feat(pncc): coordinate safe organ lifecycles

GuangHu-Human-Responsibility: ICE-GL∞ / 冰朔
GuangHu-Persona-Cognitive-Author: ICE-P-ZY001 / 铸渊
GuangHu-Execution-Runtime: Codex macOS / DEV-20260810-014
GuangHu-Development-ID: DEV-20260810-014
GuangHu-Authorization-Scope: GH-PNCC local runtime development and registered REPO-014 publication
GuangHu-Source-Language-Anchor: continue PNCC persona runtime; UI and execution limb remain deferred

product-source/hololake-platform/docs/ABSTRACTIONS.md

@@ -80,6 +80,13 @@ command returns `MEMORY_FAILURE_CLOSURE_INCOMPLETE_REQUIRES_RECOVERY`; it never
 candidate error while silently losing the closure failure. An incomplete closure preserves the lease for the
 existing evidence-bound session inspection and recovery path.
 
+`PersonaLifecycleRunInput` is the single-call, non-UI coordination envelope. Its wake member keeps the exact
+persona Git, expected commit, node/model instance, organ id, and structured attribution explicit. Its tagged
+operation can be only `FACT_SENSE` or `MEMORY_METABOLISM`. The coordinator rejects an operation/organ mismatch
+before wake or lease acquisition, then delegates to the same tested organ transactions and returns a tagged
+completion beside the wake receipt. It does not accept an execution action, infer organ permissions from UI
+state, or create a parallel lifecycle record.
+
 `PersonaRuntimeQueryReceipt` is a bounded projection of the durable runtime files, not another truth store.
 It filters by the caller's expected persona and canonical repository, validates each matching event chain,
 and returns at most 100 newest session summaries. Dormant sessions expose no active organ. The receipt keeps