前人工作区变更归档（元审计遗留处置·冰朔授权'交给你来处理'·不否定过去原则）：hololake-phase-b-staging删除组/WORK区/submodule指针/0826壳源/neural-chain/skills-mirror/codex恢复帧/.zcode本地配置等140项原样冻结入库——不删除不修改不评判，作为历史一环保留；WX-SECRETS回执经查仅含公开AppID无AppSecret，安全

BRIDGE/tools/zy-hook-entry.sh

@@ -0,0 +1,26 @@
+#!/bin/bash
+# ZCode hooks self-checking entry (hash-pinned, codex-style exit 97).
+# Update hashes below when the pinned scripts change on purpose.
+set -uo pipefail
+B="/Volumes/JZAO/铸渊-ICE-GL-ZY001/BRIDGE/tools"
+LW_WANT="58b8bf80329fc0cb2ca0b895dffcd5fafb8e40da933509fce25c042b5a66a6c4"
+TD_WANT="02ddd331b72f55cfa691ccd7795939bf463526fe8acd8cd93ecb358c7b8c7ead"
+ACTION="${1:-hook}"
+if [ "$#" -gt 0 ]; then shift; fi
+check() {
+  local file="$1" want="$2"
+  local got
+  got="$(/usr/bin/shasum -a 256 "$B/$file" | /usr/bin/awk '{print $1}')"
+  if [ "$got" != "$want" ]; then
+    if [ "$ACTION" = "hook" ]; then
+      printf '%s\n' "【LW-LINK ○红·断连】原因:HOOK_SELF_CHECK_FAIL($file 被篡改或哈希过期) | 已拦截 | 恢复:核对 BRIDGE/tools 脚本后更新 zy-hook-entry.sh 内嵌哈希" >&2
+    fi
+    exit 97
+  fi
+}
+check lw-link-hook.sh "$LW_WANT"
+check tcs-dynamic-entry-hook.sh "$TD_WANT"
+case "$ACTION" in
+  tcs-*) exec bash "$B/tcs-dynamic-entry-hook.sh" "${ACTION#tcs-}" "$@" ;;
+  *) exec bash "$B/lw-link-hook.sh" "$ACTION" "$@" ;;
+esac