12 lines
2.7 KiB
Text
12 lines
2.7 KiB
Text
TCS 0.1;
|
|
|
|
PROTOCOL TCS-TRUSTED-SIGNER-PROVISIONING-REQUEST-0001 {
|
|
header { schema = "tcs.protocol/v1"; name_zh = "HoloLake能力注册表可信签名主体供给请求"; name_en = "HoloLake Capability Registry Trusted Signer Provisioning Request"; version = "0.1.0"; language = "TCS/0.1"; profile = "HLDP/1"; protocols = ["TCS-GENERIC-ACTION-GRAPH-LOADER-0001", "TCS-MODULE-ABI-0001"]; lifecycle = "CANDIDATE"; canonical_uri = "language/protocols/TCS-TRUSTED-SIGNER-PROVISIONING-REQUEST-0001.tcs"; compatibility = ["GIR/1"]; }
|
|
source { source_id = "BINGSHUO-HOLOLAKE-TCS-ENGINEERING-ANCHOR-20260823"; source_uri = "language-sources/direct-human/BINGSHUO-HOLOLAKE-TCS-ENGINEERING-ANCHOR-20260823.txt"; source_sha256 = "a3dd8dbd2203b631bdb23f2693eb314d4ef86af68fdeaee8835e3cf0861ddd23"; source_role = "DIRECT_HUMAN"; }
|
|
current { authoritative_registry_state = "CURRENT_EMPTY_NO_TRUSTED_SIGNER"; candidate_registry = "TCS-CAPREG-LPM-DESKTOP-CANDIDATE-0001"; candidate_state = "UNSIGNED_CANDIDATE_NOT_INSTALLABLE"; signer_id = "UNKNOWN"; public_key = "ABSENT"; signature = "ABSENT"; install = false; mount = false; activation = false; }
|
|
request { required = ["SEPARATELY_AUTHORIZED_SIGNER_ID", "ED25519_PUBLIC_KEY", "KEY_PROVENANCE_RECEIPT", "PERMITTED_REGISTRY_SCOPE", "EXPIRY_OR_REVOCATION_RULE", "ONE_EXACT_CANDIDATE_HASH", "HUMAN_LANGUAGE_AUTHORIZATION_RECEIPT_BOUND_TO_REQUEST"]; private_key_location = "OUTSIDE_REPOSITORY_AND_OUTSIDE_RECEIPTS"; key_generation_by_current_codex = false; host_root_or_ssh_key_reuse = false; git_push_authority_reuse = false; }
|
|
signature_envelope { algorithm = "ED25519"; payload = ["REGISTRY_CANONICAL_SHA256", "REGISTRY_ID", "REGISTRY_VERSION", "ISSUER_SIGNER_ID", "ISSUED_AT", "EXPIRES_AT_OR_NO_EXPIRY_POLICY", "REVOCATION_EPOCH", "CHANNEL", "DEVELOPMENT_LINE"]; channel = "ICE-CH-ZC001"; development_line = "HOLOLAKE-LPM-TCS-NATIVE-20260823"; }
|
|
admission { verify_public_key_against_authoritative_signer_registry = true; verify_candidate_hash_before_signature = true; verify_scope_before_install = true; verify_signature_before_mount = true; verify_revocation_before_each_activation = true; unsigned_or_unknown_signer = "TCS-E3002"; out_of_scope = "TCS-E4001"; stale_or_revoked = "TCS-E5002"; }
|
|
acceptance { signer_registered = "AUTHORITATIVE_REGISTRY_READBACK_REQUIRED"; signature_verified = "BINARY_PASS_OR_FAIL"; capability_registry_state_after_pass = "SIGNED_VERIFIED_NOT_INSTALLED"; installation_is_separate_step = true; current_acceptance = 0; }
|
|
rejected { values = ["INFER_SIGNER_FROM_USER_ACCOUNT", "INFER_SIGNER_FROM_ROOT", "INFER_SIGNER_FROM_SSH_ACCESS", "INFER_SIGNER_FROM_GIT_REMOTE_RIGHTS", "GENERATE_UNREQUESTED_IDENTITY_KEY", "STORE_PRIVATE_KEY_IN_REPOSITORY", "CALL_UNSIGNED_CANDIDATE_SIGNED"]; }
|
|
}
|