Provenance Fork Resurfaces / 来源分岔再浮现

Provenance Fork Resurfaces is the pressure event that fires when a derivative copy of a broadcast asset becomes more route-relevant than the original source.

It is the visible consequence of letting a public receipt, lawful copy, editor cut, sponsor package, pirate echo, witness excerpt, archive copy, or quarantine copy drift away from the source asset. The event should force the player to acknowledge that the route now depends on which copy survived, not on a generic memory that the broadcast happened.

Trigger

Fire or arm this event when all are true:

1. 播出资产来源账本 or equivalent state exists;
2. at least one derivative copy has a custodian, legality class, or route use that conflicts with another copy;
3. a faction attempts to cite, recall, repackage, seize, edit, publicize, quarantine, or criminalize one copy;
4. at least one future route action would accept a different copy than the faction is presenting;
5. the fork has not already been reconciled, openly split, quarantined, or hardened as false owner.

The trigger is state-based. It must not depend on turn count, day count, lens health, or raw content targets.

Event payload

event_id: storyteller.event.provenance_fork_resurfaces.v1
source_ledger: storyteller.card.broadcast_asset_provenance_ledger.v1
source_asset_id: <stable asset id>
resurfacing_copy:
  copy_id: <copy id>
  copy_kind: lawful_copy | public_receipt | editor_cut | sponsor_package | pirate_echo | archive_copy | witness_excerpt | quarantine_copy | master_source
  custodian: <faction or absence>
  legality_class: <class>
competing_copy:
  copy_id: <copy id or absence>
  copy_kind: <kind or absence>
  custodian: <faction or absence>
attempted_use: route_unlock | correction | appeal | memorialize | package | edit | seize | publish | criminalize | recover
future_route_conflict: true
claimants_min: 2

Event variants

Sponsor package outruns source

A sponsor package is being treated as the official future even though the source, public receipt, or artist boundary says otherwise.

Expected effects:

• sponsor_package_capture +1 or contract_capture +1;
• sponsor_stop_loss_pressure -1 or schedule pressure decreases;
• public_receipt_distrust +1, fan_oxygen_resentment +1, artist_boundary_risk +1, or future blackmail rises;
• a recall, public defense, or split-copy hearing becomes offered or recorded as blocked.

Editor cut becomes the proof

An editor-safe version is being used as if it were raw source proof.

Expected effects:

• continuity_hazard -1 or audience legibility improves;
• edit_debt +1, source_ambiguity +1, or archive_debt +1;
• lawful/public/witness copy becomes blocked, costlier, or hostile;
• later raw proof requires a different bridge.

Public receipt refuses private recall

A fan, historian, witness, or pirate-facing copy refuses sponsor, inspector, or archive recall.

Expected effects:

• public_copy_legitimacy +1 or fan_oxygen_balance +1;
• inspection_heat +1, sponsor_stop_loss_pressure +1, pirate_echo_heat +1, or witness risk rises;
• public route remains visible while lawful/corporate route becomes contested.

Lawful copy narrows the route

An inspector, archive office, or legal bridge keeps an admissible copy but strips public, artist, pirate, or sponsor scope.

Expected effects:

• lawful_copy_admissibility +1 or copy_custody_clarity +1;
• public_copy_legitimacy -1, public_grief_pressure +1, bureau_favor_debt +1, or sponsor pressure rises;
• future public or memorial route requires a new source or apology bridge.

Pirate echo keeps the dead branch alive

An unauthorized relay or pirate memory preserves a route copy that official channels tried to recall.

Expected effects:

• pirate_echo_heat +1;
• public_receipt_legitimacy +1 or route survival remains possible;
• inspection_heat +1, contempt risk, seizure, or route criminalization rises;
• a future lawful use rejects the pirate copy unless converted.

Quarantine copy becomes the only surviving copy

The safest copy is barred from clean public use, leaving the route recoverable but not playable as normal.

Expected effects:

• reality_drift -1, archive_fraud -1, or contempt risk decreases;
• quarantine_recovery_cost +1, schedule pressure, public grief, or sponsor objection rises;
• future route action becomes recovery-only or requires recall hearing.

False owner hardens through silence

The player ignores the provenance fork or lacks credible handler/proof. The easiest visible copy becomes the apparent owner.

Expected effects:

• copy_false_owner_hardened or equivalent tag appears;
• false_owner_pressure +1, archive_debt +1, fan_oxygen_resentment +1, reality_drift +1, or future recovery cost rises;
• at least one future route action is blocked, hidden, hostile, or requires recovery.

Follow-up choices

A valid firing should offer or record at least one of:

• assign 播出资产召回听证;
• defend public copy;
• narrow lawful copy;
• rely on editor cut;
• accept sponsor package;
• split copies openly;
• quarantine copy;
• let false owner harden.

Counter floor

Each event instance must move at least three counters or durable states. One may be relief, but at least one must be a cost and at least one must alter a future route acceptance, block reason, required bridge, or asset state.

Failure states

• copy_false_owner_hardened
• route_asset_recall_blocked
• editor_cut_relied_on_without_source
• sponsor_package_captured
• public_copy_seized
• pirate_echo_criminalized
• quarantine_copy_only
• witness_excerpt_hostile

Non-goals

• Not a flavor flashback.
• Not a generic contradiction event.
• Not a proof that the original asset was true.
• Not a fixed-turn aftershock.
• Not valid unless a derivative copy changes custody, route usability, future cost, or failure pressure.