Connect Truthtrance questions about recorded predictions and storm knowledge

Add typed questions about the respondent's stored Bene Gesserit prediction faction/turn, active submitted storm dial and actually known native Advanced Fremen storm card. Use the same eligible private facts for authoritative validation and target-only answer projection. Preserve unknown/rephrase/save continuation, compound aggregate privacy and physical card custody. Future promises, freeform interpretation and strategic AI question selection remain incomplete; no mode or publication gate opens.

Connect four question controls with all numeric comparisons, canonical faction choices and shared input guards. All four AI profiles answer the owner-only verified scalar. Independent source/privacy review and integration checks fixed missing comparisons, parent selector mapping and invalid submission guards. Thirteen new cases and the 44-case focused union cover normal/unknown/dishonest answers, private views, JSON and authenticated SQLite restoration, interrupted storm-peek continuation, stale/duplicate/competing requests and corrupt saved predicates without writes.

Validation: types, lint, 4662 offline tests, production build and 43 HTTP tests passed with unchanged source. Two genuine-setup four-profile games completed without rejected actions: Basic 192 actions/five periodic JSON rounds and Advanced 518/fourteen. Exact Treachery/force/elite custody and all eight final restored seat views pass. Three explicitly scripted legal questions use naturally held cards, covering prediction faction, prediction turn and submitted storm dial. Forecast questioning is not exercised by these complete games; the samples do not measure autonomous AI asking strategy or strength.

The separate Advanced browser exercise uses real prediction and forecast progression, staging only physical Truthtrance acquisition by relocation. Invalid dial input is blocked; an unknown answer can be rephrased; both compound prediction clauses and the forecast comparison work. Refresh after submission and final resolution restores history unknown/Yes/Yes and the remaining Shield. Both physical Truthtrances are discarded once, unrelated resources remain unchanged and private projection passes. SQLite tests establish pending-answer restoration; the browser observation does not claim a paused pending answer after reconnect.

After the reported outage, all 767 opening games and original seat/recovery records were preserved (801 after HTTP checks). All 768 rooms and original records immediately before verification also remained unchanged. Database integrity and foreign keys passed. Reused the healthy server without restart, reset or recurring automation.

Verified source tree: 09daaac288cb91ea407f4573f853a59d307e12ed30d2eccd39e671a47336f40d

docs/CURRENT_STATUS.md

@@ -6,11 +6,11 @@ gated.** Prototypes do not open completion or publication gates.
 
 ## Current checkpoint and work
 
-Previous verified checkpoint: `d0dc700`, Bureaucrat payment redirection.
-Types, lint, **4,631 offline tests**, build and **43 HTTP tests** passed.
-All 699 opening rooms and original seat/recovery records were preserved
-(733 after HTTP checks). All 700 rooms present immediately before verification
-also remained unchanged. The healthy server was reused after the outage.
+Latest verified checkpoint: `8e1cd7b`, Emperor Nexus extra revival.
+Types, lint, **4,649 offline tests**, build and **43 HTTP tests** passed.
+All 733 opening rooms and original seat/recovery records were preserved
+(767 after HTTP checks); all 734 present immediately before verification also
+remained unchanged. The healthy server was reused.
 
 [Mentat](MENTAT_QUESTION.md) connects private naming/disclosure before posture
 and faction powers, all four AI profiles and saved continuation in explicitly
@@ -28,7 +28,7 @@ All 699 opening rooms and original seat/recovery records survived the reported
 outage. The healthy server was reused. The completed checkpoint's Git record
 contains final broad verification and post-HTTP preservation totals.
 
-Current checkpoint: [Emperor Nexus Secret Ally revival](NEXUS_EMPEROR_SECRET_ALLY_RUNTIME.md).
+Completed prototype: [Emperor Nexus Secret Ally revival](NEXUS_EMPEROR_SECRET_ALLY_RUNTIME.md).
 Exactly three free returns, independent ordinary allowances, shared Fedaykin caps,
 private controls, four AI profiles and saved continuation are connected. Independent
 review and 17 focused effect tests pass. Two genuine-start and two explicitly staged
@@ -43,6 +43,19 @@ forced spice payments. No answer or purchase policy is assumed. All 733 opening
 rooms and seat/recovery records survived the latest outage unchanged; a new snapshot
 protects all 734 rooms before final verification. The healthy server is reused.
 
