schema: tcs.module-abi/v1
id: TCS-MODULE-ABI-0001
version: 0.1.0
state: DRAFT_LOADER_CONTRACT
package_required:
  - module.tcs
  - module.gir.json
  - module.lock.hldp
  - module.manifest.hldp
  - receipts/compile.hldp
manifest_required:
  - module_id
  - display_name_zh
  - version
  - entry_program_id
  - gir_sha256
  - compiler_id
  - compiler_sha256
  - protocols
  - capabilities
  - authority_ceiling
  - resource_ceiling
  - data_scope
  - network_scope
  - lifecycle
  - rollback
  - human_projection
lifecycle:
  states: [SOURCE, COMPILED, VERIFIED, INSTALLED, MOUNTED, ACTIVE, SUSPENDED, RETIRED]
  no_skipping: true
  registration_is_installation: false
  installation_is_activation: false
loader_sequence:
  - VERIFY_PACKAGE_STRUCTURE
  - VERIFY_SOURCE_GIR_LOCK_AND_MANIFEST_HASHES
  - VERIFY_COMPILER_AND_PROTOCOL_VERSIONS
  - VERIFY_SIGNATURE_AND_AUTHORITY_CEILING
  - VERIFY_CAPABILITY_REGISTRATION
  - INSTALL_ACCOUNT_OR_SYSTEM_SCOPED_BYTES
  - RUN_ISOLATED_SELF_TEST
  - MOUNT_ENTRY_PROGRAM
  - ACTIVATE_ONLY_AFTER_RECEIPT
  - TARGET_READBACK_AND_HUMAN_PROJECTION
runtime_call:
  input: GIR_ACTION_NODE_PLUS_CAPABILITY_TICKET
  output: TYPED_RESULT_EVIDENCE_AND_RECEIPT
  ai_reads_source_to_execute: false
  host_expands_scope: false
failure:
  any_hash_mismatch: FAIL_CLOSED
  missing_capability: FAIL_CLOSED
  protocol_drift: FAIL_CLOSED
  rollback_receipt_required: true