2026-09-08 18:07:32
Anonymous:
Clarify carried rig property and survivor Sent predicate
hold the flood/save and content state.md ..
@@ 4,7 4,7 @@
## What continuity promises the player
-
The same completed act must still be true after return, death, quit, load, or a later shift unless its owning rule explicitly says it is temporary. One item cannot exist in two places. Spent oxygen or material cannot reappear. Everything still carried at death returns aboard; something dropped, installed, consumed, or handed over does not. Loading and quitting cause no death, shift, delivery, completed work, or new knowledge.
+
Within one loaded continuity, the same completed act remains true after return, death, quit, load, or a later shift unless its owning rule says it is temporary. Under the provisional single-line policy, ordinary loading does not roll it back; the disclosed recovery fallback and reloadable alternative are explicit exceptions, not owner-set prohibitions. One item cannot exist in two places and spent oxygen or material cannot reappear within the loaded history. Everything in the astronaut's carried property at death returns aboard, including each active rig part and each inactive or loose cargo item once. Something dropped, consumed, handed over, or installed in a station/ship fixture or another location outside that carried set does not. Loading and quitting cause no death, shift, delivery, completed work, or new knowledge.
The game must distinguish **world truth** from **astronaut knowledge**. A room may have a current neighbour the astronaut has not observed; that fact belongs to world state but cannot fill the journal. A recorded route may remain useful evidence while becoming historical after a death shift. A persistent join, opened door, installed part, or completed fastener remains a known fact without revealing any unobserved adjacency.
@@ 19,10 19,10 @@
| **Arrangement generation** | The current post-death arrangement plus stable identities for every older generation still referenced by evidence | Not a map reveal. It dates observations and prevents applying one death twice. |
| **Threshold face and selected join** | The two specific placed faces and a stable join identity; whether the persistent latch exists | Walking connection, mechanical latch, and diagnostic power remain separate. Unbound adjacency is transient. |
| **Mechanism instance and checkpoint** | The placed machine, each named completed stage, deliberate mode/disable state, and reset rule | Current animation/timer/charge and enemy occupancy are transient unless that machine explicitly commits them. |
-
| **Object instance** | One reusable part, canister, objective item, or loot object with one definition and one current location/state | Carried, rig-installed, station-installed, deposited, handed-over, collected, and consumed are mutually exclusive lifecycle states. Fill, stored charge, and rig links belong to that same instance. |
-
| **Astronaut expedition state** | Current place, carried manifest, rig arrangement, suit oxygen, condition, and active life/expedition identity | Ship oxygen supply is unlimited, but gas already breathed remains spent. Ordinary condition restoration aboard does not refill canisters or reset parts. |
+
| **Object instance** | One reusable part, canister, objective item, or loot object with one definition and exactly one current location/state | Astronaut-carried property contains active rig equipment and inactive/loose cargo as distinct substates, each counted once. Station/ship fixture, deposit/recipient, world source, and consumed are outside that set and mutually exclusive with it. “Collected” is a past event, not a current location. Fill, stored charge, and rig links belong to the same instance. |
+
| **Astronaut expedition state** | Current place, carried manifest—including every active rig part and inactive/loose cargo item once—rig arrangement, suit oxygen, condition, and active life/expedition identity | Ship oxygen supply is unlimited, but gas already breathed remains spent. Moving a carried part between rig and inactive cargo changes operation, not return membership or carrying count. Ordinary condition restoration aboard does not refill canisters or reset parts. |
| **Evidence record** | One committed capture, note revision, testimony, or instrument report with provenance, room instance, arrangement/life, and factual limit | Record existence, player annotation, attributed interpretation, and present truth. A historical mark never becomes current automatically. |
-
| **Survivor** | One authored person, last confirmed transfer state, its source, and—once resolved—their actual location/state | Never cargo. Waiting, Prepared, In transfer, At abort refuge, and Sent are not interchangeable; only the closed ship airlock confirms Sent. |
+
| **Survivor** | One authored person, last confirmed transfer state and source, and—once resolved—their actual location/state | Never cargo. Waiting, Prepared, In transfer, At abort refuge, and Sent are not interchangeable. Sent commits only when this same survivor has completed arrival aboard and the required ship airlock is closed; confirmation provenance remains separate from world state. |
| **Population/transient hazard state** | Exact state needed to suspend a live expedition | Not durable clearance beyond its owning encounter rule. Later population may differ without replacing earned world work. |
Every transition names the identity it mutates, its precondition, the point at which it commits, and what an interruption preserves. A collectible changes from source to carried in one commit; it is never copied and then deleted later. Incremental oxygen transfer is the exception in granularity, not conservation: each committed increment moves gas between the same two object states.
