audit(hololake): establish donor migration gates

product-source/hololake-native-desktop/foundation.json

@@ -1,7 +1,7 @@
 {
   "schema": "hololake.native-desktop-foundation/v1",
   "record_id": "HLP-NATIVE-DESKTOP-FOUNDATION-001",
-  "state": "MINIMAL_TAURI_SCAFFOLD_AND_FAIL_CLOSED_UPDATE_TRUST_ROOT_IMPLEMENTED",
+  "state": "MINIMAL_TAURI_SCAFFOLD_UPDATE_TRUST_ROOT_AND_DONOR_AUDIT_BASELINE_IMPLEMENTED",
   "canonical_shell": "TAURI_V2_RUST_REACT",
   "product_ui_implementation_started": false,
   "selected_visual_direction_present": false,
@@ -15,6 +15,9 @@
   "human_opt_in_download_install_required": true,
   "automatic_restart_allowed": false,
   "private_signing_material_allowed_in_source": false,
+  "donor_audit_record": "audit/donor-audit.json",
+  "donor_audit_complete": false,
+  "donor_source_copying_allowed": false,
   "donors": [
     {
       "path": "../hololake-platform",