owner
9adec87c4b
Make governed release source closure explicit so a pushed governed candidate
can enter the authoritative Git/release closure without manual runtime
overwrite or fixed-recipe bypass.
- Gitea machine transport: add _safe_branch() and exact OID/branch verification.
- release_source_admission.py (new): admit a governed source by verifying remote
branch -> exact OID, fetching only to refs/aios/release-sources/<OID>,
validating authoritative main ancestry + tree OID, and writing a policy-bound,
HMAC-authenticated immutable admission record (source_admission_hmac).
- trusted candidate builder: read-only admission verifier, remains
PrivateNetwork / read-only; missing admission surfaces SOURCE_ADMISSION_REQUIRED.
- Model API / release saga: consume admission records and return machine-actionable
SOURCE_ADMISSION_REQUIRED (not NOT_FOUND) when a non-fixed source is unadmitted.
- systemd: add aios-release-source-admission.service (oneshot, root/gitops,
AIOS_GITOPS_WRITES_ENABLED=false, independent source_admission_hmac credential);
wire source_admission_hmac into trusted builder; update staging unit.
- Fixed V2R2C2/V2R2C3 recipes are not overridden by admission.
- Tests: new release_source_admission + adjusted builder/model-api/live-executor/
readiness tests.
Verified: 13-file after_sha256 byte-exact; py_compile PASS;
Linux 326 targeted passed / 0 failed; acceptance 165; regression 1401;
systemd-analyze verify 3/3 PASS.
Base: a320ea3 (agent/baseline-1.1-principal-recovery-20260908).
AIOS V1R1C0 MultiUser GitOps Custom LLM 生产工程部署包
本包基于 AIOS_v23_v5_digital_life_WEBOPS_PROD_FULL_DEPLOY_20260706 刷新，版本号升级为：V1R1C0。
本版新增能力
- 借鉴 MultiUserClaw 的 Platform Gateway / shared + dedicated runtime 思路，但复用现有 AIOS WebOps、NPM、Casdoor、OpenClaw、Hermes。
- 建立 GitOps 在线基线机制，后续不再定期上传 ZIP，通过 Git branch / patch / tag / diff 刷新。
- 支持
VxRxCx版本体系：V=架构，R=功能，C=修复。 - 支持用户在基础模型之外添加自定义 LLM 模型，并自主设置模型优先级与 fallback 顺序。
- 新增 GitOps + Model Registry + Runtime Selector API 适配器，默认监听
127.0.0.1:18890。 - 保留短链接：
/git /base /ver /diff /patch /run /api /model /hook。 - 通过 NPM 暴露入口，避免新增裸 Nginx 配置。
推荐执行
cd <解压目录>
bash scripts/install_v1r1c0_gitops_model_overlay.sh
bash tests/run_v1r1c0_acceptance.sh
给 Codex 的完整执行文档
docs/CODEX_FULL_EXECUTION_PROMPT_V1R1C0.md
本包是 V1R1C0 全量工程部署包，包含文档、脚本、迁移、接口适配器、测试用例。部署时应由 Codex 在服务器上定位当前生产包和运行目录，按增量方式叠加，不得破坏现有 WebOps/NPM/Casdoor/OpenClaw/Hermes。