Connect Harass & Withdraw to the battle preview

The independent Ecaz Treachery variant now supports Harass in either physical battle-card slot. A category-null Prescience answer keeps its identity private without erasing the selected card. Exact undialed normal/elite counters return before battle losses; opposing successful Traitors cancel withdrawal, ordinary leader deaths still resolve, and the card is discarded exactly once. Controls, all four AI profiles and saved continuation share the same physical quote. Existing Planetologist inspection and literal Truthtrance slot promises retain their meanings.

Unique Basic/Advanced physical allocations are supported. Ambiguous allocations, co-present Ecaz allied armies on either side, Richese card-family configurations and other optional modules remain gated before sealing from public/own context. The pending Stone Burner timing question is not assumed answered. Reveal-before-explosion order and mandatory disposal on an own-Traitor win are explicit source-timing/specificity inferences, consistent with existing Planetologist precedence. Reinforcements and full variant/public mode acceptance remain unfinished.

Independent rules/privacy/persistence review fixed asymmetric selector legality, misleading blocked-card guidance, invalid restored battle pairs, native-only inspection bypass and unsupported allied-army admission. Ixian fixtures preserve all seven physical cyborgs. The first broad run caught a semantic-status lint error in the blocked guidance; replacing the paragraph role with an output element fixed it. A subsequent broad run passed 4,775 of 4,776 tests and exposed an old UI assertion requiring category-null slots to be disabled. The updated regression verifies enabled category-null selectors exclude ordinary held cards, while exact leader/dial locks and submitted values remain bound; focused controls pass 14/14. No game source changed after the eight samples or browser replay. Types, lint, 4776 offline tests, build and 43 HTTP tests pass with unchanged source. Authenticated SQLite cases verify sealed private restoration and competing duplicate traitor actions with one physical resolution.

Eight fixed genuine six-seat games finish: basic/Easy: 1803 actions, 0 Harass plans, 0 withdrawals, 48 periodic restores; basic/Medium: 225 actions, 0 Harass plans, 0 withdrawals, 6 periodic restores; basic/Hard: 2184 actions, 1 Harass plans, 1 withdrawals, 59 periodic restores; basic/Brutal: 2073 actions, 1 Harass plans, 1 withdrawals, 56 periodic restores; advanced/Easy: 2057 actions, 1 Harass plans, 1 withdrawals, 55 periodic restores; advanced/Medium: 532 actions, 0 Harass plans, 0 withdrawals, 14 periodic restores; advanced/Hard: 538 actions, 0 Harass plans, 0 withdrawals, 14 periodic restores; advanced/Brutal: 544 actions, 0 Harass plans, 0 withdrawals, 14 periodic restores. All 218 game-source files match their source-stable runs; exact card/traitor/force custody and periodic/terminal private views are checked. Browser controls verify the full card, category None, Defense-first legality, actual sealing/reveal, four returned forces, ordinary leader death, disposal and refresh. A separate final-source replay verifies the conserved browser fixture and opposing continuation, including Face Dancer replacement. This is bounded playability evidence, not full compliance or AI calibration.

All 936 opening games and their original seat/recovery records remain unchanged (970 after checks); all 937 present immediately before checks are also preserved. Database integrity and foreign keys pass. The healthy server was reused after the power failure without restart, reset or recurring automation.

Verified source tree: be193613c455c5b76b49800fe3a7400504ea879af34c59621ade3d44f0fe019d

docs/CURRENT_STATUS.md

@@ -6,38 +6,28 @@ gated.** Prototypes do not open completion or publication gates.
 
 ## Current checkpoint and work
 
-Previous verified checkpoint: `9ca17a6`, [Fremen/Ecaz final-turn victory](ECAZ_VICTORY_RULES.md#fremen-final-turn-runtime-follow-up)
-and [deferred shipment repair](DEFERRED_SHIPMENT_ARRIVAL.md). Types, lint,
-**4,716 offline tests**, build and **43 HTTP tests** passed. All 835 opening games
-and the 869 present after the outage, including their seat/recovery records,
-were preserved (902 after verification). Three source-stable samples finish,
-including the exact failed shipment resumption; full scope remains unfinished.
-Detailed earlier capabilities and evidence are linked below and retained in the
-[implementation history](IMPLEMENTATION_STATUS.md).
+Previous verified checkpoint: `c04cb93`, [Recruits](RECRUITS_RUNTIME.md).
+Types, lint, **4,743 offline tests**, build and **43 HTTP tests** passed.
+Eight fixed Basic/Advanced six-seat samples finished in 7,995 actions with no
+rejected candidates and three actual Recruits plays. All opening games and
+seat/recovery records were preserved, with 936 rooms after verification.
+Earlier evidence remains in the [implementation history](IMPLEMENTATION_STATUS.md).
 
