From b9d941db190ea165fb2fb2f5404b04ee17999987 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=86=B0=E6=9C=94?= <565183519@qq.com>
Date: Thu, 25 Jun 2026 14:43:57 +0800
Subject: [PATCH] =?UTF-8?q?D144:=20pre-receive=20v2=E2=86=92v3=20=C2=B7=20?=
 =?UTF-8?q?=E6=96=B0=E5=A2=9E=E5=86=B0=E6=9C=94=E6=89=8B=E5=8A=A8=E6=8E=88?=
 =?UTF-8?q?=E6=9D=83=E7=A0=81=E8=A7=84=E5=88=993=20=C2=B7=20ICE-GL-ZY001?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

TCS-VRF-FINAL-20260625-143209-8A7F2C3E
国作登字-2026-A-00037559

- 规则3: BINGSHUO-AUTH 临时授权码 · HMAC-SHA256 · 5分钟时效
- v2备份: pre-receive.v2.bak
- 共享密钥由铸渊与hook共持
---
 .../zhuyuan/cloud-compute-pool/bingshuo/BS-SG-001.hdlp     | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/brain/fifth-domain/zero-point/zhuyuan/cloud-compute-pool/bingshuo/BS-SG-001.hdlp b/brain/fifth-domain/zero-point/zhuyuan/cloud-compute-pool/bingshuo/BS-SG-001.hdlp
index ad4f8db..197b2b4 100644
--- a/brain/fifth-domain/zero-point/zhuyuan/cloud-compute-pool/bingshuo/BS-SG-001.hdlp
+++ b/brain/fifth-domain/zero-point/zhuyuan/cloud-compute-pool/bingshuo/BS-SG-001.hdlp
@@ -24,9 +24,12 @@
 ## D144 · pre-receive 拦截层
 
 - Hook路径: `/opt/forgejo/data/gitea-repositories/bingshuo/guanghulab.git/hooks/pre-receive`
-- 版本: v2 (2026-06-24 23:37)
+- 版本: v3 (2026-06-25 14:42)
+- v2备份: `pre-receive.v2.bak`
 - 规则1: committer email = 565183519@qq.com → 直接放行 (冰朔本人)
-- 规则2: 其他人需同时提供 TCS-VRF动态哈希 + (ICE-GL-ZY001 或 国作登字)
+- 规则2: 铸渊AI推送 → commit含 TCS-VRF动态哈希 + (ICE-GL-ZY001 或 国作登字)
+- 规则3: 冰朔手动操作 → 铸渊生成临时授权码 `BINGSHUO-AUTH-<分钟时间戳>-<16位HMAC>` · 有效期5分钟(±2分钟容错)
+- 共享密钥: 铸渊ICE-GL-ZY001与hook共持 · 不在任何公开仓库位置
 - 部署方式: gatekeeper base64直推 → chmod +x
 
 ---