Wu Suo Legacy-Face Credential Witness / 无锁旧脸凭证见证线

This storyline turns Rite 20’s obsolete child-star face into a bounded character and credential-lineage problem. It distinguishes evidence that a reader consumed a childhood template from authority to open that reader’s door.

Ordered executable chain

1. Rite 20 — Second Chapter Briefing (storyteller-rite-20-second-chapter-briefing) is the sole producer. It gains Wu Suo and the eleven-card input packet, records public or company source history, and opens the focused review.
2. Legacy-Face Credential Review (storyteller.rite.wu_suo_legacy_face_credential_review.v1) requires completed Rite 20, the encounter and badge flags, the actual Wu Suo and facility-map cards, and five further exact assignments.
3. Review choices 0–2 are terminal. Choice 3 completes the review but retains Wu Suo and sets the exact three pending flags needed by natural default.
4. Legacy-Face Badge Expiry Default (storyteller.event.wu_suo_legacy_face_badge_expiry_default.v1) resolves the deferred credential into one of three non-clean terminal outcomes.
5. Any later physical crossing remains outside this storyline and requires the separate rite.facility_access_routing mechanism.

A fresh state, card-only direct review, partial source-state seeding, generic person substitution, virtual facility map, or a legacy-face docket without the required completion and history flags must fail. Because flags are mutable runtime state, the stronger claim that Rite 20 actually occurred is proven by ordered durable replay history.

Four exact review lanes

Review	Rite 20 history	Exact posture	Exact boundary	Result
0	storyteller_public_breath_footnote + wu_suo.source.public_legacy_face_notice	wu_suo_protected_lineage_witness_posture	wu_suo_named_door_time_boundary	sole bounded recruit and route asset
1	storyteller_public_breath_footnote + wu_suo.source.public_legacy_face_notice	wu_suo_adult_reenrollment_posture	wu_suo_adult_identity_independence_boundary	template retired; independent non-recruit
2	storyteller_company_breath_risk + wu_suo.source.company_master_credential_schedule	wu_suo_company_master_credential_posture	wu_suo_company_inventory_capture_boundary	company master-credential capture; toxic non-recruit
3	either completed Rite 20 history	wu_suo_defer_revocation_posture	wu_suo_unresolved_template_absence	arm badge-expiry default

The IDs in the table abbreviate full storyteller.card.*.v1 IDs documented in the card packet. A posture paired with another branch’s boundary must fail before state mutation.

Three default terminals

Event option	Terminal state	Person result	Durable consequence
0	expired_orphaned_face_template_hard_miss	Wu Suo removed; hard miss	orphaned-reader key; recovery-only facility identity review
1	hostile_company_face_inventory	Wu Suo removed; hostile capture	stale-template facility challenge
2	late_reenrollment_independent_non_recruit	Wu Suo removed; cooperative non-recruit	threshold freeze and manual escort debt

All three clear the same pending triple, review availability, the deferred-risk state, and the route asset; record terminal disposition; set storyteller_wusuo_badge_expired; remove the actual Wu Suo card; and gain storyteller.card.wu_suo_expired_face_credential_counterreceipt.v1. None opens a door.

Sole recruitment and facility boundary

Review option 0 alone grants route_asset.wu_suo_credential_lineage_witness. Its scope is one childhood-template lineage and one named reader/interval. It also sets wu_suo.future.separate_facility_access_routing_required; this is an obligation to route later, not proof that routing happened.

The legacy-face docket explicitly has doesNotSatisfyFacilityAccessRouting: true. No review or default branch may complete rite.facility_access_routing, certify a current route, turn a living person into a badge, or grant company-wide access.

Replay evidence

• wu-suo-legacy-face-credential-witness.recruit.replay.json must execute the real Rite 20 public-footnote branch, assign the protected seven-card tuple, and resolve review choice 0 with Wu Suo retained and the sole route asset present.
• wu-suo-legacy-face-credential-witness.badge-expiry-default.replay.json must execute the real Rite 20 source, assign the defer tuple, resolve review choice 3, observe the exact pending triple, and resolve default option 0 with badge expiry, hard miss, and counterreceipt.

The focused runtime test must reach all four review branches and all three default terminals; reject fresh, missing-card, virtual, mixed-pair, wrong-history, and repeat resolutions; and prove source/public parity, canon isolation, and the separate facility-routing boundary. Both durable sessions and replays must remain source: storyteller with normalized lens provenance and integrity evidence.