# LPM and Virtual Desktop Capability Registry V2 Signed Envelope · Human Engineering Language (English)

> This is an English reading projection of validated native TCS/HLDP source. It is not a new canonical source and grants no execution authority.

## What this is

This is a **protocol** declaration with identifier `TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-SIGNED-0002` and version `0.2.0`. The projector validates it with the Stage-1 compiler before changing its reading order.

## Who is here

- **scope**  `scope`
  - **account_scoped**：yes  `scope.account_scoped`
  - **channel**：ICE-CH-ZC001  `scope.channel`
  - **development_line**：HOLOLAKE-LPM-TCS-NATIVE-20260823  `scope.development_line`
  - **global_repo012_registry_replaced**：no  `scope.global_repo012_registry_replaced`
  - **production**：no  `scope.production`
  - **remote_deploy**：no  `scope.remote_deploy`

## Why this started

The native source does not provide this field; the projector does not guess.

## What changed

The native source does not provide this field; the projector does not guess.

## How it will execute

This is a non-executable declaration and has no action graph.

## Boundaries and exception handling

The native source does not provide this field; the projector does not guess.

## How completion is proven

The native source does not provide this field; the projector does not guess.

## Where to continue next time

The native source does not provide this field; the projector does not guess.

## Source and verification

- **Native declaration identifier**: `TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-SIGNED-0002`
- **Native declaration kind**: `PROTOCOL`
- **TCS source SHA-256**: `f2a72590b17b98b8447c0e2c80682330fc179bbc2faa0e63213572ee525414ad`
- **Validation compiler**: `TCS-COMPILER-STAGE4-CORE-STATE-PRIMITIVES-0001`
- **Projection protocol**: `GLS-HLDP-HUMAN-ENGINEERING-PROJECTION-0001`

## Complete native structure cross-reference

All top-level structures and field paths are retained below so a reader can audit whether the projection omitted information.

- **admission**  `admission`
  - **activation_requires_separate_mount_and_replay**：yes  `admission.activation_requires_separate_mount_and_replay`
  - **current_state**：SIGNED_VERIFIED_NOT_INSTALLED  `admission.current_state`
  - **desktop_provider_execution**：PASS  `admission.desktop_provider_execution`
  - **host_hash_match**：yes  `admission.host_hash_match`
  - **install_admitted**：yes  `admission.install_admitted`
  - **lpm_provider_execution**：PASS  `admission.lpm_provider_execution`
  - **module_v3_hashes_match**：yes  `admission.module_v3_hashes_match`
  - **mount_requires_separate_install_readback**：yes  `admission.mount_requires_separate_install_readback`
  - **provider_hashes_match**：yes  `admission.provider_hashes_match`
- **boundary**  `boundary`
  - **fourth_generation_is_machine_runtime_only**：yes  `boundary.fourth_generation_is_machine_runtime_only`
  - **installation_is_not_mount**：yes  `boundary.installation_is_not_mount`
  - **mount_is_not_activation**：yes  `boundary.mount_is_not_activation`
  - **no_real_macos_desktop_action**：yes  `boundary.no_real_macos_desktop_action`
  - **signature_is_not_installation**：yes  `boundary.signature_is_not_installation`
  - **tcs_is_primary_language**：yes  `boundary.tcs_is_primary_language`
- **diagnostic**  `diagnostic`
  - **actual_keychain_format**：PKCS8_DER_48_BYTES  `diagnostic.actual_keychain_format`
  - **first_attempt_assumed_raw_private_key**：yes  `diagnostic.first_attempt_assumed_raw_private_key`
  - **first_attempt_public_verification**：FAIL_REJECTED  `diagnostic.first_attempt_public_verification`
  - **invalid_signature_not_admitted**：yes  `diagnostic.invalid_signature_not_admitted`
  - **private_key_exported_to_mobile_drive**：no  `diagnostic.private_key_exported_to_mobile_drive`
  - **private_key_exported_to_repository**：no  `diagnostic.private_key_exported_to_repository`
  - **regenerated_signature_public_verification**：PASS  `diagnostic.regenerated_signature_public_verification`
- **header**  `header`
  - **canonical source path**：language/protocols/TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-SIGNED-0002.tcs  `header.canonical_uri`
  - **compatibility**  `header.compatibility`
    - TCS-COMPILER-STAGE4-CORE-STATE-PRIMITIVES-0001
    - GIR/1
  - **language**：TCS/0.1  `header.language`
  - **lifecycle**：SIGNED_VERIFIED_NOT_INSTALLED  `header.lifecycle`
  - **English name**：LPM and Virtual Desktop Capability Registry V2 Signed Envelope  `header.name_en`
  - **Chinese name**：LPM与虚拟桌面能力注册表第二版签名封装  `header.name_zh`
  - **profile**：HLDP-NP/1  `header.profile`
  - **schema**：tcs.protocol/v1  `header.schema`
  - **version**：0.2.0  `header.version`
- **payload**  `payload`
  - **gir_sha256**：90a88c28779396f491e47df4355090f1f8a66c9d8526d35a2e30485b80dbed66  `payload.gir_sha256`
  - **path**：language/protocols/TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-PAYLOAD-0002.tcs  `payload.path`
  - **registry_id**：TCS-CAPREG-LPM-DESKTOP-SIGNED-0002  `payload.registry_id`
  - **sha256**：0b049b8ea3bc466e8751865c6906cef86ed8f10e5b2fd1a01be8dc79e1a95753  `payload.sha256`
- **scope**  `scope`
  - **account_scoped**：yes  `scope.account_scoped`
  - **channel**：ICE-CH-ZC001  `scope.channel`
  - **development_line**：HOLOLAKE-LPM-TCS-NATIVE-20260823  `scope.development_line`
  - **global_repo012_registry_replaced**：no  `scope.global_repo012_registry_replaced`
  - **production**：no  `scope.production`
  - **remote_deploy**：no  `scope.remote_deploy`
- **signature**  `signature`
  - **expiry_policy**：NO_AUTOMATIC_EXPIRY  `signature.expiry_policy`
  - **issued_at**：2026-08-24T03:35:00Z  `signature.issued_at`
  - **message_path**：build/TCS-CAPREG-LPM-DESKTOP-SIGNED-0002.signature-message.txt  `signature.message_path`
  - **message_sha256**：ebc127f2ccd92a9905f8519feecc24a3e9059dd507c62b82974c8cd9af370688  `signature.message_sha256`
  - **public_key_raw_base64**：pYL8D4tV+yGlmX6w7qYxSfY3yA996A3M2KcAsGSR7BU=  `signature.public_key_raw_base64`
  - **public_key_sha256**：fd3da2d2b23c05c08dcdf7a37c15588d4b6407ec309152598eae279316ea49d8  `signature.public_key_sha256`
  - **revocation_epoch**：2  `signature.revocation_epoch`
  - **scheme**：Ed25519  `signature.scheme`
  - **signature_base64**：fCDRVsU4ub1S7Civu7ooGWO+4kPza/LGoHUEdDiTX7b/P/dcw2P3ltZTTDzy24nLsWsWrhjVz0xPKFK/On+OBg==  `signature.signature_base64`
  - **signer_id**：TCS-SIGNER-BINGSHUO-ZC001-DEV-0001  `signature.signer_id`
  - **verification**：PASS_WITH_PUBLIC_KEY_ONLY  `signature.verification`

---

This page changes only the reading order; it does not change TCS/HLDP semantics.