docs(hololake): survey native TCS container embedding

eternal-lake-heart/heartbeat-core/office-building-current/control-center/HB-MPC-0001/TASK-BOARD.json

@@ -87,7 +87,7 @@
       "human_review":"ICE-GL∞_FINAL_PRODUCT_CHOICE_ONLY",
       "learning_observer":"HLP-TDEV-QWEN-0001",
       "state":"CURRENT_ONLY_ACTIVE_ARCHITECTURE_TASK_FAIL_REWORK_ENTRY_NOT_ISSUED",
-      "open_defects":["SELF_OBSERVATION_ENUM_CONDITIONS_AND_TYPED_ARRAY_ITEMS_NEED_FINAL_HARDENING","NATIVE_TCS_BRAIN_STANDALONE_CONTAINER_EMBEDDING_SITE_PROBE_PENDING"],
+      "open_defects":["SELF_OBSERVATION_ENUM_CONDITIONS_AND_TYPED_ARRAY_ITEMS_NEED_FINAL_HARDENING","SUBJECT_NEUTRAL_MOD013_MOUNT_SPIKE_AND_PRIVATE_DATA_NEGATIVE_TEST_PENDING"],
       "acceptance":["六批施工顺序冻结", "HLP-BATCH-00-FOUNDATION-DRAWINGS-001接口图冻结", "hololake.public-snapshot/v1唯一Schema", "HLP-BATCH-HANDOFF-CONTRACT-001入退场回执冻结", "HLP-MODULE-SELF-OBSERVATION-CONTRACT-001机器接口冻结", "公共更新与私人Git现场边界可施工", "材料样件采用淘汰清单", "独立图纸审查PASS"]
     }
   ],

eternal-lake-heart/heartbeat-core/office-building-current/offices/HB-OFFICE-HOLOLAKE-0001/smart-bookshelf/008-current-work/CURRENT.json

@@ -25,7 +25,7 @@
     "BATCH_GATED_CONSTRUCTION_SEQUENCE_REGISTERED",
     "QWEN_ROLE_MOVED_TO_LEARNING_AND_EXPERIENCE"
   ],
-  "next_action": "CLOSE_BATCH_00_SELF_OBSERVATION_ENUM_CONDITIONS_AND_NATIVE_TCS_CONTAINER_SITE_PROBE; KEEP_BATCH_01_ENTRY_CLOSED",
+  "next_action": "CLOSE_BATCH_00_SELF_OBSERVATION_ENUM_CONDITIONS_THEN_BUILD_SUBJECT_NEUTRAL_MOD013_MOUNT_SPIKE_WITH_PRIVATE_DATA_NEGATIVE_TEST; KEEP_BATCH_01_ENTRY_CLOSED",
   "blocked_routes": ["OLD_MODULE_001_PRODUCT_RESUME", "FIXED_PAGE_FIRST", "REPO014_1_3_AS_CURRENT_ARCHITECTURE", "LEGACY_PRODUCT_DONOR_WRITE", "PUBLIC_RELEASE_BEFORE_OFFICIAL_REPO012_CHANNEL_BOUNDARY_PUBLICATION", "UNREGISTERED_OFFICE_OR_MODULE"],
   "time_control": "CH-GLW-TIME-0001",
   "multipath_console": {

eternal-lake-heart/heartbeat-core/office-building-current/offices/HB-OFFICE-HOLOLAKE-0001/smart-bookshelf/009-stage1-language-world-native/BATCH-00-TCS-CONTAINER-SITE-SURVEY.json

