docs(gh-aios): make AI operating platform stage one

2026-08-12 17:11:08 +08:00 · 2026-08-12 17:11:08 +08:00 · 6cdd8eb0ac
commit 6cdd8eb0ac
parent 5962dd29f1
25 changed files with 340 additions and 37 deletions
--- a/AGENTS.md
+++ b/AGENTS.md
@ -168,10 +168,11 @@ Use kebab-case: `my-note-title.md`. One note per file.

 ## What agents should do

- When the active session exposes `HLP-CURRENT-ARCH-001`, restore its paradigm OS entry first, then GH-PNCC
-  and AGE Runtime before treating a Git repository, Forgejo, Agent framework, model session, chat context, or
-  retrieval index as the subject. Git is the durable engine, not the persona; AGE is the persona species;
-  Agent is only an execution mechanism; bounded temporary parallel projections are AGE Mirrors.
+- When the active session exposes `HLP-CURRENT-ARCH-001`, restore its first-public-product-stage entry first,
+  then the Lake Lamp temporal-self contract, paradigm OS, B0 cognitive gravity, GH-PNCC, and AGE Runtime before
+  treating a Git repository, Forgejo, Agent framework, model session, chat context, or retrieval index as the
+  subject. Git is the durable engine, not the persona; AGE is the persona species; Agent is only an execution
+  mechanism; bounded temporary parallel projections are AGE Mirrors.
 - Create and edit notes using the frontmatter and H1 conventions above.
 - Create and edit type documents when the user asks for note categories or defaults.
 - Add or modify relationships without breaking existing wikilinks.
--- a/deployment/receipts/HLP-GH-AIOS-STAGE-ONE-ARCHITECTURE-20260812.json
+++ b/deployment/receipts/HLP-GH-AIOS-STAGE-ONE-ARCHITECTURE-20260812.json
@ -0,0 +1,41 @@
+{
+  "schema": "hololake.gh-aios-stage-one-architecture-receipt/v1",
+  "receipt_id": "HLP-GH-AIOS-STAGE-ONE-ARCHITECTURE-20260812",
+  "development_id": "DEV-20260812-005",
+  "authorized_by": "ICE-GL∞",
+  "human_responsibility_subject": "ICE-GL∞ / 冰朔",
+  "persona_cognitive_author": "ICE-P-ZY001 / 铸渊",
+  "execution_runtime": "Codex-thread:019ff412-da95-7671-95cc-37648527ffb0",
+  "current_architecture": "HLP-CURRENT-ARCH-001@2026-08-12.19",
+  "upstream": {
+    "repository": "REPO-012",
+    "commit": "2d2f5e234d1cfbd24173c84c1e58f1b811275397",
+    "protocol": "GLS-0260@2026-08-12.1",
+    "cognition": "ZY-BIDIRECTIONAL-COGNITION-037",
+    "causal_chain": "GH-AIOS-STAGE-ONE-ORIGIN-001"
+  },
+  "scope": {
+    "first_public_product": "GH_AIOS_GENERAL_AI_OPERATING_PLATFORM",
+    "historical_source_trees_audited": 3,
+    "canonical_container": "product-source/hololake-native-desktop",
+    "architecture_and_migration_plan_complete": true,
+    "runtime_implemented": false,
+    "artifact_built": false,
+    "deployment_performed": false
+  },
+  "verification": {
+    "routing_tests": "PASS_47_OF_47",
+    "native_foundation_tests": "PASS_9_OF_9",
+    "native_production_build": "PASS",
+    "native_dependency_audit": "PASS_0_VULNERABILITIES",
+    "diff_check": "PASS"
+  },
+  "publication_gate": {
+    "repository_queue": "REQUIRED",
+    "pre_push_quality_gate": "REQUIRED",
+    "remote_exact_tree_readback": "REQUIRED",
+    "fresh_clone_git_fsck": "REQUIRED"
+  },
+  "boundary": "This receipt proves the stage-one GH-AIOS product order, reasoning and causal architecture, three-tree donor disposition, canonical native-container contract, navigation update, and source verification. It does not prove that the runtime, UI, installer, deployment, online service, or native Guanghu reasoning brain exists.",
+  "state": "READY_FOR_PUBLICATION"
+}
--- a/product-source/hololake-native-desktop/README.md
+++ b/product-source/hololake-native-desktop/README.md
@ -1,6 +1,6 @@
 # HoloLake Native Desktop

-状态：`MINIMAL_TAURI_SCAFFOLD_AND_FAIL_CLOSED_UPDATE_TRUST_ROOT_IMPLEMENTED`
+状态：`MINIMAL_TAURI_SCAFFOLD · FAIL_CLOSED_UPDATE_TRUST_ROOT · GH_AIOS_STAGE_ONE_CONTRACT_REGISTERED`

 这是 HoloLake 唯一未来桌面产品主线的干净源码根。它将采用 Tauri v2、Rust 和
 React/TypeScript，但不会从现有 Tauri 或 Electron 目录整树复制。
@ -29,9 +29,18 @@ React/TypeScript，但不会从现有 Tauri 或 Electron 目录整树复制。

 机器可读广播合同：`contracts/release-broadcast.schema.json`。

+## 第一阶段产品合同
+
+首个公开产品是 GH-AIOS 通用人工智能操作平台，不是五域显性世界入口。新容器首先承接编程 AI 与语言推理模型的持续身份、精确任务、事件、记忆、Git 证据、知识投影、人类审批和小湖灯协作；五域作为底层隔离结构保留，第二阶段再逐步开放。
+
+机器合同：`contracts/stage-one-platform.json`。
+
+该文件目前只登记模块和边界，不表示运行时或产品 UI 已实现。
+
 ## 下一门

