Senior Proxy Overwrite Review / 高位代理覆盖复核机制

Senior Proxy Overwrite Review turns a fired or armed senior-proxy overwrite into repairable but scarred gameplay.

操作员证词合议机制 prevents false staff consensus before it files. This mechanism starts later, when the false consensus already exists and a future reader wants to rely on it.

Mechanic promise

A passing implementation proves:

• the prior overwrite or explicit absence is visible;
• the false clean claim is visible;
• overwritten operator rows or explicit absence are visible;
• senior proxy/default narrator, beneficiary, and harmed reader are visible;
• a future reader or route consumes the review state;
• repair branches preserve scar rather than becoming clean undo;
• hardening produces durable future cost;
• no fixed turn, day/week, raw count, dashboard, or lens-health trigger exists.

Entry model

entry_state_required:
  trigger_kind: state_pressure
  senior_proxy_overwrite_default_seen_or_armed: true
  false_clean_claim_visible: true
  overwritten_operator_rows_visible_or_explicit_absence: true
  senior_proxy_or_default_narrator_visible: true
  harmed_reader_if_merged_visible_or_explicit_absence: true
  beneficiary_of_merge_visible_or_explicit_absence: true
  future_reader_or_route_consumes_false_consensus: true
  player_can_reopen_protect_publish_split_scar_quarantine_accept_or_harden: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_operator_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

Invalid entries include generic staff conflict, generic apology, fixed aftercare phase, relationship score, raw operator count, or an operator conclave that has not yet defaulted.

Review row

高位代理覆盖复核案卷 records:

review_row:
  overwrite_source:
    default_event_or_absence: storyteller.event.senior_proxy_overwrite_default.v1 | explicit_absence | equivalent
    prior_conclave_row_or_absence: <row id or explicit_absence>
    false_clean_claim: operators_agree | senior_proxy_speaks_for_all | caption_and_clip_match | late_receipt_cleans_recap | sponsor_clip_is_access_proof | lawful_seal_is_public_consensus | absent_operator_agreed | equivalent
    senior_proxy_or_default_narrator: producer | shen_luo | management | sponsor | archive | lawful_reader | public_table | route_claimant | broadcast_reality | equivalent
  overwritten_rows:
    - operator: lou_ke | lu_fen | cen_hui | equivalent | explicit_absence
      source_card_or_absence: caption_switchboard_key | recap_syndication_slip | backflow_usher_ledger | operator_conclave_docket | equivalent | explicit_absence
      source_state_or_absence: recruited | protected | retained | suppressed | captured | hostile | missed | explicit_absence | equivalent
      asserted_truth_or_absence: <truth or explicit_absence>
      reader_scope_or_absence: <reader or explicit_absence>
      scar_or_limit_or_absence: <scar or explicit_absence>
  review_pressure:
    harmed_reader_if_merged: access_public | public_table | lawful_reader | sponsor_reader | archive_reader | route_asset_reader | broadcast_reality | equivalent | explicit_absence
    beneficiary_of_merge: <actor or explicit_absence>
    future_reader_or_route: public_recap | proof_burden | access_reliance | roll_call | management_metric | archive_release | sponsor_package | route_asset | broadcast_reality | ending_scar | equivalent
    review_state_before: unreviewed_overwrite | reopen_requested | operator_missing | proxy_defended | default_ready | hardened | equivalent

The mechanism fails if the review stores only staff summary corrected, operator apologized, or proxy overruled.

Resolution model

高位代理覆盖复核 must select one posture:

• reopen_conclave;
• protect_overwritten_operator;
• publish_contradiction_addendum;
• split_future_readers;
• scar_management_summary;
• quarantine_route_use;
• accept_limited_overwrite;
• harden_overwrite_default.

Each posture writes review state, overwritten operator state, harmed reader state, senior proxy or beneficiary state, and future route effect.

Hard rules

hard_rules:
  prior_overwrite_is_history: true
  absent_operator_is_not_agreement: true
  captured_operator_is_not_neutral: true
  senior_proxy_summary_is_not_operator_truth: true
  public_addendum_is_not_full_repair: true
  management_scar_is_not_clean_metric: true
  limited_overwrite_cannot_cross_readers: true
  hardened_overwrite_mutates_future_play: true
  no_universal_staff_consensus: true

Default and hardening

高位代理覆盖默认 remains armed or fires again as hardening when:

• the review docket is absent;
• a future reader cites the senior summary as clean consensus;
• overwritten operator rows are still hidden;
• harmed reader or beneficiary is hidden;
• an accepted limited overwrite crosses reader scope;
• a management scar is omitted from the future metric;
• route use proceeds with no addendum, split, protection, quarantine, or explicit acceptance scar.

Durable hardening outcomes include false_staff_consensus, hostile_operator, captured_dissent, correction_required, route_blocked, costlier, recovery_only, or ending_scar.

Replay evidence shape

mechanic_id: storyteller.mechanic.senior_proxy_overwrite_review.v1
session_id: lens-senior-proxy-overwrite-review-v1-<timestamp>
seed: <deterministic-seed>
entry_state:
  trigger_kind: state_pressure
  senior_proxy_overwrite_default_seen_or_armed: true
  false_clean_claim_visible: true
  overwritten_operator_rows_visible_or_explicit_absence: true
  future_reader_or_route_consumes_false_consensus: true
objects:
  docket: storyteller.card.senior_proxy_overwrite_review_docket.v1
  rite: storyteller.rite.senior_proxy_overwrite_review.v1
branch_runs:
  resolved_branch:
    selected_posture: reopen_conclave | protect_overwritten_operator | publish_contradiction_addendum | split_future_readers | scar_management_summary | quarantine_route_use | accept_limited_overwrite
    review_state_after: <state>
    future_reader_or_route_effect: <effect>
    counter_deltas:
      relief: []
      cost: []
      future: []
  hardening_branch:
    event_seen_or_armed: storyteller.event.senior_proxy_overwrite_default.v1
    hardened_state: <state>
assertions:
  - entry_state_driven_by_existing_overwrite
  - false_claim_operator_rows_harmed_reader_beneficiary_and_future_reader_visible
  - repair_has_scar
  - limited_overwrite_scoped
  - hardening_mutates_future_play
  - no_universal_staff_consensus

Non-goals

• Not the first operator-conclave hearing.
• Not a generic staff appeal.
• Not a free correction action.
• Not a replacement for source operator character lines.
• Not valid unless an existing overwrite state and future consumer are both visible.