Fan Token Custody Docket / 应援凭证羁押案卷

Fan Token Custody Docket is the concrete route-asset card for fan-held tokens that start to matter as proof.

A token can be an oxygen wristband, queue stub, lightstick pulse log, memorial sticker, photocard checksum, access-caption tag, refund stamp, pirate relay chip, fan-made proof packet, sponsor coupon, or equivalent physical/digital fan object. The docket does not make collectibles into a shop economy. It records when a token is being used as proof, access, repayment, delegation, recap evidence, or route-loadout material.

Card promise

The card asks one playable question:

Who is allowed to cite this fan-held token, and what happens to the fans whose token is missing, forged, recalled, or scoped away?

The answer must name the token, source claim, holder, custodian, authentication state, affected fans, future reader, and selected response. A token cannot become universal proof merely because it is popular, scarce, sponsor-issued, or visually recognizable.

Required fields

fan_token_custody_docket:
  docket_id: <stable row id>
  source_surface: fan_oxygen | public_receipt | egress | recap_fragment | delegate_mandate | counterreceipt | oxygen_claim_exchange | feed_ranking | route_loadout | equivalent
  token_kind: oxygen_wristband | queue_stub | lightstick_log | memorial_sticker | photocard_checksum | access_caption_tag | refund_stamp | pirate_relay_chip | sponsor_coupon | fan_packet | equivalent
  token_instance_or_batch: <id or explicit_absence>
  holder: <fan/delegate/runner/sponsor/archive/security/editor/pirate/explicit_absence>
  custodian_or_absence: <actor or explicit_absence>
  claimed_use: access | oxygen_claim | refund | public_receipt | delegate_mandate | recap_proof | route_asset | sponsor_makegood | mirror_or_feed_ranking | equivalent
  authentication_state_before: unverified | authenticated | batch_scoped | duplicate_seen | sponsor_issued | fan_made | forged | recalled | quarantined | recovery_only | equivalent
  represented_fans: <scope>
  excluded_or_missing_fans: <scope or explicit_absence>
  beneficiary_of_clean_token: <actor/faction or explicit_absence>
  harmed_reader_or_claimant: <reader/claimant or explicit_absence>
  future_reader_or_route: <reader/route/rite/system>

Token states

Valid states after resolution include:

• authenticated_with_scope;
• fan_attested;
• batch_scoped;
• split_token_line;
• sponsor_issued_only;
• access_only;
• refund_only;
• public_receipt_only;
• route_asset_bounded;
• quarantined;
• recalled_with_addendum;
• duplicate_contested;
• forged_hostile;
• recovery_only.

clean_universal is not a valid state.

Player-facing uses

A docket can be created when:

• a fan oxygen claim cites wristbands or queue stubs;
• an egress route uses access-caption tags or lightstick location logs to prove who passed a bottleneck;
• a fan delegate tries to prove mandate through photocard stamps or pulse logs;
• an excluded group files counterreceipts through mismatched refund stamps;
• a recap fragment uses fan tokens as public proof;
• a route loadout tries to combine a fan token with lawful proof, sponsor release, or editor checksum;
• a sponsor recalls tokens and replaces them with a makegood coupon;
• a pirate relay circulates a chip that authenticates public memory but fails lawful proof.

Resolution postures

The docket supports seven postures:

1. authenticate with scope;
2. fan-attest token line;
3. split token batch;
4. recall with addendum;
5. quarantine duplicate;
6. trade token relief;
7. accept counterfeit default.

Each posture must give one relief, one cost, and one future reader or route effect.

Counter surfaces

Expected deltas touch at least three of:

• token_legitimacy;
• token_custody_clarity;
• fan_oxygen_balance;
• fan_oxygen_resentment;
• public_receipt_legitimacy;
• public_receipt_distrust;
• excluded_fan_recognition;
• access_caption_pressure;
• sponsor_stop_loss_pressure;
• contract_capture;
• route_asset_integrity;
• feed_ranking_contamination;
• recap_fragment_legibility;
• archive_debt;
• inspection_heat;
• future_recovery_cost.

Miss and recovery flags

miss_states:
  - token_used_as_clean_proof_without_docket
  - token_batch_scope_hidden
  - excluded_token_holders_erased
  - sponsor_coupon_misfiled_as_public_receipt
  - pirate_chip_misfiled_as_lawful_proof
  - duplicate_token_quietly_consumed
  - token_recall_without_addendum
recovery_costs:
  - late_scope_addendum
  - fan_attestation_hearing
  - duplicate_quarantine
  - oxygen_recheck
  - access_caption_recheck
  - public_counterreceipt
  - sponsor_unwind
  - recovery_only_route_asset

Non-goals

• Not a merch shop.
• Not a cosmetic customization system.
• Not a raw collector-count gate.
• Not a social-media popularity meter.
• Not valid if the token lets the producer cleanly satisfy fan oxygen, delegate mandate, public receipt, sponsor makegood, access proof, and route loadout at once.