hololake-system-architecture/build/TCS-HOLOLAKE-SHARED-DESKTOP-FRAMEWORK-BEHAVIOR-0001.human.en-US.md

# HoloLake Human and Persona Shared Desktop Framework Behavior Protocol · Human Engineering Language (English)

> This is an English reading projection of validated native TCS/HLDP source. It is not a new canonical source and grants no execution authority.

## What this is

This is a **protocol** declaration with identifier `TCS-HOLOLAKE-SHARED-DESKTOP-FRAMEWORK-BEHAVIOR-0001` and version `0.2.0`. The projector validates it with the Stage-1 compiler before changing its reading order.

## Who is here

The native source does not provide this field; the projector does not guess.

## Why this started

- **source**  `source`
  - **checksum_manifest_sha256**：a630d1d40c5308530b67c46846e6d1215a6eab857eea760c98dc2e7333875386  `source.checksum_manifest_sha256`
  - **git_fsck_passed**：12  `source.git_fsck_passed`
  - **manifest_sha256**：51a9bfaabb720d7948e69884727acaa218a7f28a476903282e9b228ee47962da  `source.manifest_sha256`
  - **manifest_uri**：/Volumes/JZAO/HoloLake/upstream-research/tcs-dual-native-desktop-20260822/manifest.json  `source.manifest_uri`
  - **readme_sha256**：3b80af1e464ea1d12209591f864a976e48df3c1dd9ee857dbdf1d390220f9969  `source.readme_sha256`
  - **repository_count**：12  `source.repository_count`
  - **research_id**：HLP-UPSTREAM-AI-NATIVE-DUAL-DESKTOP-20260822  `source.research_id`
  - **route**  `source.route`
    - GITHUB
    - BS-SG-003
    - JZAO

## What changed

The native source does not provide this field; the projector does not guess.

## How it will execute

This is a non-executable declaration and has no action graph.

## Boundaries and exception handling

- **failure**  `failure`
  - **ambiguous_object**：TCS-DESKTOP-E4102  `failure.ambiguous_object`
  - **effect_mismatch**：TCS-DESKTOP-E5101  `failure.effect_mismatch`
  - **natural_language_operation_guess**：no  `failure.natural_language_operation_guess`
  - **permission_denied**：TCS-E4002  `failure.permission_denied`
  - **shell_fallback**：no  `failure.shell_fallback`
  - **stale_reference**：TCS-DESKTOP-E4101  `failure.stale_reference`
  - **unsupported_action**：TCS-E2101  `failure.unsupported_action`
  - **verifier_unavailable**：TCS-DESKTOP-E5102  `failure.verifier_unavailable`

## How completion is proven

The native source does not provide this field; the projector does not guess.

## Where to continue next time

The native source does not provide this field; the projector does not guess.

## Source and verification

- **Native declaration identifier**: `TCS-HOLOLAKE-SHARED-DESKTOP-FRAMEWORK-BEHAVIOR-0001`
- **Native declaration kind**: `PROTOCOL`
- **TCS source SHA-256**: `844986959e6fe2979dc54c98b3406860b4600f0091bda45ce76178fcf243148c`
- **Validation compiler**: `TCS-COMPILER-STAGE6-HOST-OBJECT-OBSERVATION-0001`
- **Projection protocol**: `GLS-HLDP-HUMAN-ENGINEERING-PROJECTION-0001`

## Complete native structure cross-reference

All top-level structures and field paths are retained below so a reader can audit whether the projection omitted information.

