fix: bind successful receipt organ contract

Human-Responsibility: ICE-GL∞ / 冰朔 Persona-Author: ICE-P-ZY001 / 铸渊 Execution-Runtime: Codex desktop / DEV-20260810-014 Development-ID: DEV-20260810-014 Authorization-Scope: GH-PNCC persona runtime source and tests only; no UI, deployment, or execution limb Source-Anchor: user instruction to continue GH-PNCC from repository facts and verifiable receipts
2026-08-11 08:31:07 +08:00 · 2026-08-11 08:31:07 +08:00 · c58f9c5991
commit c58f9c5991
parent 47c8fc4751
7 changed files with 115 additions and 21 deletions
--- a/engineering/INDEX.md
+++ b/engineering/INDEX.md
@ -32,6 +32,7 @@ Windows / macOS / Linux 构建机与安装包

 | 时间 | 版本 | 记录 | 状态 |
 | --- | --- | --- | --- |
+| 2026-08-11 | GH-PNCC 成功回执唤醒器官合同绑定 | [成功回执唤醒器官合同证据绑定](operations/2026-08-11-hololake-pncc-success-receipt-wake-organ-contract-binding.md) | 本地源码、完整 Rust/前端/路由测试、原生权威与严格 clippy 已通过；GHNQG 和发布待验收 |
 | 2026-08-11 | GH-PNCC 成功回执唤醒器官模式绑定 | [成功回执唤醒器官模式证据绑定](operations/2026-08-11-hololake-pncc-success-receipt-wake-organ-mode-binding.md) | 本地源码、完整 Rust/前端/路由测试、原生权威与严格 clippy 已通过；GHNQG 和发布待验收 |
 | 2026-08-11 | GH-PNCC 成功回执唤醒运行态绑定 | [成功回执唤醒运行态证据绑定](operations/2026-08-11-hololake-pncc-success-receipt-wake-runtime-state-binding.md) | 本地源码、完整 Rust/前端/路由测试、原生权威与严格 clippy 已通过；GHNQG 和发布待验收 |
 | 2026-08-11 | GH-PNCC 成功回执唤醒事件边界绑定 | [成功回执唤醒事件边界证据绑定](operations/2026-08-11-hololake-pncc-success-receipt-wake-event-boundary-binding.md) | 本地源码、完整 Rust/前端/路由测试、原生权威与严格 clippy 已通过；GHNQG 和发布待验收 |
--- a/engineering/operations/2026-08-11-hololake-pncc-success-receipt-wake-organ-contract-binding.md
+++ b/engineering/operations/2026-08-11-hololake-pncc-success-receipt-wake-organ-contract-binding.md
@ -0,0 +1,36 @@
+# GH-PNCC successful receipt wake-organ-contract evidence binding
+
+- Development ID: `DEV-20260810-014`
+- Persona cognitive author: `ICE-P-ZY001 / 铸渊`
+- Human responsibility subject: `ICE-GL∞ / 冰朔`
+- Starting repository head: `47c8fc47515a17a37649bec51a7f56c2cff36274`
+- State: `LOCAL_SOURCE_IMPLEMENTED_FULLY_TESTED`
+
+## Corrected runtime fact
+
+Successful lifecycle validation previously did not rebind the complete `organContract`. A modified safe-organ
+receipt could claim reality-action permission, replace the permission list, recompute the payload digest and be
+accepted even though no execution limb was activated.
+
+Validation now reads the persona manifest from the hash-chained wake Git head, selects the recorded active
+organ, normalizes its contract through the same kernel function used at wake and requires the persisted receipt
+to contain that exact contract. Missing historical manifest evidence, an undeclared organ or any changed
+permission, schema, path, activation flag or implementation state fails closed.
+
+## Verification
+
+- A regression test first reproduced `SAFE_BIND_PERSISTED_RECEIPT` after adding reality-action permission and
+  recomputing the payload digest.
+- The same test passes after historical wake-organ-contract reconstruction was added.
+- PNCC focused Rust tests: `48 passed, 0 failed`.
+- Full Rust suite: `1188 passed, 2 ignored`; integration test: `1 passed`.
+- Routing suite: `29 passed, 0 failed`; formatting, strict clippy and diff checks passed.
+- Frontend lint and TypeScript checks passed; full Vitest suite: `5008 passed, 0 failed`.
