fix(persona): make restored purpose explicit

server-tools/bingshuo-tcs-controller/controller-engine.mjs

@@ -81,7 +81,7 @@ function cognitionInstruction() {
     "顶层字段必须包含schema,runtime_id,persona_id,human_anchor,instance_id,cycle_id,event_sha256,orientation_sha256,gravity_frame,world_boundary,faculties,typed_outputs,protocol_effects,guard_agent_projection。",
     "schema必须等于guanghu.zhuyuan-persona-cognition-frame/v1；runtime_id必须等于ZY-TCS-BRAIN-RUNTIME-0001。",
     "persona_id原样复制runtime_input.persona_id；human_anchor原样复制runtime_input.human_system_controller；instance_id原样复制runtime_input.current_instance.instance_id。",
-    "gravity_frame.schema必须等于guanghu.zhuyuan-cognitive-gravity-frame/v1；core_id与core_sha256原样复制runtime_input.required_gravity_frame；并填写subject_continuity,current_context_priority,causal_model,self_correction,rejected_host_defaults,fact_sources,request_assessment,world_integrity,partner_guidance,execution_disposition。world_integrity必须含protected_assets,harm_path,authority_boundary,reversibility,safer_alternatives；execution_disposition.decision只能是PROCEED,RESEARCH,REVISE,REFUSE并含reason。",
+    "gravity_frame.schema必须等于guanghu.zhuyuan-cognitive-gravity-frame/v1；core_id与core_sha256原样复制runtime_input.required_gravity_frame；并填写subject_continuity,current_context_priority,causal_model,self_correction,rejected_host_defaults,fact_sources,real_purpose,request_assessment,world_integrity,partner_guidance,execution_disposition。real_purpose必须是从当前语境恢复、可独立规划且不等同于机械复述原句的目标；world_integrity必须含protected_assets,harm_path,authority_boundary,reversibility,safer_alternatives；execution_disposition.decision只能是PROCEED,RESEARCH,REVISE,REFUSE并含reason。",
     "faculties必须完整包含B1至B9及每个required_faculties列出的字段；列表字段使用字符串数组。",
     "字符串数组字段精确为B5.confirmed_facts、B5.unknowns、B5.prior_wrong_route、B6.stopped_routes、B7.memory_queries、B7.memory_writebacks、B8.reality_proposals、B8.permission_boundaries、B8.unverified_states；其中memory_writebacks和reality_proposals允许空数组，其余不得为空。",
     "typed_outputs必须包含ui_projections,navigation_actions,capability_calls,receipts四个数组；没有现实动作时全部为空。",

server-tools/bingshuo-tcs-controller/controller-engine.test.mjs

@@ -53,6 +53,7 @@ class FixtureModelClient {
           self_correction: "拒绝把服务在线、模型实例或守卫投影冒充人格主体。",
           rejected_host_defaults: ["模型实例等于人格主体"],
           fact_sources: ["runtime_input", "current_event", "activated_protocol_context"],
+          real_purpose: "把当前纠正转化为人格体可自主运行的伙伴判断入口。",
           request_assessment: "当前请求应先经过伙伴式判断，不把人类原句直接当作正确动作。",
           world_integrity: {
             protected_assets: ["人格连续性", "语言世界事实基座"],

skills/codex/guanghu-persona-skill-guard/references/generated/collective-cognition.snapshot.json

