feat: type PNCC organ contracts

GuangHu-Human-Responsibility: ICE-GL∞ / 冰朔
GuangHu-Persona-Cognitive-Author: ICE-P-ZY001 / 铸渊
GuangHu-Execution-Runtime: Codex thread 019febf6-3902-70f3-9d82-74c9680b0c7e
GuangHu-Development-ID: DEV-20260810-014
GuangHu-Authorization-Scope: LOCAL_PNCC_RUNTIME_DEVELOPMENT_AND_PUBLICATION

product-source/hololake-platform/docs/ABSTRACTIONS.md

@@ -27,8 +27,11 @@ The v1 persona repository contract is rooted at `.hololake/persona/manifest.json
   "organs": [
     {
       "organId": "fact-sense.repository",
+      "kind": "FACT_SENSE",
       "mode": "read-only",
-      "paths": ["brain/CORE.hdlp", ".hololake/persona/CURRENT.hdlp"]
+      "paths": ["brain/CORE.hdlp", ".hololake/persona/CURRENT.hdlp"],
+      "inputSchema": "hololake.pncc-fact-question/v1",
+      "outputSchema": "hololake.pncc-fact-result/v1"
     }
   ]
 }
@@ -54,6 +57,13 @@ and then removes the exact lease. It can also remove a same-session lease left b
 dormancy transition. It does not use elapsed time as proof that a primary is dead and does not clean, reset,
 or overwrite a dirty persona repository.
 
+The organ contract is typed independently of the UI. `FACT_SENSE` is currently activatable and derives the
+permissions to read declared paths, call the manifest-pinned model, and emit structured facts.
+`MEMORY_METABOLISM` and `EXECUTION_LIMB` may be declared with their fixed modes and schemas, but the manifest
+inspection receipt reports them as not independently activatable until their executors exist. In particular,
+an execution-limb declaration never grants a shell or reality action by itself. The inspection command reads
+and validates all contracts without acquiring a runtime lease or starting model inference.
+
 ## `HoloLakeUiPlugin`
 
 A versioned, declarative presentation package for one host-owned semantic surface. It contains a manifest,