Stage 4 wrap-up: Ponero fee 10%/cap 600, live crackdown check, verification notes

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

CHANGELOG.md

@@ -6,7 +6,7 @@
 
 - 人脉网络新增"Web3 黑市"（前置：Web3 治理社区，1500）：黑市派系在链上的实体；放在终端 Web3 页的"黑市"子页里，需要黑市声望 ≥ 10，镇压期间下线。
 - 现货柜台：每周刷新一批违禁品（游戏已有的 32 种，低 / 中 / 高三档随声望 10 / 40 / 80 放开；件数 4 + 声望/40），价格 = 游戏基础价 × 1.3，只收 PSC / CRT / CRA / Ponero，不收 CRC。付出去的币连同按比例的污点留在卖家那边，货放进储藏区，不带赃物标签。
-- Ponero 兑换处（声望 ≥ 30）：任意币兑入 Ponero 时这部分价值的污点留在原地，兑入、兑出各收 8%，每天额度 1000 信用点；Ponero 价 = PSC × 0.5。从 Ponero 兑出的币在出金审查里按"刚出混币器"加重。
+- Ponero 兑换处（声望 ≥ 30）：任意币兑入 Ponero 时这部分价值的污点留在原地，兑入、兑出各收 10%，每天额度 600 信用点（收尾核算后由 8% / 1000 调整）；Ponero 价 = PSC × 0.5。从 Ponero 兑出的币在出金审查里按"刚出混币器"加重。
 - 游戏内验证：声望 75 时上架 5 种；用 CRT 买一把左轮 312 点，余额 3000 → 2688，污点 2000 → 1875（按付款占钱包的比例）；5 PSC 兑入得 9.2 Ponero（500 × 0.92 / 50），当天额度剩 500。
 - 订单：黑市页新增"订单"和"我的订单与情报"。目录每周刷新，4 个卖家（成交数、好评率公开，15% 是骗子，多半是新号，也有刷过好评的老号），价格 = 基础价 × 0.85。托管多付 5%，收货后放款，卖家跑路时退款（污点与成本一并还回，不能借退款洗钱）；提前放款再打九折，只有成交 ≥ 30 的卖家接受，骗子拿钱就跑。
 - 配送：送货上门 3 天，到货后开店时快递员作为顾客上门，对话结束把货放进储藏区；死投点 2 天，到货后晚上去垃圾场，货进外出背包。上门被截获 8%，死投 3%，死投另有 12% 被别人先挖走；镇压期间到期顺延、截获 +15%。
@@ -25,6 +25,10 @@
 - 出售的风险：假卡有 50% 被买家看穿退货，好评 −10（好评影响成交速度，每笔成交 +1）；平台跑路时上架的货和未放款的货款都没了；蜜罐期间成交的货款和近期买家落网会被追查记罪证；镇压期间平台不成交。"我的订单与情报"页多出"我的上架"，可以撤下。
 - 游戏内验证：货架显示显卡、模组、能量电池；买一张卡后出售页列出储藏区里的货，上架（标价 400，上架费 20），过夜成交（货款 368），3 天后到账（CRT 2804 → 3172，这次随机没带污点）。没有在游戏里验证：假卡退货、跑路时的出售损失（只有单元测试）。
 
+- 收尾核算（`research/sim/bm_econ.py`，按 Tuning 常量算期望）：Ponero 来回 15.4%，与混币器洗掉 80% 污点的 15–18% 相当，但当天完成、清得彻底、不受制裁，所以手续费 8% → 10%（来回 19%），日额度 1000 → 600（日额度按钱包污点占比估，约够清掉稳态的污点流入，后期会成为瓶颈）；出售的最优倍率取决于玩家的资金机会成本：每天 1% 时 ×1.8，2–3% 时 ×1.5，倍率不是越高越好；订单：托管期望净 +0.02、提前放款 +0.07（现货 −0.30），所以订单是便宜进货，不是赚钱路线；订单进货再挂高价出售的套利每件约 +0.13–0.18（20 天一轮，资金占用），量小，暂不限制上架数。
+- 收尾验证（游戏内）：黑市每周刷新（第 8 天自动刷出 5 种现货、8 种订单目录）；蜜罐追查到期记罪证 300；假卡上架 8 件，有一件被看穿退货（好评下降）；其余成交后到账，其中一笔带污点；受控交付选"签收。"记罪证 136、货被查封；镇压期间黑市页显示下线（改成实时读取游戏事件，原来要等过夜才更新）。
+- 没有在游戏里验证：平台跑路时订单和出售一起清零（单元测试覆盖）、死投点已删除。
+
 ### 第三阶段：数值调优（进行中）
 