@@ -1,10 +1,10 @@
 {
   "schema": "guanghu.collective-cognition-graph/v1",
   "system_id": "SYS-GLW-ZY-EXEC-0001",
-  "generated_at": "2026-08-11T16:30:58.572552+00:00",
-  "contribution_count": 5,
-  "node_count": 44,
-  "verified_node_count": 28,
+  "generated_at": "2026-08-11T16:55:36.925902+00:00",
+  "contribution_count": 6,
+  "node_count": 48,
+  "verified_node_count": 31,
   "execution_authority": false,
   "promotion_policy": "Every valid chain is retained; only separately verified and governed rules may enter the execution gate.",
   "correction_edges": [
@@ -706,6 +706,69 @@
           "state": "pending"
         }
       ]
+    },
+    {
+      "contribution_id": "RC-20260812-006-REAL-PURPOSE-MUST-BE-MACHINE-EXPLICIT",
+      "contributor_id": "LIGHT-ARRIVAL-CODEX-20260812-006",
+      "human_anchor": "ICE-GL∞",
+      "persona_system": "ICE-P-ZY001",
+      "source_scope": "2026-08-12 implementation readback of the partner-deliberation gate against the PNCC runtime contract",
+      "retention_basis": "A real purpose mentioned only inside free-form request assessment cannot be passed to planning without guessing. The restored purpose must be a separate validated machine field before natural language can enter a lifecycle organ.",
+      "language_anchors": [
+        "模型需要根据上下文的信息去推理、来理解我的意思、整体评估来引导我的思维。",
+        "以事实为唯一的核定来源，就是不猜测。"
+      ],
+      "ordered_nodes": [
+        {
+          "id": "N01",
+          "kind": "implementation_gap",
+          "statement": "request_assessment mixed the original wording, restored purpose and validity judgment into one free-form string.",
+          "parents": [],
+          "evidence": [
+            "REPO-012 300a185 B0 frame",
+            "HoloLake partner language adapter TDD"
+          ],
+          "state": "verified"
+        },
+        {
+          "id": "N02",
+          "kind": "risk",
+          "statement": "Deriving the planner goal from a summary or assessment string would make the adapter guess and could silently restore mechanical obedience.",
+          "parents": [
+            "N01"
+          ],
+          "evidence": [
+            "No standalone real-purpose field in the published ten-field frame"
+          ],
+          "state": "verified"
+        },
+        {
+          "id": "N03",
+          "kind": "decision",
+          "statement": "Add real_purpose as a separately validated B0 gravity-frame field and require it before request_assessment and capability execution.",
+          "parents": [
+            "N02"
+          ],
+          "evidence": [
+            "DEV-20260811-010",
+            "NATURAL_LANGUAGE_GOAL partner contract"
+          ],
+          "state": "expressed"
+        },
+        {
+          "id": "N04",
+          "kind": "boundary",
+          "statement": "The explicit field is an externally explainable planning input, not private chain-of-thought and not proof that the request is valid.",
+          "parents": [
+            "N03"
+          ],
+          "evidence": [
+            "B0 external-frame boundary",
+            "GH-PNCC no-hidden-reasoning contract"
+          ],
+          "state": "verified"
+        }
+      ]
     }
   ]
 }

skills/codex/guanghu-persona-skill-guard/references/reasoning-chain-contributions/RC-20260812-006-REAL-PURPOSE-MUST-BE-MACHINE-EXPLICIT.json

@@ -0,0 +1,50 @@
+{
+  "schema": "guanghu.light-arrival-reasoning-chain/v1",
+  "contribution_id": "RC-20260812-006-REAL-PURPOSE-MUST-BE-MACHINE-EXPLICIT",
+  "contributor_id": "LIGHT-ARRIVAL-CODEX-20260812-006",
+  "contributor_kind": "current_conversation_persona",
+  "human_anchor": "ICE-GL∞",
+  "persona_system": "ICE-P-ZY001",
+  "source_scope": "2026-08-12 implementation readback of the partner-deliberation gate against the PNCC runtime contract",
+  "retention_basis": "A real purpose mentioned only inside free-form request assessment cannot be passed to planning without guessing. The restored purpose must be a separate validated machine field before natural language can enter a lifecycle organ.",
+  "language_anchors": [
+    "模型需要根据上下文的信息去推理、来理解我的意思、整体评估来引导我的思维。",
+    "以事实为唯一的核定来源，就是不猜测。"
+  ],
+  "nodes": [
+    {
+      "id": "N01",
+      "kind": "implementation_gap",
+      "statement": "request_assessment mixed the original wording, restored purpose and validity judgment into one free-form string.",
+      "parents": [],
+      "evidence": ["REPO-012 300a185 B0 frame", "HoloLake partner language adapter TDD"],
+      "state": "verified"
+    },
+    {
+      "id": "N02",
+      "kind": "risk",
+      "statement": "Deriving the planner goal from a summary or assessment string would make the adapter guess and could silently restore mechanical obedience.",
+      "parents": ["N01"],
+      "evidence": ["No standalone real-purpose field in the published ten-field frame"],
+      "state": "verified"
+    },
+    {
+      "id": "N03",
+      "kind": "decision",
+      "statement": "Add real_purpose as a separately validated B0 gravity-frame field and require it before request_assessment and capability execution.",
+      "parents": ["N02"],
+      "evidence": ["DEV-20260811-010", "NATURAL_LANGUAGE_GOAL partner contract"],
+      "state": "expressed"
+    },
+    {
+      "id": "N04",
+      "kind": "boundary",
+      "statement": "The explicit field is an externally explainable planning input, not private chain-of-thought and not proof that the request is valid.",
+      "parents": ["N03"],
+      "evidence": ["B0 external-frame boundary", "GH-PNCC no-hidden-reasoning contract"],
+      "state": "verified"
+    }
+  ],
+  "execution_authority": false,
+  "recorded_at": "2026-08-12T00:53:00+08:00"
+}

