Witness Reprisal Chain Storyline / 证人报复链

Witness Reprisal Chain is a cross-pressure storyline for the moment after Storyteller has successfully kept a person alive, paid, admissible, public, hidden, or useful — and an injured faction decides the person is now the softest place to strike.

The witness is not being recruited for the first time. The witness is already a route asset, public receipt holder, handoff carrier, payroll row, or proof-bearing person. The new question is whether the player can stop retaliation from turning that earlier success into capture, silence, hostile testimony, or route poison.

Primary playable question

When a protected person becomes the retaliation target of a faction that lost money, custody, wording, archive priority, public legitimacy, or edit control, does the player shield them, expose the threat, negotiate a stand-down, mask the target, bait the faction into overcommitment, or let the person be captured or turn hostile?

Every answer must preserve the source success while making the cost of protection visible. A protected witness can remain useful, but not for free.

Why this is the next useful expansion

Recent canon has strong first-order and maintenance pressure:

• 派系承诺账本 makes sponsor, inspector, fan, archive, editor, pirate, and management pressure finite.
• 受保护证人薪册 makes a recruited or protected person payable, capturable, hostile, or route-relevant.
• 归档执行案卷 makes rulings enforceable through actors, carriers, proof, and breach states.
• Route Assets and Custody lets people and proof objects mutate future route access.

The remaining gap is retaliatory continuity. A faction can be overcommitted, embarrassed, countered, forced to spend reserve, or denied custody; a witness can be paid or sheltered. The corpus still needs a state-triggered route for what happens when those two facts meet: the angry faction attacks the person who made the result possible.

This storyline adds that bridge without creating a new global revenge meter or a fixed sequence.

State-triggered entry

Open this storyline when all of the following are true:

1. a person has become a witness, follower, carrier, public receipt holder, payroll row, protected source, route asset, or equivalent proof-bearing human state;
2. a faction commitment, enforcement ruling, claimant collision, oxygen exchange, settlement aftershock, archive order, edit custody decision, or public receipt has recently harmed or constrained a faction;
3. that faction can plausibly retaliate against the person through money, legal threat, leak, seizure, edit erasure, public smear, contract capture, pirate exposure, safehouse breach, or handler pressure;
4. a trace exists or is explicitly absent: threat receipt, payroll leak, audit hint, fan rumor, archive notice, sponsor retainer, checksum discrepancy, public witness message, or missing proof;
5. the player can assign at least one protection, counter-threat, handler, decoy, negotiation, or bait action;
6. the person has not already reached terminal clean discharge, terminal hostile witness, irreversible capture, final disappearance, or final sacrifice.

This storyline must never trigger from a fixed numbered turn. It opens from live witness state plus retaliating-faction state.

Content pack surface

This storyline intentionally reuses existing content surfaces rather than creating a standalone revenge minigame.

Existing mechanisms

• 受保护证人薪册机制 — owns the person support state, payroll row, claimant pressure, and future route availability.
• 派系承诺账本机制 — owns the retaliating faction row, spent reserve, demanded control, overcommitment, exhaustion, hostility, and coalition pressure.
• Route Assets and Custody — owns whether the person remains assignable, becomes captured, goes hostile, disappears, or poisons a route.

Existing cards

• 受保护证人薪册 records the targeted person, support state, handler, current cover, and route value.
• 派系承诺账本 records the retaliating faction, what it lost, what reserve it is now spending, and what control it demands over the person or their testimony.

Existing rites

• 证人薪册分诊 handles shield, public shelter, audit oath, sponsor quiet, edit mask, defer, abandon, or sacrifice.
• 派系承诺听证 handles stand-down, countercommitment, baited overcommitment, split demand, freeze, or silent capture.

Existing events

• 证人薪册泄露 fires when the target is exposed, unpaid, captured, contradicted, or pushed into hostile witness state.
• 派系过度承诺破口 fires when the retaliating faction spends too much, contradicts an earlier promise, or is exposed through trace proof.