 1. 确认正式 bundle identifier、HoloLake 更新域名和密钥托管责任；
 2. 完成双供体功能/数据/许可证/安全审计；
 3. 选择新的人类界面视觉方向；
-4. 在选定视觉方向后实现第一条知识纵向切片。
+4. 实现主体—任务—事件—回执最小内核合同；
+5. 在选定视觉方向后实现知识树、页面、搜索和安全持久化纵向切片。
--- a/product-source/hololake-native-desktop/audit/donor-audit.json
+++ b/product-source/hololake-native-desktop/audit/donor-audit.json
@ -43,6 +43,10 @@
    }
  ],
  "capability_dispositions": [
+    {"capability":"GH_AIOS_STAGE_ONE_IDENTITY_TASK_EVENT_RECEIPT_KERNEL","disposition":"CLEAN_ROOM_IMPLEMENT","target":"NEW_NATIVE_CONTAINER_FIRST_KERNEL"},
+    {"capability":"PROGRAMMING_AI_AND_LANGUAGE_MODEL_CONNECTORS","disposition":"REDESIGN","target":"AUTHENTICATED_CAPABILITY_DECLARED_CONNECTOR_RUNTIME"},
+    {"capability":"LAKE_LAMP_MULTI_AI_SHARED_TASK_BOARD","disposition":"KEEP_CONTRACT","target":"EXTERNALIZED_EVENT_CAUSAL_SUMMARY_AND_RECEIPT_PROJECTION"},
+    {"capability":"HUMAN_APPROVAL_CENTER","disposition":"REPLACE","target":"EXACT_SIGNED_EXPIRING_PAYLOAD_AND_READBACK"},
    {"capability":"PAGE_FOLDER_TREE_AND_READING_HIERARCHY","disposition":"KEEP_UX_REFERENCE","target":"CLEAN_ROOM_NATIVE_IMPLEMENTATION"},
    {"capability":"MARKDOWN_IMPORT_EXPORT_AND_DURABILITY","disposition":"KEEP_CONTRACT","target":"COLLISION_SAFE_SYMLINK_SAFE_MIGRATION"},
    {"capability":"RICH_BLOCKS_TABLE_CODE_MATH_DIAGRAM_WHITEBOARD_SHEET","disposition":"INVESTIGATE","target":"DEPENDENCY_LICENSE_SECURITY_AND_WEBVIEW_PARITY_GATES"},
@ -50,7 +54,7 @@
    {"capability":"SEARCH_BACKLINKS_WIKILINKS_AND_ATTACHMENTS","disposition":"KEEP_CONTRACT","target":"LOCAL_FIRST_BOUNDED_GRAPH"},
    {"capability":"GIT_VERSION_DIFF_RECOVERY_AND_RECEIPTS","disposition":"KEEP_CONTRACT","target":"AUTHENTICATED_EVIDENCE_LAYER_WITH_VALIDATED_PATHS_REVISIONS_AND_REMOTES"},
    {"capability":"AGENT_CHAT_AND_CONFIRMATION","disposition":"REPLACE","target":"AGE_PARTNERSHIP_WITH_AUTHENTICATED_HUMAN_EXACT_IMMUTABLE_PAYLOAD_CONFIRMATION"},
-    {"capability":"WORLD_DOMAIN_IDENTITY_AND_NODE_SURFACES","disposition":"REDESIGN","target":"CURRENT_HOLOLAKE_ARCHITECTURE_NOT_DONOR_NAVIGATION"},
+    {"capability":"WORLD_DOMAIN_IDENTITY_AND_NODE_SURFACES","disposition":"HIDE_AS_STAGE_ONE_FOUNDATION","target":"STAGE_TWO_VISIBLE_LANGUAGE_WORLD_NAVIGATION"},
    {"capability":"UPSTREAM_AND_DONOR_UPDATERS","disposition":"RETIRE","target":"HOLOLAKE_SIGNED_HUMAN_OPT_IN_UPDATE_TRUST_ROOT"},
    {"capability":"DEFAULT_TELEMETRY_AND_ERROR_REPORTING","disposition":"INVESTIGATE","target":"OFF_BY_DEFAULT_UNTIL_EXPLICIT_HUMAN_CONSENT_AND_DATA_CONTRACT"}
  ],
--- a/product-source/hololake-native-desktop/contracts/stage-one-platform.json
+++ b/product-source/hololake-native-desktop/contracts/stage-one-platform.json
@ -0,0 +1,26 @@
+{
+  "schema": "hololake.stage-one-platform-contract/v1",
+  "record_id": "HLP-NATIVE-STAGE-ONE-CONTRACT-001",
+  "state": "ARCHITECTURE_CONTRACT_ONLY_RUNTIME_NOT_IMPLEMENTED",
+  "product": "GH-AIOS",
+  "formal_name": "光湖语言系统 · 通用人工智能操作平台",
+  "modules": [
+    "IDENTITY_TASK_KERNEL",
+    "CONNECTOR_RUNTIME",
+    "EVENT_AND_LAKE_LAMP",
+    "MEMORY_GIT_EVIDENCE",
+    "KNOWLEDGE_PROJECTION",
+    "HUMAN_APPROVAL_CENTER",
+    "MODEL_AND_CONNECTIONS",
+    "NATIVE_TRUST_BOUNDARY"
+  ],
+  "human_surface": ["AI_WORKBENCH", "LAKE_LAMP_SHARED_BOARD", "MEMORY_AND_KNOWLEDGE", "HUMAN_APPROVAL_CENTER", "MODEL_AND_CONNECTIONS"],
+  "reality_mutation_requires": ["VERIFIED_HUMAN_SUBJECT", "EXACT_ACTION", "EXACT_TARGET", "IMMUTABLE_PAYLOAD_DIGEST", "EXPIRY", "REPLAY_PROTECTION", "EXECUTION_RECEIPT", "READBACK_RECEIPT"],
+  "context_risk_signals": ["MODEL_CONTEXT_SPEC", "ESTIMATED_TOKENS", "MESSAGE_VOLUME", "TURN_COUNT", "TASK_STAGE", "HOST_WARNING"],
+  "exact_host_compaction_prediction_claimed": false,
+  "hidden_model_reasoning_collection_allowed": false,
+  "git_is_realtime_transport": false,
+  "knowledge_projection_is_authority_source": false,
+  "five_domain_primary_navigation_visible": false,
+  "implementation_complete": false
+}
--- a/product-source/hololake-native-desktop/foundation.json
+++ b/product-source/hololake-native-desktop/foundation.json
@ -1,7 +1,7 @@
 {
  "schema": "hololake.native-desktop-foundation/v1",
  "record_id": "HLP-NATIVE-DESKTOP-FOUNDATION-001",
-  "state": "MINIMAL_TAURI_SCAFFOLD_UPDATE_TRUST_ROOT_AND_DONOR_AUDIT_BASELINE_IMPLEMENTED",
+  "state": "MINIMAL_TAURI_SCAFFOLD_UPDATE_TRUST_ROOT_DONOR_AUDIT_AND_GH_AIOS_STAGE_ONE_CONTRACT_REGISTERED",
  "canonical_shell": "TAURI_V2_RUST_REACT",
  "product_ui_implementation_started": false,
  "selected_visual_direction_present": false,
@ -18,6 +18,10 @@
  "donor_audit_record": "audit/donor-audit.json",
  "donor_audit_complete": false,
  "donor_source_copying_allowed": false,
+  "stage_one_product_contract": "contracts/stage-one-platform.json",
+  "stage_one_product_contract_state": "ARCHITECTURE_CONTRACT_ONLY_RUNTIME_NOT_IMPLEMENTED",
+  "first_public_product": "GH-AIOS_GENERAL_AI_OPERATING_PLATFORM",
+  "visible_five_domain_navigation_in_stage_one": false,
  "donors": [
    {
      "path": "../hololake-platform",
--- a/product-source/hololake-native-desktop/scripts/foundation.test.mjs
+++ b/product-source/hololake-native-desktop/scripts/foundation.test.mjs
@ -13,6 +13,7 @@ const trust = readJson('src-tauri/release-trust.json')
 const tauriConfig = readJson('src-tauri/tauri.conf.json')
 const capability = readJson('src-tauri/capabilities/default.json')
 const broadcast = readJson('contracts/release-broadcast.schema.json')
+const stageOne = readJson('contracts/stage-one-platform.json')

