todo(profile): [94-1] 设计冻结：SSOT + 威胁模型 + 同步协议

[Akane-CN]

Parent

• todo(profile): redesign profile management with ClawPal as SSOT and no secret reads from remote OpenClaw #94

Scope

• 输出 design doc（架构图、信任边界、状态机、失败语义）
• 明确禁止路径：任何 remote secret pull
• 定义 profile projection（ClawPal profile -> OpenClaw runtime config）

接口/产物

• docs/design/profile-ssot.md
• 协议字段：profile_version, projection_hash, distribution_id, applied_at

验收标准

• 文档覆盖 todo(profile): redesign profile management with ClawPal as SSOT and no secret reads from remote OpenClaw #94 的 deliverables
• 明确列出“禁止 remote secret read”的证明路径
• 评审通过后进入开发

依赖

• 无