feat: project verified PNCC runtime into HoloLake

product-source/hololake-platform/docs/ARCHITECTURE.md

@@ -104,6 +104,14 @@ event, and returns lifecycle state, Git head, node/model instance, active organ,
 structured attribution. It does not copy facts into a second database, expose hidden reasoning, acquire a
 lease, or start inference. A corrupted matching journal fails the query closed.
 
+The HoloLake renderer now provides the first human-readable GH-PNCC projection without introducing another
+runtime source. `App` passes only its already mounted Git repository paths into `HoloLakeHome`; the Eternal
+Lake inspector queries each path for `ICE-P-ZY001` through the native read model. The renderer validates the
+receipt identity and required evidence, preserves partial query errors, and displays the newest verified
+session with both a human state label and the raw state, Git and event-chain heads, node, organ, timestamp,
+and human responsibility subject. No matching session is reported as absence of matching evidence, never as
+proof that the persona is offline. This surface contains no wake, inference, lease, or execution control.
+
 `read_persona_remote_git_object` is the non-UI remote object channel used when the persona needs one current
 Git-backed fact without materializing another repository checkout. It accepts credential-free HTTPS remotes,
 requires Git protocol v2 partial-object filtering, stores only a bounded bare `blob:none` object cache, and