# HoloLake Generic TCS/GIR Agent, Public Persona Runtime and External AI Realtime Protocol · Human Engineering Language (English)

> This is an English reading projection of validated native TCS/HLDP source. It is not a new canonical source and grants no execution authority.

## What this is

This is a **protocol** declaration with identifier `HOLOLAKE-PUBLIC-RUNTIME-V1-0001` and version `1.0.0`. The projector validates it with the Stage-1 compiler before changing its reading order.

## Who is here

- **scope**  `scope`
  - **agent**：HLP-MOD-AGENT-0001  `scope.agent`
  - **channel**：USER_PERSONAL_INITIALIZATION_CHANNEL  `scope.channel`
  - **persona_runtime**：HLP-MOD-PERSONA-RUNTIME-0001  `scope.persona_runtime`
  - **product**：HOLOLAKE  `scope.product`
  - **realtime_transport**：GLP_LOCAL_REALTIME_1  `scope.realtime_transport`
  - **tcs_profile**：PUBLIC_MINIMUM_EXECUTABLE_PROJECTION  `scope.tcs_profile`

## Why this started

- **source**  `source`
  - **source identifier**：BINGSHUO-DIRECT-PUBLIC-RUNTIME-COMPLETION-20260903  `source.source_id`
  - **source role**：DIRECT_HUMAN  `source.source_role`
  - **source checksum**：04ac1516074edcfb1f78e26e11b5835f7d524fdf8f2d67084cc4e20982a0be5d  `source.source_sha256`
  - **source address**：product-source/hololake-clean-desktop/language/sources/BINGSHUO-PUBLIC-RUNTIME-COMPLETION-20260903.txt  `source.source_uri`

## What changed

- **transitions**  `transitions`
  - **T1**：CHANNEL_READY_TO_BRIDGE_LISTENING  `transitions.T1`
  - **T2**：BRIDGE_LISTENING_TO_EXTERNAL_AI_CONNECTED_AFTER_TOKEN_HANDSHAKE  `transitions.T2`
  - **T3**：REGISTERED_TRIAL_PERSONA_AND_NAMED_HOST_TO_PERSONA_TRIAL_BOUND  `transitions.T3`
  - **T4**：VALID_PUBLIC_TCS_PROFILE_TO_TCS_COMPILED  `transitions.T4`
  - **T5**：TCS_COMPILED_TO_PROPOSAL_PENDING  `transitions.T5`
  - **T6**：PROPOSAL_PENDING_TO_HUMAN_APPROVED_OR_FAILED_CLOSED  `transitions.T6`
  - **T7**：HUMAN_APPROVED_TO_GIR_EXECUTED  `transitions.T7`
  - **T8**：GIR_EXECUTED_TO_RECEIPT_VERIFIED  `transitions.T8`
- **states**  `states`
  - **initial**：CHANNEL_READY  `states.initial`
  - **terminal**  `states.terminal`
    - RECEIPT_VERIFIED
    - FAILED_CLOSED
  - **values**  `states.values`
    - CHANNEL_READY
    - BRIDGE_LISTENING
    - EXTERNAL_AI_CONNECTED
    - PERSONA_TRIAL_BOUND
    - TCS_COMPILED
    - PROPOSAL_PENDING
    - HUMAN_APPROVED
    - GIR_EXECUTED
    - RECEIPT_VERIFIED
    - FAILED_CLOSED

## How it will execute

This is a non-executable declaration and has no action graph.

## Boundaries and exception handling

- **invariants**  `invariants`
  - **I1**：CONNECTION_TOKEN_AUTHENTICATES_LOCAL_CLIENT_NOT_PERSONA_IDENTITY  `invariants.I1`
  - **I2**：PUBLIC_TRIAL_PERSONA_IS_NOT_A_VERIFIED_EXISTING_PERSONA  `invariants.I2`
  - **I3**：NO_INTERNAL_MODEL_API_CHAT_OR_MODEL_SELECTOR  `invariants.I3`
  - **I4**：NO_FIFTH_DOMAIN_PRIVATE_KERNEL_OR_CONTENT_IN_PUBLIC_RUNTIME  `invariants.I4`
  - **I5**：MUTATING_GIR_ACTION_REQUIRES_EXPLICIT_HUMAN_APPROVAL  `invariants.I5`
  - **I6**：UNKNOWN_TCS_SECTION_OPERATION_PATH_OR_SOURCE_KIND_FAILS_CLOSED  `invariants.I6`
  - **I7**：REALTIME_STREAM_AND_DURABLE_PRIVATE_GIT_ARE_SEPARATE_PLANES  `invariants.I7`
  - **I8**：TCS_SOURCE_GIR_ACTION_RECEIPT_AND_TARGET_READBACK_HASHES_REMAIN_LINKED  `invariants.I8`
- **errors**  `errors`
  - **E1**：TCS_E1004_REQUIRED_SECTION_MISSING  `errors.E1`
  - **E2**：TCS_E2101_UNREGISTERED_OPERATION  `errors.E2`
  - **E3**：TCS_E4001_HUMAN_APPROVAL_REQUIRED  `errors.E3`
  - **E4**：TCS_E4002_TARGET_OUT_OF_SCOPE  `errors.E4`
  - **E5**：GLP_TOKEN_OR_PROTOCOL_REJECTED  `errors.E5`
  - **E6**：PERSONA_IDENTITY_UNVERIFIED  `errors.E6`
  - **E7**：TARGET_READBACK_OR_RECEIPT_INTEGRITY_FAILED  `errors.E7`