+- Guanghu native authority: `PASS_100`; native core: `15 passed` with 100% lines and functions.
+- Full quality gates, GHNQG, publication and fresh-clone readback remain pending.
+
+## Truth boundary
+
+- This stage authenticates the complete declared contract of the already activated safe organ.
+- It does not implement or activate an execution limb, expose hidden reasoning, add UI, build an artifact or
+  claim deployment/runtime health.
--- a/product-source/hololake-platform/architecture/HOLOLAKE-PERSONA-NATIVE-CODE-CHANNEL-20260810.md
+++ b/product-source/hololake-platform/architecture/HOLOLAKE-PERSONA-NATIVE-CODE-CHANNEL-20260810.md
@ -183,6 +183,7 @@ successful_receipt_wake_checkpoint_evidence_binding_source_implemented: 100
 successful_receipt_wake_event_boundary_evidence_binding_source_implemented: 100
 successful_receipt_wake_runtime_state_evidence_binding_source_implemented: 100
 successful_receipt_wake_organ_mode_evidence_binding_source_implemented: 100
+successful_receipt_wake_organ_contract_evidence_binding_source_implemented: 100
 general_purpose_persona_runtime_implemented: 0
 human_live_projection_implemented: 0
 hololake_integrated: 0
--- a/product-source/hololake-platform/src-tauri/src/persona_code_channel.rs
+++ b/product-source/hololake-platform/src-tauri/src/persona_code_channel.rs
@ -2764,29 +2764,35 @@ fn validate_persisted_lifecycle_terminal_evidence(
        &terminal_event.event_hash[..20]
    );
    let first_event = events.first().ok_or("PERSONA_EVENT_CHAIN_EMPTY")?;
+    let wake_manifest =
+        load_manifest_at_git_head(Path::new(&record.repository_path), &first_event.git_head)
+            .map_err(|_| "PERSONA_LIFECYCLE_COMPLETION_EVIDENCE_MISMATCH".to_string())?;
+    if wake_manifest.persona_id != record.persona_id {
+        return Err("PERSONA_LIFECYCLE_COMPLETION_EVIDENCE_MISMATCH".into());
+    }
+    let wake_organ = wake_manifest
+        .organs
+        .iter()
+        .find(|organ| organ.organ_id == record.active_organ)
+        .ok_or("PERSONA_LIFECYCLE_COMPLETION_EVIDENCE_MISMATCH")?;
+    let expected_organ_contract = serde_json::to_value(
+        organ_contract(wake_organ)
+            .map_err(|_| "PERSONA_LIFECYCLE_COMPLETION_EVIDENCE_MISMATCH".to_string())?,
+    )
+    .map_err(|error| format!("PERSONA_LIFECYCLE_EVIDENCE_SERIALIZATION_FAILED: {error}"))?;
    let expected_brain_entry =
        repository_file(Path::new(&record.repository_path), &record.brain_entry)
            .map_err(|_| "PERSONA_LIFECYCLE_COMPLETION_EVIDENCE_MISMATCH".to_string())?;
    let expected_brain_entry = expected_brain_entry.to_string_lossy();
    let expected_wake_checkpoint = match record.wake_checkpoint_path.as_ref() {
        Some(path) => path.clone(),
-        None => {
-            let wake_manifest = load_manifest_at_git_head(
-                Path::new(&record.repository_path),
-                &first_event.git_head,
-            )
-            .map_err(|_| "PERSONA_LIFECYCLE_COMPLETION_EVIDENCE_MISMATCH".to_string())?;
-            if wake_manifest.persona_id != record.persona_id {
-                return Err("PERSONA_LIFECYCLE_COMPLETION_EVIDENCE_MISMATCH".into());
-            }
-            repository_file(
-                Path::new(&record.repository_path),
-                &wake_manifest.current_checkpoint,
-            )
-            .map_err(|_| "PERSONA_LIFECYCLE_COMPLETION_EVIDENCE_MISMATCH".to_string())?
-            .to_string_lossy()
-            .into_owned()
-        }
+        None => repository_file(
+            Path::new(&record.repository_path),
+            &wake_manifest.current_checkpoint,
+        )
+        .map_err(|_| "PERSONA_LIFECYCLE_COMPLETION_EVIDENCE_MISMATCH".to_string())?
