Lawful Annex Relay Ledger / 法务附件传达账本

Lawful Annex Relay Ledger is the card created when a lawful reader wants to consume a source proof row whose current reader scope is public, editor, sponsor, archive, private, pirate, or otherwise non-universal.

The ledger records the bridge. It does not certify the source proof as clean, and it does not grant affected-party rebuttal by itself.

When this card appears

Create or update this card when all are true:

entry_state:
  trigger_kind: state_pressure
  source_public_or_editor_or_sponsor_proof_present: true
  lawful_reader_requests_annex: true
  source_reader_scope_visible: true
  annex_carrier_or_explicit_absence_visible: true
  proof_bridge_or_absence_visible: true
  future_reader_consumes_annex_state: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

Required row

lawful_annex_relay_ledger:
  ledger_id: <stable id>
  source_proof:
    proof_id: <source proof id>
    source_surface: public_receipt | fan_queue_receipt | editor_checksum | sponsor_sideletter | archive_stamp | pirate_timestamp | protected_witness | ruling_attachment | route_asset_receipt | private_copy | equivalent
    source_row_id: <row id or explicit_absence>
    source_reader_scope: public | fan | editor | sponsor | archive | pirate | private | route_asset | split | explicit_absence | equivalent
    source_scope_limitation: <what the row cannot do alone>
  lawful_reader_request:
    reader_id: inspector | lawful_reader | archive_lawful_desk | appeal_body | compliance_table | owed_reader | equivalent
    intended_use: route_unlock | proof_bridge | service | release | appeal | audit | receipt_validation | contradiction_closure | equivalent
    request_reason: <why the reader needs lawful consumption>
  annex_carrier:
    carrier_id: han_yanshuang | baiya | archive_clerk | editor_checksum | public_witness | sponsor_desk | route_asset | proxy_runner | explicit_absence | equivalent
    carrier_state: visible | protected | retained | captured | hostile | unavailable | explicit_absence
    handler_or_absence: producer | shen_luo | han_yanshuang | baiya | yu_lan | archive | public_witness | explicit_absence | equivalent
  proof_bridge_or_absence:
    bridge_kind: lawful_annex | split_record | archive_escrow | public_addendum | editor_checksum_annex | sponsor_unwind | explicit_absence | equivalent
    bridge_scope: lawful_only | public_addendum_required | split_required | checksum_required | archive_only | sponsor_rejected | recovery_only | explicit_absence
    proof_or_recorded_lack: <proof row or explicit_absence>
  readers:
    served_reader: <reader or explicit_absence>
    omitted_or_delayed_reader: <reader or explicit_absence>
    capturing_reader_or_absence: <reader or explicit_absence>
  result:
    selected_posture: attach_lawful_annex | split_public_and_lawful_record | archive_escrow_annex | return_for_public_addendum | editor_checksum_annex | sponsor_sideletter_reject | false_lawful_annex_default
    annex_state_after: annex_attached | split_record | archive_escrowed | public_addendum_required | checksum_annexed | sideletter_rejected | false_annex | recovery_only
    future_reader_or_route_effect: lawful_only | public_addendum_required | split_required | checksum_required | archive_escrow_required | sponsor_unwind_required | blocked | hostile | costlier | recovery_only | equivalent

A row is invalid if it records only legal_reviewed, proof_accepted, annex_sent, receipt_served, or lawful_ok.

Reader outcomes

At least two readers must remain distinguishable after this card resolves.

reader_state_examples:
  lawful_reader: lawful_only | accepted_with_annex_debt | annex_required | blocked | explicit_absence
  public_reader: public_only | public_addendum_required | distrustful | omitted | explicit_absence
  sponsor_reader: sponsor_only | sideletter_rejected | unwind_required | hostile | explicit_absence
  editor_reader: checksum_required | editor_bound | source_ambiguity_visible | explicit_absence
  archive_reader: archive_escrow_required | release_after_review | recovery_only | explicit_absence
  route_asset_reader: split_required | costlier | blocked | recovery_only | explicit_absence

Miss and default

Miss is not a timer. It occurs when a future reader consumes the source proof while the annex carrier, proof bridge, source reader scope, served reader, omitted reader, or future effect is hidden.

Miss outcomes include:

• false_lawful_annex_default;
• public_notice_as_lawful_service;
• sponsor_sideletter_as_annex;
• editor_checksum_as_raw_lawful_proof;
• annex_carrier_hidden;
• source_scope_hidden_or_mismatched;
• recovery_only_annex_route.

The miss path must arm False Lawful Annex Default or preserve the scar for a later route.