False-Clean Proof Transfer Default / 伪洁净证据转交默认

False-Clean Proof Transfer Default fires or arms when a later reader consumes transferred proof as clean evidence without holder, carrier, scope, gap, and future effect.

The default is not an audit warning. It is the event that proves the transfer has been captured by the wrong surface: lawful reader, archive, public table, sponsor desk, cutroom, fan oxygen audit, memorial route, recovery reader, route asset, or management report.

Fire condition

fire_condition:
  trigger_kind: state_pressure
  source_docket: storyteller.card.custody_proof_receipt_docket.v1 | explicit_absence
  future_reader_attempts_to_use_transferred_proof: true
  holder_missing: true | false
  carrier_missing: true | false
  scope_hidden: true | false
  proof_gap_hidden: true | false
  wrong_reader_claimed_clean_chain: true | false
  no_fixed_turn_trigger: true

The event must not fire because a fixed number of turns passed. It appears when transferred proof is consumed by a route, hearing, archive, sponsor desk, public table, cutroom, fan oxygen audit, memorial route, recovery reader, route asset, or management report without the docket fields required by the receipt.

Required payload

false_clean_proof_transfer_default:
  event_id: storyteller.event.false_clean_proof_transfer_default.v1
  source_docket: storyteller.card.custody_proof_receipt_docket.v1 | explicit_absence
  false_clean_transfer_claim: lawful_clean_chain | archive_clean_chain | public_clean_chain | sponsor_clean_chain | cutroom_clean_chain | route_asset_clean_chain | explicit_absence
  hidden_or_missing_inputs:
    source_holder: baiya | yu_lan | han_yanshuang | shen_luo | archive | public_table | lawful_reader | sponsor_desk | explicit_absence
    carrier: runner | docket | corridor_note | black_box_checksum | legal_seal | public_counterstub | route_asset | explicit_absence
    transfer_scope: lawful_only | archive_only | public_only | sponsor_only | split | recovery_only | blocked | hidden
    proof_gap: missing_holder | missing_carrier | missing_signature | scope_mismatch | stale_copy | hostile_counterstub | hidden
  capturing_reader: lawful_reader | archive | public_table | sponsor_desk | cutroom | fan_oxygen_audit | memorial_route | recovery_reader | route_asset | management_report | equivalent
  receipt_state_after: false_clean_default | hostile | blocked | lawful_only | public_only | sponsor_only | recovery_only
  future_reader_effect: blocked | hostile | lawful_only | public_only | sponsor_only | annex_required | two_reader_ruling_required | carrier_required | recovery_only
  counter_deltas_min: 3

Consequence families

Lawful or archive false clean

The lawful reader or archive cites a transferred object while public holder, carrier, or scope gap is hidden.

Expected result: lawful_only or archive_only, public table and sponsor reader require addendum, appeal, or recovery.

Public or sponsor false clean

The crowd or sponsor desk treats a receipt as proof because it is visible, even though it lacks admissible scope.

Expected result: public_only or sponsor_only, inspection heat rises, and lawful recovery becomes costlier.

Cutroom or route-asset false clean

The production route uses the object as if the carrier path were proven.

Expected result: carrier_required, route asset acceptance narrows, and recovery-only scar remains.

Stale copy use

The receiving reader uses an old copy after a holder, carrier, or scope has changed.

Expected result: stale_copy_used, blocked or hostile future reader state, and a new receipt or annex required before reuse.

Counter contract

The event must mutate at least three durable surfaces, including one future reader effect. Common deltas include:

counter_deltas:
  relief:
    - immediate_pressure_down
    - false_clean_claim_temporarily_accepted
  cost:
    - false_clean_transfer_claim_up
    - hidden_gap_debt_up
    - inspection_heat_up
    - sponsor_copy_pressure_up
    - carrier_burden_up
    - recovery_cost_up
  future:
    - future_reader_acceptance_blocked
    - lawful_annex_required
    - two_reader_ruling_required
    - carrier_required
    - public_addendum_required
    - recovery_route_required

Recovery hooks

Recovery requires visible scar:

• reopen Custody Proof Chain Review;
• attach a lawful annex or public counterstub;
• rebuild the carrier path;
• split source holder from receiving reader;
• quarantine the proof until a future receipt exists.

Non-goals

• Not a generic invalid-evidence event.
• Not a clean retcon.
• Not a timer.
• Not valid if it does not name false-clean transfer claim, hidden inputs, capturing reader, receipt state after, and future reader effect.