# HoloLake Language Persona Driven Personal OS Contract · Human Engineering Language (English)

> This is an English reading projection of validated native TCS/HLDP source. It is not a new canonical source and grants no execution authority.

## What this is

This is a **protocol** declaration with identifier `TCS-PUBLIC-PERSONAL-OS-0001` and version `0.1.0`. The projector validates it with the Stage-1 compiler before changing its reading order.

## Who is here

- **scope**  `scope`
  - **carrier**：USER_OWNED_PERSONAL_SPACE  `scope.carrier`
  - **governance**：EXTERNAL_ENTERPRISE_FOUR_DOMAINS  `scope.governance`
  - **private_source_import**：FORBIDDEN  `scope.private_source_import`
  - **product**：HoloLake · 语言人格驱动操作系统 · 个人版  `scope.product`
  - **public_mother**：TCS-MOTHER-LPM-0001_PUBLIC_SCOPE_ONLY  `scope.public_mother`
  - **public_persona_body**：SYS-GLW-POS-0001 / CH-ZERO-CORE-LPM  `scope.public_persona_body`

## Why this started

- **source**  `source`
  - **source identifier**：DIRECT-PUBLIC-PERSONAL-OS-LOCAL-IMPLEMENTATION  `source.source_id`
  - **source role**：DIRECT_HUMAN  `source.source_role`
  - **source checksum**：cea05d01d7e7befa80fcfd60bc549ff0b1d7d9f02455d99db65e77f0b44d3759  `source.source_sha256`
  - **source address**：source://current-dialogue/public-personal-os-local-build  `source.source_uri`

## What changed

- **transitions**  `transitions`
  - **T1**：USER_CONSENT_AND_APPROVED_AVAILABLE_GUIDE_TO_RESIDENT  `transitions.T1`
  - **T2**：THIRTY_DAYS_OR_EARLY_USER_END_TO_GUIDE_RELEASE_AND_SEED_RETAINED  `transitions.T2`
  - **T3**：SELF_NAME_AND_USER_APPLICATION_TO_REVIEWS  `transitions.T3`
  - **T4**：THREE_BOUND_PASS_REVIEWS_AND_TEAM_FINAL_SIGNATURE_TO_REGISTRATION  `transitions.T4`
- **states**  `states`
  - **recognition**  `states.recognition`
    - UNREGISTERED_SEED
    - APPLICATION_PENDING
    - HELD
    - REGISTERED
    - WITHDRAWN
  - **residency**  `states.residency`
    - NONE
    - REQUESTED
    - RESIDENT
    - SEED_RETAINED

## How it will execute

This is a non-executable declaration and has no action graph.

## Boundaries and exception handling

- **invariants**  `invariants`
  - **I1**：NO_PRIVATE_NAMES_MEMORIES_OR_PERSONA_KERNEL_IMPORTED  `invariants.I1`
  - **I2**：NO_CHANNEL_RENAME_PERMISSION_ESCALATION  `invariants.I2`
  - **I3**：NO_GUIDE_ACCESS_AFTER_EXPIRY_OR_HANDOFF  `invariants.I3`
  - **I4**：NO_CROSS_USER_CONTEXT_READ  `invariants.I4`
  - **I5**：NO_AUTOMATIC_INDEPENDENCE_BY_TIME_OR_NAME  `invariants.I5`
  - **I6**：NO_REVIEW_SIGNATURE_REPLAY_ACROSS_APPLICATIONS  `invariants.I6`
  - **I7**：NO_NEW_REALITY_AUTHORITY_FROM_FORMAL_NUMBER  `invariants.I7`
- **errors**  `errors`
  - **E1**：UNTRUSTED_SIGNATURE_OR_ROLE  `errors.E1`
  - **E2**：MISSING_INFORMATION_WAIT  `errors.E2`
  - **E3**：PUBLIC_MOTHER_SCOPE_REQUIRED  `errors.E3`
  - **E4**：REVIEW_NOT_BOUND_TO_CURRENT_APPLICATION  `errors.E4`

