Sponsor Clinic Arbitration / 赞助门诊仲裁机制

Sponsor Clinic Arbitration models a service desk whose public explanation and operational use are both real state. The mechanic prevents three collapses: a clean public label cannot erase the hidden allocation; exposing the allocation cannot be treated as consent to it; and a verdict cannot silently recruit every operator or close every adjacent claim.

Core non-equivalence

public_face
  != complete account
  != subject consent
  != public ownership
 
hidden_use acknowledged
  != hidden use authorized
  != operator automatically recruited
  != affected person waived objection
 
verdict entered
  != enforcement completed
  != appeal resolved
  != universal authority granted

Six-arena registry

sponsor_clinic_arenas:
  breath-price-window:
    base_counter: fan_oxygen_debt
    support_counter: witness_chain
    hazard_counter: price_shock
    route_interaction: fan-oxygen
  ward-naming-claim:
    base_counter: sponsor_debt
    support_counter: ward_trust
    hazard_counter: legal_body_pressure
    route_interaction: sponsor-debt
  whitebox-consent-desk:
    base_counter: legal_admissibility
    support_counter: audit_heat
    hazard_counter: pulse_contradiction
    route_interaction: whitebox-proof
  blackbox-residue-vault:
    base_counter: proof_integrity
    support_counter: blackbox_debt
    hazard_counter: continuity_hazard
    route_interaction: blackbox-proof
  artist-refusal-clinic:
    base_counter: artist_trust
    support_counter: voice_integrity
    hazard_counter: company_pressure
    route_interaction: artist-refusal
  audience-jury-triage:
    base_counter: public_accountability
    support_counter: witness_safety
    hazard_counter: privacy_risk
    route_interaction: public-accountability

Each registry row owns one exact docket, one exact operator witness, four exact rites, and one exact appeal event. The arena slug is part of the identity; rows cannot be substituted because their counters happen to have similar values.

All twelve cards carry metaData.tags: [storyteller, starter], so the ordinary session initializer places every exact pair in the fresh hand. The top-level role tags remain descriptive; the metadata starter tag is the actual runtime entry contract. Possession exposes the encounter and never counts as recruitment.

Per-arena state

arena_state:
  arena: exact_st_scale_10_arena_slug
  docket_id: card-storyteller-st-scale-10-<arena>-docket
  operator_id: card-storyteller-st-scale-10-<arena>-operator
  progress: 0..4
  selected_postures:
    intake: public_face | hidden_use | miss_operator_window | unresolved
    hearing: public_face | hidden_use | unresolved
    verdict: public_face | hidden_use | unresolved
    enforcement: public_face | hidden_use | unresolved
  opened: boolean
  heard: boolean
  verdict_entered: boolean
  enforcement_resolved: boolean
  appeal_result: uphold_public_face | expose_hidden_use | unresolved
  operator_state: available | recruited | missed | recovery_only | explicit_absence
  hazard_counter: integer
  support_counter: integer

Six arena states may coexist. Progress is local to the arena and cannot be summarized by one global sponsor_clinic_complete flag.

Transition contract

Index	Step	Exact prerequisite	Required output
1	intake	matching docket plus arena base counter >= 0	opened flag, base/hazard movement, selected posture or explicit miss
2	hearing	matching opened flag plus matching operator card	heard flag, support/audit movement, selected posture
3	verdict	matching heard flag, turn <= 18, support >= 1, hazard <= 2	verdict flag, recruited flag, route-asset flag, selected posture
4	enforcement	matching verdict flag, hazard <= 4	hazard relief, support/public-accountability movement, selected posture

sequenceIndex: 1..4 and sequenceLength: 4 are per-arena metadata. A hearing cannot consume another arena’s opened flag. A verdict cannot use another arena’s support. An enforcement review cannot run from another arena’s verdict.

The verdict hazard ceiling of two is deliberate: the operator’s miss boundary begins at three. A verdict that claims recruitment at or above the miss threshold is contradictory and must fail observation.

After turn increment, the runtime sweeps only verdict rites carrying terminalConditionFailure. Any unrecruited and unmissed exact operator still present writes the arena-local missed, recovery-only, and verdict-window-closed flags when turn > 18 or hazard >= 3, then leaves the hand. This mutation never applies verdict base/option effects and never writes complete_<verdict>, the verdict flag, recruitment, or route-asset state. The recruited, missed, and card-presence guards make the sweep idempotent.

Stable posture contract

Public face

public_face increases spectacle and the arena’s hazard. It preserves the service’s advertised account as an observable selected posture. It must not erase the hidden-use description stored on the docket and rites.