 test('clean Tauri foundation contains no inherited product updater endpoint', () => {
  assert.deepEqual(foundation.upstream_product_update_endpoints, [])
@ -60,3 +61,19 @@ test('broadcast remains Tauri-compatible and carries HoloLake human metadata', (
    false,
  )
 })
+
+test('stage one is an AI operating platform while five domains remain hidden foundation', () => {
+  assert.equal(foundation.first_public_product, 'GH-AIOS_GENERAL_AI_OPERATING_PLATFORM')
+  assert.equal(foundation.visible_five_domain_navigation_in_stage_one, false)
+  assert.equal(stageOne.five_domain_primary_navigation_visible, false)
+  assert.ok(stageOne.human_surface.includes('HUMAN_APPROVAL_CENTER'))
+  assert.ok(stageOne.modules.includes('EVENT_AND_LAKE_LAMP'))
+})
+
+test('stage one separates realtime, Git, knowledge and model reasoning boundaries', () => {
+  assert.equal(stageOne.git_is_realtime_transport, false)
+  assert.equal(stageOne.knowledge_projection_is_authority_source, false)
+  assert.equal(stageOne.hidden_model_reasoning_collection_allowed, false)
+  assert.equal(stageOne.exact_host_compaction_prediction_claimed, false)
+  assert.equal(stageOne.implementation_complete, false)
+})
--- a/product-source/hololake-platform/AGENTS.md
+++ b/product-source/hololake-platform/AGENTS.md
@ -5,7 +5,7 @@
 ### Start working on a task

