Producer Alibi Recall / 制作人抗辩召回机制

Producer Alibi Recall makes management intent into a playable custody surface.

A producer can rescue, cancel, air, suppress, memorialize, settle, edit, or archive under pressure. The immediate branch may already be fully replay-visible through custody, provenance, declined-offer, precedent, or route-asset systems. This mechanism covers the later seam: when a future reader asks why the producer acted, the stated reason must not become universal proof or vanish as flavor.

Design promise

A passing implementation proves that a reason given for an earlier management action has reader scope, proof, cost, and future route effect.

Every producer alibi must expose:

• source decision and source branch;
• selected action and material declined offer or explicit absence;
• alibi kind and wording state;
• who stated or authored the alibi;
• proof anchor or explicit absence;
• relying reader;
• harmed or excluded reader;
• scope boundary;
• branch posture;
• future route or custody effect;
• counter deltas.

The mechanism fails if emergency, consent, safety, archive preservation, memorial respect, sponsor continuity, edit integrity, or public stability is treated as clean explanation for all later readers.

Distinction from adjacent systems

• 播出资产来源后生线 asks which copy owns the next route. This mechanism asks which stated reason can justify citing that copy.
• 跨台前例召回线 asks whether an old result can become policy. This mechanism asks whether the producer’s reason can be recalled as motive, permission, or bad faith.
• 未采纳报价回执线 preserves material offers not chosen. This mechanism preserves the reason the selected offer was chosen over them.
• 压力认领人转化链 turns a default narrator into a claimant. This mechanism prevents that narrator from owning intent for free.

Entry rule

Open or update this mechanism only when all of the following are true:

entry_state_required:
  trigger_kind: state_pressure
  source_decision_present: true
  source_decision_needed_reason: true
  alibi_present_or_required_absence_recorded: true
  relying_reader_present: true
  harmed_or_excluded_reader_present_or_explicit_absence: true
  proof_anchor_or_explicit_absence_visible: true
  future_route_or_custody_effect_possible: true
  player_can_accept_publish_amend_split_retract_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_statement_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

The mechanism must not open from fixed turn count, day/week cadence, chapter quota, raw statement count, dashboard state, lens health, generic late-game escalation, or private thoughts that no later reader can cite.

Core objects

Object	Meaning	Required fields
producer_alibi_ledger	state card for an explanation attached to a source choice	source decision, action, alibi kind, wording, proof, readers, scope, future effect
alibi_scope_hearing	assignable rite that chooses how the reason travels	ledger, reader, harmed reader, proof, handler, cost, posture
hostile_intent_default	event when a hostile narrator authors or overreads intent	failed requirement, hostile narrator, hostile claim, state after
alibi_state	durable reason state	accepted_narrowly, witness_backed, archive_amended, split_alibi, retracted, contradicted, hostile_default, recovery_only
future_reader	who can later consume the reason	archive, voice, memorial, sponsor, fan, inspector, editor, broadcast reality, route asset

State model

producer_alibi_state:
  source_decision:
    source_session_id: <session or explicit_absence>
    source_branch_id: <branch id>
    source_surface: schedule | archive | voice | memorial | fan_oxygen | sponsor | inspection | edit | broadcast_reality | route_asset | equivalent
    chosen_action: <action>
    selected_relief: <relief>
    selected_cost: <cost>
    declined_offer_receipt_or_absence: <receipt or explicit_absence>
  alibi:
    alibi_id: <stable id>
    alibi_kind: emergency_care | consent_proxy | lawful_duty | sponsor_continuity | fan_safety | archive_preservation | memorial_respect | edit_integrity | commercial_rescue | silence | hostile_claim | equivalent
    stated_by: producer | sponsor | archive | inspector | fan_delegate | editor | artist | management_report | hostile_claimant | equivalent
    wording_state: explicit | implied | split_public_internal | sealed | amended | retracted | hostile_authored | missing
    proof_anchor_or_absence: public_receipt | contract_clause | archive_seal | voice_consent | fan_queue | edit_checksum | medical_or_safety_record | explicit_absence | equivalent
  readers:
    relying_reader: archive | voice_probate | memorial_claimant | sponsor | fan_public | inspector | editor | broadcast_reality | future_route | equivalent
    harmed_or_excluded_reader: artist | fan_public | sponsor | archive | inspector | memorial_claimant | access_reader | future_route | explicit_absence | equivalent
    scope_boundary: same_crisis_only | archive_only | voice_only | memorial_only | public_only | sponsor_only | lawful_only | edit_only | route_only | split | unscoped
  alibi_state_after: pending | accepted_narrowly | witness_backed | archive_amended | split_alibi | retracted | contradicted | hostile_default | recovery_only

