F-27 Interlock Restart Review / F-27 联锁复位复核

Entry

The review opens only when the CS-09 duplicate-pulse event resolved trip_after_partial_travel and left future_route.manual_reset_and_dual_receipt_required true. It rejects the complete-second-travel version-fork outcome.

The review is state-triggered, not tied to a turn, day, week, dashboard count, or lens-health score.

Exact runtime contract

The player must hold and assign all eight exact cards:

Slot	Required ID
docket	storyteller.card.fly_interlock_restart_docket.v1
trip_trace	storyteller.card.fly_interlock_trip_trace.v1
actuation_receipts	storyteller.card.fly_interlock_dual_actuation_receipts.v1
position_survey	storyteller.card.fly_interlock_position_brake_survey.v1
load_energy	storyteller.card.fly_interlock_load_pin_energy_register.v1
zone_clearance	storyteller.card.fly_interlock_body_zone_clearance.v1
reset_operator	storyteller.card.fly_interlock_reset_operator_witness.v1
restart_epoch	storyteller.card.fly_interlock_restart_epoch_request.v1

The implementation enforces rite conditions, exact slot acceptance, current-hand membership, explicit choice, and the selected option’s exact card and predecessor-flag requirements. Wrong, duplicate, missing, catalog-only, out-of-hand, virtual, omitted-choice, invalid-choice, and option-mismatch attempts fail without completion.

Seven branches

hold_latch_and_complete_survey

Relief: motion stays stopped; position and cause become legible. Cost: restart remains blocked, show delay rises, and operator time is consumed.

Writes trip_latched_survey_complete and trip_latch_remains_until_repair_review.

controlled_return_to_verified_home

Relief: a spottered maintenance movement removes the unknown partial position. Cost: operator exposure and delay remain; no new show epoch is issued.

Writes home_verified_epoch_unissued and new_epoch_and_load_recertification_required.

isolate_line_and_narrow_show

Relief: other systems resume while F-27 stays de-energized. Cost: the route loses F-27 scenery and inherits a continuity scar.

Writes f27_isolated_show_narrowed and f27_disabled_route_variant_required.

repin_rebalance_and_issue_new_epoch

Relief: the named load is re-pinned and rebalanced, home and body zone are verified, and R7-F27-E2 becomes a legal automated epoch. Cost: rigging recertification, crew claim heat, and show delay.

Writes load_rebalanced_new_epoch_issued, new_epoch_checksum_required_for_every_f27_pulse, and fly_interlock_restart.epoch.R7_F27_E2_issued.

This is the only branch that issues a full automated execution epoch.

degraded_deadman_manual_run

Relief: essential limited-range movement remains possible with the automation bus disconnected. Cost: a named operator and spotter must attend every motion, increasing burden and harm exposure.

Writes deadman_manual_limited_range and named_operator_and_spotter_required_each_motion.

abort_motion_and_fold_slot

Relief: no further rail movement can endanger bodies or equipment. Cost: the recovery slot folds to black, reliability falls, and a public correction is owed.

Writes rail_motion_aborted_slot_folded and blackout_recovery_and_public_correction_required.

bypass_latch_and_false_reset

Relief: management attempts an immediate restart. Cost: the physical fault stays live and F-27 False Reset Hardening becomes eligible.

Writes false_reset_retrigger_pending, interlock_false_reset_default_pending, and fly_interlock_restart.false_reset_pending.

Source obligation consumption

Every successful resolution unsets future_route.manual_reset_and_dual_receipt_required. The selected state and future effect replace that pending obligation. The rite is non-repeatable and closes after its first successful branch.

AND-gate invariant

The full-rearm branch must carry all six gates together: dual receipts, verified position, verified load/pin/energy, current body-zone clear, named reset pair, and a new execution epoch. No single safety artifact or reset lamp can satisfy the conjunction.

Authority boundary

The review may declare named F-27/R7-F27-E2 restart readiness. It cannot grant caller authority, universal rigging clearance, performer consent, sponsor clearance, edit reuse permission, archive ownership, blame, or universal broadcast permission.

Runtime source

game-content/storyteller/rites/fly-interlock-restart-review.json5