False Backflow Merge Default / 虚假逆流并账默认

False Backflow Merge Default is the failure event for treating a late reversed-flow receipt as proof that the prior all-clear was universally true.

It most often appears around Backflow Usher, but it can fire for any equivalent carrier. The event exists to ensure that a late wristband, sealed name, route pouch, or public credit cannot silently repair earlier egress, roll-call, recap, or custody scars.

Fire or arm condition

Fire or arm this event when any of these happen:

• 逆流引座账本 row is absent while a reversed-flow carrier is used as proof;
• the prior receipt is hidden or treated as universal all-clear;
• the late subject/proof bundle is hidden;
• borrowed or sealed identity is used as public presence;
• a private or sealed boundary becomes public consent;
• public credit is treated as protection;
• a sponsor, safety, archive, lawful, public, or broadcast narrator merges the row into clean recap without naming harmed reader;
• a future route consumes the row without reading omitted scar;
• a backflow carrier is traded, captured, or ignored without future state.

Required payload

default_required:
  event: storyteller.event.false_backflow_merge_default.v1
  backflow_row_or_absence: <row id or explicit_absence>
  carrier: storyteller.character.cen_hui_backflow_usher.v1 | equivalent | explicit_absence
  prior_receipt:
    prior_receipt_id_or_absence: <receipt id or explicit_absence>
    prior_receipt_kind: live_floor_egress | missing_roll_call | capacity_notice | fan_oxygen | route_asset_custody | public_recap | equivalent | explicit_absence
    prior_receipt_claim: safe_exit | present | served | released | escorted | public_all_clear | lawful_only_presence | sponsor_manifest_presence | equivalent | explicit_absence
    receipt_holder_or_absence: producer | safety_marshal | archive | inspector | sponsor | fan_delegate | access_operator | broadcast_reality | explicit_absence | equivalent
  late_carrier:
    reversed_flow_node_or_absence: <node or explicit_absence>
    carried_subject_or_bundle_or_absence: <subject proof or explicit_absence>
    borrowed_or_sealed_identity_or_absence: <identity seal or explicit_absence>
    boundary_or_promise_or_absence: <scope or explicit_absence>
  false_merge:
    default_narrator: safety_marshal_log | sponsor_manifest | public_recap | archive_counter | lawful_table | broadcast_reality_echo | handler_shortcut | crowd_memory | equivalent
    merge_claim: late_receipt_fixes_all | backflow_proves_safe_exit | sealed_name_as_public_presence | public_credit_as_consent | sponsor_manifest_absorbs_late_row | recap_uses_backflow_cleanly | equivalent
    harmed_reader_if_merged_or_absence: sealed_subject | fan_public | access_caption_reader | archive | lawful_reader | sponsor | route_asset_reader | confidant_character | future_audience | explicit_absence | equivalent
    omitted_scar_or_absence: one_way_scar | deferred_flow | unserved_notice | identity_gap | condition_unknown | promise_scope | proof_contamination | public_false_memory | explicit_absence | equivalent
  state_after:
    carrier_state_after: hostile | captured | missed | faction_bound | recovery_only | equivalent
    backflow_state_after: false_backflow_merge | public_recap_correction_required | future_roll_call_challenge | route_blocked | recovery_only | ending_scar | equivalent
    future_reader_effect: roll_call_challenge | public_recap_correction_required | access_class_escalation | fan_oxygen_review | archive_fraud_review | route_asset_costlier | broadcast_reality_scar | ending_scar | equivalent
  counter_deltas_min: 3

The event fails if it only changes mood, money, reputation, generic attendance, or generic crowd safety.

Outcome families

Hostile carrier

岑回 or equivalent refuses future carriage and can testify that the producer merged a scarred late row into all-clear.

state_after: hostile_carrier
cost_any:
  - hostile_witness_up
  - public_receipt_distrust_up
  - route_asset_pressure_up
future_effect_any:
  - future_roll_call_challenge

Captured carrier

A sponsor, archive, inspector, editor, or safety desk obtains the wristband/proof before the producer records scope.

state_after: captured_carrier
cost_any:
  - route_capture_up
  - archive_debt_up
  - sponsor_stop_loss_pressure_up
future_effect_any:
  - backflow_route_costlier
  - lawful_or_sponsor_gate_required

Public correction required

A public recap used the backflow row as clean proof and must be corrected before reuse.

state_after: public_recap_correction_required
cost_any:
  - false_public_memory_up
  - correction_pressure_up
  - broadcast_reality_drift_up
future_effect_any:
  - correction_required_before_backflow_reuse

Recovery-only route

The backflow route cannot be cleanly used until substitute proof, roll-call, protection, or addendum catches up.

state_after: recovery_only_backflow_route
cost_any:
  - recovery_cost_up
  - route_blocked_up
future_effect_any:
  - recovery_only
  - ending_scar

Non-goals

• Not a death reveal.
• Not a crowd panic cutscene.
• Not a punishment for using backflow at all.
• Not a generic roll-call failure.
• Not a fixed-turn event.
• Not valid unless the false merge changes future route, recap, roll-call, custody, or ending-scar state.