Recovery Indemnity Shelf / 复原追偿搁架

Recovery Indemnity Shelf is a docket-card for the moment when a spent recovery row, sponsor makegood, or archive-custody proof still leaves someone exposed to future recourse.

The card exists because 复原库存分诊线 can decide which finite row is spent, and 赞助后用引证线 can stop sponsor proof from becoming a universal receipt, but a later route still needs to know who carries the claim when the recovery fails, is cited again, or is recalled by a reader.

This is not a clean legal waiver. It is a route asset and liability object inside Route Assets and Custody. If the player shelves recourse onto the wrong body, worker, claimant, or archive copy, the future route inherits that scar.

Card promise

A recovery or sponsor settlement cannot be complete until the shelf records:

• what source created the recourse;
• which recovery inventory, sponsor citation, custody proof, or claimant row is being protected;
• who is proposed to hold liability;
• who is protected by that choice;
• who is excluded, burdened, or left with only a recovery-only path;
• what future reader can call the shelf back.

The card fails as content if it stores only waiver_signed, liability_resolved, sponsor_paid, archive_safe, or worker_signed.

Required fields

recovery_indemnity_shelf:
  shelf_id: <stable id>
  source_pressure: recovery_inventory_allocation | sponsor_afteruse_citation | archive_custody_proof | claimant_floor_intake | management_clean_report | equivalent
  source_object:
    object_id: <card/row/citation/proof id or explicit_absence>
    original_scar: <shortfall injury omission false-clean claim default capture or explicit_absence>
    inventory_or_citation_state_before: allocated | split | reserved | borrowed_forward | quarantined | sponsor_only | public_only | lawful_only | false_available | recovery_only | equivalent
  proposed_indemnity_holder:
    holder: sponsor | producer_license | archive_shelf | ward_queue | public_fan_trust | worker_carrier | claimant_body | inspector_escrow | explicit_absence | equivalent
    holder_asset_or_absence: lin_qiao_chain_runner | pei_zhan_first_custody_bailiff | recovery_worker | claimant_row | archive_copy | sponsor_release | producer_license | explicit_absence | equivalent
    holder_state_before: protected | exposed | captured | hostile | absent | coerced | scoped | equivalent
  protected_reader:
    reader: sponsor_reader | lawful_reader | public_reader | artist_boundary_reader | fan_oxygen_reader | archive_reader | management_reader | route_asset_reader | equivalent
    minimum_acceptance_surface: <surface>
  excluded_or_burdened_reader:
    reader: <reader or explicit_absence>
    harm_or_burden: <what they absorb or lose>
  recourse_trigger:
    trigger_kind: state_pressure
    trigger_event: audit_recall | sponsor_reuse | public_counterclaim | artist_boundary_reopen | fan_refund_demand | archive_checksum_failure | recovery_relapse | worker_testimony | route_asset_claim | equivalent
    no_fixed_turn_trigger: true
  shelf_state_after: proposed | assigned | split | escrowed | refused | quarantined | default_captured | false_clean | recalled | recovery_only | equivalent
  future_route_effect: sponsor_only | lawful_only | public_only | artist_boundary_only | worker_hostile | claimant_hostile | route_costlier | blocked | contradiction_pending | accepted_with_cost | equivalent

Reader table

The card must make reader difference visible. At least one reader receives immediate relief and another receives cost, exclusion, or recall power.

Reader	What they want	What the shelf must show
Sponsor reader	stop-loss, clean package, release reuse	whether sponsor keeps recourse or offloads it
Lawful/archive reader	admissible proof chain	whether archive holds liability, quarantines, or refuses
Public/fan reader	receipt, refund, oxygen legitimacy	whether public trust carries cost or can recall the shelf
Artist/boundary reader	body, voice, recovery, consent protection	whether a person is being used as settlement inventory
Worker/route-asset reader	job survival, testimony, carrier protection	whether 林乔 or 裴栈 becomes protected, hostile, captured, or absent
Management reader	clean KPI, closed report	whether false-clean closure is blocked

Branch memory

The shelf must remember both success and cost.

branch_memory:
  selected_assignment: sponsor_retains | producer_underwrites | archive_escrow | public_fan_trust | worker_protected_refusal | split_recourse | quarantine_source | default_shelving
  immediate_relief: <counter/tag/state>
  cost_surface: <counter/tag/state>
  burdened_or_excluded_reader: <reader>
  holder_state_after: <state>
  shelf_state_after: <state>
  future_route_effect: <effect>

Worker and claimant states

The shelf can mutate low-rank or claimant route assets. Valid states include:

• protected_indemnity_witness
• coerced_indemnity_signer
• sponsor_burdened_worker
• archive_escrow_witness
• public_trust_witness
• hostile_recourse_witness
• claimant_burdened_body
• recovery_only_claimant
• indemnity_absent_signer
• route_asset_indemnity_witness

A worker or claimant cannot be used as silent settlement inventory.

Default memory

If no credible assignment exists, the card records default capture instead of pretending settlement is clean.

default_memory:
  default_actor: sponsor | management | archive_queue | ward_queue | inspector | handler_absence | equivalent
  false_clean_claim: recourse_resolved | sponsor_settled_all | worker_signed_all | archive_holds_all | recovery_safe | public_receipt_clean | metric_closed | equivalent
  burdened_reader: <reader or explicit_absence>
  holder_state_after: coerced | absent | captured | hostile | explicit_absence | equivalent
  future_route_effect: worker_hostile | claimant_hostile | sponsor_only | lawful_only | public_only | route_costlier | blocked | recovery_only | contradiction_pending

Non-goals

• Not a universal waiver.
• Not abstract insurance.
• Not a governance or compliance checklist.
• Not a money-only solution.
• Not valid unless the shelf mutates a future reader, route asset, worker state, claimant state, or recovery path.