 - 混币器每轮手续费 6% → 4%；用币付款的顾客概率提到上层 30%、黑市 50%、革命派 50%、下层 25%，并多付 12%（溢价只加在币数上，污点仍按货值算）。

README.md

@@ -1,6 +1,6 @@
 # Probably Decentralized
 
-A mod for *Probably Stolen*: crypto mining, a fictional coin market, stablecoins, laundering and its risks, built on the game's own power, events and law systems. Work in progress; nothing is released yet.
+A mod for *Probably Stolen*: crypto mining, a fictional coin market, stablecoins, laundering and its risks, a Web3 black market, built on the game's own power, events and law systems. Work in progress; nothing is released yet.
 
 All coins, exchanges and events are fictional and have no real-world value.
 
@@ -9,7 +9,7 @@ All coins, exchanges and events are fictional and have no real-world value.
 | Path | Content |
 |---|---|
 | `src/Decentralized.Domain` | Pure logic (assets and ledger, AMM pairs, market, mining, graphics card tiers, appearance, labels and serials). No game or Unity references. |
-| `src/Decentralized` | The mod: items (trading terminal, mining rig, graphics cards, appraisal guide), used-card dealer, magnifier inspection view with the label bar, nightly settlement, terminal (bank, Poinbase, Web3), news. Builds into `<game>/Mods/ProbablyDecentralized` (`dotnet build src/Decentralized -p:GameDir=...`). |
+| `src/Decentralized` | The mod: items (trading terminal, mining rig, graphics cards, appraisal guide), used-card dealer, magnifier inspection view with the label bar, nightly settlement, terminal (bank, Poinbase, Web3 with trading, mining, mixer and the black market), black-market shelves, orders, courier and selling, Ponero desk, Web3 handbook, news. Builds into `<game>/Mods/ProbablyDecentralized` (`dotnet build src/Decentralized -p:GameDir=...`). |
 | `tests/Decentralized.Domain.Tests` | Console test runner: `dotnet run --project tests/Decentralized.Domain.Tests` |
 | `art/sprites.py`, `art/big.py`, `art/big_cases.py` | Generate the item sprites, the large inspection art and its overlays, and the terminal icons into `src/Decentralized/ModFiles/Textures/Items`. |
 
@@ -19,4 +19,4 @@ MIT, see `LICENSE`.
 
 ---
 
-《Probably Stolen》的 mod：挖矿、虚构币市场、稳定币、洗钱及其风险，接入游戏原有的电力、事件和执法系统。开发中，尚未发布。所有币种、交易所和事件均为虚构，不具有任何现实价值。
+《Probably Stolen》的 mod：挖矿、虚构币市场、稳定币、洗钱及其风险、Web3 黑市，接入游戏原有的电力、事件和执法系统。开发中，尚未发布。所有币种、交易所和事件均为虚构，不具有任何现实价值。

src/Decentralized.Domain/Tuning.cs

@@ -88,7 +88,7 @@ namespace Decentralized.Domain
         public const double BmStockPerRep = 40, BmPremium = 0.30;
         /// <summary>Ponero 兑换处：开放所需黑市声望、每次兑入 / 兑出的手续费、每天可兑换的额度（信用点）、对 PSC 的价格比。</summary>
         public const int PoneroOpenRep = 30;
-        public const double PoneroFee = 0.08, PoneroDailyCap = 1000, PoneroPscRatio = 0.5;
+        public const double PoneroFee = 0.10, PoneroDailyCap = 600, PoneroPscRatio = 0.5;
         /// <summary>黑市订单：订单价相对游戏基础价的折扣、托管费、提前放款再折扣、提前放款所需卖家成交数、上门的天数、
         /// 上门被截获的概率（镇压期间再加）、骗子卖家占比、每晚平台跑路基础概率与每万信用点托管资金加的概率（封顶）、跑路后关闭的天数。</summary>
         public const double BmOrderDiscount = 0.15, BmEscrowFee = 0.05, BmAdvanceDiscount = 0.10, BmInterceptDoor = 0.08, BmInterceptCrackdown = 0.15;

src/Decentralized/BlackDelivery.cs

@@ -81,6 +81,7 @@ namespace Decentralized
             if (force) d.Black.RefreshedDay = -999;
             if (!d.Black.Refresh(day, rep, d.Rng, Value)) return false;
             d.Black.RefreshOrders(day, rep, d.Rng, Value);
+            Log.Info($"黑市刷新（第 {day} 天）：现货 {d.Black.Offers.Count} 种，订单目录 {d.Black.Catalog.Count} 种，高科技 {d.Black.Offers.Count(o => o.Kind == GoodKind.Tech)}，显卡 {d.Black.Offers.Count(o => o.Kind == GoodKind.Gpu)}");
             return true;
         }
 
