Custody Proof Chain Receipt Lens / 羁押证据链回执 Lens

This lens observes whether Custody Proof Chain Receipt Storyline has become a playable proof-transfer packet instead of a generic evidence note.

The promise is narrow: when a proof object moves from its source holder to a future reader, the implementation must name the holder, carrier, receiving reader, transfer scope, proof gap, receipt state after, and future reader effect.

Observable promise

A passing implementation must show:

• transfer or handoff pressure;
• source proof object or explicit absence;
• source holder or explicit absence;
• carrier or explicit absence;
• receiving reader or route;
• transfer scope;
• proof gap or explicit absence;
• selected receipt posture;
• durable default when a future reader consumes hidden or falsely clean transferred proof.

The lens fails if transferred proof becomes universal clean evidence because someone filed a receipt, moved a card, or named a famous handler.

Entry oracle

entry_state_required:
  trigger_kind: state_pressure
  transfer_or_handoff_attempted: true
  source_proof_object_visible: true
  source_holder_or_explicit_absence: true
  carrier_or_explicit_absence: true
  receiving_reader_or_route_visible: true
  proof_gap_or_explicit_absence_visible: true
  future_reader_consumes_receipt_state: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_proof_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

The lens must fail if entry comes from a fixed turn number, day/week interval, raw proof count, dashboard state, lens health, or generic evidence pressure without a named future reader.

Docket oracle

Custody Proof Receipt Docket must separate:

docket_required:
  source_proof_object: <proof object or explicit_absence>
  transfer_source: <source surface>
  source_holder_or_absence: <holder or explicit_absence>
  carrier_or_absence: <carrier or explicit_absence>
  attempted_claim_or_consumer: <future consumer>
  receiving_reader_or_route: <reader or route>
  transfer_scope: <scope>
  proof_gap_or_absence: <gap or explicit_absence>
  receipt_state_after: <state>
  future_reader_or_route_effect: <effect>
  false_clean_transfer_default_risk: <risk>

The docket fails if it stores only proof exists, receipt filed, handoff complete, or clean chain.

Rite oracle

Custody Proof Chain Review must expose divergent branch families:

• seal_chain
• split_receipt
• public_counterstub
• lawful_annex
• carrier_rebuild
• quarantine_proof
• false_clean_transfer_default

Each branch must include relief, cost, receipt state after, and future_effect_any.

Default oracle

False-Clean Proof Transfer Default must record:

false_clean_proof_transfer_default:
  source_docket: storyteller.card.custody_proof_receipt_docket.v1 | explicit_absence
  false_clean_transfer_claim: <capturing false clean claim>
  hidden_or_missing_inputs:
    source_holder: <holder or explicit_absence>
    carrier: <carrier or explicit_absence>
    transfer_scope: <scope or hidden>
    proof_gap: <gap or hidden>
  capturing_reader: lawful_reader | archive | public_table | sponsor_desk | cutroom | fan_oxygen_audit | memorial_route | recovery_reader | route_asset | management_report | equivalent
  receipt_state_after: false_clean_default | hostile | blocked | lawful_only | public_only | sponsor_only | recovery_only
  future_reader_effect: blocked | hostile | lawful_only | public_only | sponsor_only | annex_required | two_reader_ruling_required | carrier_required | recovery_only

The default fails if it is only a warning, only an audit meter change, or a clean retcon.

Progress metric

• 20%: storyline, mechanism, docket, review, event, and lens links exist.
• 40%: entry is state-triggered by transfer pressure and a future reader.
• 60%: docket separates source proof, holder, carrier, reader, scope, gap, receipt state, and future effect.
• 80%: review branches diverge across seal, split, public counterstub, lawful annex, carrier rebuild, quarantine, and default.
• 100%: false-clean transfer default records hidden inputs and future reader mutation.

Non-goals

• Not a generic evidence lens.
• Not a replacement for proof-board snapshot custody, archive enforcement, stabilization liability handoff, facility access, or counter-broadcast custody.
• Not valid if one receipt clears sponsor, public, lawful, archive, route, and fan oxygen readers for free.