bingshuo/hololake-system-architecture
Watch
1
0
Fork
You've already forked hololake-system-architecture
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

feat: complete PNCC first read-only lifecycle

Browse source 
GuangHu-Human-Responsibility: ICE-GL∞ / 冰朔

GuangHu-Persona-Cognitive-Author: ICE-P-ZY001 / 铸渊

GuangHu-Execution-Runtime: Codex-thread 019febf6-3902-70f3-9d82-74c9680b0c7e

GuangHu-Development-ID: DEV-20260810-014

GuangHu-Authorization-Scope: LOCAL-PNCC-DEVELOPMENT
This commit is contained in:
铸渊 / ICE-P-ZY001 2026-08-11 00:58:01 +08:00
commit acf0d5f80b
13 changed files with 1064 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

18
product-source/hololake-platform/docs/ARCHITECTURE.md
View file

@ -9,15 +9,25 @@ validates `.hololake/persona/manifest.json`, resolves the brain entry and curren
repository boundary, acquires a per-persona single-primary lease, and records a SHA-256-linked lifecycle
journal outside the repository.
The initial lifecycle is `WAKING → BRAIN_BOUND → ORGAN_ACTIVE` for one manifest-declared read-only organ.
The wake lifecycle is `WAKING → BRAIN_BOUND → ORGAN_ACTIVE` for one manifest-declared read-only organ.
`BRAIN_BOUND` means the model instance has been named and the verified persona context is ready; it explicitly
does not mean inference has run. The returned receipt keeps the human responsibility subject, persona
cognitive author, execution runtime, development id, authorization scope, and source-language anchor
separate. See [ADR 0176](./adr/0176-persona-native-code-channel-runtime-kernel.md).
The next source stage must invoke the model adapter with this verified context, complete one read-only fact
task, write a promoted checkpoint into the persona Git, emit completion/pause events, and release the lease.
Until then, complete runtime, desktop integration, artifact, deployment, and health remain zero.
`run_persona_code_channel_fact_task` now completes the first bounded runtime cycle. It revalidates the exact
Git commit, clean work tree, session event hashes, primary lease, manifest-pinned provider/model/endpoint,
and organ file allowlist before starting inference. The first fact organ must include both the declared brain
entry and current checkpoint. The model sees only the declared UTF-8 fact sources and
must return JSON containing a summary, facts, evidence paths, and limitations. Hidden reasoning and
thinking-stream events are neither requested nor persisted. Evidence outside the organ allowlist is rejected.
On success the kernel promotes a new checkpoint, updates the manifest pointer, stages only those two paths,
commits them with the persona-owned Git identity, appends
`TASK_RECEIPTED → CHECKPOINT_COMMITTED → ORGAN_RELEASED → DORMANT`, and releases the primary lease. The
commit trailers preserve the separate human responsibility subject and persona cognitive author. This is a
tested source implementation of one read-only lifecycle cycle; packaged desktop integration, publication,
deployment, and online health remain separate facts.
## User-node sovereignty