Iris Voice Boundary Breach / Iris 声权边界违约

This default event fires, arms, or logs when a later consumer overclaims the scoped residue in Iris 声权验讫残留账本. It is downstream from Iris 声权验讫默认: the first default punishes false probate, while this one punishes false reuse of a probate result.

Trigger

trigger:
  trigger_kind: state_pressure
  ledger_present: storyteller.card.iris_voice_probate_residue_ledger.v1
  source_probate_row_present: true
  future_consumer_present: true
  claimed_use_present: true
  breach_any:
    - source_probate_row_hidden
    - accepted_boundary_erased
    - excluded_readers_deleted
    - public_row_sold_as_lawful_proof
    - lawful_row_treated_as_public_consent
    - sponsor_repackage_without_discoverability
    - checksum_repair_claimed_as_raw_custody
    - pirate_echo_cleaned
    - quarantine_reopened_without_chain
    - false_probate_recovery_treated_as_restored_permission
    - no_future_reader_effect_after_reuse
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

The event must not fire because a turn, day, chapter, content quota, dashboard state, or lens-health state was reached.

Required payload

event: storyteller.event.iris_voice_boundary_breach.v1
source_probate:
  source_probate_row_id: <stable row id>
  source_branch: custodian_chain | public_vigil_probate | sponsor_packaged_legacy | editor_masked_checksum | pirate_echo_probate | quarantine_or_suppression | false_probate_recovery | equivalent
  accepted_boundary_before: lawful_only | public_only | sponsor_gated | checksum_required | pirate_scarred | quarantined | recovery_only | split_reader | equivalent
  excluded_or_delayed_readers_before: []
future_claim:
  future_consumer: archive | inspector | sponsor | fan_public | cutroom | pirate_relay | broadcast_reality | route_asset | lawful_reader | equivalent
  claimed_use: memorial_clip | route_unlock | sponsor_legacy | public_vigil | cutroom_patch | lawful_citation | pirate_relay | quarantine_reopen | equivalent
  claimed_boundary: <claimed boundary or clean universal permission>
breach:
  breach_kind: source_row_hidden | boundary_erased | excluded_reader_deleted | public_as_lawful | lawful_as_public_consent | sponsor_discoverability_deleted | checksum_overclaimed | pirate_cleaned | quarantine_reopened_without_chain | recovery_overclaimed | no_future_reader_effect | equivalent
  executor_or_absence: <actor or explicit_absence>
  harmed_reader_or_absence: <reader or explicit_absence>
  custodian_or_absence: mara_fen | explicit_absence | other
state_after:
  residue_state_after: breached | captured | false_clean_hardened | split_pending | lawful_only | public_only | sponsor_only | checksum_required | quarantine_only | recovery_only | blocked | equivalent
  voice_state_after: copied | masked | pirated | quarantined | suppressed | scarred | recovery_only | equivalent
  future_reader_effect: blocked | costlier | lawful_annex_required | public_acknowledgement_required | sponsor_unwind_required | checksum_repair_required | quarantine_required | split_reader_table_required | recovery_only | equivalent
  counter_deltas_min: 3

Durable consequences

At least one consequence must alter future route acceptance or reader proof. Valid consequences include:

• archive will not accept the voice without lawful annex;
• fan public demands acknowledgement before oxygen relief;
• sponsor package becomes discoverable and surchargeable;
• cutroom must carry checksum annotation forever;
• pirate relay becomes scarred evidence rather than clean distribution;
• quarantine cannot be reopened without stronger chain;
• route asset becomes blocked, costlier, split-pending, or recovery-only;
• 反驳召回撞锁线 receives a shared row conflict;
• 过期派发召回线 must recall the old voice instruction;
• 读者反驳通知线 must notify the reader whose boundary was overclaimed.

Branch-specific defaults

Breach	Durable scar
Public row sold as lawful proof	lawful annex required; fan public may treat correction as betrayal.
Lawful row treated as public consent	public acknowledgement required; archive can still accept lawful row.
Sponsor discoverability deleted	sponsor unwind required; public distrust and contract capture rise.
Checksum overclaimed as raw custody	annotation required; source ambiguity and edit debt rise.
Pirate echo cleaned	infringement scar hardens; lawful recovery becomes costlier.
Quarantine reopened without chain	voice returns as unsafe copy; recovery-only or quarantine-only route.
Recovery overclaimed after false probate	false clean hardens; wrong reader or route asset may lock.

Non-goals

• Not a flavor scandal after a successful route.
• Not a duplicate of the original false-probate default.
• Not a money-only or reputation-only penalty.
• Not valid unless future play changes.