Inspection Shadow Crew Custody / 监察影子组羁押机制

Inspection Shadow Crew Custody turns fragile proof movement into management/RPG play. It exists for the moment when evidence, permits, witness receipts, black-box fragments, fan queue stubs, or archive copies cannot simply be declared valid by a high-rank actor. Someone low enough to cross the service corridor must carry it, be protected, get paid, be exposed, or become the leak.

This mechanism is a state-triggered revision of the existing shadow crew package. Legacy implementation ids may still contain older turn labels, but canonical design must never use a fixed turn number, day count, chapter quota, raw count target, or lens-health state as its trigger.

Design gap

Recent systems already make proof valuable: Evidence Carryover Fork makes old proof return, Proof Burden Reassignment makes proof need a holder, and Route Assets and Custody makes people and objects durable route assets.

The remaining gap is physical field custody. If 韩砚霜 can audit, 郁蓝 can publish, 白鸦 can checksum, and 沈洛 can negotiate without anyone moving the receipt, permit, body-copy, fan stub, or black-box fragment through danger, then the game collapses into authority buttons. This mechanism requires a service-corridor layer.

State-triggered entry

Open or update this mechanism only when all conditions below are present:

1. a movable or physically uncertain proof object exists;
2. the object can affect a future route, audit, public receipt, custody claim, proof burden, or consent debt row;
3. at least two factions can benefit from moving, seizing, exposing, suppressing, or discrediting it;
4. a carrier, permit, runner, public witness, editor source, fan delegate, archive clerk, or explicit absence can be represented;
5. at least one later route, rite, follower state, or counter can mutate.

The offer must not be opened by a fixed turn count. Replay evidence may record turn ranges for provenance only, never as canonical trigger logic.

Core objects

• Temporary Chain Runner or an equivalent low-rank logistics carrier.
• Inspection Shadow Crew Permit or equivalent temporary corridor authority.
• A movable proof object: fan oxygen receipt, archive docket copy, black-box fragment, consent row printout, witness stub, memorial air copy, voice custody receipt, or route-asset packet.
• A handler or explicit lack of handler: 韩砚霜, 郁蓝, 白鸦, 沈洛, sponsor liaison, production desk, fan delegate, inspector, editor, or none.
• An active claimant: archive desk, sponsor stop-loss desk, fan public, inspector office, editor authority, artist boundary, pirate relay, or false owner.

A high-rank handler is never enough alone. The branch must name the carrier, proof object, permit/cover, and claimant pressure or explicitly record why they are absent.

Custody state machine

State	Meaning	Required playable consequence
crew_unseen	Field custody has not surfaced.	No route may rely on shadow crew state.
crew_offer_ready	Movable contested proof exists and a carrier/absence can be represented.	The player may recruit, authorize, bypass, suppress, expose, or abandon.
runner_authorized	A runner or permit is assigned.	At least one evidence-transfer rite can take the runner or permit.
lawful_chain_witness	Inspector/archive cover makes the handoff admissible.	Custody clarity improves while inspection heat, bureau debt, or route narrowness rises.
public_receipt_carrier	Fan/historian/public cover makes harm politically expensive.	Public receipt legitimacy improves while sponsor pressure, fan liability, or exposure rises.
editor_masked_carrier	The runner is hidden through cutroom/black-box handling.	Retaliation risk drops while edit debt, archive debt, or source ambiguity rises.
neutral_route_asset	The runner survives a transfer and remains assignable.	Future small-chain rites unlock with payroll or exposure cost.
suppressed_carrier	Sponsor, inspector, production desk, or player blocks field access.	Immediate pressure may fall; a later carrier option is unavailable or costlier.
hostile_leak_source	The runner or permit becomes hostile evidence.	Creates leak, duplicate claim, public contradiction, false owner, or recovery-only route.
captured_carrier	Another faction controls the runner or packet.	Future use requires rescue, exchange, proof rebuttal, or sacrifice.
sacrificed_permit	The temporary permit or runner is burned to preserve stronger proof.	Short-term custody damage drops; long-term legitimacy, payroll, or witness debt rises.

Branch contract

Branch A — Lawful chain

The player assigns a carrier with inspector/archive cover.

