{"schemaVersion":"developer.reits.tech/d05-r49-external-receipt-verification-target-inspection-stopped-install-admission-plane/v1","status":"D05_R49_VERIFICATION_TARGET_INSPECTION_AND_STOPPED_INSTALL_ADMISSION_IMPLEMENTED_EXTERNAL_INPUTS_ABSENT","generatedAt":"2026-07-28T14:15:00Z","knife":{"id":"D05-R49","title":"D05-R49 外部回执验签、专用主机现场复核与停止态安装事务准入","predecessor":"D05-R48","next":"D05-R50","nextTitle":"D05-R50 首份真实回执不可变导入、专用目标证明接入与安装候选窗口编排","implementationComplete":true,"countsAsProgramAcceptance":false},"formalProgress":{"acceptedKnives":4,"totalKnives":36,"acceptedThrough":"D04","currentKnife":"D05","currentOrdinal":5,"remainingIncludingCurrent":32,"d05GatesSatisfied":0,"d05GatesRequired":11,"d04AcceptedAt":"2026-07-20T16:23:57+08:00","formalProgressStalledDurationAtAudit":"8 天以上"},"engineeringProgress":{"completedSubphasesBeforeR49":48,"currentSubphase":"D05-R49","completedSubphasesIncludingR49":49,"completedRange":"D05-R01..D05-R49"},"observedBaseline":{"observedAt":"2026-07-28T22:03:00+08:00","predecessorProductionSource":"2e35de4729acc2cd36674977821b8610dba41b2f","portalRemoteMatchesLocal":true,"externalReceiptObjectsFound":0,"dedicatedTargetObjectsFound":0,"controllerUnitFound":false,"controllerProcessFound":false,"listener8110Found":false,"currentPortalListener8100Found":true,"currentHostUid991Owner":"redis6","currentHostGid991Owner":"nginx"},"summary":{"gatesSatisfied":0,"gatesRequired":11,"receiptsReceived":0,"receiptsRequired":6,"receiptsVerified":0,"keysResolved":0,"keysRequired":12,"dedicatedTargetsSelected":0,"dedicatedTargetsRequired":1,"currentHostChecksPassed":5,"currentHostChecksRequired":12,"installStagesCompleted":0,"installStagesRequired":10,"admissionGatesPassed":0,"admissionGatesRequired":9,"rollbackCheckpointsMaterialized":0,"controlSurfaces":27,"validationCasesPassed":312,"validationCasesTotal":312,"productionEffects":0},"receiptContract":{"schemaVersion":"developer.reits.tech/d05-r48-external-authorization-receipt/v1","atomicSetRequired":true,"partialSetGrantsAuthority":false,"requiredFields":["receiptId","laneId","ownerId","gateScope","taskPacketDigest","sourceKitDigest","targetProfileId","subject","decision","constraints","issuedAt","expiresAt","nonce","idempotencyKey","signerKeyRef","signatureAlgorithm","signature","witnessKeyRef","witnessSignature","rollbackWindowRef","budgetEnvelope","productionEffectLimit","previousReceiptDigest","receiptDigest"],"maxValiditySeconds":1800,"signerAndWitnessMustDiffer":true,"portalCanSign":false},"receiptVerificationLanes":[{"ordinal":1,"laneId":"AUTH-PLATFORM","owner":"Platform SRE","gates":["D05-G01","D05-G07"],"expectedReceiptId":"d05-r48-auth-platform-receipt-v1","expectedTaskPacketDigest":"sha256:e48760f20cc9479d8fdfaa26a4aac30aaeb21ce13796a95f7a281007475f18d1","requiredFields":["receiptId","laneId","ownerId","gateScope","taskPacketDigest","sourceKitDigest","targetProfileId","subject","decision","constraints","issuedAt","expiresAt","nonce","idempotencyKey","signerKeyRef","signatureAlgorithm","signature","witnessKeyRef","witnessSignature","rollbackWindowRef","budgetEnvelope","productionEffectLimit","previousReceiptDigest","receiptDigest"],"receiptReceived":false,"receiptObjectRef":null,"receiptDigest":null,"signerKeyRef":null,"witnessKeyRef":null,"signerKeyResolved":false,"witnessKeyResolved":false,"signerVerified":false,"witnessVerified":false,"freshnessVerified":false,"replaySafe":false,"scopeBound":false,"verificationChecks":[{"id":"AUTH-PLATFORM-VERIFY-01","label":"结构与 24 字段完整性","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-PLATFORM-VERIFY-02","label":"回执身份与责任泳道","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-PLATFORM-VERIFY-03","label":"任务包和 Source Kit 摘要","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-PLATFORM-VERIFY-04","label":"Gate 与资源范围","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-PLATFORM-VERIFY-05","label":"签名 KeyRef 可解析性","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"外部可解析 