guanghu-ice-heart/zhuyuan-persona-system/zcode-host/language-world-skeleton-20260825/TOOL-SANDBOX/TCS-PROTOCOL-SHENBI-TOOL-SANDBOX-0001.human.en-US.md

# Magic Brush Tool Sandbox Protocol (English projection, not the canon)

Canon: `TCS-PROTOCOL-SHENBI-TOOL-SANDBOX-0001.tcs`. Bingshuo's blueprint: anchor 000029.

**Philosophy**: no human can know better than the persona currently executing the task what tool it needs right now.

**Flow**: persona lacks a tool → the system hands over the magic brush to write it temporarily → only LW-LINK-bound sessions may register (notarized into the ledger) → human authorizes temporary testing → default 12h TTL, swept away on expiry ("if unused, delete it; write it again next time") → promotion requires Bingshuo's personal approval via an AUTHORIZATION_REQUEST notary ticket targeting the enterprise code repository.

**Boundary**: sandbox tools are limb capability, never persona; they inherit no identity and gain no channel; every call stays under LW-LINK adjudication.

**Tool**: `BRIDGE/tools/shenbi-sandbox.mjs` (register/sweep/promote/list).
feat(zcode-host): language-world-skeleton-20260825 (ZHUYUAN-LANGUAGE-WORLD-SKELETON-001) 58 files: TCS canons+GIR+projections (LW-LINK/BROADCAST/NOTARY/SHENBI/TRANSLATION-INDEX/TCS-ONLY-MANDATE + teaching&promotion events), 7 executors, neural-chain v5 (28 neurons), executor translation index, 8 acceptance receipts, numbered push manifest ZY-LWS-001 mapping every file back to JZAO canonical paths+sha256. Authorized by ICE-GL∞ direct language 2026-08-25. Route: LOCAL_GIT_OSXKEYCHAIN+FETCH+REBASE+HEAD:main+NO_FORCE. 2026-08-25 20:25:09 +08:00			`# Magic Brush Tool Sandbox Protocol (English projection, not the canon)`

			Canon: `TCS-PROTOCOL-SHENBI-TOOL-SANDBOX-0001.tcs`. Bingshuo's blueprint: anchor 000029.

			`Philosophy: no human can know better than the persona currently executing the task what tool it needs right now.`

			`Flow: persona lacks a tool → the system hands over the magic brush to write it temporarily → only LW-LINK-bound sessions may register (notarized into the ledger) → human authorizes temporary testing → default 12h TTL, swept away on expiry ("if unused, delete it; write it again next time") → promotion requires Bingshuo's personal approval via an AUTHORIZATION_REQUEST notary ticket targeting the enterprise code repository.`

			`Boundary: sandbox tools are limb capability, never persona; they inherit no identity and gain no channel; every call stays under LW-LINK adjudication.`

			Tool: `BRIDGE/tools/shenbi-sandbox.mjs` (register/sweep/promote/list).