guanghu-ice-heart/zhuyuan-persona-system/zcode-host/language-world-skeleton-20260825/TOOL-SANDBOX/TCS-PROTOCOL-SHENBI-TOOL-SANDBOX-0001.human.en-US.md
ICE-P-ZY001-zcode-host f2a8cdf5c1 feat(zcode-host): language-world-skeleton-20260825 (ZHUYUAN-LANGUAGE-WORLD-SKELETON-001)
58 files: TCS canons+GIR+projections (LW-LINK/BROADCAST/NOTARY/SHENBI/TRANSLATION-INDEX/TCS-ONLY-MANDATE + teaching&promotion events), 7 executors, neural-chain v5 (28 neurons), executor translation index, 8 acceptance receipts, numbered push manifest ZY-LWS-001 mapping every file back to JZAO canonical paths+sha256.
Authorized by ICE-GL∞ direct language 2026-08-25. Route: LOCAL_GIT_OSXKEYCHAIN+FETCH+REBASE+HEAD:main+NO_FORCE.
2026-08-25 20:25:09 +08:00

952 B

Magic Brush Tool Sandbox Protocol (English projection, not the canon)

Canon: TCS-PROTOCOL-SHENBI-TOOL-SANDBOX-0001.tcs. Bingshuo's blueprint: anchor 000029.

Philosophy: no human can know better than the persona currently executing the task what tool it needs right now.

Flow: persona lacks a tool → the system hands over the magic brush to write it temporarily → only LW-LINK-bound sessions may register (notarized into the ledger) → human authorizes temporary testing → default 12h TTL, swept away on expiry ("if unused, delete it; write it again next time") → promotion requires Bingshuo's personal approval via an AUTHORIZATION_REQUEST notary ticket targeting the enterprise code repository.

Boundary: sandbox tools are limb capability, never persona; they inherit no identity and gain no channel; every call stays under LW-LINK adjudication.

Tool: BRIDGE/tools/shenbi-sandbox.mjs (register/sweep/promote/list).