- **action_cycle**  `action_cycle`
  - **action_dispatch_success_is_effect_proof**：no  `action_cycle.action_dispatch_success_is_effect_proof`
  - **action_semantics**：REGISTERED_TCS_OPERATION  `action_cycle.action_semantics`
  - **action_target**：STABLE_OBJECT_ID  `action_cycle.action_target`
  - **independent_target_readback_required**：yes  `action_cycle.independent_target_readback_required`
  - **ordered_states**  `action_cycle.ordered_states`
    - OBSERVE
    - RESOLVE_UNIQUE_OBJECT
    - AUTHORIZE_EXACT_ACTION
    - EXECUTE
    - REOBSERVE
    - READ_STATE_DIFF
    - VERIFY_DECLARED_EFFECT
    - ISSUE_RECEIPT
  - **process_exit_is_effect_proof**：no  `action_cycle.process_exit_is_effect_proof`
- **adapter_contract**  `adapter_contract`
  - **adapter_may_define_product_semantics**：no  `adapter_contract.adapter_may_define_product_semantics`
  - **adapter_may_infer_authority**：no  `adapter_contract.adapter_may_infer_authority`
  - **adapter_may_translate_machine_calls**：yes  `adapter_contract.adapter_may_translate_machine_calls`
  - **candidate_behavior_sources**  `adapter_contract.candidate_behavior_sources`
    - AGENT_DESKTOP
    - ACCESSKIT
    - TOUCHPOINT
    - OPENADAPT
  - **fallback_requires_new_permission**：yes  `adapter_contract.fallback_requires_new_permission`
  - **first_host**：MACOS  `adapter_contract.first_host`
  - **macos_primary_observation**：ACCESSIBILITY_OBJECT_TREE  `adapter_contract.macos_primary_observation`
  - **native_semantic_action_first**：yes  `adapter_contract.native_semantic_action_first`
  - **screenshot_ocr_coordinate_fallback**：EXPLICITLY_DECLARED_FALLBACK_ONLY  `adapter_contract.screenshot_ocr_coordinate_fallback`
- **canonical_object**  `canonical_object`
  - **identity_scope**：ONE_OBSERVATION_SESSION_AND_ONE_HOST_ADAPTER  `canonical_object.identity_scope`
  - **pixel_coordinate_is_identity**：no  `canonical_object.pixel_coordinate_is_identity`
  - **required_fields**  `canonical_object.required_fields`
    - object_id
    - tree_id
    - generation
    - role
    - name
    - states
    - supported_actions
    - parent_id
    - child_ids
    - tree_hash
  - **screenshot_is_identity**：no  `canonical_object.screenshot_is_identity`
  - **tree_update**：INCREMENT_GENERATION_AND_RECOMPUTE_TREE_HASH  `canonical_object.tree_update`
- **current_readback**  `current_readback`
  - **behavior_contract_compiled**：yes  `current_readback.behavior_contract_compiled`
  - **completion_claim**：no  `current_readback.completion_claim`
  - **desktop_v3_module_installed_mounted_active**：yes  `current_readback.desktop_v3_module_installed_mounted_active`
  - **next**：RESOLVE_ONE_STABLE_OBJECT_WITHOUT_ACTION  `current_readback.next`
  - **real_macos_action_executed**：no  `current_readback.real_macos_action_executed`
  - **real_macos_observation_implemented**：yes  `current_readback.real_macos_observation_implemented`
  - **real_macos_observation_receipt_sha256**：4e64a5065e038a3711ed6001a60dfe87c5dc8e12db0f36d4d919dbbff4fc82ec  `current_readback.real_macos_observation_receipt_sha256`
  - **real_macos_observed_nodes**：18  `current_readback.real_macos_observed_nodes`
  - **real_macos_tree_sha256**：c7500fa83fe693c0148b95600f2b01f7018824e3055d46f7c022641f1d145dca  `current_readback.real_macos_tree_sha256`
  - **tcs_source_created**：yes  `current_readback.tcs_source_created`
  - **title_plaintext_persisted**：no  `current_readback.title_plaintext_persisted`