-Current prototype: [Recruits](RECRUITS_RUNTIME.md) connects the independent complete
-three-card inventory before genuine Basic/Advanced faction setup, owned card
-play/discard, public current revival rates, existing CHOAM/Tleilaxu decisions,
-four AI profiles and saved continuation. Exact free usage and physical custody
-are retained. Prior-free activation is supported; prior-paid or unknown accounting,
-later grants, pending repricing, same-turn replay and other optional modules stay
-gated. Reinforcements and Harass & Withdraw are present but their effects remain
-unfinished. Independent-cap precedence is explicitly labeled as an inference.
-
-Independent review's 37-case union and four authenticated recovery cases pass.
-Eight fixed Basic/Advanced six-seat samples finish in 7,995 actions with no
-rejected candidates and three actual Recruits plays. Exact custody, 212 periodic
-all-seat JSON restores and terminal private views pass. A separate conserved
-browser fixture verifies inspection, play/discard, public rates, four free returns
-and refresh. Final broad-check totals, source fingerprints and Git delivery are
-recorded with the checkpoint; these are bounded playability results.
+Current prototype: [Harass & Withdraw](HARASS_WITHDRAW_RUNTIME.md) connects either
+battle-card slot, private category inspections, exact undialed normal/elite
+returns, opponent-Traitor cancellation, mandatory disposal, controls and all
+four AI profiles. Physical allocation must be unique. Richese card combinations
+and additional optional modules stay gated. Withdrawal before explosion and
+card-specific discard precedence are explicitly labeled inferences. The Stone
+Burner timing question is pending; no user answer is assumed. Reinforcements
+remains unfinished. This does not open variant, mode or publication gates.
 
 After the latest reported power failure, the existing server responds normally.
-All **902 rooms**, **1,888 seats** and original recovery/entry/handover records
-match the opening backup; SQLite integrity and foreign-key checks pass. No server
-restart, database reset or recurring automation is needed. Final review, sample and
-browser evidence, broad verification and Git delivery are recorded with this
-checkpoint before handoff. Public mode and publication gates remain closed.
+All **936 rooms**, **1,959 seats** and original recovery/entry/handover records
+match the opening backup; SQLite integrity and foreign-key checks pass. Browser
+refresh restores the existing test seat. No restart, database reset or recurring
+automation was needed. Current checkpoint verification and delivery are recorded
+with the final source-bound report and Git message.
 
 ## Authoritative navigation
 
@@ -68,7 +58,7 @@ These links define bounded working behavior, not complete module certification.
 | Discoveries | [Prototype](DISCOVERY_PROTOTYPE.md): genuine setup, Great Maker, seven cards/eight tokens, inspection and stash rewards, nested sites, signed later free entry, carried Ornithopter, sole Cistern, bounded Jacurutu income, Testing Station and Shrine. Orgiz and contested/mixed cases remain pending. |
 | Nexus/Homeworlds | [Decision index](RULE_DECISIONS.md) links each integrated faction family, native/borrowed effects, physical custody, private choices, payments and transport. [CHOAM Collection trade](NEXUS_CHOAM_SECRET_ALLY.md) and [Emperor extra revival](NEXUS_EMPEROR_SECRET_ALLY_RUNTIME.md) are connected; CHOAM inspection and Emperor purchase remain pending. A source audit or helper alone is not a completed effect. |
 | Truthtrance | [Spice facts](TRUTHTRANCE_SPICE_FACTS.md), [card counts](TRUTHTRANCE_CARD_COUNT.md), [hand inventory](TRUTHTRANCE_HAND_INVENTORY.md), [recorded knowledge](TRUTHTRANCE_KNOWLEDGE.md), and [Basic/no-Guild Advanced reserve-shipment promises](TRUTHTRANCE_SHIPMENT_PROMISES.md) use authoritative private state. Earlier readiness audits do not supersede these follow-ups. |
-| Other cards | [Sapho runtime](JUICE_OF_SAPHO_RUNTIME.md) includes first among remaining unstarted movement turns after Advanced Guild has finished. [Recruits](RECRUITS_RUNTIME.md) connects clean Revival play in its independent three-card preview. Richese card contracts and the checklist identify other connected effects and explicit gaps. |
+| Other cards | [Sapho runtime](JUICE_OF_SAPHO_RUNTIME.md) includes first among remaining unstarted movement turns after Advanced Guild has finished. [Recruits](RECRUITS_RUNTIME.md) connects clean Revival play; [Harass & Withdraw](HARASS_WITHDRAW_RUNTIME.md) connects the bounded battle return in the same independent three-card preview. Richese card contracts and the checklist identify other connected effects and explicit gaps. |
 | Multiplayer | Saved rooms/seats, [recovery](../README.md#saved-seats-and-reconnecting), uncertain-request retry, [own-seat AI](AUTOPILOT.md), and [voluntary seat handover](SEAT_HANDOVER.md) have connected controls and recovery evidence. |
 
