Read-only local campaign artifact

COMMAND-EVIDENCE.md

direct-local-ops-wave-37/COMMAND-EVIDENCE.md

# Local command evidence

## Executed commands

```text
gws --help
gws sheets --help
gws auth --help
gws sheets +append --spreadsheet LOCAL_VALIDATION_ONLY --json-values [["Service","Status"],["House cleaning","Draft"]] --dry-run
```

## Observed output

- `gws` resolves to `C:\Users\mikem\AppData\Roaming\npm\gws.ps1`.
- `gws --help` lists `sheets`, `gmail`, `calendar`, and `docs` as available services.
- `gws sheets --help` lists `+append`, `+read`, and `spreadsheets`; it documents `--dry-run` as local validation without sending an API request.
- `gws auth --help` lists `status`, `login`, `setup`, `export`, and `logout`. No authentication command that could expose credentials was executed.
- The documented Sheets append dry run returned a request contract with `dry_run: true`, `method: POST`, and the expected Google Sheets append endpoint. The sanitized exact contract is preserved in `gws-sheets-dry-run.json`.

## Safety boundary

No OAuth value, key, mailbox data, calendar event, spreadsheet, document, or network provider response is present in this receipt.