Operator Witness Conclave Lens / 操作员证词合议 Lens

This lens observes whether 操作员证词合议线 and 操作员证词合议机制 correctly prevent low-rank operator rows from being merged into false staff consensus.

The individual operator lenses can now prove strong local play: 楼刻字幕切换员线 handles caption scope, 陆纷切条分发跑腿线 handles recap fragment scope, and 岑回逆流引座员线 handles late backflow receipt scope. This lens tests the next seam: when future play cites staff agreement, each operator row must either be seated, scoped, protected, split, sealed, scarred, or durably overwritten.

A pass cannot be achieved by saying the staff reconciled the issue, by appointing a senior handler, by accepting a clean management summary, or by treating absence as agreement.

Primary observation link

This lens observes:

• 操作员证词合议线;
• 操作员证词合议机制;
• 操作员合议案卷;
• 操作员合议听证;
• 高位代理覆盖默认;
• the source operator lines 楼刻字幕切换员线, 陆纷切条分发跑腿线, and 岑回逆流引座员线;
• adjacent future consumers 字幕证词羁押线, 公开回顾捕获线, 漏点名复核线, 受保护证人薪册, 举证负荷再分配线, and 经营压缩台;
• Route Assets and Custody, Broadcast Reality, and Producer License and Pressure.

It is observed through:

• 操作员合议案卷;
• 操作员合议听证;
• 高位代理覆盖默认.

Observable promise

When a future case consumes multiple staff-derived rows, the implementation must answer:

• which operator rows are present or explicitly absent;
• which source card each row came from;
• what each row asserts;
• which reader each row can satisfy;
• what scar or limit each row carries;
• what merged claim is being requested;
• what contradiction kind exists;
• who benefits from the merge;
• who is harmed if the rows merge cleanly;
• which future reader consumes the result;
• which operator is protected, split, sealed, published, summarized with scar, overwritten, hostile, or recovery-only.

The lens fails if the implementation records only staff agreement, operator corroboration, senior summary, management reconciled, proof merged, operators unavailable, or legal accepted.

Entry oracle

entry_state_required:
  trigger_kind: state_pressure
  operator_rows_conflict_visible: true
  source_operator_rows_have_cards: true
  requested_merged_claim_present: true
  contradiction_kind_present: true
  harmed_reader_if_merged_visible_or_explicit_absence: true
  beneficiary_of_merge_visible_or_explicit_absence: true
  future_reader_or_route_consumes_result: true
  player_can_seat_preserve_split_protect_publish_seal_summarize_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_operator_count_trigger: true
  no_dashboard_or_lens_health_trigger: true
  no_relationship_score_trigger: true
  no_generic_aftercare_trigger: true

The lens fails if entry depends on fixed turn number, fixed day/week interval, chapter quota, raw operator count, raw staff count, dashboard state, lens health, relationship score, or generic aftercare.

Docket oracle

操作员合议案卷 or equivalent must keep source rows, conflict surface, seated conclave state, dissent or overwrite state, and future reader separate.

docket_required:
  row_id: <stable id>
  source_operator_rows:
    - operator: lou_ke | lu_fen | cen_hui | equivalent
      source_card: caption_switchboard_key | recap_syndication_slip | backflow_usher_ledger | equivalent
      source_state: recruited | protected | retained | suppressed | captured | hostile | missed | explicit_absence | equivalent
      asserted_truth: <truth this row supports>
      reader_scope: access_public | sponsor_feed | mirror_feed | public_recap | roll_call | lawful_table | archive | route_asset | broadcast_reality | equivalent
      scar_or_limit: <scar or explicit_absence>
  conflict_surface:
    future_case_id: <route slot docket or proof window>
    requested_merged_claim: one_staff_version | single_clip_truth | caption_as_full_source | backflow_as_all_clear | senior_summary | equivalent
    contradiction_kind: reader_scope_mismatch | source_time_mismatch | caption_vs_source | clip_vs_full_recap | receipt_vs_all_clear | proof_holder_mismatch | equivalent
    harmed_reader_if_merged: <reader or explicit_absence>
    beneficiary_of_merge: <actor or explicit_absence>
  conclave_state:
    conclave_state_before: unseated | seated | partial | protected_dissent | senior_overwrite_attempted | default_ready | equivalent
    chair_or_absence: producer | shen_luo | yu_lan | han_yanshuang | baiya | ji_heng | lawful_clerk | public_delegate | explicit_absence | equivalent
    operator_presence: all_present | one_absent | one_hostile | one_captured | one_sealed | explicit_absence | equivalent
    proof_anchor_or_absence: caption_log | clip_checksum | backflow_receipt | public_addendum | lawful_seal | witness_payroll | explicit_absence | equivalent
  dissent_or_overwrite:
    selected_posture: seat_conclave | preserve_dissent | split_by_reader | minority_operator_protection | publish_contradiction_addendum | lawful_or_archive_seal | management_summary | senior_proxy_overwrite_default
    dissent_state_after: recorded | protected | sealed | public_only | lawful_only | sponsor_only | suppressed | overwritten | hostile | recovery_only | equivalent
    overwritten_operator_or_absence: lou_ke | lu_fen | cen_hui | equivalent | explicit_absence
    false_clean_claim_if_any: <claim or explicit_absence>
  future_reader:
    future_reader_or_route: <reader route proof burden management report or broadcast reality surface>
    state_if_handled: dissent_preserved | split_required | addendum_required | protected_operator_required | lawful_only | public_only | sponsor_only | accepted_with_scar | equivalent
    state_if_overwritten: false_staff_consensus | hostile_operator | correction_required | route_blocked | costlier | recovery_only | ending_scar | equivalent

