Connect Harass & Withdraw to the battle preview

The independent Ecaz Treachery variant now supports Harass in either physical battle-card slot. A category-null Prescience answer keeps its identity private without erasing the selected card. Exact undialed normal/elite counters return before battle losses; opposing successful Traitors cancel withdrawal, ordinary leader deaths still resolve, and the card is discarded exactly once. Controls, all four AI profiles and saved continuation share the same physical quote. Existing Planetologist inspection and literal Truthtrance slot promises retain their meanings.

Unique Basic/Advanced physical allocations are supported. Ambiguous allocations, co-present Ecaz allied armies on either side, Richese card-family configurations and other optional modules remain gated before sealing from public/own context. The pending Stone Burner timing question is not assumed answered. Reveal-before-explosion order and mandatory disposal on an own-Traitor win are explicit source-timing/specificity inferences, consistent with existing Planetologist precedence. Reinforcements and full variant/public mode acceptance remain unfinished.

Independent rules/privacy/persistence review fixed asymmetric selector legality, misleading blocked-card guidance, invalid restored battle pairs, native-only inspection bypass and unsupported allied-army admission. Ixian fixtures preserve all seven physical cyborgs. The first broad run caught a semantic-status lint error in the blocked guidance; replacing the paragraph role with an output element fixed it. A subsequent broad run passed 4,775 of 4,776 tests and exposed an old UI assertion requiring category-null slots to be disabled. The updated regression verifies enabled category-null selectors exclude ordinary held cards, while exact leader/dial locks and submitted values remain bound; focused controls pass 14/14. No game source changed after the eight samples or browser replay. Types, lint, 4776 offline tests, build and 43 HTTP tests pass with unchanged source. Authenticated SQLite cases verify sealed private restoration and competing duplicate traitor actions with one physical resolution.

Eight fixed genuine six-seat games finish: basic/Easy: 1803 actions, 0 Harass plans, 0 withdrawals, 48 periodic restores; basic/Medium: 225 actions, 0 Harass plans, 0 withdrawals, 6 periodic restores; basic/Hard: 2184 actions, 1 Harass plans, 1 withdrawals, 59 periodic restores; basic/Brutal: 2073 actions, 1 Harass plans, 1 withdrawals, 56 periodic restores; advanced/Easy: 2057 actions, 1 Harass plans, 1 withdrawals, 55 periodic restores; advanced/Medium: 532 actions, 0 Harass plans, 0 withdrawals, 14 periodic restores; advanced/Hard: 538 actions, 0 Harass plans, 0 withdrawals, 14 periodic restores; advanced/Brutal: 544 actions, 0 Harass plans, 0 withdrawals, 14 periodic restores. All 218 game-source files match their source-stable runs; exact card/traitor/force custody and periodic/terminal private views are checked. Browser controls verify the full card, category None, Defense-first legality, actual sealing/reveal, four returned forces, ordinary leader death, disposal and refresh. A separate final-source replay verifies the conserved browser fixture and opposing continuation, including Face Dancer replacement. This is bounded playability evidence, not full compliance or AI calibration.

All 936 opening games and their original seat/recovery records remain unchanged (970 after checks); all 937 present immediately before checks are also preserved. Database integrity and foreign keys pass. The healthy server was reused after the power failure without restart, reset or recurring automation.

Verified source tree: be193613c455c5b76b49800fe3a7400504ea879af34c59621ade3d44f0fe019d

docs/CURRENT_STATUS.md

@@ -6,38 +6,28 @@ gated.** Prototypes do not open completion or publication gates.
 
 ## Current checkpoint and work
 
-Previous verified checkpoint: `9ca17a6`, [Fremen/Ecaz final-turn victory](ECAZ_VICTORY_RULES.md#fremen-final-turn-runtime-follow-up)
-and [deferred shipment repair](DEFERRED_SHIPMENT_ARRIVAL.md). Types, lint,
-**4,716 offline tests**, build and **43 HTTP tests** passed. All 835 opening games
-and the 869 present after the outage, including their seat/recovery records,
-were preserved (902 after verification). Three source-stable samples finish,
-including the exact failed shipment resumption; full scope remains unfinished.
-Detailed earlier capabilities and evidence are linked below and retained in the
-[implementation history](IMPLEMENTATION_STATUS.md).
+Previous verified checkpoint: `c04cb93`, [Recruits](RECRUITS_RUNTIME.md).
+Types, lint, **4,743 offline tests**, build and **43 HTTP tests** passed.
+Eight fixed Basic/Advanced six-seat samples finished in 7,995 actions with no
+rejected candidates and three actual Recruits plays. All opening games and
+seat/recovery records were preserved, with 936 rooms after verification.
+Earlier evidence remains in the [implementation history](IMPLEMENTATION_STATUS.md).
 
