Connect bounded Fremen Nexus worm-riding Betrayal

docs/CURRENT_STATUS.md

@@ -106,14 +106,16 @@ protection and complete Nexus games remain gated. The bounded Atomics reveal
 is a separate classic-plus-Moritani path, not a playable Nexus Terror effect;
 its later-alliance hand-limit policy is unresolved.
 
-The bounded [Fremen Nexus Betrayal movement alternative](NEXUS_FREMEN_RULES.md#bounded-betrayal-movement-range)
-lets an unallied holder spend the physical card before Fremen move in
-Shipment and Movement. The native two-territory advantage stays suppressed
-through that turn, while independent ornithopters and ordinary moves remain
-legal. Owner controls, a prioritized legal bot play, Basic/Advanced JSON
-continuation and an authenticated concurrent SQLite CAS test are connected.
-The card's separate worm-riding suppression alternative and combined modules
-remain unfinished; no public Nexus gate changes.
+The bounded [Fremen Nexus Betrayal alternatives](NEXUS_FREMEN_RULES.md#bounded-betrayal-movement-and-worm-riding)
+let an unallied holder spend the physical card either before the first Spice
+Blow to prevent Fremen worm rides for that turn, or before Fremen move in
+Shipment and Movement to suppress their native two-territory advantage.
+Worm destruction/protection and Nexus still resolve; independent movement
+bonuses remain available. One saved card cannot use both modes, even if
+recycled later that turn. Owner controls, prioritized legal bot play,
+Basic/Advanced JSON and authenticated concurrent SQLite continuation are
+connected. Post-appearance Betrayal timing and combined modules remain gated;
+no public Nexus gate changes.
 
 The bounded [Ecaz Nexus Betrayal](NEXUS_ECAZ_RULES.md#bounded-betrayal-runtime)
 path lets a card holder select one public territory shared by Ecaz and its

docs/IMPLEMENTATION_STATUS.md

@@ -1,5 +1,31 @@
 # Dune implementation status
 
+## 29 September 2026 — Fremen Nexus Betrayal pre-blow worm suppression
+
+The second printed Betrayal alternative now spends the physical Fremen Nexus
+card at a clean phase-one boundary **before the first spice blow or worm**.
+For that turn ordinary Fremen worm rides and native Cunning remote rides do
+not open; worm destruction, survival/protection, spice placement and Nexus
+still resolve. This advance-declaration timing is a conservative product
+boundary, not a publisher priority ruling or a reactive post-appearance use.
+The existing phase-five movement-range alternative remains independent; a
+card recycled at the current turn's Nexus cannot activate both alternatives.
+
+Sixteen focused Basic/Advanced, actual-worm, empty-Cunning, late-rejection,
+owner/rival control, all-profile bot-priority and authenticated concurrent
+SQLite continuation cases passed. A direct non-test third-turn worm smoke
+showed one spent card, a real Nexus, four surviving Fremen forces and no ride.
+A read-only browser preview rendered the owner-only pre-blow button with no
+rival or spent-card control; no room was written. Independent review found
+that the first movement-only checkpoint's six-field receipt would have
+locked saved seats on direct GET. Its original event/signature are now
+validated alongside new mode-bound receipts; JSON and authenticated SQL
+reads/actions accept genuine old records and reject tampering. The
+[source-bound Fremen contract](NEXUS_FREMEN_RULES.md#bounded-betrayal-movement-and-worm-riding)
+marks the timing and combined-mode limits. Typecheck, lint, the app build,
+**5,756/5,756 offline tests** and **54/54 local HTTP integration cases**
+passed. This does not open public Nexus starts or prove deployment.
+
 ## 29 September 2026 — bounded Moritani Atomics Aftermath
 
 In classic-plus-Moritani tables without Guild, Ecaz or optional modules, a

docs/NEXUS_FREMEN_RULES.md

@@ -12,7 +12,7 @@ The [November 2020 FAQ, pp.2–3](https://www.gf9games.com/dune/wp-content/uploa
 
 The [E1 FAQ, p.11](https://www.gf9games.com/dunegame/wp-content/uploads/2020/09/IxianAndTleilaxuRulebook.pdf#page=11) describes Sandtrout's anti-Nexus and immediate replacement-card behavior. Its Karama table distinguishes destroying Fremen at a worm from stopping additional-worm placement. The [E3 rules, pp.11–12 and 16](https://www.gf9games.com/dune/wp-content/uploads/EcazMoritani-Rulebook-LOWRES.pdf#page=12), reread in the cached publisher-authored PDF text and fresh publisher-indexed excerpts, give common Nexus timing and distinguish Great Maker's reserve ride from ordinary board-origin riding. Great Maker remains a separate integration boundary.
 
-## Bounded Betrayal: movement range
+## Bounded Betrayal: movement and worm riding
 
 An unallied non-Fremen holder of the physical Fremen Nexus card may spend it
 during Shipment and Movement **before Fremen move** to suppress their native
@@ -28,10 +28,29 @@ physical card enters the Nexus discard once; a saved receipt and player turn
 marker preserve suppression through JSON/SQLite recovery and reject replay or
 malformed ownership. The public movement view shows the restriction without
 revealing who held the card before play. All four AI profiles can spend the
-card before an active Fremen bot moves; the owner control labels this
-alternative and keeps the printed worm-riding suppression alternative visibly
-unavailable. The latter is **not** covered by this prototype. This does not
-open the complete Nexus module or public expansion starts.
+card before an active Fremen bot moves; the owner control labels the currently
+available alternative.
+
+The same unallied holder may instead spend that one physical card at a clean
+**pre-first-blow** Spice Blow and Nexus boundary. For the remainder of that
+turn, Fremen cannot take ordinary or native Cunning worm rides. Worm
+destruction, survival, allied protection, spice placement, additional worm
+appearances and Nexus negotiations still resolve. The card must be declared
+before any worm or spice blow, including a special-Karama summon; this
+conservative advance-declaration window avoids a holder-dependent hidden
+reaction, but is a product timing choice rather than an explicit printed
+priority ruling. No reactive post-appearance Betrayal is claimed.
+
+Both alternatives use one mode-bound saved receipt, public turn marker and
+physical discard. A later Nexus draw may recycle that card during the same
+turn; even if it returns to a hand, the second alternative is unavailable.
+Validated six-field movement-only receipts from the previous checkpoint
+remain readable and executable after JSON or SQL restoration; malformed old
+events or signatures still reject. No game reset or public backfill is needed.
+Basic/Advanced natural appearances, empty-worm Cunning exclusion, actual
+saved worm continuation, duplicate authenticated SQL action and all four bot
+profiles have focused checks. The module remains release-gated; Great Maker,
+Sandtrout, combined expansions and after-appearance timing are separate.
 
 ## Cunning: source-backed scope and implementation composition