Catalog Clearance Afteruse Receipt Lens

This lens checks that a prior catalog-clearance result cannot later be spent as clean universal permission unless source row, source work, original use, catalog state, harmed reader, proof bridge, after-state, and future effect remain visible.

Entry Oracle

entry_state:
  trigger_kind: state_pressure
  source_catalog_clearance_row_visible: true
  source_work_or_explicit_absence_visible: true
  source_cleared_use_surface_visible: true
  source_catalog_state_visible: true
  requested_afteruse_visible: true
  future_reader_consumes_catalog_state: true
  harmed_or_excluded_reader_visible_or_explicit_absence: true
  proof_bridge_or_explicit_absence_visible: true
  player_can_certify_restrict_bridge_reopen_split_quarantine_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_song_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

The lens fails if entry is driven by fixed turn, fixed day/week, raw song count, dashboard state, lens health, or a prior catalog clearance row with no future reader trying to consume it.

Checks

1. Docket Preserves Source, Reader, And Afteruse

catalog_clearance_afteruse_docket:
  source_catalog_clearance_row: required
  source_work_or_absence: required
  source_cleared_use_surface: required
  source_catalog_state: required
  requested_afteruse: required
  future_reader_or_route: required
  harmed_or_excluded_reader: required
  proof_bridge_or_explicit_absence: required
  selected_afteruse_posture: required
  catalog_afteruse_state_after: required
  future_reader_or_route_effect: required
  counter_deltas: required

2. Review Branches Diverge

Required branch families:

• certify_catalog_scope;
• restrict_catalog_afteruse_reader;
• attach_reclearance_or_public_bridge;
• reopen_catalog_claimant;
• split_catalog_afteruse_by_reader;
• quarantine_catalog_afteruse;
• false_catalog_clearance_afteruse_default;
• future_effect_any.

3. Default Mutates Future Play

false_catalog_clearance_afteruse_default:
  false_clean_catalog_afteruse: true
  source_catalog_row_or_absence: required
  hidden_or_overbroad_catalog_scope: required
  capturing_reader_or_route: required
  harmed_or_excluded_reader: required
  catalog_afteruse_state_after: required
  future_reader_effect: required
  counter_deltas_min: 3
  source_scope_remains_true: true
  durable_mutation: true

4. Runtime Rollup Evidence Is Durable

Runtime evidence is exported from the lens-scoped durable session lens-storyteller-lens-catalog-clearance-afteruse-receipt-v1-20260705t2212z-runtime with seed 20260705 to lens/replays/catalog-clearance-afteruse-receipt.replay.json. The evaluator now requires that replay provenance so this contract is no longer only a wiki-shape proof.