Prevent saved CHOAM movement arrival deadlocks

Preflight ordinary movement through the existing arrival quote before creating new Ornithopter escrow or opening Ixian, Fremen and CHOAM prevention windows. An explicit legacy CHOAM decline can return an uncommitted unsupported arrival for another choice without consuming movement or touching forces, spice, cards or tokens. Preserve an existing Ornithopter and retire it exactly once on a legal replacement move. Keep dedicated Ambassador relocation handling and Karama cancellation validation before cost; unrelated exceptions remain atomic. Simultaneous Ambassador/Terror priority still awaits the recorded material interpretation, with no invented ordering.

Add reusable offline faction-game samples with genuine Basic/Advanced setup, all four AI profiles, physical custody checks, JSON restorations, private traces and failed snapshots. Source-bound reports and input snapshot hashes make fresh and resumed samples repeatable; document that a resumed continuation starts a new seeded stream and does not prove input setup provenance.

Validation: independently reviewed fresh declaration, native cancellation, supported single arrivals, legacy retry and card custody tests. Two production SQLite tests cover authenticated private restoration, stale/duplicate/wrong-owner rejection, resource conservation and concurrent version races. Typecheck, lint, 4583 offline tests, production build and 43 HTTP tests passed. Retain the initial failed check log for the corrected numeric-sort lint issue.

All six fresh samples complete. CHOAM Basic 1054 actions/28 JSON restores, CHOAM Advanced 225/6, Ecaz Basic 91/2, Ecaz Advanced 523/14, all-three Basic 476/12, all-three Advanced 1303/35 with a turn-six CHOAM win. Combined Advanced has 46 guarded arrival candidates with legal alternatives. The exact prior 614-action failed snapshot separately finishes after 691 additional actions/18 restores and 39 guarded candidates. These are bounded paths, not complete faction or combination certification. Gameplay source hashes match the final checkpoint; later evidence-only documentation and recovery-test lint edits are explicit.

After the reported outage, all 632 opening games and original seat/recovery records were preserved (665 after HTTP tests); integrity and foreign keys passed. Existing Ecaz and Ixian browser seats restored their same private hands, resources and pending choices after reload. This is browser restoration evidence, not a staged arrival-return claim. The healthy server was reused; no restart, database reset, recurring automation or publication.

Verified source tree: 550221850f4802c41155f7bbc35d623965bc7db3330825636d50f26bb42868f8

docs/CURRENT_STATUS.md

@@ -4,6 +4,20 @@ Updated 13 September 2026. This is the short navigation dashboard; detailed evid
 
 ## Evidence and source of truth
 
+- [Deferred movement arrival safety](DEFERRED_MOVEMENT_ARRIVAL.md) repairs the
+  combined Advanced sample's saved CHOAM decline deadlock. New unsupported moves
+  reject before prevention windows or card commitment; an old saved decline
+  returns the uncommitted move while preserving any existing Ornithopter escrow.
+  Simultaneous Ambassador/Terror priority remains a pending source question.
+  Focused rules and saved concurrency checks retain supported arrivals and
+  Karama's validation before payment. The reusable offline faction harness records
+  private traces, incomplete snapshots and source-bound reports. All six fresh
+  samples now finish; combined Advanced uses 1,303 actions and 35 JSON restores.
+  The exact earlier failed save also finishes after its recovered decline.
+  Guarded candidates still occur; broad verification is recorded in the checkpoint. Both existing
+  browser QA seats restored their hands and decisions after refresh. The server
+  was healthy and all 632 opening games and original seat records were preserved.
+
 - [Expansion-faction development games](EXPANSION_FACTIONS_PROTOTYPE.md) connect
   genuine setup for all seven expansion selections, using existing faction
   controls, all four AI profiles and saved continuation. Ecaz now places its six
@@ -12,8 +26,9 @@ Updated 13 September 2026. This is the short navigation dashboard; detailed evid
   an explicit saved per-lot decline for Richese offers; the actual exchange still
   awaits its replacement-custody ruling. Complete-game samples
   finish five of six games; combined Advanced reaches turn three, then stops
-  on the existing CHOAM movement/Ambassador arrival guard. That interaction is
-  the next integration gap. Setup evidence does not open public starts or
+  on the then-existing CHOAM movement/Ambassador arrival guard. The deferred
+  movement follow-up above repairs that saved deadlock while retaining the
+  unresolved simultaneous-arrival gate. Setup evidence does not open public starts or
   establish full faction compliance. Saved-game checks passed after a necessary
   restart for a stale server module cache.