Replacement Saint Liability Readback / 替代圣女责任回读线

Replacement Saint Liability Readback is the system-facing storyline for the moment a saint-facing pressure row tries to use a fragile substitute as clean public proof.

Mu Ning Storyline proves the character route: Mu Ning can become protected, recruited, missed, captured, hostile, or unavailable. This storyline owns the broader non-character surface. It must still work when Mu Ning is unavailable, when another substitute is explicitly absent, or when implementation needs to prove that a sponsor, schedule board, archive desk, editor, fan public, or saint-continuity desk cannot consume a replacement identity as universal closure.

Gap diagnosis

The corpus already has Replacement Saint Liability, Glass Newcomer Liability Docket, Glass Newcomer Protection Hearing, Replacement Saint Summons, and Mu Ning’s character lens.

The missing layer is the top-level readback before downstream play cites replacement_identity_hardened, sponsor_substitution_contract, public_coercion_witness, inspector_quarantine, or protected_route_asset as if the substitute-saint question were cleanly solved. A future route must see who demanded the substitution, which candidate or absence carried it, what proof or authority supported it, who was harmed or excluded, and what cost travels forward.

Primary playable question

When an unstable saint-facing promise needs a substitute body, voice, or public proof, does the producer read back protected testimony, accept a sponsor package, publish coercion, quarantine the identity, block an editor sample, hold schedule substitution, record explicit candidate absence, or allow replacement default capture?

Every branch must name:

• source saint pressure and source row;
• substitute candidate or explicit absence;
• claimant surfaces and primary claimant;
• harmed or excluded claimant, reader, or route;
• docket state before;
• proof, handler, authority, or explicit absence;
• selected readback posture;
• liability state after;
• future reader or route effect.

State-triggered entry

Open this storyline only from live substitute-saint pressure:

entry_state_required:
  trigger_kind: state_pressure
  saint_facing_pressure_present: true
  source_row_preserved_or_explicit_absence: true
  substitute_candidate_visible_or_explicit_absence: true
  claimant_surfaces_min: 2
  docket_or_expected_docket_present: true
  protection_or_sample_path_visible: true
  future_route_effect_if_unresolved_present: true
  player_can_readback_package_quarantine_publish_hold_absence_or_default: true
  no_fixed_turn_trigger: true
  no_fixed_day_or_week_trigger: true
  no_raw_claimant_count_trigger: true
  no_dashboard_or_lens_health_trigger: true

Valid source pressures include saint continuity, audience-floor breach, sponsor relief demand, memorial edit, schedule salvage, blackout scar, fan oxygen stabilization, archive custody, broadcast slot contract, or explicit absence where a substitute candidate was expected.

Bound content pack

• Replacement Saint Liability defines the substitute-saint state machine and the cost of protection, packaging, witness, quarantine, sample extraction, hardening, and missed windows.
• Glass Newcomer Liability Docket records the source pressure, candidate, claimant surfaces, proof, selected posture, liability state, and future effect.
• Glass Newcomer Protection Hearing resolves protected testimony, sponsor package, public coercion witness, inspector quarantine, editor sample block, schedule hold, explicit absence, and default capture branches.
• Replacement Saint Summons opens the pressure and records the false-clean default when the summons hardens without proof, handler, protection, or absence.
• Mu Ning Storyline remains the character route, not the whole system contract.

Storyline spine

Beat 1 - Saint pressure asks for a replacement surface

A broadcast-facing promise is unstable: Li Xingtong continuity, audience-floor breach, sponsor relief package, memorial edit, schedule salvage, blackout scar, or fan oxygen stabilization. A claimant tries to make a substitute body, voice, sample, or docket carry the promise.

The game must not ask only whether Mu Ning is present. It must ask who is trying to consume the substitute identity and what future route will treat the result as proof.

Beat 2 - The docket separates candidate, claimant, posture, and future use

Create or refresh Glass Newcomer Liability Docket.

