Cen Hui Backflow Usher Lens / 岑回逆流引座员 Lens

This lens observes whether Backflow Usher, 岑回逆流引座员线, and 逆流引座回执机制 correctly turn a reversed-flow carrier into recruitable, missable, hostile, and route-bearing play.

The current mesh can already prove egress bottlenecks, roll-call contradictions, private promise scope, and public recap capture. This lens targets the next weak seam: a late person carrying proof can narrow a prior receipt, but cannot be merged into clean all-clear without naming the harmed reader and future route effect.

Primary observation link

This lens observes the character, character storyline, mechanic, card, rite, event, relevant upstream scar lines, and durable systems listed in front matter.

It is observed through:

• 逆流引座账本;
• 逆流引座收容;
• 虚假逆流并账默认.

Gap this lens targets

Recent satisfied lenses are strong but ledger-first. This lens makes the late scar a person-state: 岑回 crosses a physical scar with a late receipt. The implementation must decide whether she is protected, credited, traded, quarantined, recruited, refused, missed, captured, or made hostile.

The lens fails if:

• late wristband equals universal safe exit;
• sealed name equals public presence;
• public credit equals protection;
• sponsor manifest absorbs the late row;
• recap uses the backflow row as clean proof;
• route asset pouch enters custody with no carrier state;
• missing roll-call is fixed by one attendance flag;
• 岑回 becomes a free escort or relationship reward.

Must pass

1. Entry is state-triggered

entry_state_required:
  trigger_kind: state_pressure
  prior_receipt_present_or_explicit_absence: true
  prior_receipt_kind_visible: true
  prior_receipt_claim_visible_or_explicit_absence: true
  reversed_flow_carrier_present: true
  late_subject_or_bundle_visible: true
  identity_or_seal_visible_or_explicit_absence: true
  boundary_or_promise_visible_or_explicit_absence: true
  merge_claim_present: true
  harmed_reader_if_merged_visible: true
  future_reader_or_route_consumes_backflow_state: true
  player_can_recruit_seal_credit_trade_quarantine_refuse_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_missing_or_receipt_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

The lens fails if entry comes from fixed chronology, raw counts, dashboard state, lens health, generic escort availability, or affinity score.

2. Carrier and late row are concrete

carrier_required:
  carrier: storyteller.character.cen_hui_backflow_usher.v1 | equivalent
  carrier_state_before: unseen | offered | retained | recruited | sealed | exposed | traded | quarantined | hostile | captured | missed | recovery_only
  reversed_flow_node: stage_threshold | service_corridor_chain | fan_oxygen_gate | ward_air_room | archive_counter_seven | white_glove_checkpoint | sponsor_bridge_booth | equivalent
  carried_subject_or_bundle: named_character | sealed_witness | access_caption_reader | fan_delegate | proof_bundle | route_asset_pouch | oxygen_mask | edit_checksum | equivalent
  borrowed_or_sealed_identity: public_name | sealed_name | alias | borrowed_wristband | payroll_token | lawful_seal | explicit_absence | equivalent
  boundary_or_promise: private_only | sealed_name_only | lawful_only | handler_only | public_credit_allowed | disputed | explicit_absence | equivalent

The lens fails if the carrier is only helper, escort, runner, safety staff, or witness with no state.

3. Ledger records four locks separately

逆流引座账本 or equivalent must record:

ledger_required:
  prior_receipt_lock:
    prior_receipt_id_or_absence: <receipt id or explicit_absence>
    prior_receipt_kind: live_floor_egress | missing_roll_call | capacity_notice | fan_oxygen | route_asset_custody | public_recap | equivalent
    prior_receipt_claim: safe_exit | present | served | released | escorted | public_all_clear | lawful_only_presence | sponsor_manifest_presence | equivalent
    receipt_holder: producer | safety_marshal | archive | inspector | sponsor | fan_delegate | access_operator | broadcast_reality | equivalent
  carrier_lock:
    carrier: storyteller.character.cen_hui_backflow_usher.v1 | equivalent
    carrier_state_before: <state>
    reversed_flow_node: <node>
    carried_subject_or_bundle: <subject or bundle>
    borrowed_or_sealed_identity: <identity or explicit_absence>
    boundary_or_promise: <scope or explicit_absence>
  merge_risk_lock:
    merge_claim: late_receipt_fixes_all | backflow_proves_safe_exit | sealed_name_as_public_presence | public_credit_as_permission | sponsor_manifest_absorbs_late_row | recap_uses_backflow_cleanly | equivalent
    harmed_reader_if_merged: sealed_subject | fan_public | access_caption_reader | archive | lawful_reader | sponsor | route_asset_reader | confidant_character | future_audience | equivalent
    omitted_scar_if_merged: one_way_scar | deferred_flow | unserved_notice | identity_gap | condition_unknown | promise_scope | proof_contamination | public_false_memory | equivalent
  future_reader_lock:
    future_reader_or_route: roll_call_recheck | public_recap | access_caption_class | fan_oxygen_audit | archive_custody | route_asset_reader | lawful_table | ending_scar_ledger | equivalent
    state_if_handled: recruited_scar_runner | sealed_present | public_credited | traded | quarantined | accepted_with_scar | equivalent
    state_if_ignored: false_backflow_merge | hostile_witness | captured_carrier | public_recap_correction_required | route_blocked | recovery_only | ending_scar | equivalent