Primary actors

• 交接链跑腿 — a low-rank route asset whose body is easier to threaten than the docket they carried.
• Yu Lan — can turn private retaliation into public witness harm, improving legitimacy while raising exposure.
• Shen Luo — can buy time or negotiate quiet, but may route the witness into sponsor capture.
• Han Yanshuang — can oath-protect the witness and make retaliation legally expensive, raising bureau debt.
• Inspector Rhee Archive — can freeze threat traces into admissible proof, raising inspection heat and archive opacity.
• Baiya — can mask the target, cut around their name, or create a decoy, raising edit debt and drift risk.
• Orion Breath — can fund or threaten quiet shelter, sponsor retainer, smear, or contract capture.

Core route states

Route state	Meaning	Required consequence
reprisal_unopened	A useful person exists but no retaliation row is visible.	Payroll triage, threat reveal, or silent capture can still open.
threat_declared	A faction has named or implied harm against the person.	Player must shield, expose, negotiate, mask, bait, or default.
trace_absent	Threat exists but proof is weak or missing.	Protection can still work, but exposure or overcommit bait is riskier.
trace_recorded	Threat receipt, leak, rumor, seal, checksum, or notice is recorded.	Public exposure, audit shield, or baited overcommitment becomes possible.
shielded_by_oath	Inspector/archive/white-glove oath protects the person.	Admissibility and safety improve; inspection heat or bureau debt rises.
public_threat_exposed	Yu Lan, fan chain, public receipt, or pirate relay names the threat.	Public legitimacy improves; sponsor, legal, exposure, or fan cost rises.
managed_standdown	Manager/sponsor negotiation pauses retaliation.	Immediate harm falls; contract capture or future blackmail rises.
masked_by_decoy_cut	Editor hides, aliases, or decoys the witness.	Target risk falls; edit debt, drift, or archive doubt rises.
baited_reprisals_overcommit	The faction spends into a trap or contradictory proof.	Faction exhaustion, hostility, or coalition pressure becomes visible.
witness_captured	Retaliating faction controls the person.	Future use requires rescue, exchange, counterproof, or suppression.
witness_hostile	Person turns testimony or route access against the player.	Hostile witness, duplicate claim, leak, or recovery-only branch appears.
route_asset_poisoned	The person remains present but unsafe to assign cleanly.	Future rite gains a risk surcharge or branch mutation.
reprisal_recovered	Later proof/support restores partial usefulness.	Route returns at higher cost; source harm remains in history.

Branch model

Branch A — Oath shield the target

The player assigns Han Yanshuang, Inspector Rhee, archive proof, white-glove seal, formal service, or protected custody to make retaliation legally expensive.

Expected outcomes:

• reprisal_state = shielded_by_oath or equivalent;
• witness_retaliation_risk, custody_clarity, or archive_signature_legitimacy improves;
• inspection_heat, bureau_favor_debt, archive_debt, or sponsor_stop_loss_pressure rises;
• the person remains assignable, but future use is officially visible.

Branch B — Expose the threat publicly

The player assigns Yu Lan, fan oxygen, public receipt, public witness chain, pirate relay, or audience testimony to make harm visible.

Expected outcomes:

• reprisal_state = public_threat_exposed or equivalent;
• public_witness_legitimacy, public_receipt_legitimacy, fan_oxygen_balance, or audience_stability improves;
• fan_oxygen_liability, pirate_exposure, sponsor_stop_loss_pressure, inspection_heat, or witness_exposure rises;
• retaliation against the person becomes public route pressure rather than private cleanup.

Branch C — Negotiate a managed stand-down

The player assigns Shen Luo, sponsor quiet money, manager bridge, retainer language, settlement wording, or schedule scar to pause retaliation.

Expected outcomes:

• reprisal_state = managed_standdown, payroll_deferred, or equivalent;
• immediate harm, blackout risk, slot pressure, or route panic improves;
• contract_capture, public_receipt_distrust, future_blackmail_cost, fan_oxygen_resentment, or witness_loyalty_doubt rises;
• the person remains usable only with a future capture or counterproof risk.

Branch D — Mask or decoy the witness

The player assigns Baiya, black-box cut, alias, checksum, edit hold, false schedule, or decoy handoff to hide the target.

Expected outcomes:

• reprisal_state = masked_by_decoy_cut or equivalent;
• witness_retaliation_risk, safehouse_pressure, or sponsor targeting decreases;
• edit_debt, reality_drift, archive_debt, public_receipt_distrust, or future_fraud_cost rises;
• later public proof may require reveal, confession, checksum, or sacrifice.