@@ 42,7 42,7 @@
A lethal condition and a unique death-transaction identity are committed together. There is no saveable gap in which the astronaut is lethally dead but the transition does not exist.
1. **Seal the death instant.** Commit gas actually transferred or breathed, material already consumed, completed pickups/drops/installs and completed work checkpoints. Mark the current incomplete stage interrupted; do not complete it.
-
2. **Partition property once.** Snapshot the carried manifest by object identity. Move those same instances aboard with the astronaut. Leave installed, deposited, handed-over, and consumed objects in their actual states. Restore ordinary condition for the next expedition under the current rule; ship-side refilling remains a separate action/state.
+
2. **Partition property once.** Snapshot the astronaut-carried membership by object identity: every active rig part plus every inactive/loose cargo item, each once. Move those same instances aboard, preserving rig-versus-cargo substate. Leave station/ship-fixture installations, deposits, handovers, world-source objects, and consumed resources outside the return set in their actual states. For example, an active Sensor and Projector, an inactive loose Fork, and a carried partial canister return once each; a different Fork in a station fixture and scrap already consumed by a Cycler do not. Restore ordinary condition for the next expedition under the current rule; ship-side refilling remains separate.
3. **Hold the survivor boundary honestly.** A person already Sent remains aboard. With no transfer in progress, other survivor states remain under their own rules. If death occurs during transfer, preserve the last confirmed state and mark present location/outcome unconfirmed. The unresolved ordering rule must later choose one actual outcome before this branch can ship; persistence must not invent delivery, refuge, loss, or safety.
4. **Shift exactly once.** Advance the arrangement generation once. Preserve selected joins and their bound groups, stable room identities, completed mechanism/checkpoint states, and objects attached to their room/fixture identities. Recompute only the unbound arrangement under the eventual shift rules. Do not use a rescue or installed object as an unchosen joining exception.
5. **Reclassify knowledge.** Retain records and notes. Mark prior-life route and adjacency claims historical; keep completed work and join facts known. Reveal only what can currently be sensed from the ship/airlock or another valid instrument.
@@ 57,8 57,8 @@
| **1. Interrupted canister handover** | A carried canister is entering the equipment sleeve. Before the handover commit it remains carried. Any separately completed incremental gas transfer has already changed the two fill amounts. | Quit/load resumes the unfinished handover without completing it. Cancel, displacement, or death before commit leaves the canister carried, so death returns it. After commit it has one sleeve/recipient location, leaves the manifest, and does not return on death. |
| **2. Installed reusable part through a shift** | Fork Relay installation in a named fixture is complete; its current power may be transient. | Death returns other carried items, not this Fork. The room instance keeps the installed object through the shift even if its neighbours change. The journal may show “installed at [known room]” while the old walking route becomes historical; load neither clones nor retrieves it. |
| **3. Partly completed mechanism** | Bolt A is cut; Bolt B is halfway through its current stage. | Suspend/load resumes Bolt B at that unfinished phase. Withdrawal or death loses only Bolt B's unfinished stage; Bolt A remains cut. A later obstruction may block the next attempt but cannot restore Bolt A. |
-
| **4. Journal and history** | A committed still and note identify a room and route in arrangement 12. Quit and load occur before death. | Both remain current claims on resume because no shift occurred. After death creates arrangement 13, the still and note persist, route/adjacency claims become historical, and a known installed part or cut bolt remains a durable fact. No unseen route, translation, or corrected conclusion appears. |
-
| **5. Rescue near delivery** | The survivor is In transfer and the ship airlock has not closed. A quit suspends that exact state; it does not send them. | Loading after quit resumes In transfer. If the airlock closes before death, Sent persists. If death commits first, the transaction records last confirmed In transfer and an unconfirmed current outcome. It does not choose refuge, ship, loss, or safety; this branch is blocked from final implementation until the owner resolves ordering and allowed outcomes. |
+
| **4. Journal and history** | A committed still and note identify a room and route in arrangement 12. Quit and load occur before death. | Both retain their recorded time, place, source, and claim on resume; unchanged arrangement does not verify their interpretation or present truth. Any resumed live reading is separately observed. After death creates arrangement 13, the records persist, route/adjacency claims become historical, and a known installed part or cut bolt remains a durable fact. No unseen route, translation, or corrected conclusion appears. |
+
| **5. Rescue near delivery** | The named survivor is In transfer and the ship airlock has not closed. A quit suspends that exact state; it does not send them. | Loading after quit resumes In transfer. Sent commits only if that same survivor completes arrival aboard and the required airlock closure then confirms the aboard state; an empty closure or one with them outside does nothing. If death commits before that complete predicate, the transaction records last confirmed In transfer and an unconfirmed current outcome. It chooses no refuge, ship, loss, or safety; this branch remains blocked until the owner resolves ordering and allowed outcomes. |
