Substitute Carrier Requisition Lens / 替代承载征调 Lens

This lens observes whether 替代承载征调线 and 替代承载征调机制 correctly make substitute-carrier selection executable after a carrier collision, discharge refusal, consent-debt handoff, witness payroll gap, or live-floor lane pressure.

The current mesh already detects that one carrier cannot satisfy every reader through 回叫承载撞车线 and 见证承载解除线. The remaining failure risk is a silent production shortcut: assign someone else. A passing implementation must prove that the substitute fits the owed reader, fits the required service surface, preserves the old scar, and is consumed by a future route or reader.

Oracle: a substitute is not the original, and a substitute is never universal clean capacity.

Primary observation link

This lens observes:

• 替代承载征调线;
• 替代承载征调机制;
• 回叫承载撞车线;
• 见证承载解除线;
• 呼吸折让同意债转移线;
• 受保护证人薪册;
• 直播现场班组负荷线;
• Route Assets and Custody;
• Broadcast Reality;
• Producer License and Pressure.

It is observed through:

• 替代承载征调案卷;
• 替代承载征调复核;
• 替代承载错配默认.

Observable promise

When an original carrier cannot honestly carry the next service, the game must show:

• source service row;
• original carrier and old scar state;
• owed reader;
• minimum service surface;
• future consumer;
• candidate substitute or explicit absence;
• substitute consent, authority, protection, payment, refusal, or absence;
• reader fit;
• surface fit;
• carrier fit;
• selected review posture;
• future consumer effect;
• false clean claim if miscast.

The lens fails if the implementation stores only backup assigned, legal covered, sponsor paid, public accepted, handler busy, or hire substitute.

Entry oracle

A valid implementation opens only from live state pressure.

entry_state_required:
  trigger_kind: state_pressure
  source_collision_or_discharge_pressure_present: true
  source_service_row_visible: true
  original_carrier_unavailable_overdrawn_refusing_absent_or_scope_limited: true
  owed_reader_visible: true
  minimum_service_surface_visible: true
  future_consumer_visible: true
  candidate_substitute_or_explicit_absence_visible: true
  player_can_fit_test_narrow_media_proxy_preserve_absence_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_staff_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

The lens fails if entry comes from fixed turn number, day or week interval, chapter quota, raw staff count, raw carrier count, dashboard state, lens health, or generic maintenance.

Docket oracle

替代承载征调案卷 or equivalent must record:

docket_required:
  requisition_id: <stable id>
  source_service_row:
    source_row_id: <row id>
    source_surface: callback_carrier_collision | witness_carrier_discharge | consent_debt_transfer | protected_witness_payroll | live_floor_crew_load | equivalent
    original_carrier: <carrier id or explicit_absence>
    original_carrier_state: overdrawn | refused | captured | hostile | absent | scope_limited | quarantined | equivalent
    original_scope_limit_or_absence: <scope or explicit_absence>
    owed_reader: fan_public | lawful_reader | sponsor | archive | public_table | route_asset | worker | artist_boundary | broadcast_reality | equivalent
    minimum_service_surface: witness | delegate_signature | receipt | annex | route_asset_return | proof_window | floor_coverage | callback_notice | equivalent
    future_consumer: <route slot reader package proof window or broadcast reality surface>
  candidate_substitute:
    candidate_id: <stable id or explicit_absence>
    candidate_class: low_rank_runner | public_witness_or_delegate | lawful_clerk_or_annex | editor_mask_or_checksum | pirate_relay | sponsor_or_management_proxy | explicit_absence | equivalent
    candidate_state_before: free | strained | protected | paid | hostile | captured | absent | overdrawn | quarantined | equivalent
    consent_or_authority: consented | proxy_only | lawful_only | public_only | sponsor_only | coerced | absent | unknown | equivalent
    proof_fit: exact | partial | wrong_reader | wrong_surface | unverifiable | masked | pirate_public | absent | equivalent
    protection_or_price: payroll | oath | public_receipt | lawful_annex | edit_mask | sponsor_clause | quarantine | delay | explicit_absence
  fit_summary:
    reader_fit: exact | named_scope | public_only | lawful_only | sponsor_only | route_only | wrong_reader | blocked | recovery_only
    surface_fit: exact | partial | wrong_surface | absent
    carrier_fit: fit | strained | coerced | absent | unsafe | false_clean
    source_row_scope_preserved: true | false
  default_if_unworked:
    false_clean_claim: substitute_served_all | proxy_spoke_for_all | receipt_clean_for_lawful | annex_clean_for_public | mask_clean_witness | pirate_lawful_mandate | absence_as_service | equivalent
    default_narrator: sponsor | management_table | archive | lawful_reader | public_table | route_claimant | broadcast_reality | equivalent
    hidden_reader_or_scope: <reader or scope>
    future_effect: contradiction_pending | hostile | blocked | recovery_only | broadcast_reality_drift | equivalent

The lens fails if the docket lacks source row id, original carrier state, owed reader, minimum service surface, future consumer, candidate or explicit absence, fit summary, or false clean claim.

