Phantom Coverage Crosscheck Lens / 幻覆盖交叉核验 Lens

This lens observes whether 幻覆盖交叉核验线 and 幻覆盖交叉核验机制 prevent an official coverage claim from becoming universal truth when the challenged subject is absent, proxied, protected, double-counted, or scoped to another reader.

The lens exists because Du Mian, Ruan Ting, and missing roll-call each protect a local surface. A pass proves that future routes also cross-check those surfaces before they consume coverage.

This lens observes:

It is observed through:

Must pass

1. Entry is state-triggered by coverage contradiction

entry_state_required:
  trigger_kind: state_pressure
  official_coverage_claim_visible: true
  coverage_source_row_visible: true
  challenged_subject_visible_or_explicit_absence: true
  roll_call_or_answerability_conflict_visible: true
  harmed_reader_if_coverage_is_false_visible_or_explicit_absence: true
  beneficiary_of_false_coverage_visible_or_explicit_absence: true
  future_reader_or_route_consumes_coverage: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_phase_trigger: true
  no_raw_staff_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

The lens fails if entry comes from generic staffing pressure, fixed chronology, raw staff count, a dashboard warning, or a local call-sheet problem with no later reader contradiction.

2. Docket keeps locks separate

Phantom Coverage Docket or equivalent must keep four locks separate:

docket_locks_required:
  coverage_lock:
    source_row: <row id>
    official_coverage_claim: <claim>
    covered_lane_or_obligation: <lane or obligation>
    coverage_reader_scope: <reader scope>
  subject_lock:
    challenged_subject: <subject or explicit_absence>
    subject_state_elsewhere: <state>
    proof_of_conflict: <proof or explicit_absence>
  reader_lock:
    harmed_reader_if_false: <reader or explicit_absence>
    beneficiary_of_false_coverage: <actor or explicit_absence>
  future_lock:
    future_reader_or_route: <future consumer>
    route_effect_if_unresolved: <effect>

The lens fails if the row stores only coverage mismatch, staff missing, or proxy problem.

3. Rite assignment is explicit

Phantom Coverage Crosscheck or equivalent must require source row, official claim, covered lane or obligation, challenged subject or absence, conflict proof, harmed reader, beneficiary, future reader, handler, support, and selected posture.

4. Branches diverge by posture and reader scope

At least six branch families must be playable or explicitly blocked by state:

  • verify_named_worker;
  • convert_to_proxy_receipt;
  • split_lane_and_seat;
  • publish_absent_coverage;
  • quarantine_covered_route;
  • accept_limited_coverage;
  • harden_phantom_default.

Each constructive branch must include relief, cost, future route effect, and remaining reader scope.

5. Branch assertions

branch_assertions:
  verify_named_worker:
    future_effect_any: [verified_scope_only]
    forbidden: [verified_worker_as_universal_coverage]
  convert_to_proxy_receipt:
    future_effect_any: [proxy_only, lawful_only]
    forbidden: [proxy_as_physical_presence]
  split_lane_and_seat:
    future_effect_any: [split_reader_required]
    forbidden: [one_body_covers_lane_and_seat_for_all_readers]
  publish_absent_coverage:
    future_effect_any: [addendum_required, public_only]
    forbidden: [public_addendum_as_private_clean_repair]
  quarantine_covered_route:
    future_effect_any: [route_blocked, recovery_only]
    forbidden: [contaminated_coverage_clean_use]
  accept_limited_coverage:
    future_effect_any: [limited_use_receipt]
    forbidden: [limited_receipt_crosses_readers]
  harden_phantom_default:
    event_seen_or_armed: storyteller.event.phantom_coverage_default.v1
    future_effect_any:
      [route_blocked, costlier, sponsor_only, lawful_only, recovery_only, ending_scar]

Progress metric

phantomCoverageCrosscheckProgress = 0..8:

  • 0: no official coverage contradiction.
  • 1: coverage source row and official claim visible.
  • 2: challenged subject or explicit absence visible.
  • 3: conflict proof, harmed reader, beneficiary, and future consumer visible.
  • 4: phantom coverage docket enters play.
  • 5: crosscheck rite offers explicit posture assignment.
  • 6: at least three constructive branches produce distinct scoped scars.
  • 7: hardening/default mutates future play.
  • 8: replay proves scoped repair and hardening with no universal clean coverage.

Replay proof contract

lens_id: storyteller.lens.phantom_coverage_crosscheck.v1
session_id: lens-phantom-coverage-crosscheck-v1-<timestamp>
entry_state:
  trigger_kind: state_pressure
  official_coverage_claim_visible: true
  coverage_source_row_visible: true
  challenged_subject_visible_or_explicit_absence: true
  future_reader_or_route_consumes_coverage: true
offered:
  card: storyteller.card.phantom_coverage_docket.v1
  rite: storyteller.rite.phantom_coverage_crosscheck.v1
resolved:
  selected_posture: <posture>
  coverage_state_after: <state>
  challenged_subject_state_after: <state or explicit_absence>
  future_reader_or_route_effect: <effect>
default:
  event_seen_or_armed: storyteller.event.phantom_coverage_default.v1
assertions:
  - coverage_contradiction_drives_entry
  - coverage_subject_reader_and_future_locks_are_separate
  - constructive_repair_keeps_reader_scope
  - hardening_mutates_future_play
  - no_universal_clean_coverage

Fails if

  • coverage crosscheck opens without a later reader contradiction;
  • proxy coverage counts as physical presence;
  • lawful-only presence counts as public safety;
  • a protected subject is double-counted as free floor labor;
  • explicit absence is treated as coverage;
  • limited coverage crosses reader scopes;
  • future play consumes covered-lane state without docket, rite, or hardening scar.