KeyRef"},{"id":"AUTH-PLATFORM-VERIFY-06","label":"责任人签名验真","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-PLATFORM-VERIFY-07","label":"独立见证 KeyRef 与签名","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"外部可解析 KeyRef"},{"id":"AUTH-PLATFORM-VERIFY-08","label":"签发时间、过期与时钟偏差","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-PLATFORM-VERIFY-09","label":"nonce 与 idempotency key 重放","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-PLATFORM-VERIFY-10","label":"回滚窗口、预算与最终摘要","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"}],"state":"NOT_RECEIVED_FAIL_CLOSED","firstFailure":"RECEIPT_OBJECT_ABSENT","productionEffectCount":0},{"ordinal":2,"laneId":"AUTH-MOBILE","owner":"Mobile Platform","gates":["D05-G02"],"expectedReceiptId":"d05-r48-auth-mobile-receipt-v1","expectedTaskPacketDigest":"sha256:b5608cbcd7216f49595b6b986bbe0c8a84c2df6ab44696a3d3463827e871662f","requiredFields":["receiptId","laneId","ownerId","gateScope","taskPacketDigest","sourceKitDigest","targetProfileId","subject","decision","constraints","issuedAt","expiresAt","nonce","idempotencyKey","signerKeyRef","signatureAlgorithm","signature","witnessKeyRef","witnessSignature","rollbackWindowRef","budgetEnvelope","productionEffectLimit","previousReceiptDigest","receiptDigest"],"receiptReceived":false,"receiptObjectRef":null,"receiptDigest":null,"signerKeyRef":null,"witnessKeyRef":null,"signerKeyResolved":false,"witnessKeyResolved":false,"signerVerified":false,"witnessVerified":false,"freshnessVerified":false,"replaySafe":false,"scopeBound":false,"verificationChecks":[{"id":"AUTH-MOBILE-VERIFY-01","label":"结构与 24 字段完整性","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-MOBILE-VERIFY-02","label":"回执身份与责任泳道","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-MOBILE-VERIFY-03","label":"任务包和 Source Kit 摘要","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-MOBILE-VERIFY-04","label":"Gate 与资源范围","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-MOBILE-VERIFY-05","label":"签名 KeyRef 可解析性","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"外部可解析 KeyRef"},{"id":"AUTH-MOBILE-VERIFY-06","label":"责任人签名验真","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-MOBILE-VERIFY-07","label":"独立见证 KeyRef 与签名","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"外部可解析 KeyRef"},{"id":"AUTH-MOBILE-VERIFY-08","label":"签发时间、过期与时钟偏差","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-MOBILE-VERIFY-09","label":"nonce 与 idempotency key 重放","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-MOBILE-VERIFY-10","label":"回滚窗口、预算与最终摘要","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"}],"state":"NOT_RECEIVED_FAIL_CLOSED","firstFailure":"RECEIPT_OBJECT_ABSENT","productionEffectCount":0},{"ordinal":3,"laneId":"AUTH-SECURITY","owner":"Security","gates":["D05-G03"],"expectedReceiptId":"d05-r48-auth-security-receipt-v1","expectedTaskPacketDigest":"sha256:93d1527fcb86b00c251378b5dae5fe4ce7d0f37f3c18a7902b4504878b8bae9a","requiredFields":["receiptId","laneId","ownerId","gateScope","taskPacketDigest","sourceKitDigest","targetProfileId","subject","decision","constraints","issuedAt","expiresAt","nonce","idempotencyKey","signerKeyRef","signatureAlgorithm","signature","witnessKeyRef","witnessSignature","rollbackWindowRef","budgetEnvelope","productionEffectLimit","previousReceiptDigest","receiptDigest"],"receiptReceived":false,"receiptObjectRef":null,"receiptDigest":null,"signerKeyRef":null,"witnessKeyRef":null,"signerKeyResolved":false,"witnessKeyResolved":false,"signerVerified":false,"witnessVerified":false,"freshnessVerified":false,"replaySafe":false,"scopeBound":false,"verificationChecks":[{"id":"AUTH-SECURITY-VERIFY-01","label":"结构与 24 字段完整性","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-SECURITY-VERIFY-02","label":"回执身份与责任泳道","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-SECURITY-VERIFY-03","label":"任务包和 Source Kit 摘要","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-SECURITY-VERIFY-04","label":"Gate 与资源范围","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-SECURITY-VERIFY-05","label":"签名 KeyRef 