Shao Zi Queue-Call Order Witness / 哨子队列喊号顺序见证线

This character storyline turns the old Shao Zi pressure card into an executable person-state. The playable question is not who deserves oxygen. It is whether the producer preserves the actual order in which names were called after the quota recount and before a later reader treats the priority recut as clean.

Ordered executable chain

1. Rite 17 — Low-Quota Oxygen Recount (storyteller-rite-17-quota-recount) is the sole producer. It requires the actual Yu Lan and breath-quota key, gains Shao Zi and the support packet, sets availability and oxygen debt, and records either the stable-sample or fractured-testimony source branch.
2. Oxygen Priority Recut (storyteller.rite.oxygen_priority_recut.v1) must then complete with six real assignments, including Shao Zi in the actual assigned_handler_or_absence slot. It opens the priority-ladder row and records one exact priority posture plus its matching sponsor, public, route-asset, or recovery reader.
3. Queue-Call Order Window (storyteller.event.shao_zi_queue_call_order_window.v1) has one lossless intake option. It opens review without choosing a branch or deleting any posture/boundary evidence.
4. Queue-Call Order Review (storyteller.rite.shao_zi_queue_call_order_review.v1) requires ten exact in-hand assignments and the matching Rite 17 + Oxygen tuple. It rejects the other three choices without state mutation, then removes the other six candidates only on a successful terminal choice.

Rite 17-only state is insufficient. A fresh state, direct event trigger, manually seeded flags, generic queue card, or lens-health shortcut must fail.

Four exact upstream/result lanes

Review	Rite 17 evidence	Recut posture	Exact future reader	Terminal result
0	fractured testimony retained	split_with_junior_note	route_asset	protected recruit; sole route asset
1	fractured testimony retained	ward_reserve_first	public_receipt	public countersigned; independent
2	stable sample retained	sponsor_floor_first	fan_oxygen_audit	sponsor-captured stable sample
3	stable sample exposes erased names	default_capture	recovery_inventory	erasure/refusal hard miss

The event cannot mix or discard tuples. The review must reject a priority posture with a different reader, or a disposition posture with a different authority boundary.

Four branches

0 — Protected recruitment

recruit_protected_queue_call_order_witness retains Shao Zi, records the bounded called-name order, and grants route_asset.shao_zi_queue_call_order_witness. The route asset can authenticate one named queue-order row for one named reader. It cannot choose the oxygen-priority rule.

1 — Public countersignature

bind_public_queue_countersign keeps Shao Zi independent and requires the public-receipt reader to cite the skipped and displaced names. No recruitment or route asset is granted.

2 — Sponsor-captured stable sample

accept_sponsor_captured_stable_sample preserves the sponsor-readable stable sample while recording that omitted names remain outside it. Shao Zi is not recruited, and sponsor packaging does not become a clean fan mandate.

3 — Erasure/refusal hard miss

erase_queue_and_miss_witness removes the actual Shao Zi card, sets the hard-miss and recovery-readback states, and leaves a durable explicit record that called-name order was erased or refused. It never rewrites skipped names as if they were called.

Replay evidence

• shao-zi-queue-call-order-witness.recruit.replay.json must play Rite 17, assign Shao Zi as the real Oxygen handler, choose the route-asset recut posture, open guarded event option 0, and complete exact review choice 0.
• shao-zi-queue-call-order-witness.erased.replay.json must play Rite 17, assign Shao Zi as the real Oxygen handler, choose default capture, open guarded event option 0, and complete exact review choice 3.

Both durable CLI sessions must carry source: storyteller, normalized lens provenance, integrity evidence, assignment/lens catalogs, and session evidence. Neither replay may seed the source, availability, recut, event, recruitment, or miss flags.