Offstage Testament Intake Boundary / 台下遗嘱收件边界

This mechanic prevents an intake desk from silently becoming a probate court, consent authority, archive owner, or future-use licensor. It models five facts and preserves explicit absence for the facts that were not observed.

Positive intake tuple

offstage_testament_intake:
  specific_package_or_explicit_absence: required
  handoff_parties_or_explicit_absence: required
  receiving_window: required
  seal_state_or_explicit_absence: required
  event19_source_choice: required
  named_future_reader: required_as_scope_not_permission
  selected_disposition_posture: required
  authority_boundary: intake_only

received means the specific package crossed the receiving desk within the recorded window. sealed means only that the observed seal appeared in the recorded state. explicit_absence is a durable fact about a missing row; it cannot be converted into positive proof about authorship, contents, consent, or rights.

Exact pending triple

The source event creates one indivisible unresolved state:

pending:
  - mei_xu.testament_intake_pending
  - mei_xu.seal_state_unread
  - mei_xu.delivery_recipient_unconfirmed

Protected recruitment, independent sealed deposit, and company condolence capture clear the triple. Deferral retains it. Completion of Rite 24 turns any remaining triple into default eligibility, whether focused review was never run or explicitly deferred.

Deadline behavior

The deadline does not invent a clean answer. The unserved hard miss, hostile sponsor-consent conversion, and late sealed independent archive all:

• close the character route window;
• clear pending and availability residue;
• remove Mei Xu and deny recruitment;
• emit a failure scar;
• preserve a distinct package disposition and future recovery cost.

Late deposit is not timely service. Sponsor relabeling is not consent. An unserved package is not proof that no testament existed.

Forbidden promotions

No intake branch, route asset, default, or scar may prove:

1. author identity or signature authenticity;
2. legal capacity, personhood, or death;
3. content or truth;
4. consent or refusal;
5. legal validity or probate effect;
6. recipient acceptance;
7. voice, image, archive, or memorial rights;
8. ownership or inheritance;
9. afteruse or future permission.

The named future reader is a limitation: it records who may later need to inspect the intake row. It is not a grant of access, reliance, ownership, or permission.

Separation from adjacent systems

This mechanic does not replace Qiu Bai member attribution, Ruan Ting answerability seating, Qian Yan first-touch provenance, Lou Ke caption routing, Yu Jing destruction chronology, or any phone-cord/prop afteruse receipt. It is complete only when the specific package’s intake facts and absences remain visible without acquiring any of those authorities.