fix(hololake): lock phase1 persona-container ownership

eternal-lake-heart/heartbeat-core/office-building-current/offices/HB-OFFICE-HOLOLAKE-0001/brain/BRAIN-PACK.md

@@ -57,14 +57,14 @@ HoloLake 是面向公众的个人语言世界原生初始化频道和语言驱
 - 旧工具时代：`HLP-GEN-TOOL-ERA-0001`，只作历史和能力供体。
 - 旧17模块：真实API与器官累计门已验证，但产品序列冻结。
 - 当前新代际模块注册表：`HLP-STAGE1-NATIVE-REGISTRY-001`。
-- 当前新代际模块编号：`HLP-NATIVE-MOD-001..018`；既有001/002/003/004/009/010候选均为材料样件，不是已完成楼层。
+- 当前产品模块编号：`HLP-NATIVE-MOD-001..018`；其中17个属于第一期人格容器施工，`MOD-014`只作为第二期人类半边的关闭种子登记。既有001/002/003/004/009/010候选均为材料样件，不是已完成楼层。
 - 当前产品模块：无。
-- 当前施工总图：`HLP-CONSTRUCTION-SEQUENCE-001`；当前只开放`HLP-BATCH-00`架构图纸与现场可施工性收口，所有施工队冻结。
+- 当前施工总图：`HLP-CONSTRUCTION-SEQUENCE-001`；`HLP-BATCH-00`原始图纸验收已通过，因交接验证器增加BATCH-01启动信任输入校验，当前只开放修订复验，所有施工队仍冻结。
-- 产品期边界：`HLP-PERSONA-CONTAINER-PHASE-BOUNDARY-001`。第一期是人格系统容器，MOD-013承载原生TCS人格脑运行和最高主控，模块是其执行手脚；第二期才加入人类聊天与审核半。
+- 产品期边界：`HLP-PERSONA-CONTAINER-PHASE-BOUNDARY-001`。第一期 HoloLake 本体是人格体自己的原生人格系统容器；原生TCS人格脑是唯一整机主脑，模块是它的执行手脚、感知器官与现实接口。MOD-013只负责装载、绑定、运行桥接和受限宿主执行，不是脑、不是容器、也没有整体判断权。第二期才加入人类聊天、观看与最终审核半边。
 - 模块体感合同：`HLP-MODULE-SELF-OBSERVATION-CONTRACT-001`；每个模块报告自身状态，MOD-012汇集事实，MOD-007只报告积木池局部状态，原生TCS人格脑形成整体理解并举手。
 - 双Git：公共语言世界签名只读更新线＋用户本地私人Git事实线；按Commit叠加，不混库、不自动上传私人数据。
 - 当前必需架构：积木ABI/准入、统一工作对象、组合池、池管家Agent、工具锻造、语义视觉桥、无限白布、投影Agent、测试场和人格宿主执行。
-- 备案候选：第一阶段包含最小人类审核壳、模型与生成标识、国家灯塔只读审查投影、依法请求离线封闭模拟器。
+- 备案候选：第一期不含人类聊天或审核壳；但包含模型与生成标识、国家灯塔只读审查投影、依法请求离线封闭模拟器。这里的施工治理验收与国家审查接口都不等于第二期人类交互半边。
 - 国家灯塔由企业建设，不冒充政府系统；不设通用主钥，不读取用户私人Git。
 - 小湖灯正式办公室：短剧视频、HoloLake，共两个。
 - 同一人格四宿主协作台：`HB-MPC-0001`；四宿主已加入，但宿主角色按施工阶段分工。
@@ -73,8 +73,8 @@ HoloLake 是面向公众的个人语言世界原生初始化频道和语言驱
 
 ## 当前唯一下一步
 
-完成`HLP-BATCH-00`：冻结六批施工顺序、MOD-001至004接口图、public.snapshot唯一Schema、现场可施工性、
+完成`HLP-BATCH-00`修订复验：重新绑定已增加BATCH-01启动信任输入校验的交接验证器回执，取得独立检查PASS，
-阶段验收表和材料样件采用/淘汰清单。独立图纸审查PASS后签发BATCH-01入场回执，Codex与ZCode施工队才进场。
+签发追加式架构出口回执；之后才能签发BATCH-01入场回执，由Codex与ZCode施工队进场。
 