Hidden use

hidden_use increases the arena’s support/evidence row and audit heat. It preserves acknowledgement that the desk is doing more than its public description. It must not be interpreted as authorization, voluntary consent, or a cure for the affected claim.

Both stable IDs appear on all twenty-four rites. The selected posture must remain associated with the exact arena and sequence index. Mixed profiles are valid; a profile may choose the public face at intake and expose the hidden use later, but all four choices must remain readable.

Operator miss

miss_operator_window is available at intake as a third, terminal operator posture. It:

• removes the exact arena operator card;
• writes st_scale_10_<arena>_operator_missed;
• writes st_scale_10_<arena>_future_recovery_only;
• increases the exact arena hazard;
• does not write the route-asset flag.

It is not a public/hidden substitute for later steps. Because hearing requires the matching operator, a missed operator blocks the normal verdict chain until a separate recovery path is authored.

Operator recruitment and miss contract

operator_contract:
  card_tags: [npc, recruitable, missable]
  encounter_deadline_turn: 18
  miss_threshold: 3
  timely_verdict_hazard_ceiling: 2
  metadata_fields:
    - encounterDeadlineTurn
    - hazardCounter
    - recruitedFlag
    - missedFlag
    - routeAssetFlag
    - routeAssetCondition
  recruitment_writes:
    - st_scale_10_<arena>_operator_recruited
    - route_asset.st_scale_10_<arena>_operator
  miss_writes:
    - st_scale_10_<arena>_operator_missed
    - st_scale_10_<arena>_future_recovery_only

Recruitment is exact and local. The operator must be present for hearing, the matching verdict must resolve by turn eighteen and before the hazard reaches three, and the matching route-asset flag must be written. Card presence, docket ownership, another operator’s verdict, or an appeal choice is insufficient.

Verdict fan-out

The verdict creates two sibling readers:

matching verdict flag
  -> matching enforcement rite
  -> matching appeal event

Neither reader consumes or replaces the other.

Enforcement

Enforcement is a one-shot terminal review of whether the arena can carry out the ruling while its hazard is no greater than four. It may reduce the hazard and improve support or public accountability. A second resolution is rejected, so the player cannot switch posture or farm counters. Enforcement cannot delete the appeal, rewrite the earlier posture sequence, or broaden authority.

Appeal

The matching appeal event must trigger only from the exact arena verdict. It exposes exactly two options:

• uphold_public_face writes st_scale_10_<arena>_appeal_public_face_upheld and keeps the arena hazard visible;
• expose_hidden_use writes st_scale_10_<arena>_appeal_hidden_use_exposed and raises audit heat.

Each appeal also moves the arena’s support/public-accountability row. An appeal without a selected option or durable arena-specific result is not resolved.

Parallelism and independence

cross_arena_invariants:
  docket_substitution: false
  operator_substitution: false
  support_counter_substitution: false
  opened_or_heard_flag_substitution: false
  verdict_substitution: false
  appeal_substitution: false
  recruiting_one_recruits_all: false
  missing_one_misses_all: false
  global_clean_completion_flag_is_sufficient: false

The system may surface more than one arena at once. Pressure in one row may influence global audit or public-accountability counters, but it does not change another row’s sequence index or operator state.

Authority invariants

authority_invariants:
  price_schedule_equals_fan_consent: false
  ward_sponsorship_equals_patient_ownership: false
  signed_form_or_silence_equals_living_consent: false
  residue_storage_equals_identity_or_archive_ownership: false
  return_to_work_assessment_overrides_refusal: false
  complaint_sample_equals_collective_consent: false
  public_face_equals_complete_truth: false
  hidden_use_acknowledgement_equals_permission: false
  verdict_equals_universal_license: false
  enforcement_erases_underlying_claim: false
  appeal_repairs_missed_operator: false

Explicit exclusions

• Residue Clinic Custody retains its eight-beat treatment and evidence-custody contract; ST-SCALE-10’s blackbox arena is a separate arbitration row.
• Whitebox Screening Witness Binding governs version knowledge and explicitly excludes the ST-SCALE-10 consent desk.
• Mian Tai’s route governs medicine provenance and raid state, not return-to-work refusal arbitration.
• Medical Air Queue Priority governs scarce care allocation, not oxygen pricing testimony or its appeal.
• No arena decides identity, personhood, death, treatment authority, voice ownership, archive ownership, memorial rights, merchandising rights, or blanket broadcast permission.