Review assignment oracle

替代承载征调复核 or equivalent must require explicit assignment.

assignment_required:
  docket: storyteller.card.substitute_carrier_requisition_docket.v1
  selected_service_row: <source row id>
  original_carrier: <carrier id or explicit_absence>
  candidate_substitute: <candidate id or explicit_absence>
  candidate_class: low_rank_runner | public_witness_or_delegate | lawful_clerk_or_annex | editor_mask_or_checksum | pirate_relay | sponsor_or_management_proxy | explicit_absence | equivalent
  handler_or_absence: <handler id or explicit_absence>
  proof_bridge_or_absence: public_receipt | lawful_annex | witness_oath | route_asset_receipt | edit_checksum | pirate_relay | sponsor_clause | explicit_absence
  protection_or_price_or_absence: payroll | safety_oath | public_exposure | bureau_debt | edit_debt | sponsor_capture | delay | quarantine | explicit_absence
  selected_posture: fit_test | narrow_reader | media_substitute | proxy_substitute | preserve_absence | default_miscast
  future_consumer: <route slot reader package proof window or broadcast reality surface>

The lens fails if a powerful actor, payment, archive copy, legal stamp, edit patch, or public sympathy resolves the row without reader fit, surface fit, carrier fit, source scar preservation, and future consumer effect.

Branch divergence oracle

A satisfying implementation must prove at least five constructive branch families plus one default family, or explicitly block unavailable branches with state reasons.

Branch family	Required relief	Required cost	Required future state
Fit-tested substitute	one row proceeds for named scope	payroll, protection, handler burden, exposure, or price	accepted-with-scope, callback-required, costlier
Narrow reader	public, lawful, sponsor, or route reader receives partial service	addendum, appeal, split, or reader hostility	public-only, lawful-only, sponsor-only, route-only
Media substitute	witness harm falls or private capture is blocked	edit debt, relay risk, source ambiguity, inspection heat	masked, pirate-public, contradiction-pending, recovery-only
Proxy substitute	schedule or liability pressure falls	contract capture, public distrust, fan resentment, future blackmail	sponsor-only, management-only, audit-required
Preserve absence	false clean service is blocked	route delay, schedule pressure, quarantine, recovery cost	honest-absence, blocked, quarantine-required, recovery-only
Miscast default	short silence or desk convenience only	old scar hidden, wrong reader served, future contradiction	false-clean-miscast, hostile, blocked, recovery-only, drift

No branch may make the substitute clean for fan public, lawful reader, sponsor, archive, public table, route asset, worker, artist boundary, management report, and broadcast reality at once.

Hard rules

hard_rules:
  substitute_is_not_original: true
  public_only_is_not_lawful: true
  lawful_only_is_not_public: true
  sponsor_proxy_is_not_public_consent: true
  management_proxy_is_not_route_asset_return: true
  editor_mask_is_not_clean_witness_service: true
  pirate_public_is_not_lawful_mandate: true
  absence_delay_or_quarantine_is_not_service: true
  old_carrier_scar_remains_visible: true
  no_universal_clean_substitute: true

Any attempted shortcut must fail, default, or route-cost.

Default oracle

替代承载错配默认 must fire or be armed when:

• no candidate or explicit absence is recorded;
• the original carrier scar is hidden;
• reader fit is wrong but filed as accepted;
• surface fit is wrong or absent but filed as served;
• substitute consent, authority, protection, payment, refusal, or absence is hidden;
• public receipt is filed as lawful annex;
• lawful annex is filed as public consent;
• sponsor or management proxy is filed as public consent or route-asset return;
• editor mask is filed as clean witness service;
• pirate relay is filed as lawful mandate;
• absence, delay, or quarantine is filed as service;
• future consumer is missing or ignores the scar.

Required default payload:

default_required:
  event: storyteller.event.substitute_carrier_miscast_default.v1
  requisition_id: <stable id or explicit_absence>
  source_service_row:
    source_row_id: <row id or explicit_absence>
    source_surface: <surface or explicit_absence>
    original_carrier: <carrier or explicit_absence>
    original_carrier_state: <state or explicit_absence>
    original_scope_limit_or_absence: <scope or explicit_absence>
    owed_reader: <reader or explicit_absence>
    minimum_service_surface: <surface or explicit_absence>
  miscast:
    candidate_substitute: <candidate or explicit_absence>
    candidate_class: <class or explicit_absence>
    false_clean_claim: substitute_served_all | proxy_spoke_for_all | receipt_clean_for_lawful | annex_clean_for_public | mask_clean_witness | pirate_lawful_mandate | absence_as_service | payment_as_consent | equivalent
    default_narrator: sponsor | management_table | archive | lawful_reader | public_table | route_claimant | broadcast_reality | blackout_system | equivalent
    hidden_reader_or_scope: <reader or scope or explicit_absence>
    missing_fit:
      reader_fit: present | absent | wrong
      surface_fit: present | absent | wrong
      carrier_fit: present | absent | wrong
      consent_or_authority: present | absent | coerced | wrong_scope
      protection_or_price: present | absent
  result:
    substitute_state_after: false_clean_miscast | captured | hostile | absent | overdrawn | quarantined | recovery_only | equivalent
    source_row_state_after: hidden | overwritten | contradiction_pending | hostile | blocked | recovery_only | equivalent
    future_consumer_effect: contradiction_pending | hostile | blocked | recovery_only | broadcast_reality_drift | public_addendum_required | lawful_appeal_required | equivalent
    counter_deltas_min: 3

The lens fails if default changes only budget, mood, reputation, or generic pressure.

