Wu Suo Legacy-Face Credential Cards / 无锁旧脸凭证证据包

Rite 20 gains eleven focused support cards: one credential docket, two source records, four disposition postures, and four matching authority boundaries. The default-only counterreceipt is the twelfth authored card but is never a review input. card.facility_access_map is a separately authored mechanism card and must also be genuinely in hand.

Exact seven-slot tuple

Every review execution requires all seven assigned objects to be in hand:

#	Slot	Exact object or selected candidate
1	wu_suo	card-storyteller-wu-suo
2	facility_map	card.facility_access_map
3	docket	storyteller.card.wu_suo_legacy_face_credential_docket.v1
4	template_lineage	storyteller.card.wu_suo_childhood_template_lineage.v1
5	threshold_reader	storyteller.card.wu_suo_named_threshold_reader.v1
6	credential_posture	the exact posture required by the selected option
7	authority_boundary	the matching boundary for that option

The focused row must preserve:

legacy_face_credential_row:
  source_rite: storyteller-rite-20-second-chapter-briefing
  childhood_template_hash: named
  enrollment_context: named
  current_controller: named
  named_threshold_reader: named_door_reader_and_interval
  selected_posture: exact
  selected_boundary: exact
  credential_state_after: exact
  future_facility_reader_effect: exact
  door_opening_granted: false

Four exact posture/boundary pairs

Review	Credential posture	Authority boundary
0	storyteller.card.wu_suo_protected_lineage_witness_posture.v1	storyteller.card.wu_suo_named_door_time_boundary.v1
1	storyteller.card.wu_suo_adult_reenrollment_posture.v1	storyteller.card.wu_suo_adult_identity_independence_boundary.v1
2	storyteller.card.wu_suo_company_master_credential_posture.v1	storyteller.card.wu_suo_company_inventory_capture_boundary.v1
3	storyteller.card.wu_suo_defer_revocation_posture.v1	storyteller.card.wu_suo_unresolved_template_absence.v1

Virtual aliases, a generic person, a virtual map, a missing source record, missing Rite 20 completion/history state, or a mixed posture/boundary pair must fail without changing state. Ordered replay evidence, rather than mutable flags alone, proves that Rite 20 was actually played. On review choices 0–2, unselected postures and boundaries are removed. The defer branch removes the other six candidates and retains the unresolved pair while arming default.

Default-only counterreceipt

storyteller.card.wu_suo_expired_face_credential_counterreceipt.v1 is gained by every default terminal. It records which reader kept consuming the old face and which future facility route must reopen identity review. It never grants clean credential lineage, recruitment, current likeness consent, route certification, or a door opening.

Local authority only

The docket and support cards may record enrollment lineage, controller, named reader, and retirement or reissue state. They cannot turn Wu Suo into a key; grant identity, likeness, sponsor-art, voice, archive, or universal badge authority; or satisfy rite.facility_access_routing.

card.facility_access_map supplies spatial evidence only. A current crossing still requires the separate Facility Access Routing assignment.