Substitute Carrier Requisition / 替代承载征调机制

This mechanism implements 替代承载征调线 as a concrete fit check for a replacement carrier.

The rule is: a substitute can carry only the service it is fit to carry, for the reader that accepts it, at a visible cost.

It exists downstream of 回叫承载撞车线 and 见证承载解除线. Those mechanisms can say the old carrier is overdrawn or cannot be reused. This mechanism asks whether the replacement is honest.

Input contract

A valid requisition consumes one selected service row.

requisition_input:
  source_row_id: <stable id>
  source_surface: callback_carrier_collision | witness_carrier_discharge | consent_debt_transfer | protected_witness_payroll | live_floor_crew_load | equivalent
  original_carrier: <carrier id or explicit_absence>
  original_carrier_state: overdrawn | refused | captured | hostile | absent | scope_limited | quarantined | equivalent
  service_needed: witness | delegate_signature | receipt | annex | route_asset_return | proof_window | floor_coverage | callback_notice | equivalent
  owed_reader: fan_public | lawful_reader | sponsor | archive | public_table | route_asset | worker | artist_boundary | broadcast_reality | equivalent
  minimum_service_surface: <surface>
  future_consumer: <route slot reader package proof window or broadcast reality surface>

The input fails if it does not name the original row, required service, owed reader, and future consumer.

Candidate model

The mechanism builds a candidate row for each possible substitute or explicit absence.

substitute_candidate:
  candidate_id: <stable id or explicit_absence>
  candidate_class: low_rank_runner | public_witness_or_delegate | lawful_clerk_or_annex | editor_mask_or_checksum | pirate_relay | sponsor_or_management_proxy | explicit_absence | equivalent
  candidate_state_before: free | strained | protected | paid | hostile | captured | absent | overdrawn | quarantined | equivalent
  consent_or_authority: consented | proxy_only | lawful_only | public_only | sponsor_only | coerced | absent | unknown | equivalent
  proof_fit: exact | partial | wrong_reader | wrong_surface | unverifiable | masked | pirate_public | absent | equivalent
  protection_or_price: payroll | oath | public_receipt | lawful_annex | edit_mask | sponsor_clause | quarantine | delay | explicit_absence
  source_row_scope_preserved: true

A candidate with wrong_reader, wrong_surface, coerced, unknown, or absent can still be offered, but must price the scar or arm a miscast default.

Fit check

Every candidate is evaluated through three gates.

fit_check:
  reader_fit:
    owed_reader_accepts_candidate: true | false
    reader_scope_after: public_only | lawful_only | sponsor_only | route_only | named_scope | blocked | recovery_only | equivalent
  surface_fit:
    minimum_service_surface_met: true | false
    missing_surface_or_absence: <surface or explicit_absence>
  carrier_fit:
    candidate_can_carry_without_erasing_original_scar: true | false
    consent_refusal_payment_or_protection_visible: true | false

A branch can pass only if it satisfies a named scope and leaves original scar state visible. Passing does not mean universal clean service.

Branch outcomes

Fit-tested branch

result:
  substitute_fit_state: fit_for_named_scope
  source_row_state_after: served_by_substitute_for_named_scope | deferred_with_substitute | equivalent
  candidate_state_after: assigned | protected | paid | exposed | costed | equivalent
  future_consumer_effect: accepted_with_scope | callback_required | costlier | equivalent

Narrow-reader branch

result:
  substitute_fit_state: public_only | lawful_only | sponsor_only | route_only
  source_row_state_after: partial_service
  future_consumer_effect: addendum_required | appeal_required | public_receipt_required | lawful_annex_required | split_required

Media substitute branch

result:
  substitute_fit_state: masked | pirate_public | split_source
  future_consumer_effect: contradiction_pending | public_only | recovery_only | costlier

Proxy branch

result:
  substitute_fit_state: sponsor_proxy | management_proxy
  future_consumer_effect: sponsor_only | management_only | audit_required | contract_capture

Absence branch

result:
  substitute_fit_state: honest_absence | quarantine_required | blocked
  future_consumer_effect: delayed | costlier | recovery_only | blocked

Miscast branch

result:
  substitute_fit_state: false_clean_miscast
  future_consumer_effect: contradiction_pending | hostile | blocked | recovery_only | broadcast_reality_drift
  event_armed: storyteller.event.substitute_carrier_miscast_default.v1

Hard rules

hard_rules:
  substitute_is_not_original: true
  public_only_is_not_lawful: true
  lawful_only_is_not_public: true
  sponsor_proxy_is_not_public_consent: true
  masked_service_is_not_clean_witness: true
  pirate_public_is_not_lawful_mandate: true
  absence_is_not_service: true
  old_carrier_scar_must_remain_visible: true
  no_universal_clean_substitute: true

Counter mutation

Every resolved branch mutates at least three surfaces:

counter_deltas_required:
  relief: at_least_one
  cost: at_least_one
  future_reader_or_route_effect: at_least_one

Accepted surfaces include substitute_carrier_fit, substitute_scope_integrity, carrier_collision_pressure, callback_carrier_capacity, deferred_callback_debt, witness_retaliation_risk, payroll_leak, handler_burden, lawful_annex_debt, public_receipt_legitimacy, public_receipt_distrust, fan_oxygen_resentment, sponsor_stop_loss_pressure, contract_capture, edit_debt, source_ambiguity, inspection_heat, route_asset_pressure, broadcast_reality_drift, and future_recovery_cost.

Failure cases

The mechanism fails if:

• entry is fixed-turn, fixed-day, fixed-week, chapter quota, raw staff count, dashboard state, or lens-health state;
• no source service row is selected;
• the old carrier scar is erased;
• reader fit and surface fit are not evaluated;
• substitute consent, authority, protection, payment, refusal, or absence is hidden;
• a sponsor proxy counts as fan-public or lawful consent;
• a public receipt counts as lawful annex;
• a lawful annex counts as public consent;
• a mask counts as clean witness service;
• a pirate relay counts as lawful mandate;
• absence is treated as service;
• future consumer does not read the substitute state.