Shadow Crew Custody Leak / 影子组羁押泄露

A service-corridor leak event for Inspection Shadow Crew Custody. It fires or becomes default-ready when a carrier, permit, or movable proof object is exposed, suppressed, sacrificed, captured, falsely cleaned, or moved without a concrete chain.

The bound game id remains storyteller-event-turn54-shadow-crew-custody-leak for compatibility. The event is not tied to a fixed turn number.

State-triggered entry

Arm or fire this event when all conditions below are present:

1. a shadow evidence transfer, proof handoff, or explicit carrier absence was attempted;
2. the proof object is named;
3. at least one claimant can exploit the custody gap;
4. the carrier, permit, or route asset is exposed, suppressed, captured, hostile, sacrificed, or absent;
5. future route access, proof burden, public receipt, archive legitimacy, or counter state can mutate.

Four terminal options

The executable event exposes exactly four terminal choices. Every choice clears cen_wei.default_pending, event.shadow_crew_custody_leak.armed, and future_route.cen_wei_recovery_pending, then records a terminal person-state, proof-state, harmed reader, future route, and four counter deltas.

Option	Cen Wei terminal state	Proof state	Future route
record_hostile_leak	hostile_leak_source	hostile_counterclaim	hostile
record_sponsor_capture	captured_carrier	sponsor_false_owner	rescue_required
record_public_correction	public_correction_witness	correction_required	public_correction_required
record_recovery_only	explicit_absence	recovery_only	recovery_only

record_hostile_leak

Cen Wei becomes a hostile leak witness, the pirate-loop contradiction remains live, and hostile-witness, continuity, exposure, and recovery pressure rise.

record_sponsor_capture

Sponsor capture becomes explicit. Cen Wei leaves the hand, the packet carries a false-owner state, and later play requires rescue or exchange.

record_public_correction

The missing carrier row is published. Cen Wei survives as an exposed correction witness, but the route is public-correction-only and sponsor retaliation plus handler burden remain visible.

record_recovery_only

The event records explicit carrier absence, removes Cen Wei from the hand, and narrows every future reader to a recovery-only chain with custody-gap, proof-burden, archive-debt, and recovery costs.

No fifth flavor option, clean lawful repair, missing choice, or generic event acknowledgement satisfies this default.

Required mutation

This event is invalid as flavor-only. It must mutate at least three counters or durable states, with one relief and one cost where applicable.

event_result:
  event_id: storyteller.event.shadow_crew_custody_leak.v2
  source_rite: storyteller.rite.shadow_evidence_transfer.v2 | equivalent
  proof_object: <stable object id>
  claimant_exploiting_gap: <claimant id>
  carrier_state_before: <state>
  selected_terminal_option: record_hostile_leak | record_sponsor_capture | record_public_correction | record_recovery_only
  carrier_state_after: hostile_leak_source | captured_carrier | public_correction_witness | explicit_absence
  route_or_proof_state_after: protected | lawful_only | public_only | costlier | contradiction_pending | false_owner_pressure | recovery_only | blocked | equivalent
  counter_deltas:
    relief:
      - <relief counter/state>
    cost:
      - <cost counter/state>

Integration

• If the carrier survives and remains useful, send them toward Protected Witness Payroll.
• If the carrier becomes the only remaining chain proof holder, send the object toward Proof Burden Reassignment.
• If the leaked proof returns later in another claim, send it toward evidence carryover and route asset pressure.

Non-goals

• Not a fixed-turn event.
• Not a mood leak.
• Not a clean continuity repair.
• Not valid unless future route access, carrier state, proof burden, claimant pressure, or counters mutate.