@@ -119,6 +120,7 @@ namespace Decentralized
                         {
                             int amount = (int)Math.Min(Tuning.CrimeEventCap, e.Amount);
                             ps.secData.CommitCrime(e.Order.Item != null && e.Order.Item.StartsWith("gpu:") ? "FENCING" : "CONTRABAND_TRAFFICKING", amount);
+                            Log.Info($"黑市追查：记罪证 {amount}（{e.Order.Seller}）");
                             ps.AddNightLog(L.T("nightlog.bm.trap." + e.Order.Seller, ItemName(e.Order.Item), amount), "cc7755");
                             break;
                         }
@@ -173,11 +175,12 @@ namespace Decentralized
                 {
                     int amount = (int)Math.Min(Tuning.CrimeEventCap, Session.Data.Black.Sign(trap, true));
                     PlayerStore.Instance.secData.CommitCrime(trap.Item.StartsWith("gpu:") ? "FENCING" : "CONTRABAND_TRAFFICKING", amount);
+                    Log.Info($"受控交付：签收，记罪证 {amount}，货被查封");
                     DeliverDoor(); finish();
                 }));
                 var refuse = new Dialogue();
                 refuse.SetText("PLAYER", L.T("courier.refuse.say"));
-                refuse.NextDialogue().SetText(c.displayName, L.T("courier.refused")).SetEndAction(() => Log.Guard("受控交付拒签", () => { Session.Data.Black.Sign(trap, false); DeliverDoor(); finish(); }));
+                refuse.NextDialogue().SetText(c.displayName, L.T("courier.refused")).SetEndAction(() => Log.Guard("受控交付拒签", () => { Session.Data.Black.Sign(trap, false); Log.Info("受控交付：拒签"); DeliverDoor(); finish(); }));
                 c.mainDialogue.SetText(c.displayName, L.T("courier.odd1")).NextDialogue().SetText(c.displayName, L.T("courier.odd2"))
                     .AddChoice(DirectoryMaster.Item("yes"), L.T("courier.sign"), "", sign, null)
                     .AddChoice(DirectoryMaster.Item("cancel"), L.T("courier.refuse"), "", refuse, null);

src/Decentralized/CoinCustomers.cs

@@ -58,6 +58,21 @@ namespace Decentralized
                 BlackDelivery.Restock(d, StoreStation.GetDayCounter(), true);
                 Log.Info($"黑市：声望 {StoreReputation.GetBMReputation()}，上架 {d.Black.Offers.Count} 种：{string.Join(", ", d.Black.Offers.Select(o => o.Item + "×" + o.Qty + "@" + o.Price))}，解锁 {Unlock.BlackUnlocked}");
             }));
+            ModHelper.AddDebugFunction(ModInfo.Id, ModInfo.Name, "Black market events (test)", () => Log.Guard("黑市事件（测试）", () =>
+            {
+                var d = Session.Data;
+                int day = StoreStation.GetDayCounter();
+                d.Black.Traps.Add(new BmTrap { Day = day, Amount = 300, Why = "honeypot", Item = "c4" });
+                var w = d.Hot;
+                for (int i = 0; i < 8; i++) d.Black.List("gpu:RTX70", "RTX70", "RTX60", 60, 500, 0.6, w, Assets.CRT, day - 1, Session.Price);
+                var l = d.Black.Catalog.FirstOrDefault();
+                if (l != null)
+                {
+                    var o = d.Black.Place(l, PayMode.Escrow, w, Assets.CRT, day, Session.Price);
+                    if (o != null) { o.State = OrderState.Ready; o.Controlled = true; }
+                }
+                Log.Info($"黑市事件（测试）：追查 300 今晚到期，假卡上架 8 件，受控订单 {d.Black.Orders.Count(x => x.Controlled)} 个");
+            }));
             ModHelper.AddDebugFunction(ModInfo.Id, ModInfo.Name, "Courier (test)", () => Log.Guard("黑市快递（测试）", () =>
             {
                 foreach (var o in Session.Data.Black.Orders.Where(x => x.State == OrderState.Pending)) { o.State = OrderState.Ready; }

