Three-Key Custody Lockout / 三钥羁押锁死

Three-Key Custody Lockout is the escalation event for a 三钥羁押案卷 row that releases, stalls, or defaults while one of the three custody keys is missing, refused, counterfeit, or hostile.

It is not a punishment beat for slow play. It is a state event: the asset becomes locked because sponsor, inspection, and cutroom authority can no longer be reconciled by an invisible clean approval.

State-triggered fire condition

Fire or record this event when any of the following are true:

  1. the player attempts to release an asset with only sponsor and inspection keys while cutroom/source custody is missing or hostile;
  2. the player attempts to release with sponsor and cutroom keys while inspection/admissibility is missing, refused, or counterfeit;
  3. the player attempts to release with inspection and cutroom keys while sponsor funding, insurance, oxygen credit, or public liability is unresolved;
  4. a key holder refuses after a rival key has already been seated;
  5. a counterfeit key is discovered;
  6. the docket is ignored while a default holder has power to seize, brand, withhold, leak, or black out the asset.

The event must never be fired from a fixed numbered turn, day interval, chapter quota, or lens-health state.

Required payload

event_id: storyteller.event.three_key_custody_lockout.v1
docket: storyteller.card.three_key_custody_docket.v1
row_id: <three-key row>
asset_id: <asset>
shared_target_version: <version>
missing_or_failed_key: sponsor | inspection | cutroom | counterfeit | split_terms_broken
attempted_release_pattern: sponsor_inspection | sponsor_cutroom | inspection_cutroom | split_three_key | escrow_and_delay | quarantine | blackout_fold | default_lockout
locking_holder: sponsor | inspector | archive | editor | source_custodian | black_box | public_countercopy | route_claimant | blackout_system
excluded_holder: <holder harmed by the attempted release>
proof_or_absence: <proof id or explicit_absence>
collateral_taken_or_frozen: schedule_slot | route_asset | public_receipt | legal_seal | edit_checksum | source_tape | oxygen_credit | memorial_license | artist_consent | fan_refund_queue | explicit_absence
asset_state_after: sponsor_captured | inspection_seized | editor_withheld | counterfeit_exposed | split_canon | blackout_fold | recovery_only | hostile | blocked
future_route_effect: captured | lawful_only | public_only | costlier | contradiction_pending | recovery_only | blocked | hostile
counter_deltas:
  relief: []
  cost: []

Event variants

A sponsor and inspector agree that the public-safe copy can move, but the editor/source custodian has not seated the checksum.

Expected effects:

  • asset_state_after: editor_withheld or counterfeit_exposed;
  • source ambiguity or edit debt rises;
  • sponsor pressure or inspection heat may temporarily drop;
  • later route access becomes costlier, contradiction_pending, or recovery_only.

A sponsor funds and the cutroom produces a copy, but no lawful/admissible key exists.

Expected effects:

  • asset_state_after: sponsor_captured or counterfeit_exposed;
  • archive fraud, inspection heat, or lawful-only appeal pressure rises;
  • the public version may air but becomes vulnerable to seizure.

Inspection-cutroom release without sponsor key

An inspector and editor preserve a lawful/source copy, but funding, public liability, or oxygen credit is unresolved.

Expected effects:

  • asset_state_after: lawful_only or recovery_only;
  • public relief, sponsor credit, or schedule pressure worsens;
  • sponsor can retaliate through insolvency, stop-loss, or route-asset collateral.

Counterfeit key discovered

A key has been forged, borrowed beyond terms, or treated as seated without holder consent.

Expected effects:

  • asset_state_after: counterfeit_exposed;
  • the forged holder becomes hostile or seizure-ready;
  • at least one future clean release path is blocked until appeal, restitution, source proof, or public correction.

Split terms broken

The player had split the asset across public/formal/source copies, but one holder tries to treat the split as exclusive custody.

Expected effects:

  • asset_state_after: split_canon or contradiction_pending;
  • hostile narration, route-asset seizure, or public audit pressure rises;
  • the next custody hearing must show the broken term and harmed holder.

Follow-up pressure

A lockout should feed at least one of:

Non-goals

  • Not a random crisis event.
  • Not a morale penalty.
  • Not a turn-count timer.
  • Not a generic approval failure.
  • Not valid unless the asset state, excluded holder, proof/absence, and future route effect are durable.