Wen Ting Version-Difference Copyist Lens / 闻停版本差异复写员 Lens

Wen Ting Version-Difference Copyist Lens

Observable promise

The lens proves that the existing ST-SCALE-05 copyist shell is actually playable: balcony-audio custody opens a state-driven transfer notice; the notice preselects one exact version-proof/protection/attribution three-card tuple; the existing transfer-window rite requires seven real assignments and an explicit matching choice; and four focused CLI replays reach four distinct Wen person-states.

Source-entry oracle

source_rite: storyteller-rite-st-scale-05-balcony-audio-custody
actual_character: card-storyteller-st-scale-05-audit-copyist
event: storyteller.event.wen_ting_copyist_transfer_notice.v1
trigger_kind: state_pressure
priority_over_unrelated_followups: true
fixed_turn_gate: false
fixed_day_or_week_gate: false
source_phone_does_not_set_wen_owner_or_recorder: true

Four-tuple event oracle

The four ordered event choices must retain exactly these proof families: audit seal, fan archive signature, safe archive version, and a real explicit-absence card. Each must retain only its matching protection posture and attribution boundary, set a durable branch flag, remove the other nine candidate rows, and preselect the corresponding rite choice without resolving Wen’s disposition.

Seven-slot rite oracle

The rite must require:

1. disposition docket;
2. actual Wen card;
3. source balcony phone;
4. selected version proof;
5. selected protection posture;
6. branch-selected attribution boundary;
7. named future reader.

Every slot is exact, required, and assigned from hand. Selected-option and selected-option-requirement guards must reject missing choices, virtual proof aliases, mixed tuples, and branch/assignment mismatches.

Terminal-state oracle

Replay	Choice	Required state	Wen retained	Route asset
recruit	0	recruited_protected_version_copyist	yes	route_asset.wen_ting_archive_copyist
public countersign	1	public_countersigned_deletion_witness	yes	none
sealed anonymous	2	sealed_anonymous_archive_only	yes	none; named readback pending
company transfer	3	company_transferred_hostile_miss	no	none

The company-transfer replay must set st_scale_05_copyist_transferred. No other branch may set the hard miss or grant the Wen route asset.

Non-duplication oracle

Wen may prove version lineage, deleted-name differences, copier serial, and her own attribution scope. She is never inferred to be phone owner or recorder, and no branch grants recording, voice, consent, archive, memorial, personhood, death, universal audit-verdict, or broad continuity-author authority. 青罗 remains the separate support-light copyist.

Durable replay oracle

• lens/replays/wen-ting-version-difference-copyist.recruit.replay.json
• lens/replays/wen-ting-version-difference-copyist.public-countersign.replay.json
• lens/replays/wen-ting-version-difference-copyist.sealed-anonymous.replay.json
• lens/replays/wen-ting-version-difference-copyist.company-transfer.replay.json

All four must execute the source rite, resolve one exact event option, resolve the existing transfer-window rite with seven exact assignments and its matching explicit choice, and end in the asserted terminal state.