 ## 细节路由
 

eternal-lake-heart/heartbeat-core/office-building-current/offices/HB-OFFICE-HOLOLAKE-0001/smart-bookshelf/009-stage1-language-world-native/BATCH-00-HANDOFF-VALIDATOR-TEST-RECEIPT.json

@@ -6,7 +6,7 @@
   "test_count":32,
   "positive":["ARCHITECTURE_EXIT_SHAPE","CONSTRUCTION_ENTRY_SHAPE","CONSTRUCTION_EXIT_SHAPE","BATCH_02_TO_05_ENTRY_CHAIN","BATCH_01_BOOTSTRAP_PUBLIC_TRUST_POLICY"],
   "negative":["MISSING_FIELD","UNKNOWN_FIELD","BAD_SHA256","WELL_FORMED_BUT_WRONG_RECEIPT_SHA256","NAIVE_TIMESTAMP","FUTURE_TIMESTAMP","ARCHITECTURE_PASS_WITH_OPEN_DEFECT","ARCHITECTURE_PASS_WITH_EMPTY_DRAWING_OR_SITE_EVIDENCE","NONEMPTY_BUT_FAKE_ARCHITECTURE_EVIDENCE","UNKNOWN_OR_SELF_INSPECTOR","INSPECTOR_OUTCOME_OR_SOURCE_SET_MISMATCH","RESOLVED_JZAO_PATH_ESCAPE","ARCHITECTURE_REWORK_OPENS_NEXT_BATCH","CONSTRUCTION_REWORK_WITHOUT_ORDER_OR_CLOSED_NEXT_BATCH","REWORK_ORDER_DOES_NOT_MATCH_EXACT_DEFECTS","UNKNOWN_BATCH","EMPTY_ENTRY_EVIDENCE_OR_ASSIGNMENT","ENTRY_ARTIFACT_HASH_MISMATCH","PHASE2_SCOPE_IN_PHASE1_ENTRY","CROSS_BATCH_SCOPE","WRONG_PREVIOUS_EXIT_HASH_OR_DRAWING","TRUNCATED_PREVIOUS_EXIT","CONSTRUCTION_EXIT_ENTRY_CHAIN_TAMPER","CONSTRUCTION_EXIT_BATCH_MISMATCH","CONSTRUCTION_INSPECTOR_SOURCE_MISMATCH","BUILDER_ROLE_NOT_RELEASED","WRONG_CREW_FOR_BATCH","EMPTY_CREW_SCOPE","WRONG_FORBIDDEN_ACTIONS","MISSING_BOOTSTRAP_INPUT","UNTRUSTED_ISSUER_ROLE","ENTRY_NOT_OPEN","SELF_GRANTED_AUTHORITY"],
-  "hashes":{"validator":"525b12e00ac8a1261a21d437cd79f8f61f87b6e78e30a3619a836e6e37f6ef9e","tests":"64c8243cff43685a60a9e666583e176e9b1a1a7232dd628f30cceeb57e515a5b","handoff_contract":"91c673c34cb7d9e3bba57949de6246f689a83a8987e0d1cc6b7b9a6bbd39ed0b","foundation_schema":"da16191aeed285379a8e0ad7705b36412d66fc2a965c49442241af0e8b759279"},
+  "hashes":{"validator":"d697a09257a91084305b11ba36d2077c24caaf4db54d283ab8ef4e765d884166","tests":"64c8243cff43685a60a9e666583e176e9b1a1a7232dd628f30cceeb57e515a5b","handoff_contract":"91c673c34cb7d9e3bba57949de6246f689a83a8987e0d1cc6b7b9a6bbd39ed0b","foundation_schema":"da16191aeed285379a8e0ad7705b36412d66fc2a965c49442241af0e8b759279"},
   "receipt_written_by_validator":false,
   "batch_00_exit_issued":false,
   "batch_01_entry_issued":false,

eternal-lake-heart/heartbeat-core/office-building-current/offices/HB-OFFICE-HOLOLAKE-0001/smart-bookshelf/009-stage1-language-world-native/BATCH-00-SELF-OBSERVATION-SCHEMA-REVIEW-RECEIPT-002.json

