Crisis Ledger Reconciliation Lens / 危机台账对表 Lens

This lens observes 危机台账对表线 and 危机台账对表机制.

It also reads adjacent pressure surfaces — 呼吸索赔交易所, 播出档期合约机制, 公开悔过账本机制, and Route Assets and Custody — only to verify that their relief is not being consumed as clean universal success.

It is observed through 危机台账对表案卷, 危机台账对表复核, and 危机台账错配破口.

Observable promise

Storyteller must prove that schedule relief, oxygen relief, archive proof, public contrition, sponsor makegood, audience stability, and route recovery are not fungible unless a replay-visible reconciliation row says how the relief travels and what debt remains.

A satisfying implementation exposes a source ledger, source relief, source debt, target use, target reader, incompatible reader, proof anchor, conversion posture, residual debt destination, and future route effect. It must fail any implementation where a successful oxygen/schedule/archive/public/sponsor branch silently satisfies every other ledger.

Required entry evidence

A valid replay or data inspection must expose:

entry_state:
  trigger_kind: ledger_mismatch
  live_ledgers_min: 2
  source_relief_present: true
  target_claimed_use_present: true
  target_reader_present: true
  incompatible_reader_or_claimant_present: true
  proof_anchor_present_or_explicit_absence: true
  handler_available_or_no_show_recorded: true
  future_reader_consumes_result: true
  no_fixed_sequence_trigger: true
  no_raw_count_trigger: true
  no_lens_health_trigger: true

The lens fails if the reconciliation surface opens because a numbered beat, page-count milestone, or dashboard health condition was reached.

Required observable content

Docket row

危机台账对表案卷 must contain at least one row with:

row_id: <stable id>
source_ledger: schedule_slot | oxygen_claim | archive_custody | public_contrition | correction_slot | settlement_aftershock | route_asset | audience_floor | sponsor_makegood | editor_checksum | blackout_scar | equivalent
source_object: <card_event_rite_state_or_explicit_absence>
source_relief: <relief counter or state>
source_debt: <debt counter state or explicit_absence>
target_claimed_use: public_reality | lawful_proof | fan_refund | sponsor_relief | archive_signature | route_recovery | audience_stability | schedule_release | correction_authority | memorial_voice | equivalent
target_reader: public | lawful | fan_public | sponsor | archive | inspector | editor | artist | route_asset | schedule_board | audience | equivalent
incompatible_reader_or_claimant: <reader or claimant harmed by conversion>
proof_anchor: receipt | seal | checksum | source_tape | fan_queue | sponsor_clause | archive_stub | route_asset | blackout_scar | explicit_absence
row_state: mismatch_open | assigned | converted_with_residual | split | published | quarantined | pawned | suppressed | breached | hardened

The lens fails if a row says only reconcile, clean up, mark resolved, or apply settlement without source relief, target use, target reader, omitted/incompatible reader, proof anchor, and debt.

Review assignment

危机台账对表复核 must record:

assignment:
  selected_row_id: <row id>
  selected_handler: shen_luo | yu_lan | han_yanshuang | baiya | sponsor_counsel | archive_clerk | fan_witness | editor | route_asset | producer | explicit_absence
  proof_anchor_used: <anchor or explicit_absence>
  conversion_posture: convert_with_receipt | split_readers | publish_mismatch | quarantine_mismatch | pawn_to_claimant | suppress_or_default
  residual_debt_destination: sponsor | fan_public | archive | inspector | editor | artist | route_asset | audience | schedule_board | blackout_system | none
  target_reader_result: <relief or refusal>
  future_route_effect: clean_with_residual | public_only | lawful_only | sponsor_only | fan_only | archive_only | split_canon | captured | blocked | hostile | recovery_only | contradiction_pending

The lens fails if handler, proof, posture, residual destination, or future reader state is implied only by prose.

Required branch divergence

A satisfying implementation must support at least four non-equivalent branch families, and must include the suppress/default family as a durable failure or miss state.

