Manual Transfer Switch Custody / 手动切换钥匙羁押线

Manual Transfer Switch Custody is the pressure storyline for the narrow moment after a power priority has been chosen but before the selected load actually receives emergency power.

应急供电优先线 asks which powered surface should live. This storyline asks who physically holds the transfer switch, key, breaker tag, override seal, or switch-room witness that makes that priority true.

It prevents a clean shortcut: the player cannot say “oxygen pumps get priority” or “archive freezer stays powered” if the switch key is held by sponsor security, the breaker tag names the stage lights, the switch-room witness is missing, or the old throw remains in place.

Primary playable question

When a finite power allocation must be physically thrown, does the producer certify the switch, assign a trusted operator, expose the holder, split or delay the throw, accept a sponsor/security override, quarantine the panel, or let a false switch log harden into blackout reality?

Every answer must name:

• source emergency-power row;
• transfer object or explicit absence;
• current holder;
• intended powered surface;
• actual or disputed thrown surface;
• operator, witness, seal, or explicit absence;
• harmed reader and future route effect.

State-triggered entry

Open this storyline only from state pressure:

entry_state:
  trigger_kind: state_pressure
  source_power_priority_row_present: true
  transfer_object_or_explicit_absence_present: true
  intended_powered_surface_present: true
  physical_throw_can_change_power_state: true
  holder_or_operator_visible_or_explicit_absence: true
  actual_or_disputed_thrown_surface_visible_or_explicit_absence: true
  future_reader_or_route_consumes_switch_state: true
  player_can_certify_assign_expose_split_delay_quarantine_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_power_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

Valid entry pressure includes emergency power allocation, facility door power, ward oxygen support, archive cold-chain priority, cutroom power, proof scanner access, stage-light cue custody, service-corridor lighting, or borrowed generator maturity.

Content pack

• 手动切换钥匙羁押机制 defines switch rows, holder states, branch families, default payload, and replay evidence.
• 手动切换账本 records the source power row, transfer object, holder, intended surface, thrown surface, witness/seal, harmed reader, and future effect.
• 手动切换听证 resolves certification, staffed throw, public witness, split delay, override, quarantine, or default.
• 伪切换默认 fires or arms when a switch log, key holder, old breaker tag, or missing witness is treated as clean proof of priority.

Storyline spine

Beat 1 - Priority reaches the switch room

An emergency power row says which surface should be protected. The physical transfer object becomes visible: transfer key, breaker tag, override seal, switch-room witness, generator handoff slip, locked panel, or explicit absence.

The player receives 手动切换账本.

Beat 2 - The holder can contradict the priority

At least two readings must matter. Examples:

• sponsor security holds the key and keeps beauty lights powered;
• ward staff holds the breaker tag and protects oxygen pumps;
• archive clerk keeps freezer priority but blocks live correction;
• security grid locks doors while corridor lights fail;
• stage manager throws the old cue load from a stale dispatch;
• borrowed generator claimant requires a future price before releasing the switch.

Beat 3 - The hearing prices the throw

Run 手动切换听证. The player chooses whether to certify the switch, assign an operator, publish or witness the throw, split/delay, accept override, quarantine, or default.

Beat 4 - Future play reads switch state

A later route must consume the result as certified, witnessed, public-only, lawful-only, sponsor-only, delayed, contradiction-pending, blocked, costlier, or recovery-only.

Beat 5 - False switch log hardens

If the transfer object is hidden, holder state is missing, actual thrown surface is not recorded, or a sponsor/security/ward/archive override is treated as the same as player priority, 伪切换默认 fires or arms.

Branch map

Branch	Immediate relief	Cost/scar	Future state
Certify switch throw	intended surface receives power	inspection heat, delay, exposed holder	certified with switch scope
Staffed operator throw	physical throw becomes legible	operator risk, payroll, handler burden	accepted with operator cost
Public witness throw	private override blocked	sponsor pressure, crowd anxiety, witness exposure	public-only or addendum-required
Split or delayed throw	two surfaces remain partially viable	degradation, route delay, contradiction	split-required or costlier
Accept override	urgent surface stays powered	capture by sponsor/security/ward/archive	sponsor-only, lawful-only, or recovery-only
Quarantine panel	false switch proof blocked	current route delayed or blocked	recovery-only until hearing
False switch default	short-term clarity may improve	wrong surface powered, hidden holder, blackout scar	blocked, hostile, sponsor-only, recovery-only

Integration notes

• With Emergency Power Priority, this storyline is the physical execution check after allocation.
• With Facility Access Lockdown, switch-room access can require a route, escort, or seal.
• With Live Floor Crew Load, the operator or crew line may be too exhausted to perform a clean throw.
• With Stage Light Cue Custody, an old or false switch throw can later become disputed light evidence.
• With Route Assets and Custody, the transfer key, operator, or witness can become a narrow route asset or captured proof object.

Missability and recovery

This storyline is missed when implementation:

• records only priority allocated, generator used, power restored, or blackout avoided;
• treats a transfer key as flavor or an invisible inventory item;
• lets a sponsor/security/ward/archive holder throw the switch without holder state;
• hides the actual thrown surface;
• treats a stale switch log as current proof;
• creates no future reader effect.

Recovery is allowed only with visible scar: late switch-room audit, public witness addendum, operator protection, panel quarantine, override unwind, facility reroute, borrowed-generator release, or recovery-only branch.

Replay evidence expectation

storyline_id: storyteller.storyline.manual_transfer_switch_custody.v1
session_id: lens-manual-transfer-switch-custody-v1-<timestamp>
seed: <deterministic-seed>
entry_state:
  trigger_kind: state_pressure
  source_power_priority_row_present: true
  transfer_object_or_explicit_absence_present: true
  intended_powered_surface_present: true
  holder_or_operator_visible_or_explicit_absence: true
  no_fixed_turn_trigger: true
offered:
  card: storyteller.card.manual_transfer_switch_ledger.v1
  rite: storyteller.rite.manual_transfer_switch_hearing.v1
branch_result:
  selected_posture: certify_switch_throw | staffed_operator_throw | public_witness_throw | split_or_delayed_throw | accept_override | quarantine_panel | false_switch_default
  transfer_state_after: <state>
  actual_thrown_surface: <surface or explicit_absence>
  event_seen_or_armed: storyteller.event.false_transfer_switch_default.v1 | none
  future_reader_effect: <effect>
assertions:
  - switch_entry_is_state_triggered
  - transfer_object_holder_and_operator_visible
  - intended_and_actual_powered_surfaces_visible
  - branch_has_relief_cost_future_effect
  - emergency_priority_is_not_physical_throw_proof
  - no_clean_universal_switch_log

Non-goals

• Not a generator-room lore page.
• Not a replacement for emergency power allocation.
• Not a generic key item.
• Not a fixed upkeep phase.
• Not valid if the switch log cleanly proves sponsor, public, lawful, archive, safety, route asset, and broadcast-reality readers at once.