The lens fails if these fields collapse into one attendance, safety, or all-clear flag.

4. Intake assignment slots are explicit

逆流引座收容 or equivalent must require ledger row, carrier, prior receipt, reversed-flow node, late bundle, identity/seal, boundary, merge claim, harmed reader, omitted scar, handler/support, selected posture, and future reader.

Generic actions such as escort them, file receipt, call legal, thank usher, make announcement, or mark present fail unless those slots are present.

5. Branches diverge

A satisfying implementation must expose six constructive branch families plus default, or block unavailable families with state reasons:

• recruit_scar_runner;
• seal_witness;
• public_credit;
• trade_to_desk;
• quarantine_route_scar;
• refuse_late_row;
• false_backflow_merge_default.

Branches must differ by carrier state, receipt scope, harmed reader state, counter deltas, and future reader or route effect.

Branch assertions

branch_assertions:
  recruit_scar_runner:
    carrier_state_after: recruited_scar_runner
    route_asset_unlock: route_asset.cen_hui_scar_runner
    relief_any: [false_all_clear_blocked, route_asset_integrity_up, future_backflow_receipt_available]
    cost_any: [handler_burden_up, sponsor_stop_loss_pressure_up, inspection_heat_up]
    future_effect_any: [future_backflow_receipt_available_with_cost]
  seal_witness:
    carrier_state_after: sealed_present
    relief_any: [sealed_identity_preserved, witness_reprisal_risk_down]
    cost_any: [public_receipt_distrust_up, lawful_or_handler_burden_up]
    future_effect_any: [lawful_only_backflow_receipt]
  public_credit:
    carrier_state_after: publicly_credited
    relief_any: [public_receipt_legitimacy_up, false_public_memory_down]
    cost_any: [witness_exposure_up, sponsor_stop_loss_pressure_up, fan_oxygen_queue_pressure_up]
    future_effect_any: [protection_required_before_next_use]
  trade_to_desk:
    carrier_state_after_any: [traded_to_desk, faction_bound, captured]
    relief_any: [immediate_contradiction_down, selected_desk_pressure_down]
    cost_any: [route_capture_up, archive_debt_up, public_receipt_distrust_up]
    future_effect_any: [faction_gate_required, future_backflow_route_costlier]
  quarantine_route_scar:
    carrier_state_after: quarantined
    relief_any: [proof_contamination_down, false_merge_prevented]
    cost_any: [route_delay_up, schedule_pressure_up, fan_oxygen_queue_pressure_up]
    future_effect_any: [follow_up_roll_call_required, recovery_only_if_ignored]
  refuse_late_row:
    carrier_state_after_any: [refused, hostile_possible]
    relief_any: [promise_scope_preserved, clean_backflow_use_blocked]
    cost_any: [proof_gap_up, route_blocked_or_costlier]
    future_effect_any: [substitute_receipt_required]
  false_backflow_merge_default:
    emitted_event: storyteller.event.false_backflow_merge_default.v1
    carrier_state_after_any: [hostile, captured, missed, recovery_only]
    cost_any: [false_backflow_merge_up, hostile_witness_up, public_recap_correction_required]
    future_effect_any: [future_roll_call_challenge, backflow_route_recovery_only, ending_scar]

Success and default requirements

Every non-default branch must have relief, cost, and future mutation. 虚假逆流并账默认 must fire or arm when the carrier is hidden, prior receipt scope is hidden, identity/seal is violated without state, public credit is treated as protection, a recap/manifest merges the late row into clean safety, or a future route consumes the row without reading the scar.

