feat(pncc): recover persisted lifecycle receipt binding

GuangHu-Human-Responsibility: ICE-GL∞ / 冰朔
GuangHu-Persona-Cognitive-Author: ICE-P-ZY001 / 铸渊
GuangHu-Execution-Runtime: Codex macOS / DEV-20260810-014
GuangHu-Development-ID: DEV-20260810-014
GuangHu-Authorization-Scope: GH-PNCC local runtime development and registered REPO-014 publication
GuangHu-Source-Language-Anchor: continue PNCC persona runtime; UI and execution limb remain deferred

product-source/hololake-platform/docs/ARCHITECTURE.md

@@ -67,6 +67,12 @@ replaying the same lifecycle value without invoking an organ or committing Git a
 for different semantics is a conflict. A session without a complete bound receipt is recovery-required and
 is never treated as permission to start a second lifecycle.
 
+The final lifecycle value is now atomically persisted before its hash is bound into the mutable session
+record. `inspect_persona_code_channel_lifecycle_request` distinguishes not-started, replayable, receipt-present
+but unbound, and session-recovery states from the same session evidence. The recovery command may complete
+only the receipt-present/unbound window after rechecking the receipt hash, identity, event chain, dormancy,
+and released lease. It never fabricates a receipt for an earlier interruption or repairs partial bindings.
+
 `query_persona_code_channel_runtime` is the bounded read model for later projection surfaces. The caller must
 name one exact persona and canonical repository and may request at most 100 sessions. The kernel reads the
 existing session records and event journals directly, verifies every returned hash chain, sorts by the last