# LPM and Shared Desktop Capability Registry Signed Envelope · Human Engineering Language (English)

> This is an English reading projection of validated native TCS/HLDP source. It is not a new canonical source and grants no execution authority.

## What this is

This is a **protocol** declaration with identifier `TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-SIGNED-0001` and version `0.1.0`. The projector validates it with the Stage-1 compiler before changing its reading order.

## Who is here

The native source does not provide this field; the projector does not guess.

## Why this started

The native source does not provide this field; the projector does not guess.

## What changed

The native source does not provide this field; the projector does not guess.

## How it will execute

This is a non-executable declaration and has no action graph.

## Boundaries and exception handling

The native source does not provide this field; the projector does not guess.

## How completion is proven

- **acceptance**  `acceptance`
  - **completion_claim**：no  `acceptance.completion_claim`
  - **desktop_next**：IMPLEMENT_VIRTUAL_PROVIDER_GIR_THEN_RESIGN  `acceptance.desktop_next`
  - **loader_next_state**：ELIGIBLE_FOR_ACCOUNT_SCOPED_INSTALL_SELF_TEST  `acceptance.loader_next_state`
  - **lpm_next**：IMPLEMENT_PROVIDER_GIR_THEN_RESIGN  `acceptance.lpm_next`
  - **private_key_in_repository**：no  `acceptance.private_key_in_repository`
  - **signed_payload**：VERIFIED  `acceptance.signed_payload`

## Where to continue next time

The native source does not provide this field; the projector does not guess.

## Source and verification

- **Native declaration identifier**: `TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-SIGNED-0001`
- **Native declaration kind**: `PROTOCOL`
- **TCS source SHA-256**: `18c0da5c9d19b14724d9eae539b53389dff7bbb2cf74f4cdeb485a042389623e`
- **Validation compiler**: `TCS-COMPILER-STAGE3-GENERIC-ACTION-LOADER-0001`
- **Projection protocol**: `GLS-HLDP-HUMAN-ENGINEERING-PROJECTION-0001`

## Complete native structure cross-reference

All top-level structures and field paths are retained below so a reader can audit whether the projection omitted information.