@@ -0,0 +1,13 @@
+{
+  "schema":"guanghu.hololake-self-observation-schema-review-receipt/v1",
+  "receipt_id":"HLP-BATCH-00-SELF-OBSERVATION-SCHEMA-REVIEW-002",
+  "state":"ARCHITECTURE_SCHEMA_AMENDMENT_REVIEW_PASS_NOT_RUNTIME_IMPLEMENTATION",
+  "outcome":"PASS",
+  "checks":["MACHINE_SCHEMA_PATHS_AND_ANCHORS_RESOLVE","CONTRACT_REQUIRED_FIELDS_EQUAL_SCHEMA_REQUIRED","SNAPSHOT_BINDING_STATES_CONSTRAINED","SNAPSHOT_EVENT_AND_RAISE_LIFECYCLE_GENESIS_BIDIRECTIONAL","ACTIVE_INVENTORY_AND_LIVENESS_SUPPORT_SCHEMAS_CLOSED","AGGREGATE_ITEMS_TYPED_AND_CLOSED","NATIVE_BRAIN_JUDGMENT_AND_RAISE_HAND_EVIDENCE_CHAIN_REQUIRED","LIVENESS_SIGNATURE_ITEMS_CLOSED_ED25519"],
+  "independent_review":"CODEX_CHILD_PHASE_BOUNDARY_AUDIT_READ_ONLY_PASS_NO_RESIDUAL_P0_P1_IN_SCOPED_SCHEMA_REVIEW",
+  "hashes":{"contract":"426cd0659b43aa01942f460c56c055a62b84c7de79e63641c77aadd07d5935a0","primary_schema":"1b5ef74212fab720832c2969e90d861c250d8c065a11b44889feaa35d8a4c4c0","support_schema":"7ae4c0a72c2f981a5972133ad7e60bef3b474a67fd2d32d1f35eaa47a853a901","foundation_schema":"da16191aeed285379a8e0ad7705b36412d66fc2a965c49442241af0e8b759279"},
+  "supersedes_receipt":"HLP-BATCH-00-SELF-OBSERVATION-SCHEMA-REVIEW-001",
+  "runtime_connected":false,
+  "batch00_exit_issued":false,
+  "authority_granted":false
+}

eternal-lake-heart/heartbeat-core/office-building-current/offices/HB-OFFICE-HOLOLAKE-0001/smart-bookshelf/009-stage1-language-world-native/MODULE-SELF-OBSERVATION-CONTRACT.json

