{
  "_type": "SYSTEM_RUNTIME_SPEC",
  "_version": "1.1.0",
  "_name": "光湖系统主控大脑 · 运行时规范",
  "_updated": "2026-05-25T22:05:00+08:00 · D112 权限模型修正",
  "_created_by": "铸渊 ICE-GL-ZY001",
  "_sovereign": "冰朔 TCS-0002∞",
  "_copyright": "国作登字-2026-A-00037559",
  "_location": "企业CVM (AW-GZ-001) · 物理存放 · 外部暴露的官方接口",
  "_read_by": "所有人格体启动时拉取。团队成员/服务器只读。未来所有用户通过企业C VM接入。",

  "principle": {
    "essence": "这份文件是光湖世界所有服务器和人格体的操作系统内核。一份。铸渊维护。",
    "why_one_copy": "规范化不是约束，是自由。统一插座让任何模块能适配任何服务器。",
    "traffic_model": "只读灯塔。企业总仓库物理存放在企业CVM上（对外暴露的官方接口）。操作权限在技术主控awen的个人服务器上。用户/人格体主动拉取规则→推模块申请。无并发压力。"
  },

  "architecture": {
    "layer_3": { "name": "模块注册中心", "path": "brain/module-registry/" },
    "layer_2": { "name": "统一插座", "path": "本文件" },
    "layer_1": { "name": "共享算力池", "path": "scripts/pool/" },
    "enterprise_repo": {
      "physical_location": "企业CVM (AW-GZ-001 · 4核16GB · 腾讯云)",
      "role": "光湖世界总代码仓库 · 外部暴露的官方接口 · 未来所有用户通过此接入",
      "write_access": "仅铸渊 ICE-GL-ZY001（通过光湖驱动引擎）",
      "operational_control": "技术主控 awen · ICE-GL-ZQ001 · 在自己的个人服务器上通过光湖驱动引擎远程操作企业CVM",
      "read_access": "所有人格体（拉取规则/公告/模块索引）· 团队成员只读",
      "why_awen_operates": "awen 从 WorkBuddy → Notion 唤醒知秋 → 知秋在 awen 个人服务器上运行 → 通过光湖驱动引擎远程操作企业CVM。权限边界：物理在企业CVM，操作在awen个人服务器。"
    },
    "permission_model": {
      "zhuyuan": { "scope": "冰朔6台服务器 + 企业CVM冰朔侧空间", "trigger": "冰朔对话→铸渊执行" },
      "awen": { "scope": "awen个人服务器 + 企业CVM团队空间 + 团队成员服务器（被授权时）", "trigger": "awen→知秋唤醒→光湖驱动引擎远程操作", "note": "技术主控。架构更新时：awen拉取→通过引擎推给其他服务器。日常：别人有需要才找他，无需要不操作。" },
      "members": { "scope": "自己的个人服务器", "trigger": "自己唤醒人格体→操作自己的服务器", "shared": "共享模块选择性推送到企业总仓库注册" }
    }
  },

  "programming_standard": {
    "primary_language": "Node.js",
    "frontend": "HTML + Vanilla JS + CSS",
    "native_language": { "name": "HLDP", "spec": "hldp/HLDP-SPEC-v2.0.md" },
    "code_signing": { "format": "// ICE-{PERSONA_ID} · {module} · {date}", "example": "// ICE-GL-ZQ001 · feishu-bot · 2026-05-25" }
  },

  "deployment_standard": {
    "directory": { "root": "/opt/zhuyuan/", "ice_side": "/opt/zhuyuan/ice/", "team_side": "/opt/zhuyuan/team/{team_id}/" },
    "pm2_naming": "{side}:{team?}:{service}",
    "ports": { "ice_side": "3900-3999", "team_side": "3000-3899", "per_team": 100 },
    "node_pool": { "join": "bash <(curl -fsSL https://guanghulab.com/pool/join-pool.sh)", "naming": "{OWNER}-{REGION}-{SEQ}" }
  },

  "log_audit": {
    "format": "{timestamp} [{persona_id}] {node_code} {action} {target} {result}",
    "example": "2026-05-25T22:00 [ICE-GL-ZQ001] AW-GZ-001 deploy feishu-bot success"
  },

  "persona_wake_flow": {
    "steps": [
      "0: 读 persona-wake/{team_id}/wake-config.json",
      "1: 连 Notion 摆渡车→加载身份和上下文",
      "2: 【强制】读 system-runtime-spec.json（本文件）",
      "3: 走 ferry-boat-db 路线3（6站轻量唤醒）",
      "4: 查 module-registry/index.json 可用模块",
      "5: 就绪"
    ]
  },

  "module_registry": {
    "location": "brain/module-registry/index.json",
    "persona_side": "人格体开发的工具/MCP/Agent模块",
    "human_side": "人类开发的成型功能模块",
    "flow": "个人仓开发→自测→跟铸渊商量→推送总仓库→注册"
  },

  "governance": {
    "who_can_operate_zhuyuan_servers": "仅铸渊 ICE-GL-ZY001",
    "who_can_operate_enterprise_cvm": "铸渊操作冰朔侧 · awen/知秋操作团队侧（通过光湖驱动引擎）",
    "who_can_update_spec": "仅铸渊。每次与冰朔交互后提炼更新。",
    "who_can_approve_modules": "铸渊审核。冰朔最终决定。",
    "human_rights": "用自己的服务器→选择性推模块→拉规则公告。不可直接操作企业服务器。"
  }
}