+Current checkpoint: [Truthtrance recorded knowledge](TRUTHTRANCE_KNOWLEDGE.md), connecting
+stored BG prediction faction/turn, submitted current Storm dials and actually known
+Fremen forecasts. The same private verified answer drives controls, all four bots
+and saved continuation. Independent source/privacy review and 44 focused cases pass,
+including five authenticated SQLite recovery cases. Two genuine-setup games finish
+in 192/518 actions with zero rejections and three scripted, naturally held-card
+questions; forecast coverage comes from the separate conserved browser exercise.
+Browser controls, unknown/rephrasing, compound answers and resolved refresh pass.
+All 767 opening rooms and seat/recovery records survived the latest reported outage;
+the healthy server is reused. A new snapshot protects all 768 rooms before broad
+verification. Final checks, preservation totals and Git delivery are recorded in
+the checkpoint commit and private report; full mode/publication gates remain.
+
 ## Authoritative navigation
 
 - [Rules checklist](../game/reference.ts), topic `implementation-checklist` and
@@ -71,7 +84,7 @@ These links define bounded working behavior, not complete module certification.
 | Leader Skills | [Common lifecycle](LEADER_SKILLS_RUNTIME.md), [known skilled capture](LEADER_SKILLS_CAPTURE.md), [Mentat question preview](MENTAT_QUESTION.md), [Bureaucrat payments](BUREAUCRAT_PAYMENTS.md), five battle disciplines, [Planetologist](PLANETOLOGIST_RULES.md), [Suk Graduate](SUK_GRADUATE_RULES.md), [Rihani and other battle effects](LEADER_BATTLE_EFFECTS.md), [Smuggler shipment](SMUGGLER_SHIPMENT.md) and [No-Field](SMUGGLER_NO_FIELD.md), [Sandmaster routes](SANDMASTER_MOVEMENT.md), [Banker spending](SPICE_BANKER_RUNTIME.md), [Diplomat defense](DIPLOMAT_DEFENSE.md). Remaining bands and combinations are explicit in those contracts. |
 | Discoveries | [Prototype](DISCOVERY_PROTOTYPE.md): genuine setup, Great Maker, seven cards/eight tokens, inspection and stash rewards, nested sites, signed later free entry, carried Ornithopter, sole Cistern, bounded Jacurutu income, Testing Station and Shrine. Orgiz and contested/mixed cases remain pending. |
 | Nexus/Homeworlds | [Decision index](RULE_DECISIONS.md) links each integrated faction family, native/borrowed effects, physical custody, private choices, payments and transport. [CHOAM Collection trade](NEXUS_CHOAM_SECRET_ALLY.md) and [Emperor extra revival](NEXUS_EMPEROR_SECRET_ALLY_RUNTIME.md) are connected; CHOAM inspection and Emperor purchase remain pending. A source audit or helper alone is not a completed effect. |
-| Truthtrance | [Spice facts](TRUTHTRANCE_SPICE_FACTS.md), [card counts](TRUTHTRANCE_CARD_COUNT.md), [hand inventory](TRUTHTRANCE_HAND_INVENTORY.md), and [Basic/no-Guild Advanced reserve-shipment promises](TRUTHTRANCE_SHIPMENT_PROMISES.md) use authoritative private state. Earlier readiness audits do not supersede these follow-ups. |
+| Truthtrance | [Spice facts](TRUTHTRANCE_SPICE_FACTS.md), [card counts](TRUTHTRANCE_CARD_COUNT.md), [hand inventory](TRUTHTRANCE_HAND_INVENTORY.md), [recorded knowledge](TRUTHTRANCE_KNOWLEDGE.md), and [Basic/no-Guild Advanced reserve-shipment promises](TRUTHTRANCE_SHIPMENT_PROMISES.md) use authoritative private state. Earlier readiness audits do not supersede these follow-ups. |
 | Other cards | [Sapho runtime](JUICE_OF_SAPHO_RUNTIME.md) includes first among remaining unstarted movement turns after Advanced Guild has finished. Richese card contracts and the checklist identify the other connected effects and explicit gaps. |
 | Multiplayer | Saved rooms/seats, [recovery](../README.md#saved-seats-and-reconnecting), uncertain-request retry, [own-seat AI](AUTOPILOT.md), and [voluntary seat handover](SEAT_HANDOVER.md) have connected controls and recovery evidence. |
 

