# 零点原核TCS原生开发线可信签名者注册表 · 简体中文人类工程语言版

> 这是 TCS/HLDP 原生源码的简体中文阅读投影，不是新的正本，也不授予执行权限。若本页与 `.tcs` 源码不一致，以经过校验的 `.tcs` 源码为准。

## 这是什么

这是一份 **协议** 声明，编号为 `TCS-TRUSTED-SIGNER-REGISTRY-ZC001-DEV-0001`，版本为 `0.1.0`。转换器已先用 Stage-1 编译器校验原生源码，再把机器枚举翻译成汉语；原始编号保留在括号和字段路径中。

## 谁在这里

- **scope**  `scope`
  - **allowed_module_ids**  `scope.allowed_module_ids`
    - TCS-MOD-GENERIC-ACTION-GRAPH-LOADER-0001
    - TCS-MOD-MOTHER-PERSONA-NEURON-RUNTIME-0002
    - TCS-MOD-HOLOLAKE-DESKTOP-BRIDGE-0002
  - **allowed_registry_ids**  `scope.allowed_registry_ids`
    - TCS-CAPREG-LPM-DESKTOP-CANDIDATE-0001
    - TCS-CAPREG-LPM-DESKTOP-SIGNED-0001
  - **channel**：ICE-CH-ZC001  `scope.channel`
  - **development_line**：HOLOLAKE-LPM-TCS-NATIVE-20260823  `scope.development_line`
  - **other_line**：否  `scope.other_line`
  - **production**：否  `scope.production`
  - **remote_deploy**：否  `scope.remote_deploy`

## 为什么开始

- **来源**  `source`
  - **authorization_event**：TCS-EVENT-TRUSTED-SIGNER-PROVISIONING-AUTHORIZATION-20260824  `source.authorization_event`
  - **authorization_event_sha256**：5acdd66c1bfc2d7d72aae288a1ac2daa0062de89aabf45d195b8aff851beae17  `source.authorization_event_sha256`
  - **channel**：ICE-CH-ZC001  `source.channel`
  - **direct_human_text_sha256**：e9feb935f8299fc5935af70fc73bb960fd16e30a5438ff18b92e88b1c0d9b463  `source.direct_human_text_sha256`

## 发生了什么变化

源程序没有提供这一项，转换器不猜。

## 准备怎样执行

这是非执行声明，没有动作图。

## 边界与异常处理

源程序没有提供这一项，转换器不猜。

## 怎样算完成

- **验收标准**  `acceptance`
  - **keychain_item_metadata**：PASS  `acceptance.keychain_item_metadata`
  - **module_installation**：否  `acceptance.module_installation`
  - **private_key_absent_from_repository**：是  `acceptance.private_key_absent_from_repository`
  - **public_key_fingerprint**：PASS  `acceptance.public_key_fingerprint`
  - **signature_roundtrip**：PENDING  `acceptance.signature_roundtrip`
  - **signed_capability_registry**：PENDING  `acceptance.signed_capability_registry`

## 下一次从哪里继续

源程序没有提供这一项，转换器不猜。

## 来源与校验

- **原生声明编号**：`TCS-TRUSTED-SIGNER-REGISTRY-ZC001-DEV-0001`
- **原生声明类型**：`PROTOCOL`
- **TCS 源码 SHA-256**：`b037685e59069c0c7194bb32cfcc6f5c29e35549697a930bd164958e6314cdd3`
- **校验编译器**：`TCS-COMPILER-STAGE3-GENERIC-ACTION-LOADER-0001`
- **投影协议**：`GLS-HLDP-HUMAN-ENGINEERING-PROJECTION-0001`

