Proof Wall Pinning Custody Lens / 举证墙钉选羁押 Lens

This lens observes whether 举证墙钉选羁押线 and 举证墙钉选羁押机制 correctly turn proof visibility into playable custody.

The oracle is: a proof wall is not clean because one proof is visible. Storyteller must show what proof was pinned, what proof was omitted or explicitly absent, who owned the pin, which reader consumed the wall, and what future route state changed because of that visibility.

This lens intentionally fills the seam between existing proof surfaces. 举证负荷再分配 Lens asks who carries proof duty. 裁定读者冲突 Lens asks which readers can accept a source. 读者反驳通知 Lens asks whether an affected party can answer. 路线装配兼容 Lens asks whether several assets can coexist. This lens asks what the next reader actually saw.

Primary observation link

This lens observes:

• 举证墙钉选羁押线;
• 举证墙钉选羁押机制;
• 举证墙钉选案卷;
• 举证墙钉选复核;
• 举证墙遮蔽默认;
• 举证负荷再分配线;
• 裁定读者冲突线;
• 读者反驳通知线;
• 路线装配兼容线;
• 复原追偿搁架线;
• Route Assets and Custody;
• Broadcast Reality;
• Archive Custody.

It is observed through:

• 举证墙钉选案卷;
• 举证墙钉选复核;
• 举证墙遮蔽默认.

Observable promise

A satisfying implementation must prove all of the following:

• the proof wall is an in-world public, lawful, sponsor, archive, artist-boundary, route-loadout, or management-closure surface;
• a future reader is about to consume that wall;
• the visible pin has a proof id or explicit absence;
• the visible pin has a proof state and scope;
• the pin owner or explicit absence is visible;
• the occluded proof or explicit absence is visible;
• the harmed or excluded reader is visible;
• the player can select a branch posture;
• the future route effect changes;
• default occlusion is durable when the wall is underfilled or false-front.

The lens fails if a proof wall is treated as a neutral evidence inventory, dev checklist, dashboard, governance board, or raw proof-count gate.

Entry oracle

A valid entry must come from state pressure only:

entry_state_required:
  trigger_kind: state_pressure
  wall_surface_present: true
  future_reader_present: true
  visible_pin_candidate_present_or_explicit_absence: true
  occluded_or_absent_proof_present: true
  pin_owner_or_explicit_absence_present: true
  reader_specific_scope_or_conflict_visible: true
  future_route_or_reader_consumes_wall_state: true
  player_can_pin_scope_rotate_split_mark_quarantine_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_proof_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

The lens fails if entry depends on fixed turn count, fixed day/week interval, chapter quota, raw proof count, dashboard status, lens health, generic evidence review, or generic proof completeness.

Required observable content

Proof-wall docket

举证墙钉选案卷 or equivalent must record:

proof_wall_docket_required:
  wall_surface: public_wall | lawful_wall | sponsor_brief | archive_pinboard | artist_boundary_slate | route_loadout_surface | management_closure_surface | equivalent
  future_reader: public_fan | lawful_archive | sponsor | artist_boundary | claimant | worker_testimony | route_asset | management | equivalent
  visible_pin:
    proof_id: <proof row or explicit_absence>
    proof_kind: receipt | checksum | witness_statement | archive_copy | sponsor_release | public_counterline | recovery_shelf | rebuttal_notice | route_asset | equivalent
    proof_state_before: clean | scarred | lawful_only | public_only | sponsor_only | artist_boundary_only | split | contradiction_pending | recovery_only | captured | hostile | explicit_absence | equivalent
    pin_owner: producer | archive | sponsor | public_witness | editor | artist_proxy | worker_carrier | claimant | inspector | explicit_absence | equivalent
    scope_claimed: public | lawful | sponsor | artist_boundary | route_unlock | closure | recovery | equivalent
  occluded_or_absent_proof:
    proof_id: <proof row or explicit_absence>
    omission_reason: scoped_out | hostile | unsafe | sponsor_suppressed | lawful_sealed | public_unready | artist_boundary | carrier_refusal | not_yet_recovered | explicit_absence | equivalent
    harmed_or_excluded_reader: <reader or explicit_absence>
  pin_state_after: pinned | scoped | rotated | split_wall | marked_unread | quarantined | false_front | default_occluded | equivalent
  future_route_effect: accepted_with_scope | public_only | lawful_only | sponsor_only | artist_boundary_only | bridge_required | contradiction_pending | route_costlier | blocked | captured | hostile | recovery_only | equivalent

The lens fails if the docket records only proof_visible, proof_hidden, evidence_ready, board_done, wall_complete, or all_readers_informed.