 ## Remaining readiness

docs/ECAZ_TREACHERY_RULES.md

@@ -83,3 +83,10 @@ A persistent battle-resolution continuation should preserve withdrawal intent th
 - Harass & Withdraw: winner and loser, zero dial, Traitor cancellation, returned reserves versus Face Dancer replacement, independent ally groups and prohibited own-Homeworld use.
 
 No runtime tests were added or claimed for this source task. At this source audit’s initial snapshot the repository had no factory entries for these names. The subsequent isolated definitions and inspector guides in `game/ecaz-cards.ts` are now tracked in `CARD_INVENTORY.md`; they do not activate the variant. Existing revival and battle helpers remain integration foundations, not evidence of complete card effects.
+
+## 14 September runtime follow-up
+
+[Recruits](RECRUITS_RUNTIME.md) and [Harass & Withdraw](HARASS_WITHDRAW_RUNTIME.md)
+now have connected development prototypes. The linked contracts supersede the
+historical runtime-absence statements above within their explicit boundaries.
+Reinforcements and complete combined-module acceptance remain unfinished.

docs/HARASS_WITHDRAW_RUNTIME.md

@@ -0,0 +1,107 @@
+# Harass & Withdraw development prototype
+
+Updated 14 September 2026. This connects the physical card to battle plans,
+private inspections, force returns, controls, AI and saved continuation. It does
+not complete the independent three-card variant or open public mode gates.
+
+## Authority and interpretation
+
+The [Ecaz card audit](ECAZ_TREACHERY_RULES.md) records the inspected physical face,
+designer walkthrough and publisher rules. The [GF9 Ecaz & Moritani
+rulebook](https://www.gf9games.com/dune/wp-content/uploads/EcazMoritani-Rulebook-LOWRES.pdf),
+printed pp. 11 and 16, establishes the slot/category distinction, mandatory
+after-use disposal and the restriction to the card user's undialed forces.
+The [designer walkthrough at 9:11](https://www.youtube.com/watch?v=iF5E3-LOfhY&t=551s)
+and [physical close-up at 4:28](https://www.youtube.com/watch?v=P9ZTV1uZqsM&t=268s)
+establish reveal timing, opponent-Traitor cancellation, ordinary leader death,
+Face Dancer protection for returned forces and the own-Homeworld prohibition.
+
+Two implementation inferences are explicit:
+
+- Withdrawal precedes weapon/explosion losses because it acts during wheel
+  reveal. Execution waits atomically for Traitor declarations so a successful
+  opposing call cancels the return without reversing a previous resource change.
+  No retrieved publisher FAQ directly answers the explosion combination.
+- Discard the card after use even when its owner wins through a Traitor call.
+  The later card-specific instruction overrides ordinary winner retention,
+  using the same recorded precedence as [Planetologist](PLANETOLOGIST_RULES.md#mandatory-discard).
+  This is a specificity inference, not a dedicated Harass FAQ.
+
+Planetologist's existing inspection answers remain unchanged. Ecaz's explicit
+instruction to report no weapon/defense is not silently extended to other
+slot substitutions.
+
+## Connected behavior
+
+Use the existing independent Ecaz card development setup. All three cards enter
+the physical deck before genuine Basic or Advanced setup; selecting Ecaz alone
+does not enable this variant. The owner may place Harass in either card slot.
+It supplies no weapon attack or defense, cannot occupy both slots, and cannot
+supply the actual opposite category needed by Chemistry or Weirding Way's
+alternate role. Ordinary leader and Voice requirements remain in force.
+
+Atreides receives a category-null answer without learning the physical card's
+identity. The owner can retain a slot-only card after that answer. The sealed
+plan still contains its exact ID. Complete-plan inspection reveals the actual
+physical plan; Truthtrance's existing literal slot-occupancy promises keep their
+meaning. An empty-category answer is not a promise that the physical slot is empty.
+
+The shared physical quote derives dialed counters from `casualtyOptions`, then
+returns the undialed normal and elite counters to their owner's reserves. The
+leader resolves normally. An opponent's successful Traitor call, including mutual
+calls, cancels withdrawal. Returned reserves are outside subsequent board losses
+and Face Dancer replacement. Harass is discarded once and excluded from ordinary
+winner retention and Moritani ally retention.
+
+Both selectors enforce the complete pair in either selection order. The private
+guide shows the exact return and a reason for an unsupported choice. All four AI
