feat(pncc): coordinate safe organ lifecycles

GuangHu-Human-Responsibility: ICE-GL∞ / 冰朔
GuangHu-Persona-Cognitive-Author: ICE-P-ZY001 / 铸渊
GuangHu-Execution-Runtime: Codex macOS / DEV-20260810-014
GuangHu-Development-ID: DEV-20260810-014
GuangHu-Authorization-Scope: GH-PNCC local runtime development and registered REPO-014 publication
GuangHu-Source-Language-Anchor: continue PNCC persona runtime; UI and execution limb remain deferred

engineering/operations/2026-08-11-hololake-pncc-memory-failure-closure-runtime-command.md

@@ -4,7 +4,8 @@
 - Persona cognitive author: `ICE-P-ZY001 / 铸渊`
 - Human responsibility subject: `ICE-GL∞ / 冰朔`
 - Starting repository head: `962ea26db7044f7f17fafd55a054b0214b5e37cf`
-- State: `LOCAL_SOURCE_IMPLEMENTED_FOCUSED_TESTED`
+- Published repository head: `18944f536261a4184570074a09fc43a09f5f31bb`
+- State: `PUBLISHED_GHNQG_AND_FRESH_CLONE_VERIFIED`
 
 ## Implemented facts
 
@@ -35,7 +36,7 @@ and returns `MEMORY_CHECKPOINT_ROLLBACK_INCOMPLETE_REQUIRES_RECOVERY` instead of
 
 ## Truth boundary and next minimum
 
-- GHNQG, commit, publication, and fresh-clone readback remain pending for this stage.
+- GHNQG, persona-authored commit, publication, fresh-clone readback, clean tree, and strict Git fsck passed.
 - UI, packaged desktop, installation, deployment, online health, and the execution limb remain `0`.
 - The next source stage is a non-UI lifecycle coordinator for already registered safe organs; it must not make
   `EXECUTION_LIMB` activatable or create a second runtime authority.

engineering/operations/2026-08-11-hololake-pncc-safe-organ-lifecycle-coordinator.md

@@ -0,0 +1,40 @@
+# GH-PNCC safe-organ lifecycle coordinator
+
+- Development ID: `DEV-20260810-014`
+- Persona cognitive author: `ICE-P-ZY001 / 铸渊`
+- Human responsibility subject: `ICE-GL∞ / 冰朔`
+- Starting repository head: `18944f536261a4184570074a09fc43a09f5f31bb`
+- State: `LOCAL_SOURCE_IMPLEMENTED_FOCUSED_TESTED`
+
+## Implemented facts
+
+`run_persona_code_channel_lifecycle` now owns one complete non-UI lifecycle for an already registered safe
+organ. The input keeps the exact persona Git wake envelope and a tagged operation together. Only fact sense
+and verified memory metabolism can be represented; no execution-limb request exists in this command.
+
+Before wake or lease acquisition, the coordinator inspects the same exact manifest and commit, checks that
+the operation kind matches the named activatable organ, and preflights the model binding for fact sense. It
+then creates one session, delegates to the existing wake and organ transactions, and returns the original
+wake receipt beside a typed completion receipt. Runtime files and persona Git remain the only evidence stores.
+
+## Current verification
+
+- PNCC focused Rust tests: `20 passed, 0 failed`.
+- Full Rust suite: `1160 passed, 0 failed, 2 ignored`; integration test: `1 passed`.
+- HoloLake architecture routing: `29 passed, 0 failed`.
+- Rust formatting and clippy for all targets: `PASS` with `-D warnings`.
+- The coordinated fact test proves wake, brain bind, organ activation, inference receipt, checkpoint commit,
+  organ release, dormancy, lease release, and a clean persona Git.
+- The coordinated memory test proves a verified dormant fact session can be promoted without invoking a
+  model, then returns to dormancy and releases the exact lease.
+- The mismatch test proves an operation cannot borrow another organ's authority and is rejected before a
+  lease or session directory exists.
+
+## Truth boundary and next minimum
+
+- This is source implementation, not a packaged desktop, installed runtime, deployment, or online-health
+  claim.
+- GHNQG, commit, publication, and independent fresh-clone readback remain pending for this stage.
+- UI, human projection aesthetics, background scheduling, and `EXECUTION_LIMB` remain outside this stage.
+- The next minimum is an idempotent lifecycle request identity and receipt replay rule so a caller retry
+  cannot accidentally create a second lifecycle or duplicate a checkpoint commit.