feat(pncc): replay terminal lifecycle failures

Human-Responsibility: ICE-GL∞ / 冰朔
Persona-Author: ICE-P-ZY001 / 铸渊
Execution-Runtime: Codex macOS
Development-ID: DEV-20260810-014
Authorization-Scope: GH-PNCC local runtime and REPO-014 publication
Source-Anchor: UI and execution limb deferred

product-source/hololake-platform/docs/ABSTRACTIONS.md

@@ -103,6 +103,13 @@ receipt beside a verified dormant session with no lease and all three binding fi
 verifier. Missing receipts, partial bindings, active leases, damaged chains, or changed semantics remain
 recovery/manual-review states and cannot be converted into a successful receipt.
 
+The same persisted receipt envelope also represents a verified terminal failure. Its `outcome` is `FAILED`,
+its successful lifecycle payload is null, and `failure` carries only the stable error code, terminal event
+hash, identity, repository, and attribution. The runtime hashes that structured failure payload, never the
+raw provider diagnostic. Replay and safe binding recovery require `DORMANT_AFTER_FAILURE`, a final `DORMANT`
+event, a released lease, and an unchanged clean Git head. A failure that cannot prove those conditions is not
+terminal and remains recovery-required.
+
 `PersonaRuntimeQueryReceipt` is a bounded projection of the durable runtime files, not another truth store.
 It filters by the caller's expected persona and canonical repository, validates each matching event chain,
 and returns at most 100 newest session summaries. Dormant sessions expose no active organ. The receipt keeps