Recovery Discharge Ledger / 复原出院账本

Recovery Discharge Ledger is the visible card for a living person, voice-bearing body, witness, handler, or crew member who has been placed into recovery but is now being pulled back into broadcast, testimony, sponsor packaging, archive proof, fan oxygen display, or live-floor labor.

It closes a gap between 房间占用账本 and body / consent custody: a room may be assigned correctly, but the game still must prove whether the recovering body is actually allowed to leave, appear, sing, testify, sign, work, or be represented by a substitute.

The card prevents the false-clean shortcut where a protected or exhausted person becomes available again merely because the schedule, sponsor, archive, or public needs them.

Card promise

The ledger records:

1. who is in recovery and whether they are present, protected, sedated, absent, or represented by a proxy;
2. the recovery authority, attending handler, consent receipt, and medical / safety condition or explicit absence;
3. which pressure wants discharge: broadcast slot, sponsor package, fan oxygen queue, inspector hearing, archive counter, editor patch, live floor crew load, or claimant public;
4. the proposed discharge mode;
5. the protected boundary or risk created by that mode;
6. the future reader that will accept, tax, reject, or weaponize the discharge state;
7. the default narrator if the player lets the most urgent institution discharge first.

Entry conditions

Create or refresh this card when all are true:

entry_state:
  trigger_kind: state_pressure
  recovering_body_or_voice_bearing_person_present: true
  recovery_state_known_or_explicitly_absent: true
  external_pressure_requests_return_or_representation: true
  consent_or_boundary_question_present: true
  future_reader_reads_discharge_state: true
  player_can_record_discharge_or_protection: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_count_trigger: true

Valid sources include an artist after a body / voice contradiction, a protected witness after intake, a fan oxygen claimant in the ward air room, an editor or handler after live-floor overload, or any route asset whose living body must be preserved before it can be used.

Required card fields

card_id: storyteller.card.recovery_discharge_ledger.v1
state: unopened | recovery_open | protected_in_recovery | conditional_discharge | remote_witness | proxy_representation | premature_discharge | sponsor_capture | hostile_recovery | defaulted
recovery_subject:
  subject_id: <stable id>
  subject_kind: artist | witness | handler | crew | fan_claimant | child_voice | editor | inspector_proxy | equivalent
  body_state_before: stable | fragile | sedated | voice_body_split | oxygen_limited | injured | hidden | hostile | absent | equivalent
  recovery_location_or_absence: ward_air_room | sealed_room | public_intake_bay | service_corridor_chain | offsite_safehouse | explicit_absence | equivalent
  occupancy_reference_or_absence: storyteller.card.room_occupancy_ledger.v1 | explicit_absence | equivalent
pressure_request:
  requester: sponsor | broadcast_slot | archive | inspector | fan_public | editor | claimant_public | manager | security | equivalent
  requested_use: live_appearance | final_take | testimony | signature | proof_body | public_apology | sponsor_package | oxygen_display | floor_labor | proxy_release | equivalent
  urgency_surface: schedule_slip | stop_loss | inspection_heat | archive_deadline | fan_oxygen_resentment | cutroom_debt | claimant_pressure | live_floor_capacity | equivalent
recovery_authority:
  attending_handler_or_absence: <handler or explicit_absence>
  consent_receipt_or_absence: <receipt or explicit_absence>
  boundary_condition_or_absence: rest_required | oxygen_required | silence_required | no_camera | no_signature | supervised_only | proxy_only | explicit_absence | equivalent
  release_condition_or_absence: <condition or explicit_absence>
selected_resolution:
  discharge_mode: keep_in_recovery | conditional_return | remote_witness | proxy_representation | public_refusal | sponsor_discharge | archive_compel | ignore_and_default | equivalent
  protected_boundary_or_absence: <boundary or explicit_absence>
  violated_boundary_or_absence: <boundary or explicit_absence>
  future_reader: fan_oxygen_audit | sponsor_gate | archive_reader | inspector_hearing | broadcast_reality | live_floor | correction_slot | route_asset | equivalent
default_if_unresolved:
  default_narrator: sponsor_package_first | broadcast_slot_first | archive_queue_first | inspector_first | fan_oxygen_or_medical_queue_first | editor_auto_patch_first | low_rank_staff_first | equivalent
  body_state_after: fragile_used | proxy_hardened | hostile_recovery | captured | absent | contradiction_pending | recovery_only | equivalent

Branch families recorded by the card

Keep in recovery with receipt

The producer refuses immediate use and records the care boundary.

Expected relief: body integrity, consent integrity, witness protection, or route trust improves.

Expected cost: schedule slip, sponsor stop-loss pressure, fan oxygen resentment, archive debt, or public distrust rises.

Conditional return

The body returns for a narrow use under handler, oxygen, silence, no-camera, or supervised-only limits.

Expected relief: one broadcast, testimony, or proof request proceeds.

Expected cost: handler burden, relapse risk, inspection heat, or consent debt rises.

Remote witness or proxy representation

The person remains protected while testimony, signature, voice, or proof is carried through a constrained proxy.

Expected relief: route remains alive without full physical exposure.

Expected cost: authenticity doubt, archive review, fan distrust, sponsor dissatisfaction, or editor patch risk rises.

Public refusal

The subject, handler, or lawful proxy records that the requested use is refused.

Expected relief: consent boundary and public receipt legitimacy improve.

Expected cost: sponsor, schedule, archive, inspector, or fan pressure becomes explicit future conflict.

Sponsor / archive compelled discharge

An institution wins the right to use the recovering body or its public substitute.

Expected relief: immediate package, slot, or proof pressure falls.

Expected cost: body harm, consent debt, hostile recovery, archive fraud risk, fan oxygen backlash, or route trust loss rises.

Ignore and default

The producer leaves the ledger unresolved or lets urgency decide.

Expected result: premature discharge hardens into a future reader effect instead of disappearing.

Required deltas

A resolved ledger row must mutate at least three surfaces:

counter_deltas_required:
  relief: at_least_one
  cost: at_least_one
  future_reader_or_route_effect: at_least_one

Useful counters and states:

• recovery_integrity
• body_boundary_integrity
• consent_integrity
• artist_trust
• witness_exposure
• handler_burden
• ward_air_capacity
• schedule_slip_pressure
• fan_oxygen_resentment
• sponsor_stop_loss_pressure
• inspection_heat
• archive_debt
• archive_fraud
• voice_integrity_risk
• live_floor_capacity
• public_receipt_legitimacy
• route_asset_pressure
• broadcast_reality_drift

Non-goals

• Not a health bar.
• Not a hospital inventory card.
• Not a fixed rest timer.
• Not a universal cure or clean availability toggle.
• Not valid if a recovering body can be spent without consent, boundary, handler, release, and future reader state.