Proof Wall Pinning Docket / 举证墙钉选案卷

Proof Wall Pinning Docket is an in-world route-asset card for the crisis room surface where proofs are pinned, scoped, hidden, rotated, or contested before later readers consume them.

This is not a dashboard, backlog, or production governance board. The proof wall is part of play: a public table, lawful wall, sponsor-safe brief, archive pinboard, artist-boundary slate, or route-loadout surface that decides which proof is visible and which proof is occluded when a future reader acts.

Playable promise

A proof can be true, carried, and still mislead if the wrong reader sees it alone. This docket records the pin, the occluded proof, the wall reader, and the cost of making one proof visible before another.

The card answers: what did the route’s next reader actually see, what was hidden from that surface, who owns the pin, and what future route state did that visibility create?

Entry conditions

Create or update this card only when all of the following are true:

• at least one proof row, receipt, checksum, witness statement, archive copy, sponsor release, public counterline, recovery shelf, rebuttal notice, or route asset is available for display;
• a future reader is about to consume a visible proof surface;
• the selected proof and at least one omitted or explicitly absent proof would change acceptance, hostility, cost, or route availability;
• the pin owner or explicit absence is visible;
• the intended wall surface is visible;
• the player can pin, scope, rotate, split, mark, quarantine, or allow default occlusion;
• no entry depends on fixed turn count, fixed day/week interval, raw proof count, dashboard state, or lens-health state.

Required row shape

proof_wall_row:
  row_id: <stable id>
  wall_surface: public_wall | lawful_wall | sponsor_brief | archive_pinboard | artist_boundary_slate | route_loadout_surface | management_closure_surface | equivalent
  future_reader: public_fan | lawful_archive | sponsor | artist_boundary | claimant | worker_testimony | route_asset | management | equivalent
  visible_pin:
    proof_id: <proof row or explicit_absence>
    proof_kind: receipt | checksum | witness_statement | archive_copy | sponsor_release | public_counterline | recovery_shelf | rebuttal_notice | route_asset | equivalent
    proof_state_before: clean | scarred | lawful_only | public_only | sponsor_only | artist_boundary_only | split | contradiction_pending | recovery_only | captured | hostile | explicit_absence | equivalent
    pin_owner: producer | archive | sponsor | public_witness | editor | artist_proxy | worker_carrier | claimant | inspector | explicit_absence | equivalent
    scope_claimed: public | lawful | sponsor | artist_boundary | route_unlock | closure | recovery | equivalent
  occluded_or_absent_proof:
    proof_id: <proof row or explicit_absence>
    omission_reason: scoped_out | hostile | unsafe | sponsor_suppressed | lawful_sealed | public_unready | artist_boundary | carrier_refusal | not_yet_recovered | explicit_absence | equivalent
    harmed_or_excluded_reader: <reader or explicit_absence>
  pin_state_after: pinned | scoped | rotated | split_wall | marked_unread | quarantined | false_front | default_occluded | equivalent
  future_route_effect: accepted_with_scope | public_only | lawful_only | sponsor_only | artist_boundary_only | bridge_required | contradiction_pending | route_costlier | blocked | captured | hostile | recovery_only | equivalent

The row fails if it records only proof_visible, proof_hidden, board_done, evidence_ready, or all_readers_informed.

Pin states

State	Meaning	Required effect
pinned	A proof is made visible for a named reader and scope.	Reader acceptance changes with cost or limitation.
scoped	The proof is visible only for a declared use.	Other readers stay narrowed, hostile, or bridge-required.
rotated	A prior proof is removed or moved behind a newer pin.	Occluded proof remains scarred and recallable.
split_wall	Different readers receive different wall surfaces.	No universal clean proof exists.
marked_unread	A proof is shown but flagged unreadable, unsafe, or partial.	Future route requires annex, checksum, counterline, or callback.
quarantined	The pin is removed from consumption.	False proof use drops; route delay or recovery-only pressure rises.
false_front	Loudest reader sees a clean front while scar remains hidden.	Default risk arms.
default_occluded	The omitted proof is functionally erased from the reader surface.	Occluded reader becomes hostile, captured, blocked, or recovery-only.

Branch affordances

Public pin

A public receipt, counterline, fan ledger, historian note, or witness proof becomes visible.

Relief: private capture drops or public legitimacy rises.

Cost: sponsor pressure, public contradiction, witness exposure, or inspection heat rises.

Future effect: public_only, accepted_with_scope, bridge_required, or contradiction_pending.

Lawful pin

Archive copy, inspector stamp, chain proof, or lawful annex becomes visible.

Relief: admissibility and custody clarity improve.

Cost: public delay, bureau debt, lawful-only routing, or fan distrust rises.

Future effect: lawful_only, checksum_required, accepted_with_scope, or bridge_required.

Sponsor pin

Sponsor release, stop-loss proof, makegood note, or sponsor-safe silence is pinned.

Relief: slot, funding, or sponsor pressure improves.

Cost: contract capture, public distrust, artist-boundary risk, or claimant hostility rises.

Future effect: sponsor_only, captured, accepted_with_scope, or unwind_required.

Artist-boundary pin

Refusal receipt, voice boundary, body boundary, or proxy limit is pinned.

Relief: artist integrity and coercion risk improve.

Cost: route unlock, fan expectation, sponsor promise, or management pressure worsens.

Future effect: artist_boundary_only, blocked, route_costlier, or recovery_only.

Split wall

Different readers receive different pinned surfaces with explicit cross-reference.

Relief: incompatible readers remain playable.

Cost: source ambiguity, handler burden, archive debt, and public contradiction rise.

Future effect: split_wall, bridge_required, contradiction_pending, or route_costlier.

Quarantine pin

An unsafe proof is not allowed to become visible proof.

Relief: false front, fraud, or drift risk falls.

Cost: current route blocks, sponsor pressure rises, or recovery cost increases.

Future effect: blocked, audit_required, or recovery_only.

Default occlusion

A proof is hidden without explicit scope, absence, or scar.

Relief: immediate pressure may fall.

Cost: hidden reader hostility, false proof front, public distrust, archive debt, or license pressure rises.

Future effect: captured, hostile, blocked, contradiction_pending, or recovery_only.

Counter surfaces

Every row must change at least three surfaces, including one relief, one cost, and one future route effect.

Useful surfaces:

• proof_wall_integrity
• pin_owner_exposure
• occluded_proof_pressure
• future_reader_acceptance
• public_receipt_legitimacy
• public_receipt_distrust
• archive_signature_legitimacy
• archive_debt
• sponsor_stop_loss_pressure
• contract_capture
• artist_refusal_respected
• voice_integrity_risk
• claimant_hostility
• worker_testimony_safety
• handler_burden
• inspection_heat
• broadcast_reality_drift
• route_asset_pressure
• future_recovery_cost

Invalid uses

• Not an evidence inventory.
• Not a task board or implementation dashboard.
• Not a proof burden holder assignment; use the existing proof-burden surface for that.
• Not route-loadout compatibility; this card observes what is visible to a reader before loadout is consumed.
• Not valid when no omitted proof, explicit absence, or reader-specific scope exists.
• Not valid when every reader sees and accepts the same clean proof for free.
• Not valid from fixed turn-count, raw proof count, or lens-health triggers.