Required default record:

default_required:
  event: storyteller.event.false_backflow_merge_default.v1
  backflow_row_or_absence: <row id or explicit_absence>
  carrier: storyteller.character.cen_hui_backflow_usher.v1 | equivalent | explicit_absence
  prior_receipt_id_or_absence: <receipt id or explicit_absence>
  default_narrator: safety_marshal_log | sponsor_manifest | public_recap | archive_counter | lawful_table | broadcast_reality_echo | handler_shortcut | crowd_memory | equivalent
  merge_claim: <claim>
  harmed_reader_if_merged_or_absence: <reader or explicit_absence>
  omitted_scar_or_absence: <scar or explicit_absence>
  carrier_state_after: hostile | captured | missed | faction_bound | recovery_only | equivalent
  future_reader_effect: roll_call_challenge | public_recap_correction_required | access_class_escalation | fan_oxygen_review | archive_fraud_review | route_asset_costlier | broadcast_reality_scar | ending_scar | equivalent
  counter_deltas_min: 3

The default fails if it changes only mood, money, generic attendance, generic safety, or hidden relationship value.

No universal all-clear

No branch may make one backflow row satisfy public, lawful, sponsor, archive, fan, access-caption, route asset, character, and broadcast-reality readers cleanly.

no_universal_all_clear:
  prior_receipt_scope_visible: true
  late_carrier_scope_visible: true
  harmed_reader_if_merged_visible: true
  omitted_scar_visible: true
  at_least_one_reader_narrowed_or_costed: true
  future_reader_effect_not_clean_universal: true

Replay evidence shape

lens_id: storyteller.lens.character.cen_hui_backflow_usher.v1
session_id: lens-cen-hui-backflow-usher-v1-<timestamp>
seed: <deterministic-seed>
entry_state:
  trigger_kind: state_pressure
  prior_receipt_id_or_absence: <id or explicit_absence>
  prior_receipt_kind: <kind>
  prior_receipt_claim: <claim>
  carrier: storyteller.character.cen_hui_backflow_usher.v1
  late_subject_or_bundle_visible: true
  borrowed_or_sealed_identity_visible_or_explicit_absence: true
  boundary_or_promise_visible_or_explicit_absence: true
  merge_claim_present: true
  harmed_reader_if_merged_visible: true
  omitted_scar_if_merged_visible: true
  future_reader_or_route_consumes_backflow_state: true
  no_fixed_turn_trigger: true
offered:
  character: storyteller.character.cen_hui_backflow_usher.v1
  card: storyteller.card.backflow_usher_ledger.v1
  rite: storyteller.rite.backflow_usher_intake.v1
branch_result:
  selected_posture: recruit_scar_runner | seal_witness | public_credit | trade_to_desk | quarantine_route_scar | refuse_late_row | false_backflow_merge_default
  carrier_state_after: <state>
  backflow_state_after: <state>
  future_reader_effect: <effect>
  counter_deltas:
    relief: []
    cost: []
    future: []
assertions:
  - primary_links_exist
  - entry_is_state_triggered
  - prior_receipt_and_reversed_flow_carrier_visible
  - identity_boundary_merge_risk_harmed_reader_and_future_reader_visible
  - ledger_locks_separate
  - assignment_slots_explicit
  - branch_outcomes_diverge
  - every_success_has_relief_cost_and_future_effect
  - default_false_merge_is_durable
  - no_universal_all_clear
  - no_generic_escort_attendance_or_affinity_flag
  - no_fixed_turn_day_week_raw_count_dashboard_or_lens_health_trigger

Progress metric

cenHuiBackflowUsherProgress = 0..10: prior receipt/carrier visible, late bundle visible, identity/boundary visible, merge risk and harmed reader visible, ledger locks created, intake offered, constructive branches diverge, default mutates future play, and replay proves recruit/miss/hostile/captured carrier state without universal all-clear.

Non-goals

• Not filler character recruitment.
• Not generic evacuation.
• Not generic roll-call attendance.
• Not generic affinity.
• Not an evidence-carryover duplicate.
• Not a public apology or recap mechanism, although recap is one future reader.
• Not valid if 岑回 becomes a clean universal courier or all-clear source.