Wu Suo Legacy-Face Credential Review / 无锁旧脸凭证复核

storyteller.rite.wu_suo_legacy_face_credential_review.v1 settles who controls the childhood facial template exposed by actual Rite 20 and what happens to that credential lineage. It does not decide whether anyone may cross a facility threshold.

Source and exact assignment guard

The review requires completed storyteller-rite-20-second-chapter-briefing, the source encounter and badge-availability flags, actual Wu Suo and card.facility_access_map, the focused docket, childhood-template lineage, and named-threshold-reader cards. It cannot repeat after disposition or review completion.

All seven slots in Wu Suo Legacy-Face Credential Cards are required. Exact accepts, actual in-hand cards, selected-option requirements, and posture/boundary matching are enforced. Missing, virtual, generic, or mixed assignments fail before mutation.

Four ordered branches

0 — recruit_bounded_credential_lineage_witness

Requires Rite 20’s public-footnote and public legacy-face notice flags plus the protected-witness and named-door/time pair. It retains Wu Suo, sets wu_suo.state.recruited_bounded_credential_lineage_witness, and grants the sole route asset route_asset.wu_suo_credential_lineage_witness.

The asset is an evidentiary witness only. It sets wu_suo.future.separate_facility_access_routing_required and grants no door opening.

1 — retire_child_template_keep_independent

Requires the same public source history plus the adult-reenrollment and adult-identity-independence pair. It retires the old template, sets wu_suo.state.adult_reenrollment_independent, removes Wu Suo from player custody, and exposes current re-enrollment and manual-escort costs. It is cooperative but unrecruited.

2 — accept_company_master_credential_capture

Requires Rite 20’s company-risk and master-credential-schedule flags plus the company-master and company-inventory-capture pair. It sets wu_suo.state.company_master_credential_captured, removes Wu Suo, increases company control and access heat, and preserves a stale-template facility challenge. Company inventory is not likeness consent or clean access.

3 — defer_legacy_face_revocation

Requires completed Rite 20 plus the defer and unresolved-template pair. It retains Wu Suo only temporarily, sets wu_suo.state.deferred_legacy_face_revocation_at_risk, and arms exactly:

• wu_suo.legacy_face_badge_expiry_pending
• wu_suo.childhood_template_still_enrolled
• wu_suo.named_threshold_reader_waiting

Those flags plus completed review and unresolved disposition are the only natural-default gate.

Every review choice closes wu_suo.legacy_face_credential_review_available. Choices 0–2 also clear any deferred-risk residue; choice 3 owns that state only until the default event resolves it.

Branch divergence

The four branches must remain observably different across:

• public versus company Rite 20 history;
• protected, re-enrollment, company-capture, and defer pairs;
• recruited, independent, captured, and at-risk person states;
• actual card retention or loss;
• route-asset presence or absence;
• badge trust, nostalgia debt, access heat, public accountability, company control, schedule pressure, and future route cost.

Authority and facility-routing denial

The review may record the childhood template’s lineage, controller, one named reader, and retirement or reissue state. It may not open a door, certify a current route, grant likeness or identity authority, or make Wu Suo a universal badge.

The docket explicitly has doesNotSatisfyFacilityAccessRouting: true. No option completes rite.facility_access_routing. Any later passage must independently assign the facility map, origin, target, edge, route handler, access support, and claimant pressure under the Facility Access Lockdown Lens.