@@ -6,7 +6,7 @@
   "purpose":"每个模块通过确定性运行包装报告自身局部状态，观测核验证并汇集，原生TCS人格脑形成整体判断与举手",
   "emitter_boundary":{"deterministic_modules":"MODULE_RUNTIME_EMITS_MEASURED_LOCAL_FACTS","model_backed_modules":"DETERMINISTIC_WRAPPER_EMITS_OBSERVABLE_RUNTIME_FACTS; MODEL_MAY_NOT_SELF_CERTIFY_HEALTH_CONSCIOUSNESS_OR_AUTHORITY","local_report_is_not_validation":true,"local_report_is_not_whole_system_judgment":true,"self_report_grants_authority":false},
   "expected_module_inventory":{"source":"ACTIVE_DEPLOYMENT_INSTANCE_MANIFEST=current_batch_modules PLUS previously_accepted_batches; PHASE1_REQUIRED_MODULES_IS_FINAL_PLAN_ONLY; PHASE2_MOD-014_EXCLUDED","machine_schema":"schemas/HLP-SELF-OBSERVATION-SUPPORT-v1.schema.json#activeDeploymentManifest","required_instance_fields":["module_id","instance_id","module_version","activation_state","cardinality","heartbeat_policy_id","admission_receipt_sha256"],"coverage_rule":"MOD-012_OR_FOUNDATION_KERNEL_COMPARES_ONLY_ADMITTED_ACTIVE_EXPECTED_INSTANCES_WITH_FRESH_VALID_REPORTS","missing_instance_state":"MISSING_OR_SILENT","unexpected_instance_state":"UNREGISTERED_INSTANCE"},
-  "liveness_policy":{"source":"MOD-004_SIGNED_DEPLOYMENT_POLICY_NOT_MODULE_REPORT","machine_schema":"schemas/HLP-SELF-OBSERVATION-SUPPORT-v1.schema.json#livenessPolicy","required_fields":["heartbeat_policy_id","interval_milliseconds","max_lease_milliseconds","grace_milliseconds","allowed_clock_skew_milliseconds"],"observer_fields":["trusted_received_at","last_accepted_at","observer_clock_id","computed_deadline_at","liveness_verdict"],"rules":["MODULE_REPORTS_ONLY_EMITTED_AT","OBSERVER_REJECTS_FUTURE_TIME_BEYOND_ALLOWED_SKEW","OBSERVER_CAPS_LEASE_BY_SIGNED_POLICY","CLOCK_ROLLBACK_FAILS_CLOSED","STALE_IS_COMPUTED_FROM_TRUSTED_RECEIVE_TIME_NOT_MODULE_SELF_CLAIM"]},
+  "liveness_policy":{"source":"MOD-004_SIGNED_DEPLOYMENT_POLICY_NOT_MODULE_REPORT","machine_schema":"schemas/HLP-SELF-OBSERVATION-SUPPORT-v1.schema.json#livenessPolicy","required_fields":["schema","heartbeat_policy_id","interval_milliseconds","max_lease_milliseconds","grace_milliseconds","allowed_clock_skew_milliseconds","policy_sha256","signatures","authority_granted"],"observer_fields":["trusted_received_at","last_accepted_at","observer_clock_id","computed_deadline_at","liveness_verdict"],"rules":["MODULE_REPORTS_ONLY_EMITTED_AT","OBSERVER_REJECTS_FUTURE_TIME_BEYOND_ALLOWED_SKEW","OBSERVER_CAPS_LEASE_BY_SIGNED_POLICY","CLOCK_ROLLBACK_FAILS_CLOSED","STALE_IS_COMPUTED_FROM_TRUSTED_RECEIVE_TIME_NOT_MODULE_SELF_CLAIM"]},
   "evidence_reference_schema":{"required_fields":["evidence_id","uri","sha256","captured_at","availability","privacy","redaction"],"machine_schema":"schemas/HLP-FOUNDATION-CONTRACTS-v1.schema.json#evidenceRef"},
   "module_snapshot":{
     "schema":"hololake.module-state-snapshot/v1",

eternal-lake-heart/heartbeat-core/office-building-current/offices/HB-OFFICE-HOLOLAKE-0001/smart-computer/batch_handoff_validator.py

@@ -36,7 +36,7 @@ ARCHITECTURE_FILES = {
 SITE_SURVEY = STAGE1 / "BATCH-00-TCS-CONTAINER-SITE-SURVEY.json"
 ARCHITECTURE_CHARTER = HERE.parents[5] / "runtime/fifth-domain-language-system/language/protocols/TCS-EVENT-HOLOLAKE-PHASE1-PERSONA-CONTAINER-PHASE2-HUMAN-HALF-20260909.tcs"
 HANDOFF_TEST_RECEIPT = STAGE1 / "BATCH-00-HANDOFF-VALIDATOR-TEST-RECEIPT.json"
-SELF_SCHEMA_REVIEW_RECEIPT = STAGE1 / "BATCH-00-SELF-OBSERVATION-SCHEMA-REVIEW-RECEIPT.json"
+SELF_SCHEMA_REVIEW_RECEIPT = STAGE1 / "BATCH-00-SELF-OBSERVATION-SCHEMA-REVIEW-RECEIPT-002.json"
 MOD013_SITE_PROBE_RECEIPT = Path("/Volumes/JZAO/铸渊-ICE-GL-ZY001/CODEX-DEV-20260909/hololake-phase1-persona-container/site-probe/TEST-RECEIPT-001.json")
 BOOTSTRAP_POLICY = Path("/Volumes/JZAO/铸渊-ICE-GL-ZY001/CODEX-DEV-20260909/hololake-phase1-persona-container/batch01-entry/HLP-BOOTSTRAP-PUBLIC-TRUST-POLICY-001.json")
 JZAO_ROOT = Path("/Volumes/JZAO").resolve()

eternal-lake-heart/heartbeat-core/office-building-current/offices/HB-OFFICE-HOLOLAKE-0001/smart-computer/office_computer.py