+        .to_string_lossy()
+        .into_owned(),
    };
    let matches = lifecycle.get("schema").and_then(serde_json::Value::as_str)
        == Some("hololake.pncc-lifecycle-run-receipt/v1")
@ -2826,6 +2832,7 @@ fn validate_persisted_lifecycle_terminal_evidence(
        && wake.get("activeOrgan").and_then(serde_json::Value::as_str)
            == Some(record.active_organ.as_str())
        && wake.get("organMode").and_then(serde_json::Value::as_str) == Some(expected_organ_mode)
+        && wake.get("organContract") == Some(&expected_organ_contract)
        && wake.get("attribution") == Some(&expected_attribution)
        && wake.get("receiptId").and_then(serde_json::Value::as_str)
            == Some(expected_wake_receipt_id.as_str())
@ -4530,6 +4537,50 @@ mod tests {
        assert!(error.contains("PERSONA_LIFECYCLE_COMPLETION_EVIDENCE_MISMATCH"));
    }

+    #[test]
+    fn rejects_a_rehashed_completed_receipt_with_forged_wake_organ_contract() {
+        let repo = persona_repo();
+        let runtime = tempfile::TempDir::new().unwrap();
+        let input = lifecycle_fact_input(repo.path());
+        let first = run_idempotent_lifecycle_at(
+            runtime.path(),
+            input.clone(),
+            "2026-08-11T00:00:00.000Z",
+            "2026-08-11T00:00:01.000Z",
+            |runtime_root, input, timestamp| {
+                run_fact_task_at(runtime_root, input, timestamp, |_, _| {
+                    Ok(r#"{"summary":"Recoverable receipt.","facts":[{"statement":"The brain exists.","evidencePaths":["brain/CORE.hdlp"]}],"limitations":[]}"#.into())
+                })
+            },
+        )
+        .unwrap();
+        let session_id = first.lifecycle["sessionId"].as_str().unwrap();
+        let mut record = load_session_record(runtime.path(), session_id).unwrap();
+        record.request_id = None;
+        record.request_fingerprint = None;
+        record.lifecycle_receipt_hash = None;
+        write_session_record(runtime.path(), &record).unwrap();
+
+        let receipt_path = session_directory(runtime.path(), session_id)
+            .unwrap()
+            .join("lifecycle-receipt.json");
+        let mut persisted: PersistedPersonaLifecycleReceipt =
+            serde_json::from_slice(&fs::read(&receipt_path).unwrap()).unwrap();
+        persisted.lifecycle["wakeReceipt"]["organContract"]["realityActionsAllowed"] = true.into();
+        persisted.lifecycle["wakeReceipt"]["organContract"]["permissions"] =
+            serde_json::json!(["EXECUTE_REALITY_ACTION"]);
+        persisted.lifecycle_receipt_hash =
+            hex_digest(&persisted_lifecycle_payload_bytes(&persisted).unwrap());
+        fs::write(
+            &receipt_path,
+            serde_json::to_vec_pretty(&persisted).unwrap(),
+        )
+        .unwrap();
+
+        let error = inspect_lifecycle_request_at(runtime.path(), &input).unwrap_err();
