chore: initialize go-sip repository

deploys/cell/README.md

@@ -0,0 +1,32 @@
+# Physical Asterisk Cell input
+
+The production Cell is physical-host business software managed by the approved
+SIP management release, not a Docker service and not a Go Agent subprocess.
+Asterisk and the SIP Agent are the only business-code services in this project;
+MQ, OSS, AI and SaaS APIs remain externally supplied infrastructure.
+
+The pinned source input is:
+
+- Asterisk `22.10.1`
+- Git commit `f0e408a7b0d829c85bf15fa4b487870a50cb3000`
+- Archive `../packages/asterisk-22.10.1-source.tar.gz`
+- SHA-256 `373c98f4d4a1b923b42def0aee03f4e36aca9d1c244a8eeda646da8a97f89663`
+
+`build-asterisk-native.sh` can reproduce a native stage from the local pinned
+source/dependency archives using the Debian package list in
+`debian-build-packages.lock`; `install-asterisk-native.sh` installs that stage
+and the systemd unit without overwriting `/etc/asterisk`. Before production use,
+the Cell owner must verify its dependencies/licence/security review, install the
+management-approved static `pjsip.conf`/ARI/RTP configuration, and review/start
+the systemd unit explicitly. Do not silently substitute another Asterisk version or a
+container image. The Go Agent package only consumes the resulting approved static Cell artifact
+and reports its applied revision. Local validation may use isolated MQ/OSS/AI
+fixtures, but those are not production deployments.
+
+Before every real outbound attempt, the operator must obtain a fresh user
+confirmation in the current conversation that names the SIP channel, raw target
+number and capture plan. Real SIP outbound calls are permitted only from 09:00
+(inclusive) through 20:00 (exclusive), Asia/Shanghai time; outside that window
+the Agent/Dispatcher must fail closed rather than wait, retry, delay or switch
+trunks. A prior confirmation does not authorize retries or additional targets;
+failed calls must stop for a new confirmation.