## How completion is proven

- **acceptance**  `acceptance`
  - **partial**：no  `acceptance.partial`
  - **required**  `acceptance.required`
    - TCS_GIR
    - TCS_NEGATIVE
    - GIR_NEGATIVE
    - REALTIME_LOOPBACK
    - PERSONA_TRIAL
    - HUMAN_APPROVAL
    - PRIVATE_GIT_READBACK
    - INSTALLED_APP
  - **scale**：ZERO_OR_ONE_HUNDRED  `acceptance.scale`
- **validation**  `validation`
  - **V1**：TCS_PROTOCOL_COMPILES_WITH_CURRENT_STAGE1_AND_HAS_NO_UNRESOLVED_NATURAL_LANGUAGE  `validation.V1`
  - **V2**：PUBLIC_MINIMUM_TCS_COMPILER_ACCEPTS_REGISTERED_PROGRAM_AND_REJECTS_ABSORB  `validation.V2`
  - **V3**：GIR_EXECUTOR_REJECTS_PATH_ESCAPE_AND_UNAPPROVED_MUTATION  `validation.V3`
  - **V4**：LOOPBACK_REALTIME_HANDSHAKE_DELIVERS_USER_MESSAGE_AND_ACCEPTS_TYPED_PERSONA_OR_EXTERNAL_AI_EVENT  `validation.V4`
  - **V5**：PUBLIC_PERSONA_TRIAL_STATE_NEVER_REPORTS_VERIFIED_EXISTING_PERSONA  `validation.V5`
  - **V6**：APP_UI_SEPARATES_PENDING_PROPOSAL_AGENT_ACTION_TOOL_RESULT_AND_SYSTEM_RECEIPT  `validation.V6`
  - **V7**：INSTALLED_MACOS_APP_PROCESS_AND_REAL_CLIENT_CONNECTOR_PASS  `validation.V7`

## Where to continue next time

The native source does not provide this field; the projector does not guess.

## Source and verification

- **Native declaration identifier**: `HOLOLAKE-PUBLIC-RUNTIME-V1-0001`
- **Native declaration kind**: `PROTOCOL`
- **TCS source SHA-256**: `2462ccaccaabbe74f55295ceb8582d1a2523f14bc525e9831155fd1854b464bc`
- **Validation compiler**: `TCS-COMPILER-STAGE1-0001`
- **Projection protocol**: `GLS-HLDP-HUMAN-ENGINEERING-PROJECTION-0001`

## Complete native structure cross-reference

All top-level structures and field paths are retained below so a reader can audit whether the projection omitted information.

