Memorial Voice Probate Residue / 纪念声权验讫残留机制

Memorial Voice Probate Residue is the second-order execution mechanism for 纪念声权验讫机制. It does not re-open the first probate question. It asks whether a later broadcast, route, sponsor package, fan vigil, cutroom patch, archive citation, or pirate relay is allowed to consume the already-recorded probate boundary.

The mechanic exists because Iris Vale is still dead after probate. A lawful row, public vigil row, sponsor row, checksum row, pirate row, quarantine row, or false-probate recovery row is not universal permission. It is a scarred boundary that future readers may cite, overclaim, surcharge, reject, or breach.

Observable surfaces

• Iris 声权验讫残留账本 records source probate row, accepted boundary, excluded readers, future consumer, claimed use, proof/carrier, and residue state.
• Iris 声权验讫残留听证 forces the player to enforce, convert, bridge, repackage, repair, quarantine, burn, or default the later use.
• Iris 声权边界违约 creates durable scars when later play overclaims the source row.

Design promise

A valid implementation must preserve the original probate row, name the later consumer, compare claimed use against the allowed boundary, show excluded or delayed readers, and create a durable future effect. It fails if the earlier probate outcome becomes a clean key.

State-triggered entry

Open this mechanism only when all are true:

entry_state:
  trigger_kind: state_pressure
  source_probate_row_present: true
  source_probate_result_any:
    - custodian_chain
    - public_vigil_probate
    - sponsor_packaged_legacy
    - editor_masked_checksum
    - pirate_echo_probate
    - quarantine_or_suppression
    - false_probate_recovery
    - equivalent
  source_probate_has_boundary: true
  source_probate_has_cost_or_scar: true
  future_voice_consumer_present: true
  claimed_future_use_can_change_route_or_pressure: true
  at_least_two_residue_readers_live: true
  boundary_fit_unresolved_or_contested: true
  player_can_enforce_convert_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

Valid entry sources include a later show slot asking for Iris’s voice, a sponsor requesting a clean legacy cut, a fan mandate demanding the public version, a cutroom trying to reuse a checksum, an archive citation row, a pirate echo resurfacing, a quarantined copy being reopened, or a stale dispatch attempting to execute an old voice instruction.

Required state shape

probate_residue_state:
  source_probate_row_id: <stable row id>
  source_branch: custodian_chain | public_vigil_probate | sponsor_packaged_legacy | editor_masked_checksum | pirate_echo_probate | quarantine_or_suppression | false_probate_recovery | equivalent
  accepted_boundary: lawful_only | public_only | sponsor_gated | checksum_required | pirate_scarred | quarantined | recovery_only | split_reader | equivalent
  excluded_or_delayed_readers: []
  custodian_or_absence: mara_fen | explicit_absence | other
  custodian_state_after_source: protected | hostile_witness | missing | suppressed | explicit_absence | equivalent
  voice_state_after_source: probated | copied | masked | pirated | quarantined | suppressed | scarred | recovery_only | equivalent
  scar_or_cost_after_source: <scar>
  future_consumer: archive | sponsor | fan_public | cutroom | pirate_relay | broadcast_reality | route_asset | lawful_reader | equivalent
  claimed_future_use: memorial_clip | route_unlock | sponsor_legacy | public_vigil | cutroom_patch | lawful_citation | pirate_relay | quarantine_reopen | equivalent
  boundary_fit: inside_scope | adjacent_needs_annex | overreach | contradicts_source | unknown

The source row must be visible in later play. The mechanic fails if it stores only voice cleared, probate passed, permission obtained, or Iris approved.

Branch families

At least five branch families must be playable or explicitly blocked by state, including the default branch.

Branch	Relief	Cost	Future effect
Enforce original boundary	prevents overclaim and preserves source row	route narrows, sponsor/fan/cutroom pressure rises	future use must cite exact boundary
Lawful annex conversion	archive and inspection confidence improve	delay, archive debt, public grief or sponsor objection rises	lawful annex required for later readers
Public acknowledgement annex	fan oxygen and public receipt improve	witness exposure, sponsor pressure, lawful surcharge rises	public-only or public-plus-lawful bridge required
Sponsor repackage with discoverability	slot or stop-loss pressure improves	contract capture, public distrust, future unwind cost rises	sponsor use remains discoverable and surchargeable
Checksum repair	cutroom legibility and continuity improve	edit debt, source ambiguity, archive distrust rises	checksum or annotation required forever
Pirate trace quarantine	public capture breaks or unsafe echo is contained	infringement heat, pirate exposure, fan resentment or legal hostility rises	pirate-scarred or quarantined state persists
Burn or suppress copy	duplication and false ownership risk fall	route availability, fan oxygen, sponsor value, or recovery options worsen	substitute proof or recovery-only route required
Boundary breach default	no clean relief	false clean hardens, wrong reader binds, custodian harm or route block rises	blocked, costlier, split-pending, lawful-only, public-only, sponsor-only, checksum-required, quarantine-only, or recovery-only

Non-equivalence rules

• A custodian-chain row is not public grief consent.
• A public-vigil row is not lawful admissibility.
• A sponsor-packaged row is not public legitimacy.
• A checksum row is not raw custody.
• A pirate-echo row is not clean distribution.
• A quarantine row is not silent deletion.
• A recovery row after false probate is not restored permission.

Counter surfaces

Every non-default resolution must change at least one relief state, one cost state, and one future reader or route gate.

Common counters and durable states:

• voice_integrity
• memorial_integrity
• custody_clarity
• archive_signature_legitimacy
• archive_debt
• inspection_heat
• fan_oxygen
• fan_oxygen_resentment
• public_receipt_legitimacy
• public_receipt_distrust
• sponsor_stop_loss_pressure
• contract_capture
• source_ambiguity
• edit_debt
• pirate_exposure
• echo_infringement_risk
• route_asset_pressure
• future_route_acceptance
• probate_residue_scope
• voice_boundary_breach_risk

Default rule

Iris 声权边界违约 is armed when a later consumer hides the source row, deletes excluded readers, claims a narrow boundary as universal permission, sells a public or pirate row as lawful proof, treats checksum as raw custody, reopens quarantine without proof, or lets sponsor packaging erase discoverability.

The default must mutate future play. It cannot be only scandal prose, lost money, or bad mood.

Integration seams

• Iris Vale 纪念声权验讫线 creates the source row this mechanism consumes.
• Archive Voice Custody reads lawful annex, source row, and chain proof.
• Route Assets and Custody reads route narrowing, blocked route, and recovery-only route states.
• Fan Oxygen reads public acknowledgement, grief suppression, and fan resentment states.
• Broadcast Reality reads whether the later use matches a visible boundary or drifts into false ownership.

Non-goals

• Not a second probate hearing that overwrites the first row.
• Not a generic aftermath scene.
• Not a clean permission token.
• Not a resurrection or living-consent route for Iris.
• Not a fixed-turn, fixed-day, raw-count, dashboard, or lens-health trigger.