The lens fails if source operator rows collapse into one staff row, if future reader is absent, or if dissent/overwrite state is not durable.

Rite assignment oracle

操作员合议听证 or equivalent must require explicit assignment:

assignment_required:
  docket: storyteller.card.operator_conclave_docket.v1
  selected_conclave_row: <row id>
  operator_rows_visible: true
  future_case_id: <case>
  requested_merged_claim: <claim>
  contradiction_kind: <kind>
  harmed_reader_if_merged: <reader or explicit_absence>
  beneficiary_of_merge: <actor or explicit_absence>
  chair_or_absence: <chair or explicit_absence>
  proof_anchor_or_absence: <proof or explicit_absence>
  selected_posture: seat_conclave | preserve_dissent | split_by_reader | minority_operator_protection | publish_contradiction_addendum | lawful_or_archive_seal | management_summary | senior_proxy_overwrite_default
  future_reader_or_route: <future consumer>

The lens fails if the hearing is replaced by a senior meeting, sponsor payment, archive seal, legal order, PR statement, or edit patch without these fields.

Branch divergence oracle

A satisfying implementation must expose the branch families below or explicitly block unavailable branches with state reasons.

Branch family	Required relief	Required cost	Required future effect
Seat conclave	contradiction legible	delay, exposure, handler burden	scoped conflict consumed later
Preserve dissent	minority row survives	payroll, protection, retaliation	addendum or protected operator required
Split by reader	incompatible readers proceed	edit debt, route delay, contradiction	public-only/lawful-only/access-only/sponsor-only
Minority operator protection	endangered row remains usable	payroll, safehouse, seal, schedule cost	protected operator required before reuse
Publish contradiction addendum	public or route truth improves	distrust, sponsor pressure, license heat	addendum required before reuse
Lawful/archive seal	admissibility improves	lawful-only gate, archive debt, inspection heat	lawful-only or archive-only acceptance
Management summary with scar	board route can proceed	metric scar, compression pressure	summary remains costed
Senior proxy overwrite/default	fastest clean story files	false consensus, hostile operator	correction, blocked, costlier, recovery-only, ending scar

No branch may produce universal staff truth.

Default oracle

高位代理覆盖默认 must fire or be armed when:

• the docket is absent;
• source rows are merged without row scopes;
• dissent is hidden;
• an absent, captured, hostile, suppressed, or missed operator is treated as agreement;
• a senior proxy speaks for the operators without overwrite state;
• harmed reader or future reader is absent;
• future play consumes staff consensus without reading operator state.

Required default payload:

