feat: project native persona authorization status

This commit is contained in:
冰朔 2026-08-12 06:29:51 +08:00
commit 8f18c3fba3
38 changed files with 268 additions and 40 deletions

View file

@ -174,8 +174,10 @@ binding, and finally invokes B0 partner deliberation. Unavailable, unbound, ambi
binding, and cognition failures stop at their own boundary; later stages are not invoked. Its successful result
is still a language-goal projection, not permission to perform a reality action. `PersonaLanguageShellPanel`
is now mounted from the Fifth Domain desktop source and receives the app's already-mounted repository roots and
configured provider metadata. It has no native persona-control authorization receipt loader, exposes no execution
callback, and hides the reality confirmation surface because no durable confirmation consumer is wired. This
configured provider metadata. It now renders a strict read-only projection from the native persona-control signer
registry loader, exposes no candidate authorization source or execution callback, and hides the reality confirmation
surface because no durable confirmation consumer is wired. The current empty registry is shown as system-direct;
unavailable or malformed evidence also fails closed to system-direct. This
proves source integration, not a real persona manifest binding, installed desktop runtime, or acceptance.
`src/lib/personaControlAuthorization.ts` removes the desktop coordinator's caller-supplied authorization boolean