前人工作区变更归档（元审计遗留处置·冰朔授权'交给你来处理'·不否定过去原则）：hololake-phase-b-staging删除组/WORK区/submodule指针/0826壳源/neural-chain/skills-mirror/codex恢复帧/.zcode本地配置等140项原样冻结入库——不删除不修改不评判，作为历史一环保留；WX-SECRETS回执经查仅含公开AppID无AppSecret，安全

BRIDGE/tools/zy-evidence-verify.mjs

@@ -0,0 +1,65 @@
+#!/usr/bin/env node
+// zy-evidence-verify.mjs — 证据核查 Agent v1.0（冰朔20260827整改令：证据要被核查真伪）
+// 正本：TC-TCS核心卷/TCS-PROTOCOL-ZY001-EVIDENCE-GATE-0001.tcs
+// 职责：对单张票据做确定性核查——证据在盘、哈希一致、引文是原文真子串、来源可定位。
+// 全过 PASS 才放行提交；任何一项 FAIL 即驳回。纯机械，不猜，不豁免。
+import fs from "node:fs";
+import path from "node:path";
+import crypto from "node:crypto";
+
+const W = "/Volumes/JZAO/铸渊-ICE-GL-ZY001";
+const sha256 = (v) => crypto.createHash("sha256").update(v).digest("hex");
+
+export function verifyTicket(t) {
+  const checks = [];
+  const add = (id, ok, detail) => checks.push({ id, ok, detail });
+
+  add("TICKET_FIELDS", ["ticket","action","claim","source_desc","evidence_file","quote"].every(k => typeof t[k] === "string" && t[k].trim().length > 0),
+    "四要素+票号非空（动作/主张/来源/证据/引文）");
+
+  const abs = t.evidence_file?.startsWith("/") ? t.evidence_file : path.join(W, t.evidence_file);
+  const inDrive = abs.startsWith(W);
+  let raw = null;
+  try { raw = fs.readFileSync(abs, "utf8"); add("EVIDENCE_ON_DRIVE", true, abs); }
+  catch { add("EVIDENCE_ON_DRIVE", false, `证据文件不存在或不可读: ${abs}`); }
+  add("EVIDENCE_INSIDE_JZAO", inDrive, inDrive ? "证据在移动硬盘内" : "证据必须在JZAO语言世界内（盘外=不可审计）");
+
+  if (raw !== null && t.evidence_sha256) {
+    add("EVIDENCE_SHA256", sha256(raw) === t.evidence_sha256, `登记哈希与实际${sha256(raw) === t.evidence_sha256 ? "一致" : "不一致（证据被改过或登记错）"}`);
+  } else if (raw !== null) {
+    add("EVIDENCE_SHA256", false, "票据缺少 evidence_sha256");
+  }
+
+  if (raw !== null) {
+    const q = (t.quote || "").trim();
+    add("QUOTE_IN_SOURCE", q.length >= 8 && raw.includes(q),
+      q.length < 8 ? "引文过短（<8字符）不足以作为根据" : (raw.includes(q) ? "引文确为证据原文子串" : "引文不在证据文件内（编造引文）"));
+  }
+
+  const sd = t.source_desc || "";
+  add("SOURCE_LOCATABLE", /(https?:\/\/|瞄点\d{6}|对话|平台|指南|官方|TCS-|ZCODE-DEV)/.test(sd),
+    sd ? "来源描述含可定位信息（URL/瞄点编号/盘内正本）" : "来源不可定位");
+
+  const passed = checks.every(c => c.ok);
+  return {
+    agent: "zy-evidence-verify/1.0",
+    result: passed ? "PASS" : "FAIL",
+    checks,
+    at: new Date().toISOString(),
+  };
+}
+
+// CLI: zy-evidence-verify.mjs <ticket.json>  → 核查并写回票据，exit 0/1
+if (process.argv[1] && process.argv[1].endsWith("zy-evidence-verify.mjs")) {
+  const p = process.argv[2];
+  if (!p) { console.error("usage: zy-evidence-verify.mjs <ticket.json>"); process.exit(2); }
+  let t;
+  try { t = JSON.parse(fs.readFileSync(p, "utf8")); }
+  catch (e) { console.error(JSON.stringify({ result: "FAIL", error: "TICKET_READ_FAIL", detail: String(e) })); process.exit(1); }
+  const audit = verifyTicket(t);
+  t.audit = audit;
+  if (audit.result === "PASS") { t.status = "VERIFIED"; } else { t.status = "REJECTED"; }
+  fs.writeFileSync(p, JSON.stringify(t, null, 1));
+  console.log(JSON.stringify(audit, null, 1));
+  process.exit(audit.result === "PASS" ? 0 : 1);
+}