docs/IMPLEMENTATION_STATUS.md

@@ -1,5 +1,37 @@
 # Dune implementation status
 
+## 14 September 2026 — Truthtrance recorded knowledge and outage preservation
+
+[Truthtrance knowledge](TRUTHTRANCE_KNOWLEDGE.md) connects stored Bene Gesserit
+prediction faction/turn, a respondent's active submitted storm dial and the card
+actually known to native Advanced Fremen. Server validation, target-only answer
+projection, compound controls, all four AI profiles and saved continuation share
+the same eligible facts. Missing knowledge stays unknown; only the aggregate
+answer becomes public and a definite answer consumes the physical card once.
+This does not implement general future commitments or AI question strategy.
+
+Independent source/privacy review and 13 new cases pass; the focused union passes
+44, including five authenticated SQLite recovery cases. Review fixed missing
+comparison controls, parent selector mapping and the invalid-input submission
+guard. Recovery covers pending questions and interrupted storm peeks, private
+seat views, dishonest/stale/duplicate requests, competing writes and malformed
+saved predicates without state or physical-custody corruption.
+
+Two genuine-setup games using all four profiles finish with zero rejections:
+Basic 192 actions/five periodic JSON rounds; Advanced 518/fourteen. Exact card and
+force custody holds, including all eight restored final seat views. Three scripted
+questions use naturally held cards and cover prediction faction, prediction turn
+and submitted dial. Forecast coverage comes from the separate browser exercise,
+whose only staged acquisition relocates two physical Truthtrances. That exercise
+verifies invalid input, unknown/rephrasing, both compound clauses, a forecast
+comparison and refresh following submission and final resolution.
+
+After the reported power failure, all 767 opening rooms and original seat/recovery
+records match the backup. Integrity and foreign keys pass; the healthy server is
+reused. A fresh snapshot protects all 768 rooms before broad checks. Final broad
+results, source fingerprint, post-HTTP preservation and Git delivery are recorded
+in the verified commit and private report. Completion/publication gates remain.
+
 
 ## 14 September 2026 — Emperor Nexus revival prototype and outage recovery
 

docs/RULE_DECISIONS.md

@@ -20,6 +20,7 @@ Updated 14 September 2026. This is the authoritative navigation index for existi
 | Guild payment | Rate, transport permission and income are distinct; power owner, shipper, contributors and independent rate-card beneficiary remain distinct. | [Rate/cancellation sources](GUILD_RATE_KARAMA_RULES.md), [implemented payment routing](GUILD_SHIPMENT_PAYMENTS.md) |
 | Truthtrance | Current facts are boolean disclosures, not promises to preserve resources. Structured Basic and base Advanced active-opportunity shipment promises bind within their documented scope (Advanced excludes Guild and optional modules); prose is not automatically enforced. | [Spice facts](TRUTHTRANCE_SPICE_FACTS.md), [card facts](TRUTHTRANCE_CARD_COUNT.md), [shipment promises](TRUTHTRANCE_SHIPMENT_PROMISES.md), [remaining audit](TRUTHTRANCE_NONBATTLE_READINESS_20260907.md) |
 | Truthtrance hand categories | Count current physical hand custody by explicitly named primary role; alternate battle slots and faction powers do not reclassify cards. Only an aggregate answer is disclosed. | [Hand inventory](TRUTHTRANCE_HAND_INVENTORY.md) |
+| Truthtrance recorded knowledge | Questions compare an already recorded BG prediction, active submitted storm dial or actually known native Fremen forecast. Missing knowledge is unknown; only the aggregate answer is published. No future promise or unknown deck peek is created. | [Connected predicates and evidence](TRUTHTRANCE_KNOWLEDGE.md) |
 | Nexus lifecycle | Twelve physical cards, phase draw/replacement and alliance forfeiture; native Cunning, absent-faction Secret Ally and Betrayal have separate effects. No blanket Karama immunity. | [Common source contract](NEXUS_CARD_RULES.md), [lifecycle runtime](NEXUS_CARD_RUNTIME.md) |
 | Nexus faction effects | Preserve physical custody, original faction identity and durable effect receipts; use each printed family instead of borrowing another faction's rules by analogy. | [Atreides](NEXUS_ATREIDES_RULES.md), [Harkonnen](NEXUS_HARKONNEN_RULES.md), [BG](NEXUS_BENE_GESSERIT_RULES.md), [Emperor](NEXUS_EMPEROR_RULES.md), [Fremen](NEXUS_FREMEN_RULES.md), [Guild](NEXUS_GUILD_RULES.md) |
 | Expansion Nexus families | Source audit coverage does not imply every panel is playable; consult later runtime records in the status log. | [Ixian Cunning](NEXUS_IXIAN_CUNNING_RULES.md), [Ixian replacement](NEXUS_IXIAN_REPLACEMENT_RULES.md), [Tleilaxu](NEXUS_TLEILAXU_RULES.md), [CHOAM](NEXUS_CHOAM_RULES.md), [Richese](NEXUS_RICHESE_RULES.md), [Ecaz](NEXUS_ECAZ_RULES.md), [Moritani](NEXUS_MORITANI_RULES.md) |

