Attachment Monitor Substitution Receipt

Attachment Monitor Substitution Receipt turns a monitor swap into visible custody state.

Ruling Attachment Compliance already asks whether a served ruling has its monitor, proof bridge, and channel limits. This mechanism answers the next question: when that monitor is later replaced, reused, borrowed, or captured, what proof shows that the substitute can carry the same authority?

Entry conditions

entry_conditions:
  trigger_kind: state_pressure
  source_attachment_row_visible: true
  original_monitor_visible: true
  replacement_monitor_or_absence_visible: true
  monitor_authority_scope_visible: true
  substitution_reason_visible: true
  harmed_or_omitted_reader_visible: true
  future_reader_or_route_consumes_monitor_state: true
  player_response_available: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_monitor_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

Valid pressures include a stale public witness, captured archive signer, unavailable inspector, sponsor-bought checksum, route asset moved away from the watcher, lawful channel changed, or a monitor asked to cover a second ruling attachment.

State object

attachment_monitor_state:
  source_attachment_row: <row>
  original_monitor: <monitor>
  replacement_monitor_or_absence: <monitor or explicit_absence>
  authority_scope_or_absence: same_attachment | narrowed_reader | split_reader | temporary_substitute | emergency_only | no_transfer | explicit_absence
  substitution_reason: monitor_unavailable | monitor_captured | scope_changed | route_asset_moved | lawful_channel_changed | public_receipt_challenge | sponsor_pressure | equivalent
  harmed_or_omitted_reader: <reader or explicit_absence>
  monitor_state_after: retained | substituted_scoped | split_required | public_notice_required | quarantined | monitor_debt | refused_with_scar | false_clean_substitute | recovery_only
  future_reader_or_route_effect: accepted_with_original | accepted_with_substitute_cost | split_required | public_recheck_required | bridge_required | blocked | costlier | recovery_only

The state fails if the monitor is stored only as an updated assignment.

Branch contract

Accepted branch families:

1. retain_original_monitor
2. authorize_replacement_monitor
3. split_monitor_scope
4. publish_monitor_substitution
5. quarantine_monitor_chain
6. convert_to_monitor_debt
7. refuse_substitution_with_scar
8. false_monitor_substitution_default

Every constructive branch must produce one relief, one cost, and one future-reader or route effect.

Counter surfaces

Recommended deltas include:

• monitor_authority_legibility
• monitor_substitution_pressure
• attachment_compliance
• attachment_breach_risk
• public_receipt_distrust
• inspection_heat
• archive_debt
• sponsor_gate_pressure
• handler_burden
• route_asset_pressure
• future_route_acceptance
• future_recovery_cost

Failure cases

False Monitor Substitution Default fires or arms when:

• a replacement monitor is accepted without source attachment row;
• the original monitor is hidden;
• replacement authority scope is absent;
• an omitted reader is hidden;
• sponsor, public, lawful, archive, or editor channel authority is treated as interchangeable;
• a future route consumes the substitute as clean universal monitor proof.