Broadcast Asset Provenance Ledger / 播出资产来源账本

Broadcast Asset Provenance Ledger is a route-asset management card for the moment after a broadcast, counter-broadcast, correction, memorial, sponsor package, or editor-safe cut has made an asset publicly usable.

The card does not prove who first owned the asset. That is handled by Route Assets and Custody, claimant collision, and legality conversion. This card records what happened after public use: which copies now exist, who can cite each copy, which channel each copy can legally enter, and which faction can recall, repackage, seize, or weaponize the asset later.

Why this card exists

Existing custody content can answer who has the object and existing legality content can answer where can it be used. The missing after-broadcast surface is what derivative copies survived public use.

Without this card, public broadcast success becomes too clean. A route asset can appear in a lawful slot, fan receipt, editor cut, sponsor relief reel, pirate relay, and archive docket as if those copies are identical. This card forces those copies to remain separate, costed, and replay-visible.

Card fields

card_id: storyteller.card.broadcast_asset_provenance_ledger.v1
source_asset_id: <stable route asset, receipt, voice copy, edit copy, witness, memorial proof, or docket>
source_session_id: <session that first made the asset public, if available>
source_broadcast_event: <broadcast, correction, counterbroadcast, memorial, relief package, or seizure bulletin>
source_asset_state_before: recruited | protected | route_asset | public_only | lawful_only | editor_safe | sponsor_safe | pirate_only | quarantined | recovery_only | contested | equivalent
copies:
  - copy_id: <stable derivative id>
    copy_kind: master_source | lawful_copy | public_receipt | editor_cut | sponsor_package | pirate_echo | archive_copy | witness_excerpt | quarantine_copy
    custodian: production | artist | fan_public | unauthorized_historian | inspector | archive | editor | sponsor | pirate_relay | captured_owner | explicit_absence
    legality_class: lawful_broadcast | lawful_only | public_receipt_only | editor_safe_cut | sponsor_safe_package | pirate_signal_only | quarantined | recovery_only | contested
    can_recall: true | false
    can_repackage: true | false
    can_testify: true | false
    can_unlock_route: true | false
    current_risk: clean | exposed | captured | contradicted | overlicensed | underprotected | hostile | false_owner
live_claimants_min: 2
blocked_or_costlier_future_uses_min: 1

Copy kinds

Copy kind	What it means	Typical owner pressure
master_source	The closest object to the original asset.	Artist boundary, archive seizure, source-holder pressure.
lawful_copy	A copy accepted by license or inspector channel.	Bureau debt, lawful delay, mirror-right narrowing.
public_receipt	A fan, witness, historian, or public proof copy.	Sponsor retaliation, exposure, fan oxygen strain.
editor_cut	A legible version made by cutroom or black-box work.	Edit debt, source ambiguity, reality drift.
sponsor_package	A cleaned version tied to relief, naming, or stop-loss.	Contract capture, public distrust, future blackmail.
pirate_echo	Unauthorized relay memory that keeps the asset alive.	Pirate heat, seizure pressure, unstable proof.
archive_copy	A docketed copy held as durable institutional record.	Archive debt, opacity, admissibility pressure.
witness_excerpt	A partial testimony copy carried by a person or crowd.	Witness protection cost, reprisal, payroll leak.
quarantine_copy	A copy preserved for recovery but barred from clean use.	Schedule delay, grief pressure, recovery cost.

Required gameplay use

A ledger is only valid if at least one later rite can inspect it. It should be assignable when the player tries to:

• recall a derivative copy before a faction packages it;
• defend a public copy from lawful seizure;
• prove a sponsor package omitted a public receipt;
• test whether an editor cut is admissible as proof;
• quarantine a copy that would create broadcast-reality drift;
• split future route access between lawful, public, editor, sponsor, pirate, and archive copies;
• accept that one copy has become hostile, captured, or false-owned.

Branch states

State	Meaning	Required consequence
single_source_clean	One copy is enough for current use.	Future branch still records which channels accept it; no universal copy.
provenance_split_open	Multiple copies exist with incompatible custodians.	Recall, assign, publish, package, quarantine, or default choices appear.
public_copy_defended	Public receipt survives seizure or private laundering.	Public legitimacy rises; sponsor, inspector, or exposure pressure rises.
lawful_copy_narrowed	Legal copy survives but loses public or artistic scope.	Lawful route unlocks; public distrust or artist-boundary risk rises.
editor_cut_relied_on	Cutroom continuity carries the asset.	Audience legibility improves; source ambiguity, edit debt, or archive doubt rises.
sponsor_package_captured	Sponsor version becomes the easiest route.	Immediate relief improves; contract capture and fan resentment rise.
pirate_echo_kept_alive	Unauthorized relay preserves a copy.	Public route remains possible; contempt, seizure, or pirate heat rises.
quarantine_copy_only	Asset is preserved but only for recovery.	Fraud or drift risk lowers; current route blocks or costs more.
copy_false_owner_hardened	A derivative copy becomes treated as the real owner.	Future recall or custody action becomes harder and more expensive.
copy_recalled_under_cost	Player pulls a copy back from public/faction use.	One future misuse blocks; another faction becomes hostile or debt rises.

Counter hooks

A later resolution should move at least three of these surfaces:

• route_asset_provenance
• copy_custody_clarity
• public_copy_legitimacy
• lawful_copy_admissibility
• editor_cut_reliance
• sponsor_package_capture
• pirate_echo_heat
• archive_copy_opacity
• witness_excerpt_risk
• quarantine_recovery_cost
• reality_drift
• inspection_heat
• sponsor_stop_loss_pressure
• fan_oxygen_resentment
• contract_capture
• edit_debt
• archive_debt
• false_owner_pressure

Valid assignments

A rite may accept this card with one or more of:

• public proof holder: Yu Lan, fan witness, witness excerpt, public receipt;
• lawful handler: Han Yanshuang, inspector, archive seal, admissible copy;
• cutroom handler: Baiya, editor checksum, black-box cut;
• contract handler: Shen Luo, sponsor waiver, naming-right package;
• sponsor claimant: Orion Breath or equivalent sponsor desk;
• contested source: master tape, voice/body receipt, memorial air copy, archive docket, route asset, or pirate echo.

Failure pressure

The card should never disappear quietly. If ignored, one of these states should become durable:

• copy_false_owner_hardened;
• sponsor_package_captured;
• editor_cut_relied_on_without_source;
• public_copy_seized;
• pirate_echo_criminalized;
• quarantine_copy_only;
• witness_excerpt_hostile;
• route_asset_recall_blocked.

Non-goals

• Not a generic audit log.
• Not a count target.
• Not a fixed-turn trigger.
• Not a universal ownership proof.
• Not a clean success reward; every useful copy carries custodian pressure, channel limits, and future route consequences.