Operator Relay Chain Ledger / 操作员接力链账本

Operator Relay Chain Ledger is the card used when a single scarred source claim passes through two or more low-rank operator rows before a future reader consumes it.

The card exists because 楼刻, 陆纷, and 岑回 each make one operator surface playable, but a live route can still launder a scar by chaining those surfaces: caption becomes clip, clip becomes recap, recap becomes roll-call proof, or late backflow becomes public all-clear. This ledger keeps the relay chain visible.

Card promise

A valid ledger must show how a source scar changes while moving through operator rows.

It must record:

• source claim and original scar or explicit absence;
• at least two operator rows or explicit absences;
• row order and cited-as-proof relation;
• what each row keeps, narrows, drops, contradicts, or converts;
• beneficiary of the clean relay;
• harmed or omitted reader if rows are merged cleanly;
• selected relay posture;
• future reader or route that will consume the relay state.

The card is invalid if it only records proof exported, clip approved, caption matched, all clear, operator handled, or generic staff notes.

Relay row shape

operator_relay_chain_ledger:
  source_claim:
    source_claim_id: <stable row or explicit_absence>
    source_surface: live_voice | caption_row | recap_row | egress_receipt | roll_call_row | clip_fragment | backflow_receipt | equivalent
    original_scar: access_harm | omitted_reader | false_all_clear | dropped_scar_tag | sponsor_scope | translation_split | proof_contamination | recovery_only | equivalent | explicit_absence
    proof_anchor_or_absence: caption_log | recap_row | clip_slip | egress_ledger | backflow_ledger | roll_call_ledger | public_receipt | explicit_absence
  relay_rows:
    - row_id: <row id>
      row_kind: caption_switch | recap_clip | backflow_receipt | roll_call_recheck | public_recap | mirror_relay | equivalent
      operator_or_absence: lou_ke | lu_fen | cen_hui | explicit_absence | equivalent
      operator_state_before: visible | recruited | protected | retained | captured | hostile | missed | suppressed | explicit_absence
      cites_previous_row_as_proof: true | false
      scar_action: carried | narrowed | split | escrowed | softened | dropped | contradicted | sponsor_cleaned | merged_clean | explicit_absence
      row_reader: access_public | fan_public | sponsor | archive | lawful_reader | mirror_desk | future_route | broadcast_reality | equivalent
  relay_risk:
    beneficiary_of_clean_relay: sponsor | management | archive | mirror_desk | public_stability | route_claimant | producer_license | equivalent | explicit_absence
    harmed_or_omitted_reader: access_public | fan_oxygen_queue | source_holder | late_subject | lawful_reader | public_recap_reader | route_asset | equivalent | explicit_absence
    false_clean_claim_if_unresolved: <claim or explicit_absence>
    future_reader_or_route: <storyline route asset or system>

Valid uses

Use this card when at least one future reader will rely on a chain of operator-derived rows rather than the original source.

Valid examples:

• an access caption is clipped into a sponsor-safe highlight and later cited by public recap;
• a backflow receipt narrows an egress all-clear, but the recap wants to merge both rows cleanly;
• a scarred recap fragment is used as roll-call proof without carrying the omitted-reader scar;
• a caption switchboard row and a syndication slip disagree about whether a source gave consent;
• a mirror relay cites a clean clip while the underlying caption still requires witness protection.

Invalid examples:

• a single operator row with no relay;
• a source proof returning from an older session without current relay rows;
• pure marketing circulation with no source scar, harmed reader, or future route effect;
• a fixed episode position, raw clip count, or dashboard state.

Branch memory fields

Every branch that resolves this card must leave durable fields:

branch_memory_required:
  selected_posture: carry_chain_scar | split_relay_readers | escrow_first_row | protect_operator_link | publish_chain_addendum | quarantine_relay | accept_scoped_clean_relay | false_clean_relay_default
  selected_rows: []
  row_states_after: []
  operator_states_after: []
  chain_state_after: scar_carried | split | escrowed | addendum_required | quarantined | scoped_clean | false_clean | hostile | recovery_only | equivalent
  harmed_reader_state_after: <state or explicit_absence>
  future_reader_effect: accepted_with_scar | split_required | source_rehearing_required | addendum_required | public_audit_required | sponsor_only | mirror_only | blocked | hostile | costlier | recovery_only
  counter_deltas:
    relief: []
    cost: []
    future: []

Counter surfaces

Expected deltas include relay_chain_legibility, scar_tag_integrity, operator_exposure, caption_reliance, clip_legibility, false_all_clear, public_receipt_legitimacy, public_receipt_distrust, fan_oxygen_resentment, sponsor_stop_loss_pressure, mirror_relay_contempt, route_asset_integrity, broadcast_reality_drift, and future_recovery_cost.

A branch must mutate at least one relief surface, one cost surface, and one future reader or route surface.

Miss/default memory

If the ledger is absent when a future reader consumes a relay chain, record a miss/default rather than clean success:

miss_or_default_states:
  false_clean_relay: true
  scar_dropped_between_rows: true
  operator_absence_hidden: true
  harmed_reader_merged_clean: true
  source_rehearing_required: true
  future_route_effect_any:
    - addendum_required
    - split_required
    - public_audit_required
    - route_blocked
    - costlier
    - hostile
    - recovery_only