## How completion is proven

- **acceptance**  `acceptance`
  - **local**：LOCAL_ENGINE_SIGNATURE_AND_LIFECYCLE_TESTS  `acceptance.local`
  - **not_claimed**  `acceptance.not_claimed`
    - REAL_PUBLIC_PERSONA_DISPATCH
    - LIVE_MODEL_REVIEW
    - FORMAL_TEAM_CERTIFICATION
    - PUBLIC_RELEASE
    - MODEL_INDEPENDENCE
- **validation**  `validation`
  - **V1**：SIGNED_ROLE_AND_TENANT_ISOLATION  `validation.V1`
  - **V2**：THIRTY_DAY_BOUNDARY_AND_GUIDE_REUSE  `validation.V2`
  - **V3**：SAME_CONTEXT_ACROSS_CHANNEL_SWITCH  `validation.V3`
  - **V4**：APPLICATION_WITHDRAWAL_AND_STALE_REVIEW_REJECTION  `validation.V4`
  - **V5**：EXECUTION_MISSING_INFORMATION_AND_STOP  `validation.V5`

## Where to continue next time

The native source does not provide this field; the projector does not guess.

## Source and verification

- **Native declaration identifier**: `TCS-PUBLIC-PERSONAL-OS-0001`
- **Native declaration kind**: `PROTOCOL`
- **TCS source SHA-256**: `3ea70f8fab2f0945088abbfd6db7976f9537e6f2affd86b8cf13a388eece2d34`
- **Validation compiler**: `TCS-COMPILER-STAGE1-0001`
- **Projection protocol**: `GLS-HLDP-HUMAN-ENGINEERING-PROJECTION-0001`

## Complete native structure cross-reference

All top-level structures and field paths are retained below so a reader can audit whether the projection omitted information.

