TCS 0.1;

PROTOCOL TCS-GENERIC-ACTION-GRAPH-LOADER-0001 {
  header { schema = "tcs.protocol/v1"; name_zh = "TCS通用动作图装载器协议"; name_en = "TCS Generic Action Graph Loader Protocol"; version = "0.1.0"; language = "TCS/0.1"; profile = "HLDP/1"; protocols = ["HLP-TCS-GIR-LOADER-0001", "TCS-HOST-ABI-0001", "TCS-MODULE-ABI-0001"]; lifecycle = "CANDIDATE"; canonical_uri = "language/protocols/TCS-GENERIC-ACTION-GRAPH-LOADER-0001.tcs"; compatibility = ["GIR/1"]; }
  source { source_id = "BINGSHUO-HOLOLAKE-TCS-ENGINEERING-ANCHOR-20260823"; source_uri = "language-sources/direct-human/BINGSHUO-HOLOLAKE-TCS-ENGINEERING-ANCHOR-20260823.txt"; source_sha256 = "a3dd8dbd2203b631bdb23f2693eb314d4ef86af68fdeaee8835e3cf0861ddd23"; source_role = "DIRECT_HUMAN"; }
  operation { id = "TCS-OP-LOADER-0001"; name = "TCS.EXECUTE_ACTION_GRAPH"; input = "VERIFIED_GIR_ENVELOPE_PLUS_CAPABILITY_REGISTRY_PLUS_EXACT_ROOT"; output = "TYPED_ACTION_RESULTS_TARGET_READBACK_AND_RECEIPT"; host_role = "MECHANICAL_DRIVER_ONLY"; semantic_owner = "TCS_GIR_AND_LOCKED_CAPABILITY_REGISTRY"; }
  states { values = ["RECEIVED", "GIR_VERIFIED", "CAPABILITIES_RESOLVED", "RUNNING", "TARGET_READBACK_VERIFIED", "ROLLING_BACK", "FAILED", "COMPLETE"]; initial = "RECEIVED"; terminal = ["FAILED", "COMPLETE"]; }
  sequence { S1 = "VERIFY_GIR_SCHEMA_CANONICAL_HASH_COMPILER_PROVENANCE_AND_SOURCE_HASH"; S2 = "VERIFY_SUBJECT_EXACT_TARGET_AUTHORITY_RESOURCE_AND_RECEIPT_PLAN"; S3 = "VERIFY_CAPABILITY_REGISTRY_HASH_SIGNATURE_LIFECYCLE_AND_OPERATION_VERSION"; S4 = "RESOLVE_EACH_ACTION_TO_ONE_INSTALLED_MOUNTED_CAPABILITY"; S5 = "VERIFY_GRAPH_REACHABLE_TERMINATING_AND_ALL_FAILURE_EDGES"; S6 = "EXECUTE_NODES_IN_DETERMINISTIC_ORDER_WITH_TYPED_RESULTS"; S7 = "VERIFY_TARGET_SIDE_READBACK"; S8 = "WRITE_MACHINE_RECEIPT_AND_HUMAN_PROJECTIONS"; S9 = "ROLLBACK_ON_ANY_PARTIAL_UNVERIFIED_STATE"; }
  invariants { I1 = "HOST_NEVER_INTERPRETS_NATURAL_LANGUAGE"; I2 = "HOST_NEVER_SUBSTITUTES_UNREGISTERED_OPERATION"; I3 = "ONE_ACTION_ONE_EXACT_CAPABILITY_VERSION"; I4 = "CAPABILITY_TICKET_NEVER_EXPANDS_AUTHORITY"; I5 = "ACTION_OUTPUT_TYPE_MATCHES_NEXT_INPUT_TYPE"; I6 = "NO_SUCCESS_WITHOUT_TARGET_READBACK"; I7 = "RECEIPT_CONTAINS_GIR_REGISTRY_MODULE_AND_HOST_HASHES"; I8 = "LPM_INTENT_IS_NOT_REALITY_AUTHORITY"; I9 = "DESKTOP_ACTION_REQUIRES_SEPARATE_EXACT_TICKET"; }
  capability_record { required = ["operation_id", "operation_name", "version", "provider_module_id", "provider_module_gir_sha256", "entry_program_id", "input_type", "output_type", "authority_ceiling", "resource_ceiling", "data_scope", "network_scope", "lifecycle", "signature", "rollback"]; }
  errors { unknown_operation = "TCS-E2101"; protocol_drift = "TCS-E2102"; source_hash = "TCS-E3001"; unsigned_registry = "TCS-E3002"; authority = "TCS-E4001"; target = "TCS-E4002"; lifecycle = "TCS-E5002"; target_readback = "TCS-E6002"; rollback = "TCS-E7002"; receipt = "TCS-E8001"; }
  bootstrap { first_child_operation = "CORE.ECHO"; first_child_program = "TCS-PROGRAM-GENERIC-LOADER-INNER-ECHO-0001"; lpm_or_desktop_before_loader_self_test = false; existing_rust_or_shell_semantics_allowed = false; }
  acceptance { compile = "REQUIRED"; stage3_semantic_fixed_point = "REQUIRED"; unknown_operation_rejection = "REQUIRED"; outside_target_rejection = "REQUIRED"; inner_echo_child_target_readback = "REQUIRED"; outer_loader_receipt_readback = "REQUIRED"; cross_host_equivalent_receipt = "REQUIRED_BEFORE_ACTIVE"; current_runtime = "NOT_IMPLEMENTED"; }
}