feat(hololake): add stage-one read-only PNCC core

product-source/hololake-native-desktop/contracts/pncc-stage-one.json

@@ -0,0 +1,59 @@
+{
+  "schema": "hololake.pncc-stage-one-contract/v1",
+  "record_id": "HLP-PNCC-STAGE-ONE-001",
+  "development_id": "DEV-20260813-004",
+  "state": "READ_ONLY_CORE_IMPLEMENTED_HUMAN_MOUNT_REGISTRATION_GATED",
+  "source_provenance": "audit/pncc-migration-provenance.json",
+  "transport": {
+    "primary": "AUTHENTICATED_DIRECT_LOCAL_BROKER",
+    "mcp_role": "DISCOVERY_RECOVERY_COMPATIBILITY_ONLY"
+  },
+  "repository_binding": {
+    "mode": "READ_ONLY_GIT_OBJECT_EVIDENCE",
+    "requires_exact_git_root": true,
+    "requires_full_commit_head": true,
+    "manifest_object": ".hololake/persona/manifest.json",
+    "manifest_source": "COMMITTED_HEAD_NOT_WORKTREE_CONTENT",
+    "returns_model_fields": false,
+    "starts_model_inference": false,
+    "acquires_persona_lease": false,
+    "allows_reality_execution": false
+  },
+  "remote_object_channel": {
+    "accepted_remote_schemes": ["https"],
+    "credentials_in_url_allowed": false,
+    "git_protocol": "V2_WITH_FILTER_CAPABILITY_REQUIRED",
+    "cache": "APP_OWNED_BARE_PROMISOR_BLOB_NONE",
+    "worktree_created": false,
+    "git_clone_invoked": false,
+    "durable_cursor_separate_from_evictable_cache": true,
+    "history_rewrite_allowed": false,
+    "default_cache_limit_bytes": 134217728,
+    "maximum_text_object_bytes": 2097152
+  },
+  "receipt_projection": {
+    "mode": "READ_ONLY",
+    "authority_store": false,
+    "model_instance_fields_allowed": false,
+    "empty_means_offline": false
+  },
+  "mount_registration": {
+    "webview_arbitrary_path_or_url_registration_allowed": false,
+    "external_ai_registration_allowed": false,
+    "native_file_picker_exact_confirmation_required": true,
+    "implemented": false
+  },
+  "forbidden": [
+    "INTERNAL_AI_CHAT",
+    "MODEL_API_CONFIGURATION",
+    "MODEL_SELECTION",
+    "INTERNAL_MODEL_INFERENCE",
+    "MODEL_BINDING_IN_PUBLIC_RECEIPT",
+    "EXECUTION_LIMB",
+    "PERSONA_LEASE_ACQUISITION",
+    "CALLER_CONTROLLED_CACHE_ROOT",
+    "WHOLE_DONOR_TREE_COPY"
+  ],
+  "read_only_core_implemented": true,
+  "implementation_complete": false
+}