Yu Jing Subtitle Burn-Chain Witness Lens / 余烬字幕烧毁链见证 Lens

Observable promise

This lens observes whether card-storyteller-yu-jing becomes a reachable, solely recruitable, independently publishable, company-hostile, deferrable, and durably missable person through the real Rite 18 source and an exact physical burn-chain review.

Prose, object metadata, or an end-state snapshot alone is insufficient. Passing evidence includes authored source objects, public-rollup parity, the focused runtime test, and two integrity-backed durable CLI replays whose ordered actions show Rite 18 before the focused review.

Source oracle

sole_yu_jing_packet_source_rite: storyteller-rite-18-whitebox-edit
source_preconditions:
  - storyteller_low_quota_recounted
  - card-storyteller-baiya
  - card-storyteller-crowd-affidavits
common_source_outputs:
  - card-storyteller-yu-jing
  - eleven_card_subtitle_burn_chain_packet
  - yu_jing.source.whitebox_edit_encountered
  - yu_jing.state.named_subtitle_burn_order_exposed
  - yu_jing.subtitle_burn_chain_review_available
  - storyteller_yujing_burn_bin_available
source_choice_history:
  public_burn_chain:
    - storyteller_format_as_crime
    - yu_jing.source.public_burn_chain_notice
  company_clean_burn:
    - storyteller_whitebox_as_training
    - yu_jing.source.company_training_burn_order
fresh_state_fails: true
card_only_shortcut_fails: true
partial_source_state_shortcut_fails: true
actual_source_provenance_requires_ordered_replay: true

The runtime gate may read completion, encounter, availability, counters, and in-hand state, but those mutable values are not historical proof by themselves. Accepted provenance is the ordered replay action that resolves the actual Rite 18 before exact review assignment.

Eight-slot and branch oracle

The review requires exactly eight in-hand assignments: actual Yu Jing, actual Baiya, actual crowd affidavits, the burn-chain docket, named subtitle delete order, ash-seal thermal trace, selected burn posture, and matching authority boundary. Exact accepts and selected-option requirements must be enforced.

The four ordered branches are:

1. public source + protected-witness/named-row-physical-chain pair → sole bounded recruit and route asset;
2. public source + stop-furnace/thermal-trace-only pair → independent non-recruit;
3. company source + clean-burn/false-nonexistence pair → hostile non-recruit;
4. completed Rite 18 + defer/missing-ash-explicit-absence pair → nonterminal pending-default state.

A missing object, virtual alias, generic person, mixed pair, wrong Rite 18 history, or repeat review must fail before state mutation. Only choice 0 may set yu_jing.recruited or route_asset.yu_jing_burn_chain_witness.

Default oracle

The defer branch alone must set all three pending flags:

• yu_jing.subtitle_burn_chain_pending;
• yu_jing.ash_seal_unread;
• yu_jing.physical_handoff_unconfirmed.

The event must require that triple plus completed review, actual Yu Jing, and absent disposition. Its three reachable terminals must remain distinct:

• ash-dump false-nonexistence hard miss;
• hostile company training-scrap capture;
• late ash quarantine independent non-recruit.

Every terminal clears the pending triple, review-open and availability state, deferred-risk state, burn-bin availability, and route asset; removes Yu Jing; records disposition; sets yu_jing.subtitle_burn_chain_route_window_closed; and emits the ash-handoff-failure scar. Only the hard-miss branch sets storyteller_yujing_ashes_dumped; training-scrap absorption and late quarantine keep their own physical-disposition flags. No terminal is a neutral wait, clean proof of nonexistence, or recruitment route.

Strict present-run physical authority oracle

The positive authority is deliberately small:

authority_proves:
  named_subtitle_row_and_version: true
  delete_and_burn_chronology: true
  ash_bag_seal_or_explicit_absence: true
  physical_handoff_or_explicit_absence: true
  thermal_residue_or_explicit_absence: true
scope:
  named_row_only: true
  present_destruction_run_only: true

The lens fails if any branch, card, route asset, or scar:

• decides caption meaning, translation, or routing;
• proves edit lawfulness or guilt;
• proves viewer knowledge or approval;
• identifies a speaker or proves an utterance’s truth;
• grants consent or refusal authority;
• transfers voice, archive, or memorial rights;
• infers subtitle nonexistence from missing ash;
• acts as an afteruse receipt, future-reader grant, or later permission.

The ash trace proves only a physical trace or explicit absence in the present furnace interval. The default scar proves only that the physical handoff failed. Neither reconstructs, owns, validates, or authorizes the subtitle.

Ordered replay oracle

Recruit replay

yu-jing-subtitle-burn-chain-witness.recruit.replay.json must execute real Rite 18 choice 0, producing public source history and the actual eleven-card packet, then assign the exact protected eight-slot tuple and resolve focused review choice 0. The terminal state must retain Yu Jing, set bounded recruitment, and grant the sole route asset.

Ash-dump default replay

yu-jing-subtitle-burn-chain-witness.ash-dump-default.replay.json must execute real Rite 18, assign the exact defer tuple, resolve review choice 3, record the exact pending triple, and then resolve default option 0. The terminal state must clear all pending and availability residue, remove Yu Jing, set the hard miss and recovery-only physical-chain state, and gain the ash-handoff-failure scar without endorsing nonexistence.

Both replays must use source: storyteller, normalized lens provenance, integrity digests, runtime catalogs, assignment catalogs, and session-backed action histories. Their value is the ordered execution path. Runtime save state is deliberately trusted rather than tamper-authenticated, so a fully restored set of completion/branch receipts is playable; copying those mutable receipts is not historical proof and must never replace the ordered replay/session audit surface.

The focused runtime test must additionally execute review choices 1 and 2 plus default options 1 and 2; reject invalid source/card/assignment/history combinations and repeat resolution; and prove cleanup, authority denial, and canon isolation. The structural evaluator separately proves source/public rollup parity.