Single Exit Protection Allocation Lens
Observable promise
The opening’s one exit allowance must protect exactly one actual candidate and leave exactly three named displacement exposures. The same assigned person can be protected truthfully or wrapped in false voluntary copy; the latter protects a body from the stage while creating consent debt.
Source and gate oracle
source: storyteller
source_event: storyteller-event-02-first-prescription
exit_allowance_before: 1
opening_program_required: true
materializing_rites:
- storyteller-rite-03-holy-daylight
- storyteller-rite-04-underground-prince
- storyteller-rite-05-glass-newcomer
exit_allowance_after: 0The lens fails if the clause can be spent before a real opening programme, if more than one target is protected, or if a generic dashboard count substitutes for gameplay state.
Exact-assignment oracle
slot-clause requires the real exit clause. slot-target accepts exactly four person IDs. Every selected option carries the complete two-slot assignment map, and runtime enforcement rejects a target-option mismatch, a missing in-hand card, or a missing choice.
Branch oracle
| Target | Truthful branch | False-voluntary branch | Required displaced count |
|---|---|---|---|
| Li Xingtong | protect_li_xingtong_truthfully | protect_li_xingtong_as_fake_voluntary_exit | 3 |
| Qi Jin | protect_qi_jin_truthfully | protect_qi_jin_as_fake_voluntary_exit | 3 |
| Mu Ning | protect_mu_ning_truthfully | protect_mu_ning_as_fake_voluntary_exit | 3 |
| Yu Lan | protect_yu_lan_truthfully | protect_yu_lan_as_fake_voluntary_exit | 3 |
All eight branches must preserve the target card, set one target flag, set three complementary displaced flags, consume the allowance, and gain the docket. Truthful branches set consent.not_invented; false-voluntary branches set consent.falsely_attributed and increase consent debt.
Reachability oracle
Eight lens-scoped Game CLI replays cover all target/posture combinations with no virtual slot assignments. Li Xingtong is selected after the holy opening, Qi Jin after the underground opening, Mu Ning after the newcomer opening, and Yu Lan after the holy/blackbox/fan-oxygen chain grants her real witness card.
Downstream readback oracle
storyteller-event-10-sponsor-review requires the allocation-recorded flag and the docket. Its metadata names the target and displaced flag families and expects cardinality 1 + 3; the stability sample cannot silently erase the three candidates who were not protected.
Authority and canon boundary
- Offstage is not dead, deleted, recruited, owned, or generally discharged.
- False voluntary copy is not consent.
- The rite grants no voice, identity, archive, memorial, medical, or naming authority.
- Only
source: storytellerobjects may satisfy this lens.