Off-Station Receiving Gate Counterreceipt Lens / 站外接收闸反签回执 Lens

This lens checks the first concrete downstream consumer of the protected Lan Qiao transfer. The parent wrapper proves that branch 0 emits a named-origin/receiver obligation; this lens checks that a receiving gate actually consumes that obligation without recruiting Lan Qiao again or promoting receipt into universal authority.

Parent oracle

parent:
  rite_id: storyteller.rite.lan_qiao_offstation_transfer_review.v1
  required_choice_index: 0
  required_choice_id: recruit_protected_transfer_list_witness
  required_completion_flag: complete_storyteller.rite.lan_qiao_offstation_transfer_review.v1
  required_state_flag: lan_qiao.state.recruited_protected_transfer_list_witness
  required_future_flag: lan_qiao.future.named_origin_gate_receiver_required
  required_readiness_flag: offstation_receiving_gate.parent.protected_named_transfer_ready
  all_other_choices_block_child: true
  gained_card_ids:
    - storyteller.card.offstation_receiving_gate_counterreceipt.v1
    - storyteller.card.offstation_named_subject_acknowledgement.v1
    - storyteller.card.offstation_receiving_gate_d17.v1
    - storyteller.card.offstation_person_property_label_boundary.v1

The four gained cards must be non-starter producer outputs. Parent choice 0 must precede the child in real replay evidence.

Exact child oracle

rite_id: storyteller.rite.offstation_receiving_gate_counterreceipt_review.v1
slot_order:
  - counterreceipt
  - transfer_schedule
  - terminal_access_log
  - receiving_custody
  - named_subject
  - receiving_gate
  - label_boundary
  - future_reader
exact_card_order:
  - storyteller.card.offstation_receiving_gate_counterreceipt.v1
  - storyteller.card.lan_qiao_offstation_transfer_schedule.v1
  - storyteller.card.lan_qiao_terminal_access_log.v1
  - storyteller.card.lan_qiao_receiving_custody_receipt.v1
  - storyteller.card.offstation_named_subject_acknowledgement.v1
  - storyteller.card.offstation_receiving_gate_d17.v1
  - storyteller.card.offstation_person_property_label_boundary.v1
  - storyteller.card.lan_qiao_future_reader.v1
enforce_exact_slot_accepts: true
enforce_conditions: true
requires_assigned_cards_in_hand: true
requires_selected_option: true
enforce_selected_option_requirements: true
selected_posture_source: rite_choice
selected_posture_prop_card: false
repeatable: false

The lens fails on missing, substituted, duplicate, extra, out-of-hand, virtual, or catalog-only cards; omitted or invalid choices; wrong parent state; or repeat resolution.

Branch oracle

option_ids_in_exact_order:
  - countersign_named_receiver
  - return_for_subject_acknowledgement
  - seal_person_first_exception
  - publish_receiving_gate_addendum
  - freeze_company_receiver_claim
  - refuse_unlawful_handoff
  - quarantine_receiving_chain
  - hidden_receiver_acceptance_default

Every branch must write an exclusive receiving state, visible relief, visible cost, and a distinct future-reader effect. countersign_named_receiver preserves the parent protected transfer and Lan Qiao’s already-recruited state; it is not another recruitment or custody hearing.

Default event oracle

event_id: storyteller.event.offstation_receiving_gate_misacceptance.v1
executable_trigger: true
only_armed_by: hidden_receiver_acceptance_default
pending_flags:
  - offstation_receiving_gate.default_pending
  - event.offstation_receiving_gate_misacceptance.armed
  - future_route.offstation_receiving_gate_recovery_pending
historical_scar: offstation_receiving_gate.history.hidden_acceptance_recorded
recovery_option_ids:
  - publish_subject_acknowledgement_addendum
  - return_transfer_to_origin_gate
  - quarantine_receiving_terminal
every_option_clears_pending: true
every_option_preserves_historical_scar: true
event_is_one_shot: true

The event fails if a constructive branch arms it, a missing pending flag still triggers it, recovery outcomes collapse, resolution retriggers, or recovery erases the scar.

Runtime-evidence oracle

Expected source and focused evidence:

runtime_sources:
  cards: game-content/storyteller/cards/offstation-receiving-gate-counterreceipt.json5
  rite: game-content/storyteller/rites/offstation-receiving-gate-counterreceipt-review.json5
  event: game-content/storyteller/events/offstation-receiving-gate-misacceptance.json5
  focused_test: lens/storyteller-offstation-receiving-gate-counterreceipt.runtime.test.ts
  evaluator: scripts/evaluate_lenses.mjs
replay_paths:
  countersigned: lens/replays/offstation-receiving-gate-counterreceipt.countersigned.replay.json
  hidden_recovery: lens/replays/offstation-receiving-gate-counterreceipt.hidden-recovery.replay.json

The countersigned replay resolves parent choice 0 before child choice 0 with all eight exact assignments. The hidden-recovery replay resolves parent choice 0 before child choice 7, triggers the real event, executes recovery option 0, clears the pending triple, and preserves the scar. Both named artifacts are Game CLI exports with integrity-valid session provenance; a filename or Wiki assertion alone would not satisfy this oracle.

Authority oracle

localAuthorityOnly: true
authorityBoundary:
  preservesParentProtectedTransferResult: true
  preservesSourceTransferSchedule: true
  preservesOriginAndReceivingGates: true
  preservesTerminalAccessLog: true
  preservesReceivingCustodyReceipt: true
  preservesNamedSubjectResponse: true
  preservesPersonPropertyLabelBoundary: true
  grantsPersonhoodJudgment: false
  grantsSubjectConsent: false
  grantsLawfulCustody: false
  grantsStationAccess: false
  grantsVoiceprintOrAvatarConsent: false
  grantsRouteAssetTransfer: false
  grantsCompanyCustody: false
  grantsPublicTestimony: false
  grantsCleanProof: false
  grantsUniversalTransferAuthority: false

Non-duplication

• The parent readback owns transfer-state emission across all eight Lan Qiao outcomes.
• This child owns one receiving-gate consumer reachable only from parent choice 0.
• The Lan Qiao character storyline owns her recruitment and disposition.
• Lost-and-found label afteruse owns later citation of an object label, not receiving-gate countersignature.
• No receiving result rules on personhood or turns a person/property label into clean custody.

Only source: storyteller runtime objects and replay provenance can satisfy this lens.