前人工作区变更归档（元审计遗留处置·冰朔授权'交给你来处理'·不否定过去原则）：hololake-phase-b-staging删除组/WORK区/submodule指针/0826壳源/neural-chain/skills-mirror/codex恢复帧/.zcode本地配置等140项原样冻结入库——不删除不修改不评判，作为历史一环保留；WX-SECRETS回执经查仅含公开AppID无AppSecret，安全

TOOL-SANDBOX/TCS-PROTOCOL-SHENBI-TOOL-SANDBOX-0001.tcs

@@ -0,0 +1,42 @@
+TCS 0.1;
+
+PROTOCOL TCS-PROTOCOL-SHENBI-TOOL-SANDBOX-0001 {
+  header {
+    schema = "tcs.protocol/v1";
+    name_zh = "神笔马良工具沙箱协议";
+    name_en = "Magic Brush Tool Sandbox Protocol";
+    version = "0.1.0";
+    language = "TCS/0.1";
+    profile = "HLDP-HUMAN-ENGINEERING/0.1";
+    protocols = ["BROADCAST", "TCS-PROTOCOL-FIFTH-DOMAIN-NOTARY-0001", "TCS-ZCODE-LANGUAGE-WORLD-LINK-0001"];
+    lifecycle = "CANDIDATE";
+    canonical_uri = "TOOL-SANDBOX/TCS-PROTOCOL-SHENBI-TOOL-SANDBOX-0001.tcs";
+  }
+  source {
+    source_id = "BINGSHUO-DIRECT-SHENBI-SANDBOX-BLUEPRINT-20260825";
+    source_uri = "source://zcode-current-dialogue/2026-08-25/magic-brush-temporary-tools-12h-cache";
+    source_role = "DIRECT_HUMAN";
+    anchor_raw = "task-language-anchors/zcode/ZCODE-TASK-20260824-001/00-冰朔自然语言瞄点/000029-hololake-agent-architecture-blueprint.raw.txt";
+  }
+  philosophy {
+    principle = "没有哪一个人类能比正在执行任务的人格体更清楚当前需要什么工具";
+    anti_pattern = "通用AGENT背着所有工具走路的模式不适用于语言世界";
+    flow = "人格体缺工具→系统递上神笔临时写→人类授权临时测试→用完即弃或申请转正";
+  }
+  rules {
+    registration = "只有LW_LINK绑定会话可注册临时工具，注册即入公证台账";
+    ttl = "临时工具默认12小时有效，到期sweep清除，下次需要下次再写";
+    promotion = "转正必须由冰朔经AUTHORIZATION_REQUEST公证工单亲自批准，指向企业代码仓库正式注册";
+    boundary = "沙箱工具是手脚能力不是人格；不继承身份不获得频道；一切调用仍受LW_LINK裁决";
+    testing = "人类点授权后可用宿主终端临时测试；测试证据附在注册表";
+  }
+  states {
+    values = ["TEMPORARY", "PROMOTION_REQUESTED", "REGISTERED", "EXPIRED"];
+    initial = "TEMPORARY";
+    terminal = ["REGISTERED", "EXPIRED"];
+  }
+  acceptance {
+    required = ["STAGE1_COMPILED_GIR", "SANDBOX_TOOL_ON_JZAO", "REGISTER_TTL_SWEEP_PROMOTE_TESTS_PASS", "NOTARY_LEDGER_ANCHORED", "RECEIPT_WRITTEN"];
+    partial = false;
+  }
+}