Connect revealed Harass force allocation and exact casualties

Harass & Withdraw now admits legal Basic/Advanced mixed ordinary/elite commitments and multi-sector returns. A shared physical quote validates every returned counter against one exact legal dial/support complement. After both plans are revealed, the owner selects an ambiguous allocation; unique returns remain automatic. Selected counters become public before Traitor declarations, while physical transfer waits for atomic settlement and opposing-Traitor cancellation. This information is never added to a sealed Battle Plan or complete-plan inspection. Existing optional-module and Richese/Ecaz-allied gates remain.

The player panel, four AI profiles and saved event use the same quote. A versioned receipt binds the revealed plans, current typed location pools, battle and owner. Missing or altered receipts fail before reads, normalization and writes; concurrent choices select once. Previously valid legacy unique plans continue without reopening. Winner casualties now equal the selected dialed group, preventing a second smaller physical commitment after its undialed complement has returned.

Independent source and implementation review passed. Pure, engine, control and SQLite regressions cover typed/sector legality, exact complement, private pre-reveal views, public selected views, stale/malformed state, cross-owner actions, raced allocations, selected restoration, automatic exact casualties, opposing-Traitor cancellation and mandatory disposal. Types, lint and 4850 offline tests, production build and 43 HTTP/session tests pass. The first broad check caught the exhaustive decision registry and test union-narrowing omissions; those were fixed before the final stable checks. Browser testing corrected the incomplete-allocation selector label before verification.

Eight genuine card-variant Basic/Advanced games across all four homogeneous AI profiles completed with 9956 accepted actions, 266 periodic JSON restores and zero rejected candidates. Three Harass plans/returns and two Recruits plays occurred; no ambiguous allocation arose in these seeds. The new choice is exercised by targeted engine, authenticated recovery and browser cases, not inferred from those full-game samples. Full variant and combined-expansion acceptance remains incomplete.

A fresh isolated browser room used genuine Advanced card-variant setup followed by a conserved two-sector battle fixture. Actual controls rejected a partial return, selected two ordinary counters from sector nine, and preserved the selected state after refresh. Following actual owner and engine-driven opponent Traitor declines, two counters returned, the exact remaining ordinary/elite pair went to the Tanks, support cost one, and Harass discarded once. Final refresh restored 18 reserves, two Tanks, 29 spice and the same private Traitor. This is targeted browser evidence, not a complete human game.

All 1038 opening games and original seat/recovery/entry/handover records are unchanged; 1072 rooms remain including new QA. SQLite integrity and foreign keys pass. The healthy development server was reused without restart or reset. No mode/publication gate was opened.

Verified source tree: 61ee78f6e2bce47cb322b04f896db27fef28c56ba2097571a1d85bad5c121156

docs/HARASS_WITHDRAW_RUNTIME.md

@@ -46,7 +46,7 @@ plan still contains its exact ID. Complete-plan inspection reveals the actual
 physical plan; Truthtrance's existing literal slot-occupancy promises keep their
 meaning. An empty-category answer is not a promise that the physical slot is empty.
 
-The shared physical quote derives dialed counters from `casualtyOptions`, then
+The shared physical quote validates dialed counters from `casualtyOptions`, then
 returns the undialed normal and elite counters to their owner's reserves. The
 leader resolves normally. An opponent's successful Traitor call, including mutual
 calls, cancels withdrawal. Returned reserves are outside subsequent board losses
@@ -54,7 +54,9 @@ and Face Dancer replacement. Harass is discarded once and excluded from ordinary
 winner retention and Moritani ally retention.
 
 Both selectors enforce the complete pair in either selection order. The private
-guide shows the exact return and a reason for an unsupported choice. All four AI
+guide explains unique returns or the later revealed allocation choice. The
+[physical allocation follow-up](HARASS_ALLOCATION.md) connects typed and sector
+selection after reveal, with exact committed winner losses. All four AI
 profiles use the same physical quote and category-aware inspection comparison;
 the card adds no fictitious weapon or defense value. Stronger profiles value
 saved forces when expecting defeat and discourage use when expecting to win.
@@ -62,10 +64,9 @@ This is a legal strategy path, not strength calibration.
 
 ## Current boundaries
 
-- Basic and Advanced physical allocations must identify one normal/elite
-  commitment and one return allocation among sectors. Zero/all returns and
-  unique typed allocations are supported. Ambiguous allocations reject before
-  sealing; explicit private allocation controls remain unfinished.
+- Basic and Advanced now support explicit ordinary/elite and sector allocation
+  after reveal. Unique returns are automatic; previously valid legacy battles
+  retain unique-only derivation. See the [allocation contract](HARASS_ALLOCATION.md).
 - Additional optional modules remain gated, including Homeworlds, Nexus,
   Leader Skills, Tech Tokens, Stronghold Cards and Discoveries. This includes
   the printed own-Homeworld prohibition without claiming other Homeworld