-Current prototype: [Recruits](RECRUITS_RUNTIME.md) connects the independent complete
-three-card inventory before genuine Basic/Advanced faction setup, owned card
-play/discard, public current revival rates, existing CHOAM/Tleilaxu decisions,
-four AI profiles and saved continuation. Exact free usage and physical custody
-are retained. Prior-free activation is supported; prior-paid or unknown accounting,
-later grants, pending repricing, same-turn replay and other optional modules stay
-gated. Reinforcements and Harass & Withdraw are present but their effects remain
-unfinished. Independent-cap precedence is explicitly labeled as an inference.
-
-Independent review's 37-case union and four authenticated recovery cases pass.
-Eight fixed Basic/Advanced six-seat samples finish in 7,995 actions with no
-rejected candidates and three actual Recruits plays. Exact custody, 212 periodic
-all-seat JSON restores and terminal private views pass. A separate conserved
-browser fixture verifies inspection, play/discard, public rates, four free returns
-and refresh. Final broad-check totals, source fingerprints and Git delivery are
-recorded with the checkpoint; these are bounded playability results.
+Current prototype: [Harass & Withdraw](HARASS_WITHDRAW_RUNTIME.md) connects either
+battle-card slot, private category inspections, exact undialed normal/elite
+returns, opponent-Traitor cancellation, mandatory disposal, controls and all
+four AI profiles. Physical allocation must be unique. Richese card combinations
+and additional optional modules stay gated. Withdrawal before explosion and
+card-specific discard precedence are explicitly labeled inferences. The Stone
+Burner timing question is pending; no user answer is assumed. Reinforcements
+remains unfinished. This does not open variant, mode or publication gates.
 
 After the latest reported power failure, the existing server responds normally.
-All **902 rooms**, **1,888 seats** and original recovery/entry/handover records
-match the opening backup; SQLite integrity and foreign-key checks pass. No server
-restart, database reset or recurring automation is needed. Final review, sample and
-browser evidence, broad verification and Git delivery are recorded with this
-checkpoint before handoff. Public mode and publication gates remain closed.
+All **936 rooms**, **1,959 seats** and original recovery/entry/handover records
+match the opening backup; SQLite integrity and foreign-key checks pass. Browser
+refresh restores the existing test seat. No restart, database reset or recurring
+automation was needed. Current checkpoint verification and delivery are recorded
+with the final source-bound report and Git message.
 
 ## Authoritative navigation
 
@@ -68,7 +58,7 @@ These links define bounded working behavior, not complete module certification.
 | Discoveries | [Prototype](DISCOVERY_PROTOTYPE.md): genuine setup, Great Maker, seven cards/eight tokens, inspection and stash rewards, nested sites, signed later free entry, carried Ornithopter, sole Cistern, bounded Jacurutu income, Testing Station and Shrine. Orgiz and contested/mixed cases remain pending. |
 | Nexus/Homeworlds | [Decision index](RULE_DECISIONS.md) links each integrated faction family, native/borrowed effects, physical custody, private choices, payments and transport. [CHOAM Collection trade](NEXUS_CHOAM_SECRET_ALLY.md) and [Emperor extra revival](NEXUS_EMPEROR_SECRET_ALLY_RUNTIME.md) are connected; CHOAM inspection and Emperor purchase remain pending. A source audit or helper alone is not a completed effect. |
 | Truthtrance | [Spice facts](TRUTHTRANCE_SPICE_FACTS.md), [card counts](TRUTHTRANCE_CARD_COUNT.md), [hand inventory](TRUTHTRANCE_HAND_INVENTORY.md), [recorded knowledge](TRUTHTRANCE_KNOWLEDGE.md), and [Basic/no-Guild Advanced reserve-shipment promises](TRUTHTRANCE_SHIPMENT_PROMISES.md) use authoritative private state. Earlier readiness audits do not supersede these follow-ups. |
-| Other cards | [Sapho runtime](JUICE_OF_SAPHO_RUNTIME.md) includes first among remaining unstarted movement turns after Advanced Guild has finished. [Recruits](RECRUITS_RUNTIME.md) connects clean Revival play in its independent three-card preview. Richese card contracts and the checklist identify other connected effects and explicit gaps. |
+| Other cards | [Sapho runtime](JUICE_OF_SAPHO_RUNTIME.md) includes first among remaining unstarted movement turns after Advanced Guild has finished. [Recruits](RECRUITS_RUNTIME.md) connects clean Revival play; [Harass & Withdraw](HARASS_WITHDRAW_RUNTIME.md) connects the bounded battle return in the same independent three-card preview. Richese card contracts and the checklist identify other connected effects and explicit gaps. |
 | Multiplayer | Saved rooms/seats, [recovery](../README.md#saved-seats-and-reconnecting), uncertain-request retry, [own-seat AI](AUTOPILOT.md), and [voluntary seat handover](SEAT_HANDOVER.md) have connected controls and recovery evidence. |
 
 ## Remaining readiness