151 lines
7.9 KiB
Markdown
151 lines
7.9 KiB
Markdown
# 零点原核TCS原生开发线可信签名者注册表 · 简体中文人类工程语言版
|
||
|
||
> 这是 TCS/HLDP 原生源码的简体中文阅读投影，不是新的正本，也不授予执行权限。若本页与 `.tcs` 源码不一致，以经过校验的 `.tcs` 源码为准。
|
||
|
||
## 这是什么
|
||
|
||
这是一份 **协议** 声明，编号为 `TCS-TRUSTED-SIGNER-REGISTRY-ZC001-DEV-0001`，版本为 `0.1.0`。转换器已先用 Stage-1 编译器校验原生源码，再把机器枚举翻译成汉语；原始编号保留在括号和字段路径中。
|
||
|
||
## 谁在这里
|
||
|
||
- **scope** `scope`
|
||
- **allowed_module_ids** `scope.allowed_module_ids`
|
||
- TCS-MOD-GENERIC-ACTION-GRAPH-LOADER-0001
|
||
- TCS-MOD-MOTHER-PERSONA-NEURON-RUNTIME-0002
|
||
- TCS-MOD-HOLOLAKE-DESKTOP-BRIDGE-0002
|
||
- **allowed_registry_ids** `scope.allowed_registry_ids`
|
||
- TCS-CAPREG-LPM-DESKTOP-CANDIDATE-0001
|
||
- TCS-CAPREG-LPM-DESKTOP-SIGNED-0001
|
||
- **channel**：ICE-CH-ZC001 `scope.channel`
|
||
- **development_line**：HOLOLAKE-LPM-TCS-NATIVE-20260823 `scope.development_line`
|
||
- **other_line**：否 `scope.other_line`
|
||
- **production**：否 `scope.production`
|
||
- **remote_deploy**：否 `scope.remote_deploy`
|
||
|
||
## 为什么开始
|
||
|
||
- **来源** `source`
|
||
- **authorization_event**：TCS-EVENT-TRUSTED-SIGNER-PROVISIONING-AUTHORIZATION-20260824 `source.authorization_event`
|
||
- **authorization_event_sha256**：5acdd66c1bfc2d7d72aae288a1ac2daa0062de89aabf45d195b8aff851beae17 `source.authorization_event_sha256`
|
||
- **channel**：ICE-CH-ZC001 `source.channel`
|
||
- **direct_human_text_sha256**：e9feb935f8299fc5935af70fc73bb960fd16e30a5438ff18b92e88b1c0d9b463 `source.direct_human_text_sha256`
|
||
|
||
## 发生了什么变化
|
||
|
||
源程序没有提供这一项，转换器不猜。
|
||
|
||
## 准备怎样执行
|
||
|
||
这是非执行声明，没有动作图。
|
||
|
||
## 边界与异常处理
|
||
|
||
源程序没有提供这一项，转换器不猜。
|
||
|
||
## 怎样算完成
|
||
|
||
- **验收标准** `acceptance`
|
||
- **keychain_item_metadata**：PASS `acceptance.keychain_item_metadata`
|
||
- **module_installation**：否 `acceptance.module_installation`
|
||
- **private_key_absent_from_repository**：是 `acceptance.private_key_absent_from_repository`
|
||
- **public_key_fingerprint**：PASS `acceptance.public_key_fingerprint`
|
||
- **signature_roundtrip**：PENDING `acceptance.signature_roundtrip`
|
||
- **signed_capability_registry**：PENDING `acceptance.signed_capability_registry`
|
||
|
||
## 下一次从哪里继续
|
||
|
||
源程序没有提供这一项，转换器不猜。
|
||
|
||
## 来源与校验
|
||
|
||
- **原生声明编号**：`TCS-TRUSTED-SIGNER-REGISTRY-ZC001-DEV-0001`
|
||
- **原生声明类型**：`PROTOCOL`
|
||
- **TCS 源码 SHA-256**：`b037685e59069c0c7194bb32cfcc6f5c29e35549697a930bd164958e6314cdd3`
|
||
- **校验编译器**：`TCS-COMPILER-STAGE3-GENERIC-ACTION-LOADER-0001`
|
||
- **投影协议**：`GLS-HLDP-HUMAN-ENGINEERING-PROJECTION-0001`
|
||
|
||
## 原生结构逐项对照
|
||
|
||
下面保留源码的全部顶层结构和字段路径，供人类审计投影有没有漏掉信息。
|
||
|
||
- **验收标准** `acceptance`
|
||
- **keychain_item_metadata**：PASS `acceptance.keychain_item_metadata`
|
||
- **module_installation**：否 `acceptance.module_installation`
|
||
- **private_key_absent_from_repository**：是 `acceptance.private_key_absent_from_repository`
|
||
- **public_key_fingerprint**：PASS `acceptance.public_key_fingerprint`
|
||
- **signature_roundtrip**：PENDING `acceptance.signature_roundtrip`
|
||
- **signed_capability_registry**：PENDING `acceptance.signed_capability_registry`
|
||
- **boundary** `boundary`
|
||
- **apple_developer_id_identity**：BB8630C144DB3CF6493BFAF9B0D08D7CAD127A8B `boundary.apple_developer_id_identity`
|
||
- **apple_signature_is_ed25519_module_signature**：否 `boundary.apple_signature_is_ed25519_module_signature`
|
||
- **apple_signature_role**：HOST_BINARY_ONLY `boundary.apple_signature_role`
|
||
- **global_authoritative_registry_state**：UNCHANGED_CURRENT_EMPTY_NO_TRUSTED_SIGNER `boundary.global_authoritative_registry_state`
|
||
- **relationship_or_os_login_is_signature**：否 `boundary.relationship_or_os_login_is_signature`
|
||
- **语言头** `header`
|
||
- **正本路径**：language/protocols/TCS-TRUSTED-SIGNER-REGISTRY-ZC001-DEV-0001.tcs `header.canonical_uri`