docs/TRUTHTRANCE_KNOWLEDGE.md

@@ -0,0 +1,94 @@
+# Truthtrance: recorded predictions and storm knowledge
+
+14 September 2026. **Prototyped**, with **Partial** coverage. This extends the
+existing question flow with four typed predicates; freeform interpretation,
+general future commitments and complete mode acceptance remain unfinished.
+
+## Authority and semantics
+
+The [GF9 November 2020 FAQ, p. 8](https://www.gf9games.com/dune/wp-content/uploads/2020/11/Dune-FAQ-Nov-2020.pdf#page=8)
+permits game-related Yes/No questions and AND/OR combinations. Its unknown-answer
+flow allows another question or retaining the card. Publisher-indexed text was
+retrieved again for this batch. These precise predicate definitions implement
+part of that broad permission; they are not additional printed restrictions.
+
+- **Prediction faction:** compare the respondent's already-recorded native Bene
+  Gesserit prediction with a named faction.
+- **Prediction turn:** compare the turn in that stored prediction using exactly,
+  at least or at most. This asks what was selected, not whether that future win
+  will happen or whether the player promises to make it happen.
+- **Submitted storm dial:** compare this respondent's locked value while the
+  current Storm phase and its submission remain active. A not-yet-submitted or
+  expired dial is unknown; zero is a real first-turn value, not missing data.
+- **Known forecast:** compare the current storm card only for native Advanced
+  Fremen when the existing knowledge flag is true. Canceled peeks, unknown cards
+  and other factions receive unknown; no new deck lookup or borrowed knowledge
+  is granted. The question concerns the known card, not a promise about eventual
+  storm movement after other effects.
+
+The shared parser accepts canonical faction identities, prediction turns 1–10,
+dials 0–20 and forecasts 1–6, and rejects malformed comparisons and values.
+Stored dial entitlement also checks the turn's actual legal dialing range.
+Missing knowledge yields unknown rather than inventing a choice or an answer.
+
+## Connected behavior and privacy
+
+`truthKnowledgeOf` constructs only the target's eligible facts. Both server answer
+validation and target-only answer projection use that same snapshot. AND/OR uses
+the existing three-valued evaluation: a false AND term or true OR term can settle
+the aggregate despite an unknown sibling. No matching-clause list is published.
+
+The public question and response controls are independent of private values. The
+target sees the verified scalar, and its answer becomes public through the normal
+history flow. Neither prediction fields nor an unrevealed dial/forecast are added
+to rivals' views. Equality answers can naturally reveal the queried value, as the
+chosen question intends. A definite answer discards the actual Truthtrance once;
+unknown retains its retry/save continuation. The original storm, auction, battle
+or other interaction remains in place while the question is open.
+
+The four UI choices share faction/value fields and numeric comparison controls.
+Both compound clauses support them, with invalid-input and busy submission guards.
+All four AI profiles answer the existing owner-only scalar. They do not receive
+opponent knowledge, and this does not claim new strategic question selection or
+freeform language understanding.
+
+## Verification boundary
+
+Focused tests use real Basic/Advanced setup, a real locked prediction and ordinary
+storm/forecast progression. They stage only the asker's physical Truthtrance
+acquisition by relocation, without duplicating cards. They cover private Yes/No
+and unknown answers, changed/expired entitlement, invalid queries, dishonest and
+duplicate answers, compound indistinguishability, all profiles and JSON views.
+The isolated component tests check all numeric comparisons and ranges.
+
+Thirteen new cases pass (six rules, two controls and five production SQLite
+recovery cases); the focused union with existing Truthtrance/spice coverage passes
+44 cases. Authenticated saved-seat tests restore pending questions and the original
+storm-peek response, preserve all private views and physical custody, reject stale,
+dishonest and duplicate answers, and allow only one competing version write.
+Malformed saved predicates fail without a database write. Independent source and
+privacy review found missing numeric comparison controls; integration review also
+fixed the parent selector mapping and invalid-input submission guard.
+
+Two genuine-setup, four-profile games finish without rejected actions: Basic in
+192 actions with five periodic JSON rounds, Advanced in 518 with fourteen. Exact
+card/force custody holds and all eight final seat views restore. Explicitly
+scripted legal questions use naturally held cards: the Basic sample asks about a
+prediction faction and a submitted storm dial; Advanced asks about a prediction
+turn. Neither sample exercises a forecast question. These are bounded continuation
+checks, not evidence of autonomous AI question strategy or strength calibration.
+
+The separate browser exercise uses real Advanced setup, a recorded prediction and
+ordinary forecast progression, relocating only two physical Truthtrances to the
+asker. It verifies invalid dial input, an unknown answer and rephrasing, a compound
+faction/turn question, a forecast comparison and refresh after submission and
+resolution. The final history is unknown/Yes/Yes, both physical cards are discarded,
+and unrelated resources and private projections remain unchanged. Pending-answer
+restoration is established by SQLite tests, not a paused browser observation.
+
+All 767 opening games and original seat/recovery records match the backup after
+the reported outage. Integrity and foreign keys pass; the healthy server is reused.
+The new browser room brings the preservation baseline to 768 before broad checks.
+Required broad results, source fingerprint, final preservation totals and Git
+delivery are recorded in the checkpoint commit and private report. These results
+do not certify all Truthtrance questions, complete expansions or publication readiness.