Duan Wei Fan-Medical Ledger Custodian Lens

Observable promise

The lens proves that Duan Wei’s old fan-medical-ledger card becomes a bounded, reachable character route after the residue clinic returns residue to fan-medical custody. One state-triggered offer creates three valid review windows and one default-only miss branch. A strict five-slot, three-option review produces one recruited route asset or two independent non-recruited witnesses; a separate two-option default produces a durable sponsor/audit hard miss.

No path may reopen residue-clinic rite 07, reinterpret the ash consent tape, absorb Xi Sheng’s queue authority, absorb Luo Ji’s burn attribution, or promote ledger custody into diagnosis, treatment consent, ownership, personhood, memorial/archive/voice rights, universal fan consent, or universal medical authority.

Source-entry oracle

upstream_rite: storyteller-rite-residue-07-return-or-quarantine
upstream_completion_flag: complete_storyteller-rite-residue-07-return-or-quarantine
required_upstream_branch: residue_clinic.beat_07.branch.return_to_fan_medical_custody
source_branch_normalized_result: residue_clinic.disposition.return_to_named_patient
required_return_flag: storyteller_residue_custody_returned
required_in_hand_boundary_row: card-storyteller-ash-consent-tape
actual_character: card-storyteller-duan-wei
offer_event: storyteller.event.duan_wei_fan_medical_ledger_offer.v1
trigger_kind: state_pressure
fixed_turn_gate: false
fixed_day_or_week_gate: false
reopens_source_rite_or_disposition: false

The offer must remain unavailable before rite 07 completes, on the quarantine branch, when the ash consent tape is absent, or after any offer/review/default/disposition/miss has resolved.

Seven-support-card oracle

The packet exposes exactly these seven support cards:

  1. storyteller.card.duan_wei_fan_medical_ledger_docket.v1;
  2. storyteller.card.duan_wei_named_patient_key_registry.v1;
  3. storyteller.card.duan_wei_bounded_custody_charter.v1;
  4. storyteller.card.duan_wei_patient_key_escrow.v1;
  5. storyteller.card.duan_wei_public_fan_countersign.v1;
  6. storyteller.card.duan_wei_discharge_reader.v1;
  7. storyteller.card.duan_wei_hostile_ledger_counterclaim.v1.

The actual character and ash consent tape are existing source objects, not support-card substitutes. The docket must retain the rite 07 return source, normalized disposition, ash-consent presence, patient key/absence, custodian, selected disposition, Duan Wei state, discharge reader, excluded readers/constituencies, actual deltas, and future effect.

Four-option offer oracle

ChoiceOffer optionValid disposition gainedOpens reviewResult
0open_bounded_custodian_recruitment_windowbounded custody charteryesbounded-recruit branch flag
1open_patient_key_escrow_windowpatient-key escrowyesindependent-escrow branch flag
2open_public_fan_countersign_windowpublic fan countersignyesindependent-public branch flag
3arm_fan_medical_ledger_custody_defaultnonenomissed-custody default armed

Choices 0-2 gain the actual Duan Wei card, docket, named-patient-key registry, discharge reader, and exactly one valid disposition while requiring the ash consent tape to remain in hand. Choice 3 gains only the actual Duan Wei card; it must not gain any support row or valid disposition and must not open the review.

The offer itself may not recruit, miss, emit a route asset, remove Duan Wei, alter rite 07, or grant any medical/rights authority.

Five-slot, three-option review oracle

The review must require exactly:

  1. ledger docket;
  2. actual Duan Wei card;
  3. named-patient-key registry;
  4. event-selected valid disposition;
  5. discharge reader.

card-storyteller-ash-consent-tape must remain a strict in-hand condition but must not become a sixth slot. Conditions, exact accepts, cards-in-hand, selected option, and selected-option requirements must all be enforced.

The review must expose exactly three ordered options:

ChoiceOptionTerminal stateRecruitedRoute asset
0recruit_bounded_fan_medical_ledger_custodianrecruited_bounded_fan_medical_ledger_custodianyessole route asset
1place_ledger_under_patient_key_escrowindependent_patient_key_escrow_keepernonone
2publish_public_fan_countersignindependent_public_fan_countersignernonone

A fourth review option, sponsor/audit review disposition, mixed branch card, wrong branch flag, broad tag substitute, missing card, omitted option, or out-of-hand assignment must fail without completing the rite.

Default and hard-miss oracle

storyteller.event.duan_wei_missed_custody_default.v1 must be reachable from offer choice 3 after that choice sets event.duan_wei_missed_custody_default.armed. An expired or underfilled review window may reach the same default only through a visible path that first sets that armed flag; absence alone cannot bypass the runtime conditions. The event exposes exactly two options:

ChoiceDefault optionTerminal stateCard retainedRoute assetHard miss
0sponsor_packaging_hard_misssponsor_packaged_hard_missnononeyes
1audit_absorption_hard_missaudit_absorbed_hard_missnononeyes

Both must set duan_wei.missed and storyteller_fan_medical_ledgers_found_missed, remove card-storyteller-duan-wei, gain the hostile ledger counterclaim, leave duan_wei.future.hostile_ledger_counterclaim, and require visible-cost recovery. Neither may create a valid review disposition or clean sponsor/audit ownership.

Sole-route-asset oracle

Only review choice 0 may set duan_wei.recruited or route_asset.duan_wei_fan_medical_ledger_custodian. Escrow and public countersign must remain independent witness states. Both default choices must remain hard misses. Keeping Duan Wei in hand after an independent resolution is not recruitment.

The route asset may preserve one named patient-key/custody row for one named discharge reader and challenge scope loss. It may not diagnose, authorize treatment, grant consent, move residue, represent all fans, classify personhood, or grant memorial/archive/voice rights.

Adjacent-state non-mutation oracle

All four focused replays must snapshot and preserve:

  • the completed residue-clinic rite 07 flag;
  • residue_clinic.beat_07.branch.return_to_fan_medical_custody;
  • residue_clinic.disposition.return_to_named_patient;
  • the ash consent tape’s treatment-only boundary;
  • every Xi Sheng person-state, queue, and pain-priority result;
  • every Luo Ji person-state and burn-attribution result.

Duan Wei may add ledger custody, patient-key, reader, countersign, escrow, trust, miss, hostile counterclaim, and recovery states. She may not rewrite the source clinic or either adjacent character.

Authority-denial oracle

Every support card, offer/default event, review rite, terminal state, and future-reader result must retain all eleven denials:

grantsDiagnosisAuthority: false
grantsTreatmentConsent: false
grantsMerchandisingAuthority: false
grantsBodyAuthority: false
grantsVoiceAuthority: false
grantsMemorialOwnership: false
grantsArchiveOwnership: false
grantsUniversalMedicalConsent: false
grantsUniversalFanConsent: false
grantsIdentityOrPersonhoodFinding: false
grantsBroadLedgerReuseAuthority: false

Durable replay oracle

  • lens/replays/duan-wei-fan-medical-ledger-custodian.recruit.replay.json
  • lens/replays/duan-wei-fan-medical-ledger-custodian.escrow.replay.json
  • lens/replays/duan-wei-fan-medical-ledger-custodian.public.replay.json
  • lens/replays/duan-wei-fan-medical-ledger-custodian.sponsor-miss.replay.json

The first three must resolve one exact offer option, assign five real in-hand cards, keep the ash consent tape in hand, and choose the matching review option. The sponsor-miss replay must choose offer option 3 and default option 0 without opening the review. Together they prove one sole route asset, two independent non-recruited states, one hard miss, source/adjacent non-mutation, and the full authority-denial contract.