Lin Qiao Chain-Safe Delivery Lens / 林乔安全小件交接 Lens

Observable promise

This lens ensures that protecting and recruiting 林乔 unlocks an actual post-recruitment delivery action rather than a dead flag. It also ensures that “chain-safe” means scoped, paid or protected, receipted, and future-reader bound—not universal courier permission.

Parent-state oracle

The parent replay must first prove:

parent_state:
  resolved_rite: rite.turn55_chain_receipt_recovery
  selected_branch: protect_and_pay_runner_receipt
  flags:
    turn55_runner_state.recruited_runner: true
    route_asset.lin_qiao_custody_runner: true
    turn55_chain_receipt_recovered: true
    rite.chain_safe_small_delivery.unlocked: true
  paid_costs:
    favor_debt_min: 1
    payroll_leak_min: 1

Without these states, rite.chain_safe_small_delivery must be unavailable.

Docket oracle

lin_qiao_chain_safe_delivery_docket:
  delivery_packet: required
  source_custodian: required
  destination_custodian: required
  runner_state_before: route_asset.lin_qiao_custody_runner
  payment_or_protection: required
  receipt_proof: required
  delivery_lane: required
  future_reader: required
  selected_posture: required
  delivery_state_after: required
  future_route_effect: required
  counter_deltas: required
  universal_courier_permission: false

The lens fails if the docket says only “small packet delivered” or reuses an old row without naming the new packet and readers.

Rite reachability oracle

The runtime rite must:

• have id rite.chain_safe_small_delivery;
• be playable and repeatable;
• require both unlock and Lin Qiao route-asset flags;
• expose runner, docket, packet, source, destination, payment/protection, proof, and future-reader slots;
• have a same-day duration with start, due, and expiry policies;
• avoid fixed-turn entry.

Branch assertions

Required branch families:

• deliver_lawful_chain;
• publish_split_counterreceipt;
• hold_for_runner_protection;
• route_through_fan_queue;
• overload_route_asset.

Each branch must record:

• a distinct delivery state after;
• a distinct future-route effect;
• at least three counter deltas;
• universalCourierPermission: false.

Exact replay oracle

A lens-scoped replay must resolve the parent recruitment rite and then resolve rite.chain_safe_small_delivery at choice 0.

The lawful-chain evidence must show:

lawful_chain_result:
  branch_flag: chain_safe_delivery.branch.lawful_chain
  delivery_state: chain_safe_delivery.state.delivered_with_named_chain
  future_effect: future_route.named_receipt_required
  custody_gap_decreases_again: true
  receipt_legitimacy_min: 2
  favor_debt_visible: true
  payroll_leak_visible: true

Availability without exact resolution does not pass.

Breach oracle

overload_route_asset must emit or arm Chain-Safe Delivery Breach. The event records:

breach_state:
  cause: universal_invisible_courier_use
  runner_state_after: runner_hostile_witness
  repeatable_rite_state_after: suppressed
  future_route_effect: recovery_only
  counter_deltas_min: 4
  durable_mutation: true

The lens fails if overloading the route asset merely costs coins or resets on the next delivery.

Progress metric

linQiaoChainSafeDeliveryProgress = 0..7:

• 0: only the symbolic unlock flag exists.
• 1: parent replay proves protected recruitment and paid costs.
• 2: the docket records a fresh named delivery row.
• 3: runtime rite exists behind both unlock gates.
• 4: five branch families expose distinct state and costs.
• 5: exact replay resolves a non-default delivery branch.
• 6: overload arms a durable hostile-witness breach.
• 7: a future reader consumes the scoped delivery state instead of treating 林乔 as universal infrastructure.

Evidence

• lens/replays/turn55-field-logistics-runner-custody.success.replay.json proves the parent route asset and unlock.
• lens/replays/lin-qiao-chain-safe-delivery.lawful.replay.json proves exact resolution of the new rite.

Non-goals

• Not another recruitment lens.
• Not a fixed-turn delivery.
• Not a generic logistics button.
• Not a universal route-asset benefit.
• Not satisfied by the unlock flag without the actual rite.
• Not satisfied if successful delivery erases payroll, favor, inspection, sponsor, fan, delay, or runner risk.