Su Lian Ventilator Fault-Confession Separator Lens / 素莲呼吸机故障—忏悔分离 Lens

Observable promise

This lens observes whether card-storyteller-su-lian becomes a reachable, solely recruitable, independently repairable, company-hostile, deferrable, and durably missable person through the real Rite 12 source and an exact named-unit fault readback.

Prose, object metadata, or an end-state snapshot alone is insufficient. Passing evidence includes authored source objects, public-rollup parity, the focused runtime test, and two integrity-backed durable CLI replays whose ordered actions show Rite 12 before the focused review.

Source oracle

sole_su_lian_packet_source_rite: storyteller-rite-12-fan-oxygen-audit
source_preconditions:
  - storyteller_blackbox_opened
  - card-storyteller-sponsor-warrant
  - card-storyteller-blackbox-footage
common_source_outputs:
  - card-storyteller-su-lian
  - card-storyteller-fan-oxygen-ledger
  - eleven_card_ventilator_fault_packet
  - su_lian.source.fan_oxygen_audit_encountered
  - su_lian.state.named_unit_alarm_conflict_exposed
  - su_lian.ventilator_fault_readback_available
  - storyteller_sulian_ward_available
source_choice_history:
  public_readback:
    - storyteller_yulan_witness_ready
    - su_lian.source.public_fault_readback_notice
  company_reset:
    - storyteller_fans_treated_as_assets
    - su_lian.source.company_telemetry_reset_schedule
fresh_state_fails: true
card_only_shortcut_fails: true
partial_source_state_shortcut_fails: true
actual_source_provenance_requires_ordered_replay: true

The runtime gate may read completion, encounter, availability, and in-hand state, but those mutable values are not historical proof by themselves. Accepted provenance is the ordered replay action that resolves the actual Rite 12 before the exact review assignment.

Seven-slot and branch oracle

The review requires exactly seven in-hand assignments: actual Su Lian, actual fan oxygen ledger, the separation docket, named-unit alarm/bypass sequence, human-channel marker, selected fault posture, and matching authority boundary. Exact accepts and selected-option requirements must be enforced.

The four ordered branches are:

1. public source + protected-interpreter/named-unit-interval pair → sole bounded recruit and route asset;
2. public source + immediate-repair/repair-state-only pair → independent non-recruit;
3. company source + telemetry-reset/false-patient-fault pair → hostile non-recruit;
4. completed Rite 12 + defer/unresolved-merge pair → nonterminal pending-default state.

A missing object, virtual alias, generic person, mixed pair, wrong Rite 12 history, or repeat review must fail before state mutation. Only choice 0 may set su_lian.recruited or route_asset.su_lian_unit_fault_interpreter.

Default oracle

The defer branch alone must set all three pending flags:

• su_lian.alarm_confession_merge_pending;
• su_lian.manual_bypass_unread;
• su_lian.human_channel_unseparated.

The event must require that triple plus completed review, actual Su Lian, and absent disposition. Its three reachable terminals must remain distinct:

• merged alarm-confession ward-closure hard miss;
• hostile company patient-fault metric;
• late unit repair independent non-recruit.

Every terminal clears the pending triple, review-open and availability state, deferred-risk state, ward availability, and route asset; removes Su Lian; records disposition; sets storyteller_sulian_ward_closed; and emits the merged-alarm counterreceipt. No terminal is a neutral wait, clean reconstruction of human speech, or recruitment route.

Strict present-tense authority oracle

The positive authority is deliberately small:

authority_proves:
  named_unit_alarm_chronology: true
  named_unit_manual_bypass_chronology: true
  named_unit_repair_and_live_readback_state: true
  separate_human_channel_present_or_absent: true
scope:
  named_unit_only: true
  current_audit_interval_only: true

The lens fails if any branch or receipt:

• allocates oxygen or establishes patient priority;
• grants diagnosis, treatment, sedation, breath consent, or any other medical consent;
• identifies a speaker or proves human words, confession, admission, or truth;
• transfers voice or archive custody;
• certifies a filter batch, filter afteruse, or fleet-wide safety;
• grants facility access;
• settles memorial or sponsor rights;
• creates or substitutes for a future-reader receipt.

The human-channel marker proves only presence or absence. The default counterreceipt proves only that separation failed. Neither preserves, owns, or interprets the utterance.

Ordered replay oracle

Recruit replay

su-lian-ventilator-fault-confession-separator.recruit.replay.json is a verified 14-action durable replay. Its ordered history resolves real Rite 12 choice 1 on turn 7, producing the public readback flags and actual packet, then assigns the exact protected seven-slot tuple and resolves focused review choice 0 on turn 8. The terminal state retains Su Lian, sets bounded recruitment, and grants the sole route asset.

Ward-closed default replay

su-lian-ventilator-fault-confession-separator.ward-closed-default.replay.json is a verified 15-action durable replay. Its ordered history resolves real Rite 12 choice 0 on turn 7, assigns the exact defer tuple and resolves review choice 3 on turn 8, records the exact pending triple, and then resolves default option 0. The terminal state clears all pending and availability residue, removes Su Lian, sets the ward-closed hard miss, and gains the counterreceipt.

Both replays use source: storyteller, normalized lens provenance, integrity digests, runtime catalogs, assignment catalogs, and session-backed action histories. Their value is the ordered execution path; copying their final flags into a new state would not reproduce provenance.

The focused runtime test must additionally execute review choices 1 and 2 plus default options 1 and 2; reject invalid source/card/assignment/history combinations and repeat resolution; and prove cleanup, authority denial, and canon isolation. The structural evaluator separately proves source/public rollup parity.