Private Visitation Night Consent Boundary / 私人会客夜同意边界

This mechanism separates inspection access from consent authority when the 私人会客夜 / 近身权契约 resolves.

The runtime chain already models a right holder, white-glove inspector, door-gap recording, silent-room permission, broadcast witness, three route outcomes, and a folded reverse. This mechanism requires those surfaces to remain separately readable so that a successful inspection cannot silently become consent over a person.

State contract

private_visitation_night_state:
  source_contract: card-storyteller-st-scale-01-private-visitation-night-contract
  inspection_window_id: storyteller.private_visitation_night
  accepted_by_rite: storyteller-st-scale-01-private-visitation-night-accept
  accept_slot_right_holder: card-storyteller-producer-license
  accept_slot_person: card-storyteller-han-yanshuang
  accept_slot_proof: door_gap_recording | door_gap_recording_explicit_absence
  accept_slot_resource: silent_room_authorization | silent_room_authorization_explicit_absence
  accept_slot_witness: storyteller.card.private_visitation_named_broadcast_witness_receipt.v1
  future_reader_scope_id: storyteller.reader.private_visitation_named_broadcast_only
  inspection_purpose_from_contract: required
  accept_option: prepare_protected_named_inspection | prepare_sponsor_threat_sting | record_missing_door_gap | record_missing_silent_room_authorization
  schedule_slots_occupied_delta: +1
  evidence_cards:
    silent_room_authorization: storyteller.card.private_visitation_silent_room_authorization.v1
    door_gap_recording: storyteller.card.private_visitation_door_gap_recording.v1
    named_broadcast_witness: storyteller.card.private_visitation_named_broadcast_witness_receipt.v1
    silent_room_explicit_absence: storyteller.card.private_visitation_silent_room_authorization_absence.v1
    door_gap_explicit_absence: storyteller.card.private_visitation_door_gap_recording_absence.v1
  selected_path: protected_inspection | sponsor_threat_sting | explicit_gap_fold
  source_resolution_rite: success | risk | fold
  sponsor_threat_sting_state: recorded | none
  explicit_gap_or_none: none | door_gap_recording | silent_room_authorization
  reverse_card_or_explicit_absence: required
  future_reader_and_scope: required
  counter_deltas: required
  authority:
    named_inspection_access_only: true
    door_gap_evidence_only: true
    grants_body_consent: false
    grants_voice_consent_or_ownership: false
    grants_treatment_consent: false
    grants_archive_or_memorial_ownership: false
    creates_replacement_authority: false
    grants_universal_inspection_authority: false
    grants_personhood_finding: false
    grants_death_finding: false
    grants_universal_broadcast_authority: false

Slot interpretation

Runtime slotRequired readback
slot-right-holderexact producer license at accept; exact private-visitation contract at resolution
slot-personexact Han Yanshuang inspector card
slot-proofactual door-gap recording or its explicit-absence card
slot-resourceactual silent-room authorization or its explicit-absence card
slot-witnessexact named broadcast witness receipt

The success and risk rites require the actual authorization, actual recording, and named witness cards. A door-gap fold requires recording absence plus actual authorization. An authorization fold requires actual recording plus authorization absence. No valid fold carries both absence cards. A tag match never expands any assigned card’s authority beyond its recorded access purpose.

Path contract

PathExisting riteReliefCost or scarDurable future state
protected_inspection...-successartist boundary and named inspection evidence survivesponsor control remains visible; occupied slot releases -1access proof accepted only for named reader/scope
sponsor_threat_sting...-risksponsor threat becomes inspectable evidenceaudit_heat rises; occupied slot releases -1threat evidence accepted with reader restriction
explicit_gap_fold...-foldfalse success is blockedlicense_scars +1; reverse enters play; occupied slot remainsrecovery_with_named_gap_only

Fold ancestry

The fold must preserve:

fold_readback:
  reverse_card: card-storyteller-st-scale-01-private-visitation-night-reverse
  parent_contract: card-storyteller-st-scale-01-private-visitation-night-contract
  origin_contract: 私人会客夜
  failed_surface: door_gap_recording | silent_room_authorization
  preserved_actual_surface: silent_room_authorization | door_gap_recording
  responsible_pressure: 监察需要一次不在公开档期上的近身取证
  license_scars_delta: +1
  future_effect: recovery_with_named_gap_only

The reverse is evidence of a failed or incomplete contract chain. It is never evidence that a private meeting, consent, abuse, treatment, or voice transfer occurred.

Authority firewall

All three paths preserve named_inspection_access_only and door_gap_evidence_only. No branch may infer body, voice, treatment, archive, memorial, personhood, death, or universal broadcast authority from a schedule slot, silent-room permission, inspector identity, witness presence, captured threat, or black screen.

Non-goals

Not a universal consent ledger, not a lawful warrant system, not medical intake, not voice custody, and not archive or memorial probate. The mechanism is limited to the existing private-visitation schedule chain.