feat(pncc): replay terminal lifecycle failures

Human-Responsibility: ICE-GL∞ / 冰朔
Persona-Author: ICE-P-ZY001 / 铸渊
Execution-Runtime: Codex macOS
Development-ID: DEV-20260810-014
Authorization-Scope: GH-PNCC local runtime and REPO-014 publication
Source-Anchor: UI and execution limb deferred

product-source/hololake-platform/docs/ARCHITECTURE.md

@@ -73,6 +73,14 @@ but unbound, and session-recovery states from the same session evidence. The rec
 only the receipt-present/unbound window after rechecking the receipt hash, identity, event chain, dormancy,
 and released lease. It never fabricates a receipt for an earlier interruption or repairs partial bindings.
 
+A lifecycle that reaches the kernel's verified terminal failure closure now uses that same receipt file and
+two-write binding protocol. The persisted value contains only a stable machine error code, terminal event
+hash, repository/persona identity, and structured attribution; raw provider or model error detail is not
+stored. Exact retries verify `DORMANT_AFTER_FAILURE`, the final `DORMANT` event, released lease, unchanged
+clean Git head, semantic fingerprint, receipt hash, and session bindings before returning the same failure
+with `replayed: true`. Active, dirty, partially closed, or otherwise unproven failures retain the original
+recovery path and cannot be converted into a terminal receipt.
+
 `query_persona_code_channel_runtime` is the bounded read model for later projection surfaces. The caller must
 name one exact persona and canonical repository and may request at most 100 sessions. The kernel reads the
 existing session records and event journals directly, verifies every returned hash chain, sorts by the last