+profiles use the same physical quote and category-aware inspection comparison;
+the card adds no fictitious weapon or defense value. Stronger profiles value
+saved forces when expecting defeat and discourage use when expecting to win.
+This is a legal strategy path, not strength calibration.
+
+## Current boundaries
+
+- Basic and Advanced physical allocations must identify one normal/elite
+  commitment and one return allocation among sectors. Zero/all returns and
+  unique typed allocations are supported. Ambiguous allocations reject before
+  sealing; explicit private allocation controls remain unfinished.
+- Additional optional modules remain gated, including Homeworlds, Nexus,
+  Leader Skills, Tech Tokens, Stronghold Cards and Discoveries. This includes
+  the printed own-Homeworld prohibition without claiming other Homeworld
+  battles are already implemented for this card.
+- Richese card-family configurations remain gated because Stone Burner may
+  compare original or post-withdrawal undialed forces, which can reverse the
+  winner. A user question has been sent; no answer is assumed. The guard uses
+  public configuration, never Stone Burner's hidden custody. CHOAM without
+  Richese remains eligible. This is a development boundary, not a printed ban.
+- Co-present reciprocal Ecaz allied armies on either side reject before
+  sealing; other faction integration gates remain in force. This prototype does not settle Ecaz's undialed allied support allocation.
+- Reinforcements remains unavailable pending its separate cost and outcome
+  accounting. Neither slot recognition nor card text proves its effect complete.
+
+## Verification and preservation
+
+Focused rules, controls, AI and authenticated recovery suites record the exact
+supported paths. Fixtures explicitly distinguish genuine variant setup from
+later conserved battle staging. Independent review precedes final complete-game
+samples and browser checks. Final commands and source fingerprints are retained
+in the private checkpoint report and Git message; a sample does not certify
+every faction or expansion combination.
+
+The opening baseline contains 936 rooms and 1,959 seats. Every room and original
+seat/recovery/entry/handover record survived the reported outage unchanged;
+SQLite integrity and foreign-key checks passed. Browser refresh restored the
+existing test seat. The server was reused without a reset or scheduled restart.
+
+The isolated browser room used a genuine three-seat Emperor/Atreides/Tleilaxu
+setup, followed by an explicitly conserved battle fixture. Actual controls
+verified full-card inspection, the category-None answer, Defense-first selection
+without a duplicate Harass or alternate Chemistry weapon, a one-force plan,
+public reveal and the owner’s traitor decline. Four forces returned; one went to
+the Tanks and the leader died. Opposing decisions completed through the engine,
+including a genuine Face Dancer replacement of the other army. Refresh restored
+the collection-phase state, exact private views and the single discarded Harass.
+The private script’s first comparison failed only because its expected version
+omitted the HTTP layer’s increment; the preserved failure was corrected without
+changing production code or overwriting a game.

docs/IMPLEMENTATION_STATUS.md

@@ -1,5 +1,23 @@
 # Dune implementation status
 
+## 14 September 2026 — Harass & Withdraw battle prototype
+
+[Harass & Withdraw](HARASS_WITHDRAW_RUNTIME.md) now connects either physical card
+slot, category-aware private inspections, unique typed undialed returns before
+battle losses, successful opponent-Traitor cancellation and mandatory disposal.
+Both selectors, all four AI profiles and saved continuation use the shared
+physical quote. Existing Planetologist inspection and literal Truthtrance slot
+promises remain unchanged. Richese/Stone Burner timing, ambiguous allocations
+and optional-module combinations remain gated; public starts stay closed.
+
+Focused rules, controls, bot and authenticated recovery evidence is paired with
+independent review. Final complete-game samples, browser checks, preservation,
+required broad checks and Git delivery are recorded in the source-bound checkpoint
+report and commit message. This is a connected prototype, not full rules certification.
+All 936 opening games and 1,959 seats survived the reported outage unchanged; the
+healthy server was reused without resetting saved state or recreating automation.
+
+
 ## 14 September 2026 — Recruits independent-card preview
 
