Operator Dissent Export Custody / 操作员异议导出羁押机制

Operator Dissent Export Custody is the mechanism that prevents a preserved minority operator row from becoming free-floating proof once it leaves its source conclave.

The mechanism sits downstream of 操作员证词合议线 and 操作员接力链污染线. Those lines establish conflict and chain contamination. This mechanism prices the export of dissent into another reader’s route.

Mechanic contract

mechanic_contract:
  id: storyteller.mechanic.operator_dissent_export_custody.v1
  input_state:
    source_conclave_state: dissent_preserved | reader_split_required | minority_operator_protected | contradiction_addendum_published | lawful_or_archive_seal_only | management_summary_with_scar | equivalent
    dissent_row_present: true
    export_request_present: true
    future_reader_or_route_consumes_export_state: true
  required_surfaces:
    - source_conclave_context
    - dissent_operator_state
    - export_custodian
    - citation_scope
    - proof_burden_holder
    - operator_protection_or_explicit_absence
    - future_reader_effect
  output_state:
    - scoped_export
    - sealed_export
    - public_addendum_with_context
    - protected_before_reuse
    - export_refused
    - export_quarantined
    - misattributed_default

The mechanism fails if dissent is treated as a portable quote, a clean public addendum, or a free route asset.

State model

state_model:
  dissent_export_state:
    allowed:
      - requested
      - scoped_with_context
      - lawful_or_archive_only
      - public_addendum_with_scar
      - protected_before_reuse
      - refused
      - quarantined
      - misattributed
      - recovery_only
  operator_state:
    allowed:
      - protected
      - payroll_due
      - exposed
      - retaliated
      - hostile
      - sealed
      - absent
      - captured
  citation_scope:
    allowed:
      - public_only
      - lawful_only
      - sponsor_only
      - archive_only
      - access_only
      - route_only
      - management_only
      - named_reader_only
      - split_required
      - explicit_absence
  proof_burden_holder:
    allowed:
      - producer
      - custodian
      - archive
      - lawful_reader
      - public_recap
      - route_claimant
      - operator
      - explicit_absence

operator may hold proof burden only when the player explicitly accepts protection/payroll and future cost. It is never the silent default.

Branch resolver

The resolver reads 操作员异议导出案卷 and resolves 操作员异议导出复核.

Posture	Export state	Operator state	Future effect
Scope export	scoped_with_context	protected or exposed-with-cost	scoped citation required
Seal export	lawful_or_archive_only	protected or sealed	public addendum required
Contextualize public addendum	public_addendum_with_scar	exposed-with-cost	accepted with scar; correction cost reduced
Fund operator protection	protected_before_reuse	protected, payroll_due	protected operator required before reuse
Refuse export	refused	protected or sealed	alternate proof required
Quarantine export	quarantined	protected or hostile	route blocked or recovery-only if ignored
Clean extract default	misattributed	exposed, retaliated, hostile	correction, addendum, blocked, recovery-only

No branch creates universal clean use.

Invariants

invariants:
  - source_conclave_context_travels_with_export
  - dissent_operator_state_is_visible
  - citation_scope_is_named_or_explicit_absence
  - proof_burden_holder_is_named_or_explicit_absence
  - protection_payroll_or_refusal_is_visible_before_external_reuse
  - constructive_branch_mutates_relief_cost_and_future_effect
  - default_is_durable_and_recoverable_only_with_scar
  - no_universal_dissent_export
  - no_fixed_turn_day_week_raw_count_dashboard_or_lens_health_trigger

Counter contract

counter_deltas_required:
  constructive:
    relief: at_least_one
    cost: at_least_one
    future_reader_or_route_effect: at_least_one
  default:
    relief: at_least_one
    cost: at_least_two
    future_reader_or_route_effect: at_least_one

Accepted surfaces include dissent_citation_legibility, operator_export_integrity, operator_exposure, operator_retaliation, protected_witness_payroll_due, proof_burden_legibility, proof_burden_dumped_on_witness, public_recap_truthfulness, public_receipt_distrust, sponsor_stop_loss_pressure, lawful_annex_debt, archive_debt, route_asset_integrity, route_delay, correction_required, broadcast_reality_drift, and future_recovery_cost.

Replay proof shape

replay_evidence_required:
  session_id: lens-operator-dissent-export-custody-v1-<timestamp>
  seed: <deterministic-seed>
  entry_state:
    trigger_kind: state_pressure
    source_conclave_state_visible: true
    dissent_row_present: true
    export_request_present: true
    future_reader_or_route_consumes_export_state: true
    no_fixed_turn_trigger: true
  offered:
    card: storyteller.card.operator_dissent_export_docket.v1
    rite: storyteller.rite.operator_dissent_export_review.v1
  branch_result:
    selected_posture: scope_export | seal_export | contextualize_public_addendum | fund_operator_protection | refuse_export | quarantine_export | clean_extract_default
    export_state_after: <state>
    operator_state_after: <state>
    proof_burden_holder_after: <holder>
    future_reader_or_route_effect: <effect>
    event_seen_or_armed: storyteller.event.dissent_extract_misattribution_default.v1 | explicit_absence
  assertions:
    - entry_is_state_triggered
    - source_conclave_context_travels_with_export
    - operator_protection_or_cost_visible
    - proof_burden_holder_named
    - no_universal_dissent_export
    - default_mutates_future_play