Playable operations

抗辩范围听证 exposes these operations:

Operation	Immediate relief	Required scar
Accept narrow alibi	license, archive, or reader clarity improves	route scope narrows or follow-up hearing required
Publish witness backing	public legitimacy or hostile-intent pressure improves	witness exposure, sponsor pressure, or inspection heat rises
Amend archive reason	lawful or voice custody reader becomes safer	archive debt, bureau debt, or public distrust rises
Split public/internal alibi	public panic or schedule/sponsor pressure falls	broadcast-reality drift and reader conflict rise
Retract and pay	hostile intent pressure falls	license pressure, sponsor cost, memorial/voice claim cost rises
Default hostile intent	fastest hostile narrator owns motive	route blocked, hostile, lawful-bridge, consent-bridge, or recovery-only

Default rule

敌意意图默认 must fire or arm when:

• an alibi was required but no ledger exists;
• an emergency, safety, consent, memorial, archive, sponsor, or edit reason is unscoped;
• the stated reason lacks proof or explicit absence;
• the harmed reader is hidden;
• public wording contradicts internal wording without split state;
• a hostile claimant authored the intent first;
• a future route consumes the alibi as universal permission.

The default must mutate at least three surfaces: one hostile/capture pressure, one cost, and one future reader or route effect.

Replay evidence shape

mechanic_id: storyteller.mechanic.producer_alibi_recall.v1
session_id: producer-alibi-recall-v1-<timestamp>
seed: <deterministic-seed>
entry_state:
  trigger_kind: state_pressure
  source_decision_present: true
  source_decision_needed_reason: true
  relying_reader_present: true
  harmed_or_excluded_reader_present_or_explicit_absence: true
  proof_anchor_or_explicit_absence_visible: true
  no_fixed_turn_trigger: true
objects:
  ledger: storyteller.card.producer_alibi_ledger.v1
  rite: storyteller.rite.alibi_scope_hearing.v1
branch_runs:
  resolved_branch:
    selected_posture: accept_narrow_alibi | publish_witness_backing | amend_archive_reason | split_public_internal | retract_and_pay
    alibi_state_after: <state>
    relying_reader_state_after: <state>
    harmed_reader_state_after: <state_or_explicit_absence>
    future_route_effect: <effect>
    counter_deltas:
      relief: []
      cost: []
      future: []
  default_branch:
    event_seen_or_armed: storyteller.event.hostile_intent_default.v1
    failed_requirement: <requirement>
    hostile_narrator: <actor>
    future_route_effect: <effect>
assertions:
  - source_decision_and_alibi_are_visible
  - relying_reader_and_harmed_reader_visible_or_absent
  - proof_anchor_or_absence_visible
  - alibi_scope_boundary_visible
  - branch_results_diverge_by_reader_scope_and_future_effect
  - hostile_intent_default_is_durable
  - no_universal_clean_alibi
  - no_fixed_turn_day_week_raw_count_dashboard_or_lens_health_trigger

Failure cases

The mechanism fails if a producer explanation is clean for every reader, if emergency overrides voice or memorial consent without scope, if public wording replaces archive wording without split state, if sponsor continuity becomes public truth, if a hostile narrator can assign bad faith with no event state, if future routes cannot read alibi state, or if the branch only changes mood or reputation.