Storyteller Wiki

Mirror Right Boundary Audit Lens / 镜权边界审计 Lens

3 min read

Mirror Right Boundary Audit Lens / 镜权边界审计 Lens

This lens observes whether 镜权边界审计线 turns 四种镜权与权限边界 into executable pressure.

The passing implementation proves that near_right, exit_right, staging_right, and naming_right are not interchangeable. A schedule contract may be powerful and still fail the requested operation if it carries the wrong right family.

Observable promise

A passing implementation must show:

  • source schedule contract or authority;
  • granted right family;
  • requested right use;
  • required right family;
  • right-family mismatch or explicit absence;
  • protected boundary or explicit absence;
  • attempted reader;
  • selected posture;
  • boundary state after;
  • future reader or route effect;
  • durable default when one right is used as universal authority.

The lens fails if the game records only permission ok, contract approved, right exists, sponsor paid, or legal signed.

Entry oracle

entry_state_required:
  trigger_kind: state_pressure
  schedule_contract_present: true
  requested_right_use_visible: true
  granted_right_family_visible: true
  required_right_family_visible: true
  right_family_mismatch_visible: true
  protected_boundary_or_absence_visible: true
  future_reader_consumes_boundary_state: true
  player_can_certify_narrow_retrofit_split_substitute_quarantine_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_right_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

The lens must fail if entry is driven by fixed turn number, day/week interval, chapter quota, raw right count, dashboard state, lens health, or generic contract age.

Docket oracle

Mirror Right Boundary Docket or equivalent must record:

docket_required:
  source_contract:
    source_contract_id: <stable contract id or explicit_absence>
    source_slot_or_authority: <authority or explicit_absence>
    contract_grade: <grade or explicit_absence>
    source_reader_scope: <scope or explicit_absence>
  granted_right_family:
    - near_right | exit_right | staging_right | naming_right | explicit_absence
  requested_operation:
    operation_id: <stable operation id>
    operation_kind: approach_bind | remove_exit | build_stage | rename_claim | edit_silence | route_unlock | equivalent
  required_right_family:
    - near_right | exit_right | staging_right | naming_right | explicit_absence
  boundary_gap:
    right_family_mismatch: missing_required_right | stale_right | wrong_grade | implied_combo | hidden_boundary | explicit_absence
    protected_boundary_or_absence: <boundary or explicit_absence>
    harmed_or_omitted_reader: <reader or explicit_absence>
  attempted_consumption:
    attempted_reader: <reader>
    false_right_claim: <claim or explicit_absence>
    future_reader_or_route: <future reader route or explicit_absence>
  state_after:
    selected_posture: certify_matching_right | narrow_to_granted_right | retrofit_missing_right | split_rights_table | substitute_non_right_cost | quarantine_operation | mirror_right_overreach_default
    boundary_state_after: <state>
    future_reader_or_route_effect: <effect>

Rite oracle

Mirror Right Boundary Hearing or equivalent must expose:

  • certify_matching_right
  • narrow_to_granted_right
  • retrofit_missing_right
  • split_rights_table
  • substitute_non_right_cost
  • quarantine_operation
  • mirror_right_overreach_default

Each branch must include relief_any, cost_any, and future_effect_any.

Default oracle

Mirror Right Overreach Default must record:

mirror_right_overreach_default:
  false_right_claim:
    granted_right_family:
      - near_right | exit_right | staging_right | naming_right | explicit_absence
    requested_operation: <operation>
    required_right_family:
      - near_right | exit_right | staging_right | naming_right | explicit_absence
    false_claim: <claim>
  default_capture:
    capturing_reader: <reader>
    protected_boundary_or_absence: <boundary or explicit_absence>
    harmed_or_omitted_reader: <reader or explicit_absence>
  aftermath:
    boundary_state_after: false_universal_right | unauthorized_near_use | unauthorized_exit | unauthorized_staging | unauthorized_naming | split_required | blocked | hostile | recovery_only
    future_reader_effect: blocked | hostile | costlier | lawful_only | public_only | sponsor_only | addendum_required | recovery_only | contradiction_pending
    counter_deltas_min: 3

The default fails if it is only a warning, a heat increase, or a clean retcon.

Progress metric

  • 20%: storyline, mechanic, docket, rite, event, lens, and sibling binding exist.
  • 40%: entry requires state pressure from contract plus requested right use.
  • 60%: docket separates granted and required right families.
  • 80%: hearing branches diverge by scope, cost, and future reader effect.
  • 100%: overreach default mutates boundary state and future route use.

Non-goals

  • Not a mirror relay lens.
  • Not a broadcast legality duplicate.
  • Not a general rights glossary.
  • Not valid if one mirror right can cleanly satisfy every right family.

Graph View

Backlinks