Read-only local campaign artifact

COMMAND-EVIDENCE.md

direct-local-ops-wave-38/COMMAND-EVIDENCE.md

# Local command evidence

## Actual safe command

`gws --help` executed successfully on this Windows host.

Observed local executable:

```text
Name: gws.ps1
Source: C:\Users\mikem\AppData\Roaming\npm\gws.ps1
CommandType: ExternalScript
```

The help output explicitly lists `drive`, `sheets`, and `gmail` services, with `--params <JSON>` as the parameter transport. This only reads the local CLI help. It does not call Google.

## Local payload tests

The validator parses these documented input payloads only:

```json
{"q":"name contains 'draft' or name contains 'old' or name contains 'copy' or name contains 'backup' or name contains 'v1' or name contains 'v2' or name contains 'v3'","fields":"files(id,name,mimeType,modifiedTime,size)"}
```

```json
{"userId":"me","q":"subject:(proposal OR quote OR invoice OR contract) newer_than:30d"}
```

No `gws drive files list`, `gws gmail users messages list`, `gws gmail users drafts create`, or `gws sheets` mutation command was invoked.