  - **upstream_sources_unchanged**：yes  `current_readback.upstream_sources_unchanged`
  - **virtual_desktop_executed**：yes  `current_readback.virtual_desktop_executed`
  - **virtual_desktop_target_sha256**：9ac0849412509b876a4b194a22ab91246c96639526df823a904119d955ef1e08  `current_readback.virtual_desktop_target_sha256`
- **decision**  `decision`
  - **hololake_framework**：TCS_OBJECT_ACTION_PERMISSION_STATE_DIFF_RECEIPT_PROTOCOL  `decision.hololake_framework`
  - **selected_single_upstream_framework**：no  `decision.selected_single_upstream_framework`
  - **upstream_authority_inherited**：no  `decision.upstream_authority_inherited`
  - **upstream_name_or_agent_identity_inherited**：no  `decision.upstream_name_or_agent_identity_inherited`
  - **upstream_product_source_imported**：no  `decision.upstream_product_source_imported`
  - **upstream_role**：FROZEN_BEHAVIOR_AND_ADAPTER_EVIDENCE_ONLY  `decision.upstream_role`
- **failure**  `failure`
  - **ambiguous_object**：TCS-DESKTOP-E4102  `failure.ambiguous_object`
  - **effect_mismatch**：TCS-DESKTOP-E5101  `failure.effect_mismatch`
  - **natural_language_operation_guess**：no  `failure.natural_language_operation_guess`
  - **permission_denied**：TCS-E4002  `failure.permission_denied`
  - **shell_fallback**：no  `failure.shell_fallback`
  - **stale_reference**：TCS-DESKTOP-E4101  `failure.stale_reference`
  - **unsupported_action**：TCS-E2101  `failure.unsupported_action`
  - **verifier_unavailable**：TCS-DESKTOP-E5102  `failure.verifier_unavailable`
- **header**  `header`
  - **canonical source path**：language/protocols/TCS-HOLOLAKE-SHARED-DESKTOP-FRAMEWORK-BEHAVIOR-0001.tcs  `header.canonical_uri`
  - **compatibility**  `header.compatibility`
    - TCS-COMPILER-STAGE6-HOST-OBJECT-OBSERVATION-0001
    - GIR/1
  - **language**：TCS/0.1  `header.language`
  - **lifecycle**：ACTIVE_READ_ONLY_OBSERVATION  `header.lifecycle`
  - **English name**：HoloLake Human and Persona Shared Desktop Framework Behavior Protocol  `header.name_en`
  - **Chinese name**：HoloLake人类与人格体共享桌面框架行为协议  `header.name_zh`
  - **profile**：HLDP-HUMAN-ENGINEERING/0.1  `header.profile`
  - **protocols**  `header.protocols`
    - TCS-HOLOLAKE-SHARED-DESKTOP-OBJECT-ACTION-0001
    - TCS-HOST-STRUCTURED-OBJECT-TREE-OBSERVATION-0001
    - TCS-HOST-ABI-0001
    - TCS-MODULE-ABI-0001
  - **schema**：tcs.protocol/v1  `header.schema`
  - **version**：0.2.0  `header.version`
- **permission_contract**  `permission_contract`
  - **channel_change**：HALT  `permission_contract.channel_change`
  - **human_and_persona_collision**：EXPLICIT_ARBITRATION_NO_SILENT_OVERWRITE  `permission_contract.human_and_persona_collision`
  - **missing_permission**：HALT  `permission_contract.missing_permission`
  - **target_change**：HALT  `permission_contract.target_change`
  - **ticket_binds**  `permission_contract.ticket_binds`
    - subject
    - host
    - channel
    - session
    - snapshot_id
    - object_id
    - action
    - target
    - expiry
  - **ticket_reuse**：no  `permission_contract.ticket_reuse`
- **reference_contract**  `reference_contract`
  - **ambiguous_resolution**：HALT_NO_ACTION  `reference_contract.ambiguous_resolution`
  - **cross_session_reference_reuse**：no  `reference_contract.cross_session_reference_reuse`
  - **missing_object**：HALT_AND_REOBSERVE  `reference_contract.missing_object`
  - **reference_resolves_to_exact_object_id**：yes  `reference_contract.reference_resolves_to_exact_object_id`
