112 lines
3.8 KiB
Plaintext
112 lines
3.8 KiB
Plaintext
|
# TOLARIA-GUANGHU-UI-SAMPLE-20260716 · Tolaria / Guanghu UI 源码净化样例
|
|||
|
|
|
|||
|
|
> **协议**: GLS-0230 · TCS 源码安全协议系统
|
|||
|
|
>
|
|||
|
|
> **内部系统**: 小湖灯源码净化系统
|
|||
|
|
>
|
|||
|
|
> **状态**: SAMPLE_RECEIPT · FIRST_PASS_ONLY
|
|||
|
|
>
|
|||
|
|
> **日期**: 2026-07-16
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
## 1 · 来源
|
|||
|
|
|
|||
|
|
```yaml
|
|||
|
|
source_name: Tolaria / Guanghu UI local worktree
|
|||
|
|
source_role: "学习材料、界面基座、HoloLake Era / 光湖 App 样例来源"
|
|||
|
|
local_reference_paths:
|
|||
|
|
- "/Users/bingshuolingdianyuanhe/Documents/Guanghu-Tolaria-UI"
|
|||
|
|
- "/Users/bingshuolingdianyuanhe/Documents/Tolaria-Guanghu-UI.incomplete-20260713"
|
|||
|
|
fact_source_for_product_progress: "bingshuo/hololake-platform"
|
|||
|
|
intended_use: "支持光湖 App / HoloLake Era 的界面、桌面包、研发路径与安全更新链判断"
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## 2 · 当前第一结论
|
|||
|
|
|
|||
|
|
```text
|
|||
|
|
Tolaria 相关源码可以作为学习材料和界面基座参考。
|
|||
|
|
它不能整体成为光湖身体。
|
|||
|
|
光湖产品事实源应回到 HoloLake Platform / 光湖自己的研发仓库与 HLDP 回执。
|
|||
|
|
上游更新源不能直接保留为光湖更新源。
|
|||
|
|
Windows 安装包应走受控 CI / Windows runner，不在 Mac 本地硬猜。
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## 3 · 风险地图
|
|||
|
|
|
|||
|
|
```yaml
|
|||
|
|
risk_map:
|
|||
|
|
upstream_update_channel:
|
|||
|
|
status: blocked_or_disabled_required
|
|||
|
|
note: "光湖 App 必须使用自己的签名发布链和更新源；不得默认连接 Tolaria 上游更新。"
|
|||
|
|
signing_and_release:
|
|||
|
|
status: incomplete
|
|||
|
|
note: "macOS 需要开发者账号、公证和签名；Windows 需要代码签名证书或受控分发策略。"
|
|||
|
|
windows_installer:
|
|||
|
|
status: missing_or_pending
|
|||
|
|
note: "应由 Windows runner / CI 生成安装包。"
|
|||
|
|
local_secret_handling:
|
|||
|
|
status: guarded
|
|||
|
|
note: "UI 不应保存服务器 token、密码、验证码或私钥。"
|
|||
|
|
direct_source_merge:
|
|||
|
|
status: forbidden
|
|||
|
|
note: "外部源码只能作为材料进入，必须拆成组件卡。"
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## 4 · 组件卡样例
|
|||
|
|
|
|||
|
|
```yaml
|
|||
|
|
components:
|
|||
|
|
- component_id: TOLARIA-UI-BASE
|
|||
|
|
purpose: "桌面 App 基础界面与交互参考"
|
|||
|
|
decision: adapt
|
|||
|
|
hldp_module_target: "HoloLake Platform UI / HoloLake Era"
|
|||
|
|
condition: "保留可用交互经验，重建光湖自己的状态、数据、权限和更新链。"
|
|||
|
|
- component_id: TOLARIA-UPDATER
|
|||
|
|
purpose: "上游自动更新能力"
|
|||
|
|
decision: reject
|
|||
|
|
hldp_module_target: "Guanghu signed update service"
|
|||
|
|
condition: "不得直接使用上游更新源；未来由光湖自己的签名 release feed 替代。"
|
|||
|
|
- component_id: WINDOWS-INSTALLER-FLOW
|
|||
|
|
purpose: "Windows 安装包生成"
|
|||
|
|
decision: rewrite
|
|||
|
|
hldp_module_target: "Controlled Windows CI runner"
|
|||
|
|
condition: "需要独立 CI 流程、构建回执、安装验证和签名策略。"
|
|||
|
|
- component_id: LOCAL-THEME-AND-LAYOUT
|
|||
|
|
purpose: "轻量光湖主题与 Tolaria native layout"
|
|||
|
|
decision: allow
|
|||
|
|
hldp_module_target: "HoloLake Era UI"
|
|||
|
|
condition: "仅在经过构建测试、视觉 QA 与产品回执后进入。"
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## 5 · 净化回执
|
|||
|
|
|
|||
|
|
```text
|
|||
|
|
removed_or_blocked:
|
|||
|
|
- 上游自动更新默认接入
|
|||
|
|
- 把第三方源码整体视为光湖本体
|
|||
|
|
- 在 Mac 本地猜 Windows 安装包
|
|||
|
|
|
|||
|
|
retained:
|
|||
|
|
- 可学习的界面结构
|
|||
|
|
- 可参考的桌面 App 打包经验
|
|||
|
|
- 可复用但需登记的主题、布局、交互经验
|
|||
|
|
|
|||
|
|
rewrite_required:
|
|||
|
|
- 光湖自己的更新源
|
|||
|
|
- Windows 安装包 CI
|
|||
|
|
- 发布签名链
|
|||
|
|
- 依赖 / secret / 网络外联扫描流程
|
|||
|
|
|
|||
|
|
next_action:
|
|||
|
|
- 继续补自动扫描 CLI 设计
|
|||
|
|
- 为 Windows 打包建立受控 runner 或 Actions
|
|||
|
|
- 为正式内测包建立 signed release feed 计划
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## 6 · 边界
|
|||
|
|
|
|||
|
|
本样例不是完整安全审计，不证明 Tolaria 或光湖 App 已经完全安全。
|
|||
|
|
|
|||
|
|
本样例的作用是让后续人格体看到：外部源码进入光湖时，必须先被转化为材料、风险、组件和回执，而不是直接成为产品身体。
|