Connect provisional Advanced Richese mixed battles and exchanges

docs/NULLENTROPY_BOX_ENGINE_AUDIT.md

@@ -1,6 +1,22 @@
 # Nullentropy Box: paid search and engine continuation audit
 
-Audit: 2026-09-06, with a Basic runtime amendment on 8 October below. This is a source/continuation contract, not complete Richese certification. Read with [the acquisition audit](RICHESE_ACQUISITION_RULES.md). The full-hand publisher question remains unresolved; the user's Basic-first instruction permits the visibly qualified first version below, not a new timing ruling.
+Audit: 2026-09-06, with Basic and Advanced runtime amendments on 8 October below. This is a source/continuation contract, not complete Richese certification. Read with [the acquisition audit](RICHESE_ACQUISITION_RULES.md). The full-hand publisher question remains unresolved; the user's first-version instruction permits the visibly qualified prototype, not a new timing ruling.
+
+## Advanced full-hand exchange follow-up — 8 October 2026
+
+Advanced now shares the Basic atomic final-capacity policy below.
+Intermediate acquisition/disposal capacity remains explicitly provisional,
+not a supplied-source or publisher ruling. The pure resolver's opt-in
+capacity argument is passed consistently for preview and real settlement;
+unknown callers retain its conservative spare-slot default.
+
+One before/after Advanced smoke uses four real cards including Box,
+pays two once, completes Easy's private selection, retains the other three
+cards and leaves four final cards with Box once on top of the shuffled pile.
+Actual GameTable SSR before-payment and paid-search panels show the warning
+in Chromium, with an enabled paid-search button. Guild-refund and over-limit
+safeguards remain; no broad suite, recovery or deployed proof was run.
+
 
 ## Basic full-hand exchange prototype — 8 October 2026
 
@@ -11,10 +27,10 @@ limit. The Box remains reserved in hand while the owner chooses; it is
 still discarded last/on top after the remainder is shuffled. This does
 not reverse the printed disposal order or adjudicate intermediate capacity.
 
-The pure resolver accepts the engine's explicit Basic full-hand policy;
-its default unknown/Advanced policy still requires a spare slot. Both
-the completion preview and real settlement use the same policy. Basic
-over-limit hands remain rejected. Payment, private inspection entitlement,
+The pure resolver accepts the engine's explicit full-hand policy;
+its default unknown-caller policy still requires a spare slot. Both
+the completion preview and real settlement use the same policy.
+Over-limit hands remain rejected. Payment, private inspection entitlement,
 canonical/non-Box identities, search lock, event-bound choice and restored
 parent paths are unchanged. Own controls expose `fullHandExchange` with a
 provisional notice before payment and during selection.
@@ -24,8 +40,8 @@ Box, pays two once, accepts Easy's private choice, leaves four final
 cards and exactly one used Box on top. Chromium observed the actual
 SSR panel with the warning and enabled paid-search button. Types pass;
 no broad suite, recovery campaign or deployed acceptance was run.
-Advanced full-hand and Guild-refund contexts remain guarded; wider
-interruption/commitment refinement remains later work.
+Advanced now shares the capacity policy above. Guild-refund contexts remain
+guarded; wider interruption/commitment refinement remains later work.
 
 ## Verified authority and remaining boundaries
 
@@ -40,7 +56,7 @@ The publisher's physical card face was independently read again from `/tmp/dune-
 
 This is an ordinary card effect: no generic faction/alliance Karama cancellation, no recipient consent, no Emperor purchase income, Harkonnen bonus or Ixian purchase replacement. The bank is explicit, even with Emperor in the game. No bidding exclusion is printed on Box; Distrans's separate unresolved-bid guard is not transferable to this card.
 
-The full-hand intermediate-capacity question remains unresolved. Basic now uses the explicit atomic-exchange prototype above; Advanced retains the spare-slot guard. Empty or only-Box piles still have no legal result and are rejected before payment under the existing unsupported-empty-search policy. There is no deck fallback or permission to waste the fee; every Box is excluded from retrieval.
+The full-hand intermediate-capacity question remains unresolved. Basic and Advanced use the explicit atomic-exchange prototype above. Empty or only-Box piles still have no legal result and are rejected before payment under the existing unsupported-empty-search policy. There is no deck fallback or permission to waste the fee; every Box is excluded from retrieval.
 
 A further boundary comes from an existing provisional engine policy, not the Box source. `executeSpecialKaramaIntent` for Guild may refund `g.karamaShipping.card` by taking that exact previously discarded Karama back into its original owner's hand. Box could first recover that same card. Pausing the pile during search does not resolve the later conflicting claim. Do not silently blacklist an otherwise legal non-Box search card as an official rule. Until the provisional refund policy is resolved, guard that particular pending-refund context before payment and label the reason accurately. No broader ban on Box during Shipment is justified.