Branch A — Convert with receipt

Expected evidence:

selected_posture: convert_with_receipt
row_state_after: converted_with_residual
relief_any: [target_legitimacy_up, slot_release_up, fan_refund_legibility_up, archive_signature_legitimacy_up, route_recovery_access_up]
cost_any: [residual_debt_up, inspection_heat_up, public_receipt_distrust_up, route_asset_pressure_up, sponsor_pressure_up]
future_effect_any: [clean_with_residual, public_only, lawful_only, sponsor_only, fan_only, archive_only]

Branch B — Split readers

Expected evidence:

selected_posture: split_readers
row_state_after: split
relief_any: [private_capture_down, false_clean_use_down, multiple_claimants_partially_available]
cost_any: [source_ambiguity_up, handler_burden_up, schedule_pressure_up, future_correction_cost_up]
future_effect_any: [split_canon, contradiction_pending, public_only, lawful_only, sponsor_only, route_only]

Branch C — Publish mismatch

Expected evidence:

selected_posture: publish_mismatch
row_state_after: published
relief_any: [public_receipt_legitimacy_up, artist_trust_up, fan_oxygen_balance_up, private_capture_blocked]
cost_any: [sponsor_stop_loss_pressure_up, inspection_heat_up, witness_exposure_up, route_asset_pressure_up, schedule_pressure_up]
future_effect_any: [public_audit_required, sponsor_hostile, lawful_addendum_required, route_costlier]

Branch D — Quarantine mismatch

Expected evidence:

selected_posture: quarantine_mismatch
row_state_after: quarantined
relief_any: [archive_fraud_down, false_clean_slot_use_down, reality_drift_down, false_settlement_owner_down, contract_capture_down]
cost_any: [audience_churn_up, schedule_pressure_up, sponsor_stop_loss_pressure_up, fan_oxygen_resentment_up, route_delay_up]
future_effect_any: [addendum_required, proof_required, recovery_only, contradiction_pending]

Branch E — Pawn to claimant

Expected evidence:

selected_posture: pawn_to_claimant
row_state_after: pawned
relief_any: [immediate_sponsor_pressure_down, schedule_pressure_down, audience_churn_down, oxygen_pressure_down, archive_hold_down]
cost_any: [contract_capture_up, bureau_favor_debt_up, fan_oxygen_resentment_up, public_receipt_distrust_up, route_asset_capture_up]
future_effect_any: [captured, sponsor_only, lawful_only, costlier, recovery_only]

Branch F — Suppress/default/breach

Expected evidence:

selected_posture: suppress_or_default
row_state_after: suppressed | breached | hardened
event_seen_or_armed: storyteller.event.crisis_ledger_mismatch_breach.v1
cost_any: [public_receipt_distrust_up, archive_debt_up, inspection_heat_up, contract_capture_up, fan_oxygen_resentment_up, reality_drift_up]
future_effect_any: [blocked, hostile, captured, recovery_only, contradiction_pending, black_screen]

The lens fails if all branches reduce to the same generic success, the same generic debt, or a single global pressure counter.

Breach/default requirements

When false conversion is hidden, 危机台账错配破口 must include:

breach:
  source_row_id: <row id>
  source_ledger: <ledger>
  source_relief_claimed: <relief>
  target_claimed_use: <use>
  target_reader: <reader>
  omitted_or_incompatible_reader: <reader or claimant>
  missing_requirement: no_handler | no_proof_anchor | no_target_reader | no_residual_destination | split_consumed_as_clean | pawned_claimant_hidden | source_debt_omitted | future_reader_unrecorded | explicit_absence_hidden
  breach_narrator: sponsor | fan_public | archive | inspector | editor | artist | route_asset | public_audience | schedule_board | blackout_system | pirate | equivalent
  row_state_after: breached | hostile_narration | captured | blocked | recovery_only | contradiction_pending | false_conversion_hardened
  future_route_effect: <effect>

The lens fails if breach only displays warning text, increments a generic danger counter, or forgets which source row caused the scar.

Oracle assertions

A sibling executable lens should fail unless all assertions below are true.

