HUMAN REALITY INFRASTRUCTURE · CONTROL PLANE

Clean foundation.
Bounded authority.

A new Control Plane foundation for coordinating cloud clones, T736 nodes, Runtime identities, Work Packages, Evidence and Acceptance—without inheriting the shared-root risks of the student sandbox.

干净的控制平面基础：协调云端克隆、736 节点、Runtime 身份、工作包、证据与验收，但不继承学生 Sandbox 的共享 Root 风险。

STATE=OBSERVATION_ONLY · PUBLIC_MUTATION_API=NONE · AUTHORITY_GRANT_API=NONE · REMOTE_ROOT_BROKER=NONE

Frozen Runtime foundation

356782

Addressable Runtime identities

Identity does not imply execution readiness.

14595

Materialized Runtime roots

A root exists; capability and authority remain separate.

Discovered node / host records

Discovery is not production authorization.

Registry object contracts

Schemas are ready; public write APIs remain absent.

Four-plane model

CONTROL

HSIMC Control Plane

Identity, registry, work, policy, evidence, release, freeze and fleet coordination

FOUNDATION_ONLY

SUBJECT

Subject Plane

Subject authority, resolver and bounded API

EXISTING_EXPERIMENTS_OUTSIDE_THIS_DEPLOYMENT

RUNTIME_WORKSHELL

Runtime & Workshell Plane

Cloud or local execution, inventory, RFID, photo and production work

EXISTING_EXECUTION_SYSTEMS_OUTSIDE_THIS_DEPLOYMENT

CONTINUITY_NODE

HRI Continuity Node Plane

T736 local AI, local data, device I/O, offline work and deferred sync

DISCOVERED_AND_EXPERIMENTAL

Operating workflow

DEMAND_INTENT → INTAKE → CLASSIFICATION → FEASIBILITY_GATE → WORK_PACKAGE → CAPABILITY_CAPACITY_MATCH → COMMITMENT_GATE → ACCESS_RUNTIME_NODE_READY → EXECUTE → CHECKPOINT → EVIDENCE → VERIFICATION → ACCEPTANCE → DELIVERY → SLA_MONITORING → COST_CLOSE → FREEZE_KNOWLEDGE

Intern capability-formation model preserved

GUIDE → IDENTITY_ENROLLMENT → EXECUTION_ACCOUNT → ASSIGNED_WORKSPACE → RUNTIME_SERVICE → PUBLIC_URL → FIRST_RESULT → ISSUE → ANSWER_URL → EVIDENCE → HANDOFF

Distributed operating model added

WORK_ORDER → CAPABILITY_PASSPORT → AVAILABILITY → PRIMARY_BACKUP_REVIEWER → SERVICE_CLASS → COMMITMENT_GATE → CHECKPOINT → ISSUE_ANSWER → EVIDENCE → ACCEPTANCE → NODE_OFFLINE_STATUS → REVOCATION_AND_RESTORE

Node and host baseline

Identity	Class	Role	State	Authority profile
`HRI-HOST-CLOUD-AZURE-GMALL-001`	CLOUD_HOST	EXPERIMENTAL_EXECUTION_AND_STUDENT_AI_RUNTIME_HOST	DISCOVERED	LEGACY_LEARNING_SANDBOX_REQUIRES_FUTURE_BOUNDING
`HRI-HOST-CLOUD-TENCENT-HK002-001`	CLOUD_HOST	CONTROL_PLANE_HOST_AND_EXISTING_ADMIN_REGISTRY_HOST	DISCOVERED	HOST_ADMIN_OUTSIDE_PUBLIC_CONTROL_PLANE
`HRI-HOST-CLOUD-TENCENT-INNOSPIREX-001`	CLOUD_HOST	HONG_KONG_STUDENT_BUILD_RUNTIME_HOST	PENDING_DISCOVERY	UNKNOWN
`HRI-NODE-T736-HK2-001`	T736	BOUNDED_ROOT_POC_AND_CONTINUITY_NODE	DISCOVERED_EXPERIMENTAL	FULL_LOCAL_ROOT_NO_GLOBAL_PLATFORM_ROOT

Registry contracts

Object	State	Priority	Schema
`presence_manifest`	SCHEMA_READY	FIRST	PRESENCE-MANIFEST.schema.json
`acceptance_record`	SCHEMA_READY		ACCEPTANCE-RECORD.schema.json
`answer_object`	SCHEMA_READY		PENDING
`assignment_pool`	SCHEMA_READY		PENDING
`availability`	SCHEMA_READY		PENDING
`capability_passport`	SCHEMA_READY		PENDING
`checkpoint`	SCHEMA_READY		PENDING
`commitment_gate`	SCHEMA_READY		PENDING
`cost_event`	SCHEMA_READY		PENDING
`evidence_object`	SCHEMA_READY		EVIDENCE-OBJECT.schema.json
`freeze_receipt`	SCHEMA_READY		FREEZE-RECEIPT.schema.json
`handoff`	SCHEMA_READY		PENDING
`issue`	SCHEMA_READY		PENDING
`node_passport`	SCHEMA_READY		NODE-PASSPORT.schema.json
`offline_grant`	SCHEMA_READY		OFFLINE-GRANT.schema.json
`release`	SCHEMA_READY		PENDING
`revocation`	SCHEMA_READY		PENDING
`runtime_identity`	SCHEMA_READY		PENDING
`service_class`	SCHEMA_READY		PENDING
`work_order`	SCHEMA_READY		WORK-ORDER.schema.json

Read-only API

/healthz

Service health and boundary.

/api/v0/manifest

Artifact, baseline and frozen namespace summary.

/api/v0/nodes

Discovered cloud and T736 node records.

/api/v0/registry-objects

Control Plane object and schema inventory.

/api/v0/workflow

Student and distributed workflow contracts.

/schemas/<name>

Published JSON Schemas.

Safety boundary

Local Root may exist on a bounded T736 or experimental cloud clone. This Control Plane does not convert local Root into global platform Root, does not expose SSH keys, and does not automatically promote a POC machine into production.