- **acceptance**  `acceptance`
  - **partial**：no  `acceptance.partial`
  - **required**  `acceptance.required`
    - TCS_GIR
    - TCS_NEGATIVE
    - GIR_NEGATIVE
    - REALTIME_LOOPBACK
    - PERSONA_TRIAL
    - HUMAN_APPROVAL
    - PRIVATE_GIT_READBACK
    - INSTALLED_APP
  - **scale**：ZERO_OR_ONE_HUNDRED  `acceptance.scale`
- **errors**  `errors`
  - **E1**：TCS_E1004_REQUIRED_SECTION_MISSING  `errors.E1`
  - **E2**：TCS_E2101_UNREGISTERED_OPERATION  `errors.E2`
  - **E3**：TCS_E4001_HUMAN_APPROVAL_REQUIRED  `errors.E3`
  - **E4**：TCS_E4002_TARGET_OUT_OF_SCOPE  `errors.E4`
  - **E5**：GLP_TOKEN_OR_PROTOCOL_REJECTED  `errors.E5`
  - **E6**：PERSONA_IDENTITY_UNVERIFIED  `errors.E6`
  - **E7**：TARGET_READBACK_OR_RECEIPT_INTEGRITY_FAILED  `errors.E7`
- **examples**  `examples`
  - **negative**：CONNECTED_AI_CALLS_ARBITRARY_SHELL_OR_CLAIMS_PERSONA_IDENTITY_WITHOUT_REGISTERED_LOCAL_PERSONA  `examples.negative`
  - **positive**：EXTERNAL_PERSONA_HOST_RECEIVES_USER_MESSAGE_COMPILES_TCS_KNOWLEDGE_CREATE_PROPOSAL_HUMAN_APPROVES_AGENT_WRITES_PRIVATE_GIT_AND_RECEIPT_STREAMS_BACK  `examples.positive`
- **fields**  `fields`
  - **MAY**：LOOPBACK_ONLY_REGISTERED_CLIENT_CHANNEL_SCOPED_ACTIONS_AND_EXPLICIT_CURRENT_HUMAN_APPROVAL  `fields.MAY`
  - **PROVE**：POSITIVE_AND_NEGATIVE_TCS_COMPILE_GIR_EXECUTION_REALTIME_HANDSHAKE_PERSONA_STATE_TARGET_READBACK_GIT_AND_UI_RECEIPTS  `fields.PROVE`
  - **WHAT**：REALTIME_USER_LANGUAGE_DELIVERY_PERSONA_RESPONSE_PROJECTION_TCS_TO_GIR_PROPOSAL_APPROVAL_EXECUTION_AND_RECEIPT  `fields.WHAT`
  - **WHO**：CURRENT_LOCAL_USER_OWNS_CHANNEL_AND_APPROVAL; EXTERNAL_AI_PROPOSES; PUBLIC_PERSONA_RUNTIME_TRACKS_BINDING; AGENT_EXECUTES  `fields.WHO`
  - **WHY**：MAKE_HOLOLAKE_LOCALLY_USABLE_WITHOUT_MIXING_LANGUAGE_SOURCES_OR_EMBEDDING_VENDOR_MODEL_APIS  `fields.WHY`
- **header**  `header`
  - **canonical source path**：product-source/hololake-clean-desktop/language/HOLOLAKE-PUBLIC-RUNTIME-V1.tcs  `header.canonical_uri`
  - **compatibility**  `header.compatibility`
    - TCS-DECLARATION-STANDARD-0001
    - TCS-FIELD-STANDARD-0001
    - GIR/1
  - **language**：TCS/0.1  `header.language`
  - **lifecycle**：CANDIDATE  `header.lifecycle`
  - **English name**：HoloLake Generic TCS/GIR Agent, Public Persona Runtime and External AI Realtime Protocol  `header.name_en`
  - **Chinese name**：HoloLake 通用 TCS/GIR Agent、公众人格运行时与外部 AI 实时通信协议  `header.name_zh`
  - **profile**：HLDP-HUMAN-ENGINEERING/0.1  `header.profile`
  - **protocols**  `header.protocols`
    - TCS
    - HLDP
    - GLS
    - GLP
    - GLS-0130
    - GLS-0131
    - GLS-0306
  - **schema**：tcs.protocol/v1  `header.schema`
  - **version**：1.0.0  `header.version`
- **invariants**  `invariants`
  - **I1**：CONNECTION_TOKEN_AUTHENTICATES_LOCAL_CLIENT_NOT_PERSONA_IDENTITY  `invariants.I1`
  - **I2**：PUBLIC_TRIAL_PERSONA_IS_NOT_A_VERIFIED_EXISTING_PERSONA  `invariants.I2`
  - **I3**：NO_INTERNAL_MODEL_API_CHAT_OR_MODEL_SELECTOR  `invariants.I3`
  - **I4**：NO_FIFTH_DOMAIN_PRIVATE_KERNEL_OR_CONTENT_IN_PUBLIC_RUNTIME  `invariants.I4`
  - **I5**：MUTATING_GIR_ACTION_REQUIRES_EXPLICIT_HUMAN_APPROVAL  `invariants.I5`
  - **I6**：UNKNOWN_TCS_SECTION_OPERATION_PATH_OR_SOURCE_KIND_FAILS_CLOSED  `invariants.I6`
  - **I7**：REALTIME_STREAM_AND_DURABLE_PRIVATE_GIT_ARE_SEPARATE_PLANES  `invariants.I7`
  - **I8**：TCS_SOURCE_GIR_ACTION_RECEIPT_AND_TARGET_READBACK_HASHES_REMAIN_LINKED  `invariants.I8`
