Storyteller Wiki

Wu Suo Legacy-Face Credential Witness Lens / 无锁旧脸凭证见证人 Lens

3 min read

Wu Suo Legacy-Face Credential Witness Lens / 无锁旧脸凭证见证人 Lens

Observable promise

This lens observes whether card-storyteller-wu-suo becomes a reachable, solely recruitable, independently re-enrollable, company-capturable, deferrable, and durably missable person through the real Rite 20 source and an exact legacy-face credential review.

Prose and metadata alone are insufficient. Passing evidence must include authored source objects, public-rollup parity, the focused runtime test, and two integrity-backed durable CLI sessions.

Source oracle

sole_source_rite: storyteller-rite-20-second-chapter-briefing
source_preconditions:
  - storyteller_compliance_screening_held
  - card-storyteller-producer-license
  - card-storyteller-fan-oxygen-ledger
common_source_outputs:
  - card-storyteller-wu-suo
  - eleven_card_legacy_face_packet
  - wu_suo.source.second_chapter_briefing_encountered
  - wu_suo.legacy_face_credential_review_available
  - storyteller_wusuo_badge_available
source_choice_history:
  public_notice:
    - storyteller_public_breath_footnote
    - wu_suo.source.public_legacy_face_notice
  company_schedule:
    - storyteller_company_breath_risk
    - wu_suo.source.company_master_credential_schedule
fresh_state_fails: true
card_only_or_partial_seed_shortcut_fails: true
actual_source_provenance_requires_ordered_replay: true

Seven-slot and branch oracle

The review requires exactly seven in-hand assignments: actual Wu Suo, actual facility map, credential docket, childhood-template lineage, named-threshold reader, selected credential posture, and matching authority boundary. Exact accepts and selected-option requirements must be enforced.

The four ordered branches are:

  1. public source + protected-witness/named-door-time pair → sole bounded recruit and route asset;
  2. public source + adult-reenrollment/identity-independence pair → independent non-recruit;
  3. company source + master-credential/company-capture pair → toxic captured non-recruit;
  4. completed Rite 20 + defer/unresolved-template pair → nonterminal pending-default state.

A missing object, virtual alias, generic person, virtual facility map, mixed pair, or wrong Rite 20 history must fail before state mutation. Only choice 0 may set recruitment or route_asset.wu_suo_credential_lineage_witness.

Default oracle

The defer branch alone must set all three pending flags. The event must require that triple plus completed review, actual Wu Suo, and absent disposition. Its three reachable terminals must remain distinct:

  • expired orphaned face-template hard miss;
  • hostile company face inventory;
  • late re-enrollment independent non-recruit.

Every terminal clears pending state, review availability, the deferred-risk state, and route asset; removes Wu Suo; records disposition; sets badge expiry; and emits the expired-face counterreceipt. No terminal is a neutral wait or clean universal recovery.

Authority and separate-routing oracle

Wu Suo may attest the childhood template’s lineage and controller, one named threshold reader and interval, and the template’s retirement or reissue state. The witness never opens that reader’s door and grants no current route certification, universal badge authority, likeness consent, identity/personhood authority, sponsor rights, voice/archive custody, or company-wide access.

The focused docket must remain distinct from card.facility_access_map and rite.facility_access_routing. The review uses the actual map to name the reader but must not complete the routing rite. Even recruitment only requires a later routing decision; it does not satisfy the separate origin, target, edge, handler, support, claimant, and cost tuple.

Replay oracle

  • Recruit replay: real Rite 20 public-footnote choice → exact protected seven-slot tuple → review choice 0 → actual Wu Suo retained and sole route asset granted, with no door-opening state.
  • Badge-expiry replay: real Rite 20 → exact defer tuple → review choice 3 → exact pending triple → default option 0 → Wu Suo removed, badge-expiry hard miss and counterreceipt present, with no route certification.

Both replays must use source: storyteller, normalized lens provenance, integrity and session evidence, exact assignment catalogs, and runtime catalogs. Each accepted replay must show the real Rite 20 action before review resolution; an end-state snapshot or mutable source flags alone are not provenance.

The focused runtime test must additionally execute review choices 1 and 2 plus default options 1 and 2; reject repeat resolution and every invalid tuple; and prove source/public parity, canon isolation, and the separation from Facility Access Routing.

Graph View