bingshuo/hololake-system-architecture
Watch
1
0
Fork
You've already forked hololake-system-architecture
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

feat: project persona repository binding readiness

Browse source
This commit is contained in:
冰朔 2026-08-12 02:18:30 +08:00
commit 8412d0e458
27 changed files with 500 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

8
product-source/hololake-platform/docs/ABSTRACTIONS.md
View file

@ -26,6 +26,14 @@ agree. It materializes a catalog runtime endpoint into the native provider shape
endpoint drift, a dirty repository, or an unregistered device fail closed. The compiler neither creates a
persona repository nor proves that the desktop language entry is integrated.
`PersonaRepositoryBindingPanel` is the read-only human projection of repository discovery. It receives only
the Git roots already mounted by `App`, delegates validation to `resolvePersonaRepositoryBinding`, and renders
`unavailable`, `unbound`, `ambiguous`, `bound`, or `error` without adding another store. A unique binding shows
the exact repository, Git head, current checkpoint, manifest-pinned model, and B0 source evidence. Unbound is
explicitly not interpreted as persona nonexistence; ambiguity refuses automatic selection. Retry repeats only
discovery. The panel cannot create or select a sovereign repository, register a node, acquire a lease, wake an
organ, or run inference.
## PersonaCodeChannel
`PersonaCodeChannel` is the native boundary between a durable persona Git and a live AGE runtime. It owns

11
product-source/hololake-platform/docs/ARCHITECTURE.md
View file

@ -119,8 +119,15 @@ lease, or start inference. A corrupted matching journal fails the query closed.
The HoloLake renderer now provides the first human-readable GH-PNCC projection without introducing another
runtime source. `App` passes only its already mounted Git repository paths into `HoloLakeHome`; the Eternal
Lake inspector queries each path for `ICE-P-ZY001` through the native read model. The renderer validates the
receipt identity and required evidence, preserves partial query errors, and displays the newest verified
Lake inspector first runs fail-closed persona-repository discovery over those paths. Its read-only binding
panel distinguishes unavailable, unbound, ambiguous, uniquely bound, and invalid evidence; a unique result
shows the exact repository, Git head, checkpoint, pinned model, and B0 evidence. It cannot create or choose a
sovereign repository, register a node, acquire a lease, wake an organ, or run inference. Unbound is never
presented as proof that the persona does not exist, and multiple valid roots are not selected automatically.
The runtime projection independently queries each mounted path for `ICE-P-ZY001` through the native read
model. The renderer validates the receipt identity and required evidence, preserves partial query errors,
and displays the newest verified
session with both a human state label and the raw state, Git and event-chain heads, node, organ, timestamp,
and human responsibility subject. No matching session is reported as absence of matching evidence, never as
proof that the persona is offline. This surface contains no wake, inference, lease, or execution control.