fix(pncc): revalidate terminal success evidence

Human-Responsibility: ICE-GL∞ / 冰朔
Persona-Author: ICE-P-ZY001 / 铸渊
Execution-Runtime: Codex macOS
Development-ID: DEV-20260810-014
Authorization-Scope: GH-PNCC local runtime and REPO-014 publication
Source-Anchor: UI and execution limb deferred

engineering/INDEX.md

@@ -32,6 +32,7 @@ Windows / macOS / Linux 构建机与安装包
 
 | 时间 | 版本 | 记录 | 状态 |
 | --- | --- | --- | --- |
+| 2026-08-11 | GH-PNCC 成功回执终态复核 | [成功回执持久化前重新验证终态证据](operations/2026-08-11-hololake-pncc-success-receipt-terminal-revalidation.md) | 本地源码、完整 Rust/路由测试与严格 clippy 已通过；GHNQG 和发布待验收 |
 | 2026-08-11 | GH-PNCC 重放仓库复核 | [幂等重放时重新验证人格 Git 状态](operations/2026-08-11-hololake-pncc-replay-repository-state-revalidation.md) | 本地源码、完整 Rust/路由测试与严格 clippy 已通过；GHNQG 和发布待验收 |
 | 2026-08-11 | GH-PNCC 终态失败重放 | [终态失败结构化回执与幂等重放](operations/2026-08-11-hololake-pncc-idempotent-terminal-failure-replay.md) | 已发布至 REPO-014 main abc7dbd；GHNQG、全新克隆与严格读回通过 |
 | 2026-08-11 | GH-PNCC 幂等中断恢复 | [不完整幂等请求检查与安全回执恢复](operations/2026-08-11-hololake-pncc-incomplete-idempotent-request-recovery.md) | 已发布至 REPO-014 main b8c3fcf；GHNQG、全新克隆与严格 fsck 通过 |

engineering/operations/2026-08-11-hololake-pncc-success-receipt-terminal-revalidation.md

@@ -0,0 +1,32 @@
+# GH-PNCC successful receipt terminal evidence revalidation
+
+- Development ID: `DEV-20260810-014`
+- Persona cognitive author: `ICE-P-ZY001 / 铸渊`
+- Human responsibility subject: `ICE-GL∞ / 冰朔`
+- Starting repository head: `b067c7bcaacc31cb69cb649518f69edce6932f9f`
+- State: `LOCAL_SOURCE_IMPLEMENTED_FULLY_TESTED`
+
+## Corrected runtime fact
+
+An organ completion is not by itself sufficient authority to persist and return a current successful
+lifecycle receipt. Immediately before the first `COMPLETED` receipt is written and bound, the kernel now
+re-verifies the session event chain, final `DORMANT` event, released primary lease, canonical repository,
+recorded Git head, clean worktree, and lifecycle receipt identity.
+
+If the persona repository advances or becomes dirty after organ completion, the command fails closed. It
+does not persist `lifecycle-receipt.json`, bind the request fingerprint or receipt hash, or claim a current
+successful lifecycle result from stale repository evidence.
+
+## Verification
+
+- PNCC focused Rust tests: `31 passed, 0 failed`.
+- Full Rust suite: `1171 passed, 2 ignored`; integration test: `1 passed`.
+- Routing suite: `29 passed, 0 failed`; `cargo fmt`, strict clippy, and diff checks passed.
+- A completed lifecycle followed by an untracked change cannot persist or bind a successful receipt.
+- A completed lifecycle followed by a new Git commit cannot persist or bind a successful receipt.
+- GHNQG, publication, and fresh-clone readback remain pending for this stage.
+
+## Truth boundary
+
+- This revalidation does not reset, delete, or repair a changed persona repository.
+- UI, human projection aesthetics, background scheduling, and `EXECUTION_LIMB` remain outside this stage.