 [Recruits](RECRUITS_RUNTIME.md) is connected in an explicit development preview.

docs/RULE_DECISIONS.md

@@ -6,6 +6,7 @@ Updated 14 September 2026. This is the authoritative navigation index for existi
 
 | Topic | Decision to preserve | Detailed authority and evidence |
 | --- | --- | --- |
+| Harass & Withdraw | Either slot but neither category; private Prescience answers null. Return uniquely determined own undialed physical forces before weapon losses, canceled by an opposing successful Traitor. Mandatory after-use discard overrides winner retention. Explosion ordering and own-Traitor disposal are explicit timing/specificity inferences, consistent with the recorded Planetologist precedent. | [Runtime and sources](HARASS_WITHDRAW_RUNTIME.md) |
 | Expansion-faction setup | Selecting Ecaz/Moritani factions does not select their independent three-card variant. Ordinary decks contain 33/35/47 cards; Richese's ten-card cache stays separate. Ecaz allocates six total forces within Imperial Basin sectors 9–11, retaining fourteen reserves. Flexible sector allocation is the literal printed territory constraint; Fremen→Ecaz→Advanced BG order is an implementation inference, while Moritani-last is printed. | [Source and profile contract](EXPANSION_FACTIONS_PROTOTYPE.md) |
 | Ixian Technology on Richese lots | Replacement-card ownership, income and unsold disposition remain unresolved. A saved explicit per-lot decline permits an unchanged offer to proceed and leaves Technology available later. This development continuation does not implement the exchange or settle its custody. | [Auction source boundary](RICHESE_AUCTION_RULES.md#13-september-saved-per-lot-technology-decline) |
 | Spice Banker battle spending | Secret own-spice commitment is separate from support; only the surviving selected disc gains strength. Core Battle Plan payment rules spend it on death/loss and waive it for a sole traitor-call winner. This payment composition is explicit; upper deferred-income custody remains pending. | [Source contract and prototype](SPICE_BANKER_RUNTIME.md) |
@@ -41,6 +42,7 @@ These are unresolved in the cited records. Do not infer an answer from elapsed t
 
 | Boundary | Still unresolved | Existing record |
 | --- | --- | --- |
+| Harass / Stone Burner | A user question has been sent: keep the combination gated or compare forces remaining after withdrawal. No answer is assumed. The Richese card-family configuration is guarded publicly; hidden Stone Burner custody never controls eligibility. Ambiguous physical allocations and other optional modules remain unfinished. | [Current boundaries](HARASS_WITHDRAW_RUNTIME.md#current-boundaries) |
 | Recruits late accounting and rates | A user question has been sent for two free plus one paid Atreides return before Recruits: keep the disputed case gated, or one/two further free returns without refund. No answer is assumed. Late-changing free rates, pending repricing and same-turn recovered-card replay also stay gated. The connected clean-case preview retains the independent seven-force cap after faction-advantage cancellation as an explicit inference, not a direct combined FAQ. | [Source audit](RECRUITS_RULES.md), [runtime scope](RECRUITS_RUNTIME.md) |
 | Ambassador/Terror arrival priority | Both optionally react to the same entry, but no publisher/designer priority was found. The order can change Fremen relocation versus Atomics losses. A user question has been sent: keep the overlap gated pending an official ruling, or use explicitly provisional storm order. No answer is assumed; Baliset remains a separate pre-entry prevention effect. | [Reproduction and source boundary](DEFERRED_MOVEMENT_ARRIVAL.md) |
 | Sapho remaining timing | First versus unspent Advanced Guild priority, partly completed combined turns, cyclic auction duration and remaining battle timing stay guarded. Prior questions remain unanswered. | [Source audit](JUICE_OF_SAPHO_SOURCE_UPDATE.md), [battle review](JUICE_OF_SAPHO_BATTLE_REVIEW.md) |