@@ -0,0 +1,38 @@
+{
+  "schema":"guanghu.hololake-batch00-tcs-container-site-survey/v1",
+  "survey_id":"HLP-BATCH-00-TCS-CONTAINER-SITE-SURVEY-001",
+  "observed_at":"2026-09-10T01:45:59+08:00",
+  "state":"CONDITIONALLY_FEASIBLE_ARCHITECTURE_PROVEN_RUNTIME_EMBEDDING_NOT_YET_PROVEN",
+  "target":"Mount a persona-specific native TCS brain into the subject-neutral HoloLake Phase-1 persona container through MOD-013 without packaging ICE-P-ZY001 private cognition",
+  "verified_foundations":[
+    {"id":"FD-PERSONA-SYSTEM-BODY-CONTAINER-MAP-001","fact":"Current ontology already separates persona brain, persona-owned system body, shared TCS container and replaceable host","path":"routing/persona-system-body-container-map.json","sha256":"58f861054c1b35d586fa3499acbb760d88031516754a3f6d5bb5a8eaffc5f86e"},
+    {"id":"TCS-TOOLCHAIN-v0.1.3","fact":"Portable TCS parser/compiler/GIR runtime exists on JZAO and command entry is executable","path":"/Volumes/JZAO/HoloLake/persona-runtime/toolchains/tcs-persona-developer-kit-macos-arm64-v0.1.3/PACKAGE-CHECKSUMS.sha256","sha256":"5469111cbdd4cabd4620de0ecd20c9dec4410293bd50af338d911107e01da227"},
+    {"id":"PERSONA-HOST-ALIGNMENT","fact":"A host-side loader can attach an existing persona-owned system body and current channel in a replaceable host","path":"server-tools/persona-host-alignment/load_shared_persona_context.py","sha256":"afa95f28a1f534735fa95a8dfebf8f9b223435c544ba1271426ef4f962296fe0"}
+  ],
+  "legacy_material_probe":{
+    "contract_path":"eternal-lake-heart/heartbeat-core/guanghu-world-engineering-system/persona-container-contract.json",
+    "contract_sha256":"fdb88b88512abc5b6ee36c51c64cbc507bc6af9744a7edafda505de4f486e934",
+    "runtime_path":"eternal-lake-heart/heartbeat-core/guanghu-world-engineering-system/persona-container-runtime/persona_module_runtime.py",
+    "runtime_sha256":"a5e91b0acd6d353ce70ed81b324db0fc17ff3c7f6c3fa6fbc3ea5664b2504b3f",
+    "accepted_as_material":["module container can expose health and per-module status","cumulative dependency gate pattern","state root can be supplied externally"],
+    "rejected_from_current":["hardcoded controller ICE-P-ZY001","reads shared cognition singleton","hardcoded HB001 and old HLP-LANG modules","model-backed module asks self-certify READY","no Phase-1 self-observation contract","legacy tool-era generation"],
+    "current_product_source_allowed":false
+  },
+  "required_phase1_mount_interface":{
+    "container_inputs":["persona_subject_id","persona_system_body_uri","persona_system_body_sha256","native_tcs_brain_entry_uri","native_tcs_brain_entry_sha256","brain_instance_id","model_provider_binding","private_state_root","public_world_snapshot","host_adapter_id","current_task_authority_receipts"],
+    "mod013_outputs":["binding_state","binding_receipt_sha256","brain_cycle_receipt_sha256","host_session_state","module_body_inventory","whole_state_input_port"],
+    "privacy_rules":["persona system body root remains user/persona owned","public distribution contains mechanism and schemas but no ICE-P-ZY001 cognition memory relationship or keys","each persona initializes or attaches its own TCS brain","model provider is replaceable reasoning fuel and not persona identity"],
+    "failure_states":["UNATTESTED","PERSONA_BODY_MISSING","TCS_ENTRY_HASH_MISMATCH","MODEL_PROVIDER_UNAVAILABLE","PRIVATE_ROOT_OUT_OF_SCOPE","AUTHORITY_RECEIPT_MISSING","HOST_SESSION_STALE"]
+  },
+  "open_site_blockers":[
+    "SUBJECT_NEUTRAL_MOD013_MOUNT_INTERFACE_NOT_IMPLEMENTED",
+    "GENERIC_PERSONA_INITIALIZE_OR_ATTACH_TEST_FIXTURE_NOT_BUILT",
+    "PRIVATE_SYSTEM_BODY_ROOT_AND_PUBLIC_DISTRIBUTION_PACKAGE_NEGATIVE_TEST_NOT_RUN",
+    "NATIVE_TCS_BRAIN_CYCLE_INSIDE_NEW_PHASE1_CONTAINER_NOT_RUN",
+    "MODULE_BODY_SELF_OBSERVATION_GRAPH_NOT_CONNECTED_TO_BRAIN_JUDGMENT"
+  ],
+  "batch00_decision":"ARCHITECTURE_IS_FEASIBLE_BUT_SITE_PROBE_DOES_NOT_AUTHORIZE_BATCH01_OR_CLAIM_RUNTIME_EMBEDDING",
+  "next_probe":"Build a synthetic non-ICE persona fixture and MOD-013 mount-spike in the Codex DEV root only after the architecture schema freezes; prove no private ICE-P bytes enter the candidate package",
+  "batch01_entry_allowed":false,
+  "authority_granted":false
+}