src/Decentralized/ModFiles/Localization/en.csv

@@ -270,7 +270,7 @@ black.kind.Contraband.3,Contraband (high)
 black.kind.Tech,High-tech (markup)
 nightlog.bm.ready,"Black market: {0} arrived; a courier will come by once you open."
 item.web3guide.name,Web3 Handbook
-item.web3guide.desc,"Bank: depositing turns credits into CRC; withdrawing turns CRC back into credits and goes through compliance screening. Trading: buys are paid in the quote coin, sells in the traded coin. Mixer: pick a coin, amount and rounds; each round takes a fee and lowers taint, rounds equal days of waiting, and the coins come back to the same address; the more you deposit, the worse the cleaning. Black market: coin only, no CRC, 30% above normal channels, with extra markup on high-tech goods and GPUs; the coin you pay leaves its share of taint with the seller and the goods carry no stolen tag; GPUs may be fake, inspect them yourself. Orders are cheaper than spot but take days and may be intercepted; escrow costs 5%, is released on delivery and refunded if the seller runs; advance release takes another 10% off, but a scammer keeps the money and only sellers with 30+ trades accept; the platform itself can rug, be taken over by enforcement, or a seller can be arrested, after which your orders get traced and crime logged; forum rumors can be warnings. An intercepted parcel sometimes turns into enforcement at your door: signing logs the crime on the spot and seizes the goods, refusing only costs the payment. Selling: on the black market's Sell page, list contraband, high-tech goods and GPUs from storage at 0.6x to 1.8x the reference price. The higher the multiplier, the slower the sale (below 0.9x about a day, 1.0x about two, 1.8x about fourteen), and the likelier and larger the taint on the payout; 5% listing fee, 8% commission, payout held 3 days before reaching your wallet; a fake card may be spotted and returned, hurting your rating; if the platform rugs, listed goods and unreleased payouts are gone. Ponero desk: Ponero is a privacy coin and swapping in wipes the taint on that value; 8% fee each way with a daily limit; coin swapped out of Ponero has no origin and cash-out screening gets stricter."
+item.web3guide.desc,"Bank: depositing turns credits into CRC; withdrawing turns CRC back into credits and goes through compliance screening. Trading: buys are paid in the quote coin, sells in the traded coin. Mixer: pick a coin, amount and rounds; each round takes a fee and lowers taint, rounds equal days of waiting, and the coins come back to the same address; the more you deposit, the worse the cleaning. Black market: coin only, no CRC, 30% above normal channels, with extra markup on high-tech goods and GPUs; the coin you pay leaves its share of taint with the seller and the goods carry no stolen tag; GPUs may be fake, inspect them yourself. Orders are cheaper than spot but take days and may be intercepted; escrow costs 5%, is released on delivery and refunded if the seller runs; advance release takes another 10% off, but a scammer keeps the money and only sellers with 30+ trades accept; the platform itself can rug, be taken over by enforcement, or a seller can be arrested, after which your orders get traced and crime logged; forum rumors can be warnings. An intercepted parcel sometimes turns into enforcement at your door: signing logs the crime on the spot and seizes the goods, refusing only costs the payment. Selling: on the black market's Sell page, list contraband, high-tech goods and GPUs from storage at 0.6x to 1.8x the reference price. The higher the multiplier, the slower the sale (below 0.9x about a day, 1.0x about two, 1.8x about fourteen), and the likelier and larger the taint on the payout; 5% listing fee, 8% commission, payout held 3 days before reaching your wallet; a fake card may be spotted and returned, hurting your rating; if the platform rugs, listed goods and unreleased payouts are gone. Ponero desk: Ponero is a privacy coin and swapping in wipes the taint on that value; 10% fee each way with a daily limit; coin swapped out of Ponero has no origin and cash-out screening gets stricter."
 courier.odd1,...Package is here.
 courier.odd2,"(His hand stays in his pocket.) Sign here."
 courier.sign,Sign