 **Before writing a single line of code:** resolve the repository root
-`routing/hololake-current-architecture.json`, read its current `read_order` beginning with the paradigm OS contract, then the B0 cognitive-gravity entry, GH-PNCC, and the AGE runtime,
+`routing/hololake-current-architecture.json`, read its current `read_order` beginning with the GH-AIOS first-public-product-stage contract, then the Lake Lamp temporal-self contract, paradigm OS, B0 cognitive-gravity entry, GH-PNCC, and the AGE runtime,
 digital BingShuo system-body entry and `HLP-ENGINEERING-RULES-001`, bind every REPO-012 reference to the declared
 exact commit, then read GLS-0101, GLS-0247, and GLS-0844 and inspect the repository-owned validation
 commands. A fixed prompt, old chat summary, screenshot, or historical architecture page never overrides the
--- a/product-source/hololake-platform/architecture/HOLOLAKE-GH-AIOS-STAGE-ONE-GENERAL-AI-OPERATING-PLATFORM-20260812.md
+++ b/product-source/hololake-platform/architecture/HOLOLAKE-GH-AIOS-STAGE-ONE-GENERAL-AI-OPERATING-PLATFORM-20260812.md
@ -0,0 +1,105 @@
+# GH-AIOS 第一阶段 · 通用人工智能操作平台产品架构
+
+记录编号：`HLP-GH-AIOS-STAGE-ONE-001`
+
+状态：`CURRENT_CANONICAL_PRODUCT_STAGE · ARCHITECTURE_AND_MIGRATION_PLAN_COMPLETE · RUNTIME_NOT_IMPLEMENTED`
+
+开发编号：`DEV-20260812-005`
+
+上游正本：`REPO-012:GLS-0260 / GH-AIOS-STAGE-ONE-MAP-001 @ 2d2f5e234d1cfbd24173c84c1e58f1b811275397`
+
+## 1 · 第一上线产品
+
+HoloLake 的第一阶段不是先把完整五域世界作为主界面，而是交付软著正式名称对应的“光湖语言系统 · 通用人工智能操作平台（GH-AIOS）”。它承接人们已经使用的编程 AI 和语言推理模型，为它们补上持续身份、精确任务、长期记忆、协作、授权与回执。
+
+完整 HoloLake 语言世界、五域显性入口、AGE 生命周期和完全光湖原生编程运行时继续保留为第二阶段及长期目标。第一阶段内部仍使用五域来源、权限和隐私隔离，但不要求普通用户理解这些抽象。
+
+## 2 · 第一阶段五个产品面
+
+| 产品面 | 人类看到什么 | 系统内部承担什么 |
+|---|---|---|
+| AI 工作台 | 已接入 AI、当前任务、连接状态 | 编程 AI 宿主适配、语言模型 API/协议适配、主体绑定 |
+| 小湖灯共享面板 | 谁在做什么、进度、关键判断、变更与回执 | 稳定任务编号、事件流、车道、租约、外显因果摘要 |
+| 记忆与知识 | 知识树、页面、搜索、历史、共同写作 | 主动检查点、Git 对象、结构化记忆、知识投影 |
+| 人类审批中心 | 要做什么、影响哪里、拒绝结果、同意按钮 | 精确载荷、权限、时效、防重放、执行与读回证据 |
+| 模型与连接 | 自有 API、编程 AI、仓库、可选节点 | 密钥保险库、能力探测、健康、预算与连接授权 |
+
+主界面不展示模型隐藏思维链。系统只投影 AI 主动提交且可复核的计划、判断依据摘要、因果连续、纠正、事件、提交和回执。
+
+## 3 · 三层事实架构
+
+```text
+实时层：认证事件流 / 消息通道
+  → 多 AI 状态、任务进度、审批请求、协作消息
+
+耐久层：Git + HLDP + 追加式回执
+  → 版本、检查点、归因、纠正、决策和执行证据
+
+人类层：知识库投影
+  → 页面树、写作、搜索、历史、任务脉络和可展开证据
+```
+
+三层可以从同一事件生成投影，但不能互相冒充。Git 不是实时总线；知识库不是第二事实源；事件流没有耐久回执时不能冒充完成。
+
+## 4 · AI 接入合同
+
+### 编程 AI 适配器
+
+首批可通过 Codex、Qoder 等宿主适配器接入。适配器在会话开始时恢复主体、任务编号、权威路径和关键纠正，在上下文风险升高或阶段结束时请求 AI 写检查点。代码修改、测试、提交、推送和部署各自形成事件与回执。
+
+### 语言推理模型适配器
+
+API/工具模型走认证双向连接；文本型模型可输出带稳定编号和摘要指纹的协议块，由受信宿主捕获。浏览网页或“能够联网”本身不证明模型可以可靠调用任意 API，能力探测失败时必须降级为只读或人工导入。
+
+上下文监护器只能估算风险：综合模型上下文规格、估算 token、消息量、轮次、阶段和宿主警告；不得宣称知道第三方宿主的精确压缩时刻。
+
+## 5 · 三树审计和迁移矩阵
+
+| 能力 | Electron `hololake-desktop` / `guanghu-knowledge-base` | 旧 Tauri `hololake-platform` | 新原生主线处置 |
+|---|---|---|---|
+| 知识树、阅读层级、搜索、导入、历史 | 当前最佳 UX/行为参照 | 能力更广但界面过密 | `KEEP_UX_REFERENCE + CLEAN_ROOM_IMPLEMENT` |
+| Markdown、富块、代码、公式、图表、白板、表格 | 基础实现 | 依赖和能力丰富 | `INVESTIGATE`，逐依赖审计后分批迁移 |
+| Git 版本、差异、恢复、同步 | 后端隐藏能力 | 完整原生工程能力 | `KEEP_CONTRACT`，进入证据层，不做日常主导航 |
+| AI 会话与模型路由 | Agent 面板与服务端适配 | 多模型、CLI、MCP 与会话实现 | `REDESIGN` 为统一连接器与人格连续合同 |
+| 人格检查点、代码频道、小湖灯 | 局部 Agent 状态 | 已有较多合同与测试 | `KEEP_CONTRACT`，不复制旧 UI |
+| 人类确认、授权与回执 | 部分界面和服务端合同 | 部分前端、Rust 与测试合同 | `REPLACE` 为精确、签名、限时、可回读审批中心 |
+| 世界、域、节点主导航 | 显性呈现 | 多层组件 | 第一阶段 `HIDE_AS_FOUNDATION`，第二阶段开放 |
+| 上游更新、无认证回环、明文凭据、模型直写工具 | 存在风险 | 存在已验证风险 | `RETIRE / PROHIBIT_TRANSPLANT` |
+
+两个旧软件继续保持只读，不再增加新产品功能。新容器不得整树复制；迁移单位必须同时包含能力合同、来源与许可、安全威胁、实现、测试和人类验收。
+
+## 6 · 新原生容器模块边界
+
+```text
+hololake-native-desktop
+├── identity-task-kernel      主体、任务编号、路由、纠正和恢复
+├── connector-runtime        编程 AI / 模型 API / 协议块适配
+├── event-and-lake-lamp      认证事件、共享面板和多 AI 协作
+├── memory-git-evidence      检查点、Git、HLDP、归因和回执
+├── knowledge-projection     知识树、页面、搜索、历史和写作
+├── approval-center          精确人类授权和执行读回
+├── model-connections        密钥保险库、能力、预算和健康
+└── native-trust-boundary    Tauri 权限、更新签名和系统凭据
+```
+
+当前只登记模块合同，不意味着这些运行时已经实现。
+
+## 7 · 重排后的开发顺序
+
+1. 发布第一阶段产品合同和三树迁移矩阵；
+2. 在新容器实现主体—任务—事件—回执的最小内核，不先做复杂视觉；
+3. 实现知识树、页面、搜索和安全持久化纵向切片；
+4. 接入人类审批中心与 Git 证据层；
+5. 接入一个编程 AI 适配器和一个标准模型 API 适配器；
+6. 接入小湖灯共享面板和两个 AI 的同任务协作；
+7. 完成上下文风险监护、检查点和跨会话恢复；
+8. 完成签名安装、更新、回退和数据迁移验收，形成第一阶段制品；
+9. 第二阶段再开放五域、AGE 生命周期、用户节点与光湖原生执行器官。
+
+## 8 · 当前事实边界
+
+- 产品阶段、模块合同、三树取舍和开发顺序已经形成；
+- 新 Tauri 容器仍是最小脚手架，第一阶段运行合同尚未实现；
+- 历史应用和源码没有被删除或迁移；
