Orchestra Pit Credential Afteruse Receipt Lens
This lens checks that a temporary orchestra-pit credential cannot later be spent as clean universal consent for route access, sponsor sightlines, or archive audio custody unless the game preserves the source credential row, holder, issuer, displaced musician or technician, requested afteruse, proof bridge, selected posture, after-state, and future route effect.
Entry Oracle
entry_state:
trigger_kind: state_pressure
source_credential_row_visible: true
credential_holder_visible_or_explicit_absence: true
issuing_authority_visible_or_explicit_absence: true
displaced_musician_or_technician_visible_or_explicit_absence: true
requested_afteruse_visible: true
proof_bridge_or_explicit_absence_visible: true
future_reader_consumes_credential_state: true
player_can_certify_restrict_bridge_split_quarantine_or_default: true
no_fixed_turn_trigger: true
no_fixed_day_or_week_trigger: true
no_raw_credential_count_trigger: true
no_dashboard_or_lens_health_trigger: trueThe lens fails if entry is driven by fixed time, raw credential totals, dashboard health, or a credential row with no future reader trying to consume it.
Checks
1. Docket Preserves Pit Credential Custody And Afteruse
orchestra_pit_credential_docket:
source_credential_row: required
credential_holder_or_absence: required
issuing_authority_or_absence: required
displaced_musician_or_technician: required
requested_afteruse: required
future_reader_or_route: required
proof_bridge_or_explicit_absence: required
selected_credential_posture: required
credential_afteruse_state_after: required
future_reader_or_route_effect: required
counter_deltas: required2. Review Branches Diverge
Required branch families:
certify_pit_scope;restrict_pit_reader;attach_musician_witness_bridge;split_pit_access;quarantine_pit_afteruse;false_pit_credential_default;future_effect_any.
3. Default Mutates Future Play
false_pit_credential_default:
false_clean_pit_credential: true
source_credential_row_or_absence: required
hidden_or_overbroad_credential_scope: required
capturing_reader_or_route: required
displaced_musician_or_technician: required
credential_afteruse_state_after: required
future_reader_effect: required
counter_deltas_min: 3
durable_mutation: trueProgress Metric
Satisfied when the sibling TypeScript binding, focused card/rite/event content, and a lens-scoped durable replay show one selected branch changing named counters and future route state without treating the credential as universal pit consent.