Wu Suo Legacy-Face Credential Witness / 无锁·旧脸凭证见证人

无锁 is an adult former child star whose obsolete smiling face is still accepted by backstage readers. His focused storyline asks who controls that childhood biometric template, where it was actually read, and whether it is retired, re-enrolled, captured, or allowed to expire. It never treats the living person as a reusable key.

Real source encounter

The sole source encounter is the actual storyteller-rite-20-second-chapter-briefing. Its common effects gain card-storyteller-wu-suo plus eleven review candidates, set the encounter, review-availability, and badge-availability flags, and expose badge trust, nostalgia debt, and access heat.

Rite 20’s selected history remains meaningful:

• the public-footnote choice sets storyteller_public_breath_footnote and wu_suo.source.public_legacy_face_notice, enabling the bounded witness and adult re-enrollment branches;
• the company-risk choice sets storyteller_company_breath_risk and wu_suo.source.company_master_credential_schedule, enabling company capture;
• either completed source history may defer revocation and arm the natural default.

A fresh state, a manually gained Wu Suo card, or review availability alone cannot open the review. Runtime conditions enforce the required state bundle; durable provenance is established by replay evidence showing Rite 20 before the review, not by treating mutable flags as cryptographic proof.

Person states

Resolution	Wu Suo state	Recruited	Actual card after terminal resolution	Route asset
Review 0	wu_suo.state.recruited_bounded_credential_lineage_witness	yes	retained	yes
Review 1	wu_suo.state.adult_reenrollment_independent	no	removed from player custody	no
Review 2	wu_suo.state.company_master_credential_captured	no	removed	no
Review 3	wu_suo.state.deferred_legacy_face_revocation_at_risk	no	retained only until default	no
Default 0	wu_suo.state.expired_orphaned_face_template_hard_miss	no	removed	no
Default 1	wu_suo.state.hostile_company_face_inventory	no	removed	no
Default 2	wu_suo.state.late_reenrollment_independent_non_recruit	no	removed	no

Only review option 0 sets wu_suo.recruited and grants route_asset.wu_suo_credential_lineage_witness. Adult re-enrollment remains an independent non-recruit result. Company capture and every default terminal deny the route asset. Every default terminal sets the durable badge-expiry failure flag storyteller_wusuo_badge_expired.

Authority boundary

Wu Suo may attest only:

• the childhood template’s enrollment and re-encoding lineage;
• the current controller of that credential record;
• one named threshold reader and scan interval;
• whether that template was retired, reissued, copied, or left unresolved.

The witness record never opens a door. It does not certify a current route, grant universal badge authority, consent to use Wu Suo’s likeness, settle identity or personhood, transfer sponsor art rights, grant voice or archive custody, or provide company-wide access.

Separate facility routing

This storyline requires the actual card.facility_access_map as review evidence, but it does not complete rite.facility_access_routing or satisfy storyteller.lens.facility_access_lockdown.v1. The map identifies the reader that consumed the old face; it does not authorize passage through that threshold.

Even the recruiting branch sets wu_suo.future.separate_facility_access_routing_required. Any later attempt to cross a door must run Facility Access Routing with its own origin, target, edge, handler, support, claimant, and cost.