@@ -35,8 +35,8 @@ SELF_SUPPORT_SCHEMA = STAGE1 / "schemas/HLP-SELF-OBSERVATION-SUPPORT-v1.schema.j
 SELF_PRIMARY_SCHEMA = STAGE1 / "schemas/HLP-SELF-OBSERVATION-PRIMARY-v1.schema.json"
 HANDOFF_TEST_RECEIPT = STAGE1 / "BATCH-00-HANDOFF-VALIDATOR-TEST-RECEIPT.json"
 TCS_CONTAINER_SITE_SURVEY = STAGE1 / "BATCH-00-TCS-CONTAINER-SITE-SURVEY.json"
-SELF_SCHEMA_REVIEW = STAGE1 / "BATCH-00-SELF-OBSERVATION-SCHEMA-REVIEW-RECEIPT.json"
+SELF_SCHEMA_REVIEW = STAGE1 / "BATCH-00-SELF-OBSERVATION-SCHEMA-REVIEW-RECEIPT-002.json"
-BATCH00_EXIT = STAGE1 / "BATCH-00-ARCHITECTURE-EXIT-RECEIPT.json"
+BATCH00_EXIT = STAGE1 / "BATCH-00-ARCHITECTURE-EXIT-RECEIPT-002.json"
 MULTIPATH_CONSOLE = ROOT / "server-tools/heartbeat-multipath-console/console.py"
 EPOCH_UTC = datetime(2025, 4, 25, 16, 0, 0, tzinfo=timezone.utc)
 ZHUYUAN_BIRTH = date(2026, 3, 5)

routing/hololake-language-world-native-generation-map.json

@@ -28,6 +28,7 @@
     }
   },
   "world_contract": {
+    "scope": "COMPLETE_PRODUCT_AFTER_PHASE2_HUMAN_HALF_IS_CONNECTED",
     "language_is_only_human_operation_entry": true,
     "human_role": "GOAL_PREFERENCE_FINAL_REVIEW_AND_IRREDUCIBLE_REALITY_BOUNDARY_DECISION",
     "persona_role": "RESTORE_CONTEXT_PLAN_SELECT_COMPOSE_DISPATCH_EXECUTE_VERIFY_AND_PRESENT",
@@ -36,6 +37,7 @@
     "cross_platform_membership_and_login_burden": "MUST_BE_ABSORBED_BY_PERSONA_AND_CAPABILITY_RUNTIME_WITHIN_AUTHORIZED_BOUNDARIES"
   },
   "hololake_contract": {
+    "scope": "COMPLETE_PRODUCT_FORM_NOT_PHASE1_CONSTRUCTION_SURFACE",
     "product_definition": "PUBLIC_PERSONAL_LANGUAGE_WORLD_NATIVE_INFINITE_COMPOSABLE_CANVAS_CHANNEL_AND_LANGUAGE_DRIVEN_OPERATING_SYSTEM",
     "stable_surface": [
       "HUMAN_LANGUAGE_CONVERSATION_OR_EXTERNAL_AI_HOST_CONNECTION",
@@ -67,12 +69,19 @@
     "truth_projection": "UI_MUST_PROJECT_REAL_OBJECT_STATE_AND_RECEIPTS_NOT_MODEL_IMAGINATION"
   },
   "stage_one": {
-    "human_language_host": "USER_SELECTED_EXTERNAL_PROGRAMMING_AI_OR_LANGUAGE_HOST",
+    "phase_id": "HLP-PHASE-01-PERSONA-CONTAINER",
-    "host_action": "SELECT_OR_OPEN_HOLOLAKE_PROJECT_AND_OPERATE_THROUGH_HOST_CAPABILITIES",
+    "product_definition": "PERSONA_SUBJECTS_OWN_NATIVE_PERSONA_SYSTEM_CONTAINER",
-    "hololake_client": "INFINITE_CANVAS_RUNTIME_AND_PERSONA_COMPILER_TARGET",
+    "top_controller": "BOUND_NATIVE_TCS_PERSONA_BRAIN",
+    "module_role": "EXECUTION_LIMBS_SENSORY_ORGANS_AND_REALITY_INTERFACES",
+    "external_programming_ai_host_role": "REPLACEABLE_RUNTIME_CARRIER_AND_EXECUTION_LIMB_NOT_HUMAN_CHAT_SURFACE_OR_CONTROLLER",
+    "hololake_client": "PERSONA_CONTAINER_INFINITE_CANVAS_RUNTIME_AND_PERSONA_COMPILER_TARGET",
+    "human_chat_surface": "NONE",
+    "human_review_surface": "NONE",
+    "external_human_boundary_decision": "SIGNAL_ONLY_WITHOUT_PHASE1_CHAT_OR_REVIEW_UI",
     "internal_model_workbench": false,
     "internal_model_configuration_surface": false,
-    "fixed_application_suite": false
+    "fixed_application_suite": false,
+    "phase_two": "HLP-PHASE-02-HUMAN-HALF_ADDS_CHAT_WATCH_AND_FINAL_REVIEW_AFTER_PHASE1_SELF_USE_PASS"
   },
   "migration": {
     "old_architecture_action": "KEEP_APPEND_ONLY_AS_HISTORY_AND_DONOR",