Counter contract

Every branch must mutate at least three counters or durable states:

counter_deltas_required:
  relief: at_least_one
  cost: at_least_one
  future_reader_or_route_effect: at_least_one

Expected surfaces:

• substitute_carrier_fit
• substitute_scope_integrity
• false_clean_substitute
• carrier_collision_pressure
• callback_carrier_capacity
• deferred_callback_debt
• witness_retaliation_risk
• payroll_leak
• handler_burden
• lawful_annex_debt
• public_receipt_legitimacy
• public_receipt_distrust
• fan_oxygen_resentment
• sponsor_stop_loss_pressure
• contract_capture
• edit_debt
• source_ambiguity
• inspection_heat
• route_asset_pressure
• broadcast_reality_drift
• future_recovery_cost

Future consumer oracle

At least one downstream consumer must read the substitute state before treating the service as valid. Accepted consumers include:

• Route Assets and Custody;
• Broadcast Reality;
• Producer License and Pressure;
• a source route, slot, package, proof window, public table, lawful reader, sponsor gate, or route asset.

The lens fails if the docket and rite resolve but no future consumer changes route availability, cost, reader scope, proof burden, public status, lawful status, sponsor gate, or broadcast reality.

Replay evidence expectation

lens_id: storyteller.lens.substitute_carrier_requisition.v1
session_id: lens-substitute-carrier-requisition-v1-<timestamp>
seed: <deterministic-seed>
entry_state:
  trigger_kind: state_pressure
  source_service_row_visible: true
  original_carrier_unavailable_or_limited: true
  owed_reader_visible: true
  minimum_service_surface_visible: true
  future_consumer_visible: true
  candidate_substitute_or_explicit_absence_visible: true
  no_fixed_turn_trigger: true
offered:
  card: storyteller.card.substitute_carrier_requisition_docket.v1
  rite: storyteller.rite.substitute_carrier_requisition_review.v1
docket:
  source_row_id: <row>
  source_surface: <surface>
  original_carrier_state: <state>
  owed_reader: <reader>
  minimum_service_surface: <surface>
  candidate_class: <class>
  reader_fit: <fit>
  surface_fit: <fit>
  carrier_fit: <fit>
branch_runs:
  constructive:
    selected_posture: fit_test | narrow_reader | media_substitute | proxy_substitute | preserve_absence
    substitute_fit_state: <state>
    reader_scope_after: <scope>
    source_row_state_after: <state>
    candidate_state_after: <state>
    future_consumer_effect: <effect>
    counter_deltas:
      relief: []
      cost: []
      future: []
  default:
    event_seen_or_armed: storyteller.event.substitute_carrier_miscast_default.v1
    false_clean_claim: <claim>
    default_narrator: <actor>
    hidden_reader_or_scope: <reader or scope>
    missing_fit: {}
    future_consumer_effect: <effect>
assertions:
  - primary_links_exist
  - entry_is_state_triggered_by_source_row_needing_substitute
  - original_carrier_state_owed_reader_minimum_service_and_future_consumer_visible
  - candidate_substitute_or_explicit_absence_visible
  - reader_surface_and_carrier_fit_are_checked
  - substitute_is_not_original_and_no_universal_clean_substitute
  - review_assignments_are_explicit
  - branch_families_diverge
  - success_has_relief_cost_and_future_reader_effect
  - miscast_default_records_false_clean_claim_narrator_missing_fit_hidden_reader_or_scope_and_future_effect
  - future_consumer_reads_substitute_or_miscast_state
  - no_fixed_turn_day_week_raw_staff_count_dashboard_or_lens_health_trigger

Progress metric

substituteCarrierRequisitionProgress = 0..10:

• 0: a substitute is implied but no requisition surface exists.
• 1: source service row and original carrier scar are visible.
• 2: owed reader, minimum service surface, and future consumer are visible.
• 3: candidate substitute or explicit absence is visible.
• 4: 替代承载征调案卷 enters play with fit summary and default claim.
• 5: 替代承载征调复核 exposes assignment slots.
• 6: reader, surface, and carrier fit are checked.
• 7: at least two constructive branches diverge by scope, cost, and future consumer effect.
• 8: 替代承载错配默认 fires or is armed for false clean service.
• 9: future consumer reads substitute or miscast state.
• 10: replay proves constructive and default branches with relief/cost/future deltas and no fixed trigger.

Non-goals

• Not a staff-market simulator.
• Not a generic hiring action.
• Not a global crew-count or carrier-count target.
• Not a fixed maintenance phase.
• Not a chapter, day, week, dashboard, or lens-health trigger.
• Not a universal recovery for carrier collision, witness discharge, consent debt, or live-floor pressure.
• Not valid unless a concrete source row needs a substitute.