Orchestra Pit Credential Afteruse Receipt Lens

This lens checks that a temporary orchestra-pit credential cannot later be spent as clean universal consent for route access, sponsor sightlines, or archive audio custody unless the game preserves the source credential row, holder, issuer, displaced musician or technician, requested afteruse, proof bridge, selected posture, after-state, and future route effect.

Entry Oracle

entry_state:
  trigger_kind: state_pressure
  source_credential_row_visible: true
  credential_holder_visible_or_explicit_absence: true
  issuing_authority_visible_or_explicit_absence: true
  displaced_musician_or_technician_visible_or_explicit_absence: true
  requested_afteruse_visible: true
  proof_bridge_or_explicit_absence_visible: true
  future_reader_consumes_credential_state: true
  player_can_certify_restrict_bridge_split_quarantine_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_credential_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

The lens fails if entry is driven by fixed time, raw credential totals, dashboard health, or a credential row with no future reader trying to consume it.

Checks

1. Docket Preserves Pit Credential Custody And Afteruse

orchestra_pit_credential_docket:
  source_credential_row: required
  credential_holder_or_absence: required
  issuing_authority_or_absence: required
  displaced_musician_or_technician: required
  requested_afteruse: required
  future_reader_or_route: required
  proof_bridge_or_explicit_absence: required
  selected_credential_posture: required
  credential_afteruse_state_after: required
  future_reader_or_route_effect: required
  counter_deltas: required

2. Review Branches Diverge

Required branch families:

  • certify_pit_scope;
  • restrict_pit_reader;
  • attach_musician_witness_bridge;
  • split_pit_access;
  • quarantine_pit_afteruse;
  • false_pit_credential_default;
  • future_effect_any.

3. Default Mutates Future Play

false_pit_credential_default:
  false_clean_pit_credential: true
  source_credential_row_or_absence: required
  hidden_or_overbroad_credential_scope: required
  capturing_reader_or_route: required
  displaced_musician_or_technician: required
  credential_afteruse_state_after: required
  future_reader_effect: required
  counter_deltas_min: 3
  durable_mutation: true

Progress Metric

Satisfied when the sibling TypeScript binding, focused card/rite/event content, and a lens-scoped durable replay show one selected branch changing named counters and future route state without treating the credential as universal pit consent.