replacement_saint_readback_locks:
  source_lock:
    saint_pressure: saint_continuity | audience_floor | sponsor_relief | memorial_edit | schedule_salvage | blackout_scar | fan_oxygen | archive_custody | equivalent
    source_row_id: <row id or explicit_absence>
    source_pressure_state: unstable | claimed | packaged | quarantined | witnessed | hardened | equivalent
  candidate_lock:
    substitute_candidate: mu_ning | other_candidate | explicit_absence
    candidate_state: available | drafted | exposed | protected | sampled | captured | hostile | unavailable | explicit_absence
    absence_reason: <reason or none>
  claimant_lock:
    claimant_surfaces:
      - sponsor
      - schedule_board
      - saint_continuity
      - inspector
      - archive
      - fan_public
      - editor
    primary_claimant: <reader or desk>
    harmed_or_excluded_claimant: <reader route or explicit_absence>
  support_lock:
    docket_state_before: summons_open | protection_pending | sponsor_substitution_contract | identity_hardened | sample_extracted | window_lost | equivalent
    proof_or_authority_or_absence: <manager shield | inspector seal | source chain | public receipt | editor proof | broadcast authority | explicit_absence>
    handler_or_absence: <handler or explicit_absence>
  posture_lock:
    selected_readback_posture: protective_readback | sponsor_package | public_coercion_witness | inspector_quarantine | editor_sample_block | schedule_substitution_hold | explicit_candidate_absence | replacement_default_capture
    liability_state_after: protected_route_asset | sponsor_substitution_contract | public_coercion_witness | inspector_quarantine | sample_blocked | schedule_hold | explicit_absence_recorded | identity_hardened | glass_sample_extracted | route_asset_missed
  future_lock:
    future_reader_or_route: <reader or route>
    future_reader_or_route_effect: recruitable_with_cost | sponsor_only | public_only | lawful_only | editor_blocked | schedule_held | costlier | blocked | hostile | captured | recovery_only

The row fails if it stores only replacement available, sponsor paid, audience calmed, protected, sample used, or handled.

Beat 3 - Readback prices the branch

Run Glass Newcomer Protection Hearing before downstream play can cite the substitute identity as clean continuity.

Valid readback postures:

• protective_readback
• sponsor_package
• public_coercion_witness
• inspector_quarantine
• editor_sample_block
• schedule_substitution_hold
• explicit_candidate_absence
• replacement_default_capture

Each posture must include relief, cost, and future_effect_any. No branch may make sponsor, schedule, saint-continuity, inspector, archive, editor, fan, and route-asset readers all accept the same substitute identity cleanly.

Beat 4 - Future play consumes the scar

At least one later route, proof object, slot, public statement, lawful annex, sponsor package, fan oxygen bridge, archive record, or broadcast-reality reader must consume liability_state_after and future_reader_or_route_effect.

If future play cites the substitute identity while candidate state, claimant surfaces, proof, handler, selected posture, harmed reader, or future effect is hidden, Replacement Saint Summons records false-clean hardening and leaves recovery-only pressure.

Branch matrix

Branch	Immediate relief	Cost/scar	Future state
Protective readback	candidate remains recruitable or protected witness	sponsor, schedule, inspection, archive, or saint-continuity pressure rises	recruitable_with_cost or protected testimony
Sponsor package	audience, sponsor, or schedule pressure drops	contract capture, public distrust, fracture, or sample debt rises	sponsor_only or recovery-gated route
Public coercion witness	public legitimacy or anti-sacrifice pressure improves	sponsor retaliation, inspection heat, relay risk, or schedule pressure rises	public_only or protected witness with cost
Inspector quarantine	binding risk and fraud risk fall	archive debt, inspection heat, or schedule hold rises	lawful_only, delayed, or rehearing required
Editor sample block	clean sample use is blocked or narrowed	edit debt, source ambiguity, or voice-integrity risk remains visible	editor_blocked or sample proof required
Schedule substitution hold	immediate slot conflict is contained	occupied slot, saint-continuity gap, or claimant hostility rises	schedule_held or costlier future slot
Explicit candidate absence	the system proceeds without inventing a person-state	protection confidence and recovery options narrow	explicit absence scar or mandatory rehearing
Replacement default capture	no durable relief, or only false short relief for loudest claimant	substitute identity hardens as capture, sample extraction, or missed route	blocked, hostile, captured, recovery_only, or sponsor/public/lawful-only

Missability and recovery

This storyline is missed when a future reader consumes replacement-state proof without a docket or explicit absence.

Missed states include:

• readback_absent;
• candidate_state_hidden;
• claimant_surfaces_hidden;
• proof_or_handler_absent;
• sponsor_package_false_clean;
• sample_extracted_without_consent_challenge;
• future_reader_consumed_unscoped;
• replacement_default_capture_armed;
• recovery_only_substitute_identity.

Recovery must preserve the scar: publish coercion, quarantine after hardening, unwind sponsor package, block sample use with proof, record explicit absence, rescue the candidate from capture, or convert the route to sponsor-only, public-only, lawful-only, editor-blocked, costlier, hostile, or recovery-only use.

Non-goals

• Not a duplicate of Mu Ning’s recruitable character route.
• Not a generic artist-protection story.
• Not a clean public relations patch.
• Not a fixed schedule beat.
• Not valid if a replacement identity can satisfy sponsor, schedule, fan, archive, editor, inspector, saint-continuity, and route-asset readers without claimant, proof, cost, and future mutation.