fix: complete canonical language channel acceptance

product-source/hololake-native-desktop/scripts/persona-language-chat.test.mjs

@@ -23,6 +23,8 @@ test('knowledge workspace keeps the chat visible and binds the exact active page
   assert.match(channel, /引用知识 · \{receipt\.path\} · \{shortHash\(receipt\.contentSha256\)\}/)
   assert.match(runtime, /collect_knowledge_context\([\s\S]*?input\.active_knowledge_source\.as_deref\(\)[\s\S]*?input\.active_knowledge_path\.as_deref\(\)/)
   assert.match(runtime, /append_knowledge_document\(&mut context, &mut seen, document\)/)
+  assert.match(runtime, /let secret = read_secret_bounded\(app, provider_id\)\.await\.ok\(\)/)
+  assert.doesNotMatch(runtime, /fn read_secret\(/)
 })
 
 test('model configuration remains secondary to the conversation surface', () => {
@@ -31,3 +33,11 @@ test('model configuration remains secondary to the conversation surface', () =>
   assert.match(channel, /\{settingsOpen && <aside className="persona-chat-settings">/)
   assert.match(channel, /API 密钥 · 只进钥匙串/)
 })
+
+test('the chosen model route survives restart and prefers explicit user configuration', () => {
+  assert.match(channel, /const PROVIDER_SELECTION_KEY = 'hololake-persona-provider-id'/)
+  assert.match(channel, /localStorage\.getItem\(PROVIDER_SELECTION_KEY\)/)
+  assert.match(channel, /item\.source === 'EXPLICIT_USER_CONFIG'/)
+  assert.match(channel, /rememberProvider\(nextProviderId\)/)
+  assert.match(channel, /onChange=\{\(event\) => selectProvider\(event\.target\.value\)\}/)
+})

product-source/hololake-native-desktop/scripts/stage-one-platform.test.mjs

@@ -14,7 +14,9 @@ test('stage one exposes a language persona channel without turning configuration
   assert.ok(contract.stage_one_forbidden.includes('MODEL_IDENTITY_OR_AUTHORITY'))
   assert.equal(contract.persona_language_channel.human_chat_is_primary_surface, true)
   assert.equal(contract.persona_language_channel.model_configuration_is_secondary, true)
-  assert.equal(contract.persona_language_channel.installed_runtime_acceptance, false)
+  assert.equal(contract.persona_language_channel.installed_runtime_acceptance, true)
+  assert.equal(contract.persona_language_channel.acceptance_receipt, 'audit/persona-language-channel-runtime-acceptance-20260820.json')
+  assert.equal(foundation.persona_language_channel_installed_runtime_acceptance, true)
   assert.equal(foundation.stage_one_internal_ai_interaction, true)
   assert.equal(foundation.stage_one_model_api_configuration, true)
   assert.equal(foundation.persona_language_channel_api_secret_storage, 'OS_KEYCHAIN_ONLY')