Fire Curtain / Egress Interlock

F2 passes an empty-house fire-curtain drop test. The curtain descends cleanly, the containment command is safe, and no person is inside its last-person window. Minutes later, a scenic crate occupies aisle B. The egress command is now equally clear: keep the passage legible and do not drop through an occupied crossing.

The sponsor safehouse team tries to compress those two facts into one red-curtain cue. Its staged claim says that red curtain should mean safe route, while Usher Lin’s floor stop order says the physical route is not clear. Broadcast Reality has not yet received the synchronized claim as an aired fact; whether anyone airs it is one of the review’s mutually exclusive choices. The incident is not about whether an old tag may travel. It is about two current safety commands that are valid alone and mutually blocking when synchronized.

Storyline beats

Beat 1 - Empty-house containment proof

The F2 empty-house record proves that the curtain can perform one containment drop under the tested conditions. It does not prove that aisle B will remain empty, that the last person has crossed, or that a broadcast color cue may replace a floor command.

Beat 2 - Occupied egress

The crate arrival changes the present physical state rather than the historical validity of the test. The same curtain that was safe to drop at the test moment now conflicts with an occupied egress window. The control-chain receipt must keep curtain-operator authority separate from floor egress authority while both current records remain visible.

Beat 3 - Cue pressure

The sponsor safehouse cue is staged and claims route clearance, but it has not yet aired as a synchronized safety fact. Usher Lin’s stop order says the physical floor is not clear. Intake records that pressure without deciding which command wins. Only review choice 6, air_synchronized_safety_claim, lets the cue enter Broadcast Reality and arm the false-default chain.

Beat 4 - Four-pressure intake

storyteller.rite.fire_curtain_interlock_intake.v1 assigns drop_trace, aisle_census, stop_order, and sponsor_cue. Choice 0, record_dual_safety_conflict, records four independent observations:

• fire_curtain_interlock.pressure.drop_test_passed;
• fire_curtain_interlock.pressure.aisle_occupied;
• fire_curtain_interlock.pressure.usher_stop_order_visible;
• fire_curtain_interlock.pressure.sponsor_claimed_route_clearance.

Beat 5 - Collision entry

storyteller.event.fire_curtain_egress_collision.v1 requires the completed intake, all four pressure observations, and all seven exact cards. Its only option, open_interlock_hearing, makes the drop authority, egress authority, Usher Lin claim, and sponsor broadcast claim visible around fire_curtain_interlock.state.contested_interlock. Only then can the interlock review open.

Beat 6 - One-shot interlock review

The nonrepeatable review consumes one exact seven-slot packet and selects one of seven ordered outcomes:

review_outputs:
  certify_drop_not_egress: [drop_test_only, separate_egress_clearance_required]
  clear_aisle_then_repeat_drop: [aisle_cleared_retest_due, repeat_drop_witness_required]
  hold_last_person_window: [last_person_window_held, manual_hold_witness_required]
  split_floor_and_broadcast_cues: [floor_broadcast_split, broadcast_cue_cannot_drive_egress]
  honor_usher_lin_stop_order: [usher_veto_honored, usher_lin_signoff_required]
  quarantine_safehouse_cue: [sponsor_cue_quarantined, interlock_witness_pair_required]
  air_synchronized_safety_claim: [false_synchronized_clearance, false_interlock_default_pending]

The tuple order is interlock state after review, then future-route effect. Only the seventh branch makes the broadcast and floor commands appear synchronized and arms the false default.

Beat 7 - False synchronized reality

The default resolves through exactly one terminal:

default_terminals:
  cut_broadcast_restore_floor_veto: [floor_veto_restored, floor_stop_precedes_sponsor_cue]
  evacuate_side_passage_then_drop: [side_passage_then_drop, side_passage_witness_required]
  accept_synchronized_safehouse_reality: [synchronized_safehouse_reality_hardened, sponsor_cue_controls_egress]

The first two repair the command order while preserving the aired false-synchronization scar. The third lets the red-curtain cue harden into route reality, displaces floor egress authority, and adds later correction duty.

Reachability and missability

All seven review choices are reachable from the same post-collision state. Seven starter cards alone cannot open the collision or review: the four-pressure intake and collision event must resolve first. The review is nonrepeatable, so one selected interlock order makes the other six choices missable for this incident. The false default is unreachable from the first six branches.

Non-overlap boundary

safety-curtain-tag-afteruse asks whether an old inspection tag may cross a changed context. mezzanine-fire-door-wedge-afteruse asks whether a temporary crossing mark may become later proof. This storyline asks which of two current safety commands has priority when containment drop and occupied egress collide, and whether a broadcast cue may seize that interlock from the physical floor. No branch resolves old-tag portability or temporary-wedge custody.