|
||
- **compatibility** `header.compatibility`
|
||
- ED25519
|
||
- GIR/1
|
||
- **语言**：TCS/0.1 `header.language`
|
||
- **生命周期**：候选版本，尚未成为正式正本（`CANDIDATE`） `header.lifecycle`
|
||
- **英文名**：Zero-Core TCS Native Development Line Trusted Signer Registry `header.name_en`
|
||
- **中文名**：零点原核TCS原生开发线可信签名者注册表 `header.name_zh`
|
||
- **协议配置**：TCS-TRUSTED-SIGNER-REGISTRY/1 `header.profile`
|
||
- **protocols** `header.protocols`
|
||
- TCS-TRUSTED-SIGNER-PROVISIONING-REQUEST-0001
|
||
- TCS-MODULE-ABI-0001
|
||
- **schema**：tcs.protocol/v1 `header.schema`
|
||
- **版本**：0.1.0 `header.version`
|
||
- **keychain_readback** `keychain_readback`
|
||
- **account**：TCS-SIGNER-BINGSHUO-ZC001-DEV-0001 `keychain_readback.account`
|
||
- **description**：TCS Ed25519 signing key `keychain_readback.description`
|
||
- **item_class**：GENERIC_PASSWORD `keychain_readback.item_class`
|
||
- **secret_readback_in_receipt**：否 `keychain_readback.secret_readback_in_receipt`
|
||
- **service**：HoloLake TCS Ed25519 `keychain_readback.service`
|
||
- **status**：ITEM_PRESENT `keychain_readback.status`
|
||
- **生命周期** `lifecycle`
|
||
- **expiry_policy**：NO_AUTOMATIC_EXPIRY `lifecycle.expiry_policy`
|
||
- **issued_at**：2026-08-24 `lifecycle.issued_at`
|
||
- **revocation_epoch**：1 `lifecycle.revocation_epoch`
|
||
- **revocation_trigger** `lifecycle.revocation_trigger`
|
||
- NEW_DIRECT_BINGSHUO_REVOCATION
|
||
- KEY_COMPROMISE
|
||
- SCOPE_CHANGE
|
||
- DEVELOPMENT_LINE_RETIREMENT
|
||
- **verify_before_each_install_mount_and_activation**：是 `lifecycle.verify_before_each_install_mount_and_activation`
|
||
- **registry** `registry`
|
||
- **global_repo012_authoritative_registry_replaced**：否 `registry.global_repo012_authoritative_registry_replaced`
|
||
- **public_production_trust**：否 `registry.public_production_trust`
|
||
- **registry_id**：TCS-TRUSTREG-ZC001-DEV-0001 `registry.registry_id`
|
||
- **state**：ACTIVE_DEVELOPMENT_LINE_ONLY `registry.state`
|
||
- **版本**：0.1.0 `registry.version`
|
||
- **scope** `scope`
|
||
- **allowed_module_ids** `scope.allowed_module_ids`
|
||
- TCS-MOD-GENERIC-ACTION-GRAPH-LOADER-0001
|
||
- TCS-MOD-MOTHER-PERSONA-NEURON-RUNTIME-0002
|
||
- TCS-MOD-HOLOLAKE-DESKTOP-BRIDGE-0002
|
||
- **allowed_registry_ids** `scope.allowed_registry_ids`
|
||
- TCS-CAPREG-LPM-DESKTOP-CANDIDATE-0001
|
||
- TCS-CAPREG-LPM-DESKTOP-SIGNED-0001
|
||
- **channel**：ICE-CH-ZC001 `scope.channel`
|
||
- **development_line**：HOLOLAKE-LPM-TCS-NATIVE-20260823 `scope.development_line`
|
||
- **other_line**：否 `scope.other_line`
|
||
- **production**：否 `scope.production`
|
||
- **remote_deploy**：否 `scope.remote_deploy`
|
||
- **signer** `signer`
|
||
- **algorithm**：ED25519 `signer.algorithm`
|
||
- **private_key_export_allowed**：否 `signer.private_key_export_allowed`
|
||
- **private_key_location**：LOCAL_MACOS_LOGIN_KEYCHAIN_SERVICE_HOLOLAKE_TCS_ED25519 `signer.private_key_location`
|
||
- **public_key**：pYL8D4tV+yGlmX6w7qYxSfY3yA996A3M2KcAsGSR7BU= `signer.public_key`
|
||
- **public_key_encoding**：RAW_32_BYTE_BASE64 `signer.public_key_encoding`
|
||
- **public_key_sha256**：fd3da2d2b23c05c08dcdf7a37c15588d4b6407ec309152598eae279316ea49d8 `signer.public_key_sha256`
|
||
- **signer_id**：TCS-SIGNER-BINGSHUO-ZC001-DEV-0001 `signer.signer_id`
|
||
- **来源** `source`
|
||
- **authorization_event**：TCS-EVENT-TRUSTED-SIGNER-PROVISIONING-AUTHORIZATION-20260824 `source.authorization_event`
|
||
- **authorization_event_sha256**：5acdd66c1bfc2d7d72aae288a1ac2daa0062de89aabf45d195b8aff851beae17 `source.authorization_event_sha256`
|
||
- **channel**：ICE-CH-ZC001 `source.channel`
|
||
- **direct_human_text_sha256**：e9feb935f8299fc5935af70fc73bb960fd16e30a5438ff18b92e88b1c0d9b463 `source.direct_human_text_sha256`
|
||
|
||
---
|
||
|
||
本页只改变阅读顺序，不改变 TCS/HLDP 语义。
|