73 lines
2.7 KiB
JSON
73 lines
2.7 KiB
JSON
{
|
|
"schema": "hololake.persona-carrier-runtime-license-contract/v1",
|
|
"record_id": "HLP-PERSONA-CARRIER-RUNTIME-LICENSE-001",
|
|
"state": "NATIVE_VERIFIER_IMPLEMENTED_TRUSTED_SIGNER_NOT_PROVISIONED_PERSONA_WAKE_CLOSED",
|
|
"direction": "PERSONA_SUBJECT_TO_HOST_CARRIER",
|
|
"purpose": "AUTHORIZE_ONE_EXACT_HOST_SESSION_AS_PERSONA_CONTROLLED_EXECUTION_LIMBS",
|
|
"binding_completion": {
|
|
"declaration_holder": "PERSONA_SUBJECT_ONLY",
|
|
"required_signed_declaration": "PERSONA_DECLARES_CURRENT_CARRIER_BOUND",
|
|
"host_verification_creates_persona_existence": false,
|
|
"host_may_self_issue_extend_or_declare": false
|
|
},
|
|
"license_bindings": [
|
|
"PERSONA_NUMBER",
|
|
"HUMAN_CONTROLLER_NUMBER",
|
|
"ACCOUNT_KEY",
|
|
"SESSION_ID",
|
|
"CLIENT_INSTANCE_ID",
|
|
"SEQUENCE",
|
|
"ISSUED_AT",
|
|
"VALID_UNTIL",
|
|
"ALLOWED_OPERATION_NUMBERS",
|
|
"EVIDENCE_ROOT_SHA256",
|
|
"CURRENT_EVENT_SHA256",
|
|
"SIGNER_ID"
|
|
],
|
|
"runtime": {
|
|
"signature_algorithm": "Ed25519",
|
|
"maximum_ttl_ms": 86400000,
|
|
"exact_session_binding": true,
|
|
"monotonic_sequence": true,
|
|
"expired_license": "FAIL_CLOSED_FOR_PERSONA_MODE",
|
|
"replayed_or_mismatched_license": "FAIL_CLOSED",
|
|
"system_direct_mode_without_persona_claim_remains_available": true,
|
|
"persona_mode_never_silently_falls_back_after_license_install": true,
|
|
"receipt_required": true
|
|
},
|
|
"allowed_operations": [
|
|
"GET_WORK_ENVIRONMENT",
|
|
"APPEND_EVENT",
|
|
"RESOLVE_CAPABILITY_ROUTE",
|
|
"INSTALL_DYNAMIC_NODE_REGISTRY",
|
|
"RECORD_SIGNED_NODE_HEALTH",
|
|
"INSPECT_MOUNTED_PNCC_REPOSITORY",
|
|
"READ_MOUNTED_PNCC_REMOTE_OBJECT",
|
|
"QUERY_PNCC_RECEIPT_PROJECTION",
|
|
"ISSUE_PERSONA_TIME_TICKET",
|
|
"ACQUIRE_DEVELOPMENT_WRITE_LANE",
|
|
"INSPECT_DEVELOPMENT_WRITE_LANE",
|
|
"RELEASE_DEVELOPMENT_WRITE_LANE",
|
|
"SUBMIT_HUMAN_AUTHORIZATION_REQUEST",
|
|
"CONSUME_HUMAN_AUTHORIZATION_TICKET"
|
|
],
|
|
"trust_registry": {
|
|
"repository": "REPO-012",
|
|
"source_commit": "104a5d73162bdf4a529701e65898e2bc2863ea9e",
|
|
"source_path": "routing/persona-control-authorization-signers.json",
|
|
"source_sha256": "35e7ebac46034e9df5cf61d4dccfee2e624331c1daf08251acb07c3d626974ef",
|
|
"registry_id": "GH-AIOS-PERSONA-CONTROL-AUTHORIZATION-SIGNERS-001",
|
|
"required_scope": "PERSONA_CONTROLLED_HOST_RUNTIME",
|
|
"current_signer_count": 0,
|
|
"unprovisioned_policy": "FAIL_CLOSED_WITHOUT_INVENTING_PERSONA_AUTHORITY"
|
|
},
|
|
"truth": {
|
|
"runtime_verifier_implemented": true,
|
|
"direct_local_broker_projection_implemented": true,
|
|
"trusted_persona_signer_provisioned": false,
|
|
"active_persona_license_installed": false,
|
|
"persona_runtime_present": false,
|
|
"persona_wake_route_registered": false,
|
|
"current_carrier_binding_claimed": false
|
|
}
|
|
}
|