Crystal Dorm Witness Safehouse / 水晶宿舍证人安全屋线

The Crystal Dorm has already survived its scheduling decision. The successful ST-SCALE-01 broadcast promised to turn a transparent dorm into an escape-capable safehouse. This storyline begins after that promise becomes true and asks whether the finished facility can keep operating when its public face, hidden use, staffing burden, inspection record, and failure pressure all become playable state.

The public face is a transparent idol-dorm livestream set. The hidden use is a witness safehouse with a compartment for throat-injury care. Neither description is decorative. Every facility rite preserves both postures, while staffing, repeatable operation, inspection, repurpose, and fold pressure decide which account survives as operational truth.

The line asks one narrow question: after broadcast has made a dorm real, can the player protect living witnesses inside it without converting shelter, treatment routing, or visibility into ownership or consent?

Entry boundary

entry_contract:
  predecessor_flag: storyteller_st_scale_01_crystal-dorm-plan_success
  predecessor_rite: storyteller-st-scale-01-crystal-dorm-plan-success
  facility_card: card-storyteller-st-scale-07-crystal-dorm-facility
  entry_state: post_build_operation
  generic_facility_substitution: false
  placeholder_permit_substitution: false

The predecessor flag is essential. Merely holding a facility card, possessing spare budget, or having resolved another construction contract does not open this line. The successful ST-SCALE-01 result is the handoff from “transparent dorm becomes an escape safehouse” to ST-SCALE-07’s facility board.

This entry is deliberately later than Broadcast License: First Contract Gates Reality. That lens observes unauthorized-build blocking, contract acceptance, premiere, and expiry. This storyline does not repeat acceptance, consume a new first-contract slot, or prove the premise that broadcast can make a facility real. It governs the already-successful Crystal Dorm’s operation.

Exact facility packet

The route binds exactly three Crystal Dorm cards, five Crystal Dorm rites, and two Crystal Dorm events.

Role	Exact runtime object
Facility	card-storyteller-st-scale-07-crystal-dorm-facility
Medic role-capacity token	card-storyteller-st-scale-07-crystal-dorm-medic-slot
Witness-guard role-capacity token	card-storyteller-st-scale-07-crystal-dorm-witness-guard-slot
Build handoff	storyteller-rite-st-scale-07-crystal-dorm-build
Staff	storyteller-rite-st-scale-07-crystal-dorm-staff
Repeatable operation	storyteller-rite-st-scale-07-crystal-dorm-repeatable-use
Inspection response	storyteller-rite-st-scale-07-crystal-dorm-inspection
Safehouse repurpose	storyteller-rite-st-scale-07-crystal-dorm-repurpose
Surprise inspection	storyteller-event-st-scale-07-crystal-dorm-inspection
Fold accident	storyteller-event-st-scale-07-crystal-dorm-fold-accident

The staff tags are exact: medic and witness-guard. The two staff-slot cards are allocated role-capacity tokens, not people. Merely possessing either token does not allocate its capacity; the player must place an exact token through the staff rite before facility_crystal-dorm_staffed is recorded. The tokens never identify, recruit, protect, employ, or authorize a medic, guard, artist, or any other person.

Facility spine and inspection interrupt

1. Build handoff

The eight-day build rite consumes the exact post-success opportunity and exact Crystal Dorm facility surface. Its base result raises facility integrity by two and records facility_crystal-dorm_built; it does not unconditionally raise hidden-use state. The selected public_face or hidden_use option supplies the first posture-specific state. The long duration matters: choosing the facility is a scheduling commitment, not a free conversion on the same turn.

2. Allocate exact role capacity

After facility_crystal-dorm_built, the player allocates the exact medic or witness-guard role-capacity token through the required staff slot. The rite writes facility_crystal-dorm_staffed, raises artist trust, and creates staff fatigue. It records capacity for this facility operation; it does not assign, identify, recruit, or authorize an actual medic or guard. A token merely held in hand, a named character route, or another facility’s staffing flag is not equivalent.

3. Operate under accumulating pressure when time permits

The operation rite is repeatable only after staffing. Its base result improves facility integrity while increasing inspection risk and spectacle yield. The selected posture then adds a second visible consequence:

• public_face increases spectacle yield and inspection risk again;
• hidden_use increases artist trust and hidden-use state while also increasing audit heat.

Repeatability is not permission to farm a clean benefit. Every use must preserve the pressure it creates, and the next inspection must read the accumulated state. Repeatable use is optional progression, not a prerequisite for inspection.

Each completed run also increments crystal_dorm_operation_runs. The durable replay/turn log preserves the full selected-posture order. Runtime state exposes whether public or hidden operation has ever occurred through facility_crystal-dorm_use_public_face and facility_crystal-dorm_use_hidden_use, and exposes the latest selection through the mutually exclusive facility_crystal-dorm_last_operation_public_face and facility_crystal-dorm_last_operation_hidden_use flags. Focused evidence compares the snapshots after successive runs; aggregate counters alone are not expected to encode the full order.

4. Answer an inspection interrupt

Once the facility is built and inspection risk reaches at least one, storyteller-event-st-scale-07-crystal-dorm-inspection opens the surprise inspection. A public_face build already creates that risk, so the event can interrupt immediately after build, before any repeatable operation. Every selected stance writes facility_crystal-dorm_inspection_triggered, then applies its own exact consequences:

• show_public_face adds spectacle yield and inspection risk by one;
• route_inspector_to_hidden_use adds public accountability, artist trust, and audit heat by one while leaving inspection risk unchanged;
• seal_room_for_sponsor adds sponsor control by two, reduces artist trust by one, adds inspection risk by one, and reduces facility integrity by three.

