Warrant Trace Afteruse Receipt
Warrant Trace Afteruse Receipt makes a completed broadcast warrant trace reusable only through named afteruse scope.
The mechanism exists when a prior warrant result is still true but a later reader wants to spend it in a different context. A lawful_only trace cannot become public truth for free. A sponsor_only trace cannot become lawful authority for free. A dirty_trace or black_box_trace cannot become route-asset proof unless its scar, checksum, annex, harmed reader, and future route effect are visible.
Entry Contract
warrant_trace_afteruse_receipt:
trigger_kind: state_pressure
source_warrant_trace_visible: true
source_trace_state_visible: true
source_authority_or_explicit_absence_visible: true
requested_afteruse_visible: true
future_reader_consumes_warrant_state: true
harmed_or_excluded_reader_visible_or_explicit_absence: true
player_can_certify_restrict_annex_unwind_checksum_quarantine_or_default: true
no_fixed_turn_trigger: true
no_fixed_day_or_week_trigger: true
no_raw_warrant_count_trigger: true
no_dashboard_or_lens_health_trigger: trueAfteruse States
warrant_afteruse_states:
- unspent_trace
- afteruse_requested
- scope_certified
- reader_restricted
- annex_attached
- sponsor_capture_unwound
- checksum_or_audit_required
- afteruse_quarantined
- false_clean_afteruse
- captured_by_reader
- hostile_reader
- recovery_onlyThe implementation fails if a source trace state is collapsed into a generic authorized flag.
Branch Contract
Every non-default branch must record:
warrant_afteruse_resolution:
source_warrant_trace: <trace id>
source_intervention: <intervention id>
source_authority_or_absence: sponsor_asset | legal_asset | archive_asset | memorial_asset | oxygen_asset | audit_asset | public_witness | black_box_edit | producer_license | explicit_absence
source_trace_state_before: authorized_trace | scoped_warrant | dirty_trace | black_box_trace | refused_broadcast | false_clean_warrant | sponsor_only | lawful_only | public_only | archive_only | recovery_only
source_cost_or_scar: <scar or explicit_absence>
requested_afteruse: <use>
future_reader: <reader>
harmed_or_excluded_reader: <reader or explicit_absence>
proof_bridge_or_explicit_absence: <proof or explicit_absence>
selected_afteruse_posture: certify_named_warrant_scope | restrict_afteruse_reader | attach_lawful_or_public_annex | unwind_sponsor_or_authority_capture | require_checksum_or_audit_readback | quarantine_warrant_afteruse
trace_state_after: <state>
relief_any: []
cost_any: []
future_effect_any: []Failure Cases
The mechanism must fail if:
- a scoped or dirty warrant trace unlocks a later route with no afteruse row;
- a sponsor-only, lawful-only, public-only, archive-only, or recovery-only trace is accepted by every reader;
- a black-box trace is spent without checksum or audit readback;
- a refused broadcast is cited as if the intervention became canon;
- a harmed or excluded reader is hidden;
- default changes only notification text, reputation, or a generic pressure counter.
Default Contract
The default is False-Clean Warrant Afteruse Default. It must record false-clean afteruse, source warrant trace or explicit absence, hidden or overbroad scope, capturing reader, harmed reader, after-state, future reader effect, at least three counter deltas, and durable mutation.