Auditor Wristband Afteruse Receipt Lens

This lens checks that a recovered auditor wristband cannot later be consumed as generic inspector authority, backstage access, route clearance, sponsor immunity, or memorial custody proof unless the game preserves the source wristband, badge registry or explicit absence, scan log, transfer witness, requested afteruse, future reader, selected posture, after-state, and future route effect.

Entry Oracle

entry_state:
  trigger_kind: state_pressure
  source_wristband_visible: true
  badge_registry_or_absence_visible: true
  scan_log_visible: true
  transfer_witness_visible: true
  requested_afteruse_visible: true
  future_reader_consumes_wristband_state: true
  player_can_certify_bind_reopen_split_quarantine_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_wristband_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

Checks

1. Docket Preserves Inspector Provenance

auditor_wristband_docket:
  source_wristband: required
  badge_registry_or_absence: required
  scan_log: required
  transfer_witness: required
  requested_afteruse: required
  future_reader_or_route: required
  selected_wristband_posture: required
  wristband_afteruse_state_after: required
  future_reader_or_route_effect: required
  counter_deltas: required
  blanket_inspector_authority: false

2. Review Branches Diverge

Required branch families:

  • certify_badge_scope;
  • bind_scan_log_consent;
  • reopen_transfer_witness;
  • split_access_from_inspector_authority;
  • quarantine_wristband_afteruse;
  • unregistered_auditor_default;
  • future_effect_any.

Each branch must name relief, cost, counters, and future route effects.

3. Default Mutates Future Play

unregistered_auditor_wristband_default:
  unregistered_auditor: true
  source_wristband_or_absence: required
  hidden_or_overbroad_inspector_scope: required
  capturing_reader_or_route: required
  transfer_witness_or_absence: required
  wristband_afteruse_state_after: unregistered_auditor_default
  future_reader_effect: recovery_only
  counter_deltas_min: 3
  durable_mutation: true

Progress Metric

Satisfied when the sibling TypeScript binding, focused card/rite/event content, runtime Jest assertions, and a lens-scoped durable replay show one selected branch changing named counters and future route state without treating the auditor wristband as blanket inspector authority, backstage access, sponsor immunity, route clearance, or memorial custody proof.