feat: add PNCC verified wake kernel

GuangHu-Human-Responsibility: ICE-GL∞ / 冰朔

GuangHu-Persona-Cognitive-Author: ICE-P-ZY001 / 铸渊

GuangHu-Execution-Runtime: Codex-thread 019febf6-3902-70f3-9d82-74c9680b0c7e

GuangHu-Development-ID: DEV-20260810-014

GuangHu-Authorization-Scope: LOCAL-PNCC-DEVELOPMENT

product-source/hololake-platform/docs/ABSTRACTIONS.md

@@ -1,5 +1,32 @@
 # Abstractions
 
+## PersonaCodeChannel
+
+`PersonaCodeChannel` is the native boundary between a durable persona Git and a live AGE runtime. It owns
+neither the Git object model nor model inference. It composes existing Git execution with persona-specific
+verification, lifecycle, attribution, single-primary exclusion, event hashing, and receipts.
+
+The v1 persona repository contract is rooted at `.hololake/persona/manifest.json`:
+
+```json
+{
+  "schema": "hololake.persona/v1",
+  "personaId": "ICE-P-ZY001",
+  "humanResponsibilitySubject": "ICE-GL∞",
+  "brainEntry": "brain/CORE.hdlp",
+  "currentCheckpoint": ".hololake/persona/CURRENT.hdlp",
+  "organs": [
+    { "organId": "fact-sense.repository", "mode": "read-only" }
+  ]
+}
+```
+
+All manifest paths are repository-relative and must resolve to files inside the exact Git root. Wake requires
+a clean work tree and a caller-supplied full expected commit. Runtime leases and event journals live under the
+installation-local `pncc-runtime` directory because they describe the current physical instance, not durable
+persona history. A successful preparation receipt reports `BOUND_NOT_INFERENCING`; only a later verified
+model action may change that predicate.
+
 ## `HoloLakeUiPlugin`
 
 A versioned, declarative presentation package for one host-owned semantic surface. It contains a manifest,