Private Visitation Night Consent Boundary / 私人会客夜同意边界
This mechanism separates inspection access from consent authority when the 私人会客夜 / 近身权契约 resolves.
The runtime chain already models a right holder, white-glove inspector, door-gap recording, silent-room permission, broadcast witness, three route outcomes, and a folded reverse. This mechanism requires those surfaces to remain separately readable so that a successful inspection cannot silently become consent over a person.
State contract
private_visitation_night_state:
source_contract: card-storyteller-st-scale-01-private-visitation-night-contract
inspection_window_id: storyteller.private_visitation_night
accepted_by_rite: storyteller-st-scale-01-private-visitation-night-accept
accept_slot_right_holder: card-storyteller-producer-license
accept_slot_person: card-storyteller-han-yanshuang
accept_slot_proof: door_gap_recording | door_gap_recording_explicit_absence
accept_slot_resource: silent_room_authorization | silent_room_authorization_explicit_absence
accept_slot_witness: storyteller.card.private_visitation_named_broadcast_witness_receipt.v1
future_reader_scope_id: storyteller.reader.private_visitation_named_broadcast_only
inspection_purpose_from_contract: required
accept_option: prepare_protected_named_inspection | prepare_sponsor_threat_sting | record_missing_door_gap | record_missing_silent_room_authorization
schedule_slots_occupied_delta: +1
evidence_cards:
silent_room_authorization: storyteller.card.private_visitation_silent_room_authorization.v1
door_gap_recording: storyteller.card.private_visitation_door_gap_recording.v1
named_broadcast_witness: storyteller.card.private_visitation_named_broadcast_witness_receipt.v1
silent_room_explicit_absence: storyteller.card.private_visitation_silent_room_authorization_absence.v1
door_gap_explicit_absence: storyteller.card.private_visitation_door_gap_recording_absence.v1
selected_path: protected_inspection | sponsor_threat_sting | explicit_gap_fold
source_resolution_rite: success | risk | fold
sponsor_threat_sting_state: recorded | none
explicit_gap_or_none: none | door_gap_recording | silent_room_authorization
reverse_card_or_explicit_absence: required
future_reader_and_scope: required
counter_deltas: required
authority:
named_inspection_access_only: true
door_gap_evidence_only: true
grants_body_consent: false
grants_voice_consent_or_ownership: false
grants_treatment_consent: false
grants_archive_or_memorial_ownership: false
creates_replacement_authority: false
grants_universal_inspection_authority: false
grants_personhood_finding: false
grants_death_finding: false
grants_universal_broadcast_authority: falseSlot interpretation
| Runtime slot | Required readback |
|---|---|
slot-right-holder | exact producer license at accept; exact private-visitation contract at resolution |
slot-person | exact Han Yanshuang inspector card |
slot-proof | actual door-gap recording or its explicit-absence card |
slot-resource | actual silent-room authorization or its explicit-absence card |
slot-witness | exact named broadcast witness receipt |
The success and risk rites require the actual authorization, actual recording, and named witness cards. A door-gap fold requires recording absence plus actual authorization. An authorization fold requires actual recording plus authorization absence. No valid fold carries both absence cards. A tag match never expands any assigned card’s authority beyond its recorded access purpose.
Path contract
| Path | Existing rite | Relief | Cost or scar | Durable future state |
|---|---|---|---|---|
protected_inspection | ...-success | artist boundary and named inspection evidence survive | sponsor control remains visible; occupied slot releases -1 | access proof accepted only for named reader/scope |
sponsor_threat_sting | ...-risk | sponsor threat becomes inspectable evidence | audit_heat rises; occupied slot releases -1 | threat evidence accepted with reader restriction |
explicit_gap_fold | ...-fold | false success is blocked | license_scars +1; reverse enters play; occupied slot remains | recovery_with_named_gap_only |
Fold ancestry
The fold must preserve:
fold_readback:
reverse_card: card-storyteller-st-scale-01-private-visitation-night-reverse
parent_contract: card-storyteller-st-scale-01-private-visitation-night-contract
origin_contract: 私人会客夜
failed_surface: door_gap_recording | silent_room_authorization
preserved_actual_surface: silent_room_authorization | door_gap_recording
responsible_pressure: 监察需要一次不在公开档期上的近身取证
license_scars_delta: +1
future_effect: recovery_with_named_gap_onlyThe reverse is evidence of a failed or incomplete contract chain. It is never evidence that a private meeting, consent, abuse, treatment, or voice transfer occurred.
Authority firewall
All three paths preserve named_inspection_access_only and door_gap_evidence_only. No branch may infer body, voice, treatment, archive, memorial, personhood, death, or universal broadcast authority from a schedule slot, silent-room permission, inspector identity, witness presence, captured threat, or black screen.
Non-goals
Not a universal consent ledger, not a lawful warrant system, not medical intake, not voice custody, and not archive or memorial probate. The mechanism is limited to the existing private-visitation schedule chain.