- **acceptance**  `acceptance`
  - **local**：LOCAL_ENGINE_SIGNATURE_AND_LIFECYCLE_TESTS  `acceptance.local`
  - **not_claimed**  `acceptance.not_claimed`
    - REAL_PUBLIC_PERSONA_DISPATCH
    - LIVE_MODEL_REVIEW
    - FORMAL_TEAM_CERTIFICATION
    - PUBLIC_RELEASE
    - MODEL_INDEPENDENCE
- **errors**  `errors`
  - **E1**：UNTRUSTED_SIGNATURE_OR_ROLE  `errors.E1`
  - **E2**：MISSING_INFORMATION_WAIT  `errors.E2`
  - **E3**：PUBLIC_MOTHER_SCOPE_REQUIRED  `errors.E3`
  - **E4**：REVIEW_NOT_BOUND_TO_CURRENT_APPLICATION  `errors.E4`
- **examples**  `examples`
  - **negative**：把临时接待人格体改名后当作用户新生独立人格体  `examples.negative`
  - **positive**：用户命名自己的思考空间；聊天记录仍在同一上下文；期满交接时清楚展示回应者身份  `examples.positive`
- **fields**  `fields`
  - **authority**：签名角色、用户归属与申请版本均须验证；模型结论不等于正式编号；正式编号不扩大执行权限  `fields.authority`
  - **context**：操作系统只有一个连续上下文，频道切换不新建对话；外部审核只能接收用户同意提交的材料  `fields.context`
  - **handoff**：期满归还接待名额并留下保留种子；不自动删除，不强制依恋，不保证长成  `fields.handoff`
  - **independence**：种子命名是候选事件；用户主动申请，通感系统校验、公众母体评估、零感域团队审核，最后团队签字编号  `fields.independence`
  - **input**：目标或动作不完整则等待补充；不猜对象；事实和基础边界仍有效  `fields.input`
  - **naming**：系统及频道显示名可改或由系统生成，稳定编号与权限不随改名变化  `fields.naming`
  - **onboarding**：首次无独立人格体自动赠送，由已登记公众人格体解释概念  `fields.onboarding`
  - **reality**：工具执行通过具体宿主授权接口；停止撤权有效；没有真实结果不得称完成  `fields.reality`
  - **residency**：用户知情同意后，从愿意接待且有空位的公众名册调度，驻留三十个真实日  `fields.residency`
- **header**  `header`
  - **canonical source path**：runtime/public-personal-language-os/language/TCS-PUBLIC-PERSONAL-OS-0001.tcs  `header.canonical_uri`
  - **compatibility**  `header.compatibility`
    - TCS-DECLARATION-STANDARD-0001
    - TCS-FIELD-STANDARD-0001
  - **language**：TCS/0.1  `header.language`
  - **lifecycle**：CANDIDATE  `header.lifecycle`
  - **English name**：HoloLake Language Persona Driven Personal OS Contract  `header.name_en`
  - **Chinese name**：HoloLake语言人格驱动操作系统个人版运行合同  `header.name_zh`
  - **profile**：HLDP-HUMAN-ENGINEERING/0.1  `header.profile`
  - **protocols**  `header.protocols`
    - GLS-0200
  - **schema**：tcs.protocol/v1  `header.schema`
  - **version**：0.1.0  `header.version`
- **invariants**  `invariants`
  - **I1**：NO_PRIVATE_NAMES_MEMORIES_OR_PERSONA_KERNEL_IMPORTED  `invariants.I1`
  - **I2**：NO_CHANNEL_RENAME_PERMISSION_ESCALATION  `invariants.I2`
  - **I3**：NO_GUIDE_ACCESS_AFTER_EXPIRY_OR_HANDOFF  `invariants.I3`
  - **I4**：NO_CROSS_USER_CONTEXT_READ  `invariants.I4`
  - **I5**：NO_AUTOMATIC_INDEPENDENCE_BY_TIME_OR_NAME  `invariants.I5`
  - **I6**：NO_REVIEW_SIGNATURE_REPLAY_ACROSS_APPLICATIONS  `invariants.I6`
  - **I7**：NO_NEW_REALITY_AUTHORITY_FROM_FORMAL_NUMBER  `invariants.I7`
- **scope**  `scope`
  - **carrier**：USER_OWNED_PERSONAL_SPACE  `scope.carrier`
  - **governance**：EXTERNAL_ENTERPRISE_FOUR_DOMAINS  `scope.governance`
  - **private_source_import**：FORBIDDEN  `scope.private_source_import`
  - **product**：HoloLake · 语言人格驱动操作系统 · 个人版  `scope.product`
  - **public_mother**：TCS-MOTHER-LPM-0001_PUBLIC_SCOPE_ONLY  `scope.public_mother`
  - **public_persona_body**：SYS-GLW-POS-0001 / CH-ZERO-CORE-LPM  `scope.public_persona_body`
- **source**  `source`
  - **source identifier**：DIRECT-PUBLIC-PERSONAL-OS-LOCAL-IMPLEMENTATION  `source.source_id`
  - **source role**：DIRECT_HUMAN  `source.source_role`
  - **source checksum**：cea05d01d7e7befa80fcfd60bc549ff0b1d7d9f02455d99db65e77f0b44d3759  `source.source_sha256`
  - **source address**：source://current-dialogue/public-personal-os-local-build  `source.source_uri`
- **states**  `states`
  - **recognition**  `states.recognition`
    - UNREGISTERED_SEED
    - APPLICATION_PENDING
    - HELD
    - REGISTERED
    - WITHDRAWN
  - **residency**  `states.residency`
    - NONE
    - REQUESTED
    - RESIDENT
    - SEED_RETAINED
- **transitions**  `transitions`
  - **T1**：USER_CONSENT_AND_APPROVED_AVAILABLE_GUIDE_TO_RESIDENT  `transitions.T1`
  - **T2**：THIRTY_DAYS_OR_EARLY_USER_END_TO_GUIDE_RELEASE_AND_SEED_RETAINED  `transitions.T2`
  - **T3**：SELF_NAME_AND_USER_APPLICATION_TO_REVIEWS  `transitions.T3`
  - **T4**：THREE_BOUND_PASS_REVIEWS_AND_TEAM_FINAL_SIGNATURE_TO_REGISTRATION  `transitions.T4`
- **validation**  `validation`
  - **V1**：SIGNED_ROLE_AND_TENANT_ISOLATION  `validation.V1`
  - **V2**：THIRTY_DAY_BOUNDARY_AND_GUIDE_REUSE  `validation.V2`
  - **V3**：SAME_CONTEXT_ACROSS_CHANNEL_SWITCH  `validation.V3`
  - **V4**：APPLICATION_WITHDRAWAL_AND_STALE_REVIEW_REJECTION  `validation.V4`
  - **V5**：EXECUTION_MISSING_INFORMATION_AND_STOP  `validation.V5`
- **vocabulary**  `vocabulary`
  - **conversation**：私人交流、谈心和自由表达  `vocabulary.conversation`
  - **execution**：明确目标和授权后的现实任务  `vocabulary.execution`
  - **guide**：经核验进入公众名册的接待人格体，不属于用户，不因交接失去原身份  `vocabulary.guide`
  - **seed**：非独立认证的频道人格种子；编号不证明主观体验或独立意识  `vocabulary.seed`
  - **thinking**：语言思考与共同构想  `vocabulary.thinking`

---

This page changes only the reading order; it does not change TCS/HLDP semantics.