Residue-Clinic Clean-Bin Specimen Miss / 余物诊所清理桶标本错失机制

This mechanism turns the company clean bin from a one-step flavour choice into a durable custody fork. It tracks whether any disposal receipt survived, then exposes the correct downstream event without allowing either branch to recreate the specimen.

State machine

clean_bin_state:
  unopened:
    next: [discarded_without_photo, discarded_with_photo]
  discarded_without_photo:
    requires: [residue_specimen_missed, residue_clean_bin.branch.no_photo_specimen_miss, residue_clean_bin.photo_absent]
    forbids: [residue_clean_bin.branch.photo_preserved, residue_clean_bin.photo_preserved, card-storyteller-clean-bin-photo]
    event: storyteller-st-scale-04-black-screen-specimen-miss
    next: specimen_loss_recorded
  discarded_with_photo:
    requires: [residue_clean_bin.branch.photo_preserved, residue_clean_bin.photo_preserved, card-storyteller-clean-bin-photo]
    forbids: [residue_clean_bin.branch.no_photo_specimen_miss, residue_clean_bin.photo_absent]
    event: storyteller-event-st-scale-04-clean-bin-photo-readback
    next: [public_disposal_receipt_only, lawful_disposal_claim_only]
  specimen_loss_recorded:
    physical_specimen: unrecoverable
    future_route: disposal_counterclaim_only
  public_disposal_receipt_only:
    photo_authority: public_company_disposal_only
    physical_specimen: unrecoverable
  lawful_disposal_claim_only:
    photo_authority: lawful_company_disposal_only
    physical_specimen: unrecoverable

Runtime invariants

1. The rite options have stable IDs and write mutually exclusive branch flags.
2. Resolution requires residue_company_clean_bin_open, the exact in-hand Huoqian/intake-slip/blackbox tuple, and an explicit selected option; rejection writes no completion or branch state.
3. The no-photo event requires the no-photo/missed state and is blocked by a preserved photo.
4. The photo readback requires both the preserved-photo flag and the real card in hand.
5. Resolving either event records a durable, distinguishable result.
6. No effect grants the physical specimen, bodily identity, treatment consent, archive ownership, memorial rights, voice rights, or universal broadcast authority.
7. The earlier fan-witness/live-consent counter-route remains reachable and is not replaced by the photograph.

Counter contract

• Company disposal gives immediate sponsor control and reduces residue custody.
• Unrecorded loss worsens public accountability, body autonomy, or future recovery burden.
• Public readback improves accountability at the cost of exposure or witness pressure.
• Lawful quarantine improves admissibility/custody review at the cost of route delay or legal burden.

Every downstream result must keep physical_specimen: unrecoverable visible in metadata or durable flags.

Authority matrix

Claim	No photo	Preserved photo
Company disposed of pictured material	unproven / explicit absence	provable within image and timestamp scope
Physical specimen recovered	no	no
Bodily identity established	no	no
Treatment consent established	no	no
Archive, memorial, or voice ownership established	no	no
Universal broadcast authority established	no	no