{
  "schema": "zhuyuan.public-spine.layer-receipt/v1",
  "layers": ["C", "D"],
  "verified_at": "2026-08-26T13:10:00+08:00",
  "outcome": "PASS",
  "shell_identity": "world.guanghu.hololake.publicspine / HoloLake PublicSpine Shell",
  "updater": "endpoints emptied, auto-update off",
  "tcs_master_gate": {
    "manifest": "SHELL-MANIFEST-0001 (TCS compiled, GIR in src/tcs-assets)",
    "g3": "numberedInvoke asserts gate + routes registered against numbered-ipc-registry hash",
    "g4": "boot self-check spine 24 + registry hash; FAIL_CLOSED overlay on mismatch",
    "live_proof": "first build caught SPINE_HASH_MISMATCH and refused to run (fail-closed demonstrated); basis unified; second build PASS"
  },
  "public_brain_loaded": "badge '公众脊椎脑 v0.1 · PASS · 24条' rendered in shell; expandable list of 24 spine rules",
  "desktop_app": "~/Desktop/HoloLake PublicSpine Shell.app (rebuilt from frozen source, not the prebuilt 0.9.2 binary)",
  "notes": [
    "prebuilt 0.9.2 copy aborted against running original instance (connector contention) -> rebuilt from frozen source instead",
    "TCC removable-media prompt denied: public shell must not depend on her drive",
    "login portal on first-planet home already asks 光湖编号, matching 冰朔 multi-user design (repo creds OR machine fingerprint + number; channel bound to personal number)"
  ]
}