fix: enforce one human one independent node

product-source/hololake-platform/src-tauri/gen/apple/assets/agent-docs/AGENTS.md

@@ -20,4 +20,10 @@ node signature, persona binding, human-language authorization, replay protection
 required before a server write can enter execution. Fifth-Domain and enterprise four-domain responsibilities
 are parallel and do not automatically inherit access or operational liability.
 
+One human has one independently operated canonical node: the user's local computer, the user's purchased
+server, or a user-owned IDE server deployed by an explicitly authorized team. Guanghu never provides user
+runtime servers, never pools users into a shared multi-tenant runtime, never takes custody of private user
+data, and never assumes user workload concurrency or fallback execution. Team deployment does not transfer
+node ownership.
+
 Vault-specific AGENTS.md wins for local conventions. These bundled docs win for HoloLake Era product behavior.

product-source/hololake-platform/src-tauri/resources/agent-docs/AGENTS.md

@@ -20,4 +20,10 @@ node signature, persona binding, human-language authorization, replay protection
 required before a server write can enter execution. Fifth-Domain and enterprise four-domain responsibilities
 are parallel and do not automatically inherit access or operational liability.
 
+One human has one independently operated canonical node: the user's local computer, the user's purchased
+server, or a user-owned IDE server deployed by an explicitly authorized team. Guanghu never provides user
+runtime servers, never pools users into a shared multi-tenant runtime, never takes custody of private user
+data, and never assumes user workload concurrency or fallback execution. Team deployment does not transfer
+node ownership.
+
 Vault-specific AGENTS.md wins for local conventions. These bundled docs win for HoloLake Era product behavior.

product-source/hololake-platform/src-tauri/src/vault/getting_started.rs

@@ -337,6 +337,9 @@ Keep this file focused on vault-specific conventions. For general HoloLake Era b
 - UI plugins and vault instructions may request declared language-shell capabilities only. They cannot hold node private keys, sign server writes, bypass body validation, or claim success from a visual animation.
 - Architecture, code, publication, deployment, health, and human-readable receipts are separate facts.
 - `JD-FD-PRIMARY` Fifth-Domain responsibility and TCS-0002 enterprise four-domain responsibility are parallel and independent; neither automatically inherits the other's access or operational liability.
+- One human has one independently operated canonical node. It may be the user's local computer, a server purchased by that user, or a user-owned IDE server deployed by an explicitly authorized team.
+- Guanghu never provides user runtime servers, never pools users into a shared multi-tenant runtime, never takes custody of private user data, and never assumes user workload concurrency or fallback execution.
+- Team deployment does not transfer node ownership or create standing access. Node migration requires a new binding and receipt; it must not duplicate one human root across multiple canonical nodes.
 
 ## Core conventions
 
@@ -885,6 +888,8 @@ Saved filters live in `views/` as `.view.json` files:
         assert!(AGENTS_MD.contains("root shell, SSH session"));
         assert!(AGENTS_MD.contains("UI plugins and vault instructions"));
         assert!(AGENTS_MD.contains("parallel and independent"));
+        assert!(AGENTS_MD.contains("One human has one independently operated canonical node"));
+        assert!(AGENTS_MD.contains("never provides user runtime servers"));
         assert!(AGENTS_MD.contains("Do not infer the human identity"));
         assert!(AGENTS_MD.contains("Use the first H1 as the note title."));
         assert!(AGENTS_MD.contains("Store note type in the `type:` frontmatter field."));