Whitebox Screening Witness Binding Lens

This lens checks that pre-air whitebox attendance does not become universal compliance approval or no-knowledge by administrative convenience. It preserves the original three-gate chain, binds each attendee to the exact cut and evidence rows seen, keeps signature, plural testimony, objection, refusal, and absence non-equivalent, and changes what later sponsor, inspector, broadcast, archive, or legal readers may claim.

Entry Oracle

entry_state:
  trigger_kind: state_pressure
  prepared_whitebox_cut_visible: true
  source_cut_id_and_version_visible: true
  audit_seal_row_or_explicit_absence_visible: true
  fan_oxygen_ledger_row_or_explicit_absence_visible: true
  uncut_vocal_row_or_explicit_absence_visible: true
  plural_crowd_affidavits_row_or_explicit_absence_visible: true
  at_least_two_reader_families_visible_or_explicit_absence: true
  per_attendee_version_or_watermark_map_visible: true
  acknowledgement_objection_refusal_or_absence_visible: true
  future_reader_cites_or_denies_screening_knowledge: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_whitebox_inventory_trigger: true
  no_dashboard_or_lens_health_trigger: true

Checks

1. Source Gates Remain Independent

source_gate_sequence:
  cut_posture:
    source: storyteller-rite-18-whitebox-edit
    choices: [format_as_crime_cut, company_training_cut]
  presentation_posture:
    source: storyteller-event-15-whitebox-screening
    choices: [declare_limited_risk_drill, continue_synchronized_watermark]
  witness_posture:
    source: storyteller-rite-19-compliance-screening
    choices: [bind_han_signature, bind_yulan_testimony]
  legal_compound_outcomes: 8
  readback_does_not_replace_source_gates: true

2. Witness Ledger Preserves Versioned Knowledge

The docket must retain source cut/version, the four described evidence rows or explicit absence, all named attendees or explicit absence, a per-attendee version map, each source gate posture, acknowledgement/testimony/refusal, omitted reader, future use or denial, selected readback posture, after-state, future-reader effect, and counter deltas. Attendance, watermarking, signature, and testimony must never be treated as universal consent.

3. Readback Branches Diverge

Required branch families are bind_named_version_record, preserve_limited_drill_knowledge, attach_named_acknowledgement_or_refusal, split_screening_versions, open_public_observer_copy, quarantine_unbound_screening, false_clean_screening_denial, and the future_effect_any sentinel. Each selectable branch must name relief, cost, at least three counter deltas, after-state, and future-reader effect.

4. False-Clean Denial Mutates Future Play

A false-clean default must preserve the missing or overbroad cut claim, evidence map, attending readers, omitted reader, and capturing route, then set false_clean_denial, write at least three counter changes, and make future evidence recovery_only.

5. Neighboring Lanes Stay Separate

This lens does not observe the optional Qiao Sen whitebox-inspector package, ST-SCALE-07 evidence vault, ST-SCALE-10 consent desk, auditor seat-map attendance, cutroom priority, archive custody selection, or post-air reality drift. It ends before the second-chapter briefing and archive-silence readers.

Progress Metric

Satisfied when the Markdown/TypeScript pair, source-gate bindings, focused docket/rite/default content, and two lens-scoped Game CLI replays prove both a named-version binding and a false-clean recovery-only outcome using exact non-virtual assignments.