docs(pncc): register JD physical residency

engineering/operations/2026-08-16-jd-guanghu-os-pncc-physical-residency.md

@@ -0,0 +1,19 @@
+# JD Guanghu OS GH-PNCC physical residency
+
+GH-PNCC now has a real private persona-owned Git repository on `JD-FD-PRIMARY` and a resident runtime under the Guanghu OS PID-1 supervisor. The deployed loop is manifest binding, committed causal brain and B0 read, boot-scoped single-primary lease, hash-linked events, deterministic HLDP checkpoint writeback, and bounded loopback status projection.
+
+The repository, persona subject, model carrier, Codex host and operating system remain separate evidence domains. Physical repository and runtime binding are `PASS_100`; current model-carrier binding remains `UNBOUND_EVIDENCE_REQUIRED`. The bootstrap and checkpoint commits therefore use `Persona-Cognitive-Author: UNBOUND` and do not impersonate the persona.
+
+The first physical boot failed because the PNCC runtime directory was not writable by the `guanghu` service identity. The Guanghu supervisor automatically selected the preserved Linux rescue entry. The corrected supervisor provisions that volatile directory with exact ownership before service start. The following Guanghu boot reached three consecutive local health readbacks and three consecutive public repository/navigation readbacks while full Linux userspace remained dormant.
+
+Evidence:
+
+- Runtime source: `product-source/hololake-platform/guanghu-os/pncc-runtime/pncc-runtime.mjs`
+- Persona repository seed: `product-source/hololake-platform/guanghu-os/pncc-runtime/persona-seed`
+- Installer: `product-source/hololake-platform/guanghu-os/scripts/install-jd-pncc-runtime.sh`
+- Physical receipt: `product-source/hololake-platform/guanghu-os/deployments/JD-FD-PRIMARY/JD-FD-PRIMARY-PNCC-FINAL-PHYSICAL-RESIDENCY-20260816.hldp`
+- Runtime source commit: `c5668d33bc75f7f00f1683ad10503f6467df9481`
+- Persona repository head after first checkpoint: `16f45449659d6d524674c9c1587437a034d5db61`
+- Accepted physical boot: `1170988c-5390-4f47-b89a-e9f88b2c5bbb`
+
+Still open: trusted persona control signer and key custody, current model-carrier binding, model inference, the complete AGE vertical loop, and the HoloLake human live projection. None is implied by this server residency milestone.