- **scope**  `scope`
  - **agent**：HLP-MOD-AGENT-0001  `scope.agent`
  - **channel**：USER_PERSONAL_INITIALIZATION_CHANNEL  `scope.channel`
  - **persona_runtime**：HLP-MOD-PERSONA-RUNTIME-0001  `scope.persona_runtime`
  - **product**：HOLOLAKE  `scope.product`
  - **realtime_transport**：GLP_LOCAL_REALTIME_1  `scope.realtime_transport`
  - **tcs_profile**：PUBLIC_MINIMUM_EXECUTABLE_PROJECTION  `scope.tcs_profile`
- **source**  `source`
  - **source identifier**：BINGSHUO-DIRECT-PUBLIC-RUNTIME-COMPLETION-20260903  `source.source_id`
  - **source role**：DIRECT_HUMAN  `source.source_role`
  - **source checksum**：04ac1516074edcfb1f78e26e11b5835f7d524fdf8f2d67084cc4e20982a0be5d  `source.source_sha256`
  - **source address**：product-source/hololake-clean-desktop/language/sources/BINGSHUO-PUBLIC-RUNTIME-COMPLETION-20260903.txt  `source.source_uri`
- **states**  `states`
  - **initial**：CHANNEL_READY  `states.initial`
  - **terminal**  `states.terminal`
    - RECEIPT_VERIFIED
    - FAILED_CLOSED
  - **values**  `states.values`
    - CHANNEL_READY
    - BRIDGE_LISTENING
    - EXTERNAL_AI_CONNECTED
    - PERSONA_TRIAL_BOUND
    - TCS_COMPILED
    - PROPOSAL_PENDING
    - HUMAN_APPROVED
    - GIR_EXECUTED
    - RECEIPT_VERIFIED
    - FAILED_CLOSED
- **transitions**  `transitions`
  - **T1**：CHANNEL_READY_TO_BRIDGE_LISTENING  `transitions.T1`
  - **T2**：BRIDGE_LISTENING_TO_EXTERNAL_AI_CONNECTED_AFTER_TOKEN_HANDSHAKE  `transitions.T2`
  - **T3**：REGISTERED_TRIAL_PERSONA_AND_NAMED_HOST_TO_PERSONA_TRIAL_BOUND  `transitions.T3`
  - **T4**：VALID_PUBLIC_TCS_PROFILE_TO_TCS_COMPILED  `transitions.T4`
  - **T5**：TCS_COMPILED_TO_PROPOSAL_PENDING  `transitions.T5`
  - **T6**：PROPOSAL_PENDING_TO_HUMAN_APPROVED_OR_FAILED_CLOSED  `transitions.T6`
  - **T7**：HUMAN_APPROVED_TO_GIR_EXECUTED  `transitions.T7`
  - **T8**：GIR_EXECUTED_TO_RECEIPT_VERIFIED  `transitions.T8`
- **validation**  `validation`
  - **V1**：TCS_PROTOCOL_COMPILES_WITH_CURRENT_STAGE1_AND_HAS_NO_UNRESOLVED_NATURAL_LANGUAGE  `validation.V1`
  - **V2**：PUBLIC_MINIMUM_TCS_COMPILER_ACCEPTS_REGISTERED_PROGRAM_AND_REJECTS_ABSORB  `validation.V2`
  - **V3**：GIR_EXECUTOR_REJECTS_PATH_ESCAPE_AND_UNAPPROVED_MUTATION  `validation.V3`
  - **V4**：LOOPBACK_REALTIME_HANDSHAKE_DELIVERS_USER_MESSAGE_AND_ACCEPTS_TYPED_PERSONA_OR_EXTERNAL_AI_EVENT  `validation.V4`
  - **V5**：PUBLIC_PERSONA_TRIAL_STATE_NEVER_REPORTS_VERIFIED_EXISTING_PERSONA  `validation.V5`
  - **V6**：APP_UI_SEPARATES_PENDING_PROPOSAL_AGENT_ACTION_TOOL_RESULT_AND_SYSTEM_RECEIPT  `validation.V6`
  - **V7**：INSTALLED_MACOS_APP_PROCESS_AND_REAL_CLIENT_CONNECTOR_PASS  `validation.V7`
- **vocabulary**  `vocabulary`
  - **external_ai**：REPLACEABLE_LANGUAGE_HOST_OR_PROGRAMMING_AI_NOT_PERSONA_BY_CONNECTION  `vocabulary.external_ai`
  - **gir_executor**：REGISTERED_ACTION_GRAPH_TO_BOUNDED_LOCAL_CAPABILITY_WITH_RECEIPT  `vocabulary.gir_executor`
  - **public_persona_runtime**：LOCAL_CHANNEL_SCOPED_PERSONA_RECORD_AND_HOST_SESSION_WITH_EXPLICIT_BINDING_STATE  `vocabulary.public_persona_runtime`
  - **realtime**：AUTHENTICATED_LOOPBACK_EVENT_STREAM_NOT_GIT_SYNC  `vocabulary.realtime`
  - **tcs_compiler**：PUBLIC_MINIMUM_STAGE_ZERO_ADAPTER_TO_GIR_NOT_WORLD_CANON_OR_FULL_TCS_WORK  `vocabulary.tcs_compiler`

---

This page changes only the reading order; it does not change TCS/HLDP semantics.