The sponsor-seal integrity loss creates a concrete endogenous fold path: the ST-SCALE-01 success contributes one integrity, Crystal Dorm build adds two, and selecting the seal subtracts three, reaching zero while leaving the inspection triggered and unrecorded.

The event itself does not require allocated role capacity, but the matching same-day response rite does. The response requires facility_crystal-dorm_inspection_triggered in addition to the built and staffed flags, inspection risk, the exact facility surface, and the exact medic or witness-guard role-capacity token. It cannot be resolved before the player selects an event stance. If inspection interrupts immediately after a public build, the player must still allocate the role-capacity token before the response can resolve. The rite reduces inspection risk, raises public accountability, and records facility_crystal-dorm_inspection_recorded. The public/hidden posture selected during the rite remains visible; passing inspection does not erase the hidden route or certify the public story as complete truth.

5. Choose the post-inspection facility identity

Only a recorded inspection opens storyteller-rite-st-scale-07-crystal-dorm-repurpose. The rite always records that the repurpose decision happened, then its exact option decides the facility identity:

• public_face retains the transparent dorm showroom, adds spectacle and inspection risk, and does not unlock the safehouse;
• hidden_use adds artist trust, reduces sponsor control, adds hidden-use and audit pressure, and writes facility_crystal-dorm_artist-safehouse_unlocked.

“Repurpose” means that the safehouse use becomes an explicit route interaction rather than an unreviewed secret. It does not transfer the building, witnesses, medical records, voices, or future testimony to the player. The public/hidden option selected here records how the change is presented; it does not broaden the resulting authority.

Fold accident branch

If an inspection has triggered, no inspection record exists, and facility integrity reaches zero or below, storyteller-event-st-scale-07-crystal-dorm-fold-accident becomes reachable. This concrete state backs the semantic missed:storyteller-rite-st-scale-07-crystal-dorm-inspection trigger. It does not depend on an invented relative-day timer. Its consequences are selected by branch rather than granted together as a generic event payload.

Every selected response records facility_crystal-dorm_fold_accident_triggered. Its exact branch responses are:

• fold_to_black_screen records the black-screen failure, raises death pressure, and grants the existing card-storyteller-st-scale-02-glass-dorm-scandal, without also granting the public-accountability branch;
• convert_to_public_accountability adds public accountability by two and preserves the accident as public evidence without granting the folded card or death-pressure package for free;
• bury_as_sponsor_maintenance converts the failure into sponsor burial/capture pressure rather than either public branch.

The downstream black-screen accident card is an output of failure, not a fourth bound Crystal Dorm input card. The accident must remain reachable in focused evidence; a successful inspection profile alone cannot prove the facility’s failure boundary.

Public face and hidden use are not authority

public_face selected
  != complete account
  != resident consent
  != sponsor ownership
 
hidden_use selected
  != blanket treatment consent
  != witness custody
  != permission to capture voice or testimony
 
inspection recorded
  != facility exonerated
  != all rooms opened
  != future inspection waived
 
safehouse unlocked
  != occupants recruited
  != medical authority granted
  != archive or memorial custody granted

The line may record that the exact facility was built, staffed, operated, inspected, repurposed, or folded. It may record local counters and whether a selected facility action used the public or hidden posture. It may not infer a diagnosis, treatment decision, body or voice consent, personhood, death, witness ownership, archive ownership, memorial custody, merchandising permission, naming rights, likeness rights, or blanket broadcast authority.

Adjacent lanes remain separate

• Broadcast License: First Contract Gates Reality owns pre-build authorization, acceptance, premiere, and expiry. This line starts from an existing successful ST-SCALE-01 Crystal Dorm result.
• Mu Ning Storyline owns Mu Ning’s protected, recruited, missed, captured, hostile, and unavailable character outcomes. This facility line does not recruit or resolve Mu Ning, and Mu Ning’s presence cannot substitute for medic or witness-guard tags.
• The ST-SCALE-07 Blackbox Editing Room, Fan Interaction Hall, and Whitebox Evidence Vault keep their own facility cards, staff tags, counters, routes, inspections, and fold accidents. Their state cannot satisfy this line.
• A generic clinic, dorm, safehouse, inspection, or facility flag cannot replace an exact Crystal Dorm object or flag.

Completion state

crystal_dorm_witness_safehouse_result:
  entered_from_exact_st_scale_01_success: true
  exact_cards: 3
  exact_rites: 5
  exact_events: 2
  exact_staff_tags: [medic, witness-guard]
  staff_tokens_are_role_capacity_not_people: true
  possession_without_staff_rite_is_not_allocation: true
  public_face_and_hidden_use_preserved: true
  repeatable_operation_pressure_visible: true
  repeatable_operation_run_count_and_last_posture_visible: true
  full_operation_order_preserved_in_replay_log: true
  inspection_event_and_rite_reachable: true
  inspection_rite_requires_selected_event_stance: true
  inspection_interrupt_reachable_before_repeatable_use: true
  sponsor_seal_can_endogenously_open_fold: true
  every_selected_fold_branch_records_common_fold_flag: true
  safehouse_repurpose_hidden_branch_only: true
  public_showroom_repurpose_retained_without_safehouse: true
  fold_requires_triggered_unrecorded_inspection_and_nonpositive_integrity: true
  fold_relative_day_timer_required: false
  other_facility_substitution: false
  named_character_auto_resolution: false
  universal_authority_granted: false