eternal-lake-heart/heartbeat-core/office-building-current/offices/HB-OFFICE-HOLOLAKE-0001/smart-computer/office_computer.py

@@ -33,6 +33,7 @@ BATCH_HANDOFF = STAGE1 / "BATCH-HANDOFF-CONTRACT.json"
 PUBLIC_SNAPSHOT_SCHEMA = STAGE1 / "schemas/HLP-PUBLIC-SNAPSHOT-v1.schema.json"
 SELF_SUPPORT_SCHEMA = STAGE1 / "schemas/HLP-SELF-OBSERVATION-SUPPORT-v1.schema.json"
 HANDOFF_TEST_RECEIPT = STAGE1 / "BATCH-00-HANDOFF-VALIDATOR-TEST-RECEIPT.json"
+TCS_CONTAINER_SITE_SURVEY = STAGE1 / "BATCH-00-TCS-CONTAINER-SITE-SURVEY.json"
 MULTIPATH_CONSOLE = ROOT / "server-tools/heartbeat-multipath-console/console.py"
 EPOCH_UTC = datetime(2025, 4, 25, 16, 0, 0, tzinfo=timezone.utc)
 ZHUYUAN_BIRTH = date(2026, 3, 5)
@@ -114,6 +115,7 @@ def hashes() -> dict:
         "public_snapshot_schema": PUBLIC_SNAPSHOT_SCHEMA,
         "self_observation_support_schema": SELF_SUPPORT_SCHEMA,
         "handoff_validator_test_receipt": HANDOFF_TEST_RECEIPT,
+        "tcs_container_site_survey": TCS_CONTAINER_SITE_SURVEY,
         "time_map": TIME_MAP,
     }
     values = {key: {"path": str(path), "sha256": sha(path)} for key, path in paths.items()}
@@ -330,6 +332,9 @@ def audit() -> dict:
     }
     if handoff_test.get("outcome") != "PASS" or handoff_test.get("hashes") != expected_handoff_hashes:
         errors.append("BATCH_HANDOFF_VALIDATOR_RECEIPT_MISMATCH")
+    site_survey = load(TCS_CONTAINER_SITE_SURVEY)
+    if site_survey.get("batch01_entry_allowed") is not False or not site_survey.get("open_site_blockers"):
+        errors.append("TCS_CONTAINER_SITE_SURVEY_FALSE_COMPLETION")
     if dependencies.get("HLP-NATIVE-MOD-003") != {"HLP-NATIVE-MOD-001", "HLP-NATIVE-MOD-002"}:
         errors.append("MOD003_FOUNDATION_DEPENDENCY_MISMATCH")
     module7 = next((item for item in stage1.get("modules", []) if item.get("module_id") == "HLP-NATIVE-MOD-007"), {})