Proof Wall Pinning Custody / 举证墙钉选羁押线

Proof Wall Pinning Custody is a pressure storyline for the moment a future reader is about to consume a proof surface and the game must decide which proof is pinned, which proof is occluded, and what the occlusion does to future play.

This is in-world content. The proof wall can be a public wall, lawful wall, sponsor brief, archive pinboard, artist-boundary slate, route-loadout surface, or management-closure surface. It is not a dev board, dashboard, backlog, governance note, or lens-health artifact.

Gap diagnosis

The existing wiki already covers the nearby surfaces:

• 举证负荷再分配线 keeps proof alive by naming who carries its burden.
• 裁定读者冲突线 prevents one source row from satisfying incompatible future readers.
• 读者反驳通知线 makes an affected party’s response playable before a row becomes authority.
• 路线装配兼容线 prevents individually valid assets from becoming a false-clean bundle.
• 复原追偿搁架线 names who carries future recourse after a stabilized route.

The uncovered gap is visibility custody. A proof can be alive, assigned, rebuttable, compatible, and indemnified, while still becoming false when the wall pins the sponsor-safe proof and silently hides the public counterline, or pins lawful proof as if it were public truth, or pins recovery-only proof as if it were fresh.

Without this line, proof surfaces become clean universal keys after prior systems already preserved their scars.

Primary playable question

When a route, reader, or closure surface asks to read the proof wall, does the producer pin public proof, lawful proof, sponsor proof, artist-boundary proof, split the wall, mark proof unread, quarantine the pin, or allow default occlusion?

Every answer must name:

• wall surface;
• future reader;
• visible proof;
• proof state before;
• pin owner or explicit absence;
• omitted proof or explicit absence;
• harmed or excluded reader;
• wall state after;
• future route effect;
• cost.

Content pack

Mechanic

• 举证墙钉选羁押机制 defines proof walls, pin owners, occluded proofs, states, branches, defaults, counter surfaces, and replay evidence.

Card

• 举证墙钉选案卷 records the wall row, visible pin, pin owner, scope claim, omitted proof, harmed reader, wall state, and future route effect.

Rite

• 举证墙钉选复核 is the action where the player pins public, lawful, sponsor, artist-boundary, split, marked-unread, quarantined, or default surfaces.

Event

• 举证墙遮蔽默认 fires or arms when a future reader consumes a false-front or underfilled wall.

State-triggered entry

Open this storyline only from state pressure:

entry_state:
  trigger_kind: state_pressure
  wall_surface_present: true
  future_reader_present: true
  visible_pin_candidate_present_or_explicit_absence: true
  occluded_or_absent_proof_present: true
  pin_owner_or_explicit_absence_present: true
  reader_specific_scope_or_conflict_visible: true
  future_route_or_reader_consumes_wall_state: true
  player_can_pin_scope_rotate_split_mark_quarantine_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_proof_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

A valid wall can contain many proofs, but the number of proofs never triggers the storyline by itself. The trigger is that pinning or occluding a proof changes future reader acceptance, hostility, custody, cost, route access, or recovery state.

Storyline spine

Beat 1 — A reader approaches a proof wall

A public/fan reader, lawful/archive reader, sponsor reader, artist-boundary reader, claimant, worker testimony reader, route-asset reader, or management reader is about to consume a proof surface.

The prior proof rows are already real. The storyline does not retry their original verdicts.

Beat 2 — The wall’s visible pin becomes dangerous

The wall may currently show a public receipt, lawful annex, sponsor release, artist refusal, recovery shelf, route asset, checksum, witness statement, public counterline, or explicit absence.

The danger is not simply that proof exists. The danger is that one proof becomes the only thing a reader sees while another material proof is hidden, sealed, suppressed, unsafe, recovery-only, hostile, or omitted.

Beat 3 — The proof-wall docket opens

Create or update 举证墙钉选案卷.

The docket must name visible pin, proof state, pin owner, omitted proof or explicit absence, omission reason, harmed reader, future reader, and possible future route effect.

Beat 4 — The player resolves the pin

Run 举证墙钉选复核.

The player may:

• pin public proof;
• pin lawful proof;
• pin sponsor proof;
• pin artist-boundary proof;
• split the wall;
• mark proof unread or partial;
• quarantine the pin;
• allow default occlusion.

Beat 5 — Future play reads the wall state

A branch is complete only when a future route or reader consumes the wall state.

Valid effects include:

• accepted with scope;
• public-only;
• lawful-only;
• sponsor-only;
• artist-boundary-only;
• bridge required;
• checksum required;
• public counterline required;
• contradiction pending;
• route costlier;
• captured;
• hostile;
• blocked;
• recovery-only.

If an older pin is later rotated behind a new wall state, Proof Wall Rotation Receipt owns the follow-on receipt. The old pin remains history, not current proof, until that receipt names the rotation reason, current pin or absence, harmed reader, and future effect.

Beat 6 — False wall becomes default

If the wall is consumed without pin owner, omitted proof, harmed reader, scope, or future effect, 举证墙遮蔽默认 fires or arms.

