feat(pncc): recover persisted lifecycle receipt binding

GuangHu-Human-Responsibility: ICE-GL∞ / 冰朔
GuangHu-Persona-Cognitive-Author: ICE-P-ZY001 / 铸渊
GuangHu-Execution-Runtime: Codex macOS / DEV-20260810-014
GuangHu-Development-ID: DEV-20260810-014
GuangHu-Authorization-Scope: GH-PNCC local runtime development and registered REPO-014 publication
GuangHu-Source-Language-Anchor: continue PNCC persona runtime; UI and execution limb remain deferred

product-source/hololake-platform/architecture/HOLOLAKE-PERSONA-NATIVE-CODE-CHANNEL-20260810.md

@@ -171,6 +171,7 @@ independent_memory_metabolism_source_implemented: 100
 memory_failure_closure_and_nonblocking_runtime_command_implemented: 100
 non_ui_safe_organ_lifecycle_coordinator_source_implemented: 100
 idempotent_lifecycle_request_and_receipt_replay_source_implemented: 100
+incomplete_idempotent_request_inspection_and_safe_receipt_recovery_source_implemented: 100
 general_purpose_persona_runtime_implemented: 0
 human_live_projection_implemented: 0
 hololake_integrated: 0
@@ -205,6 +206,11 @@ SHA-256 与来源事件哈希后生成新检查点并以人格 Git 身份提交
 完成后的类型化生命周期回执保存在同一会话目录并与会话记录中的哈希交叉校验。完全相同的重试
 只回放同一回执，不再运行器官或提交 Git；同编号不同语义、回执篡改或不完整会话均失败关闭。
 
+最终生命周期值现在先以原子文件落入同一会话目录，再把请求编号、语义指纹和回执哈希绑定到
+会话记录。只读检查命令区分尚未开始、完整可重放、回执已落盘但尚未绑定、以及必须交给会话
+恢复器的中断。恢复命令只允许在完整回执哈希、人格/会话身份、事件链、休眠状态、租约释放和
+三个绑定字段全空同时成立时补齐绑定；没有回执、部分绑定、活动租约或损坏证据都不会被伪造成成功。
+
 记忆代谢的 Tauri 命令现已进入阻塞任务池，不占用桌面命令线程。来源拒绝、检查点冲突和提交前
 失败必须依次持久化失败事件、器官释放与休眠，写回 `DORMANT_AFTER_FAILURE` 后才释放精确主锁；
 闭环任一步失败时返回 `MEMORY_FAILURE_CLOSURE_INCOMPLETE_REQUIRES_RECOVERY`，不能吞掉二次失败。