Nayin Fan-Scream Repair Review / 纳音粉丝尖叫修补复核

The review turns the repair notice into four durable person and derivative states. It is guarded by the selected notice flag and exact slot-card IDs, so a player cannot choose a protected outcome with sponsor evidence or obtain a route asset by omitting the actual Nayin card.

Required exact assignment shape

1. docket — storyteller.card.nayin_fan_scream_repair_docket.v1
2. nayin — actual card-storyteller-nayin
3. source_input — card-storyteller-crowd-affidavits
4. license_context — card-storyteller-memorial-license-draft
5. repair_evidence — the selected branch’s repair row
6. custody_posture — the selected branch’s custody row
7. future_reader — storyteller.card.nayin_named_future_repair_reader.v1

All seven assignments must be real cards in hand. Generic voiceprint, fan, repair, license, or virtual aliases fail. The reader is a named Community Archive derivative-repair desk; the legacy fan oxygen ledger cannot fill this slot, especially after ledger_burned.

Four implemented outcomes

0 — protected named repair witness

recruit_protected_named_repair_witness sets nayin.state.recruited_protected_fan_scream_repair_witness, retains the actual card, and grants the only route_asset.nayin_fan_scream_repair_witness. Future use must cite the named source row, patch steps, output hash, keeper, and handoff.

1 — public derivative countersign

publish_countersigned_derivative_log sets nayin.state.public_derivative_log_counterwitness. Nayin remains cooperative but is not recruited. The public log exposes transformation and custody while explicitly withholding speaker identity, consent, and testimony truth.

2 — sealed source-preserving escrow

seal_source_preserving_repair_escrow sets nayin.state.sealed_source_preserving_repair_custodian. The source/output relationship survives for one lawful readback. Sealing creates no route asset, public naming, ownership, or memorial license.

3 — sponsor buyout hard miss

accept_sponsor_buyout_and_miss_nayin sets nayin.state.sponsor_bought_voiceprint_hostile_miss, removes the actual Nayin card, preserves storyteller_nayin_contract_missed, and makes repair provenance recovery-only. The sponsor master may be playable commercial material, but it is not clean proof.

Every outcome clears storyteller_nayin_contract_available; a disposed contract cannot remain simultaneously available, and only the sponsor branch sets the legacy miss flag.

Authority boundary

review_may_resolve:
  - one_named_input_to_output_transformation
  - patch_steps
  - output_hash
  - keeper_and_handoff
  - nayin_person_state
review_must_never_resolve:
  - speaker_identity
  - individual_or_collective_consent
  - fan_testimony_truth
  - voice_ownership
  - memorial_or_archive_license
  - personhood_or_death
  - universal_fan_representation