Branch map

Branch	Immediate relief	Cost/scar	Future reader / route effect
Public pin	public legitimacy or anti-capture visibility improves	sponsor pressure, witness exposure, inspection heat, public contradiction	public-only, accepted-with-scope, bridge-required, contradiction-pending
Lawful pin	admissibility, custody clarity, fraud resistance improves	bureau debt, public delay, public distrust, archive debt	lawful-only, checksum-required, bridge-required, accepted-with-scope
Sponsor pin	slot, funding, stop-loss, or management pressure improves	contract capture, public distrust, artist-boundary risk, claimant hostility	sponsor-only, captured, unwind-required, accepted-with-scope
Artist-boundary pin	refusal, voice/body integrity, coercion resistance improves	route unlock, fan expectation, sponsor promise, management pressure worsens	artist-boundary-only, blocked, route-costlier, recovery-only
Split wall	incompatible readers remain playable	source ambiguity, handler burden, archive debt, public contradiction	split-wall, bridge-required, contradiction-pending, route-costlier
Mark unread	false-front use drops	route delay, inspection heat, public distrust, handler burden	annex/checksum/counterline/callback required
Quarantine pin	fraud, drift, false front, or coercion risk falls	current route blocks, sponsor pressure, fan resentment, recovery cost rises	blocked, audit-required, recovery-only
Default occlusion	immediate pressure may fall	occluded proof pressure, hostility, false-front, license or archive debt rises	captured, hostile, blocked, contradiction-pending, recovery-only

Character and route hooks

• 郁蓝未授权史官线 can force a public pin or expose a default occlusion, but sponsor pressure and public contradiction rise.
• 韩砚霜白手套例外线 can pin lawful proof or mark a proof unread, but bureau favor debt and lawful-only routing rise.
• 白鸦黑箱补丁羁押线 can validate checksum visibility, but edit debt and source ambiguity rise.
• Shen Luo Storyline can sponsor-scope a pin, but contract capture and public distrust rise.
• 交接链跑腿 Storyline can carry a physical pin across surfaces, but worker testimony safety and route-asset pressure change.
• 首接保全员 Storyline can verify a first-custody proof pin, but archive debt or lawful-only gating rises.

Missability and recovery

This storyline is missed when implementation:

• treats a proof wall as a neutral inventory;
• pins a proof with no pin owner;
• hides omitted proof or explicit absence;
• hides the harmed reader;
• lets sponsor proof, lawful proof, public proof, artist-boundary proof, and recovery proof become the same clean proof;
• lets a future reader consume the wall without scoped state;
• treats a split wall as universal acceptance;
• treats recovery-only proof as fresh;
• triggers from fixed turn count, raw proof count, dashboard state, or lens-health state.

Recovery is allowed only through visible scar:

• late proof-wall docket;
• repin with scope;
• public counterline;
• lawful annex;
• sponsor unwind;
• artist-boundary correction;
• split wall;
• marked-unread bridge;
• pin quarantine;
• recovery-only conversion.

Replay evidence expectation

storyline_id: storyteller.storyline.proof_wall_pinning_custody.v1
session_id: lens-proof-wall-pinning-custody-v1-<timestamp>
seed: <deterministic-seed>
entry_state:
  trigger_kind: state_pressure
  wall_surface_present: true
  future_reader_present: true
  visible_pin_candidate_present_or_explicit_absence: true
  occluded_or_absent_proof_present: true
  pin_owner_or_explicit_absence_present: true
  reader_specific_scope_or_conflict_visible: true
  future_route_or_reader_consumes_wall_state: true
  no_fixed_turn_trigger: true
wall_row:
  card: storyteller.card.proof_wall_pinning_docket.v1
  wall_surface: <surface>
  future_reader: <reader>
  visible_pin: <proof or explicit_absence>
  visible_pin_state_before: <state>
  pin_owner: <owner or explicit_absence>
  occluded_or_absent_proof: <proof or explicit_absence>
  harmed_or_excluded_reader: <reader or explicit_absence>
offered:
  rite: storyteller.rite.proof_wall_pinning_review.v1
branch_result:
  selected_posture: pin_public_proof | pin_lawful_proof | pin_sponsor_proof | pin_artist_boundary_proof | split_wall | mark_unread_or_partial | quarantine_pin | allow_default_occlusion
  wall_state_after: pinned | scoped | rotated | split_wall | marked_unread | quarantined | false_front | default_occluded
  future_route_effect: accepted_with_scope | public_only | lawful_only | sponsor_only | artist_boundary_only | bridge_required | contradiction_pending | route_costlier | blocked | captured | hostile | recovery_only
  event_seen_or_armed: storyteller.event.proof_wall_occlusion_default.v1 | explicit_absence
  counter_deltas:
    relief: []
    cost: []
    future: []
assertions:
  - entry_is_state_triggered
  - proof_wall_is_in_world_not_dashboard
  - visible_pin_state_visible
  - pin_owner_visible_or_explicit_absence
  - occluded_proof_visible_or_explicit_absence
  - harmed_reader_visible_or_explicit_absence
  - reader_scope_visible
  - branch_outcomes_diverge
  - success_has_cost
  - default_is_durable
  - future_reader_consumes_wall_state
  - no_fixed_turn_day_week_raw_count_dashboard_or_lens_health_trigger

Non-goals

• Not a governance/process page.
• Not a dev board, backlog, dashboard, or wiki-health surface.
• Not a raw evidence inventory.
• Not a proof burden reassignment replacement.
• Not a route loadout replacement.
• Not a new verdict.
• Not valid if every reader accepts the same clean pinned proof for free.
• Not valid unless future play consumes the wall state.