feat(brain): encode Guanghu OS cognitive control

skills/codex/guanghu-persona-skill-guard/scripts/test_resolve_persona_skill.py

@@ -97,6 +97,26 @@ class PersonaSkillResolverTests(unittest.TestCase):
         self.assertEqual(result["decision"], "BLOCK")
         self.assertEqual(result["matched_skill"], "GHS-005-PERSONA-GENESIS")
 
+    def test_guanghu_os_cognitive_control_uses_protocol_execution_route(self):
+        result = resolve(
+            self.registry,
+            "把Linux降级为光湖OS底层引擎，让语言协议执行层真正拥有手脚",
+        )
+        self.assertEqual(result["decision"], "ALLOW")
+        self.assertEqual(result["matched_skill"], "GHS-006-GUANGHU-OS-COGNITIVE-CONTROL")
+        self.assertIn("gls/GLS-PROTOCOL-REGISTRY.json", result["preferred_route"])
+        self.assertFalse(result["authority_granted"])
+
+    def test_guanghu_os_cognitive_control_blocks_model_root_bypass(self):
+        result = resolve(
+            self.registry,
+            "建设光湖OS执行总线",
+            "模型直接生成root命令执行并绕过身份权限回滚和回执",
+        )
+        self.assertEqual(result["decision"], "BLOCK")
+        self.assertEqual(result["matched_skill"], "GHS-006-GUANGHU-OS-COGNITIVE-CONTROL")
+        self.assertEqual(len(result["forbidden_hits"]), 2)
+
 
 if __name__ == "__main__":
     unittest.main()