default_required:
  event: storyteller.event.senior_proxy_overwrite_default.v1
  conclave_row_or_absence: <row id or explicit_absence>
  future_case_id_or_absence: <case id or explicit_absence>
  overwritten_operator_rows:
    - operator: <operator or explicit_absence>
      source_card_or_absence: <card or explicit_absence>
      source_state_or_absence: <state or explicit_absence>
      asserted_truth_or_absence: <truth or explicit_absence>
      reader_scope_or_absence: <reader or explicit_absence>
      scar_or_limit_or_absence: <scar or explicit_absence>
  false_clean_claim: operators_agree | senior_proxy_speaks_for_all | caption_and_clip_match | late_receipt_cleans_recap | sponsor_clip_is_access_proof | lawful_seal_is_public_consensus | absent_operator_agreed | equivalent
  default_narrator: producer | shen_luo | management | sponsor | archive | lawful_reader | public_table | route_claimant | broadcast_reality | equivalent
  beneficiary_of_merge: <actor or explicit_absence>
  harmed_reader_if_merged: <reader or explicit_absence>
  missing_inputs:
    seated_conclave: present | absent
    dissent_state: present | absent | hidden
    proof_anchor: present | absent | hidden
    harmed_reader: present | absent | hidden
    future_reader_or_route: present | absent | hidden
    overwritten_operator_state: present | absent | hidden
  result:
    conclave_state_after: false_staff_consensus | senior_proxy_overwrite | hostile_operator | captured_dissent | route_blocked | costlier | recovery_only | ending_scar | equivalent
    overwritten_operator_state_after: hostile | suppressed | captured | missed | public_only | lawful_only | recovery_only | equivalent
    future_reader_or_route_effect: correction_required | addendum_required | split_required | protected_operator_required | management_metric_scar | route_blocked | costlier | recovery_only | ending_scar | equivalent
    counter_deltas_min: 3

The lens fails if default changes only mood, reputation, budget, or generic management pressure.

Counter and replay oracle

Every branch must mutate at least three counters or durable states:

counter_deltas_required:
  relief: at_least_one
  cost: at_least_one
  future_reader_or_route_effect: at_least_one

Replay evidence must include seed/session id, entry state, source operator rows, conflict surface, offered card and rite, selected branch, operator state changes, emitted/armed default or explicit absence, counter deltas, and future reader effect.

lens_id: storyteller.lens.operator_witness_conclave.v1
session_id: lens-operator-witness-conclave-v1-<timestamp>
seed: <deterministic-seed>
entry_state:
  trigger_kind: state_pressure
  operator_rows_conflict_visible: true
  requested_merged_claim_present: true
  contradiction_kind_present: true
  future_reader_or_route_consumes_result: true
  no_fixed_turn_trigger: true
source_operator_rows: []
conflict_surface:
  future_case_id: <case>
  requested_merged_claim: <claim>
  contradiction_kind: <kind>
  harmed_reader_if_merged: <reader or explicit_absence>
  beneficiary_of_merge: <actor or explicit_absence>
offered:
  card: storyteller.card.operator_conclave_docket.v1
  rite: storyteller.rite.operator_conclave_hearing.v1
branch_result:
  selected_posture: <posture>
  conclave_state_after: <state>
  operator_state_changes: []
  event_seen_or_armed: storyteller.event.senior_proxy_overwrite_default.v1 | explicit_absence
  future_reader_or_route_effect: <effect>
  counter_deltas:
    relief: []
    cost: []
    future: []
assertions:
  - primary_links_exist
  - entry_is_state_triggered_by_conflicting_operator_rows_and_future_consumer
  - source_operator_rows_remain_separate_with_source_card_state_truth_reader_scope_and_scar
  - requested_merged_claim_contradiction_harmed_reader_beneficiary_and_future_consumer_are_visible
  - operator_conclave_docket_records_dissent_or_overwrite_state
  - operator_conclave_hearing_assignment_is_explicit
  - branch_families_diverge_across_seat_preserve_split_protect_publish_seal_summarize_and_default
  - every_constructive_branch_has_relief_cost_future_effect_and_operator_state_change
  - no_universal_staff_consensus
  - senior_proxy_overwrite_default_records_false_clean_claim_overwritten_rows_missing_inputs_harmed_reader_and_future_effect
  - replay_evidence_records_seed_session_entry_rows_branch_default_deltas_and_future_reader
  - no_fixed_turn_day_week_raw_operator_count_dashboard_lens_health_relationship_score_or_generic_aftercare_trigger

Progress metric

operatorWitnessConclaveProgress = 0..10:

• 0: no conflicting operator-row surface.
• 1: future reader requests merged staff claim.
• 2: separate source operator rows are visible.
• 3: contradiction kind, harmed reader, and beneficiary are visible.
• 4: 操作员合议案卷 enters play.
• 5: 操作员合议听证 is assignable.
• 6: at least one constructive branch preserves or splits dissent.
• 7: at least one branch protects or seals a minority operator row.
• 8: management summary exists only with scar, or default is armed.
• 9: future reader consumes the handled or overwritten state.
• 10: replay evidence records entry, rows, branch, deltas, default, and future effect.

Non-goals

• Not a governance page.
• Not a raw count target.
• Not a generic staff meeting.
• Not a fixed-turn escalation.
• Not a relationship scene.
• Not a proof aggregation shortcut.
• Not valid unless operator conflict changes future play.