Unauthorized Warrant Trace Default / 未授权播出痕迹默认
Unauthorized Warrant Trace Default fires only when a complete eight-card review explicitly chooses unauthorized_trace_default, accepting that the named intervention will be treated as broadcast reality without a valid served warrant.
It is not a flavor penalty. It is the event that proves the broadcast system accepted a result without knowing why it was allowed to become real.
Fire condition
fire_condition:
trigger_kind: state_pressure
source_ledger: storyteller.card.broadcast_warrant_ledger.v1
selected_branch: unauthorized_trace_default
required_flags:
- broadcast_warrant.unauthorized_default_pending
- event.unauthorized_warrant_trace_default.armed
- future_route.unauthorized_warrant_recovery_pending
- broadcast_reality.false_clean_warrant_claimed
rejected_constructive_branches:
- sponsor_warrant
- lawful_warrant
- archive_warrant
- oxygen_warrant
- audit_warrant
- unauthorized_witness
- black_box_cut
- refuse_broadcast
no_fixed_turn_trigger: trueThe event must not fire because a fixed number of turns passed, because the review was skipped, or because its slots were underfilled. It appears only after the complete eight-card review explicitly resolves choice index 8, unauthorized_trace_default, and all four pending flags are present.
Required payload
unauthorized_warrant_trace_default:
event_id: storyteller.event.unauthorized_warrant_trace_default.v1
source_ledger: storyteller.card.broadcast_warrant_ledger.v1
attempted_intervention: <intervention id>
missing_authority: sponsor_asset | legal_asset | archive_asset | memorial_asset | oxygen_asset | audit_asset | public_witness | black_box_edit | producer_license | explicit_absence
missing_operator_or_absence: character_card | rite | route_asset | sponsor_copy | archive_order | public_receipt | oxygen_ledger | editor_checksum | explicit_absence
false_or_missing_cut_path: saintly_pacification | legal_folding | black_box_edit | unauthorized_witness | white_glove_audit | sponsor_package | oxygen_bridge | memorialization | explicit_absence
capturing_reader: sponsor | lawful_reader | archive | public_table | oxygen_queue | memorial_route | cutroom | producer_license | management_report | route_asset | blackout_system | equivalent
selected_terminal: expose_authority_gap | quarantine_false_warrant | accept_recovery_only_trace
trace_state_after: authority_gap_exposed | false_warrant_quarantined | recovery_only_trace
future_reader_effect: public_or_lawful_warrant_review_required | intervention_blocked_until_warrant_served | warrant_trace_recovery_only
counter_deltas:
relief: []
cost: []
future: []Exact terminal repairs
The event exposes exactly three terminals. Each option clears all four pending flags, records the default scar, and leaves exactly one terminal state/future pair.
| Option index | Terminal ID | Exact state after | Exact future effect |
|---|---|---|---|
0 | expose_authority_gap | authority_gap_exposed | public_or_lawful_warrant_review_required |
1 | quarantine_false_warrant | false_warrant_quarantined | intervention_blocked_until_warrant_served |
2 | accept_recovery_only_trace | recovery_only_trace | warrant_trace_recovery_only |
expose_authority_gap preserves the attempted intervention while making the missing authority review public or lawful. quarantine_false_warrant blocks consumption until a valid warrant row is served. accept_recovery_only_trace keeps the scar and permanently narrows clean reuse. None retroactively authorizes the original intervention.
Counter contract
The event must mutate at least three durable surfaces, including one future reader effect. Common deltas include:
counter_deltas:
relief:
- immediate_pressure_down
- clean_slot_temporarily_open
cost:
- unauthorized_trace_up
- audit_pressure_up
- archive_trust_down
- oxygen_debt_up
- memorial_debt_up
- edit_debt_up
- public_distrust_up
future:
- future_reader_acceptance_blocked
- public_table_required
- lawful_appeal_required
- sponsor_unwind_required
- checksum_required
- recovery_route_requiredLocal authority denial
The event can record, expose, quarantine, or recovery-lock only this intervention’s false warrant trace. Runtime and public metadata must preserve the exact denial boundary:
authority_boundary:
localAuthorityOnly: true
recordsInterventionWarrantTraceOnly: true
preservesNamedAuthorityOperatorCutAndCost: true
preservesFutureReaderScope: true
requiresVisibleTraceForBroadcastReality: true
grantsConsent: false
grantsLegalValidity: false
grantsWaiver: false
grantsSettlement: false
grantsRouteClearance: false
grantsArchiveRelease: false
grantsProofTruth: false
grantsSponsorWarranty: false
grantsProducerLicenseRelease: false
grantsSponsorAuthority: false
grantsFanAuthority: false
grantsInspectorAuthority: false
grantsEditorAuthority: false
grantsProducerLicense: false
grantsFutureReuseAuthority: false
grantsUniversalBroadcastAuthority: falseReplay readback
lens/replays/broadcast-warrant-trace.replay.json must arrive through choice index 8 of storyteller.rite.broadcast_warrant_trace_review.v1, show all four pending flags, and resolve option index 0, expose_authority_gap. lens/storyteller-broadcast-warrant-trace.runtime.test.ts separately proves all three terminal IDs from equivalent pending states. The evaluator and public/data/storytellerEvent+nodes.json5 must match the source event exactly.
Recovery hooks
Recovery requires visible scar:
- preserve the completed one-shot Broadcast Warrant Trace Review rather than reopening it;
- attach lawful annex or public countercopy;
- expose black-box checksum;
- unwind sponsor capture;
- create oxygen or memorial restitution;
- require audit review;
- route the result through Warrant Trace Afteruse Receipt or other recovery-only content.
Non-goals
- Not a generic failure event.
- Not a fixed-turn timeout.
- Not a clean retcon.
- Not valid if it does not name missing authority, attempted intervention, capturing reader, trace state after, and future reader effect.