Auditor Wristband Afteruse Receipt Lens
This lens checks that a recovered auditor wristband cannot later be consumed as generic inspector authority, backstage access, route clearance, sponsor immunity, or memorial custody proof unless the game preserves the source wristband, badge registry or explicit absence, scan log, transfer witness, requested afteruse, future reader, selected posture, after-state, and future route effect.
Entry Oracle
entry_state:
trigger_kind: state_pressure
source_wristband_visible: true
badge_registry_or_absence_visible: true
scan_log_visible: true
transfer_witness_visible: true
requested_afteruse_visible: true
future_reader_consumes_wristband_state: true
player_can_certify_bind_reopen_split_quarantine_or_default: true
no_fixed_turn_trigger: true
no_fixed_day_or_week_trigger: true
no_raw_wristband_count_trigger: true
no_dashboard_or_lens_health_trigger: trueChecks
1. Docket Preserves Inspector Provenance
auditor_wristband_docket:
source_wristband: required
badge_registry_or_absence: required
scan_log: required
transfer_witness: required
requested_afteruse: required
future_reader_or_route: required
selected_wristband_posture: required
wristband_afteruse_state_after: required
future_reader_or_route_effect: required
counter_deltas: required
blanket_inspector_authority: false2. Review Branches Diverge
Required branch families:
certify_badge_scope;bind_scan_log_consent;reopen_transfer_witness;split_access_from_inspector_authority;quarantine_wristband_afteruse;unregistered_auditor_default;future_effect_any.
Each branch must name relief, cost, counters, and future route effects.
3. Default Mutates Future Play
unregistered_auditor_wristband_default:
unregistered_auditor: true
source_wristband_or_absence: required
hidden_or_overbroad_inspector_scope: required
capturing_reader_or_route: required
transfer_witness_or_absence: required
wristband_afteruse_state_after: unregistered_auditor_default
future_reader_effect: recovery_only
counter_deltas_min: 3
durable_mutation: trueProgress Metric
Satisfied when the sibling TypeScript binding, focused card/rite/event content, runtime Jest assertions, and a lens-scoped durable replay show one selected branch changing named counters and future route state without treating the auditor wristband as blanket inspector authority, backstage access, sponsor immunity, route clearance, or memorial custody proof.