Pinning review rite

举证墙钉选复核 or equivalent must require:

pinning_review_required:
  source_docket: storyteller.card.proof_wall_pinning_docket.v1
  wall_surface: <surface>
  future_reader: <reader>
  visible_pin: <proof or explicit_absence>
  visible_pin_state_before: <state>
  pin_owner_or_absence: <owner or explicit_absence>
  visible_pin_scope: <scope>
  occluded_or_absent_proof: <proof or explicit_absence>
  harmed_or_excluded_reader: <reader or explicit_absence>
  selected_posture: pin_public_proof | pin_lawful_proof | pin_sponsor_proof | pin_artist_boundary_proof | split_wall | mark_unread_or_partial | quarantine_pin | allow_default_occlusion
  wall_state_after: <state>
  future_route_effect: <effect>
  counter_deltas:
    relief: []
    cost: []
    future: []

The lens fails if public proof becomes lawful truth without bridge, lawful proof becomes public truth without counterline, sponsor proof becomes universal settlement, artist-boundary proof becomes route consent, or split wall becomes clean universal acceptance.

Occlusion default event

举证墙遮蔽默认 or equivalent must fire or arm when:

• a future reader consumes a wall without a docket row;
• visible pin has no owner or explicit absence;
• material omitted proof has no omission reason;
• harmed reader is hidden;
• sponsor/lawful/public/artist/recovery proof is mis-scoped as universal;
• split wall is reported as clean closure;
• quarantined proof is consumed as fresh proof.

Required payload:

occlusion_default_required:
  event: storyteller.event.proof_wall_occlusion_default.v1
  source_docket_or_absence: storyteller.card.proof_wall_pinning_docket.v1 | explicit_absence
  wall_surface: <surface>
  capturing_reader: <reader or explicit_absence>
  visible_front:
    proof_id: <proof or explicit_absence>
    false_scope_claim: all_readers_informed | proof_complete | sponsor_settled_all | lawful_truth_public | public_truth_lawful | artist_boundary_waived | recovery_fresh | split_clean | equivalent
  occluded_or_absent_proof:
    proof_id: <proof or explicit_absence>
    omission_reason_or_absence: <reason or explicit_absence>
    harmed_or_excluded_reader: <reader or explicit_absence>
  pin_owner_state_after: exposed | captured | hostile | absent | false_owner | overdrawn | protected_with_cost | explicit_absence | equivalent
  wall_state_after: false_front | default_occluded | captured | contradiction_pending | quarantined_late | recovery_only | equivalent
  future_route_effect: captured | hostile | blocked | contradiction_pending | public_only | lawful_only | sponsor_only | artist_boundary_only | route_costlier | recovery_only | equivalent
  counter_deltas_min: 3

A default can lower immediate pressure only as false or captured relief. It must never resolve as clean success.

Branch divergence oracle

A satisfying implementation must prove at least six branch families, including a default branch.

Branch family	Required relief	Required cost	Required future effect
Public pin	public legitimacy or anti-capture visibility improves	sponsor pressure, witness exposure, public contradiction, or inspection heat rises	public-only, accepted-with-scope, bridge-required, or contradiction-pending
Lawful pin	admissibility, custody clarity, or fraud resistance improves	bureau debt, public delay, public distrust, or archive debt rises	lawful-only, checksum-required, bridge-required, or accepted-with-scope
Sponsor pin	slot, funding, stop-loss, or management pressure improves	contract capture, public distrust, artist-boundary risk, or claimant hostility rises	sponsor-only, captured, unwind-required, or accepted-with-scope
Artist-boundary pin	refusal, voice/body integrity, or coercion resistance improves	route unlock, fan expectation, sponsor promise, or management pressure worsens	artist-boundary-only, blocked, route-costlier, or recovery-only
Split wall	incompatible readers remain playable	source ambiguity, handler burden, archive debt, or public contradiction rises	split-wall, bridge-required, contradiction-pending, or route-costlier
Mark unread	false-front use drops	route delay, inspection heat, public distrust, or handler burden rises	annex/checksum/counterline/callback required
Quarantine pin	fraud, drift, false front, or coercion risk falls	route blocks, sponsor pressure, fan resentment, or recovery cost rises	blocked, audit-required, or recovery-only
Default occlusion	immediate pressure may fall falsely	occluded proof pressure, hostility, false-front, license pressure, or archive debt rises	captured, hostile, blocked, contradiction-pending, or recovery-only

No branch may create universal acceptance across public, lawful/archive, sponsor, artist-boundary, claimant, worker, route-asset, and management readers.

Counter contract

Every valid or default branch must mutate at least three surfaces:

counter_deltas_required:
  relief: at_least_one_for_non_default
  cost: at_least_one
  future_reader_or_route_effect: at_least_one

Relevant surfaces:

• proof_wall_integrity
• pin_owner_exposure
• occluded_proof_pressure
• future_reader_acceptance
• public_receipt_legitimacy
• public_receipt_distrust
• archive_signature_legitimacy
• archive_debt
• sponsor_stop_loss_pressure
• contract_capture
• artist_refusal_respected
• artist_refusal_violation
• voice_integrity_risk
• claimant_hostility
• worker_testimony_safety
• handler_burden
• inspection_heat
• broadcast_reality_drift
• route_asset_pressure
• future_recovery_cost

Failure and missability gates

The lens fails when implementation:

• treats the proof wall as a UI checklist, dev board, dashboard, governance board, or evidence inventory;
• uses fixed turn count, fixed day/week interval, raw proof count, dashboard state, or lens-health state as trigger;
• hides wall surface;
• hides future reader;
• hides pin owner or explicit absence;
• hides occluded proof or explicit absence;
• hides harmed reader or explicit absence;
• pins recovery-only or quarantined proof as fresh;
• treats sponsor proof, lawful proof, public proof, artist-boundary proof, recovery proof, and route proof as the same clean proof;
• lets the future route consume a proof wall without scoped state;
• creates no durable default scar.

Recovery is valid only through visible scar: late docket, repin with scope, public counterline, lawful annex, sponsor unwind, artist-boundary correction, split wall, marked-unread bridge, pin quarantine, route-costlier conversion, or recovery-only conversion.

Replay evidence shape

lens_id: storyteller.lens.proof_wall_pinning_custody.v1
storyline_id: storyteller.storyline.proof_wall_pinning_custody.v1
mechanic_id: storyteller.mechanic.proof_wall_pinning_custody.v1
session_id: lens-proof-wall-pinning-custody-v1-<timestamp>
seed: <deterministic-seed>
entry_state:
  trigger_kind: state_pressure
  wall_surface_present: true
  future_reader_present: true
  visible_pin_candidate_present_or_explicit_absence: true
  occluded_or_absent_proof_present: true
  pin_owner_or_explicit_absence_present: true
  reader_specific_scope_or_conflict_visible: true
  future_route_or_reader_consumes_wall_state: true
  no_fixed_turn_trigger: true
wall_row:
  card: storyteller.card.proof_wall_pinning_docket.v1
  wall_surface: <surface>
  future_reader: <reader>
  visible_pin: <proof or explicit_absence>
  visible_pin_state_before: <state>
  pin_owner: <owner or explicit_absence>
  occluded_or_absent_proof: <proof or explicit_absence>
  harmed_or_excluded_reader: <reader or explicit_absence>
offered:
  rite: storyteller.rite.proof_wall_pinning_review.v1
branch_runs:
  valid_branch:
    selected_posture: pin_public_proof | pin_lawful_proof | pin_sponsor_proof | pin_artist_boundary_proof | split_wall | mark_unread_or_partial | quarantine_pin
    wall_state_after: pinned | scoped | rotated | split_wall | marked_unread | quarantined
    visible_pin_scope: <scope>
    future_route_effect: accepted_with_scope | public_only | lawful_only | sponsor_only | artist_boundary_only | bridge_required | contradiction_pending | route_costlier | blocked | recovery_only
    counter_deltas:
      relief: []
      cost: []
      future: []
  default_branch:
    event_seen_or_armed: storyteller.event.proof_wall_occlusion_default.v1
    capturing_reader: <reader>
    false_scope_claim: <claim>
    occluded_or_absent_proof: <proof or explicit_absence>
    harmed_or_excluded_reader: <reader or explicit_absence>
    wall_state_after: false_front | default_occluded | captured | contradiction_pending | recovery_only
    future_route_effect: captured | hostile | blocked | contradiction_pending | route_costlier | recovery_only
    counter_deltas:
      relief: []
      cost: []
      future: []
assertions:
  - primary_links_exist
  - entry_is_state_triggered
  - proof_wall_is_in_world_not_dashboard
  - wall_surface_visible
  - future_reader_visible
  - visible_pin_state_scope_and_pin_owner_visible
  - occluded_proof_or_explicit_absence_visible
  - harmed_reader_or_explicit_absence_visible
  - branch_outcomes_diverge
  - success_has_cost
  - default_is_durable
  - no_universal_clean_proof
  - future_reader_consumes_wall_state
  - no_fixed_turn_day_week_raw_count_dashboard_or_lens_health_trigger

Non-goals

• Not a governance/process note.
• Not a dev task board, backlog, dashboard, or lens-health surface.
• Not an evidence inventory.
• Not a replacement for proof burden, ruling reader collision, rebuttal notice, route loadout compatibility, or recovery indemnity.
• Not a new verdict.
• Not valid if every reader accepts the same clean pinned proof for free.
• Not valid unless future play consumes the wall state.