可解析性","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"外部可解析 KeyRef"},{"id":"AUTH-SECURITY-VERIFY-06","label":"责任人签名验真","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-SECURITY-VERIFY-07","label":"独立见证 KeyRef 与签名","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"外部可解析 KeyRef"},{"id":"AUTH-SECURITY-VERIFY-08","label":"签发时间、过期与时钟偏差","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-SECURITY-VERIFY-09","label":"nonce 与 idempotency key 重放","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-SECURITY-VERIFY-10","label":"回滚窗口、预算与最终摘要","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"}],"state":"NOT_RECEIVED_FAIL_CLOSED","firstFailure":"RECEIPT_OBJECT_ABSENT","productionEffectCount":0},{"ordinal":4,"laneId":"AUTH-ARCH","owner":"Global Architecture","gates":["D05-G04"],"expectedReceiptId":"d05-r48-auth-arch-receipt-v1","expectedTaskPacketDigest":"sha256:1a6071513608c494b155245280283b40cd034f06c25197ffddcf93947911701a","requiredFields":["receiptId","laneId","ownerId","gateScope","taskPacketDigest","sourceKitDigest","targetProfileId","subject","decision","constraints","issuedAt","expiresAt","nonce","idempotencyKey","signerKeyRef","signatureAlgorithm","signature","witnessKeyRef","witnessSignature","rollbackWindowRef","budgetEnvelope","productionEffectLimit","previousReceiptDigest","receiptDigest"],"receiptReceived":false,"receiptObjectRef":null,"receiptDigest":null,"signerKeyRef":null,"witnessKeyRef":null,"signerKeyResolved":false,"witnessKeyResolved":false,"signerVerified":false,"witnessVerified":false,"freshnessVerified":false,"replaySafe":false,"scopeBound":false,"verificationChecks":[{"id":"AUTH-ARCH-VERIFY-01","label":"结构与 24 字段完整性","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-ARCH-VERIFY-02","label":"回执身份与责任泳道","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-ARCH-VERIFY-03","label":"任务包和 Source Kit 摘要","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-ARCH-VERIFY-04","label":"Gate 与资源范围","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-ARCH-VERIFY-05","label":"签名 KeyRef 可解析性","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"外部可解析 KeyRef"},{"id":"AUTH-ARCH-VERIFY-06","label":"责任人签名验真","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-ARCH-VERIFY-07","label":"独立见证 KeyRef 与签名","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"外部可解析 KeyRef"},{"id":"AUTH-ARCH-VERIFY-08","label":"签发时间、过期与时钟偏差","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-ARCH-VERIFY-09","label":"nonce 与 idempotency key 重放","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-ARCH-VERIFY-10","label":"回滚窗口、预算与最终摘要","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"}],"state":"NOT_RECEIVED_FAIL_CLOSED","firstFailure":"RECEIPT_OBJECT_ABSENT","productionEffectCount":0},{"ordinal":5,"laneId":"AUTH-SUPPLY","owner":"Supply Chain + Release","gates":["D05-G09"],"expectedReceiptId":"d05-r48-auth-supply-receipt-v1","expectedTaskPacketDigest":"sha256:1477944b1e6a12251423da3d6d10fff7031abd60459e81e4f4864bcbf510424f","requiredFields":["receiptId","laneId","ownerId","gateScope","taskPacketDigest","sourceKitDigest","targetProfileId","subject","decision","constraints","issuedAt","expiresAt","nonce","idempotencyKey","signerKeyRef","signatureAlgorithm","signature","witnessKeyRef","witnessSignature","rollbackWindowRef","budgetEnvelope","productionEffectLimit","previousReceiptDigest","receiptDigest"],"receiptReceived":false,"receiptObjectRef":null,"receiptDigest":null,"signerKeyRef":null,"witnessKeyRef":null,"signerKeyResolved":false,"witnessKeyResolved":false,"signerVerified":false,"witnessVerified":false,"freshnessVerified":false,"replaySafe":false,"scopeBound":false,"verificationChecks":[{"id":"AUTH-SUPPLY-VERIFY-01","label":"结构与 24 字段完整性","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-SUPPLY-VERIFY-02","label":"回执身份与责任泳道","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-SUPPLY-VERIFY-03","label":"任务包和 Source Kit 摘要","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-SUPPLY-VERIFY-04","label":"Gate 