Replacement Saint Liability Readback Lens / 替代圣女责任回读 Lens

This lens observes whether Replacement Saint Liability Readback and Replacement Saint Liability prevent a substitute-saint identity from becoming clean universal proof merely because one claimant found a fragile candidate.

The character lens for Mu Ning Storyline proves the worker route. This lens proves the system contract: substitute-saint liability must expose source saint pressure, candidate or explicit absence, claimant surfaces, proof or authority, selected posture, liability state after, harmed reader or route, and future effect before downstream play can cite the replacement identity.

Observable promise

A passing implementation must show:

• saint-facing source pressure and preserved source row;
• substitute candidate, candidate state, or explicit absence;
• at least two claimant surfaces;
• primary claimant and harmed or excluded claimant;
• proof, handler, authority, or explicit absence;
• selected readback posture;
• liability state after;
• future reader or route effect;
• durable default capture when the replacement identity is hidden, sampled, packaged, or falsely accepted as clean.

The lens fails if implementation stores only candidate present, sponsor paid, audience calmed, protected, sample used, handled, or route unlocked.

Entry oracle

entry_state_required:
  trigger_kind: state_pressure
  saint_facing_pressure_present: true
  source_row_preserved_or_explicit_absence: true
  substitute_candidate_visible_or_explicit_absence: true
  claimant_surfaces_min: 2
  docket_or_expected_docket_present: true
  protection_or_sample_path_visible: true
  future_route_effect_if_unresolved_present: true
  player_can_readback_package_quarantine_publish_hold_absence_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_claimant_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

The lens fails if entry comes from fixed turn, fixed day, weekly cadence, raw claimant count, dashboard state, lens-health status, or generic newcomer flavor.

Docket oracle

Glass Newcomer Liability Docket must keep source pressure, substitute candidate, claimant surfaces, support, posture, and future effect separate.

replacement_saint_readback_required:
  saint_pressure: saint_continuity | audience_floor | sponsor_relief | memorial_edit | schedule_salvage | blackout_scar | fan_oxygen | archive_custody | equivalent
  source_row_id: <row id or explicit_absence>
  substitute_candidate: mu_ning | other_candidate | explicit_absence
  candidate_state: available | drafted | exposed | protected | sampled | captured | hostile | unavailable | explicit_absence
  claimant_surfaces:
    - sponsor
    - schedule_board
    - saint_continuity
    - inspector
    - archive
    - fan_public
    - editor
  primary_claimant: <reader or desk>
  harmed_or_excluded_claimant: <reader route or explicit_absence>
  proof_or_authority_or_absence: <manager shield | inspector seal | source chain | public receipt | editor proof | broadcast authority | explicit_absence>
  selected_readback_posture: protective_readback | sponsor_package | public_coercion_witness | inspector_quarantine | editor_sample_block | schedule_substitution_hold | explicit_candidate_absence | replacement_default_capture
  liability_state_after: protected_route_asset | sponsor_substitution_contract | public_coercion_witness | inspector_quarantine | sample_blocked | schedule_hold | explicit_absence_recorded | identity_hardened | glass_sample_extracted | route_asset_missed
  future_reader_or_route_effect: recruitable_with_cost | sponsor_only | public_only | lawful_only | editor_blocked | schedule_held | costlier | blocked | hostile | captured | recovery_only

The docket fails if it records replacement liability without candidate state, claimant surfaces, proof or absence, selected posture, and future effect.

Hearing oracle

Glass Newcomer Protection Hearing must expose these branch families:

• protective_readback
• sponsor_package
• public_coercion_witness
• inspector_quarantine
• editor_sample_block
• schedule_substitution_hold
• explicit_candidate_absence
• replacement_default_capture

Each branch must include relief_any, cost_any, and future_effect_any. No branch may allow one replacement identity to satisfy all sponsor, schedule, saint-continuity, inspector, archive, editor, fan, production, and route-asset readers cleanly.

Default oracle

Replacement Saint Summons must record:

event_payload:
  event: storyteller.event.replacement_saint_summons.v1
  trigger_kind: state_pressure
  source_saint_pressure_or_absence: <source pressure or explicit_absence>
  substitute_candidate_or_absence: <candidate or explicit_absence>
  default_actor: sponsor | schedule_board | saint_continuity | inspector | archive | fan_public | editor | management | equivalent
  hidden_or_missing_protection_input: handler | proof | authority | public_witness | refusal | candidate_absence | equivalent
  false_clean_claim: replacement_identity_is_clean_public_proof
  liability_state_after: replacement_default_capture | identity_hardened | glass_sample_extracted | route_asset_missed | recovery_only
  harmed_reader_or_route: <reader or route>
  future_reader_or_route_effect: blocked | hostile | sponsor_only | public_only | lawful_only | editor_blocked | costlier | recovery_only
  counter_deltas_min: 3

The default fails if it is only audience mood, sponsor heat, or a missed character beat without source pressure, candidate or absence, false-clean claim, harmed reader, future effect, and counter deltas.

Progress metric

replacementSaintLiabilityReadbackProgress = 0..8:

• 0: no saint-facing pressure is visible.
• 1: source saint pressure and source row or explicit absence are visible.
• 2: substitute candidate or explicit absence is visible.
• 3: two or more claimant surfaces are visible.
• 4: proof, authority, handler, or explicit absence is visible.
• 5: Glass Newcomer Liability Docket separates source, candidate, claimant, support, posture, and future locks.
• 6: hearing resolves a branch with relief, cost, and future effect.
• 7: future reader or route consumes liability state.
• 8: hidden, false, captured, sampled, or universalized replacement identity arms durable default capture with recovery scar.

Non-goals

• Not a Mu Ning recruitment checklist.
• Not a generic artist-care lens.
• Not a saint persona consent lens.
• Not a sponsor public-relations lens.
• Not valid if one replacement identity has no claimant surface, proof or absence, selected posture, cost, and future mutation.