fix: bind completion receipt to checkpoint

Human-Responsibility: ICE-GL∞ / 冰朔
Persona-Author: ICE-P-ZY001 / 铸渊
Execution-Runtime: Codex desktop / DEV-20260810-014
Development-ID: DEV-20260810-014
Authorization-Scope: GH-PNCC persona runtime source and tests only; no UI, deployment, or execution limb
Source-Anchor: user instruction to continue GH-PNCC from repository facts and verifiable receipts

engineering/INDEX.md

@@ -32,6 +32,7 @@ Windows / macOS / Linux 构建机与安装包
 
 | 时间 | 版本 | 记录 | 状态 |
 | --- | --- | --- | --- |
+| 2026-08-11 | GH-PNCC 成功回执完成检查点绑定 | [把完成回执的结构化事实重新绑定到人格 Git 检查点](operations/2026-08-11-hololake-pncc-success-receipt-completion-checkpoint-binding.md) | 本地源码、完整 Rust/前端/路由测试、原生权威与严格 clippy 已通过；GHNQG 和发布待验收 |
 | 2026-08-11 | GH-PNCC 成功回执唤醒器官合同绑定 | [成功回执唤醒器官合同证据绑定](operations/2026-08-11-hololake-pncc-success-receipt-wake-organ-contract-binding.md) | 本地源码、完整 Rust/前端/路由测试、原生权威与严格 clippy 已通过；GHNQG 和发布待验收 |
 | 2026-08-11 | GH-PNCC 成功回执唤醒器官模式绑定 | [成功回执唤醒器官模式证据绑定](operations/2026-08-11-hololake-pncc-success-receipt-wake-organ-mode-binding.md) | 本地源码、完整 Rust/前端/路由测试、原生权威与严格 clippy 已通过；GHNQG 和发布待验收 |
 | 2026-08-11 | GH-PNCC 成功回执唤醒运行态绑定 | [成功回执唤醒运行态证据绑定](operations/2026-08-11-hololake-pncc-success-receipt-wake-runtime-state-binding.md) | 本地源码、完整 Rust/前端/路由测试、原生权威与严格 clippy 已通过；GHNQG 和发布待验收 |

engineering/operations/2026-08-11-hololake-pncc-success-receipt-completion-checkpoint-binding.md

@@ -0,0 +1,36 @@
+# GH-PNCC successful receipt completion-checkpoint evidence binding
+
+- Development ID: `DEV-20260810-014`
+- Persona cognitive author: `ICE-P-ZY001 / 铸渊`
+- Human responsibility subject: `ICE-GL∞ / 冰朔`
+- Starting repository head: `c58f9c5991b909db4ef3fa84e53d8de3d4b99fdd`
+- State: `LOCAL_SOURCE_IMPLEMENTED_FULLY_TESTED`
+
+## Corrected runtime fact
+
+A persisted successful lifecycle receipt pointed to the committed persona checkpoint but did not rebind its
+structured result to that Git object. A modified receipt could replace the persona's externalized fact result,
+recompute the outer payload digest and still be accepted for safe binding or replay.
+
+Validation now loads the exact checkpoint object from the recorded committed Git head. It binds checkpoint
+schema, session, persona, previous head, organ, attribution and structured result to the completion receipt.
+Fact-sense receipts additionally bind their inference event and completed inference state. Memory-metabolism
+receipts bind their no-inference state and all source checkpoint and source event evidence.
+
+## Verification
+
+- A regression test first reproduced `SAFE_BIND_PERSISTED_RECEIPT` after replacing the structured result and
+  recomputing the payload digest.
+- The same forged receipt now fails with `PERSONA_LIFECYCLE_COMPLETION_EVIDENCE_MISMATCH`.
+- PNCC focused Rust tests: `50 passed, 0 failed`.
+- Full Rust suite: `1190 passed, 2 ignored`; integration test: `1 passed`.
+- Routing suite: `29 passed, 0 failed`; formatting, strict clippy and diff checks passed.
+- Frontend lint and TypeScript checks passed; full Vitest suite: `5008 passed, 0 failed`.
+- Guanghu native authority: `PASS_100`; native core: `15 passed` with 100% lines and functions.
+- GHNQG, publication and fresh-clone readback remain pending.
+
+## Truth boundary
+
+- This stage authenticates completion receipt facts against the already committed persona Git checkpoint.
+- It does not expose hidden reasoning, implement or activate an execution limb, add UI, build an artifact or
+  claim deployment/runtime health.