Recovery Counterstub Scapegoat Default / 复原副签替罪默认

Recovery Counterstub Scapegoat Default is the adverse event that fires or arms when a scarce recovery inventory row is cited, released, archived, or spent while the counterstub holder is missing, blamed, coerced, or reduced to a clean administrative signature.

It joins the default surfaces already protected by 复原库存夺取默认 and 赞助后用默认. This event is narrower: it is not merely that inventory was captured; it is that the system has found a worker-shaped place to dump the scar.

Fire or arm when

Any of these state conditions should create or arm the event:

• 复原副签案卷 is required but absent;
• the counterstub exists but no holder, source, signature pressure, or excluded reader is named;
• a sponsor afteruse citation treats a recovery row as clean because a worker signature exists;
• archive custody accepts a scan, copy, or checksum while the physical counterstub holder is blamed or hidden;
• management files recovery inventory as available and assigns the missing row to a low-rank worker;
• a ward, fan oxygen, public, artist-boundary, lawful, or route-asset reader is excluded without a visible refusal, split, quarantine, or future scar;
• the player declines, ignores, or underfills the counterstub hearing while the row is still consumed by another pressure system.

This event must never be triggered by a fixed turn count, fixed day/week interval, raw number of cards/rites/lenses, dashboard status, or generic sponsor anger.

Required event payload

event: storyteller.event.recovery_counterstub_scapegoat_default.v1
source_docket: storyteller.card.recovery_counterstub_docket.v1 | explicit_absence
source_inventory_row: <inventory id or explicit_absence>
inventory_kind: correction_slot | ward_air | oxygen_reserve | crew_rest_shift | archive_proof_window | edit_checksum_lane | sponsor_makegood_frame | public_contrition_minute | custody_handler | security_lane | equivalent
counterstub_state_before: unsigned | held | copied | split | overwritten | missing | quarantined | surrendered | scapegoated | sponsor_captured | archive_locked | explicit_absence | equivalent
holder_state_before: protected | recruited | missed | hostile | unavailable | blamed | coerced | explicit_absence | equivalent
capture_actor: sponsor | management_table | archive_queue | ward_queue | fan_oxygen_queue | schedule_board | inspector | editor_auto_patch | handler_absence | equivalent
false_clean_claim: worker_signed_release | inventory_was_available | sponsor_settled_row | archive_scan_is_original | schedule_saved | recovery_clean | public_receipt_clean | lawful_proof_clean | equivalent
hidden_or_excluded_reader: sponsor_reader | archive_reader | lawful_reader | public_reader | fan_oxygen_reader | ward_reader | artist_boundary_reader | route_asset_reader | worker_holder | equivalent
blamed_actor_or_absence: <worker/handler/faction/explicit_absence>
future_route_effect: blocked | costlier | sponsor_only | archive_only | lawful_only | public_only | recovery_only | split_required | hostile_worker | contradiction_pending | equivalent

Counter deltas

The default must mutate at least three durable surfaces: one relief for the capturing actor, one cost, and one future route or reader scar.

Common deltas:

counter_deltas_any:
  relief:
    - sponsor_stop_loss_pressure_down
    - management_pressure_down
    - archive_queue_pressure_down
    - schedule_pressure_down
  cost:
    - worker_scapegoat_risk_up
    - recovery_counterstub_integrity_down
    - recovery_inventory_double_spend_risk_up
    - inspection_heat_up
    - public_receipt_distrust_up
    - fan_oxygen_resentment_up
    - handler_burden_up
  future:
    - route_recovery_cost_up
    - archive_counterstub_debt_up
    - future_reader_collision_armed
    - recovery_only_scar_added

The event is invalid if it is only a money loss, a generic worker morale hit, or a silent inventory decrement.

Follow-up hooks

After the event, future implementation should be able to open at least one of these recovery paths:

• protect or recruit the holder before the scapegoat state hardens;
• split the counterstub into sponsor-facing and archive-facing proof;
• quarantine the row for lawful review;
• publicly footnote the blamed worker and reopen the harmed reader;
• refuse the false stub and accept immediate sponsor or schedule pressure;
• treat the route as recovery-only until the holder, row, and excluded reader are repaired.

Non-goals

• Not punishment for using recovery inventory.
• Not a generic bad ending.
• Not a court scene by itself.
• Not a sponsor default duplicate.
• Not an archive default duplicate.
• Not valid without a named or explicitly absent counterstub holder.