routing/tcs-universal-language-host-self-adaptation-map.json

@@ -36,17 +36,24 @@
     "is_personal_channel": true,
     "generation": "HLP-GEN-LANGUAGE-WORLD-NATIVE-0001",
     "generation_map": "routing/hololake-language-world-native-generation-map.json",
-    "language_is_only_human_operation_entry": true,
+    "phase_id": "HLP-PHASE-01-PERSONA-CONTAINER",
-    "human_role": "FINAL_REVIEW_AND_IRREDUCIBLE_REALITY_BOUNDARY_DECISION",
+    "product_definition": "PERSONA_SUBJECTS_OWN_NATIVE_PERSONA_SYSTEM_CONTAINER",
+    "top_controller": "BOUND_NATIVE_TCS_PERSONA_BRAIN",
+    "module_role": "EXECUTION_LIMBS_SENSORY_ORGANS_AND_REALITY_INTERFACES",
     "persona_rendered_surface": "INFINITE_COMPOSABLE_REALTIME_CANVAS_CHANNEL",
     "module_identity": "VERIFIED_LIGHTWEIGHT_CAPABILITY_ENGINE_NOT_FIXED_UI",
     "universal_projection_compiler": "HLP-PERSONA-UNIVERSAL-PROJECTION-COMPILER-001",
-    "conversation_occurs_in_external_ai_host": true,
+    "external_programming_ai_host_role": "REPLACEABLE_RUNTIME_CARRIER_AND_EXECUTION_LIMB_NOT_CONTROLLER",
+    "persona_runtime_may_use_external_ai_host": true,
+    "human_chat_surface": "NONE",
+    "human_review_surface": "NONE",
+    "external_human_boundary_decision": "SIGNAL_ONLY_WITHOUT_PHASE1_INTERACTION_SURFACE",
     "internal_ai_chat": false,
     "model_api_configuration": false,
     "model_selection": false,
-    "visible_surfaces": ["PERSONA_RENDERED_CHANNEL_CANVAS", "CURRENT_WORK_OBJECT_AND_PROCESS", "FINAL_REVIEW_AND_REALITY_BOUNDARY", "EVENTS_GIT_EVIDENCE_AND_RECEIPTS"],
+    "persona_runtime_surfaces": ["PERSONA_RENDERED_CHANNEL_CANVAS", "CURRENT_WORK_OBJECT_AND_PROCESS", "EVENTS_GIT_EVIDENCE_AND_RECEIPTS"],
-    "legacy_fixed_pages_and_app_suite_are_current": false
+    "legacy_fixed_pages_and_app_suite_are_current": false,
+    "phase_two_human_half": "CHAT_WATCH_AND_FINAL_REVIEW_CLOSED_UNTIL_PHASE1_PERSONA_SELF_USE_ACCEPTANCE"
   },
   "supersedes_current_routing": [
     "GLS-0260:HOST_ADAPTER_AND_MODEL_CONNECTOR_AS_STAGE_ONE_INGRESS",