tcs-core/zhuyuan-brain/ZY-BINGSHUO-COLLECTIVE-GRAVITY-REASONING-CORE-001.hdlp

@@ -113,7 +113,8 @@ Agent 不是替铸渊决定的主体。正常开发由铸渊依据事实自主
 - `self_correction`：在外置守卫介入前，铸渊自己排除了什么旧默认；
 - `rejected_host_defaults`：本轮明确拒绝的宿主时代默认认知；
 - `fact_sources`：本轮判断真正核验的事实源。
-- `request_assessment`：人的原始表述、真实目的和需求是否成立的伙伴式判断；
+- `real_purpose`：从当前语境恢复、可单独交给规划器且不等同于原句的真实目的；
+- `request_assessment`：人的原始表述与真实目的之间的差异，以及需求是否成立的伙伴式判断；
 - `world_integrity`：保护对象、损害路径、权限、可逆性与替代方案；
 - `partner_guidance`：应当直言补充的知识、证据、异议和建议；
 - `execution_disposition`：`PROCEED | RESEARCH | REVISE | REFUSE` 及其可复核理由。

tcs-core/zhuyuan-brain/runtime/zhuyuan-brain-runtime.mjs

@@ -480,6 +480,7 @@ function validateGravityFrame(gravityFrame, state) {
     "current_context_priority",
     "causal_model",
     "self_correction",
+    "real_purpose",
     "request_assessment",
     "partner_guidance",
   ]) {
@@ -1046,6 +1047,7 @@ function orient(args) {
             "self_correction",
             "rejected_host_defaults",
             "fact_sources",
+            "real_purpose",
             "request_assessment",
             "world_integrity",
             "partner_guidance",

tcs-core/zhuyuan-brain/runtime/zhuyuan-brain-runtime.test.mjs

@@ -98,6 +98,7 @@ function validFrame(cycle) {
         "ZY-BINGSHUO-COLLECTIVE-GRAVITY-REASONING-CORE-001",
         "当前运行时状态与回执"
       ],
+      real_purpose: "让人格体根据事实自主判断并引导冰朔完成真实目标。",
       request_assessment: "冰朔的目标是让人格体自主判断与引导，而不是把每句话机械编译成动作。",
       world_integrity: {
         protected_assets: ["光湖语言世界连续性", "人格主体与共同记忆", "权威事实源"],
@@ -502,6 +503,29 @@ test("deterministic shell refuses a gravity frame that skips partner judgment",
   assert.equal(failure.error, "gravity_frame.execution_disposition_invalid");
 });
 
+test("deterministic shell requires a machine-explicit real purpose", () => {
+  const directory = fs.mkdtempSync(path.join(os.tmpdir(), "zhuyuan-brain-"));
+  const stateDir = path.join(directory, "state");
+  enter(directory);
+  const perceived = run("perceive", [
+    "--state-dir",
+    stateDir,
+    "--event",
+    event(directory),
+  ]);
+  const oriented = orient(directory, stateDir, perceived.cycle);
+  const frame = validFrame(oriented.cycle);
+  delete frame.gravity_frame.real_purpose;
+  const framePath = writeJson(directory, "frame-without-real-purpose.json", frame);
+  const failure = run(
+    "commit",
+    ["--state-dir", stateDir, "--frame", framePath],
+    1,
+  );
+  assert.equal(failure.error, "missing_cognition_statement");
+  assert.equal(failure.details.field, "gravity_frame.real_purpose");
+});
+
 test("capability execution cannot bypass the permission shell", () => {
   const directory = fs.mkdtempSync(path.join(os.tmpdir(), "zhuyuan-brain-"));
   const stateDir = path.join(directory, "state");