+        assert!(error.contains("PERSONA_LIFECYCLE_COMPLETION_EVIDENCE_MISMATCH"));
+    }
+
    #[test]
    fn reconstructs_legacy_wake_checkpoint_evidence_from_the_wake_git_head() {
        let repo = persona_repo();
--- a/routing/hololake-current-architecture.json
+++ b/routing/hololake-current-architecture.json
@ -118,7 +118,7 @@
    "human_projection": "HOLOLAKE_LIVE_READ_MODEL",
    "forgejo_role": "OPTIONAL_COMPATIBILITY_COLLABORATION_ADAPTER",
    "runtime_implemented": true,
-    "runtime_scope": "READ_ONLY_FACT_CYCLE_FAIL_CLOSED_RECOVERY_TYPED_ORGANS_DURABLE_VERIFIED_SESSION_QUERY_INDEPENDENT_VERIFIED_MEMORY_METABOLISM_CHECKED_FAILURE_CLOSURE_NONBLOCKING_RUNTIME_COMMAND_SAFE_ORGAN_LIFECYCLE_COORDINATOR_IDEMPOTENT_SUCCESS_AND_TERMINAL_FAILURE_RECEIPT_REPLAY_SAFE_RECEIPT_BINDING_RECOVERY_REPLAY_TIME_REPOSITORY_STATE_REVALIDATION_SUCCESS_RECEIPT_TERMINAL_REVALIDATION_SAFE_RECEIPT_BINDING_TERMINAL_REVALIDATION_FAILURE_RECEIPT_TERMINAL_EVIDENCE_BINDING_SUCCESS_RECEIPT_SEMANTIC_EVIDENCE_BINDING_SUCCESS_RECEIPT_BRAIN_ENTRY_EVIDENCE_BINDING_SUCCESS_RECEIPT_WAKE_CHECKPOINT_EVIDENCE_BINDING_SUCCESS_RECEIPT_WAKE_EVENT_BOUNDARY_EVIDENCE_BINDING_SUCCESS_RECEIPT_WAKE_RUNTIME_STATE_EVIDENCE_BINDING_AND_SUCCESS_RECEIPT_WAKE_ORGAN_MODE_EVIDENCE_BINDING_SOURCE_IMPLEMENTED_AND_TESTED",
+    "runtime_scope": "READ_ONLY_FACT_CYCLE_FAIL_CLOSED_RECOVERY_TYPED_ORGANS_DURABLE_VERIFIED_SESSION_QUERY_INDEPENDENT_VERIFIED_MEMORY_METABOLISM_CHECKED_FAILURE_CLOSURE_NONBLOCKING_RUNTIME_COMMAND_SAFE_ORGAN_LIFECYCLE_COORDINATOR_IDEMPOTENT_SUCCESS_AND_TERMINAL_FAILURE_RECEIPT_REPLAY_SAFE_RECEIPT_BINDING_RECOVERY_REPLAY_TIME_REPOSITORY_STATE_REVALIDATION_SUCCESS_RECEIPT_TERMINAL_REVALIDATION_SAFE_RECEIPT_BINDING_TERMINAL_REVALIDATION_FAILURE_RECEIPT_TERMINAL_EVIDENCE_BINDING_SUCCESS_RECEIPT_SEMANTIC_EVIDENCE_BINDING_SUCCESS_RECEIPT_BRAIN_ENTRY_EVIDENCE_BINDING_SUCCESS_RECEIPT_WAKE_CHECKPOINT_EVIDENCE_BINDING_SUCCESS_RECEIPT_WAKE_EVENT_BOUNDARY_EVIDENCE_BINDING_SUCCESS_RECEIPT_WAKE_RUNTIME_STATE_EVIDENCE_BINDING_SUCCESS_RECEIPT_WAKE_ORGAN_MODE_EVIDENCE_BINDING_AND_SUCCESS_RECEIPT_WAKE_ORGAN_CONTRACT_EVIDENCE_BINDING_SOURCE_IMPLEMENTED_AND_TESTED",
    "desktop_integrated": false,
    "development_id": "DEV-20260810-014"
  },
--- a/routing/hololake-persona-native-code-channel.json
+++ b/routing/hololake-persona-native-code-channel.json
@ -1,8 +1,8 @@
 {
  "schema": "hololake.persona-native-code-channel/v1",
  "record_id": "HLP-PERSONA-NATIVE-CODE-CHANNEL-001",
-  "version": "2026-08-11.18",
-  "state": "CURRENT_FIRST_PRODUCT_CORE_SUCCESS_RECEIPT_WAKE_ORGAN_MODE_EVIDENCE_BINDING_SOURCE_IMPLEMENTED",
+  "version": "2026-08-11.19",
+  "state": "CURRENT_FIRST_PRODUCT_CORE_SUCCESS_RECEIPT_WAKE_ORGAN_CONTRACT_EVIDENCE_BINDING_SOURCE_IMPLEMENTED",
  "development_id": "DEV-20260810-014",
  "product": {
    "formal_name_zh": "光湖人格原生代码频道",
@ -120,6 +120,7 @@
    "successful_receipt_wake_event_boundary_evidence_binding_source_implemented": 100,
