bingshuo/hololake-system-architecture

Watch

冰朔 1a551201b8 feat(tcs): package and sign provider registry v2

2026-08-24 11:43:09 +08:00

6.6 KiB

Raw Blame History

LPM and Virtual Desktop Capability Registry V2 Signed Envelope · Human Engineering Language (English)

This is an English reading projection of validated native TCS/HLDP source. It is not a new canonical source and grants no execution authority.

What this is

This is a protocol declaration with identifier TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-SIGNED-0002 and version 0.2.0. The projector validates it with the Stage-1 compiler before changing its reading order.

Who is here

scope scope
- account_scoped：yes scope.account_scoped
- channel：ICE-CH-ZC001 scope.channel
- development_line：HOLOLAKE-LPM-TCS-NATIVE-20260823 scope.development_line
- global_repo012_registry_replaced：no scope.global_repo012_registry_replaced
- production：no scope.production
- remote_deploy：no scope.remote_deploy

Why this started

The native source does not provide this field; the projector does not guess.

What changed

The native source does not provide this field; the projector does not guess.

How it will execute

This is a non-executable declaration and has no action graph.

Boundaries and exception handling

The native source does not provide this field; the projector does not guess.

How completion is proven

The native source does not provide this field; the projector does not guess.

Where to continue next time

The native source does not provide this field; the projector does not guess.

Source and verification

Native declaration identifier: TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-SIGNED-0002
Native declaration kind: PROTOCOL
TCS source SHA-256: f2a72590b17b98b8447c0e2c80682330fc179bbc2faa0e63213572ee525414ad
Validation compiler: TCS-COMPILER-STAGE4-CORE-STATE-PRIMITIVES-0001
Projection protocol: GLS-HLDP-HUMAN-ENGINEERING-PROJECTION-0001

Complete native structure cross-reference

All top-level structures and field paths are retained below so a reader can audit whether the projection omitted information.

admission admission
- activation_requires_separate_mount_and_replay：yes admission.activation_requires_separate_mount_and_replay
- current_state：SIGNED_VERIFIED_NOT_INSTALLED admission.current_state
- desktop_provider_execution：PASS admission.desktop_provider_execution
- host_hash_match：yes admission.host_hash_match
- install_admitted：yes admission.install_admitted
- lpm_provider_execution：PASS admission.lpm_provider_execution
- module_v3_hashes_match：yes admission.module_v3_hashes_match
- mount_requires_separate_install_readback：yes admission.mount_requires_separate_install_readback
- provider_hashes_match：yes admission.provider_hashes_match
boundary boundary
- fourth_generation_is_machine_runtime_only：yes boundary.fourth_generation_is_machine_runtime_only
- installation_is_not_mount：yes boundary.installation_is_not_mount
- mount_is_not_activation：yes boundary.mount_is_not_activation
- no_real_macos_desktop_action：yes boundary.no_real_macos_desktop_action
- signature_is_not_installation：yes boundary.signature_is_not_installation
- tcs_is_primary_language：yes boundary.tcs_is_primary_language
diagnostic diagnostic
- actual_keychain_format：PKCS8_DER_48_BYTES diagnostic.actual_keychain_format
- first_attempt_assumed_raw_private_key：yes diagnostic.first_attempt_assumed_raw_private_key
- first_attempt_public_verification：FAIL_REJECTED diagnostic.first_attempt_public_verification
- invalid_signature_not_admitted：yes diagnostic.invalid_signature_not_admitted
- private_key_exported_to_mobile_drive：no diagnostic.private_key_exported_to_mobile_drive
- private_key_exported_to_repository：no diagnostic.private_key_exported_to_repository
- regenerated_signature_public_verification：PASS diagnostic.regenerated_signature_public_verification
header header
- canonical source path：language/protocols/TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-SIGNED-0002.tcs header.canonical_uri
- compatibility header.compatibility
  - TCS-COMPILER-STAGE4-CORE-STATE-PRIMITIVES-0001
  - GIR/1
- language：TCS/0.1 header.language
- lifecycle：SIGNED_VERIFIED_NOT_INSTALLED header.lifecycle
- English name：LPM and Virtual Desktop Capability Registry V2 Signed Envelope header.name_en
- Chinese name：LPM与虚拟桌面能力注册表第二版签名封装 header.name_zh
- profile：HLDP-NP/1 header.profile
- schema：tcs.protocol/v1 header.schema
- version：0.2.0 header.version
payload payload
- gir_sha256：90a88c28779396f491e47df4355090f1f8a66c9d8526d35a2e30485b80dbed66 payload.gir_sha256
- path：language/protocols/TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-PAYLOAD-0002.tcs payload.path
- registry_id：TCS-CAPREG-LPM-DESKTOP-SIGNED-0002 payload.registry_id
- sha256：0b049b8ea3bc466e8751865c6906cef86ed8f10e5b2fd1a01be8dc79e1a95753 payload.sha256
scope scope
- account_scoped：yes scope.account_scoped
- channel：ICE-CH-ZC001 scope.channel
- development_line：HOLOLAKE-LPM-TCS-NATIVE-20260823 scope.development_line
- global_repo012_registry_replaced：no scope.global_repo012_registry_replaced
- production：no scope.production
- remote_deploy：no scope.remote_deploy
signature signature
- expiry_policy：NO_AUTOMATIC_EXPIRY signature.expiry_policy
- issued_at：2026-08-24T03:35:00Z signature.issued_at
- message_path：build/TCS-CAPREG-LPM-DESKTOP-SIGNED-0002.signature-message.txt signature.message_path
- message_sha256：ebc127f2ccd92a9905f8519feecc24a3e9059dd507c62b82974c8cd9af370688 signature.message_sha256
- public_key_raw_base64：pYL8D4tV+yGlmX6w7qYxSfY3yA996A3M2KcAsGSR7BU= signature.public_key_raw_base64
- public_key_sha256：fd3da2d2b23c05c08dcdf7a37c15588d4b6407ec309152598eae279316ea49d8 signature.public_key_sha256
- revocation_epoch：2 signature.revocation_epoch
- scheme：Ed25519 signature.scheme
- signature_base64：fCDRVsU4ub1S7Civu7ooGWO+4kPza/LGoHUEdDiTX7b/P/dcw2P3ltZTTDzy24nLsWsWrhjVz0xPKFK/On+OBg== signature.signature_base64
- signer_id：TCS-SIGNER-BINGSHUO-ZC001-DEV-0001 signature.signer_id
- verification：PASS_WITH_PUBLIC_KEY_ONLY signature.verification

This page changes only the reading order; it does not change TCS/HLDP semantics.