Mei Xu Offstage Testament Intake Witness Lens / 梅序台下遗嘱收件见证 Lens

Observable promise

This lens observes whether the isolated card-storyteller-mei-xu promise becomes a real, reachable, solely recruitable, independently depositable, company-hostile, deferrable, and durably missable character storyline without allowing intake to become testament validity, consent, rights, or permission.

Passing requires authored source objects, exact source/public parity, focused runtime coverage, and two ordered durable CLI replays. A card description or terminal snapshot is insufficient.

Source and deadline oracle

sole_packet_source: storyteller-event-19-ledger-demands-signature
upstream_reachability:
  - storyteller-rite-22-three-safe-versions
source_outputs:
  - card-storyteller-mei-xu
  - twelve_candidate_intake_packet
  - mei_xu_source_encounter
  - focused_review_available
  - exact_pending_triple
source_choice_receipt:
  - limit_signature_to_sample_attachment
  - recognize_ledger_as_common_draft
deadline: storyteller-rite-24-disaster-naming-rights
default_entry_modes:
  - event19_packet_never_reviewed
  - review_choice_three_deferred
fresh_or_card_only_state_fails: true
ordered_replay_is_historical_proof: true

The source event, not the deadline, creates mei_xu.testament_intake_pending, mei_xu.seal_state_unread, and mei_xu.delivery_recipient_unconfirmed. Immediate review clears them. Defer retains them. Rite 24 completion changes a still-pending row from reviewable pressure to default-eligible pressure.

Exact assignment and branch oracle

Review requires ten exact in-hand assignments: actual Mei Xu; docket; specific package/absence; handoff parties/absence; receiving window; seal state/absence; the Event 19 receipt surface; named future reader; selected posture; and the intake-only authority boundary. The generic receipt object proves that Event 19 emitted the receipt surface; mutually exclusive branch flags plus ordered replay history prove which Event 19 choice occurred.

The four ordered postures remain non-equivalent:

1. protected_itemized_testament_intake_recruit → sole bounded recruitment and route asset;
2. independent_sealed_testament_deposit → cooperative non-recruit;
3. company_condolence_packet_capture → hostile non-recruit;
4. deferred_until_disaster_naming_deadline → nonterminal, still-pending default risk.

A virtual person, missing fixed row, off-hand assignment, missing Event 19 receipt surface, mixed posture, default scar as input, post-deadline review, or repeated terminal resolution must fail before mutation. Mutable serialized state is not historical authentication of the branch choice.

Default oracle

The default requires the real Event 19 source, completed Rite 24, actual Mei Xu, no prior disposition, and the exact pending triple. It must accept unreviewed-source and explicit-defer entry modes and reach three distinct terminals:

• unserved_testament_hard_miss;
• sponsor_consent_conversion;
• late_sealed_archive_independent_non_recruit.

Each terminal clears pending and availability residue, closes the route, removes Mei Xu, denies the route asset, emits the intake-failure scar, and records its own package disposition. No terminal is a clean wait, recruitment route, proof of nonexistence, consent, or timely service.

Intake-only authority oracle

proves:
  specific_package_receipt_or_absence: true
  handoff_parties_or_absence: true
  bounded_receiving_window: true
  observed_seal_state_or_absence: true
  event19_source_choice: true
denies:
  author_or_signature: true
  capacity_personhood_or_death: true
  content_or_truth: true
  consent_or_refusal: true
  legal_validity_or_probate: true
  recipient_acceptance: true
  voice_image_archive_or_memorial_rights: true
  ownership_or_inheritance: true
  afteruse_or_future_permission: true

An unread seal is not positive proof. Explicit absence is not a substitute author, delivery, or consent record. The named future reader is a scope limiter, not an authorization.

Non-duplication oracle

The lens fails if it begins doing any neighboring lane’s job:

• Yu Jing owns named-row delete/burn/ash chronology;
• Su Lian separates device fault from a human channel;
• Wu Suo records credential lineage and retirement;
• Ruan Ting assigns an answerability seat or explicit empty seat;
• Qian Yan records thermal first touch and counter seizure;
• Lou Ke records caption source and switch routing;
• Qiu Bai records member names and lead substitution order;
• stage-door and other afteruse lenses review an object’s later reuse.

Mei Xu records pre-signoff receipt facts for one package. She cannot translate, route, credential, seat, touch-authorize, represent, validate, own, inherit, or license it.

Ordered replay oracle

The recruit replay must execute the real Event 19, preserve its selected source receipt, assign the exact protected tuple, and resolve review option 0 with Mei Xu retained and the sole route asset present.

The unserved-default replay must execute Event 19, keep the exact pending triple through either no review or explicit defer, execute the real Rite 24 deadline, and resolve default option 0. It must clear residue, remove Mei Xu, set hard miss and recovery-only state, gain the failure scar, and retain no route asset.

Both replays must remain source: storyteller, carry normalized lens/session provenance and integrity data, and prove ordered execution. The focused runtime test additionally covers the other review and default branches, both default entry modes, invalid-source/assignment/timing cases, cleanup, bounded authority, and canon isolation.