    "successful_receipt_wake_runtime_state_evidence_binding_source_implemented": 100,
    "successful_receipt_wake_organ_mode_evidence_binding_source_implemented": 100,
+    "successful_receipt_wake_organ_contract_evidence_binding_source_implemented": 100,
    "general_purpose_persona_runtime_implemented": 0,
    "human_live_projection_implemented": 0,
    "hololake_integrated": 0,
--- a/routing/hololake-persona-native-code-channel.test.mjs
+++ b/routing/hololake-persona-native-code-channel.test.mjs
@ -142,12 +142,16 @@ test("the first source runtime cycle stays distinct from integration and deploym
    channel.truth.successful_receipt_wake_organ_mode_evidence_binding_source_implemented,
    100,
  );
+  assert.equal(
+    channel.truth.successful_receipt_wake_organ_contract_evidence_binding_source_implemented,
+    100,
+  );
  assert.equal(channel.truth.general_purpose_persona_runtime_implemented, 0);
  assert.equal(channel.truth.human_live_projection_implemented, 0);
  assert.equal(architecture.persona_native_code_channel.runtime_implemented, true);
  assert.equal(
    architecture.persona_native_code_channel.runtime_scope,
-    "READ_ONLY_FACT_CYCLE_FAIL_CLOSED_RECOVERY_TYPED_ORGANS_DURABLE_VERIFIED_SESSION_QUERY_INDEPENDENT_VERIFIED_MEMORY_METABOLISM_CHECKED_FAILURE_CLOSURE_NONBLOCKING_RUNTIME_COMMAND_SAFE_ORGAN_LIFECYCLE_COORDINATOR_IDEMPOTENT_SUCCESS_AND_TERMINAL_FAILURE_RECEIPT_REPLAY_SAFE_RECEIPT_BINDING_RECOVERY_REPLAY_TIME_REPOSITORY_STATE_REVALIDATION_SUCCESS_RECEIPT_TERMINAL_REVALIDATION_SAFE_RECEIPT_BINDING_TERMINAL_REVALIDATION_FAILURE_RECEIPT_TERMINAL_EVIDENCE_BINDING_SUCCESS_RECEIPT_SEMANTIC_EVIDENCE_BINDING_SUCCESS_RECEIPT_BRAIN_ENTRY_EVIDENCE_BINDING_SUCCESS_RECEIPT_WAKE_CHECKPOINT_EVIDENCE_BINDING_SUCCESS_RECEIPT_WAKE_EVENT_BOUNDARY_EVIDENCE_BINDING_SUCCESS_RECEIPT_WAKE_RUNTIME_STATE_EVIDENCE_BINDING_AND_SUCCESS_RECEIPT_WAKE_ORGAN_MODE_EVIDENCE_BINDING_SOURCE_IMPLEMENTED_AND_TESTED",
+    "READ_ONLY_FACT_CYCLE_FAIL_CLOSED_RECOVERY_TYPED_ORGANS_DURABLE_VERIFIED_SESSION_QUERY_INDEPENDENT_VERIFIED_MEMORY_METABOLISM_CHECKED_FAILURE_CLOSURE_NONBLOCKING_RUNTIME_COMMAND_SAFE_ORGAN_LIFECYCLE_COORDINATOR_IDEMPOTENT_SUCCESS_AND_TERMINAL_FAILURE_RECEIPT_REPLAY_SAFE_RECEIPT_BINDING_RECOVERY_REPLAY_TIME_REPOSITORY_STATE_REVALIDATION_SUCCESS_RECEIPT_TERMINAL_REVALIDATION_SAFE_RECEIPT_BINDING_TERMINAL_REVALIDATION_FAILURE_RECEIPT_TERMINAL_EVIDENCE_BINDING_SUCCESS_RECEIPT_SEMANTIC_EVIDENCE_BINDING_SUCCESS_RECEIPT_BRAIN_ENTRY_EVIDENCE_BINDING_SUCCESS_RECEIPT_WAKE_CHECKPOINT_EVIDENCE_BINDING_SUCCESS_RECEIPT_WAKE_EVENT_BOUNDARY_EVIDENCE_BINDING_SUCCESS_RECEIPT_WAKE_RUNTIME_STATE_EVIDENCE_BINDING_SUCCESS_RECEIPT_WAKE_ORGAN_MODE_EVIDENCE_BINDING_AND_SUCCESS_RECEIPT_WAKE_ORGAN_CONTRACT_EVIDENCE_BINDING_SOURCE_IMPLEMENTED_AND_TESTED",
  );
  assert.equal(channel.truth.hololake_integrated, 0);
  assert.equal(channel.truth.artifact_built, 0);