Repository navigation
docs(permit): 将跨机许可接线判据改为平台中立的能力条款 - #176
Merged
Merged
Conversation
§3.1 由「Windows 服务身份必须显式声明」改写为平台中立的受保护部署能力条款 （G1 能保管 / G2 能在受保护临界区校验 / G3 能自判本机状态），并显式写出 「满足方式是示例，不构成定义」与「约束不因中立化而放宽」。 Windows 服务身份形态的原有条款（服务 SID 声明、不得新建可登录账号、不得切换 登录用户、写入者集合恰为该身份、pin 目录与许可存储目录域互相不包含）**逐字未改** 地保留在新增的 §3.1.1，仅适用范围收窄为「该平台形态」。 新增 §3.10：目标侧票据部署与控制端主机无关，控制端平台不得为目标侧增加任何 前置条件；与 §3.1 同属「角色由能力定义、不由主机定义」原则的两面。 中立化只改表述、不改约束：consume 前验签、目标侧自判本机状态、pin/撤销/期望 指纹/验签时钟由验签方从受保护锚点域读出后传入、批次身份三元组比较口径、 端点回环绑定、TTL 与时钟容差，均未改动。 依据：统调 01a1ae60 的 G-Q3 / G-Q4 裁定与条文草案 SamHMI/.agent/artifacts/T-DESKTOP-AUTHORITY-UNBLOCK-20261107/contract-clauses-draft.md。
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
目的
按统调
01a1ae60的 G-Q3 / G-Q4 裁定，把跨机许可接线指南的「受保护部署」判据从按操作系统列举改为平台中立的能力条款，并补上「目标侧票据部署与控制端主机无关」。
中立化改的是表述，不是约束 —— 本 PR 不触碰任何
lib/coordination/*.js实现，也不改动
protected-anchor.js/protected-permit-store.js的既有语义。改动范围
单文件：
docs/architecture/cross-machine-permit-wiring.md中立化前后必须一致的不变项 —— 逐条对照
consume()之前D-AUTH-001INV-01 与产品代码承载git grep 自验签零命中，确认该约束不在本文件范围targetHasProcess/targetHasPriorRun必须由目标侧自行判定(decision_id, instance_id, fingerprint)的比较口径lib/coordination/permit-bridge-endpoint.js:75LOOPBACK_ADDRESSES = ["127.0.0.1", "::1"]未动lib/coordination/permit-bridge-bounds.js:25（clockSkewToleranceMs = 2_000）／SamHMI 侧D-AUTH-001§5.1、§6逐字保留的机械核对：旧 §3.1 的条款主体与新 §3.1.1 逐行
diff为空 ——即「服务 SID 声明 / 不得新建可登录用户账号 / 不得切换登录用户 / 写入者集合恰为该服务身份 /
pin 目录与许可存储目录域互相不包含」这一组约束一个字符都没变，只是适用范围从
「通用要求」明确为「Windows 服务身份这一形态的附加条款」。
边界
lib/实现，不新增依赖，不改 CI。protected-anchor.js/protected-permit-store.js的既有语义（G-Q1 本轮未裁定「需要 Windows 原生签发凭据形态」，改这两处等于预先批准扩写禁改模块）。