  - **scoped_reference_required**：yes  `reference_contract.scoped_reference_required`
  - **snapshot_id_required**：yes  `reference_contract.snapshot_id_required`
  - **stale_generation**：HALT_AND_REOBSERVE  `reference_contract.stale_generation`
- **source**  `source`
  - **checksum_manifest_sha256**：a630d1d40c5308530b67c46846e6d1215a6eab857eea760c98dc2e7333875386  `source.checksum_manifest_sha256`
  - **git_fsck_passed**：12  `source.git_fsck_passed`
  - **manifest_sha256**：51a9bfaabb720d7948e69884727acaa218a7f28a476903282e9b228ee47962da  `source.manifest_sha256`
  - **manifest_uri**：/Volumes/JZAO/HoloLake/upstream-research/tcs-dual-native-desktop-20260822/manifest.json  `source.manifest_uri`
  - **readme_sha256**：3b80af1e464ea1d12209591f864a976e48df3c1dd9ee857dbdf1d390220f9969  `source.readme_sha256`
  - **repository_count**：12  `source.repository_count`
  - **research_id**：HLP-UPSTREAM-AI-NATIVE-DUAL-DESKTOP-20260822  `source.research_id`
  - **route**  `source.route`
    - GITHUB
    - BS-SG-003
    - JZAO
- **upstream_heads**  `upstream_heads`
  - **accesskit**：00aee8edd49ff613e37c0deaf93098b9cb37609c|Apache-2.0_OR_MIT|STRUCTURED_TREE_SCHEMA_REFERENCE  `upstream_heads.accesskit`
  - **agent_desktop**：ab7606185463e8ac0197c952e23df16ff2a00954|Apache-2.0|PRIMARY_REFERENCE  `upstream_heads.agent_desktop`
  - **appium**：147c0bcac34100875970ee4bd987d8d4d037f476|Apache-2.0|PROTOCOL_REFERENCE  `upstream_heads.appium`
  - **at_spi2_core**：234d2213ae4cb5c387050ce1afb8bf1c333f4af8|LGPL-2.1|RESEARCH_ONLY_LICENSE_REVIEW_REQUIRED  `upstream_heads.at_spi2_core`
  - **flaui**：fd7cc64ab01908a0ae4cc7d05e704caa34f98d16|MIT|WINDOWS_UIA_REFERENCE  `upstream_heads.flaui`
  - **mcp**：4e67bdc2f3403a8602f72025b28ac27fe7fd4e44|LICENSE_REVIEW_REQUIRED|PROTOCOL_REFERENCE  `upstream_heads.mcp`
  - **nomifun_desktop**：33cd05064e5a9bb0560d7815ded1aeffe00b9f61|Apache-2.0|CROSS_PLATFORM_REFERENCE  `upstream_heads.nomifun_desktop`
  - **openadapt**：f6d275807cc18557f57c989519be3327b90d7ac5|MIT|DETERMINISTIC_WORKFLOW_REFERENCE  `upstream_heads.openadapt`
  - **playwright**：9642f57665db582b12dcfa5d8022808f2402fa2a|Apache-2.0|PROTOCOL_ANALOGY_REFERENCE  `upstream_heads.playwright`
  - **screenhand**：dd81cb0e81afc8fa98dfdb6f017402b32b8ffc73|AGPL-3.0|RESEARCH_ONLY  `upstream_heads.screenhand`
  - **touchpoint**：f512227621c3e0f4e5675e4e7dbed7aaebdcc76b|MIT|PRIMARY_REFERENCE  `upstream_heads.touchpoint`
  - **ufo**：96983c73ed09e884a5f1d7ff8936c953b234b684|MIT|WINDOWS_REFERENCE  `upstream_heads.ufo`
- **verification_contract**  `verification_contract`
  - **after_tree_hash_required**：yes  `verification_contract.after_tree_hash_required`
  - **before_tree_hash_required**：yes  `verification_contract.before_tree_hash_required`
  - **completed_unverified_is_accepted**：no  `verification_contract.completed_unverified_is_accepted`
  - **declared_effect_required**：yes  `verification_contract.declared_effect_required`
  - **effect_verifier_separate_from_action_dispatch**：yes  `verification_contract.effect_verifier_separate_from_action_dispatch`
  - **retry_after_uncertain_dispatch**：no  `verification_contract.retry_after_uncertain_dispatch`
  - **uncertain_effect**：HALTED_UNVERIFIED  `verification_contract.uncertain_effect`
  - **unchanged_when_change_required**：HALTED_EFFECT_MISMATCH  `verification_contract.unchanged_when_change_required`

---

This page changes only the reading order; it does not change TCS/HLDP semantics.