Caption Proof Carrier Handoff Lens / 字幕证明承载交接 Lens

This lens observes whether Caption Proof Carrier Handoff and Caption Proof Carrier Handoff prevent accepted caption proof from becoming universal carrier state.

It is a handoff lens. It does not re-decide caption witness custody, access reliance, latency repair, translation waiver scope, or operator relay order. It proves that a later reader must see the carrier and scope before consuming caption proof.

Observable promise

A passing implementation must show:

• source caption proof row;
• source caption state;
• handoff surface;
• carrier or explicit absence;
• reader scope;
• proof bridge or explicit absence;
• attempted future use;
• harmed or omitted reader;
• selected handoff posture;
• carrier state after;
• future reader or route effect;
• durable default when caption proof is moved as a clean universal carrier.

The lens fails if implementation stores only caption proof accepted, access proof, sponsor reach, lawful annexed, archive checksum, operator signed, or route unlocked.

Entry oracle

entry_state_required:
  trigger_kind: state_pressure
  source_caption_proof_row_present: true
  handoff_surface_visible: true
  carrier_or_explicit_absence_visible: true
  reader_scope_visible: true
  proof_bridge_or_explicit_absence_visible: true
  attempted_future_use_visible: true
  future_reader_consumes_carrier_state: true
  player_can_assign_public_lawful_archive_sponsor_operator_split_quarantine_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_caption_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

Docket oracle

Caption Proof Carrier Docket or equivalent must expose:

caption_proof_carrier_docket:
  source_caption_proof:
    source_row_id: <stable id>
    source_surface: caption_witness | access_caption_reliance | caption_latency_debt | translation_waiver | lawful_transcript | public_recap | operator_relay | equivalent
    source_caption_state: certified_access | certified_raw | late_repaired | translated_scoped | lawful_only | sponsor_safe | split_language | disputed | equivalent
    source_reader_scope: public | access_public | lawful | sponsor | archive | fan_public | route_asset | split | explicit_absence | equivalent
  handoff_surface:
    surface: public_bulletin | access_notice | lawful_annex | archive_checksum | sponsor_report | edit_lane | route_asset_packet | fan_relay | inspector_memo | operator_witness | equivalent
    handoff_actor_or_absence: producer | caption_operator | editor | sponsor | inspector | archive | fan_delegate | route_claimant | explicit_absence | equivalent
    carrier_or_absence: caption_operator | public_reader | lawful_annex | archive_checksum | sponsor_sideletter | edit_checksum | fan_relay | route_asset | explicit_absence | equivalent
    reader_scope: public | access_public | lawful | sponsor | archive | fan_public | operator | route_asset | split | explicit_absence | equivalent
    proof_bridge_or_absence: caption_witness | public_readback | lawful_seal | archive_stamp | editor_checksum | sponsor_sideletter | fan_receipt | explicit_absence | equivalent
  attempted_future_use:
    future_use_surface: route_unlock | sponsor_reach | public_access | lawful_claim | archive_lookup | edit_cut | management_report | ending_scar | equivalent
    future_reader_or_route: <reader route desk or explicit_absence>
    harmed_or_omitted_reader: access_reader | public_reader | lawful_reader | sponsor | archive | operator | fan_public | route_asset | explicit_absence | equivalent
    false_clean_claim_if_unresolved: proof_carrier_clean_for_all | sponsor_reach_proved | lawful_annex_satisfies_public | archive_checksum_satisfies_access | edit_caption_is_source | operator_silent_carrier | equivalent
  resolution:
    selected_posture: public_access_handoff | lawful_annex_handoff | archive_checksum_handoff | sponsor_scope_handoff | operator_protection_handoff | split_carrier_handoff | quarantine_carrier | false_caption_carrier_default
    carrier_state_after: public_scoped | lawful_scoped | checksum_bound | sponsor_scoped | protected_operator_or_absence | split_required | quarantined | false_clean_carrier | recovery_only
    future_reader_or_route_effect: public_route_accepted_with_access_scar | lawful_only | notice_required | checksum_required | sponsor_only | operator_witness_route | split_required | blocked | hostile | contradiction_pending | recovery_only

Review oracle

Caption Proof Carrier Review must expose these branch families:

• public_access_handoff
• lawful_annex_handoff
• archive_checksum_handoff
• sponsor_scope_handoff
• operator_protection_handoff
• split_carrier_handoff
• quarantine_carrier
• false_caption_carrier_default

Each branch must include relief, cost, carrier_state_after, and future_effect_any.

Default oracle

False Caption Carrier Default must record:

false_caption_carrier_default:
  event_id: storyteller.event.false_caption_carrier_default.v1
  source_caption_proof_row: <source row id or explicit_absence>
  handoff_surface: public_bulletin | access_notice | lawful_annex | archive_checksum | sponsor_report | edit_lane | route_asset_packet | fan_relay | inspector_memo | operator_witness | equivalent
  false_clean_carrier_claim: proof_carrier_clean_for_all | sponsor_reach_proved | lawful_annex_satisfies_public | archive_checksum_satisfies_access | edit_caption_is_source | operator_silent_carrier | equivalent
  missing_or_misfiled_handoff: no_carrier | no_reader_scope | no_proof_bridge | captured_carrier | silent_operator | omitted_public_notice | sponsor_overclaim | lawful_overclaim | archive_overclaim | explicit_absence
  carrier_or_absence: <carrier or explicit_absence>
  proof_bridge_state: missing | out_of_scope | false_receipt | captured | expired | explicit_absence | equivalent
  harmed_or_omitted_reader: access_reader | public_reader | lawful_reader | sponsor | archive | operator | fan_public | route_asset | explicit_absence | equivalent
  beneficiary_of_false_clean_carrier: sponsor | management | archive | editor | lawful_reader | producer | route_claimant | public_stability | explicit_absence
  carrier_state_after: false_clean_carrier | disputed | hostile | lawful_only | public_notice_required | quarantined | recovery_only
  future_reader_or_route_effect: blocked | hostile | costlier | contradiction_pending | lawful_only | notice_required | sponsor_only | recovery_only
  counter_deltas_min: 3

Progress metric

captionProofCarrierHandoffProgress = 0..8:

• 0: no source caption proof row is visible.
• 1: source caption proof row and source caption state are visible.
• 2: handoff surface is visible.
• 3: carrier or explicit absence is visible.
• 4: reader scope and proof bridge are visible or explicitly absent.
• 5: attempted future use and harmed or omitted reader are visible.
• 6: docket separates source caption proof from attempted future consumption.
• 7: review resolves a branch with relief, cost, carrier state after, and future effect.
• 8: false universal carrier use arms a durable default or recovery-only scar.

Non-goals

• Not caption witness custody.
• Not access caption reliance.
• Not caption latency debt.
• Not caption translation waiver mismatch.
• Not valid when a future reader consumes caption proof without a handoff carrier and scope.