- **acceptance**  `acceptance`
  - **completion_claim**：no  `acceptance.completion_claim`
  - **desktop_next**：IMPLEMENT_VIRTUAL_PROVIDER_GIR_THEN_RESIGN  `acceptance.desktop_next`
  - **loader_next_state**：ELIGIBLE_FOR_ACCOUNT_SCOPED_INSTALL_SELF_TEST  `acceptance.loader_next_state`
  - **lpm_next**：IMPLEMENT_PROVIDER_GIR_THEN_RESIGN  `acceptance.lpm_next`
  - **private_key_in_repository**：no  `acceptance.private_key_in_repository`
  - **signed_payload**：VERIFIED  `acceptance.signed_payload`
- **admission**  `admission`
  - **desktop_module_install_allowed**：no  `admission.desktop_module_install_allowed`
  - **loader_module_install_allowed**：yes  `admission.loader_module_install_allowed`
  - **mother_brain_module_install_allowed**：no  `admission.mother_brain_module_install_allowed`
  - **payload_hash**：PASS  `admission.payload_hash`
  - **reason**：LPM_AND_DESKTOP_PROVIDER_MACHINE_EXECUTION_PROGRAMS_NOT_YET_IMPLEMENTED  `admission.reason`
  - **revocation**：PASS_EPOCH_1_ACTIVE  `admission.revocation`
  - **signature**：PASS  `admission.signature`
  - **signer_scope**：PASS  `admission.signer_scope`
  - **trusted_signer_lookup**：PASS  `admission.trusted_signer_lookup`
- **boundary**  `boundary`
  - **global_repo012_trust_registry_unchanged**：yes  `boundary.global_repo012_trust_registry_unchanged`
  - **loader_installation_is_mount**：no  `boundary.loader_installation_is_mount`
  - **lpm_or_desktop_installation**：no  `boundary.lpm_or_desktop_installation`
  - **no_real_macos_desktop_action**：yes  `boundary.no_real_macos_desktop_action`
  - **signature_creates_provider_implementation**：no  `boundary.signature_creates_provider_implementation`
  - **signature_creates_semantics**：no  `boundary.signature_creates_semantics`
  - **signature_is_installation**：no  `boundary.signature_is_installation`
- **header**  `header`
  - **canonical source path**：language/protocols/TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-SIGNED-0001.tcs  `header.canonical_uri`
  - **compatibility**  `header.compatibility`
    - GIR/1
    - ED25519
  - **language**：TCS/0.1  `header.language`
  - **lifecycle**：CANDIDATE  `header.lifecycle`
  - **English name**：LPM and Shared Desktop Capability Registry Signed Envelope  `header.name_en`
  - **Chinese name**：LPM与共享桌面能力注册表签名封装  `header.name_zh`
  - **profile**：TCS-CAPABILITY-REGISTRY/1  `header.profile`
  - **protocols**  `header.protocols`
    - TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-PAYLOAD-0001
    - TCS-TRUSTED-SIGNER-REGISTRY-ZC001-DEV-0001
    - TCS-MODULE-ABI-0001
  - **schema**：tcs.protocol/v1  `header.schema`
  - **version**：0.1.0  `header.version`
- **payload**  `payload`
  - **canonical_source**：language/protocols/TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-PAYLOAD-0001.tcs  `payload.canonical_source`
  - **gir_sha256**：0cc234522b8b320ddde4ad7dd4cc96740f4164eb993d99b6fac0dd3c65c70f20  `payload.gir_sha256`
  - **package_hashes**：PASS  `payload.package_hashes`
  - **source checksum**：8a27a44d39f8e04cfc28ed45b9949bf95ce31070bb108e3a1686faf58df3a586  `payload.source_sha256`
- **registry**  `registry`
  - **channel**：ICE-CH-ZC001  `registry.channel`
  - **development_line**：HOLOLAKE-LPM-TCS-NATIVE-20260823  `registry.development_line`
  - **registry_id**：TCS-CAPREG-LPM-DESKTOP-SIGNED-0001  `registry.registry_id`
  - **state**：SIGNED_VERIFIED_NOT_INSTALLED  `registry.state`
  - **version**：0.1.0  `registry.version`
- **signature_envelope**  `signature_envelope`
  - **algorithm**：ED25519  `signature_envelope.algorithm`
  - **expiry_policy**：NO_AUTOMATIC_EXPIRY  `signature_envelope.expiry_policy`
  - **format**：TCS-CAPREG-SIGNATURE/1  `signature_envelope.format`
  - **issued_at**：2026-08-24T03:01:00Z  `signature_envelope.issued_at`
  - **message_sha256**：79175dfd3e8bd06c19c4233b899729f93e2329624ce4a22ad34fae21fb1160ed  `signature_envelope.message_sha256`
  - **public_key_sha256**：fd3da2d2b23c05c08dcdf7a37c15588d4b6407ec309152598eae279316ea49d8  `signature_envelope.public_key_sha256`
  - **revocation_epoch**：1  `signature_envelope.revocation_epoch`
  - **signature_base64**：KXfEByyUl10XxDd/rnK2aSjTUy9pjKGE8hFf2rWawKlCSZWlds7gj5nuXKpKAGtPXZykC5vS2KDnUwxOZYAwAA==  `signature_envelope.signature_base64`
  - **signature_bytes**：64  `signature_envelope.signature_bytes`
  - **signer_id**：TCS-SIGNER-BINGSHUO-ZC001-DEV-0001  `signature_envelope.signer_id`
  - **trusted_registry**：TCS-TRUSTREG-ZC001-DEV-0001  `signature_envelope.trusted_registry`
  - **verification**：PASS  `signature_envelope.verification`
- **signed_message**  `signed_message`
  - **final_newline**：yes  `signed_message.final_newline`
  - **lines**  `signed_message.lines`
    - TCS-CAPREG-SIGNATURE/1
    - registry_id=TCS-CAPREG-LPM-DESKTOP-SIGNED-0001
    - version=0.1.0
    - payload_sha256=8a27a44d39f8e04cfc28ed45b9949bf95ce31070bb108e3a1686faf58df3a586
    - signer_id=TCS-SIGNER-BINGSHUO-ZC001-DEV-0001
    - issued_at=2026-08-24T03:01:00Z
    - expiry_policy=NO_AUTOMATIC_EXPIRY
    - revocation_epoch=1
    - channel=ICE-CH-ZC001
    - development_line=HOLOLAKE-LPM-TCS-NATIVE-20260823

---

This page changes only the reading order; it does not change TCS/HLDP semantics.