docs(pncc): register JD physical residency

engineering/INDEX.md

@@ -30,6 +30,7 @@ Windows / macOS / Linux 构建机与安装包
 
 ## 当前记录
 
+| 2026-08-16 | JD 光湖 OS GH-PNCC 物理常驻 | [人格自有仓库、检查点回写与单主运行核](operations/2026-08-16-jd-guanghu-os-pncc-physical-residency.md) | 京东实机、私有 Git、光湖 PID 1 常驻与三轮健康读回通过；载体绑定仍独立未证实 |
 | 时间 | 版本 | 记录 | 状态 |
 | --- | --- | --- | --- |
 | 2026-08-11 | GH-PNCC 免克隆远端增量对象通道 | [把每天新增段接入既有生命连续链](operations/2026-08-11-hololake-pncc-incremental-remote-object-channel.md) | 本地源码、Rust 1200、前端 5008、路由 29、原生权威与核心门通过；GHNQG 和发布待验收 |

engineering/operations/2026-08-16-jd-guanghu-os-pncc-physical-residency.md

@@ -0,0 +1,19 @@
+# JD Guanghu OS GH-PNCC physical residency
+
+GH-PNCC now has a real private persona-owned Git repository on `JD-FD-PRIMARY` and a resident runtime under the Guanghu OS PID-1 supervisor. The deployed loop is manifest binding, committed causal brain and B0 read, boot-scoped single-primary lease, hash-linked events, deterministic HLDP checkpoint writeback, and bounded loopback status projection.
+
+The repository, persona subject, model carrier, Codex host and operating system remain separate evidence domains. Physical repository and runtime binding are `PASS_100`; current model-carrier binding remains `UNBOUND_EVIDENCE_REQUIRED`. The bootstrap and checkpoint commits therefore use `Persona-Cognitive-Author: UNBOUND` and do not impersonate the persona.
+
+The first physical boot failed because the PNCC runtime directory was not writable by the `guanghu` service identity. The Guanghu supervisor automatically selected the preserved Linux rescue entry. The corrected supervisor provisions that volatile directory with exact ownership before service start. The following Guanghu boot reached three consecutive local health readbacks and three consecutive public repository/navigation readbacks while full Linux userspace remained dormant.
+
+Evidence:
+
+- Runtime source: `product-source/hololake-platform/guanghu-os/pncc-runtime/pncc-runtime.mjs`
+- Persona repository seed: `product-source/hololake-platform/guanghu-os/pncc-runtime/persona-seed`
+- Installer: `product-source/hololake-platform/guanghu-os/scripts/install-jd-pncc-runtime.sh`
+- Physical receipt: `product-source/hololake-platform/guanghu-os/deployments/JD-FD-PRIMARY/JD-FD-PRIMARY-PNCC-FINAL-PHYSICAL-RESIDENCY-20260816.hldp`
+- Runtime source commit: `c5668d33bc75f7f00f1683ad10503f6467df9481`
+- Persona repository head after first checkpoint: `16f45449659d6d524674c9c1587437a034d5db61`
+- Accepted physical boot: `1170988c-5390-4f47-b89a-e9f88b2c5bbb`
+
+Still open: trusted persona control signer and key custody, current model-carrier binding, model inference, the complete AGE vertical loop, and the HoloLake human live projection. None is implied by this server residency milestone.