hololake-system-architecture/product-source/hololake-native-desktop/audit/donor-audit.json

94 lines
7.3 KiB
JSON

{
"schema": "hololake.donor-audit/v1",
"record_id": "HLP-DONOR-AUDIT-001",
"development_id": "DEV-20260811-010",
"audited_source_commit": "cff488bb033051909ae078991787e0c272a2d5eb",
"state": "THREE_DONOR_SECURITY_REVIEWS_RECORDED_LICENSE_PROVENANCE_AND_DATA_GATES_ACTIVE",
"truth_boundary": "This record permits capability and behavior extraction only. It does not authorize donor source copying, donor deletion, data migration, product UI implementation, release, or deployment.",
"donors": [
{
"path": "../hololake-platform",
"role": "READ_ONLY_ENGINEERING_CAPABILITY_DONOR",
"source_license": "AGPL-3.0-or-later",
"declared_authors": ["Luca Rossi"],
"code_reuse": "BLOCKED_PENDING_FILE_PROVENANCE_AND_PRODUCT_LICENSE_DECISION",
"security_scan": "FOCUSED_STATIC_REVIEW_COMPLETE_AT_AUDITED_COMMIT",
"validated_security_findings": [
"MODEL_TOOL_MUTATIONS_WITHOUT_EXACT_HUMAN_CONFIRMATION",
"UNAUTHENTICATED_LOOPBACK_MCP_TOOL_BRIDGE",
"RENDERER_WRITABLE_VAULT_AUTHORIZATION_REGISTRY",
"UNSCOPED_GIT_AND_RECURSIVE_FOLDER_COMMANDS",
"VAULT_SCANNERS_FOLLOW_EXTERNAL_SYMLINKS",
"MODEL_SECRET_NOT_BOUND_TO_APPROVED_ENDPOINT",
"SAFE_MODE_ADAPTER_ENABLES_ALL_TOOLS",
"WORKSPACE_CONFIG_SELECTS_HOST_ENVIRONMENT_SECRETS",
"UNPINNED_RUNTIME_EXTENSION_AND_EXECUTABLE_DISCOVERY"
]
},
{
"path": "../hololake-desktop",
"role": "READ_ONLY_KNOWLEDGE_UX_AND_BEHAVIOR_DONOR",
"source_license": "UNDECLARED_NO_LICENSE_FILE_OR_PACKAGE_FIELD_FOUND",
"code_reuse": "BLOCKED_PENDING_OWNERSHIP_AND_FILE_PROVENANCE",
"security_scan": "COMPLETE_AT_AUDITED_COMMIT",
"security_scan_id": "b7cae66e-20bb-4110-be9a-205600ed2f39"
},
{
"path": "../guanghu-knowledge-base",
"role": "READ_ONLY_KNOWLEDGE_UX_BEHAVIOR_AND_DATA_DONOR",
"source_license": "UNDECLARED_NO_LICENSE_FILE_OR_PACKAGE_FIELD_FOUND",
"code_reuse": "BLOCKED_PENDING_OWNERSHIP_AND_FILE_PROVENANCE",
"security_scan": "COMPLETE_AT_AUDITED_COMMIT",
"security_scan_id": "944b7cb0-fd2b-4310-889f-42062124e155"
}
],
"capability_dispositions": [
{"capability":"GH_AIOS_STAGE_ONE_IDENTITY_TASK_EVENT_RECEIPT_KERNEL","disposition":"CLEAN_ROOM_IMPLEMENT","target":"NEW_NATIVE_CONTAINER_FIRST_KERNEL"},
{"capability":"PROGRAMMING_AI_AND_LANGUAGE_MODEL_CONNECTORS","disposition":"REDESIGN","target":"AUTHENTICATED_CAPABILITY_DECLARED_CONNECTOR_RUNTIME"},