Expected result:

• lawful_chain_witness or neutral_route_asset is created;
• custody_clarity, archive_signature_legitimacy, or proof_legibility improves;
• inspection_heat, bureau_favor_debt, runner_risk, or route_lawful_only worsens.

Branch B — Public receipt chain

The player assigns the carrier through 郁蓝, fan oxygen witnesses, pirate relay, or public receipt pressure.

Expected result:

• public_receipt_carrier or public route asset appears;
• public_receipt_legitimacy or private_capture_blocked improves;
• sponsor_stop_loss_pressure, fan_oxygen_liability, public_exposure, or inspection_heat worsens.

Branch C — Editor mask

The player hides the carrier, source, or handoff through 白鸦, black-box checksum, alias, cutroom edit, or continuity patch.

Expected result:

• editor_masked_carrier appears;
• witness_retaliation_risk or continuity_hazard improves;
• edit_debt, archive_debt, source_ambiguity, or public_receipt_distrust worsens.

Branch D — Managed bypass or suppression

The player uses high-rank pressure, sponsor settlement, production silence, or an audit shortcut without solving physical custody.

Expected result:

• immediate sponsor, inspection, or schedule pressure may fall;
• suppressed_carrier, unresolved_custody_gap, or carrier_absent is recorded;
• future evidence transfer, proof burden, or receipt counterclaim becomes costlier.

Branch E — Leak, capture, or sacrifice

The player exposes, underpays, abandons, overuses, sells, or burns the carrier/permit.

Expected result:

• hostile_leak_source, captured_carrier, or sacrificed_permit appears;
• a later rite loses a carrier option or gains a recovery-only branch;
• false owner, sponsor retaliation, archive debt, fan resentment, or proof default pressure rises.

Counter contract

Every resolved branch must mutate at least three counters or durable states. At least one must be relief and at least one must be cost.

Primary surfaces:

• custody_clarity
• custody_gap
• proof_legibility
• proof_burden
• route_asset_pressure
• runner_risk
• payroll_leak
• inspection_heat
• bureau_favor_debt
• archive_signature_legitimacy
• archive_debt
• public_receipt_legitimacy
• public_receipt_distrust
• fan_oxygen_liability
• fan_oxygen_resentment
• sponsor_stop_loss_pressure
• edit_debt
• source_ambiguity
• continuity_hazard
• false_owner_pressure
• future_recovery_cost

Integration

• With Shadow Evidence Transfer, this mechanism defines the branch states rather than a fixed schedule gate.
• With Shadow Crew Custody Leak, a bad handoff must mutate future custody, not only produce flavor.
• With Protected Witness Payroll, any surviving carrier can later need shelter, money, alias, oath, or public protection.
• With Proof Burden Reassignment, a carrier who holds the only chain proof can become the burden holder or default point.
• With Evidence Carryover Fork, a returned proof object may require field custody before it can be seated in current play.

Replay evidence expectation

mechanic: storyteller.mechanic.inspection_shadow_crew_custody.v1
entry_state:
  trigger_kind: state_pressure
  movable_or_uncertain_proof_present: true
  claimant_factions_count_min: 2
  carrier_or_explicit_absence_present: true
  affected_route_or_counter_present: true
  no_fixed_turn_trigger: true
assigned_slots:
  proof_object: <receipt_or_packet_or_copy_or_fragment>
  carrier: cen_wei | lin_qiao | fan_delegate | archive_clerk | explicit_absent | equivalent
  permit_or_cover: inspection_shadow_crew_permit | audit_oath | public_receipt | editor_mask | sponsor_cover | none
  handler: han_yanshuang | yu_lan | baiya | shen_luo | sponsor | production | none
branch_result:
  selected_branch: lawful_chain | public_receipt_chain | editor_mask | managed_bypass | leak_capture_or_sacrifice
  carrier_state_before: <state>
  carrier_state_after: <state>
  route_asset_after: <state>
  counter_deltas:
    relief:
      - <relief counter/state>
    cost:
      - <cost counter/state>

Non-goals

• Not a turn-count trigger.
• Not a generic crew generator.
• Not a raw count or scale target.
• Not a free shortcut for high-rank handlers.
• Not a replacement for proof, consent, archive, or witness payroll systems.
• Not valid unless physical custody changes route access, carrier state, proof burden, claimant pressure, or future cost.