Operator Witness Conclave / 操作员证词合议机制

Operator Witness Conclave is the mechanism for resolving multiple low-rank operator rows that become relevant to one later route, docket, proof window, public statement, or management report.

The mechanism does not create a council, bureaucracy, or governance layer. It turns already-playable operator state into a concrete contradiction surface: who saw what, which reader they can satisfy, what scar they carry, who benefits from merging them, who is harmed if dissent is overwritten, and what future route consumes the result.

Design problem

Recent content makes individual operators strong:

• 楼刻字幕切换员线 protects the caption row from becoming source truth.
• 陆纷切条分发跑腿线 protects a clipped recap from becoming the whole recap.
• 岑回逆流引座员线 protects a late backflow receipt from becoming a clean all-clear.

The remaining failure mode is false staff consensus. A later desk can say the operators agree, or that a senior proxy summarized them, even when the rows have incompatible reader scope. This mechanism prevents that shortcut.

State-triggered entry

entry_state_required:
  trigger_kind: state_pressure
  operator_rows_conflict_visible: true
  operator_rows_have_source_cards: true
  requested_merged_claim_present: true
  contradiction_kind_present: true
  harmed_reader_if_merged_visible_or_explicit_absence: true
  beneficiary_of_merge_visible_or_explicit_absence: true
  future_reader_or_route_consumes_result: true
  player_can_seat_preserve_split_protect_publish_seal_summarize_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_operator_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

The mechanism may require more than one named row as evidence, but eligibility is not a raw count threshold. Entry comes from a live contradiction between scoped operator rows and a future consumer.

Core objects

• 操作员合议案卷 stores source operator rows, conflict surface, seated conclave state, dissent or overwrite state, and future reader.
• 操作员合议听证 assigns the decision posture.
• 高位代理覆盖默认 fires or arms when a senior narrator overwrites dissent.

Required source-row shape

source_operator_row_required:
  operator: lou_ke | lu_fen | cen_hui | equivalent
  source_card: caption_switchboard_key | recap_syndication_slip | backflow_usher_ledger | equivalent
  source_state: recruited | protected | retained | suppressed | captured | hostile | missed | explicit_absence | equivalent
  asserted_truth: <truth this row can support>
  reader_scope: access_public | sponsor_feed | mirror_feed | public_recap | roll_call | lawful_table | archive | route_asset | broadcast_reality | equivalent
  scar_or_limit: <scar limit or explicit_absence>

The mechanism fails if a row stores only operator name, trust, availability, or proof quality.

Conclave posture contract

Posture	What it preserves	What it costs	Future effect
Seat conclave	all visible rows and their scopes	delay, handler burden, exposure	future reader consumes scoped conflict
Preserve dissent	minority row and harmed reader	payroll, protection, retaliation risk	dissent preserved; addendum required
Split by reader	incompatible publics	edit debt, route delay, contradiction pressure	split state: public-only/lawful-only/access-only/sponsor-only
Minority operator protection	endangered operator state	payroll, safehouse, lawful seal, schedule cost	protected operator required before reuse
Publish contradiction addendum	public/route truth	public distrust, sponsor pressure, license heat	addendum required before reuse
Lawful/archive seal	admissibility	lawful-only gate, archive debt, inspection heat	lawful-only or archive-only acceptance
Management summary with scar	board route proceeds without clean merge	metric scar, compression pressure	management summary remains costed
Senior proxy overwrite default	fastest clean story	false consensus, hostile operator, recovery cost	correction/block/recovery-only/ending scar

No posture may make one operator row or senior summary clean for every reader.

Hard rules

hard_rules:
  source_rows_remain_separate: true
  absent_operator_is_not_agreement: true
  captured_operator_is_not_neutral: true
  public_addendum_is_not_private_consent: true
  lawful_seal_is_not_public_consensus: true
  sponsor_clip_is_not_access_proof: true
  caption_row_is_not_full_source: true
  backflow_receipt_is_not_clean_all_clear: true
  senior_proxy_is_not_staff_consensus_without_dissent_state: true
  no_universal_operator_truth: true

Any attempted shortcut must default, fail, or route-cost.

Counter contract

Every resolved or defaulted conclave must mutate at least three surfaces:

counter_deltas_required:
  relief: at_least_one
  cost: at_least_one
  future_reader_or_route_effect: at_least_one

Relevant surfaces:

• source_contradiction_legibility
• operator_conclave_integrity
• false_staff_consensus
• operator_exposure
• handler_burden
• protected_witness_payroll_due
• management_pressure
• producer_license_pressure
• sponsor_stop_loss_pressure
• archive_debt
• public_receipt_legitimacy
• public_receipt_distrust
• access_harm_erasure
• route_asset_integrity
• route_delay
• correction_required
• recovery_only_pressure

Default contract

高位代理覆盖默认 must fire or arm when:

• the docket is absent or underfilled;
• source operator rows are merged without scopes;
• dissent is hidden;
• a senior proxy speaks for all operators;
• harmed reader or future reader is absent;
• a future route consumes staff consensus without the operator row states;
• a captured, hostile, missed, or suppressed operator is treated as neutral.

Required event evidence must include overwritten operator rows, false clean claim, default narrator, beneficiary, harmed reader, missing inputs, result state, future route effect, and at least three counter deltas.

Integration rules

• With 字幕证词羁押线, a caption operator can be one row but not the whole conclave unless other rows are explicitly absent or irrelevant.
• With 公开回顾捕获线, a recap may cite the conclave only if dissent/addendum state is recorded.
• With 漏点名复核线, backflow evidence can narrow all-clear but cannot absorb caption or clip dissent.
• With 受保护证人薪册, protected dissent creates payable operator maintenance.
• With 举证负荷再分配线, the burden can be assigned to one row, split, or escrowed, but not silently merged.
• With 经营压缩台, a staff-consensus report is a metric only if its dissent scar survives.
• With 跨台前例召回线, a prior conclave result can be recalled later only with its scope and dissent state.

Replay evidence shape

mechanic_id: storyteller.mechanic.operator_witness_conclave.v1
session_id: lens-operator-witness-conclave-v1-<timestamp>
seed: <deterministic-seed>
entry_state:
  trigger_kind: state_pressure
  operator_rows_conflict_visible: true
  requested_merged_claim_present: true
  contradiction_kind_present: true
  future_reader_or_route_consumes_result: true
  no_fixed_turn_trigger: true
offered:
  card: storyteller.card.operator_conclave_docket.v1
  rite: storyteller.rite.operator_conclave_hearing.v1
branch_result:
  selected_posture: seat_conclave | preserve_dissent | split_by_reader | minority_operator_protection | publish_contradiction_addendum | lawful_or_archive_seal | management_summary | senior_proxy_overwrite_default
  conclave_state_after: <state>
  overwritten_operator_or_absence: <operator or explicit_absence>
  future_reader_or_route_effect: <effect>
  emitted_event_or_absence: storyteller.event.senior_proxy_overwrite_default.v1 | explicit_absence
  counter_deltas:
    relief: []
    cost: []
    future: []

Non-goals

• Not a governance or policy page.
• Not a raw count milestone.
• Not a generic staff meeting.
• Not a fixed-turn escalation.
• Not a relationship-score party scene.
• Not a replacement for the individual operator character lines.
• Not valid unless conflicting operator rows change a future reader, route, proof burden, management report, or ending scar.