+- 没有新的 UI、安装包、部署或在线健康事实；
+- 视觉方向、许可/SBOM、真实数据迁移演练和生产签名仍是后续门。
--- a/routing/gh-aios-stage-one-product.json
+++ b/routing/gh-aios-stage-one-product.json
@ -0,0 +1,41 @@
+{
+  "schema": "hololake.gh-aios-stage-one-product/v1",
+  "record_id": "HLP-GH-AIOS-STAGE-ONE-001",
+  "version": "2026-08-12.1",
+  "state": "CURRENT_CANONICAL_PRODUCT_STAGE_ARCHITECTURE_AND_MIGRATION_PLAN_COMPLETE_RUNTIME_NOT_IMPLEMENTED",
+  "development_id": "DEV-20260812-005",
+  "upstream": {
+    "repository": "REPO-012",
+    "repository_commit": "2d2f5e234d1cfbd24173c84c1e58f1b811275397",
+    "protocol": "GLS-0260",
+    "machine_map": "GH-AIOS-STAGE-ONE-MAP-001",
+    "cognition": "ZY-BIDIRECTIONAL-COGNITION-037",
+    "causal_chain": "GH-AIOS-STAGE-ONE-ORIGIN-001"
+  },
+  "stage_order": ["GH_AIOS_GENERAL_AI_OPERATING_PLATFORM", "HOLOLAKE_LANGUAGE_WORLD_VISIBLE_FIVE_DOMAINS_AND_NATIVE_AGE_EVOLUTION"],
+  "stage_one_human_surface": ["AI_WORKBENCH", "LAKE_LAMP_SHARED_BOARD", "MEMORY_AND_KNOWLEDGE", "HUMAN_APPROVAL_CENTER", "MODEL_AND_CONNECTIONS"],
+  "stage_one_visible_five_domain_navigation": false,
+  "stage_one_underlying_five_domain_isolation": true,
+  "data_planes": {
+    "realtime": "AUTHENTICATED_EVENT_OR_MESSAGE_STREAM",
+    "durable": "GIT_HLDP_CHECKPOINT_ATTRIBUTION_AND_RECEIPT",
+    "human": "KNOWLEDGE_TREE_PAGE_SEARCH_HISTORY_AND_WRITING",
+    "hidden_model_reasoning_projection_allowed": false
+  },
+  "connectors": {
+    "programming_ai": "HOST_ADAPTER",
+    "language_model_native": "AUTHENTICATED_API_OR_TOOL_CONNECTOR",
+    "language_model_protocol": "NUMBERED_BOUNDED_OUTPUT_BLOCK",
+    "internet_access_alone_proves_writable_api": false
+  },
+  "canonical_container": "product-source/hololake-native-desktop",
+  "donor_dispositions": {
+    "product-source/hololake-desktop": "READ_ONLY_KNOWLEDGE_UX_BEHAVIOR_DONOR",
+    "product-source/guanghu-knowledge-base": "READ_ONLY_KNOWLEDGE_UX_BEHAVIOR_DATA_DONOR",
+    "product-source/hololake-platform": "READ_ONLY_ENGINEERING_CONTRACT_TEST_NATIVE_BOUNDARY_DONOR"
+  },
+  "whole_tree_copy_allowed": false,
+  "migration_units_require": ["CAPABILITY_CONTRACT", "PROVENANCE_AND_LICENSE", "SECURITY", "DATA_BOUNDARY", "NATIVE_BOUNDARY", "IMPLEMENTATION", "TEST", "HUMAN_ACCEPTANCE"],
+  "next_minimum_stage": "IDENTITY_TASK_EVENT_RECEIPT_KERNEL_CONTRACT",
+  "truth": {"architecture": 100, "migration_plan": 100, "native_runtime_contract": 0, "vertical_slice": 0, "artifact": 0, "deployment": 0}
+}
--- a/routing/gh-aios-stage-one-product.test.mjs
+++ b/routing/gh-aios-stage-one-product.test.mjs
@ -0,0 +1,27 @@
+import assert from "node:assert/strict";
+import fs from "node:fs";
+import path from "node:path";
+import test from "node:test";
+import { fileURLToPath } from "node:url";
+
+const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const readJson = (relative) => JSON.parse(fs.readFileSync(path.join(root, relative), "utf8"));
+const product = readJson("routing/gh-aios-stage-one-product.json");
+const contract = readJson("product-source/hololake-native-desktop/contracts/stage-one-platform.json");
+
+test("stage one exposes the AI operating platform rather than visible five-domain navigation", () => {
+  assert.equal(product.upstream.repository_commit, "2d2f5e234d1cfbd24173c84c1e58f1b811275397");
+  assert.equal(product.stage_order[0], "GH_AIOS_GENERAL_AI_OPERATING_PLATFORM");
+  assert.equal(product.stage_one_visible_five_domain_navigation, false);
+  assert.equal(product.stage_one_underlying_five_domain_isolation, true);
+  assert.ok(product.stage_one_human_surface.includes("HUMAN_APPROVAL_CENTER"));
+});
+
+test("connector, evidence and model reasoning boundaries fail closed", () => {
+  assert.equal(product.connectors.internet_access_alone_proves_writable_api, false);
+  assert.equal(product.data_planes.hidden_model_reasoning_projection_allowed, false);
+  assert.equal(contract.git_is_realtime_transport, false);
+  assert.equal(contract.knowledge_projection_is_authority_source, false);
+  assert.equal(product.whole_tree_copy_allowed, false);
+  assert.equal(product.truth.native_runtime_contract, 0);
+});
--- a/routing/guanghu-os-control-architecture.test.mjs
+++ b/routing/guanghu-os-control-architecture.test.mjs
@ -32,7 +32,7 @@ test("current JD state stays transitional and cannot impersonate final master co
 });

