feat: add PNCC verified wake kernel

GuangHu-Human-Responsibility: ICE-GL∞ / 冰朔

GuangHu-Persona-Cognitive-Author: ICE-P-ZY001 / 铸渊

GuangHu-Execution-Runtime: Codex-thread 019febf6-3902-70f3-9d82-74c9680b0c7e

GuangHu-Development-ID: DEV-20260810-014

GuangHu-Authorization-Scope: LOCAL-PNCC-DEVELOPMENT

product-source/hololake-platform/docs/ARCHITECTURE.md

@@ -1,5 +1,24 @@
 # Architecture
 
+## Persona-native code channel runtime
+
+GH-PNCC is HoloLake's first product core. The existing Rust Git module remains the durable engine; the new
+`src-tauri/src/persona_code_channel.rs` kernel adds persona-native mount and wake semantics without changing
+Git's object model. `prepare_persona_code_channel_wake` requires an exact clean Git root and full commit,
+validates `.hololake/persona/manifest.json`, resolves the brain entry and current checkpoint inside the
+repository boundary, acquires a per-persona single-primary lease, and records a SHA-256-linked lifecycle
+journal outside the repository.
+
+The initial lifecycle is `WAKING → BRAIN_BOUND → ORGAN_ACTIVE` for one manifest-declared read-only organ.
+`BRAIN_BOUND` means the model instance has been named and the verified persona context is ready; it explicitly
+does not mean inference has run. The returned receipt keeps the human responsibility subject, persona
+cognitive author, execution runtime, development id, authorization scope, and source-language anchor
+separate. See [ADR 0176](./adr/0176-persona-native-code-channel-runtime-kernel.md).
+
+The next source stage must invoke the model adapter with this verified context, complete one read-only fact
+task, write a promoted checkpoint into the persona Git, emit completion/pause events, and release the lease.
+Until then, complete runtime, desktop integration, artifact, deployment, and health remain zero.
+
 ## User-node sovereignty
 
 HoloLake has no platform-hosted user runtime. Each human has one canonical, independently operated node: