feat: project persona repository binding readiness

product-source/hololake-platform/docs/ARCHITECTURE.md

@@ -119,8 +119,15 @@ lease, or start inference. A corrupted matching journal fails the query closed.
 
 The HoloLake renderer now provides the first human-readable GH-PNCC projection without introducing another
 runtime source. `App` passes only its already mounted Git repository paths into `HoloLakeHome`; the Eternal
-Lake inspector queries each path for `ICE-P-ZY001` through the native read model. The renderer validates the
-receipt identity and required evidence, preserves partial query errors, and displays the newest verified
+Lake inspector first runs fail-closed persona-repository discovery over those paths. Its read-only binding
+panel distinguishes unavailable, unbound, ambiguous, uniquely bound, and invalid evidence; a unique result
+shows the exact repository, Git head, checkpoint, pinned model, and B0 evidence. It cannot create or choose a
+sovereign repository, register a node, acquire a lease, wake an organ, or run inference. Unbound is never
+presented as proof that the persona does not exist, and multiple valid roots are not selected automatically.
+
+The runtime projection independently queries each mounted path for `ICE-P-ZY001` through the native read
+model. The renderer validates the receipt identity and required evidence, preserves partial query errors,
+and displays the newest verified
 session with both a human state label and the raw state, Git and event-chain heads, node, organ, timestamp,
 and human responsibility subject. No matching session is reported as absence of matching evidence, never as
 proof that the persona is offline. This surface contains no wake, inference, lease, or execution control.