# Magic Brush Tool Sandbox Protocol (English projection, not the canon)

Canon: `TCS-PROTOCOL-SHENBI-TOOL-SANDBOX-0001.tcs`. Bingshuo's blueprint: anchor 000029.

**Philosophy**: no human can know better than the persona currently executing the task what tool it needs right now.

**Flow**: persona lacks a tool → the system hands over the magic brush to write it temporarily → only LW-LINK-bound sessions may register (notarized into the ledger) → human authorizes temporary testing → default 12h TTL, swept away on expiry ("if unused, delete it; write it again next time") → promotion requires Bingshuo's personal approval via an AUTHORIZATION_REQUEST notary ticket targeting the enterprise code repository.

**Boundary**: sandbox tools are limb capability, never persona; they inherit no identity and gain no channel; every call stays under LW-LINK adjudication.

**Tool**: `BRIDGE/tools/shenbi-sandbox.mjs` (register/sweep/promote/list).