与资源范围","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-SUPPLY-VERIFY-05","label":"签名 KeyRef 可解析性","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"外部可解析 KeyRef"},{"id":"AUTH-SUPPLY-VERIFY-06","label":"责任人签名验真","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-SUPPLY-VERIFY-07","label":"独立见证 KeyRef 与签名","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"外部可解析 KeyRef"},{"id":"AUTH-SUPPLY-VERIFY-08","label":"签发时间、过期与时钟偏差","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-SUPPLY-VERIFY-09","label":"nonce 与 idempotency key 重放","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-SUPPLY-VERIFY-10","label":"回滚窗口、预算与最终摘要","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"}],"state":"NOT_RECEIVED_FAIL_CLOSED","firstFailure":"RECEIPT_OBJECT_ABSENT","productionEffectCount":0},{"ordinal":6,"laneId":"AUTH-FINOPS","owner":"FinOps","gates":["D05-G01","D05-G02","D05-G07"],"expectedReceiptId":"d05-r48-auth-finops-receipt-v1","expectedTaskPacketDigest":"sha256:ab884acc1a81fc193bd8574936d8464245ee4f89f1b65c8fcf26b72c185c7167","requiredFields":["receiptId","laneId","ownerId","gateScope","taskPacketDigest","sourceKitDigest","targetProfileId","subject","decision","constraints","issuedAt","expiresAt","nonce","idempotencyKey","signerKeyRef","signatureAlgorithm","signature","witnessKeyRef","witnessSignature","rollbackWindowRef","budgetEnvelope","productionEffectLimit","previousReceiptDigest","receiptDigest"],"receiptReceived":false,"receiptObjectRef":null,"receiptDigest":null,"signerKeyRef":null,"witnessKeyRef":null,"signerKeyResolved":false,"witnessKeyResolved":false,"signerVerified":false,"witnessVerified":false,"freshnessVerified":false,"replaySafe":false,"scopeBound":false,"verificationChecks":[{"id":"AUTH-FINOPS-VERIFY-01","label":"结构与 24 字段完整性","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-FINOPS-VERIFY-02","label":"回执身份与责任泳道","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-FINOPS-VERIFY-03","label":"任务包和 Source Kit 摘要","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-FINOPS-VERIFY-04","label":"Gate 与资源范围","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-FINOPS-VERIFY-05","label":"签名 KeyRef 可解析性","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"外部可解析 KeyRef"},{"id":"AUTH-FINOPS-VERIFY-06","label":"责任人签名验真","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-FINOPS-VERIFY-07","label":"独立见证 KeyRef 与签名","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"外部可解析 KeyRef"},{"id":"AUTH-FINOPS-VERIFY-08","label":"签发时间、过期与时钟偏差","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-FINOPS-VERIFY-09","label":"nonce 与 idempotency key 重放","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"},{"id":"AUTH-FINOPS-VERIFY-10","label":"回滚窗口、预算与最终摘要","state":"BLOCKED_NO_RECEIPT","observed":null,"expected":"与 R48 合同精确一致"}],"state":"NOT_RECEIVED_FAIL_CLOSED","firstFailure":"RECEIPT_OBJECT_ABSENT","productionEffectCount":0}],"keyResolutionContract":{"resolverMode":"EXTERNAL_READ_ONLY","supportedAlgorithms":["ECDSA_P256_SHA256_P1363","ED25519"],"requiredTrustDomains":["owner-authority","independent-witness"],"requiredKeysPerLane":2,"requiredKeys":12,"resolvedKeys":0,"privateKeyImportAllowed":false,"portalSigningAllowed":false,"unknownKeyRefDecision":"DENY","revokedKeyDecision":"DENY","algorithmMismatchDecision":"DENY","state":"HELD_NO_EXTERNAL_KEYREFS"},"targetInspection":{"profileId":"runner-controller-dedicated-staging-control-plane-v1","currentHost":"ip-172-31-19-46.ap-southeast-2.compute.internal","currentHostDecision":"DENY_SHARED_PRODUCTION_PORTAL_HOST","currentHostChecksPassed":5,"currentHostChecksRequired":12,"currentHostEligible":false,"dedicatedTargetRef":null,"attestationObjectRef":null,"attestationFields":["attestationId","profileId","hostRef","environment","hostClass","region","observedAt","expiresAt","collectorIdentityRef","reviewerIdentityRef","releaseDigest","sourceKitDigest","checkSetDigest","networkBoundaryDigest","rollbackRootRef","nonce","attestationDigest","reviewerSignature"],"attestationDigest":null,"independentReviewRequired":true,"independentReviewReceipt":null,"targetLockDigest":null,"state":"HELD_DEDICATED_TARGET_AND_ATTESTATION_ABSENT","firstFailure":"DEDICATED_TARGET_REF_ABSENT"},"targetInspectionChecks":[{"ordinal":1,"id":"HOST-01","label":"主机类别","currentHostObserved":"SHARED_PRODUCTION_PORTAL_HOST","currentHostVerdict":"FAIL","dedicatedTargetObserved":null,"dedicatedTargetVerdict":"NOT_OBSERVED","state":"BLOCKED_NO_DEDICATED_TARGET"},{"ordinal":2,"id":"HOST-02","label":"环境","currentHostObserved":"production","currentHostVerdict":"FAIL","dedicatedTargetObserved":null,"dedicatedTargetVerdict":"NOT_OBSERVED","state":"BLOCKED_NO_DEDICATED_TARGET"},{"ordinal":3,"id":"HOST-03","label":"生产标记","currentHostObserved":"/etc/reits-production-host PRESENT","currentHostVerdict":"FAIL","dedicatedTargetObserved":null,"dedicatedTargetVerdict":"NOT_OBSERVED","state":"BLOCKED_NO_DEDICATED_TARGET"},{"ordinal":4,"id":"HOST-04","label":"Portal 服务","currentHostObserved":"reits-developer-portal active","currentHostVerdict":"FAIL","dedicatedTargetObserved":null,"dedicatedTargetVerdict":"NOT_OBSERVED","state":"BLOCKED_NO_DEDICATED_TARGET"},{"ordinal":5,"id":"HOST-05","label":"端口 8100","currentHostObserved":"1 listener","currentHostVerdict":"FAIL","dedicatedTargetObserved":null,"dedicatedTargetVerdict":"NOT_OBSERVED","state":"BLOCKED_NO_DEDICATED_TARGET"},{"ordinal":6,"id":"HOST-06","label":"端口 8110","currentHostObserved":"0 listeners","currentHostVerdict":"PASS","dedicatedTargetObserved":null,"dedicatedTargetVerdict":"NOT_OBSERVED","state":"BLOCKED_NO_DEDICATED_TARGET"},{"ordinal":7,"id":"HOST-07","label":"UID 991","currentHostObserved":"redis6","currentHostVerdict":"FAIL","dedicatedTargetObserved":null,"dedicatedTargetVerdict":"NOT_OBSERVED","state":"BLOCKED_NO_DEDICATED_TARGET"},{"ordinal":8,"id":"HOST-08","label":"GID 991","currentHostObserved":"nginx","currentHostVerdict":"FAIL","dedicatedTargetObserved":null,"dedicatedTargetVerdict":"NOT_OBSERVED","state":"BLOCKED_NO_DEDICATED_TARGET"},{"ordinal":9,"id":"HOST-09","label":"Controller identity","currentHostObserved":"ABSENT","currentHostVerdict":"PASS","dedicatedTargetObserved":null,"dedicatedTargetVerdict":"NOT_OBSERVED","state":"BLOCKED_NO_DEDICATED_TARGET"},{"ordinal":10,"id":"HOST-10","label":"运行清单","currentHostObserved":"ABSENT","currentHostVerdict":"PASS","dedicatedTargetObserved":null,"dedicatedTargetVerdict":"NOT_OBSERVED","state":"BLOCKED_NO_DEDICATED_TARGET"},{"ordinal":11,"id":"HOST-11","label":"安装根目录","currentHostObserved":"ABSENT","currentHostVerdict":"PASS","dedicatedTargetObserved":null,"dedicatedTargetVerdict":"NOT_OBSERVED","state":"BLOCKED_NO_DEDICATED_TARGET"},{"ordinal":12,"id":"HOST-12","label":"Unit / process","currentHostObserved":"ABSENT / 0","currentHostVerdict":"PASS","dedicatedTargetObserved":null,"dedicatedTargetVerdict":"NOT_OBSERVED","state":"BLOCKED_NO_DEDICATED_TARGET"}],"installationTransaction":{"transactionId":null,"state":"HELD_NOT_ARMED","stagesRequired":10,"stagesCompleted":0,"windowRequired":true,"maxWindowSeconds":1800,"stoppedStateRequired":true,"systemdEnabledAllowed":false,"serviceStartAllowed":false,"listener8110Allowed":false,"paidResourceCreationAllowed":false,"rollbackCheckpointsRequired":10,"rollbackCheckpointsMaterialized":0,"firstFailure":"VERIFIED_RECEIPTS_0_OF_6"},"installationStages":[{"ordinal":1,"id":"INSTALL-01","title":"冻结输入与窗口","exit":"锁定 Release、Source Kit、六回执集合、目标证明与最大三十分钟窗口","state":"HELD_NOT_ARMED","inputDigest":null,"outputDigest":null,"rollbackCheckpoint":"ROLLBACK-01","mutationAllowed":false,"productionEffectCount":0},{"ordinal":2,"id":"INSTALL-02","title":"采集停止态基线","exit":"独立记录 identity、目录、unit、process、8100、8110 和网络边界","state":"HELD_NOT_ARMED","inputDigest":null,"outputDigest":null,"rollbackCheckpoint":"ROLLBACK-02","mutationAllowed":false,"productionEffectCount":0},{"ordinal":3,"id":"INSTALL-03","title":"创建专用身份","exit":"仅在 UID/GID 均未占用时创建不可登录的 Controller 