Duan Wei Fan-Medical Ledger Custody Review / 段微粉丝病历账本羁押复核

storyteller.rite.duan_wei_fan_medical_ledger_custody_review.v1 resolves one valid post-return fan-medical ledger disposition. It is a nonrepeatable, state-pressure rite with no fixed turn gate. It begins only after the existing residue-clinic rite 07 chose return_to_fan_medical_custody, the matching Duan Wei offer opened one of three review windows, and the ash consent tape remains in hand.

The review cannot run from offer choice 3. That choice arms storyteller.event.duan_wei_missed_custody_default.v1 and never creates a valid disposition or review window.

Strict conditions

source_rite_complete: storyteller-rite-residue-07-return-or-quarantine
source_branch: residue_clinic.beat_07.branch.return_to_fan_medical_custody
source_branch_normalized_result: residue_clinic.disposition.return_to_named_patient
custody_returned: storyteller_residue_custody_returned
required_in_hand_boundary_row: card-storyteller-ash-consent-tape
review_window_open: duan_wei.ledger_review_window_open
exactly_one_valid_branch_flag: true
prior_duan_wei_disposition_or_miss_absent: true
enforce_conditions: true
enforce_exact_slot_accepts: true
requires_assigned_cards_in_hand: true
requires_selected_option: true
requires_selected_option_requirements: true

The ash consent tape is a condition, not a slot. It stays in hand and read-only; the review cannot consume it or reinterpret its scoped treatment consent.

Exact five slots

#	Slot	Type	Exact accepted card
1	docket	evidence	storyteller.card.duan_wei_fan_medical_ledger_docket.v1
2	duan_wei	person	card-storyteller-duan-wei
3	named_patient_key_registry	evidence	storyteller.card.duan_wei_named_patient_key_registry.v1
4	ledger_disposition	document	one event-selected valid disposition card
5	discharge_reader	item	storyteller.card.duan_wei_discharge_reader.v1

A missing card, out-of-hand object, broad tag substitute, wrong card type, mixed branch disposition, missing option, or branch-flag mismatch fails without completing the rite or recording a Duan Wei state.

Three ordered review options

0 - recruit_bounded_fan_medical_ledger_custodian

Requires storyteller.card.duan_wei_bounded_custody_charter.v1 and duan_wei.ledger_review_window.branch.bounded_recruit. It records duan_wei.state.recruited_bounded_fan_medical_ledger_custodian, sets duan_wei.recruited, and grants the only route asset: route_asset.duan_wei_fan_medical_ledger_custodian.

counter_deltas:
  duan_wei_trust: 3
  fan_medical_custody_clarity: 2
  patient_key_integrity: 1
  handler_burden: 1
  audit_heat: 1
future_effect: named_patient_key_readback_required

The route asset may preserve one named patient-key/custody row for one named discharge reader and challenge a future reader that drops that scope. It cannot diagnose, authorize treatment, move residue, change the queue, or attribute a burn.

1 - place_ledger_under_patient_key_escrow

Requires storyteller.card.duan_wei_patient_key_escrow.v1 and duan_wei.ledger_review_window.branch.patient_key_escrow. It records duan_wei.state.independent_patient_key_escrow_keeper, retains Duan Wei as an independent witness, and restricts the ledger to the named patient key and discharge reader. It grants no recruitment or route asset.

counter_deltas:
  duan_wei_trust: 2
  patient_key_integrity: 2
  fan_medical_custody_clarity: 1
  route_asset_pressure: 1
  readback_delay: 1
future_effect: patient_key_escrow_readback_only

Escrow is not archive ownership or permanent secrecy. The independent keeper may refuse an out-of-scope reader but cannot grant new medical, identity, memorial, or fan authority.

2 - publish_public_fan_countersign

Requires storyteller.card.duan_wei_public_fan_countersign.v1 and duan_wei.ledger_review_window.branch.public_fan_countersign. It records duan_wei.state.independent_public_fan_countersigner, retains Duan Wei as a public but non-recruited witness, and makes one bounded countersign answerable to the named discharge reader.

counter_deltas:
  duan_wei_trust: 1
  fan_medical_custody_clarity: 1
  public_accountability: 2
  witness_exposure: 1
  inspection_heat: 1
future_effect: public_fan_countersign_readback_required

The countersign must name excluded patients/readers or an explicit absence. It is not universal fan consensus, medical consent, publication permission, or ownership.

No hard-miss review option

Sponsor packaging and audit absorption do not appear as rite options. Offer choice 3 arms the separate missed-custody default, whose two choices perform the hard miss, remove Duan Wei, and create the hostile counterclaim. A review implementation with a fourth option fails this contract.

Sole recruitment invariant

Only option 0 may set duan_wei.recruited or route_asset.duan_wei_fan_medical_ledger_custodian. Options 1 and 2 keep Duan Wei independent. Possessing her card, the docket, a patient key, a countersign, or a discharge-reader row is not recruitment.

Authority boundary

Every option must retain these denials:

grantsDiagnosisAuthority: false
grantsTreatmentConsent: false
grantsMerchandisingAuthority: false
grantsBodyAuthority: false
grantsVoiceAuthority: false
grantsMemorialOwnership: false
grantsArchiveOwnership: false
grantsUniversalMedicalConsent: false
grantsUniversalFanConsent: false
grantsIdentityOrPersonhoodFinding: false
grantsBroadLedgerReuseAuthority: false

The rite reads the completed clinic return and ash-consent boundary without changing either. It may determine Duan Wei’s person-state and the ledger’s bounded custodian/reader relation only.