Box Office Carbon Copy Afteruse Receipt Lens
This lens checks that a blue box-office carbon copy recovered after a comped-seat refund broadcast cannot later be spent as clean payment, patron identity, sponsor reversal consent, or archive-seat permission unless the game preserves the printed seat row, carbon pressure marks, cashier witness, sponsor reversal claim, proof bridge, selected posture, after-state, and future route effect.
Entry Oracle
entry_state:
trigger_kind: state_pressure
printed_seat_row_visible: true
carbon_pressure_marks_visible: true
cashier_witness_visible_or_explicit_absence: true
sponsor_reversal_claim_visible: true
proof_bridge_or_explicit_absence_visible: true
future_reader_consumes_carbon_state: true
player_can_certify_bind_reopen_split_quarantine_or_default: true
no_fixed_turn_trigger: true
no_fixed_day_or_week_trigger: true
no_raw_receipt_count_trigger: true
no_dashboard_or_lens_health_trigger: trueThe lens fails if entry is driven by fixed time, raw receipt count, dashboard health, or a carbon-copy prop row with no future reader trying to consume it.
Checks
1. Docket Preserves Receipt Custody And Afteruse
box_office_carbon_copy_docket:
printed_seat_row: required
carbon_pressure_marks: required
cashier_witness_or_absence: required
sponsor_reversal_claim: required
proof_bridge_or_explicit_absence: required
future_reader_or_route: required
selected_carbon_posture: required
carbon_afteruse_state_after: required
future_reader_or_route_effect: required
counter_deltas: required
clean_payment_proof: false2. Review Branches Diverge
Required branch families:
certify_seat_row_scope;bind_carbon_pressure_marks;reopen_cashier_witness;split_refund_from_identity;quarantine_carbon_afteruse;false_carbon_copy_payment_default;future_effect_any.
3. Default Mutates Future Play
false_carbon_copy_payment_default:
false_clean_payment_proof: true
printed_seat_row_or_absence: required
hidden_or_overbroad_pressure_marks: required
capturing_reader_or_route: required
cashier_witness_or_absence: required
carbon_afteruse_state_after: falsely_clean
future_reader_effect: recovery_only
counter_deltas_min: 3
durable_mutation: trueProgress Metric
Satisfied when the sibling TypeScript binding, focused card/rite/event content, and a lens-scoped durable replay show one selected branch changing named counters and future route state without treating the carbon copy as universal payment, patron identity, sponsor reversal consent, or archive-seat permission.