  1. Primary links existobserves and observed_through arrays are populated and point to existing Storyteller content surfaces.
  2. Entry is state-driven — reconciliation opens from ledger mismatch, not fixed sequence count, raw content count, dashboard state, or lens health.
  3. At least two ledgers disagree — source relief and target use come from distinct or incompatible ledger surfaces.
  4. Source relief is preserved — the original success remains history; reconciliation does not retcon it away.
  5. Source debt is visible — the row names debt or explicit absence, rather than assuming relief is free.
  6. Target reader is named — public, lawful, sponsor, fan, archive, editor, route, schedule, or audience reader is explicit.
  7. Incompatible reader is named — omitted claimant or harmed reader remains visible.
  8. Proof anchor is explicit — receipt, seal, checksum, tape, fan queue, sponsor clause, archive stub, route asset, blackout scar, or explicit absence is recorded.
  9. Conversion posture is explicit — convert, split, publish, quarantine, pawn, or suppress/default is recorded.
  10. Residual debt remains — every positive branch improves one target while preserving or increasing a named residual cost.
  11. Branch outcomes diverge — convert, split, publish, quarantine, pawn, and suppress/default produce distinct states and future effects.
  12. Failure is durable — false conversion emits or arms a breach event and changes later availability, legality, trust, custody, or route state.
  13. Future reader consumes state — later content reads public-only, lawful-only, sponsor-only, fan-only, archive-only, split-canon, captured, blocked, hostile, recovery-only, or contradiction-pending outcomes.
  14. Replay provenance exists — session id, seed, row id, source object, assigned handler, proof anchor, posture, outcome, deltas, and future effect come from game state evidence.

Replay evidence shape

lens_id: storyteller.lens.crisis_ledger_reconciliation.v1
session_id: lens-storyteller-crisis-ledger-reconciliation-v1-<timestamp>
seed: <deterministic-seed>
entry_state:
  trigger_kind: ledger_mismatch
  live_ledgers_min: 2
  source_relief_present: true
  target_claimed_use_present: true
  target_reader_present: true
  incompatible_reader_or_claimant_present: true
  no_fixed_sequence_trigger: true
docket_row:
  row_id: <row id>
  source_ledger: <ledger>
  source_object: <object or explicit_absence>
  source_relief: <relief>
  source_debt: <debt or explicit_absence>
  target_claimed_use: <use>
  target_reader: <reader>
  incompatible_reader_or_claimant: <reader or claimant>
  proof_anchor: <anchor or explicit_absence>
assignment:
  selected_handler: <actor or explicit_absence>
  conversion_posture: convert_with_receipt | split_readers | publish_mismatch | quarantine_mismatch | pawn_to_claimant | suppress_or_default
  residual_debt_destination: <claimant or none>
outcome:
  row_state_after: <state>
  future_route_effect: <effect>
  event_seen_or_armed: storyteller.event.crisis_ledger_mismatch_breach.v1 | none
  counter_deltas:
    relief: []
    cost: []
    future: []
assertions:
  - ledger_mismatch_entry
  - source_relief_preserved
  - source_debt_visible
  - target_reader_named
  - incompatible_reader_named
  - proof_anchor_explicit
  - residual_debt_preserved
  - branch_outcomes_diverge
  - false_conversion_breaches
  - future_reader_consumes_state

Progress metric

Progress is branch observability, not raw count.

  • 20%: a mismatch row records source relief, source debt, target use, target reader, and incompatible reader.
  • 40%: review assignment records handler, proof anchor, posture, and residual destination.
  • 60%: at least two positive postures produce distinct relief/cost/future effects.
  • 80%: split, quarantine, or pawn creates a non-equivalent reader state consumed later.
  • 100%: suppress/default/breach is replay-proven with source row provenance, named breach narrator, counter deltas, and future route effect.

Non-goals

  • Not a governance lens.
  • Not a dashboard quality metric.
  • Not a global economy or debt exchange.
  • Not a fixed sequence gate.
  • Not a raw lens-count target.
  • Not satisfied by prose-only reconciliation or generic danger increments.
  • Not valid if a source ledger’s green state clears every other ledger without row-level conversion evidence.