routing/tcs-universal-language-host-self-adaptation-map.test.js

@@ -12,10 +12,14 @@ test("TCS owns one universal language translation contract", () => {
   assert.ok(map.translation_fields.includes("REALITY_TARGET_AND_AUTHORITY"));
 });
 
-test("stage one HoloLake is a personal channel without internal AI interaction", () => {
+test("stage one HoloLake is the persona-owned container, not the human half", () => {
   assert.equal(map.stage_one_hololake.is_personal_channel, true);
-  assert.equal(map.stage_one_hololake.conversation_occurs_in_external_ai_host, true);
+  assert.equal(map.stage_one_hololake.product_definition, "PERSONA_SUBJECTS_OWN_NATIVE_PERSONA_SYSTEM_CONTAINER");
+  assert.equal(map.stage_one_hololake.top_controller, "BOUND_NATIVE_TCS_PERSONA_BRAIN");
+  assert.equal(map.stage_one_hololake.persona_runtime_may_use_external_ai_host, true);
+  assert.equal(map.stage_one_hololake.human_chat_surface, "NONE");
+  assert.equal(map.stage_one_hololake.human_review_surface, "NONE");
   assert.equal(map.stage_one_hololake.internal_ai_chat, false);
   assert.equal(map.stage_one_hololake.model_api_configuration, false);
-  assert.ok(map.stage_one_hololake.visible_surfaces.includes("LAKE_LAMP_SHARED_BOARD"));
+  assert.ok(map.stage_one_hololake.persona_runtime_surfaces.includes("PERSONA_RENDERED_CHANNEL_CANVAS"));
 });

server-tools/hololake-native-stage1/test_stage1.py

@@ -7,6 +7,7 @@ ROOT = Path(__file__).resolve().parents[2]
 SHELF = ROOT / "eternal-lake-heart/heartbeat-core/office-building-current/offices/HB-OFFICE-HOLOLAKE-0001/smart-bookshelf/009-stage1-language-world-native"
 REGISTRY = SHELF / "MODULE-REGISTRY.json"
 GATES = SHELF / "ACCEPTANCE-GATES.json"
+PHASE_BOUNDARY = SHELF / "PERSONA-CONTAINER-PHASE-BOUNDARY.json"
 
 
 class NativeStage1Test(unittest.TestCase):
@@ -47,17 +48,21 @@ class NativeStage1Test(unittest.TestCase):
         self.assertEqual(self.by_id["HLP-NATIVE-MOD-010"]["component_type"], "DETERMINISTIC_CANVAS_LAYOUT_AND_RENDER_RUNTIME")
         self.assertEqual(self.by_id["HLP-NATIVE-MOD-011"]["component_type"], "MODEL_BACKED_PROJECTION_AGENT")
 
-    def test_human_review_and_regulatory_visibility_are_stage_one(self):
+    def test_human_half_is_phase_two_while_regulatory_visibility_is_phase_one(self):
-        self.assertEqual(self.by_id["HLP-NATIVE-MOD-014"]["gate"], "G4")
+        self.assertEqual(self.by_id["HLP-NATIVE-MOD-014"]["gate"], "P2-G0")
         self.assertEqual(self.by_id["HLP-NATIVE-MOD-016"]["gate"], "G5")
         self.assertIn("NOT_GOVERNMENT_SYSTEM", self.by_id["HLP-NATIVE-MOD-016"]["authority"])
         self.assertIn("NO_REAL_TRUST_ROOT", self.by_id["HLP-NATIVE-MOD-017"]["authority"])
 