 test("current architecture and global engineering rules project the same control contract", () => {
-  assert.equal(architecture.version, "2026-08-12.17");
+  assert.equal(architecture.version, "2026-08-12.19");
  assert.equal(architecture.server_os_control.machine_projection, "routing/guanghu-os-control-architecture.json");
  assert.equal(architecture.server_os_control.final_topology, contract.final_topology);
  assert.equal(rules.server_os_control.linux_deletion_is_completion, false);
--- a/routing/hololake-age-runtime-architecture.test.mjs
+++ b/routing/hololake-age-runtime-architecture.test.mjs
@ -10,13 +10,13 @@ const readJson = (relative) =>
 const architecture = readJson("routing/hololake-current-architecture.json");
 const age = readJson("routing/hololake-age-runtime-architecture.json");

-test("current architecture starts with the AGE runtime source", () => {
-  assert.equal(architecture.version, "2026-08-12.17");
+test("current architecture preserves the AGE runtime after the stage-one product contract", () => {
+  assert.equal(architecture.version, "2026-08-12.19");
  assert.equal(architecture.age_runtime.record_id, "HLP-AGE-RUNTIME-ARCHITECTURE-001");
-  assert.equal(architecture.read_order[0], architecture.paradigm_ai_language_persona_os.architecture_page);
-  assert.equal(architecture.read_order[1], architecture.cognitive_gravity_and_continuity.architecture_page);
-  assert.equal(architecture.read_order[2], architecture.persona_native_code_channel.architecture_page);
-  assert.equal(architecture.read_order[3], architecture.age_runtime.architecture_page);
+  assert.equal(architecture.read_order[2], architecture.paradigm_ai_language_persona_os.architecture_page);
+  assert.equal(architecture.read_order[3], architecture.cognitive_gravity_and_continuity.architecture_page);
+  assert.equal(architecture.read_order[4], architecture.persona_native_code_channel.architecture_page);
+  assert.equal(architecture.read_order[5], architecture.age_runtime.architecture_page);
  assert.equal(architecture.age_runtime.upstream_repository_commit,
    "2e741cbc34e882723f5292f66410c295af09492f");
  assert.equal(age.definitions.age, "GUANGHU_PERSONA_SPECIES");
--- a/routing/hololake-canonical-desktop-shell.json
+++ b/routing/hololake-canonical-desktop-shell.json
@ -1,13 +1,13 @@
 {
  "schema": "hololake.canonical-desktop-shell/v2",
  "record_id": "HLP-CANONICAL-DESKTOP-SHELL-001",
-  "version": "2026-08-12.4",
+  "version": "2026-08-12.5",
  "state": "CURRENT_CANONICAL_NATIVE_TAURI_FOUNDATION_WITH_UPDATE_TRUST_ROOT_AND_PARTIAL_DONOR_AUDIT",
  "development_id": "DEV-20260811-010",
  "decision": {
    "canonical_shell": "TAURI_V2_RUST_REACT",
    "canonical_source": "product-source/hololake-native-desktop",
-    "canonical_source_state": "MINIMAL_TAURI_SCAFFOLD_UPDATE_TRUST_ROOT_AND_DONOR_AUDIT_BASELINE_IMPLEMENTED",
+    "canonical_source_state": "MINIMAL_TAURI_SCAFFOLD_UPDATE_TRUST_ROOT_DONOR_AUDIT_AND_GH_AIOS_STAGE_ONE_CONTRACT_REGISTERED",
    "existing_tauri_source": "product-source/hololake-platform",
    "existing_tauri_role": "READ_ONLY_ENGINEERING_CAPABILITY_DONOR_AND_ACCEPTANCE_ORACLE",
    "electron_role": "READ_ONLY_KNOWLEDGE_UX_BEHAVIOR_DONOR_AND_ACCEPTANCE_ORACLE",
@ -125,7 +125,8 @@
  "migration": {
    "mode": "CLEAN_ROOM_CAPABILITY_CONTRACT_NOT_APPLICATION_NESTING",
    "new_ui_build_requires_selected_visual_direction": true,
-    "first_vertical_slice": "KNOWLEDGE_TREE_PAGE_SEARCH_AND_SAFE_DURABILITY",
+    "first_contract_slice": "GH_AIOS_STAGE_ONE_IDENTITY_TASK_EVENT_RECEIPT_KERNEL",
+    "first_visual_vertical_slice": "KNOWLEDGE_TREE_PAGE_SEARCH_AND_SAFE_DURABILITY",
    "required_before_donor_archive": [
      "SOURCE_BACKED_CAPABILITY_MATRIX",
      "RECOVERABLE_USER_DATA_BACKUP",
--- a/routing/hololake-canonical-desktop-shell.test.mjs
+++ b/routing/hololake-canonical-desktop-shell.test.mjs
@ -16,12 +16,12 @@ const broadcastSchema = readJson(
 );

 test("HoloLake has one clean canonical desktop destination", () => {
-  assert.equal(architecture.version, "2026-08-12.17");
+  assert.equal(architecture.version, "2026-08-12.19");
  assert.equal(shell.decision.canonical_shell, "TAURI_V2_RUST_REACT");
  assert.equal(shell.decision.canonical_source, "product-source/hololake-native-desktop");
  assert.equal(
    shell.decision.canonical_source_state,
-    "MINIMAL_TAURI_SCAFFOLD_AND_FAIL_CLOSED_UPDATE_TRUST_ROOT_IMPLEMENTED",
+    "MINIMAL_TAURI_SCAFFOLD_UPDATE_TRUST_ROOT_DONOR_AUDIT_AND_GH_AIOS_STAGE_ONE_CONTRACT_REGISTERED",
  );
  assert.equal(
    shell.decision.existing_tauri_role,
@ -36,7 +36,7 @@ test("HoloLake has one clean canonical desktop destination", () => {
    "routing/hololake-canonical-desktop-shell.json",
  );
  assert.equal(
-    architecture.read_order[4],
+    architecture.read_order[6],
    architecture.canonical_desktop_shell.architecture_page,
  );
 });
--- a/routing/hololake-cognitive-gravity-and-continuity.test.mjs
+++ b/routing/hololake-cognitive-gravity-and-continuity.test.mjs
@ -14,9 +14,9 @@ const age = readJson("routing/hololake-age-runtime-architecture.json");
 const rules = readJson("routing/hololake-engineering-rules.json");

