Merge pull request 'docs(native): 京东原生锚点临时防火墙规则已清理' (#18) from codex/jd-native-anchor-firewall-cleanup-20260807 into main

product-source/hololake-platform/guanghu-os/deployments/JD-FD-PRIMARY/NATIVE-ANCHOR-FIREWALL-CLEANUP-RECEIPT-20260807.hdlp

@@ -0,0 +1,56 @@
+schema: guanghu.jd-native-anchor-firewall-cleanup-receipt/v1
+receipt_id: GH-OS-JD-FD-PRIMARY-NATIVE-ANCHOR-FIREWALL-CLEANUP-20260807-001
+status: PASS_100_TEMPORARY_RULE_REMOVED
+observed_at: 2026-08-07T12:27:07+08:00
+node_id: JD-FD-PRIMARY
+cloud_instance:
+  provider: JD_CLOUD
+  instance_id: lavm-eplauh8ezr
+  region: cn-north-1
+removed_rule:
+  type: CUSTOM_TCP
+  protocol: TCP
+  destination_port: 3922
+  source: 43.153.193.169/32
+  remark: GHOS-JD-NATIVE-ANCHOR-GATE-20260807
+  purpose: ONE_TIME_PHYSICAL_NATIVE_ANCHOR_ACCEPTANCE
+control_plane_readback:
+  rule_absent: true
+  port_3922_absent: true
+  source_43_153_193_169_32_absent: true
+  remark_absent: true
+  remaining_rule:
+    type: SSH
+    protocol: TCP
+    destination_port: 22
+    source: 0.0.0.0/0
+network_readback:
+  probe_origin: BS-SG-003
+  probe_origin_ipv4: 43.153.193.169
+  destination: 111.228.0.139:3922
+  request: GET /v1/anchor
+  connect_timeout_seconds: 5
+  curl_exit_code: 28
+  http_status: 000
+  result: PASS_100_CLOUD_INGRESS_BLOCKED
+server_state_after_cleanup:
+  operating_system: ubuntu_22.04
+  boot_id: 9e61f880-8537-4a02-b4ad-753160798f46
+  grub_default: gnulinux-simple-9e4550a0-452b-4f28-b5a5-d5364aa450f6
+  grub_next_entry: EMPTY
+  linux_listener_3922: 127.0.0.1_ONLY
+  native_candidate_sha256: eb97af70fd71a5c8d2b52adb1439bd02764c83cdb79b797e62a632eeddb6f786
+safety:
+  temporary_acceptance_exposure_closed: true
+  ssh_rule_unchanged: true
+  production_native_cutover: FORBIDDEN
+server_receipt:
+  path: /guanghu/recovery/JD-FD-PRIMARY-anchor-sequence-91f2c227485b2af20ce99364104ab00d8a5f4ba3/CLOUD-FIREWALL-CLEANUP-RECEIPT.hldp
+  transferred_sha256: 469dd736f1995d0044aced46d547e2e947c8386000fc0838f3ac9127b02555a6
+gates:
+  native_anchor_http_physical_capability: 100
+  public_front_door_native_anchor_equivalence: 0
+  code_channel_service_equivalence: 0
+  production_native_cutover: 0
+decision:
+  next_action: BUILD_NATIVE_CODE_CHANNEL_OR_SAFE_FRONT_DOOR_PROJECTION_BEFORE_DEFAULT_CUTOVER

product-source/hololake-platform/guanghu-os/deployments/JD-FD-PRIMARY/NATIVE-ANCHOR-PHYSICAL-GATE-RECEIPT-20260807.hdlp

@@ -90,6 +90,13 @@ gates:
 server_receipt:
   path: /guanghu/recovery/JD-FD-PRIMARY-anchor-sequence-91f2c227485b2af20ce99364104ab00d8a5f4ba3/PHYSICAL-GATE-RECEIPT.hldp
   sha256: 21f228ba8772f1d2cec9f506bf20471ddae8aaa9e1995aa339c1f9f839dd037a
+temporary_firewall_cleanup:
+  status: PASS_100_TEMPORARY_RULE_REMOVED
+  removed_source: 43.153.193.169/32
+  removed_destination_port: 3922
+  control_plane_rule_absent: true
+  relay_connect_result: TIMEOUT_BLOCKED
+  receipt: NATIVE-ANCHOR-FIREWALL-CLEANUP-RECEIPT-20260807.hdlp
 decision:
   production_cutover: FORBIDDEN
   next_action: BUILD_NATIVE_CODE_CHANNEL_OR_SAFE_FRONT_DOOR_PROJECTION_BEFORE_DEFAULT_CUTOVER