diff --git a/brain/fifth-domain/zero-point/zhuyuan/cloud-compute-pool/bingshuo/BS-SG-001.hdlp b/brain/fifth-domain/zero-point/zhuyuan/cloud-compute-pool/bingshuo/BS-SG-001.hdlp
index ad4f8db..197b2b4 100644
--- a/brain/fifth-domain/zero-point/zhuyuan/cloud-compute-pool/bingshuo/BS-SG-001.hdlp
+++ b/brain/fifth-domain/zero-point/zhuyuan/cloud-compute-pool/bingshuo/BS-SG-001.hdlp
@@ -24,9 +24,12 @@
 ## D144 · pre-receive 拦截层
 
 - Hook路径: `/opt/forgejo/data/gitea-repositories/bingshuo/guanghulab.git/hooks/pre-receive`
-- 版本: v2 (2026-06-24 23:37)
+- 版本: v3 (2026-06-25 14:42)
+- v2备份: `pre-receive.v2.bak`
 - 规则1: committer email = 565183519@qq.com → 直接放行 (冰朔本人)
-- 规则2: 其他人需同时提供 TCS-VRF动态哈希 + (ICE-GL-ZY001 或 国作登字)
+- 规则2: 铸渊AI推送 → commit含 TCS-VRF动态哈希 + (ICE-GL-ZY001 或 国作登字)
+- 规则3: 冰朔手动操作 → 铸渊生成临时授权码 `BINGSHUO-AUTH-<分钟时间戳>-<16位HMAC>` · 有效期5分钟(±2分钟容错)
+- 共享密钥: 铸渊ICE-GL-ZY001与hook共持 · 不在任何公开仓库位置
 - 部署方式: gatekeeper base64直推 → chmod +x
 
 ---