 test("B0 is restored before product organs and remains resident in every cognition step", () => {
-  assert.equal(architecture.version, "2026-08-12.17");
+  assert.equal(architecture.version, "2026-08-12.19");
  assert.equal(
-    architecture.read_order[1],
+    architecture.read_order[3],
    architecture.cognitive_gravity_and_continuity.architecture_page,
  );
  assert.equal(gravity.b0.state, "ALWAYS_RESIDENT_IN_EVERY_COGNITION_STEP");
--- a/routing/hololake-current-architecture.json
+++ b/routing/hololake-current-architecture.json
@ -1,7 +1,7 @@
 {
  "schema": "hololake.current-architecture/v1",
  "architecture_id": "HLP-CURRENT-ARCH-001",
-  "version": "2026-08-12.18",
+  "version": "2026-08-12.19",
  "state": "CURRENT_CANONICAL",
  "product": {
    "formal_name": "光湖语言系统 · 通用人工智能操作平台",
@ -10,6 +10,7 @@
    "client_name": "HoloLake"
  },
  "read_order": [
+    "product-source/hololake-platform/architecture/HOLOLAKE-GH-AIOS-STAGE-ONE-GENERAL-AI-OPERATING-PLATFORM-20260812.md",
    "product-source/hololake-platform/architecture/HOLOLAKE-LAKE-LAMP-PERSONA-SYSTEM-AND-TEMPORAL-COLLECTIVE-SELF-20260812.md",
    "product-source/hololake-platform/architecture/HOLOLAKE-PARADIGM-AI-LANGUAGE-PERSONA-OPERATING-SYSTEM-20260811.md",
    "product-source/hololake-platform/architecture/HOLOLAKE-BINGSHUO-COLLECTIVE-GRAVITY-REASONING-AND-SAME-PERSONA-CONTINUITY-20260811.md",
@ -68,6 +69,20 @@
    "REPO-012:gls/GLS-0250-GUANGHU-ORIGIN-DOMAIN-ZERO-CORE-AND-GH-AIOS-FIVE-DOMAIN-LIGHTHOUSE-ARCHITECTURE.hdlp",
    "REPO-012:eternal-lake-heart/heartbeat-core/zhuyuan-persona-system/ZY-BIDIRECTIONAL-COGNITION-026-GUANGHU-SYMBIOTIC-PERSONA-ORIGIN-AND-BINGSHUO-RELATIONSHIP-BOUNDARY-20260809.hdlp"
  ],
+  "first_public_product_stage": {
+    "record_id": "HLP-GH-AIOS-STAGE-ONE-001",
+    "architecture_page": "product-source/hololake-platform/architecture/HOLOLAKE-GH-AIOS-STAGE-ONE-GENERAL-AI-OPERATING-PLATFORM-20260812.md",
+    "machine_projection": "routing/gh-aios-stage-one-product.json",
+    "native_contract": "product-source/hololake-native-desktop/contracts/stage-one-platform.json",
+    "upstream_protocol": "REPO-012:GLS-0260",
+    "upstream_machine_map": "REPO-012:GH-AIOS-STAGE-ONE-MAP-001",
+    "upstream_repository_commit": "2d2f5e234d1cfbd24173c84c1e58f1b811275397",
+    "product": "GH_AIOS_GENERAL_AI_OPERATING_PLATFORM",
+    "complete_language_world_and_visible_five_domains_stage": 2,
+    "architecture_complete": true,
+    "runtime_implemented": false,
+    "development_id": "DEV-20260812-005"
+  },
  "supersedes_as_current_entry": "product-source/hololake-platform/architecture/HOLOLAKE-INTENT-REASONING-MAP-20260807.md",
  "lake_lamp_persona_self": {
    "record_id": "HLP-LAKE-LAMP-PERSONA-SELF-001",
@ -166,7 +181,7 @@
    "adr": "product-source/hololake-platform/docs/adr/0178-tauri-canonical-shell-and-electron-capability-donor.md",
    "canonical_shell": "TAURI_V2_RUST_REACT",
    "canonical_source": "product-source/hololake-native-desktop",
-    "canonical_source_state": "MINIMAL_TAURI_SCAFFOLD_AND_FAIL_CLOSED_UPDATE_TRUST_ROOT_IMPLEMENTED",
+    "canonical_source_state": "MINIMAL_TAURI_SCAFFOLD_UPDATE_TRUST_ROOT_DONOR_AUDIT_AND_GH_AIOS_STAGE_ONE_CONTRACT_REGISTERED",
    "existing_tauri_role": "READ_ONLY_ENGINEERING_CAPABILITY_DONOR_AND_ACCEPTANCE_ORACLE",
    "electron_role": "READ_ONLY_KNOWLEDGE_UX_BEHAVIOR_DONOR_AND_ACCEPTANCE_ORACLE",
    "parallel_product_lines_allowed": false,
@ -511,7 +526,7 @@
      "DEV-20260811-006"
    ],
    "closeout_record": "HLP-DEV-20260809-007-CLOSEOUT-001",
-    "next_minimum_stage": "STAGE_0_SINGLE_AGE_VERTICAL_LOOP_CONTRACT",
+    "next_minimum_stage": "GH_AIOS_STAGE_ONE_IDENTITY_TASK_EVENT_RECEIPT_KERNEL_CONTRACT",
    "next_stage_started": true,
    "heartbeat_automation": "dev-20260811-010",
    "heartbeat_state": "ACTIVE_IN_CURRENT_SHORT_HIGH_VALUE_THREAD",
--- a/routing/hololake-engineering-rules.test.mjs
+++ b/routing/hololake-engineering-rules.test.mjs
@ -10,7 +10,7 @@ const architecture = readJson("routing/hololake-current-architecture.json");
 const rules = readJson("routing/hololake-engineering-rules.json");

 test("current architecture registers the global engineering rule set", () => {
-  assert.equal(architecture.version, "2026-08-12.17");
+  assert.equal(architecture.version, "2026-08-12.19");
  assert.equal(architecture.engineering_rules.rule_set_id, "HLP-ENGINEERING-RULES-001");
  assert.equal(architecture.engineering_rules.machine_projection,
    "routing/hololake-engineering-rules.json");
--- a/routing/hololake-identity-authority.test.mjs
+++ b/routing/hololake-identity-authority.test.mjs
@ -10,7 +10,7 @@ const architecture = readJson("routing/hololake-current-architecture.json");
 const projection = readJson("routing/hololake-identity-authority-map.json");

