Broadcast Signatory Counterclaim / 播出署名反诉机制

Broadcast Signatory Counterclaim turns broadcast-created signature claims into playable state.

Aired reality can make a face, voice, queue presence, silence, grief token, edit checksum, sponsor lower-third, or archive stamp look like a signature. This mechanism prevents that signature from becoming universal proof until the alleged signer receives a valid ratification, counter-signature, split, escrow, revocation, annulment, indemnity, or durable default.

Mechanic contract

A broadcast signatory counterclaim is created when all are true:

broadcast_signatory_counterclaim_entry:
  trigger_kind: state_pressure
  aired_or_packaged_claim_present: true
  alleged_signatory_visible_or_explicit_absence: true
  signature_source_visible: true
  minimum_surface_for_valid_signature_visible_or_explicit_absence: true
  future_reader_or_route_reuses_signature: true
  counterclaimant_or_explicit_absence_visible: true
  player_can_ratify_counter_sign_split_escrow_revoke_annul_indemnify_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

Invalid entry sources: fixed turn count, day/week interval, chapter quota, raw crisis count, raw signature count, dashboard state, lens health, generic legal review, generic PR crisis, or generic broadcast error with no alleged signer.

State model

broadcast_signatory_state:
  aired_claim_state: tentative | accepted | packaged | contradicted | hardened | quarantined | false_clean
  signature_state: unasked | implied | coerced | edited | proxy_claimed | disputed | ratified | counter_signed | split | escrowed | revoked | annulled | indemnified | defaulted
  signatory_state: protected | paid | burdened | hostile | silenced | captured | public_counter | lawful_challenge | unavailable | explicit_absence
  vulnerable_reader_state: protected | delayed | hostile | public_only | lawful_only | sponsor_only | split | recovery_only | explicit_absence
  future_reader_effect: accepted_with_ratification | split_required | counter_signature_required | public_only | lawful_only | sponsor_only | escrow_only | contradiction_pending | blocked | recovery_only | involuntary_signatory_default

The mechanism fails if signature state, signatory state, vulnerable-reader state, and future-reader effect do not diverge by branch.

Branch families

Ratify with cost

The alleged signer accepts the aired claim after receiving the required surface: direct answer, compensation, protection, lawful annex, public receipt, fan mandate hearing, or archive escrow.

Required mutation: signature becomes ratified, future reuse becomes accepted with cost, and at least one handler/sponsor/public/schedule/route cost rises.

Counter-sign

The signer appends a boundary or dissent that travels with the signature.

Required mutation: signature becomes counter-signed, future reuse requires boundary text or proof bridge, and sponsor/public/archive ambiguity rises.

Split signature

The signature is valid for one reader but invalid or pending for another.

Required mutation: future route becomes public-only, lawful-only, sponsor-only, split-required, or contradiction-pending. No universal acceptance is allowed.

Escrow signature

The signature is held by a lawful, archive, protected-handler, or route-asset escrow surface.

Required mutation: immediate reuse narrows or waits, inspection or bureau debt rises, and future acceptance is escrow-only or costlier.

Public revocation

The signer or delegate publishes refusal, a counterstatement, or a mandate challenge.

Required mutation: private capture falls or public legitimacy rises, while sponsor retaliation, audience churn, inspection heat, or witness risk rises.

Lawful annulment

Inspector, archive, or lawful reader annuls the implied signature for a defined reader set.

Required mutation: fraud or signature integrity improves, but route access becomes lawful-only, quarantined, blocked, or recovery-only.

Sponsor indemnity

Sponsor buys limited commercial use while the invalid signature remains named.

Required mutation: sponsor stop-loss pressure falls, contract capture and public distrust rise, and future reuse becomes sponsor-only or unwind-required.

Suppress or ignore

The clean reuse proceeds without valid signature surface.

Required mutation: 非自愿播出署名默认 is fired or armed. Future route becomes involuntary-signatory default, blocked, hostile, contradiction-pending, reader-limited, or recovery-only.

Counter surfaces

Every valid branch mutates at least one signature surface, one cost/scar surface, and one future reader surface.

Core counters and durable states:

• broadcast_signatory_pressure
• signature_integrity
• counter_signature_debt
• artist_autonomy
• fan_mandate_legibility
• worker_witness_risk
• public_receipt_legitimacy
• public_receipt_distrust
• sponsor_stop_loss_pressure
• contract_capture
• lawful_annex_debt
• inspection_heat
• bureau_favor_debt
• edit_debt
• archive_debt
• route_asset_pressure
• producer_license_pressure
• broadcast_reality_drift
• future_route_acceptance
• future_recovery_cost

Integration surface

• 同意债转移线 decides who carries a consent/refusal debt after useful consent language. This mechanism handles the narrower case where broadcast itself manufactured the apparent signature.
• 粉丝委任分裂线 decides whether a delegate represents a crowd. This mechanism catches the aired moment when the delegate’s image or queue overlay is reused as signature.
• 播出实在漂移审计 resolves contradiction between aired reality and proof. This mechanism fails earlier if the contradiction is hidden inside a claimed signer.
• 公开悔过账本 records apology and public answer state. This mechanism prevents visible contrition from becoming implied public forgiveness.
• 更正档期竞拍线 can provide correction inventory, but correction inventory cannot erase an alleged signer without this counterclaim state.
• Route Assets and Custody receives the signatory row as route asset, escrow, captured proof, recovery-only proof, or hostile witness state.

Evidence requirements

Every replay must preserve:

evidence_required:
  aired_claim_id: <stable id>
  aired_surface: <surface>
  route_that_wants_to_reuse_claim: <route or explicit_absence>
  signatory_kind: <kind>
  signatory_id_or_absence: <id or explicit_absence>
  signature_source: <source>
  signature_status_before: <state>
  minimum_surface_for_valid_signature: <surface or explicit_absence>
  counterclaimant: <counterclaimant or explicit_absence>
  desired_reader: <reader>
  reader_made_vulnerable_by_signature: <reader or explicit_absence>
  offered_card: storyteller.card.broadcast_signatory_counterclaim_docket.v1
  offered_rite: storyteller.rite.broadcast_signatory_counterclaim_hearing.v1
  selected_counterclaim_mode: ratify_with_cost | counter_sign | split_signature | escrow_signature | public_revocation | lawful_annulment | sponsor_indemnity | suppress_or_ignore
  proof_bridge_or_absence: <proof or explicit_absence>
  handler_or_absence: <handler or explicit_absence>
  signature_state_after: <state>
  signatory_state_after: <state>
  future_reader_effect: <effect>
  default_event: storyteller.event.involuntary_broadcast_signatory_default.v1 | none

Non-goals

• Not a general consent economy.
• Not a generic correction slot.
• Not a court governance page.
• Not a raw count requirement.
• Not valid unless the alleged signature changes future playable reader acceptance.