{
  "compiled_from": {
    "compiler_id": "TCS-COMPILER-STAGE5-VERIFIED-MODULE-INSTALL-0001",
    "compiler_state": "TCS_COMPILER_GIR_EXECUTED",
    "source_sha256": "e347fece34934a209b1303ebba5ad03b81854ac1e7344d2d5088ea9ee19951a2"
  },
  "declaration": {
    "errors": {
      "hash": "TCS-E3001",
      "path": "TCS-E4002",
      "prior_destination": "TCS-E6001",
      "signature": "TCS-E4001",
      "write_readback": "TCS-E8001"
    },
    "forbidden_host_semantics": {
      "change_bytes": false,
      "infer_authority": false,
      "infer_capability": false,
      "interpret_lpm_or_desktop": false,
      "interpret_module_meaning": false,
      "mount_or_activate": false,
      "select_files": false
    },
    "header": {
      "canonical_uri": "language/protocols/TCS-VERIFIED-MODULE-INSTALL-PRIMITIVE-0001.tcs",
      "language": "TCS/0.1",
      "lifecycle": "CANDIDATE",
      "name_en": "TCS Signed Verified Module Exact Install Mechanical Primitive",
      "name_zh": "TCS已验签模块精确安装机械原语",
      "profile": "HLDP-NP/1",
      "schema": "tcs.protocol/v1",
      "version": "0.1.0"
    },
    "inputs": {
      "expected_destination": "ABSENT",
      "package": [
        "MODULE_ID",
        "SOURCE_ROOT",
        "DESTINATION_ROOT",
        "FILES_WITH_SHA256"
      ],
      "signed_registry": [
        "PAYLOAD_PATH",
        "PAYLOAD_SHA256",
        "MESSAGE_PATH",
        "MESSAGE_SHA256",
        "SIGNATURE_BASE64",
        "PUBLIC_KEY_RAW_BASE64"
      ]
    },
    "lifecycle": {
      "install_is_activation": false,
      "install_is_mount": false,
      "install_receipt_required": true,
      "rollback": "REMOVE_ONLY_TEMPORARY_OR_EXACT_NEW_INSTALL_DESTINATION"
    },
    "machine_rules": {
      "atomic_directory_rename": true,
      "copy_to_temporary_directory": true,
      "destination_inside_exact_runtime_root": true,
      "readback_each_installed_hash": true,
      "reject_symlink_escape": true,
      "verify_each_source_file_hash": true,
      "verify_ed25519_signature": true,
      "verify_message_binds_payload_hash": true,
      "verify_message_hash": true,
      "verify_payload_hash": true,
      "verify_signer_public_fingerprint": true
    },
    "operation": {
      "host_role": "MECHANICAL_SIGNATURE_HASH_COPY_AND_READBACK_ONLY",
      "id": "TCS-OP-CORE-INSTALL-0001",
      "input": "SIGNED_REGISTRY_PROOF_PLUS_EXACT_PACKAGE_FILE_SET",
      "name": "CORE.INSTALL_VERIFIED_MODULE",
      "output": "ACCOUNT_SCOPED_INSTALLED_BYTES_AND_READBACK_RECEIPT",
      "semantic_owner": "CALLING_TCS_INSTALL_PROGRAM"
    },
    "trust": {
      "global_production_trust": false,
      "scope": "ICE-CH-ZC001_DEVELOPMENT_LINE_ONLY",
      "signature_scheme": "Ed25519",
      "signer_id": "TCS-SIGNER-BINGSHUO-ZC001-DEV-0001",
      "signer_public_key_sha256": "fd3da2d2b23c05c08dcdf7a37c15588d4b6407ec309152598eae279316ea49d8"
    }
  },
  "executable": false,
  "identity": {
    "declaration_id": "TCS-VERIFIED-MODULE-INSTALL-PRIMITIVE-0001",
    "declaration_kind": "PROTOCOL",
    "language_version": "0.1"
  },
  "native_self_hosted": true,
  "natural_language_is_typed_data": true,
  "schema": "guanghu.declaration-gir/v1",
  "unresolved_natural_language": false
}