Branch E — Bait reprisal into overcommitment

The player records the threat, lets the faction spend a reserve into the person, then reveals incompatible proof, oath shield, public receipt, or claimant contradiction.

Expected outcomes:

• reprisal_state = baited_reprisals_overcommit or equivalent;
• 派系过度承诺破口 fires or is recorded;
• faction_exhaustion, public_receipt_legitimacy, custody_clarity, or future_route_access improves;
• faction_hostility, coalition_pressure, inspection_heat, witness_exposure, or future_blackmail_cost rises.

Branch F — Default into capture, hostility, disappearance, or poison

The player lacks proof, hides the threat, refuses support, accepts private quiet, misses the handler, or lets the faction reach the person first.

Expected outcomes:

• reprisal_state = witness_captured, witness_hostile, witness_disappeared, or route_asset_poisoned;
• 证人薪册泄露 fires or is recorded;
• at least one future route becomes blocked, costlier, captured, hostile, recovery-only, or sacrifice-only;
• at least three counters or durable states change.

Counter contract

Every resolution, leak, overcommitment, capture, or recovery must change at least three counters or durable states. At least one must be visible relief and at least one must be visible cost.

Primary states:

• reprisal_state
• threat_trace_legitimacy
• witness_retaliation_risk
• witness_exposure
• witness_loyalty_doubt
• payroll_leak
• safehouse_capacity
• public_witness_legitimacy
• public_receipt_legitimacy
• public_receipt_distrust
• fan_oxygen_balance
• fan_oxygen_liability
• fan_oxygen_resentment
• sponsor_stop_loss_pressure
• contract_capture
• inspection_heat
• bureau_favor_debt
• archive_signature_legitimacy
• archive_debt
• custody_clarity
• edit_debt
• reality_drift
• route_asset_pressure
• future_blackmail_cost
• faction_exhaustion
• faction_hostility
• coalition_pressure

Multi-session continuity expectation

This storyline should be able to load a person and a hostile faction posture from earlier replays and prove that retaliation inherited both.

Expected evidence:

• source session id and seed that created or protected the person;
• source session id and seed that harmed, countered, overcommitted, or constrained the retaliating faction when available;
• current reprisal session id and seed;
• person id, support state, and route-asset value before reprisal;
• retaliating faction, lost surface, threatened control demand, reserve being spent, and trace state;
• assigned protection, public counter, negotiation, mask, bait, or explicit absence;
• selected branch;
• resulting person state, faction posture, counter deltas, and future route effects.

Missability and recovery

This storyline is missable when the player treats witness support as purely financial, accepts faction quiet without recording control demand, masks the target without future proof, hides a threat trace, lets an angry faction contact the person first, or uses public exposure without shelter.

Recovery is allowed only at higher cost:

• reopen payroll with stronger support and a recorded threat trace;
• rescue a captured witness through exchange, public exposure, or oath service;
• convert hostile testimony through apology, payment, counterproof, or sacrifice;
• reveal an edit mask and accept archive or public distrust;
• expose overcommitment and accept faction hostility or coalition pressure;
• spend a route asset, favor, or public apology to restore partial witness use.

Integration notes

• With 受保护证人薪册, reprisal begins after support exists or is due; it does not replace payroll.
• With 派系承诺账本, reprisal is a hostile spend row against a human target, not ambient faction mood.
• With 归档执行案卷, a carrier or served witness can become the retaliation target after enforcement succeeds or breaches.
• With 认领撞锁, a captured or hostile witness can become a false owner, duplicate claimant, or route poison.
• With Oxygen Claim Exchange Storyline, fan oxygen can protect the person publicly but turns later harm into oxygen resentment.
• With Route Assets and Custody, reprisal mutates route-asset availability, future cost, hostile conversion, recovery-only access, and sacrifice pressure.

Non-goals

• Not a fixed-turn revenge timer.
• Not a global faction hatred meter.
• Not a generic random attack event.
• Not a new first-order recruitment branch.
• Not filler escalation.
• Not a clean witness-protection reward.
• Not a retcon of prior success; the person was genuinely protected or useful before retaliation created new pressure.