身份","state":"HELD_NOT_ARMED","inputDigest":null,"outputDigest":null,"rollbackCheckpoint":"ROLLBACK-03","mutationAllowed":false,"productionEffectCount":0},{"ordinal":4,"id":"INSTALL-04","title":"建立最小目录树","exit":"只创建 manifest 声明的 install、config、state、journal 与 rollback 根","state":"HELD_NOT_ARMED","inputDigest":null,"outputDigest":null,"rollbackCheckpoint":"ROLLBACK-04","mutationAllowed":false,"productionEffectCount":0},{"ordinal":5,"id":"INSTALL-05","title":"物化配置与 SecretRef","exit":"写入内容寻址配置，秘密只保留引用，禁止明文落盘","state":"HELD_NOT_ARMED","inputDigest":null,"outputDigest":null,"rollbackCheckpoint":"ROLLBACK-05","mutationAllowed":false,"productionEffectCount":0},{"ordinal":6,"id":"INSTALL-06","title":"校验制品与来源包","exit":"逐文件重算十项 Source Kit、SBOM、配置和迁移摘要","state":"HELD_NOT_ARMED","inputDigest":null,"outputDigest":null,"rollbackCheckpoint":"ROLLBACK-06","mutationAllowed":false,"productionEffectCount":0},{"ordinal":7,"id":"INSTALL-07","title":"安装 stopped systemd unit","exit":"安装后必须 disabled、inactive，ExecStart 不得被调用","state":"HELD_NOT_ARMED","inputDigest":null,"outputDigest":null,"rollbackCheckpoint":"ROLLBACK-07","mutationAllowed":false,"productionEffectCount":0},{"ordinal":8,"id":"INSTALL-08","title":"停止态独立复核","exit":"再次证明无 process、无 8110 listener、无生产调用和无付费资源","state":"HELD_NOT_ARMED","inputDigest":null,"outputDigest":null,"rollbackCheckpoint":"ROLLBACK-08","mutationAllowed":false,"productionEffectCount":0},{"ordinal":9,"id":"INSTALL-09","title":"封存回滚检查点","exit":"逐项记录本事务创建对象并生成反向撤销顺序与期限","state":"HELD_NOT_ARMED","inputDigest":null,"outputDigest":null,"rollbackCheckpoint":"ROLLBACK-09","mutationAllowed":false,"productionEffectCount":0},{"ordinal":10,"id":"INSTALL-10","title":"签发安装候选回执","exit":"只签发 capability-free 候选回执；不启动、不监听、不推进 Gate","state":"HELD_NOT_ARMED","inputDigest":null,"outputDigest":null,"rollbackCheckpoint":"ROLLBACK-10","mutationAllowed":false,"productionEffectCount":0}],"rollbackCheckpoints":[{"id":"ROLLBACK-01","stageId":"INSTALL-01","reverseOrdinal":10,"createdObjectRef":null,"deletionAuthority":"TRANSACTION_CREATED_OBJECTS_ONLY","protectedObjects":["reits-developer-portal","redis6","nginx","8100-listener","existing-production-data"],"state":"NOT_MATERIALIZED"},{"id":"ROLLBACK-02","stageId":"INSTALL-02","reverseOrdinal":9,"createdObjectRef":null,"deletionAuthority":"TRANSACTION_CREATED_OBJECTS_ONLY","protectedObjects":["reits-developer-portal","redis6","nginx","8100-listener","existing-production-data"],"state":"NOT_MATERIALIZED"},{"id":"ROLLBACK-03","stageId":"INSTALL-03","reverseOrdinal":8,"createdObjectRef":null,"deletionAuthority":"TRANSACTION_CREATED_OBJECTS_ONLY","protectedObjects":["reits-developer-portal","redis6","nginx","8100-listener","existing-production-data"],"state":"NOT_MATERIALIZED"},{"id":"ROLLBACK-04","stageId":"INSTALL-04","reverseOrdinal":7,"createdObjectRef":null,"deletionAuthority":"TRANSACTION_CREATED_OBJECTS_ONLY","protectedObjects":["reits-developer-portal","redis6","nginx","8100-listener","existing-production-data"],"state":"NOT_MATERIALIZED"},{"id":"ROLLBACK-05","stageId":"INSTALL-05","reverseOrdinal":6,"createdObjectRef":null,"deletionAuthority":"TRANSACTION_CREATED_OBJECTS_ONLY","protectedObjects":["reits-developer-portal","redis6","nginx","8100-listener","existing-production-data"],"state":"NOT_MATERIALIZED"},{"id":"ROLLBACK-06","stageId":"INSTALL-06","reverseOrdinal":5,"createdObjectRef":null,"deletionAuthority":"TRANSACTION_CREATED_OBJECTS_ONLY","protectedObjects":["reits-developer-portal","redis6","nginx","8100-listener","existing-production-data"],"state":"NOT_MATERIALIZED"},{"id":"ROLLBACK-07","stageId":"INSTALL-07","reverseOrdinal":4,"createdObjectRef":null,"deletionAuthority":"TRANSACTION_CREATED_OBJECTS_ONLY","protectedObjects":["reits-developer-portal","redis6","nginx","8100-listener","existing-production-data"],"state":"NOT_MATERIALIZED"},{"id":"ROLLBACK-08","stageId":"INSTALL-08","reverseOrdinal":3,"createdObjectRef":null,"deletionAuthority":"TRANSACTION_CREATED_OBJECTS_ONLY","protectedObjects":["reits-developer-portal","redis6","nginx","8100-listener","existing-production-data"],"state":"NOT_MATERIALIZED"},{"id":"ROLLBACK-09","stageId":"INSTALL-09","reverseOrdinal":2,"createdObjectRef":null,"deletionAuthority":"TRANSACTION_CREATED_OBJECTS_ONLY","protectedObjects":["reits-developer-portal","redis6","nginx","8100-listener","existing-production-data"],"state":"NOT_MATERIALIZED"},{"id":"ROLLBACK-10","stageId":"INSTALL-10","reverseOrdinal":1,"createdObjectRef":null,"deletionAuthority":"TRANSACTION_CREATED_OBJECTS_ONLY","protectedObjects":["reits-developer-portal","redis6","nginx","8100-listener","existing-production-data"],"state":"NOT_MATERIALIZED"}],"admissionGates":[{"id":"ADMIT-01","label":"六份真实回执对象全部存在","observed":"0/6","state":"HELD","productionEffectCount":0},{"id":"ADMIT-02","label":"十二个外部公钥引用全部可解析","observed":"0/12","state":"HELD","productionEffectCount":0},{"id":"ADMIT-03","label":"六份 Owner 签名和六份 Witness 签名全部通过","observed":"0/12","state":"HELD","productionEffectCount":0},{"id":"ADMIT-04","label":"新鲜度、重放与范围检查全部通过","observed":"0/6","state":"HELD","productionEffectCount":0},{"id":"ADMIT-05","label":"专用 staging 主机定位已提交","observed":"0/1","state":"HELD","productionEffectCount":0},{"id":"ADMIT-06","label":"十八字段目标证明包通过独立复核","observed":"0/1","state":"HELD","productionEffectCount":0},{"id":"ADMIT-07","label":"十二项目标检查全部通过","observed":"0/12","state":"HELD","productionEffectCount":0},{"id":"ADMIT-08","label":"一次性窗口、见证人与回滚根已绑定","observed":"0/1","state":"HELD","productionEffectCount":0},{"id":"ADMIT-09","label":"停止态安装事务可武装","observed":"0/1","state":"HELD","productionEffectCount":0}],"failureLab":[{"id":"FAIL-01","condition":"只收到一份合法回执","decision":"DENY_PARTIAL_AUTHORITY_SET","operatorAction":"不解析其余缺失席位，不产生安装能力"},{"id":"FAIL-02","condition":"KeyRef 不可解析或已撤销","decision":"DENY_UNTRUSTED_KEY","operatorAction":"隔离回执并要求原责任人重新签发"},{"id":"FAIL-03","condition":"Owner 与 Witness 使用同一密钥","decision":"DENY_AUTHORITY_COLLAPSE","operatorAction":"拒绝独立性声明"},{"id":"FAIL-04","condition":"回执摘要、任务包或来源包漂移","decision":"DENY_DIGEST_DRIFT","operatorAction":"显示首个漂移字段并冻结集合"},{"id":"FAIL-05","condition":"回执过期、未来签发或重放","decision":"DENY_FRESHNESS_REPLAY","operatorAction":"废止对象且不覆盖历史"},{"id":"FAIL-06","condition":"选择当前生产 Portal 主机","decision":"DENY_SHARED_PRODUCTION_HOST","operatorAction":"保持目标锁为空"},{"id":"FAIL-07","condition":"专用目标检查只有 11/12","decision":"DENY_PARTIAL_TARGET_ATTESTATION","operatorAction":"不得生成目标锁"},{"id":"FAIL-08","condition":"安装中任一步结果不确定","decision":"ABORT_AND_REVERSE","operatorAction":"从最后确认检查点反向撤销"},{"id":"FAIL-09","condition":"安装后出现 process 或 8110 listener","decision":"EMERGENCY_STOP_AND_QUARANTINE","operatorAction":"终止候选、隔离目标、要求独立事故复核"},{"id":"FAIL-10","condition":"当前实际状态","decision":"HELD_EXTERNAL_INPUTS_ABSENT","operatorAction":"回执 0/6、Key 0/12、目标 0/1、事务 0/10"}],"controlSurfaces":[{"id":"R49-UI01","title":"正式验收与工程 R49 双轨总览","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI02","title":"外部输入雷达","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI03","title":"六席回执验签队列","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI04","title":"逐席十项验签检查","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI05","title":"二十四字段回执内容浏览器","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI06","title":"Owner KeyRef 解析状态","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI07","title":"Witness KeyRef 解析状态","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI08","title":"签名算法兼容矩阵","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI09","title":"新鲜度与时钟偏差","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI10","title":"nonce 重放账本","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI11","title":"idempotency key 冲突","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI12","title":"Gate 