Warrant Trace Afteruse Receipt

Warrant Trace Afteruse Receipt makes a completed broadcast warrant trace reusable only through named afteruse scope.

The mechanism exists when a prior warrant result is still true but a later reader wants to spend it in a different context. A lawful_only trace cannot become public truth for free. A sponsor_only trace cannot become lawful authority for free. A dirty_trace or black_box_trace cannot become route-asset proof unless its scar, checksum, annex, harmed reader, and future route effect are visible.

Entry Contract

warrant_trace_afteruse_receipt:
  trigger_kind: state_pressure
  source_warrant_trace_visible: true
  source_trace_state_visible: true
  source_authority_or_explicit_absence_visible: true
  requested_afteruse_visible: true
  future_reader_consumes_warrant_state: true
  harmed_or_excluded_reader_visible_or_explicit_absence: true
  player_can_certify_restrict_annex_unwind_checksum_quarantine_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_warrant_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

Afteruse States

warrant_afteruse_states:
  - unspent_trace
  - afteruse_requested
  - scope_certified
  - reader_restricted
  - annex_attached
  - sponsor_capture_unwound
  - checksum_or_audit_required
  - afteruse_quarantined
  - false_clean_afteruse
  - captured_by_reader
  - hostile_reader
  - recovery_only

The implementation fails if a source trace state is collapsed into a generic authorized flag.

Branch Contract

Every non-default branch must record:

warrant_afteruse_resolution:
  source_warrant_trace: <trace id>
  source_intervention: <intervention id>
  source_authority_or_absence: sponsor_asset | legal_asset | archive_asset | memorial_asset | oxygen_asset | audit_asset | public_witness | black_box_edit | producer_license | explicit_absence
  source_trace_state_before: authorized_trace | scoped_warrant | dirty_trace | black_box_trace | refused_broadcast | false_clean_warrant | sponsor_only | lawful_only | public_only | archive_only | recovery_only
  source_cost_or_scar: <scar or explicit_absence>
  requested_afteruse: <use>
  future_reader: <reader>
  harmed_or_excluded_reader: <reader or explicit_absence>
  proof_bridge_or_explicit_absence: <proof or explicit_absence>
  selected_afteruse_posture: certify_named_warrant_scope | restrict_afteruse_reader | attach_lawful_or_public_annex | unwind_sponsor_or_authority_capture | require_checksum_or_audit_readback | quarantine_warrant_afteruse
  trace_state_after: <state>
  relief_any: []
  cost_any: []
  future_effect_any: []

Failure Cases

The mechanism must fail if:

  • a scoped or dirty warrant trace unlocks a later route with no afteruse row;
  • a sponsor-only, lawful-only, public-only, archive-only, or recovery-only trace is accepted by every reader;
  • a black-box trace is spent without checksum or audit readback;
  • a refused broadcast is cited as if the intervention became canon;
  • a harmed or excluded reader is hidden;
  • default changes only notification text, reputation, or a generic pressure counter.

Default Contract

The default is False-Clean Warrant Afteruse Default. It must record false-clean afteruse, source warrant trace or explicit absence, hidden or overbroad scope, capturing reader, harmed reader, after-state, future reader effect, at least three counter deltas, and durable mutation.