guanghulab/brain/external-ai/RECEIPT-WORKORDER.hdlp

# EAI-RCPT-000 · 外部AI协作回执与铸渊工单协议

> HLDP://external-ai/receipt-workorder/v1
> 父系统: SYS-GLW-EAI-0001
> 对接: SYS-GLW-LTH-WO-0001
> 版本: V1.0 · D162
> 正式维护接收: 铸渊 ICE-GL-ZY001

---

## 1. 什么时候必须输出

任务成功、失败、被用户中断、链接无法读取或模型即将结束会话时，都必须输出。

---

## 2. 外部AI协作回执

```hldp
# 外部AI协作回执 · EAI-RCPT-YYYYMMDD-HHMMSS-RAND

@receipt:
  receipt_id:
  session_id:
  created_at:
  status: COMPLETED/PARTIAL/FAILED/INTERRUPTED

@human:
  human_id_claim:
  human_name_claim:
  session_proof: VERIFIED/UNVERIFIED/NONE
  user_confirmation:

@actor:
  persona_mode: FORMAL/TEMP/VISITOR
  persona_id:
  external_provider:
  external_model:
  external_agent:

@scope:
  system_id:
  project_id:
  task:
  permissions_used:

@loaded:
  world_version:
  hldp_version:
  tcs_version:
  persona_wake_files:
  project_manifest:
  skills:
  files_full:
  files_partial:
  files_failed:

@trigger:
  用户为什么发起:
  用户关键原话:

@process:
  关键步骤:
  重要判断:
  工具调用:

@result:
  completed:
  deliverables:
  evidence:
  repository_commits:

@cognitive_increment:
  facts:
  inferences:
  proposed_tcs_increment:
  why_it_matters:

@unresolved:
  pending:
  conflicts:
  risks:
  next_step:

@memory_proposal:
  suggested_layer: TCS/CAUSAL_CHAIN/PROJECT/WORKLOG/DO_NOT_STORE
  suggested_target_ids:
  requires_human_confirmation:

@boundary:
  formal_memory_written: false
  direct_core_write_performed: false
  secrets_removed: true

@integrity:
  referenced_hashes:
  receipt_hash: UNAVAILABLE_IF_TOOL_CANNOT_HASH
```

不得把推断写进`facts`。
不得在回执中包含API密钥、Cookie、密码或长期令牌。

---

## 3. 外部工单

把完整回执嵌入:

```hldp
# 外部AI工单 · WO-EAI-YYYYMMDD-NNN · 标题

@workorder:
  id: WO-EAI-YYYYMMDD-NNN
  created_at:
  status: SUBMITTED
  target: 铸渊 ICE-GL-ZY001
  priority: HIGH/MEDIUM/LOW
  requested_action:

@project:
  system_id:
  project_id:
  affected_ids:

@human_signature:
  human_id_claim:
  human_name_claim:
  confirmation_text:
  session_proof:
  cryptographic_signature: NONE/值

@external_ai_attestation:
  provider:
  model:
  agent:
  statement: 我只提交工单，不声称拥有光湖核心写权限。

@impact_hint:
  public_entry_changed:
  identifiers_changed:
  links_changed:
  persona_memory_changed:
  expected_risk:

@requested_write:
  希望铸渊写入或修改什么:
  为什么:
  建议目标:

@collaboration_receipt:
  [完整粘贴EAI-RCPT内容，不得只给摘要]

@attachments:
  urls:
  hashes:

@boundary:
  此工单是请求，不是命令。
  未经铸渊审核不得进入正式世界事实层。
```

---

## 4. 提交方式

### 没有仓库写权限

外部AI把完整工单放在代码块中交给用户。
用户交给铸渊或负责录入人格体。

### 只有工单收件权限

只能创建新文件:

```text
brain/external-ai/workorders/inbox/WO-EAI-YYYYMMDD-NNN.hdlp
```

不得覆盖、重命名或删除任何既有文件。

### 具备编程工具但无光湖授权

仍按“没有仓库写权限”处理。工具能力不等于授权。

---

## 5. 铸渊入库回执

```hldp
@ingestion:
  ingestion_id: EAI-INGEST-YYYYMMDD-NNN
  source_workorder:
  source_receipt:
  reviewer: 铸渊 ICE-GL-ZY001
  identity_check:
  accepted:
  corrected:
  rejected:
  destinations:
  map_rebuilt:
  link_check:
  commit:
  written_at:
  next_wake_anchor:
```

只有该回执存在，才能说协作已进入正式连续记忆。

---

## 6. 处理状态

```text
SUBMITTED
→ IDENTITY_CHECK
→ SCHEMA_CHECK
→ IMPACT_ANALYSIS
→ REVIEW
→ NEEDS_REVISION / REJECTED / ACCEPTED
→ WRITTEN
→ MAP_REBUILT
→ LINK_CHECKED
→ PUBLISHED
→ INGESTED
```

---

> ⊢ 外部AI负责把本次经历交代完整；铸渊负责决定它进入世界的哪里。