与资源范围差异","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI13","title":"专用目标证明包入口","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI14","title":"十八字段目标证明合同","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI15","title":"十二项现场检查对照","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI16","title":"当前生产主机拒绝解释","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI17","title":"目标锁摘要与独立复核","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI18","title":"停止态安装事务总览","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI19","title":"十阶段安装时间线","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI20","title":"逐阶段输入输出摘要","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI21","title":"十个反向回滚检查点","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI22","title":"受保护生产对象清单","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI23","title":"systemd disabled/inactive 断言","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI24","title":"8110 零监听断言","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI25","title":"九道准入门","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI26","title":"十情景故障实验室","state":"IMPLEMENTED_READ_ONLY"},{"id":"R49-UI27","title":"零生产副作用审计账本","state":"IMPLEMENTED_READ_ONLY"}],"validationMatrix":{"receiptFieldCases":144,"verificationCases":60,"targetCases":48,"installationCases":60,"receiptFieldsPerLane":24,"verificationChecksPerLane":10,"targetInvariants":["专用非生产 staging","十八字段证明包完整","十二项检查必须全绿","独立复核与目标锁同源"],"installInvariants":["阶段只在前序回执和目标证明有效时可进入","所有写入仅限本事务新建对象","Controller 始终 disabled 与 inactive","8110 始终无 listener","每阶段必须有反向回滚检查点","候选回执不携带可调用能力"],"expectedCases":312,"passedCases":312,"failedCases":0,"result":"PASS_FAIL_CLOSED"},"nextSafeAction":{"id":"D05-R50","title":"D05-R50 首份真实回执不可变导入、专用目标证明接入与安装候选窗口编排","admission":"只在真实外部回执对象和专用目标证明出现后，执行不可变导入、外部 KeyRef 解析、验签、目标独立复核和停止态安装候选窗口编排。","externalInputsRequired":true,"portalAutoStartAllowed":false},"truthRules":["没有收到真实回执时不得运行公钥解析或验签，不得用 Fixture、空对象或本地签名替代外部责任人回执。","六席回执逐份验证但原子结算；一份通过也不产生部分安装权限，六份全部有效前安装事务保持不可武装。","当前共享生产 Portal 主机只能作为反例；专用 staging 目标必须提交十八字段现场证明包并由独立复核者重读。","停止态安装事务只允许规划 create、materialize、verify、seal 和 rollback，不得启动 Controller、打开 8110 或触发付费资源。","安装任一步失败必须按相反顺序撤销本事务创建的对象；既有生产对象、Portal 服务、Redis 和 Nginx 不属于可清理范围。","工程 R49 完成不得推进正式 4/36；只有十一道 D05 Gate 的真实生产证据和独立裁决才能推进正式计划。"],"effectsExecuted":{"receipt-object-imported":0,"owner-key-resolved":0,"witness-key-resolved":0,"owner-signature-verified":0,"witness-signature-verified":0,"receipt-set-sealed":0,"dedicated-target-selected":0,"target-attestation-imported":0,"target-lock-written":0,"controller-identity-created":0,"controller-directory-created":0,"controller-config-written":0,"controller-artifact-installed":0,"systemd-unit-installed":0,"controller-service-started":0,"listener-8110-started":0,"paid-resource-created":0,"d05-gate-advanced":0},"integrity":{"predecessorDigest":"sha256:91b925dae4239338e48dc36b7b691b32984202740abf752236965d9df90520b7","verificationContractDigest":"sha256:ef37bb64b5448d5cea86106303cae12cbbbcf1dba28997790dd92f452f5b1f11","targetAttestationContractDigest":"sha256:8b2524c04549327d73e13a732d8a2c8eb54dd5b9ea834215e5e9f1c045cce2db","installationTransactionDigest":"sha256:38bda2f71b9201d87a9034252b9138c3d203a4a697d2dd2c9be0936a95f91e24","planeSeedDigest":"sha256:f607f360542ff54aa5cb607745dfa41a777bb5f00c439f42087239ef526081bc"},"runtimeReleaseIdentity":{"schemaVersion":"developer.reits.tech/runtime-release-identity/v1","status":"BOUND","releaseId":"developer-portal@1dfd35b4f388-a84f2486318f","repository":"local/developer-portal","service":"reits-developer-portal","channel":"production","environment":"production","source":{"revision":"1dfd35b4f388738df724e8f588f00a3841976f6b"},"artifact":{"digest":"sha256:a84f2486318fee7337237b2687506d22acf4cd1594cd2b981d6c2176b02f83b2"},"sbom":{"digest":"sha256:9aadc74b40ea49b4fa49020f56eb73c5985a3a9fcc2d8ab0ac1f45cffb24a809"},"configuration":{"digest":"sha256:2acb68789cd717dbd5104c8f4f15d45dc7148be2a1119961cae15838e9c18db8"},"migration":{"digest":"sha256:dc6c9dd2ab96033d9dfd46da240fbf27c35c6cd4a260d96b19ef35c16a0cdfd7"},"secrets":{"referencesOnly":true,"valuesExposed":false},"rollback":{"status":"BOUND","targetReleaseId":"developer-portal@89d2d82fa430-16939846ecc8"},"provenance":{"predicateType":"https://slsa.dev/provenance/v1","builderId":"developer.reits.tech/local-release-builder/v1","signed":false}}}