Oxygen Audit Standing Transfer / 呼吸审计资格移送机制

Oxygen Audit Standing Transfer governs whether an oxygen audit result can be cited by a later reader without laundering the public, witness, district, lawful, sponsor, or route-asset standing that made the audit meaningful.

The mechanic fills a narrow gap between existing surfaces:

What remains is transfer: an audit can be valid for one holder and still invalid as sponsor copy, refund foreclosure, route-asset release, lawful annex, public proof, or broadcast reality.

Entry contract

entry_state_required:
  trigger_kind: state_pressure
  oxygen_audit_or_receipt_present: true
  requested_reuse_or_transfer_present: true
  original_standing_holder_visible_or_explicit_absence: true
  requested_reader_visible: true
  excluded_reader_or_explicit_absence_visible: true
  proof_anchor_or_explicit_absence_visible: true
  future_route_or_reader_effect_present: true
  player_can_scope_publish_seal_refuse_quarantine_split_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_oxygen_count_trigger: true
  no_raw_fan_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

Valid entry pressure includes sponsor copy citing an oxygen audit, refund or clawback trying to close against a fan public, a route asset seeking release from an audit result, lawful archive trying to seal the audit, management trying to count relief as clean yield, or broadcast reality treating a local audit as universal stability.

State machine

oxygen_audit_standing_transfer_state:
  standing_state:
    - unreviewed
    - transferable_with_scope
    - public_only
    - lawful_only
    - sponsor_only_contested
    - split_required
    - quarantined
    - standing_refused
    - captured_default
  proof_state:
    - attached
    - missing
    - insufficient
    - sealed
    - public_countercopy
    - witness_required
    - checksum_required
  future_effect:
    - accepted_with_scope
    - public_addendum_required
    - lawful_annex_required
    - sponsor_unwind_required
    - refund_reopened
    - route_costlier
    - proof_required
    - blocked
    - recovery_only
    - hostile

Resolution branches

Run 呼吸审计资格复核 through 呼吸审计资格案卷.

BranchWhat it permitsWhat it costsFuture effect
Scope transferrequested reader may cite audit only inside named scopeaddendum, future clearance, holder remains attachedaccepted_with_scope
Publish countercopypublic/fan holder remains visiblesponsor pressure, witness exposure, public alarmpublic_only or public_addendum_required
Seal lawful annexlawful reader may use audit as evidencepublic distrust, archive debt, lawful-only routelawful_only
Refuse standingwrong reader cannot inherit authorityroute delay, sponsor anger, refund pressureblocked, downgraded, recovery_only
Quarantine proofaudit cannot be reused yetschedule pressure, handler burdenproof_required or alternate_proof_required
Split standingmultiple holders inherit narrowed rightscontradiction pressure, delegate burdensplit_required or costlier
Captured defaultfirst reader files audit as clean meaningomitted holder hardens challengesponsor_capture, refund_reopened, lawful_block, hostile

Counter contract

Every branch must mutate at least three durable surfaces:

  • audit_standing_state
  • original_holder_legibility
  • excluded_reader_pressure
  • sponsor_capture_pressure
  • public_counterclaim_pressure
  • refund_reopen_pressure
  • lawful_annex_debt
  • proof_quarantine_pressure
  • witness_protection_debt
  • broadcast_reality_drift
  • route_asset_release_state
  • future_route_cost

A valid branch cannot resolve through raw oxygen debt, raw fan count, or generic audit pass/fail. The unit of play is standing plus future reader effect.

Default event

If a route, sponsor, archive, public statement, refund office, or broadcast reality uses the audit without review, fire or arm 呼吸审计资格捕获.

The default must name capturing reader, original standing holder, excluded reader, captured meaning, and future route effect.

Replay evidence expectation

mechanic_id: storyteller.mechanic.oxygen_audit_standing_transfer.v1
session_id: lens-oxygen-audit-standing-transfer-v1-<timestamp>
seed: <deterministic-seed>
entry_state:
  trigger_kind: state_pressure
  oxygen_audit_or_receipt_present: true
  requested_reuse_or_transfer_present: true
  original_standing_holder_visible_or_explicit_absence: true
  requested_reader_visible: true
  excluded_reader_or_explicit_absence_visible: true
  proof_anchor_or_explicit_absence_visible: true
  future_route_or_reader_effect_present: true
  no_fixed_turn_trigger: true
observed_through:
  card: storyteller.card.oxygen_audit_standing_docket.v1
  rite: storyteller.rite.oxygen_audit_standing_review.v1
branch_runs:
  reviewed_branch:
    selected_branch: scope_transfer | publish_countercopy | seal_lawful_annex | refuse_standing | quarantine_proof | split_standing
    standing_state_after: <state>
    proof_state_after: <state>
    future_route_effect: <effect>
    counter_deltas:
      relief: []
      cost: []
      future: []
  default_branch:
    event_seen_or_armed: storyteller.event.oxygen_audit_standing_capture.v1
    capturing_reader: <reader>
    captured_meaning: <meaning>
    future_route_effect: <effect>
assertions:
  - audit_result_is_not_universal_proof
  - original_holder_and_excluded_reader_visible
  - requested_reader_and_future_effect_visible
  - branches_diverge_by_standing_proof_and_future_route_effect
  - default_is_durable
  - no_fixed_turn_day_week_raw_count_dashboard_or_lens_health_trigger

Non-goals

  • Not a new oxygen economy bar.
  • Not a replacement for fan oxygen ledger cells, sponsor copy warranty, rebate, clawback, or broadcast drift audit.
  • Not a generic audit pass/fail.
  • Not valid if an audit can be cited by every later reader without standing scope, excluded-reader pressure, and future route effect.