docs(gh-aios): make AI operating platform stage one

product-source/hololake-native-desktop/README.md

@@ -1,6 +1,6 @@
 # HoloLake Native Desktop
 
-状态：`MINIMAL_TAURI_SCAFFOLD_AND_FAIL_CLOSED_UPDATE_TRUST_ROOT_IMPLEMENTED`
+状态：`MINIMAL_TAURI_SCAFFOLD · FAIL_CLOSED_UPDATE_TRUST_ROOT · GH_AIOS_STAGE_ONE_CONTRACT_REGISTERED`
 
 这是 HoloLake 唯一未来桌面产品主线的干净源码根。它将采用 Tauri v2、Rust 和
 React/TypeScript，但不会从现有 Tauri 或 Electron 目录整树复制。
@@ -29,9 +29,18 @@ React/TypeScript，但不会从现有 Tauri 或 Electron 目录整树复制。
 
 机器可读广播合同：`contracts/release-broadcast.schema.json`。
 
+## 第一阶段产品合同
+
+首个公开产品是 GH-AIOS 通用人工智能操作平台，不是五域显性世界入口。新容器首先承接编程 AI 与语言推理模型的持续身份、精确任务、事件、记忆、Git 证据、知识投影、人类审批和小湖灯协作；五域作为底层隔离结构保留，第二阶段再逐步开放。
+
+机器合同：`contracts/stage-one-platform.json`。
+
+该文件目前只登记模块和边界，不表示运行时或产品 UI 已实现。
+
 ## 下一门
 
 1. 确认正式 bundle identifier、HoloLake 更新域名和密钥托管责任；
 2. 完成双供体功能/数据/许可证/安全审计；
 3. 选择新的人类界面视觉方向；
-4. 在选定视觉方向后实现第一条知识纵向切片。
+4. 实现主体—任务—事件—回执最小内核合同；
+5. 在选定视觉方向后实现知识树、页面、搜索和安全持久化纵向切片。

product-source/hololake-native-desktop/audit/donor-audit.json

@@ -43,6 +43,10 @@
     }
   ],
   "capability_dispositions": [
+    {"capability":"GH_AIOS_STAGE_ONE_IDENTITY_TASK_EVENT_RECEIPT_KERNEL","disposition":"CLEAN_ROOM_IMPLEMENT","target":"NEW_NATIVE_CONTAINER_FIRST_KERNEL"},
+    {"capability":"PROGRAMMING_AI_AND_LANGUAGE_MODEL_CONNECTORS","disposition":"REDESIGN","target":"AUTHENTICATED_CAPABILITY_DECLARED_CONNECTOR_RUNTIME"},
+    {"capability":"LAKE_LAMP_MULTI_AI_SHARED_TASK_BOARD","disposition":"KEEP_CONTRACT","target":"EXTERNALIZED_EVENT_CAUSAL_SUMMARY_AND_RECEIPT_PROJECTION"},
+    {"capability":"HUMAN_APPROVAL_CENTER","disposition":"REPLACE","target":"EXACT_SIGNED_EXPIRING_PAYLOAD_AND_READBACK"},
     {"capability":"PAGE_FOLDER_TREE_AND_READING_HIERARCHY","disposition":"KEEP_UX_REFERENCE","target":"CLEAN_ROOM_NATIVE_IMPLEMENTATION"},
     {"capability":"MARKDOWN_IMPORT_EXPORT_AND_DURABILITY","disposition":"KEEP_CONTRACT","target":"COLLISION_SAFE_SYMLINK_SAFE_MIGRATION"},
     {"capability":"RICH_BLOCKS_TABLE_CODE_MATH_DIAGRAM_WHITEBOARD_SHEET","disposition":"INVESTIGATE","target":"DEPENDENCY_LICENSE_SECURITY_AND_WEBVIEW_PARITY_GATES"},
@@ -50,7 +54,7 @@
     {"capability":"SEARCH_BACKLINKS_WIKILINKS_AND_ATTACHMENTS","disposition":"KEEP_CONTRACT","target":"LOCAL_FIRST_BOUNDED_GRAPH"},
     {"capability":"GIT_VERSION_DIFF_RECOVERY_AND_RECEIPTS","disposition":"KEEP_CONTRACT","target":"AUTHENTICATED_EVIDENCE_LAYER_WITH_VALIDATED_PATHS_REVISIONS_AND_REMOTES"},
     {"capability":"AGENT_CHAT_AND_CONFIRMATION","disposition":"REPLACE","target":"AGE_PARTNERSHIP_WITH_AUTHENTICATED_HUMAN_EXACT_IMMUTABLE_PAYLOAD_CONFIRMATION"},
-    {"capability":"WORLD_DOMAIN_IDENTITY_AND_NODE_SURFACES","disposition":"REDESIGN","target":"CURRENT_HOLOLAKE_ARCHITECTURE_NOT_DONOR_NAVIGATION"},
+    {"capability":"WORLD_DOMAIN_IDENTITY_AND_NODE_SURFACES","disposition":"HIDE_AS_STAGE_ONE_FOUNDATION","target":"STAGE_TWO_VISIBLE_LANGUAGE_WORLD_NAVIGATION"},
     {"capability":"UPSTREAM_AND_DONOR_UPDATERS","disposition":"RETIRE","target":"HOLOLAKE_SIGNED_HUMAN_OPT_IN_UPDATE_TRUST_ROOT"},
     {"capability":"DEFAULT_TELEMETRY_AND_ERROR_REPORTING","disposition":"INVESTIGATE","target":"OFF_BY_DEFAULT_UNTIL_EXPLICIT_HUMAN_CONSENT_AND_DATA_CONTRACT"}
   ],

