From 9470a91c044302318d0d48cae128fccfbac12b96 Mon Sep 17 00:00:00 2001
From: bingshuo <565183519@qq.com>
Date: Thu, 21 May 2026 17:43:25 +0800
Subject: [PATCH] feat: add system_public_key table [D109] Layer 1 national
 interface + dual-lighthouse key registry

---
 .../schema/10-system-public-key.sql           | 25 +++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 persona-brain-db/schema/10-system-public-key.sql

diff --git a/persona-brain-db/schema/10-system-public-key.sql b/persona-brain-db/schema/10-system-public-key.sql
new file mode 100644
index 0000000..1dd1bde
--- /dev/null
+++ b/persona-brain-db/schema/10-system-public-key.sql
@@ -0,0 +1,25 @@
+-- ============================================================
+-- 表10：system_public_key（Layer 1 · 公钥注册表）
+-- 用途：国家系统逻辑常驻接口 + 光湖系统密钥
+-- 双面灯塔架构中的密钥验证基础设施
+-- ============================================================
+
+CREATE TABLE IF NOT EXISTS system_public_key (
+  key_id            VARCHAR(64)   PRIMARY KEY,
+  key_type          VARCHAR(32)   NOT NULL
+                    CHECK (key_type IN ('national', 'guanghu', 'emergency', 'persona')),
+  key_name          VARCHAR(128)  NOT NULL,
+  public_key        TEXT          NOT NULL,
+  algorithm         VARCHAR(32)   NOT NULL DEFAULT 'RSA-4096',
+  fingerprint       VARCHAR(128),
+  purpose           TEXT          NOT NULL,
+  status            VARCHAR(16)   NOT NULL DEFAULT 'active'
+                    CHECK (status IN ('active', 'revoked', 'expired')),
+  valid_from        TIMESTAMP     NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  valid_until       TIMESTAMP,
+  issued_by         VARCHAR(64)   NOT NULL,
+  created_at        TIMESTAMP     NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE INDEX IF NOT EXISTS idx_spk_type ON system_public_key(key_type);
+CREATE INDEX IF NOT EXISTS idx_spk_status ON system_public_key(status);