Witness Payroll Leak / 证人薪册泄露

Witness Payroll Leak is the visible breach event for unpaid, hidden, sponsor-captured, editorially contradicted, or publicly exposed witness support.

It fires when Storyteller fails to keep a protected person legible and safe enough to remain a route asset. The leak is not flavor text: it must change follower state, claimant pressure, route access, and at least three counters or durable states.

Event trigger

Fire or record this event when all of the following are true:

1. 受保护证人薪册 or an equivalent support surface exists, or a protected/exposed person lacks a support surface;
2. the person is in payroll_due, payroll_deferred, sponsor_retained, masked_by_edit, unpaid_hostile, captured_witness, witness_disappeared, sacrificed_witness, or equivalent risk state;
3. a claimant pressure reaches the person, payroll record, alias, safehouse, public receipt, audit oath, or edit mask;
4. the breach can alter future route access, public legitimacy, archive admissibility, sponsor pressure, broadcast reality, or follower state.

This event must never be emitted only because a fixed numbered turn has arrived.

Breach surfaces

Breach surface	Trigger	Required consequence
unpaid_witness_talks	Support was due and unpaid.	Person becomes hostile, loyalty doubt rises, and a route becomes recovery-only or costlier.
safehouse_name_leaks	Shelter exists but claimant finds the location or alias.	Retaliation risk rises; public, inspector, or sponsor pressure changes.
sponsor_retainer_exposed	Sponsor/manager quiet money becomes visible.	Contract capture and public distrust rise; slot pressure may temporarily fall.
audit_oath_challenged	Inspector/archive protection is attacked.	Admissibility may hold, but inspection heat or bureau favor debt rises.
public_shelter_swarmed	Fan/public protection becomes too visible.	Public legitimacy may rise while fan oxygen liability and sponsor pressure rise.
edit_mask_contradicted	Black-box/edit alias conflicts with source proof or public receipt.	Exposure may fall or spike; edit debt, drift, or archive doubt rises.
witness_sold_or_captured	Another faction controls the person.	Future use requires rescue, exchange, counterproof, or suppression.
sacrifice_becomes_public	The player burned the witness to protect another route.	Immediate relief is remembered as coercion; public/route legitimacy worsens.

Branch outcomes

Outcome A — Leak contained by payment

The player covers the missing support, protects the person, or converts them into a paid route asset.

Expected result:

leak_state: contained_by_payment
payroll_state_after: sheltered | paid_route_asset
relief:
  - witness_retaliation_risk decreases
  - person remains assignable
cost:
  - payroll_leak, cash_reserve, favor_debt, inspection_heat, or safehouse_capacity worsens

Outcome B — Leak converted into public shield

The player uses Yu Lan, public receipt, fan oxygen queue, or audience testimony to make the leak politically costly to exploit.

Expected result:

leak_state: public_shield
payroll_state_after: public_shelter
relief:
  - public_receipt_legitimacy or public_witness_legitimacy improves
cost:
  - fan_oxygen_liability, sponsor_stop_loss_pressure, inspection_heat, or witness_retaliation_risk rises

Outcome C — Leak sealed by audit oath

The player uses Inspector Rhee Archive, Han Yanshuang, audit seal, or archive custody proof to keep testimony admissible.

Expected result:

leak_state: audit_sealed
payroll_state_after: audit_protected
relief:
  - custody_clarity or archive_signature_legitimacy improves
cost:
  - inspection_heat, bureau_favor_debt, sponsor pressure, or archive debt rises

Outcome D — Leak buried by sponsor or edit

The player uses Shen Luo, Orion Breath, sponsor retainer, Baiya, or edit mask to keep the person quiet or hidden.

Expected result:

leak_state: buried_by_contract_or_edit
payroll_state_after: sponsor_retained | masked_by_edit | payroll_deferred
relief:
  - immediate retaliation or slot pressure decreases
cost:
  - contract_capture, edit_debt, public_receipt_distrust, witness_loyalty_doubt, future_blackmail_cost, or reality_drift rises

Outcome E — Leak becomes hostile witness

The player lacks support, hides the roster, or lets a claimant reach the person first.

Expected result:

leak_state: hostile_witness_created
payroll_state_after: unpaid_hostile | captured_witness | witness_disappeared
relief:
  - none, or one short-term pressure pauses because the person is silenced
cost:
  - hostile testimony, duplicate claim, route block, false owner, or recovery-only branch appears

Outcome F — Sacrifice recorded

The player deliberately burns the person to protect an archive order, performer, public receipt, sponsor slot, or broadcast reality.

Expected result:

leak_state: sacrifice_recorded
payroll_state_after: sacrificed_witness
relief:
  - one stronger route remains protected
cost:
  - public_witness_legitimacy, follower_morale, archive_debt, route_asset_pressure, or fan_oxygen_resentment worsens
future:
  - sacrifice can be cited by hostile witnesses or public receipt challenges

Counter contract

Every event resolution must move at least three counters or durable states. At least one movement must be relief and one must be cost.

Primary counters and states:

• payroll_leak
• witness_payroll_due
• follower_morale
• witness_loyalty_doubt
• witness_retaliation_risk
• public_witness_legitimacy
• public_receipt_legitimacy
• public_receipt_distrust
• fan_oxygen_liability
• fan_oxygen_resentment
• inspection_heat
• bureau_favor_debt
• archive_signature_legitimacy
• archive_debt
• custody_clarity
• route_asset_pressure
• sponsor_stop_loss_pressure
• contract_capture
• edit_debt
• reality_drift
• future_blackmail_cost
• false_owner_hardening_risk

Event output shape

event_id: event.witness_payroll_leak
source_roster: card.protected_witness_payroll_roster | equivalent | explicit_missing_roster
person: <witness_or_route_asset_id_or_explicit_absent>
leak_surface: unpaid_witness_talks | safehouse_name_leaks | sponsor_retainer_exposed | audit_oath_challenged | public_shelter_swarmed | edit_mask_contradicted | witness_sold_or_captured | sacrifice_becomes_public
claimant_pressure: sponsor | inspector_archive | fan_public | editor_blackbox | false_owner | pirate_relay | artist_boundary | equivalent
resolution_branch: contained_by_payment | public_shield | audit_sealed | buried_by_contract_or_edit | hostile_witness_created | sacrifice_recorded
state_after:
  payroll_state: <state>
  person_state: <state>
counter_deltas: {}
future_route_effects:
  unlocked: []
  blocked_or_costlier: []
  recovery_hooks: []

Integration notes

• After 归档执行破口, this event tests whether the carrier/witness survives the enforcement aftermath.
• After 和解反震破口, this event makes the person who carried relief/debt become payable, protected, or hostile.
• With Shadow Crew Custody Leak, this event is the follow-up layer when the leak concerns a person rather than only a packet or permit.

Non-goals

• Not an ambient scandal headline.
• Not a fixed-turn upkeep penalty.
• Not a passive relationship loss event.
• Not a clean punishment for recruiting people.
• Not a prose-only breach; it must mutate route access, witness state, claimant pressure, or counters.