Backbeat Crowd-Sync Ledger / 鼓点共振账本机制

This mechanism turns one protected backbeat custody result into a finite synchronization decision. It separates custody, operational use, paced-group consent, floor safety, and later-reader authority.

Activation invariant

activation:
  parent_rite: rite.night_shift_backbeat_custody
  parent_choice_index: 0
  parent_choice_id: recruit_carrier_with_credit
  readiness_flag: backbeat_crowd_sync.parent.recruit_carrier_source_ready
  readiness_materialized_by_parent: true
  accepts_other_parent_outcomes: false

Choice 0 gains the ledger, audience-floor target, live-audience group, consent/refusal row, and blackout-floor reader. The existing parent packet supplies card.qi_jin_backbeat_packet, card.qi_jin_night_shift_drummer, and card.qi_jin_backbeat_payment_or_protection.

Exact assignment invariant

child_slots_in_order:
  - ledger: storyteller.card.backbeat_crowd_sync_ledger.v1
  - source_backbeat: card.qi_jin_backbeat_packet
  - sync_target: storyteller.card.backbeat_sync_target_audience_floor.v1
  - paced_group: storyteller.card.backbeat_paced_group_live_audience.v1
  - conductor: card.qi_jin_night_shift_drummer
  - payment_credit_or_protection: card.qi_jin_backbeat_payment_or_protection
  - consent_refusal: storyteller.card.backbeat_consent_refusal_row.v1
  - future_reader: storyteller.card.backbeat_future_reader_blackout_floor.v1
selected_posture_source: rite_choice
selected_posture_card_exists: false
exact_slots_required: true
assigned_cards_must_be_in_hand: true

State transition

Each option writes one exclusive child state, at least one relief counter, at least one cost counter, and a future-reader effect:

option_ids_in_order:
  - protected_conductor
  - fan_chant_bridge
  - egress_pacer
  - sponsor_metronome_patch
  - pirate_rhythm_leak
  - editor_loop_mask
  - refuse_sync
  - hidden_use_default

The hidden-use branch alone arms the panic-loop pending state. All constructive branches close the one-shot review without arming the event.

Recovery invariant

storyteller.event.backbeat_sync_panic_loop.v1 is the only default event for this mechanism. Its three outcomes publish the conductor-credit addendum, serve egress roll-call, or quarantine the sync packet. Each clears pending state but preserves a durable hidden-use scar.

Authority invariant

localAuthorityOnly: true
authorityBoundary:
  grantsUniversalAudienceConsent: false
  grantsCleanLivenessProof: false
  grantsUniversalCrowdControlAuthority: false
  grantsCleanEgressClearance: false
  grantsFanMandate: false
  grantsSponsorOwnership: false
  grantsBroadcastAuthority: false
  grantsArchiveOwnership: false
  grantsPerformerConsent: false
  grantsPayClearance: false
  grantsRouteAssetTransfer: false
  grantsMemorialAuthority: false

Protected conductor means only that this named use has a protected conductor. It does not recruit Qi Jin again, reopen the parent custody decision, or authorize other uses.