src/Decentralized/ModFiles/Localization/zh.csv

@@ -269,7 +269,7 @@ black.kind.Contraband.3,违禁品（高）
 black.kind.Tech,高科技物品（加价）
 nightlog.bm.ready,"黑市：{0} 到货，开店后会有快递员上门。"
 item.web3guide.name,Web3 手册
-item.web3guide.desc,"银行：存入把信用点换成 CRC；提取把 CRC 换回信用点，提取要过合规审查。交易：买入按计价币的数量支付，卖出按所交易币的数量卖出。混币器：选币种、填数量和轮数，每轮扣手续费并降低污点，轮数即等待天数，到期提回同一个地址；存入越多，清洗越差。黑市：只收币，不收 CRC，价格比正常渠道贵 30%，高科技物品和显卡另有加价；付出去的币带着按比例的污点留在卖家那边，货不带赃物标签；显卡不保证真假，自己鉴定。订单比现货便宜，要等几天，路上可能被截获；托管多付 5% 托管费，收货后放款，卖家跑路时退款；提前放款再打九折，卖家若是骗子钱就没了，只有成交 30 单以上的卖家接受；平台自己也可能跑路，也可能被执法接管，或者卖家落网，之后你的订单会被追查、记罪证；论坛上的传闻可以当预兆。被截获的包裹有时会变成执法人员上门：签收当场记罪证并查封，拒签只损失货款。出售：在黑市的出售页把储藏区里的违禁品、高科技物品和显卡上架，标价是参考价的 0.6 到 1.8 倍。倍率越高成交越慢（0.9 以下约一天，1.0 约两天，1.8 约十四天），货款带污点的可能性和比例也越高；上架收 5% 上架费，成交扣 8% 抽成，货款托管 3 天后进钱包；卖假卡可能被买家看穿而退货，拉低好评；平台跑路时上架的货和未放款的货款都没了。Ponero 兑换处：Ponero 是隐私币，兑入时这部分价值的污点被清除；兑入、兑出各收 8% 手续费，每天有额度；从 Ponero 兑出的币来路不明，出金审查会加重。"
+item.web3guide.desc,"银行：存入把信用点换成 CRC；提取把 CRC 换回信用点，提取要过合规审查。交易：买入按计价币的数量支付，卖出按所交易币的数量卖出。混币器：选币种、填数量和轮数，每轮扣手续费并降低污点，轮数即等待天数，到期提回同一个地址；存入越多，清洗越差。黑市：只收币，不收 CRC，价格比正常渠道贵 30%，高科技物品和显卡另有加价；付出去的币带着按比例的污点留在卖家那边，货不带赃物标签；显卡不保证真假，自己鉴定。订单比现货便宜，要等几天，路上可能被截获；托管多付 5% 托管费，收货后放款，卖家跑路时退款；提前放款再打九折，卖家若是骗子钱就没了，只有成交 30 单以上的卖家接受；平台自己也可能跑路，也可能被执法接管，或者卖家落网，之后你的订单会被追查、记罪证；论坛上的传闻可以当预兆。被截获的包裹有时会变成执法人员上门：签收当场记罪证并查封，拒签只损失货款。出售：在黑市的出售页把储藏区里的违禁品、高科技物品和显卡上架，标价是参考价的 0.6 到 1.8 倍。倍率越高成交越慢（0.9 以下约一天，1.0 约两天，1.8 约十四天），货款带污点的可能性和比例也越高；上架收 5% 上架费，成交扣 8% 抽成，货款托管 3 天后进钱包；卖假卡可能被买家看穿而退货，拉低好评；平台跑路时上架的货和未放款的货款都没了。Ponero 兑换处：Ponero 是隐私币，兑入时这部分价值的污点被清除；兑入、兑出各收 10% 手续费，每天有额度；从 Ponero 兑出的币来路不明，出金审查会加重。"
 courier.odd1,……东西到了。
 courier.odd2,"（他的手一直放在口袋里）在这儿签个字。"
 courier.sign,签收

src/Decentralized/TerminalWindow.cs

@@ -297,7 +297,7 @@ namespace Decentralized
             int rep = StoreReputation.GetBMReputation();
             int day = StoreStation.GetDayCounter();
             var d = Session.Data;
-            if (d.ActiveEvents.Contains(MarketEvent.Crackdown)) { b.AddLabel(L.T("black.offline")); return; }
+            if (Night.ActiveEvents().Contains(MarketEvent.Crackdown)) { b.AddLabel(L.T("black.offline")); return; }
             if (!BlackMarket.Open(rep)) { b.AddLabel(L.T("black.closed", Tuning.BmOpenRep, rep)); return; }
             bool desk = BlackMarket.DeskOpen(rep);
             b.BeginRow();