Song Qi Reseal-Manifest Counterminute Lens / 宋祈重封清单反记录 Lens

Observable promise

This lens observes whether card-storyteller-song-qi becomes a reachable, solely recruitable, independently depositable, sponsor-hostile, deferrable, and durably missable person storyline between the real Rite 16 reseal and real Rite 17 recount, while keeping the witness’s authority strictly procedural.

Passing requires authored source objects, exact source/public parity, focused runtime coverage, and the two bound ordered CLI replay targets. A manually gained card, copied flags, or terminal snapshot is insufficient.

Source and deadline oracle

sole_packet_source: storyteller-rite-16-sponsor-model-reseal
source_required_assignments:
  slot-seal: card-storyteller-audit-seal
  slot-sponsor: card-storyteller-sponsor-warrant
source_choices:
  - seal_as_membership_air_model
  - leave_quota_review_key_open
source_outputs:
  - card-storyteller-song-qi
  - twelve_candidate_counterminute_packet
  - source_choice_receipt
  - focused_review_available
  - exact_pending_triple
deadline: storyteller-rite-17-quota-recount
deadline_flag: song_qi.reseal_manifest_deadline_passed
default_entry_modes:
  - rite16_packet_never_reviewed
  - review_choice_three_deferred
fresh_or_card_only_state_fails: true
ordered_replay_is_historical_proof: true

Rite 16, not Rite 17, creates the source encounter and pending triple. Immediate terminal review clears it. Deferral retains it. Rite 17 marks a still-pending counterminute default-eligible; it neither answers the omitted row nor makes the manifest clean.

Exact assignment and branch oracle

Review requires ten exact in-hand assignments: actual Song Qi; docket; Rite 16 source-choice receipt; resealed manifest snapshot; exception pointer or explicit absence; seal issuer-and-holder trace; quota-key handoff; named Rite 17 reader; selected posture; and counterminute-only boundary. Audit seal, sponsor warrant, and breath-quota key must also remain in hand as conditions.

The four ordered postures remain non-equivalent:

1. protected_scoped_reseal_counterminute_recruit → sole bounded recruit and route asset; only after the open-key Rite 16 branch;
2. independent_counterminute_deposit → cooperative non-recruit;
3. sponsor_absorbed_clean_model_capture → hostile non-recruit; only after the membership-air Rite 16 branch;
4. deferred_until_quota_recount_deadline → nonterminal, still-pending default risk.

A virtual person, missing fixed row, off-hand assignment, mixed posture, failure scar as input, copied source flags without authored Rite 16 completion, post-deadline review, or repeated terminal resolution must fail before mutation. Serialized state is not historical authentication of the branch choice.

Default oracle

The default requires the real Rite 16 source, completed Rite 17, deadline flag, actual Song Qi, minimum packet rows, no prior disposition, and the exact pending triple. It must accept unreviewed-source and explicit-defer entry modes and reach three distinct terminals:

• erased_counterminute_hard_miss;
• sponsor_clean_model_false_inclusion;
• late_independent_counterminute_non_recruit.

Each terminal clears pending and review residue, closes the route, removes Song Qi, denies the route asset, writes the missed junior-audit flag, emits the failure scar, and records its own future recovery/challenge state. No terminal is recruitment, a clean wait, a clean manifest, a proof of absent claimant, or a rewrite of Rite 17.

Counterminute-only authority oracle

proves:
  rite16_source_choice: true
  resealed_manifest_snapshot: true
  included_changed_removed_or_renumbered_row_pointer_or_absence: true
  seal_issuer_and_holder_or_absence: true
  review_key_handoff: true
  named_rite17_manifest_reader: true
denies:
  oxygen_need_priority_or_allocation: true
  rite17_call_order_skips_repeats_or_displacement: true
  fan_wide_representation: true
  identity_capacity_life_or_death: true
  consent_or_voice_image_archive_memorial_rights: true
  sponsor_or_audit_legality: true
  insurance_coverage_or_lawful_exclusion: true
  ownership_route_access_or_future_permission: true

The named future reader is a scope limiter, not an authorization. An explicit absence preserves missing procedure; it does not invent or erase a claimant.

Non-duplication oracle

The lens fails if it crosses any of these boundaries:

• Shao Zi’s storyteller.storyline.character.shao_zi_queue_call_order_witness.v1 begins from the actual Rite 17 output and owns called-name order, skipped/repeated/displaced names, and the Oxygen Priority Recut reader. Song Qi’s pre-Rite 17 manifest row cannot substitute for those objects.
• Rao Zhun’s storyteller.storyline.character_rao_zhun_exclusion_adjuster.v1 owns the source guarantee, covered claim, excluded claim, and exclusion-rider scope. A Song Qi omission pointer cannot become coverage or lawful exclusion.
• Legacy replay-only 宋栖 (storyteller-lens-songqi-public-accountability / ST-NPC-SONGQI-13) owns license-collapse schedule ancestry. Runtime 宋祈 owns this Rite 16 counterminute. Similar romanization cannot merge their names, cards, storylines, route assets, or proof scopes.

Verified ordered replay oracle

lens/replays/song-qi-reseal-manifest-counterminute.recruit.replay.json must execute the real Rite 16 open-key choice, retain the historical receipt, assign the exact protected tuple, and resolve review option 0 with Song Qi and the sole route asset retained.

lens/replays/song-qi-reseal-manifest-counterminute.omitted-default.replay.json must execute the real Rite 16, keep the exact pending triple through the real Rite 17 deadline, and resolve default option 0 with cleanup-complete hard miss, Song Qi removed, the failure scar present, and no route asset.

Both verified replays remain source: storyteller, carry normalized lens/session provenance and integrity data, and prove ordered execution. The focused runtime test additionally covers the other review and default branches, both default entry modes, invalid source/assignment/timing cases, cleanup, bounded authority, neighbor isolation, and canon isolation.