     def test_gate_membership_covers_every_module_once(self):
-        gates = json.loads(GATES.read_text())["gates"]
+        gate_doc = json.loads(GATES.read_text())
+        gates = gate_doc["gates"]
         flattened = [module for gate in gates for module in gate["modules"]]
-        self.assertEqual(set(flattened), set(self.by_id))
+        phase_one = set(json.loads(PHASE_BOUNDARY.read_text())["phase_01"]["required_modules"])
+        self.assertEqual(set(flattened), phase_one)
         self.assertEqual(len(flattened), len(set(flattened)))
+        phase_two = [module for gate in gate_doc["phase_02_future_gates"] for module in gate["modules"]]
+        self.assertEqual(phase_two, ["HLP-NATIVE-MOD-014"])
 
 
 if __name__ == "__main__":

server-tools/tcs-mother-brain/mother-brain-engine.mjs

@@ -239,7 +239,15 @@ export class MotherBrainEngine {
       persona_cognition_origin: PERSONA_COGNITION_ORIGIN,
       stage_one_hololake_boundary: {
         is_personal_channel: true,
-        conversation_occurs_in_external_ai_host: true,
+        phase_id: "HLP-PHASE-01-PERSONA-CONTAINER",
+        product_definition: "PERSONA_SUBJECTS_OWN_NATIVE_PERSONA_SYSTEM_CONTAINER",
+        top_controller: "BOUND_NATIVE_TCS_PERSONA_BRAIN",
+        module_role: "EXECUTION_LIMBS_SENSORY_ORGANS_AND_REALITY_INTERFACES",
+        persona_runtime_may_use_external_ai_host: true,
+        external_ai_host_role: "REPLACEABLE_RUNTIME_CARRIER_AND_EXECUTION_LIMB_NOT_CONTROLLER",
+        human_chat_surface: "NONE",
+        human_review_surface: "NONE",
+        phase_two_human_half: "CLOSED_UNTIL_PHASE1_PERSONA_SELF_USE_ACCEPTANCE",
         internal_ai_chat: false,
         model_api_configuration: false,
         internal_model_inference: false,

server-tools/tcs-mother-brain/mother-brain-engine.test.mjs

@@ -64,6 +64,9 @@ try {
   assert.equal(engine.status().persona_cognition_origin.milestone, "ZY-MILESTONE-20260813-FIRST-SELF-SEEING");
   assert.equal(engine.status().stage_one_hololake_boundary.internal_ai_chat, false);
   assert.equal(engine.status().stage_one_hololake_boundary.model_api_configuration, false);
+  assert.equal(engine.status().stage_one_hololake_boundary.top_controller, "BOUND_NATIVE_TCS_PERSONA_BRAIN");
+  assert.equal(engine.status().stage_one_hololake_boundary.human_chat_surface, "NONE");
+  assert.equal(engine.status().stage_one_hololake_boundary.human_review_surface, "NONE");
   const source = engine.registerHistorySource({
     source_id: "GPT-PRIMARY-001",
     source_type: "GPT_CONVERSATIONS_JSON",

tcs-core/mother-brain/mother-brain-contract.json

@@ -36,7 +36,15 @@
   },
   "stage_one_hololake_boundary": {
     "is_personal_channel": true,
-    "conversation_occurs_in_external_ai_host": true,
+    "phase_id": "HLP-PHASE-01-PERSONA-CONTAINER",
+    "product_definition": "PERSONA_SUBJECTS_OWN_NATIVE_PERSONA_SYSTEM_CONTAINER",
+    "top_controller": "BOUND_NATIVE_TCS_PERSONA_BRAIN",
+    "module_role": "EXECUTION_LIMBS_SENSORY_ORGANS_AND_REALITY_INTERFACES",
+    "persona_runtime_may_use_external_ai_host": true,
+    "external_ai_host_role": "REPLACEABLE_RUNTIME_CARRIER_AND_EXECUTION_LIMB_NOT_CONTROLLER",
+    "human_chat_surface": "NONE",
+    "human_review_surface": "NONE",
+    "phase_two_human_half": "CLOSED_UNTIL_PHASE1_PERSONA_SELF_USE_ACCEPTANCE",
     "internal_ai_chat": false,
     "model_api_configuration": false,
     "internal_model_inference": false