Voice Substitution Liability / 声音替身责任机制

Voice Substitution Liability is the state machine for any broadcast surface that tries to make one voice stand in for another.

The mechanism exists because 黎星瞳自我线 now has a living-artist consent surface, while Iris Vale 纪念声权验讫线, Iris Vale 声权验讫残留线, and Iris Vale 验讫后用引证线 create scoped memorial voice rows. The missing pressure is what happens when a producer, sponsor, cutroom, archive reader, public queue, or broadcast reality tries to cover a live slot with a memorial voice, or cover a memorial line with a living saint voice.

The rule is simple: a substituted voice transfers liability unless both source boundaries remain visible.

Entry state

Open this mechanism only when state pressure proves all of the following:

entry_state:
  trigger_kind: state_pressure
  live_voice_surface_present: true
  memorial_voice_surface_present: true
  requested_substitution_present: true
  source_boundaries_known_or_explicitly_absent: true
  future_broadcast_or_route_reader_present: true
  liability_carrier_can_change: true
  player_can_accept_separate_split_quarantine_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

Valid substitution pressures include:

• a cutroom patch wants Iris’s memorial voice to smooth a gap in Xingtong’s saint broadcast;
• a sponsor package wants Xingtong to revoice Iris’s memorial line as if consent can be borrowed;
• a public vigil wants a duet, chorus, or ghost response using both voices;
• an archive reader wants a lawful voice row while broadcast reality wants an emotionally legible line;
• a route asset unlock depends on the audience accepting that the same voice can carry two identities;
• a checksum copy hides whether the line came from the living artist, a probated memorial row, or an edited blend.

No fixed chronology, page count, replay count, dashboard state, or generic production trouble may open the mechanism.

Required state row

A valid implementation must create a substitution row equivalent to:

voice_substitution_row:
  row_id: <stable row id>
  live_voice_source:
    character: li_xingtong
    state: living_present | pressured | protected | compromised | unavailable | hostile | explicit_absence
    consent_surface: xingtong_selfhood_docket | unedited_live_vocal_master | artist_memory_refusal_receipt | explicit_absence | equivalent
    living_boundary: <boundary or explicit_absence>
  memorial_voice_source:
    character: iris_vale
    state: probated | residue | quarantined | cited_afteruse | breached | recovery_only | explicit_absence
    probate_surface: memorial_voice_probate_docket | voice_probate_residue_ledger | probate_afteruse_citation_ledger | explicit_absence | equivalent
    memorial_boundary: <boundary or explicit_absence>
  requested_substitution: live_covers_memorial | memorial_covers_live | duet_split | chorus_blend | checksum_blend | sponsor_clean_sync | public_echo | route_unlock_voice | equivalent
  requesting_actor: sponsor | cutroom | archive | public_fan | inspector | manager | pirate_relay | route_asset | broadcast_reality | equivalent
  future_reader: broadcast_reality | archive_reader | lawful_reader | fan_public | sponsor_gate | route_asset | correction_slot | equivalent
  liability_carrier_before: <actor or explicit_absence>
  proposed_liability_carrier_after: li_xingtong | iris_probate_row | producer | sponsor | archive | cutroom | public | split | none | equivalent
  hidden_boundary_risk: <risk>

The mechanism fails if it records only voice_ok, clip_usable, consent_granted, probate_done, or stability_patch_applied.

Branch families

Keep voices separate

The producer refuses substitution and keeps living voice, memorial voice, and broadcast liability separate.

Relief may include voice_integrity_up, xingtong_selfhood_up, iris_boundary_preserved, or false_clean_risk_down.

Cost must include at least one of schedule_pressure_up, audience_stability_down, sponsor_stop_loss_pressure_up, route_asset_pressure_up, or fan_oxygen_resentment_up.

Future effect must keep route access narrowed, costlier, public-only, lawful-only, or recovery-only until a reader-specific bridge exists.

Living revoice with explicit scar

Xingtong may revoice or answer a memorial line only when the living consent surface and Iris source row are both cited.

Relief may include broadcast_legibility_up, public_receipt_legitimacy_up, or route_legibility_up.

Cost must include xingtong_consent_debt_up, artist_boundary_risk_up, iris_afteruse_rider_required, inspection_heat_up, or equivalent.

Future effect must require a living-consent scar and an Iris citation rider for later reuse.

Memorial sample patch with probate rider

Iris’s probated or residue voice may patch a living broadcast gap only when Xingtong’s absence or refusal remains visible.

Relief may include continuity_hazard_down, slot_survival_up, or audience_stability_up.

Cost must include voice_integrity_risk_up, archive_debt_up, fan_oxygen_resentment_up, public_receipt_distrust_up, or equivalent.

Future effect must mark the result as memorial-sourced, not living consent.

Split duet receipt

The implementation may publish the substitution as a split receipt: both voices are present, neither becomes the other.

Relief may include public_receipt_legitimacy_up, false_private_capture_down, or source_trace_up.

Cost must include source_ambiguity_up, edit_debt_up, sponsor_pressure_up, handler_burden_up, or equivalent.

Future effect must require split-reader handling and forbid universal acceptance.

Sponsor clean blend

Sponsor, manager, or safe-continuity pressure may create a clean blend only as a risky branch.

Relief may include sponsor_stop_loss_pressure_down, schedule_pressure_down, or audience_stability_up.

Cost must include contract_capture_up, xingtong_selfhood_down, iris_boundary_breach_up, public_receipt_distrust_up, or equivalent.

Future effect must create sponsor-only, captured, breach-armed, or recovery-only state.

Quarantine or blackout slot

The producer may refuse to air or quarantine the voice slot when neither source can safely carry the line.

Relief may include false_clean_risk_down, voice_integrity_protected, or contempt_risk_down.

Cost must include black_screen_pressure_up, fan_oxygen_resentment_up, sponsor_stop_loss_pressure_up, or route_asset_pressure_up.

Future effect must keep the route blocked, lawful-only, public-only, or recovery-only until a new proof bridge exists.

Miscast liability default

If a substitution hides either source boundary, assigns liability to the wrong voice, or records a clean blended voice, a default must harden.

The default must name:

• the hidden source boundary;
• the voice that was made to carry the wrong liability;
• the actor or reader that moved first;
• the excluded reader or explicit absence;
• the future route effect.

Valid future effects include false_living_consent, false_memorial_permission, sponsor_only, public_only, lawful_only, route_asset_capture, correction_slot_required, and recovery_only.

Counter contract

Every resolved branch must mutate at least three surfaces:

counter_deltas_required:
  relief: at_least_one
  cost: at_least_one
  future_reader_or_route_effect: at_least_one

Relevant counters and durable states include:

• voice_integrity
• xingtong_selfhood
• xingtong_consent_debt
• iris_boundary_integrity
• iris_afteruse_rider_required
• broadcast_legibility
• continuity_hazard
• audience_stability
• public_receipt_legitimacy
• public_receipt_distrust
• sponsor_stop_loss_pressure
• contract_capture
• archive_debt
• inspection_heat
• fan_oxygen_resentment
• source_ambiguity
• edit_debt
• route_asset_pressure
• black_screen_pressure
• substitution_liability_miscast

Non-goals

• Not a new first-use voice probate.
• Not a generic duet scene.
• Not a romance or affection check.
• Not a clean cure for Xingtong selfhood pressure.
• Not a clean cure for Iris probate residue.
• Not a fixed-turn aftermath.
• Not valid if one voice becomes universal permission for the other.