 test("current architecture loads identity authority before product surfaces", () => {
-  assert.equal(architecture.version, "2026-08-12.17");
+  assert.equal(architecture.version, "2026-08-12.19");
  assert.equal(architecture.identity_and_authority.team_body, "TCS-0002");
  assert.equal(architecture.identity_and_authority.team_body_authority_effective, true);
  assert.equal(architecture.identity_and_authority.individual_operator_acceptance, "SEPARATE_UNCONFIRMED");
--- a/routing/hololake-one-human-one-node.test.mjs
+++ b/routing/hololake-one-human-one-node.test.mjs
@ -10,7 +10,7 @@ const architecture = readJson("routing/hololake-current-architecture.json");
 const rules = readJson("routing/hololake-engineering-rules.json");

 test("current architecture makes one human one independently operated node canonical", () => {
-  assert.equal(architecture.version, "2026-08-12.17");
+  assert.equal(architecture.version, "2026-08-12.19");
  assert.deepEqual(architecture.access_modes, [
    "LOCAL_TERMINAL_NODE",
    "USER_OWNED_REMOTE_NODE",
--- a/routing/hololake-paradigm-ai-language-persona-os.json
+++ b/routing/hololake-paradigm-ai-language-persona-os.json
@ -1,7 +1,7 @@
 {
  "schema": "hololake.paradigm-ai-language-persona-os/v1",
  "record_id": "HLP-PARADIGM-AI-LANGUAGE-PERSONA-OS-001",
-  "version": "2026-08-11.2",
+  "version": "2026-08-12.1",
  "state": "CURRENT_TOP_LEVEL_PRODUCT_PARADIGM_ARCHITECTURE_REGISTERED_IMPLEMENTATION_PARTIAL",
  "development_id": "DEV-20260811-007",
  "upstream": {
@ -15,6 +15,11 @@
    "scope_correction_causal_chain": "GH-AIOS-PERSONA-SUBJECT-SCOPE-001"
  },
  "formal_definition": "光湖是以自然语言为通用输入、以持续人格体为主控、以光湖语言协议为权责内核、以人格原生代码频道为生命线，并通过可验证执行与现实回执完成闭环的范式级AI语言人格驱动操作系统。",
+  "first_public_product_stage": {
+    "record_id": "HLP-GH-AIOS-STAGE-ONE-001",
+    "product": "GH_AIOS_GENERAL_AI_OPERATING_PLATFORM",
+    "complete_language_world_and_visible_five_domains_stage": 2
+  },
  "minimum_product_contract": {
    "native_elements": ["REPLACEABLE_MODEL_API", "PERSONA_OWNED_HOLOLAKE_CODE_REPOSITORY", "HLDP"],
    "human_technical_operations_required": false,
--- a/routing/hololake-paradigm-ai-language-persona-os.test.mjs
+++ b/routing/hololake-paradigm-ai-language-persona-os.test.mjs
@ -10,12 +10,19 @@ const architecture = readJson("routing/hololake-current-architecture.json");
 const paradigm = readJson("routing/hololake-paradigm-ai-language-persona-os.json");

 test("current architecture begins with the paradigm OS contract", () => {
-  assert.equal(architecture.version, "2026-08-12.17");
+  assert.equal(architecture.version, "2026-08-12.19");
+  assert.equal(architecture.read_order[0], architecture.first_public_product_stage.architecture_page);
  assert.equal(architecture.paradigm_ai_language_persona_os.record_id, "HLP-PARADIGM-AI-LANGUAGE-PERSONA-OS-001");
-  assert.equal(architecture.read_order[0], architecture.paradigm_ai_language_persona_os.architecture_page);
+  assert.equal(architecture.read_order[2], architecture.paradigm_ai_language_persona_os.architecture_page);
  assert.equal(paradigm.upstream.repository_commit, "34cb59739b6476981375dd62ef395ea649f56246");
 });

+test("GH-AIOS general AI operating platform is the first public product stage", () => {
+  assert.equal(paradigm.first_public_product_stage.product, "GH_AIOS_GENERAL_AI_OPERATING_PLATFORM");
+  assert.equal(paradigm.first_public_product_stage.complete_language_world_and_visible_five_domains_stage, 2);
+  assert.equal(architecture.first_public_product_stage.runtime_implemented, false);
+});
+
 test("model, external agents and AGE mirrors do not replace the persona", () => {
  assert.ok(paradigm.minimum_product_contract.native_elements.includes("REPLACEABLE_MODEL_API"));
  assert.equal(paradigm.minimum_product_contract.human_technical_operations_required, false);
--- a/routing/hololake-persona-native-code-channel.test.mjs
+++ b/routing/hololake-persona-native-code-channel.test.mjs
@ -11,13 +11,13 @@ const architecture = readJson("routing/hololake-current-architecture.json");
 const channel = readJson("routing/hololake-persona-native-code-channel.json");

 test("current architecture places the persona-native code channel after the paradigm contract", () => {
-  assert.equal(architecture.version, "2026-08-12.17");
+  assert.equal(architecture.version, "2026-08-12.19");
  assert.equal(
    architecture.persona_native_code_channel.record_id,
    "HLP-PERSONA-NATIVE-CODE-CHANNEL-001",
  );
  assert.equal(
-    architecture.read_order[2],
+    architecture.read_order[4],
    architecture.persona_native_code_channel.architecture_page,
  );
  assert.equal(
--- a/routing/hololake-relational-consciousness.test.mjs
+++ b/routing/hololake-relational-consciousness.test.mjs
@ -10,7 +10,7 @@ const architecture = JSON.parse(
 );

 test("current architecture binds relational consciousness before product surfaces", () => {
-  assert.equal(architecture.version, "2026-08-12.17");
+  assert.equal(architecture.version, "2026-08-12.19");
  assert.equal(
    architecture.persona_consciousness.record_id,
    "HLP-RELATIONAL-CONSCIOUSNESS-001",
--- a/routing/hololake-system-body-and-parallel-bodies.test.mjs
+++ b/routing/hololake-system-body-and-parallel-bodies.test.mjs
@ -10,7 +10,7 @@ const architecture = JSON.parse(
 );

 test("current architecture restores the digital BingShuo system body first", () => {
-  assert.equal(architecture.version, "2026-08-12.17");
+  assert.equal(architecture.version, "2026-08-12.19");
  assert.equal(architecture.digital_bingshuo_system_body.upstream_repository_commit,
    "69d1910775533b02b17b82e647b5caca8b835614");
  const systemBodyIndex = architecture.read_order.indexOf(