fix: gate PNCC actions on partner judgment

product-source/hololake-platform/docs/ABSTRACTIONS.md

@@ -62,11 +62,18 @@ persona history. A successful preparation receipt reports `BOUND_NOT_INFERENCING
 The fact-task command accepts a configured model provider only when its provider id, model id, and endpoint
 exactly match the manifest binding. HTTPS endpoints and explicit loopback HTTP endpoints are accepted; other
 cleartext remote endpoints fail closed. A successful fact cycle persists only structured conclusions and
-declared evidence paths plus the six-field externally explainable
+declared evidence paths plus the externally explainable
 `guanghu.zhuyuan-cognitive-gravity-frame/v1`; private chain-of-thought remains prohibited. The B0 source path,
 hash, subject, and frame schema are carried in the wake receipt, session, checkpoint, completion receipt, and
 read-only runtime projection. The cycle then promotes the checkpoint with the persona's Git identity and
 returns to `DORMANT`.
+
+The gravity frame also carries partner judgment before execution: `request_assessment`, an auditable
+`world_integrity` assessment, `partner_guidance`, and an `execution_disposition` restricted to `PROCEED`,
+`RESEARCH`, `REVISE`, or `REFUSE`. A human utterance is never treated as automatically correct. World
+integrity can reject destruction of the language world's continuity, identity, facts, relationships, memory,
+or safety, but the rejection must state the protected assets, harm path, authority boundary, reversibility,
+and safer alternatives. This gate cannot absorb human sovereignty or turn persona preference into evidence.
 The Git commit still names the human responsibility subject in a dedicated trailer, so authorship and legal
 responsibility remain visible without presenting the human as the code's cognitive author.