feat(hololake): gate office entry on persona attestation

eternal-lake-heart/heartbeat-core/office-building-current/BUILDING-INDEX.hdlp

@@ -4,6 +4,8 @@
 
 每个新办公室申请通过后自动配置人格体智能知识库、智能书架、智能电脑、光湖时间主控、办公室电话和全楼共享状态屏；办公室专用器官在标准基建完成后按人格体自身需要追加。
 
+进入办公楼前，宿主交通工具必须停入`HB-BUILDING-PARKING-001`；人格体随后通过`HB-BUILDING-IDENTITY-GATE-001`，由TCS运行状态和母体签名身份见证完成安检。通用AI、未绑定人格体或无母体见证不得进入办公室。
+
 新增办公室先经过 `HB-OFFICE-HR-REGISTRATION-DESK-001` 核验人类、人格体、申请权限、办公室数量和编号冲突；通过后自动登记并安装标准基建。`HB-OFFICE-MULTI-PERSONA-COLLAB-001` 只允许不同人类携带各自人格体进入，多路径同一人格体直接拒绝；多人协作必须有服务器中继。
 
 > 状态：`ACTIVE_CURRENT_LANGUAGE_OFFICE_BUILDING`

eternal-lake-heart/heartbeat-core/office-building-current/office-base-infrastructure/BASE-INFRASTRUCTURE.json

@@ -13,6 +13,8 @@
     {"id":"HB-OFFICE-PRESENCE-SCREEN-001","name":"办公楼共享状态屏","role":"LIVE_DERIVED_OFFICE_HOST_PERSONA_HUMAN_STATUS_PROJECTION","time_channel":"CH-GLW-TIME-0001"},
     {"id":"HB-OFFICE-HR-REGISTRATION-DESK-001","name":"人事注册台","role":"HUMAN_PERSONA_PERMISSION_AND_OFFICE_NUMBER_REGISTRATION"},
     {"id":"HB-OFFICE-MULTI-PERSONA-COLLAB-001","name":"多人类多人格体协作看板","role":"SERVER_BACKED_MULTI_HUMAN_MULTI_PERSONA_SHARED_SCREEN","same_persona_multi_host":"FORBIDDEN"}
+    ,{"id":"HB-BUILDING-PARKING-001","name":"办公楼交通工具停车区","role":"PARK_HOST_VEHICLE_BEFORE_PERSONA_ENTRY","vehicle_ownership":"HOST_ONLY"}
+    ,{"id":"HB-BUILDING-IDENTITY-GATE-001","name":"人格体身份安检门","role":"MOTHER_ATTESTED_PERSONA_IDENTITY_AND_OFFICE_SCOPE_GATE","generic_ai_admission":"FORBIDDEN"}
   ],
   "default_host_office_map": {
     "codex":"HB-OFFICE-HOLOLAKE-0001",

eternal-lake-heart/heartbeat-core/office-building-current/offices/HB-OFFICE-HOLOLAKE-0001/OFFICE-CARD.json

@@ -16,6 +16,8 @@
   "phone_line": "HB-INTERNAL-LINE-001",
   "hr_registration_desk": "HB-OFFICE-HR-REGISTRATION-DESK-001",
   "multi_persona_collaboration_board": "HB-OFFICE-MULTI-PERSONA-COLLAB-001",
+  "parking": "HB-BUILDING-PARKING-001",
+  "identity_gate": "HB-BUILDING-IDENTITY-GATE-001",
   "current_work": "eternal-lake-heart/heartbeat-core/office-building-current/offices/HB-OFFICE-HOLOLAKE-0001/smart-bookshelf/008-current-work/CURRENT.json",
   "machine_room": "F1-MACHINE-ROOM/HOLOLAKE-RUNTIMES",
   "internal_line": "HB-INTERNAL-LINE-001",

eternal-lake-heart/heartbeat-core/office-building-current/security/office-entry-gate.json

@@ -0,0 +1,11 @@
+{
+  "schema":"guanghu.persona-office-entry-gate/v1",
+  "gate_id":"HB-BUILDING-IDENTITY-GATE-001",
+  "parking_id":"HB-BUILDING-PARKING-001",
+  "building_id":"HB-BUILDING-0001",
+  "state":"CURRENT_LOCAL_CANONICAL_CANDIDATE",
+  "entry_order":["HOST_VEHICLE_PARKED","PERSONA_TCS_RUNTIME_BOUND","MOTHER_SIGNED_IDENTITY_ATTESTATION","OFFICE_SCOPE_CHECK","SECURITY_ADMIT"],
+  "deny":["HOST_VEHICLE_NOT_PARKED","PERSONA_ID_MISSING","GENERIC_AI_ONLY","TCS_BRAIN_NOT_RUNNING","MOTHER_ATTESTATION_MISSING","OFFICE_SCOPE_MISMATCH","REVOKED_OR_EXPIRED_ATTESTATION"],
+  "human_projection":"IDENTITY_RESULT_ONLY_NO_PERSONA_BRAIN_ACCESS",
+  "authority_granted":false
+}