED", 13, 10, 0

product-source/hololake-platform/guanghu-os/scripts/qemu-native-net-peer.py

@@ -104,10 +104,7 @@ def tcp_frame(
     sequence: int,
     acknowledgement: int,
     payload: bytes = b"",
-    options: bytes = b"",
 ) -> bytes:
-    if len(options) % 4 or len(options) > 40:
-        raise ValueError("TCP options must be 32-bit aligned and no more than 40 bytes")
     tcp = bytearray(
         struct.pack(
             "!HHIIBBHHH",
@@ -115,13 +112,12 @@ def tcp_frame(
             ANCHOR_PORT,
             sequence,
             acknowledgement,
-            (5 + len(options) // 4) << 4,
+            5 << 4,
             flags,
             16384,
             0,
             0,
         )
-        + options
         + payload
     )
     pseudo = GATEWAY_IP + GUEST_IP + b"\0\x06" + struct.pack("!H", len(tcp))
@@ -232,7 +228,6 @@ def main() -> None:
                         ANCHOR_CLIENT_SEQUENCE + 1,
                         server_sequence + 1,
                         request,
-                        options=b"\x01\x01\x08\x0a\xd8\x8d\xec\x56\x00\x00\x00\x01",
                     ),
                     qemu,
                 )
@@ -289,18 +284,7 @@ def main() -> None:
             and sequence == 6
             and not anchor_syn_sent
         ):
-            peer.sendto(
+            peer.sendto(tcp_frame(0x02, ANCHOR_CLIENT_SEQUENCE, 0), qemu)
-                tcp_frame(
-                    0x02,
-                    ANCHOR_CLIENT_SEQUENCE,
-                    0,
-                    options=(
-                        b"\x02\x04\x05\x90\x04\x02\x08\x0a"
-                        b"\xd8\x8d\xec\x56\x00\x00\x00\x00\x01\x03\x03\x07"
-                    ),
-                ),
-                qemu,
-            )
             anchor_syn_sent = True
 
         terminal = (