{"capability":"LAKE_LAMP_MULTI_AI_SHARED_TASK_BOARD","disposition":"KEEP_CONTRACT","target":"EXTERNALIZED_EVENT_CAUSAL_SUMMARY_AND_RECEIPT_PROJECTION"},
{"capability":"HUMAN_APPROVAL_CENTER","disposition":"REPLACE","target":"EXACT_SIGNED_EXPIRING_PAYLOAD_AND_READBACK"},
{"capability":"PAGE_FOLDER_TREE_AND_READING_HIERARCHY","disposition":"KEEP_UX_REFERENCE","target":"CLEAN_ROOM_NATIVE_IMPLEMENTATION"},
{"capability":"MARKDOWN_IMPORT_EXPORT_AND_DURABILITY","disposition":"KEEP_CONTRACT","target":"COLLISION_SAFE_SYMLINK_SAFE_MIGRATION"},
{"capability":"RICH_BLOCKS_TABLE_CODE_MATH_DIAGRAM_WHITEBOARD_SHEET","disposition":"INVESTIGATE","target":"DEPENDENCY_LICENSE_SECURITY_AND_WEBVIEW_PARITY_GATES"},
{"capability":"PROPERTIES_FILTER_SORT_AND_DATABASE_VIEWS","disposition":"REDESIGN","target":"HUMAN_FIRST_KNOWLEDGE_SURFACE"},
{"capability":"SEARCH_BACKLINKS_WIKILINKS_AND_ATTACHMENTS","disposition":"KEEP_CONTRACT","target":"LOCAL_FIRST_BOUNDED_GRAPH"},
{"capability":"GIT_VERSION_DIFF_RECOVERY_AND_RECEIPTS","disposition":"KEEP_CONTRACT","target":"AUTHENTICATED_EVIDENCE_LAYER_WITH_VALIDATED_PATHS_REVISIONS_AND_REMOTES"},
{"capability":"AGENT_CHAT_AND_CONFIRMATION","disposition":"REPLACE","target":"AGE_PARTNERSHIP_WITH_AUTHENTICATED_HUMAN_EXACT_IMMUTABLE_PAYLOAD_CONFIRMATION"},
{"capability":"WORLD_DOMAIN_IDENTITY_AND_NODE_SURFACES","disposition":"HIDE_AS_STAGE_ONE_FOUNDATION","target":"STAGE_TWO_VISIBLE_LANGUAGE_WORLD_NAVIGATION"},
{"capability":"UPSTREAM_AND_DONOR_UPDATERS","disposition":"RETIRE","target":"HOLOLAKE_SIGNED_HUMAN_OPT_IN_UPDATE_TRUST_ROOT"},
{"capability":"DEFAULT_TELEMETRY_AND_ERROR_REPORTING","disposition":"INVESTIGATE","target":"OFF_BY_DEFAULT_UNTIL_EXPLICIT_HUMAN_CONSENT_AND_DATA_CONTRACT"}
],
"data_classes": [
{"class":"KNOWLEDGE_CONTENT_AND_ATTACHMENTS","observed_locations":["Electron userData/data/knowledge-base","knowledge-base KB_REPO_PATH or kb-data","legacy user-selected vault paths"],"sensitivity":"HUMAN_OWNED_PRIVATE_BY_DEFAULT","migration":"BACKUP_INVENTORY_HASH_AND_REVERSIBLE_REHEARSAL_REQUIRED"},
{"class":"GIT_HISTORY_REMOTES_CHANNEL_STATE_AND_RECEIPTS","observed_locations":["knowledge repository .git","knowledge repository .hololake/channel-state.json","knowledge repository .hololake/receipts"],"sensitivity":"PROVENANCE_AUTHORITY_AND_NETWORK_SENSITIVE","migration":"SEPARATE_CONTENT_HISTORY_REMOTE_AUTHORITY_AND_RECEIPT_DECISIONS"},