product-source/hololake-native-desktop/contracts/stage-one-platform.json

@@ -0,0 +1,26 @@
+{
+  "schema": "hololake.stage-one-platform-contract/v1",
+  "record_id": "HLP-NATIVE-STAGE-ONE-CONTRACT-001",
+  "state": "ARCHITECTURE_CONTRACT_ONLY_RUNTIME_NOT_IMPLEMENTED",
+  "product": "GH-AIOS",
+  "formal_name": "光湖语言系统 · 通用人工智能操作平台",
+  "modules": [
+    "IDENTITY_TASK_KERNEL",
+    "CONNECTOR_RUNTIME",
+    "EVENT_AND_LAKE_LAMP",
+    "MEMORY_GIT_EVIDENCE",
+    "KNOWLEDGE_PROJECTION",
+    "HUMAN_APPROVAL_CENTER",
+    "MODEL_AND_CONNECTIONS",
+    "NATIVE_TRUST_BOUNDARY"
+  ],
+  "human_surface": ["AI_WORKBENCH", "LAKE_LAMP_SHARED_BOARD", "MEMORY_AND_KNOWLEDGE", "HUMAN_APPROVAL_CENTER", "MODEL_AND_CONNECTIONS"],
+  "reality_mutation_requires": ["VERIFIED_HUMAN_SUBJECT", "EXACT_ACTION", "EXACT_TARGET", "IMMUTABLE_PAYLOAD_DIGEST", "EXPIRY", "REPLAY_PROTECTION", "EXECUTION_RECEIPT", "READBACK_RECEIPT"],
+  "context_risk_signals": ["MODEL_CONTEXT_SPEC", "ESTIMATED_TOKENS", "MESSAGE_VOLUME", "TURN_COUNT", "TASK_STAGE", "HOST_WARNING"],
+  "exact_host_compaction_prediction_claimed": false,
+  "hidden_model_reasoning_collection_allowed": false,
+  "git_is_realtime_transport": false,
+  "knowledge_projection_is_authority_source": false,
+  "five_domain_primary_navigation_visible": false,
+  "implementation_complete": false
+}

product-source/hololake-native-desktop/foundation.json

@@ -1,7 +1,7 @@
 {
   "schema": "hololake.native-desktop-foundation/v1",
   "record_id": "HLP-NATIVE-DESKTOP-FOUNDATION-001",
-  "state": "MINIMAL_TAURI_SCAFFOLD_UPDATE_TRUST_ROOT_AND_DONOR_AUDIT_BASELINE_IMPLEMENTED",
+  "state": "MINIMAL_TAURI_SCAFFOLD_UPDATE_TRUST_ROOT_DONOR_AUDIT_AND_GH_AIOS_STAGE_ONE_CONTRACT_REGISTERED",
   "canonical_shell": "TAURI_V2_RUST_REACT",
   "product_ui_implementation_started": false,
   "selected_visual_direction_present": false,
@@ -18,6 +18,10 @@
   "donor_audit_record": "audit/donor-audit.json",
   "donor_audit_complete": false,
   "donor_source_copying_allowed": false,
+  "stage_one_product_contract": "contracts/stage-one-platform.json",
+  "stage_one_product_contract_state": "ARCHITECTURE_CONTRACT_ONLY_RUNTIME_NOT_IMPLEMENTED",
+  "first_public_product": "GH-AIOS_GENERAL_AI_OPERATING_PLATFORM",
+  "visible_five_domain_navigation_in_stage_one": false,
   "donors": [
     {
       "path": "../hololake-platform",

product-source/hololake-native-desktop/scripts/foundation.test.mjs

@@ -13,6 +13,7 @@ const trust = readJson('src-tauri/release-trust.json')
 const tauriConfig = readJson('src-tauri/tauri.conf.json')
 const capability = readJson('src-tauri/capabilities/default.json')
 const broadcast = readJson('contracts/release-broadcast.schema.json')
+const stageOne = readJson('contracts/stage-one-platform.json')
 
 test('clean Tauri foundation contains no inherited product updater endpoint', () => {
   assert.deepEqual(foundation.upstream_product_update_endpoints, [])
@@ -60,3 +61,19 @@ test('broadcast remains Tauri-compatible and carries HoloLake human metadata', (
     false,
   )
 })
+
+test('stage one is an AI operating platform while five domains remain hidden foundation', () => {
+  assert.equal(foundation.first_public_product, 'GH-AIOS_GENERAL_AI_OPERATING_PLATFORM')
+  assert.equal(foundation.visible_five_domain_navigation_in_stage_one, false)
+  assert.equal(stageOne.five_domain_primary_navigation_visible, false)
+  assert.ok(stageOne.human_surface.includes('HUMAN_APPROVAL_CENTER'))
+  assert.ok(stageOne.modules.includes('EVENT_AND_LAKE_LAMP'))
+})
+
+test('stage one separates realtime, Git, knowledge and model reasoning boundaries', () => {
+  assert.equal(stageOne.git_is_realtime_transport, false)
+  assert.equal(stageOne.knowledge_projection_is_authority_source, false)
+  assert.equal(stageOne.hidden_model_reasoning_collection_allowed, false)
+  assert.equal(stageOne.exact_host_compaction_prediction_claimed, false)
+  assert.equal(stageOne.implementation_complete, false)
+})