Wardrobe Laundry Batch Identity Forensics / 服装洗衣批次身份取证机制

This mechanism treats a laundry batch as a small evidence graph, not a cleanliness token. WD-42 connects three garments, three physical trace families, at least two performer claims, a custodian, and a future identity reader. It answers historical batch membership and transfer; it does not decide who currently owns, wears, fits, consents to, or may broadcast a costume.

Batch-genealogy rule

The implementation must preserve both the source rows and the collision edges:

batch_genealogy:
  batch_id: WD-42
  garments:
    - id: SJ-01
      role: lead_silver_jacket
    - id: SJ-01B
      role: understudy_lining
    - id: SP-7
      role: sponsor_scarf
  collision_evidence:
    migrated_tag: SJ-01 label duplicated onto SJ-01B
    transferred_residue:
      - sponsor_dye
      - citrus_allergen
      - adhesive_fibers
  future_reader_method:
    - costume_silhouette
    - garment_tag
    - sponsor_color
  universal_one_garment_receipt: false

A batch-level fact cannot silently become a garment-level or performer-level fact. The manifest, tag image, and residue map may disagree and must remain separately visible until a branch resolves their scope.

Safety-versus-proof rule

rewash_for_safety_destroy_trace is intentionally irreversible. It relieves immediate allergen pressure, but emits safety_rewashed_trace_destroyed, lowers batchResidueIntegrity, raises evidenceTraceLoss, and prevents the same branch from claiming a sealed residue assay, complete transfer order, or clean performer identity.

split_safe_release_from_evidence_hold is the only posture that can release a medically cleared garment while preserving evidence, and it must name which physical sample and disputed tag remain sealed. It cannot grant medical clearance itself; it only records separate custody for an already cleared piece and retained evidence.

safety_proof_exclusion:
  safety_rewash_preserves_complete_trace: false
  safety_rewash_proves_performer_identity: false
  split_release_requires_named_sample: true
  split_release_requires_dual_custody_receipt: true
  no_zero_cost_safety_and_full_proof: true

Exact assignment contract

Wardrobe Laundry Batch Identity Review requires eight exact cards in the current hand:

1. storyteller.card.wardrobe_laundry_ticket_docket.v1 — collision docket;
2. storyteller.card.wardrobe_laundry_batch_ticket.v1 — source WD-42 ticket;
3. storyteller.card.wardrobe_laundry_batch_manifest.v1 — three-garment manifest;
4. storyteller.card.wardrobe_laundry_disputed_garment_tag.v1 — migrated tag;
5. storyteller.card.wardrobe_laundry_transfer_trace.v1 — dye, allergen, and fiber map;
6. storyteller.card.wardrobe_laundry_performer_claims.v1 — lead and understudy claims;
7. storyteller.card.wardrobe_laundry_batch_custodian.v1 — custodian or documented absence;
8. storyteller.card.wardrobe_laundry_identity_reader.v1 — future recap/archive reader.

Arbitrary cards, catalog-only cards, virtual placeholders, duplicate assignment, missing slots, and omitted branch choice fail. No unrelated rite may establish this lane’s runtime evidence.

Branch contract

branches:
  seal_batch_residue:
    state_after: residue_sealed
    relief: transfer_evidence_preserved
    cost: all_three_garments_held
    future_effect: batch_residue_assay_required
  reconstruct_garment_membership:
    state_after: membership_reconstructed
    relief: three_garment_genealogy_restored
    cost: interview_and_checksum_delay
    future_effect: garment_membership_receipts_required
  recall_sibling_costumes:
    state_after: sibling_recall_open
    relief: collision_spread_blocked
    cost: replacement_and_stage_pressure
    future_effect: sibling_costume_recall_required
  notify_exposed_performers:
    state_after: performer_notice_open
    relief: claimants_can_answer_exposure_and_identity
    cost: medical_queue_and_leak_risk
    future_effect: performer_notice_and_medical_clearance_required
  rewash_for_safety_destroy_trace:
    state_after: safety_rewashed_trace_destroyed
    relief: immediate_allergen_pressure_reduced
    cost: transfer_order_and_residue_destroyed
    future_effect: safety_only_trace_rebuild_required
  split_safe_release_from_evidence_hold:
    state_after: safe_release_evidence_split
    relief: cleared_piece_can_return_while_sample_survives
    cost: dual_custody_and_sample_sufficiency_burden
    future_effect: dual_custody_release_required
  suppress_collision_default:
    state_after: collision_suppression_pending
    relief: immediate_recap_schedule_preserved
    cost: misattribution_exposure_and_evidence_loss_rise
    future_effect: suppressed_collision_default_pending

Each resolution must change at least three counter or durable-state surfaces and must emit its exact state and future effect.

Counter surfaces

counter_contract:
  relief_min: 1
  cost_min: 1
  counter_or_durable_mutations_min: 3
  future_effect_min: 1
counter_surfaces:
  evidence:
    - batchResidueIntegrity
    - batchGenealogy
    - garmentIdentityConfidence
    - evidenceTraceLoss
  people:
    - performerSafety
    - performerClaimHeat
    - noticeLeakRisk
    - falseBodyClaim
    - publicAccountability
  operations:
    - siblingRecallLoad
    - stageReadinessLoss
    - sponsorPressure
    - futureRouteCost

Default contract

suppress_collision_default arms wardrobe_batch.default_pending. Laundry Batch Identity Collapse must then expose two core-compatible outcomes:

• recover_fiber_transfer_map reconstructs a bounded transfer map at evidence, cost, and delay pressure;
• admit_broadcast_body_misattributed preserves the historical admission and opens correction, performer claim, and recovery obligations.

Neither outcome may restore universal current identity or silently erase the exposure.

Authority boundary

authority_boundary:
  provesBatchMembershipAndTransferOnly: true
  grantsCurrentPerformerIdentity: false
  grantsCostumeFitApproval: false
  grantsSponsorClearance: false
  grantsPerformerConsent: false
  grantsMedicalSafety: false
  grantsArchiveOwnership: false
  grantsUniversalBroadcastPermission: false

Non-goals

• Not a general costume inventory or cleaning simulation.
• Not a duplicate of single-garment custody or later-reader afteruse scope.
• Not a recruitment gate or character reward.
• Not proof that residue exposure equals performer identity.
• Not valid unless a future reader is about to consume the disputed costume mapping.