{"class":"AGE_CONVERSATIONS_AND_PENDING_ACTIONS","observed_locations":["Electron userData/agent-conversations.json","knowledge-base HOLOLAKE_AGENT_STATE_PATH"],"sensitivity":"RELATIONSHIP_AND_ACTION_AUTHORITY_SENSITIVE","migration":"NO_BLIND_IMPORT_PENDING_ACTIONS_REQUIRE_EXPIRY_OWNERSHIP_AND_RECONFIRMATION"},
{"class":"MODEL_AND_SERVER_CREDENTIALS","observed_locations":["Electron userData/model-config.json","Electron userData/server-auth.json","Electron userData/node-keystore.json","Electron userData/hololake-git-askpass.sh"],"sensitivity":"SECRET_CRITICAL","migration":"NEVER_COPY_AS_PLAIN_DATA_REAUTHORIZE_PER_DESTINATION_AND_STORE_IN_OS_CREDENTIAL_VAULT"},
{"class":"SERVER_PROFILES_AND_UI_PREFERENCES","observed_locations":["Electron userData/server-profiles.json","browser localStorage hololake.layout.* and hololake.human-preferences.v1"],"sensitivity":"PERSONAL_CONFIGURATION","migration":"SCHEMA_VALIDATE_AND_ALLOW_HUMAN_RESET"},
{"class":"LEGACY_VAULT_TOOL_CONFIGURATION","observed_locations":["user-selected vaults","vault .agents/mcp_config.json","external MCP client configuration files"],"sensitivity":"EXECUTION_BOUNDARY_SENSITIVE","migration":"DO_NOT_MUTATE_OR_IMPORT_UNTIL_TOOL_AUTHORITY_AUDIT_COMPLETES"}
],
"prohibited_transplants": [
"ELECTRON_PRIVILEGED_PRELOAD_WITHOUT_NAVIGATION_AND_SENDER_ORIGIN_LOCK",
"UNAUTHENTICATED_LOOPBACK_CONTROL_API_OR_NULL_ORIGIN_CORS",
"STORED_MODEL_KEY_REBOUND_TO_RENDERER_SELECTED_BASE_URL",
"FIXED_PORT_TUNNEL_READINESS_INFERENCE",
"PERSISTENT_ALL_SCOPE_TOKEN_WITHOUT_REVOCATION",
"LEXICAL_ONLY_PATH_CONTAINMENT_OR_UNVALIDATED_GIT_REVISION_REMOTE",
"UPSTREAM_OR_DONOR_UPDATE_ENDPOINTS",
"DONOR_SOURCE_WITHOUT_FILE_PROVENANCE_AND_LICENSE_AUTHORIZATION"
,"MODEL_OUTPUT_DIRECT_WRITE_DELETE_WITHOUT_EXACT_EXPIRING_HUMAN_CONFIRMATION"
,"RENDERER_WRITABLE_FILESYSTEM_AUTHORIZATION_REGISTRY"
,"GIT_OR_RECURSIVE_FOLDER_OPERATIONS_WITHOUT_CANONICAL_REGISTERED_ROOT_BINDING"
,"VAULT_SCANNERS_THAT_FOLLOW_SYMLINKS_OUTSIDE_THE_CANONICAL_ROOT"
,"WORKSPACE_SELECTED_HOST_ENVIRONMENT_SECRET_INJECTION"
,"PROMPT_ONLY_SAFE_MODE_OR_ADAPTERS_THAT_IGNORE_PERMISSION_MODE"
,"RUNTIME_PACKAGE_ACQUISITION_OR_PATH_FIRST_EXECUTABLE_DISCOVERY"
],
"open_gates": [
"DIRECT_AND_TRANSITIVE_DEPENDENCY_LICENSE_SBOM",
"FILE_LEVEL_PROVENANCE",
"PHYSICAL_USER_DATA_INVENTORY_AND_BACKUP",
"REVERSIBLE_DATA_MIGRATION_REHEARSAL",
"VISUAL_DIRECTION_SELECTION"
],
"complete": false
}