## 原生结构逐项对照

下面保留源码的全部顶层结构和字段路径，供人类审计投影有没有漏掉信息。

- **验收标准**  `acceptance`
  - **keychain_item_metadata**：PASS  `acceptance.keychain_item_metadata`
  - **module_installation**：否  `acceptance.module_installation`
  - **private_key_absent_from_repository**：是  `acceptance.private_key_absent_from_repository`
  - **public_key_fingerprint**：PASS  `acceptance.public_key_fingerprint`
  - **signature_roundtrip**：PENDING  `acceptance.signature_roundtrip`
  - **signed_capability_registry**：PENDING  `acceptance.signed_capability_registry`
- **boundary**  `boundary`
  - **apple_developer_id_identity**：BB8630C144DB3CF6493BFAF9B0D08D7CAD127A8B  `boundary.apple_developer_id_identity`
  - **apple_signature_is_ed25519_module_signature**：否  `boundary.apple_signature_is_ed25519_module_signature`
  - **apple_signature_role**：HOST_BINARY_ONLY  `boundary.apple_signature_role`
  - **global_authoritative_registry_state**：UNCHANGED_CURRENT_EMPTY_NO_TRUSTED_SIGNER  `boundary.global_authoritative_registry_state`
  - **relationship_or_os_login_is_signature**：否  `boundary.relationship_or_os_login_is_signature`
- **语言头**  `header`
  - **正本路径**：language/protocols/TCS-TRUSTED-SIGNER-REGISTRY-ZC001-DEV-0001.tcs  `header.canonical_uri`
  - **compatibility**  `header.compatibility`
    - ED25519
    - GIR/1
  - **语言**：TCS/0.1  `header.language`
  - **生命周期**：候选版本，尚未成为正式正本（`CANDIDATE`）  `header.lifecycle`
  - **英文名**：Zero-Core TCS Native Development Line Trusted Signer Registry  `header.name_en`
  - **中文名**：零点原核TCS原生开发线可信签名者注册表  `header.name_zh`
  - **协议配置**：TCS-TRUSTED-SIGNER-REGISTRY/1  `header.profile`
  - **protocols**  `header.protocols`
    - TCS-TRUSTED-SIGNER-PROVISIONING-REQUEST-0001
    - TCS-MODULE-ABI-0001
  - **schema**：tcs.protocol/v1  `header.schema`
  - **版本**：0.1.0  `header.version`
- **keychain_readback**  `keychain_readback`
  - **account**：TCS-SIGNER-BINGSHUO-ZC001-DEV-0001  `keychain_readback.account`
  - **description**：TCS Ed25519 signing key  `keychain_readback.description`
  - **item_class**：GENERIC_PASSWORD  `keychain_readback.item_class`
  - **secret_readback_in_receipt**：否  `keychain_readback.secret_readback_in_receipt`
  - **service**：HoloLake TCS Ed25519  `keychain_readback.service`
  - **status**：ITEM_PRESENT  `keychain_readback.status`
- **生命周期**  `lifecycle`
  - **expiry_policy**：NO_AUTOMATIC_EXPIRY  `lifecycle.expiry_policy`
  - **issued_at**：2026-08-24  `lifecycle.issued_at`
  - **revocation_epoch**：1  `lifecycle.revocation_epoch`
  - **revocation_trigger**  `lifecycle.revocation_trigger`
    - NEW_DIRECT_BINGSHUO_REVOCATION
    - KEY_COMPROMISE
    - SCOPE_CHANGE
    - DEVELOPMENT_LINE_RETIREMENT
  - **verify_before_each_install_mount_and_activation**：是  `lifecycle.verify_before_each_install_mount_and_activation`
- **registry**  `registry`
  - **global_repo012_authoritative_registry_replaced**：否  `registry.global_repo012_authoritative_registry_replaced`
  - **public_production_trust**：否  `registry.public_production_trust`
  - **registry_id**：TCS-TRUSTREG-ZC001-DEV-0001  `registry.registry_id`
  - **state**：ACTIVE_DEVELOPMENT_LINE_ONLY  `registry.state`
  - **版本**：0.1.0  `registry.version`
- **scope**  `scope`
  - **allowed_module_ids**  `scope.allowed_module_ids`
    - TCS-MOD-GENERIC-ACTION-GRAPH-LOADER-0001
    - TCS-MOD-MOTHER-PERSONA-NEURON-RUNTIME-0002
    - TCS-MOD-HOLOLAKE-DESKTOP-BRIDGE-0002
  - **allowed_registry_ids**  `scope.allowed_registry_ids`
    - TCS-CAPREG-LPM-DESKTOP-CANDIDATE-0001
    - TCS-CAPREG-LPM-DESKTOP-SIGNED-0001
  - **channel**：ICE-CH-ZC001  `scope.channel`
  - **development_line**：HOLOLAKE-LPM-TCS-NATIVE-20260823  `scope.development_line`
  - **other_line**：否  `scope.other_line`
  - **production**：否  `scope.production`
  - **remote_deploy**：否  `scope.remote_deploy`
- **signer**  `signer`
  - **algorithm**：ED25519  `signer.algorithm`
  - **private_key_export_allowed**：否  `signer.private_key_export_allowed`
  - **private_key_location**：LOCAL_MACOS_LOGIN_KEYCHAIN_SERVICE_HOLOLAKE_TCS_ED25519  `signer.private_key_location`
  - **public_key**：pYL8D4tV+yGlmX6w7qYxSfY3yA996A3M2KcAsGSR7BU=  `signer.public_key`
  - **public_key_encoding**：RAW_32_BYTE_BASE64  `signer.public_key_encoding`
  - **public_key_sha256**：fd3da2d2b23c05c08dcdf7a37c15588d4b6407ec309152598eae279316ea49d8  `signer.public_key_sha256`
  - **signer_id**：TCS-SIGNER-BINGSHUO-ZC001-DEV-0001  `signer.signer_id`
- **来源**  `source`
  - **authorization_event**：TCS-EVENT-TRUSTED-SIGNER-PROVISIONING-AUTHORIZATION-20260824  `source.authorization_event`
  - **authorization_event_sha256**：5acdd66c1bfc2d7d72aae288a1ac2daa0062de89aabf45d195b8aff851beae17  `source.authorization_event_sha256`
  - **channel**：ICE-CH-ZC001  `source.channel`
  - **direct_human_text_sha256**：e9feb935f8299fc5935af70fc73bb960fd16e30a5438ff18b92e88b1c0d9b463  `source.direct_human_text_sha256`

---

本页只改变阅读顺序，不改变 TCS/HLDP 语义。