Faction Liability Underwriting / 派系责任承保机制

Faction Liability Underwriting is the management-economy mechanism that makes broadcast reality drift, public contrition, clean-ending relief, witness protection, settlement, and route-asset custody cost something future-facing.

Storyteller already has many surfaces that can reduce immediate pressure: sponsor packages, inspector seals, public receipts, edit patches, production triage, and faction commitments. This mechanism asks a sharper question: who guarantees the future damage if that relief is later challenged?

The answer is not only money. The guarantee can be a slot, edit room, handler, public oxygen pool, legal seal, sponsor escrow, proof object, route asset, or faction reserve.

Core promise

A branch may lower immediate pressure only when it posts visible collateral or records explicit absence. The collateral must be callable later.

Valid collateral must satisfy all of:

1. named exposure;
2. named guarantor;
3. named collateral type;
4. named excluded claimant;
5. named call trigger;
6. future route effect if called or breached.

A generic liability +1 or money -1 is not valid implementation.

Observed surfaces

• 责任承保账本 records exposure rows, collateral, guarantor, excluded claimant, call trigger, and future route effect.
• 责任承保听证 chooses the guarantor and collateral under live claimant pressure.
• 责任追缴违约 fires when the posted guarantee fails or was never recorded.

Exposure families

Exposure family	Source examples	Required guarantee question
Broadcast drift	Contradictory public versions, black-box checksum, archive split.	Who pays if the aired reality is challenged?
Public contrition	Apology clause, omitted claimant, proof anchor.	Who backs the statement when the omitted claimant attacks?
Clean ending	Sponsor-safe ending, seized route asset, editor-safe copy.	Who absorbs the cost if the clean ending is refused?
Witness protection	Payroll row, safehouse, public witness, handoff carrier.	Who pays if the witness is leaked, seized, or turns hostile?
Settlement aftershock	Relief package, refund, oxygen payout, private wording.	Who covers the aftershock when the settlement becomes public debt?
Archive enforcement	Sealed order, proof quarantine, custody ruling.	Who guarantees admissibility when future routes need the proof?
Production triage	Lane assignment, room capacity, handler time, schedule scar.	What crisis defaults because this cover consumed capacity?

State machine

State	Meaning	Required next pressure
exposure_unpriced	A liability exists but has no ledger row.	Offer hearing or explicit miss/default.
cover_proposed	A guarantor and collateral are visible but not posted.	Player can post, split, reject, fraud, or defer.
cover_posted	Collateral is tied to the exposure.	Immediate relief allowed; future call trigger armed.
cover_split	Two guarantors or collateral pools share exposure.	Rival claim, ambiguity, or double-call risk rises.
cover_exhausted	Collateral was spent by another crisis.	Call default, triage default, or recovery required.
cover_fraud_flagged	Cover is fake, double-pledged, or contradicted.	Future call becomes harsher; drift or fraud rises.
collateral_called	A faction, public, archive, or blackout system calls the guarantee.	Asset, route, faction posture, schedule lane, or public state mutates.
cover_released_with_scar	Guarantee is discharged after cost or acceptance.	Scar and omitted claimant remain recorded.
recovery_only_cover	Exposure can be reopened only by higher collateral.	Route remains costlier, hostile, or scarred.

Branch contract

Sponsor bond

The sponsor posts escrow, relief, private language, stop-loss support, or naming-rights cover.

Required effects:

• immediate sponsor or slot pressure can improve;
• contract_capture, public_receipt_distrust, fan_oxygen_resentment, or future_correction_cost worsens;
• future public correction, artist boundary, or fan route becomes costlier or contested.

Inspector surety

Inspector, white-glove, or archive authority posts lawful cover.

Required effects:

• custody_clarity, archive_fraud, or reality_drift can improve;
• inspection_heat, bureau_favor_debt, or schedule pressure worsens;
• insured proof becomes officially visible and may be quarantined.

Public receipt bond

Fan oxygen, unauthorized history, witness chain, pirate relay, or public proof backs the exposure.

Required effects:

• public_receipt_legitimacy, audience_stability, or fan_oxygen_balance can improve;
• exposure, sponsor pressure, oxygen liability, or witness retaliation worsens;
• public audit or public correction remains available.

Edit reserve

The cutroom, black-box editor, checksum, or final-cut capacity underwrites the risk.

Required effects:

• continuity_hazard, audience_churn, or slot legibility can improve;
• edit_debt, source_ambiguity, reality_drift, or future_fraud_cost worsens;
• later proof challenge costs more.

Production self-insurance

The producer ties up schedule lane, handler time, room capacity, proof storage, route asset, or internal reserve.

Required effects:

• faction capture can decrease because control stays inside production;
• lane_scar, handler_fatigue, unstaffed_ticket_risk, or black_screen_slots rises;
• 制作分诊台 can receive a new ticket.

Split cover

Two guarantors share the exposure.

Required effects:

• two route options can remain alive;
• ambiguity, coalition_pressure, double_call_risk, archive_debt, or public_receipt_distrust rises;
• future hearing or claimant collision remains armed.

Missing or fraudulent cover

The player hides exposure, posts fake collateral, double-pledges a reserve, lacks handler, or treats relief as already paid.

Required effects:

• 责任追缴违约 fires or is armed;
• at least one route, asset, person, faction posture, or schedule lane becomes blocked, captured, hostile, costlier, or recovery-only;
• at least three durable states change.

Counter contract

Every posted, split, called, released, or defaulted exposure must record at least three counter or durable-state deltas. At least one must be immediate relief, and at least one must be future cost.

Primary counters and durable states:

• liability_exposure
• collateral_state
• guarantor_posture
• excluded_claimant_pressure
• contract_capture
• sponsor_stop_loss_pressure
• inspection_heat
• bureau_favor_debt
• public_receipt_legitimacy
• public_receipt_distrust
• fan_oxygen_balance
• fan_oxygen_resentment
• oxygen_liability
• audience_stability
• audience_churn
• edit_debt
• source_ambiguity
• reality_drift
• future_fraud_cost
• lane_scar
• handler_fatigue
• unstaffed_ticket_risk
• route_asset_pressure
• future_correction_cost
• black_screen_slots

Multi-session evidence

The mechanism should be able to load an exposure created by an earlier session and prove that the later call inherited it.

Expected replay evidence:

mechanic: storyteller.mechanic.faction_liability_underwriting.v1
source_session_id: <session that created exposure>
source_seed: <deterministic seed>
current_session_id: <underwriting session>
current_seed: <deterministic seed>
exposure_row_before:
  exposure_id: <id>
  insured_version: <version>
  guarantor: <faction_or_actor>
  collateral_type: <type>
  collateral_state: <state>
  excluded_claimant: <claimant>
  call_trigger: <trigger>
branch_selected: sponsor_bond | inspector_surety | public_receipt_bond | edit_reserve | production_self_insurance | split_cover | fraudulent_or_missing_cover
exposure_row_after:
  collateral_state: <state>
  future_route_effect: <effect>
deltas:
  - <counter_or_state_delta>
  - <counter_or_state_delta>
  - <counter_or_state_delta>

Non-goals

• Not a global insurance simulation.
• Not a raw money sink.
• Not a fixed-turn upkeep tax.
• Not a generic governance page.
• Not a free mitigation layer.
• Not a replacement for 派系承诺账本机制; commitments say who is spending leverage, underwriting says what future harm that leverage guarantees.