Yu Jing Subtitle Burn-Chain Review / 余烬字幕烧毁链复核

storyteller.rite.yu_jing_subtitle_burn_chain_review.v1 reads one named whitebox subtitle row from delete command through the present furnace interval and ash handoff. It settles Yu Jing’s person-state without deciding what the subtitle meant, whether the edit was lawful, who saw it, or who has rights over it.

Source and exact assignment guard

The review requires completed storyteller-rite-18-whitebox-edit, the source encounter and burn-bin availability flags, sufficient subtitle trust and edit heat, and the actual Yu Jing, Baiya, crowd affidavits, focused docket, named subtitle delete order, and ash-seal thermal trace. It cannot repeat after disposition or review completion.

All eight slots in Yu Jing Subtitle Burn-Chain Cards are required. Exact accepts, actual in-hand cards, selected-option requirements, and posture/boundary matching are enforced. Missing, virtual, generic, or mixed assignments fail before mutation. A complete restored set of authored receipts is accepted because serialized state is trusted; Rite 18’s actual historical execution is demonstrated only by ordered replay/session history.

Four ordered branches

0 — recruit_bounded_subtitle_burn_chain_witness

Requires Rite 18’s public-history flags plus the protected-witness and named-row physical-chain pair. It retains Yu Jing, sets yu_jing.state.recruited_bounded_burn_chain_witness, and grants the sole route asset route_asset.yu_jing_burn_chain_witness.

The asset reads only this named row’s present delete-to-ash physical sequence.

1 — stop_furnace_publish_exact_burn_sequence

Requires the same public history plus stop-furnace and thermal-trace-only assignments. It stops the current furnace, publishes the exact physical sequence, sets yu_jing.state.independent_stop_furnace_public_sequence, removes Yu Jing, and grants no route asset.

Publication does not reconstruct or interpret the subtitle and does not prove viewer knowledge or approval.

2 — accept_company_training_scrap_clean_burn

Requires Rite 18’s company-training flags plus company-clean-burn and false-nonexistence assignments. It preserves the relabeling as a hostile claim, sets yu_jing.state.hostile_company_training_scrap_clean_burn, closes the route with yu_jing.subtitle_burn_chain_route_window_closed, records yu_jing.ashes_completed_as_company_clean_burn, removes Yu Jing, and grants no route asset. A completed clean burn remains no proof that the subtitle never existed.

3 — defer_delete_order_ash_handoff_readback

Requires the defer posture and missing-ash explicit-absence boundary after either completed Rite 18 source choice. It clears review availability, retains Yu Jing temporarily, and sets exactly:

pending_default_gate:
  - yu_jing.subtitle_burn_chain_pending
  - yu_jing.ash_seal_unread
  - yu_jing.physical_handoff_unconfirmed

It also sets yu_jing.state.deferred_burn_chain_handoff_at_risk, and is the only branch that arms the natural default.

Reachability and cleanup

Choices 0–2 are terminal and clear the exact pending triple, deferred-risk residue, review state, and burn-bin availability even when a restored or migrated save contains stale flags. Choices 1 and 2 remove Yu Jing; choice 0 alone retains and recruits her. Choice 3 is intentionally nonterminal and keeps the actual card only until default. No branch other than option 0 may leave route_asset.yu_jing_burn_chain_witness set.

subtitle_trust, edit_heat, witness_risk, audit_alarm, and branch-specific public-accountability, company-control, or false-nonexistence counters diverge across the four outcomes, so person-state is not reduced to flavor text.

Authority denial

The review can record a named subtitle row and version and delete/burn chronology; for ash-bag seal, physical handoff, and thermal residue it records the fact or an explicit absence. It cannot turn unread or unconfirmed physical state into positive proof, and it cannot decide meaning, translation, routing, edit lawfulness or guilt, viewer knowledge or approval, speaker identity or truth, consent or refusal, voice/archive/memorial rights, nonexistence from missing ash, afteruse, future-reader access, or later permission.