feat(pncc): coordinate safe organ lifecycles

GuangHu-Human-Responsibility: ICE-GL∞ / 冰朔
GuangHu-Persona-Cognitive-Author: ICE-P-ZY001 / 铸渊
GuangHu-Execution-Runtime: Codex macOS / DEV-20260810-014
GuangHu-Development-ID: DEV-20260810-014
GuangHu-Authorization-Scope: GH-PNCC local runtime development and registered REPO-014 publication
GuangHu-Source-Language-Anchor: continue PNCC persona runtime; UI and execution limb remain deferred

product-source/hololake-platform/docs/ARCHITECTURE.md

@@ -50,6 +50,14 @@ the command returns an explicit recovery-required error and retains the lease wh
 proven complete; it does not swallow the secondary failure.
 The execution limb remains visible but non-activatable, so declaring it does not grant a shell or reality action.
 
+`run_persona_code_channel_lifecycle` is the non-UI coordinator for the two implemented safe organ kinds. One
+request supplies the exact wake envelope plus either a fact-sense operation or a memory-metabolism operation.
+Before acquiring the primary lease, the coordinator inspects the same manifest, confirms that the requested
+operation kind matches the named activatable organ, and preflights the manifest-pinned model binding for fact
+sense. It then owns one complete session from wake through the existing organ transaction and returns both
+the wake receipt and the typed completion receipt. It cannot express or activate `EXECUTION_LIMB`, does not
+add a scheduler or second state store, and runs the complete lifecycle on the blocking task pool.
+
 `query_persona_code_channel_runtime` is the bounded read model for later projection surfaces. The caller must
 name one exact persona and canonical repository and may request at most 100 sessions. The kernel reads the
 existing session records and event journals directly, verifies every returned hash chain, sorts by the last