Connect compound Truthtrance shipment promises

Shipment-only AND/OR questions now evaluate one eventual reserve shipment or skip as a whole. Yes to AND requires every leaf, Yes to OR requires one, and No negates the complete expression. Separate answered questions remain jointly binding. The completion search considers all destination branches and owned preparation paths. Release and fulfillment apply once to the aggregate promise, and legacy flat records retain their shape.

The two-condition browser builder, grouped question/history and respondent guidance, all four AI answer policies and saved continuation are connected. Nested expressions have explicit software size limits. Existing active-unused-shipment, Basic/no-Guild Advanced and module gates remain; mixed present/future predicates and unresolved rule questions are unchanged. Independent source, privacy and persistence review found no blocker.

Types, lint, 4815 offline tests, build and 43 HTTP tests pass with stable source. The first typecheck caught an omitted flat-only guidance consumer and a legacy test requiring type narrowing; grouped guidance and an actual promised-state regression fix them. SQLite Basic/Advanced tests verify private reauthentication, second-OR-branch fulfillment, zero-write rejected actions, legal No skip and duplicate CAS with one result.

Two fixed genuine Basic/Advanced mixed-profile games complete in 1534 accepted actions, 41 periodic private JSON restores and 0 rejected candidates. Each uses one scenario-directed compound question from an actual held Truthtrance at a real legal opportunity; AI supplies all responses and other actions. Exact card, force, typed-elite and post-setup traitor custody are checked. Initial private harness runs needed correct immutable setup configuration and full-game auction/Fedaykin inventory accounting; original failed traces remain private, and the final same-seed runs pass. The full sample tree is reconstructed exactly by replacing only the three later UI/test edits; all 219 game source files match the samples. No game logic changed after those runs.

Browser QA used genuine base initialization before conserved turn-two staging. The human asked twenty to Carthag OR four to Arrakeen; the AI answered Yes and shipped four to the second destination. Public grouped history survived refresh. All 6 accepted actions replay exactly, with one discarded Truthtrance, one fulfilled aggregate promise, private JSON views and original seat custody intact. This remains bounded prototype evidence, not complete Truthtrance or mode certification.

All 1004 opening games and original seat/recovery records are preserved (1038 rooms after checks), including all 1005 rooms present immediately before checks. SQLite integrity and foreign-key checks pass. The healthy server was reused without restart, reset or recurring automation.

Verified source tree: 1b24372fbe34e24db56e8f095c25744eeefb27581f2bc6cced2fb752f5bdcb94

docs/CURRENT_STATUS.md

@@ -6,13 +6,14 @@ gated.** Prototypes do not open completion or publication gates.
 
 ## Current checkpoint and work
 
-Latest verified checkpoint: `0450156`, [Harass & Withdraw](HARASS_WITHDRAW_RUNTIME.md).
-Types, lint, **4,776 offline tests**, build and **43 HTTP tests** passed.
-Eight fixed Basic/Advanced six-seat samples finished in 9,956 actions with no
-rejected candidates, three Harass withdrawals and 266 periodic save/restore
-checks. Browser controls, private restoration and the final engine replay passed.
-All 937 games present before verification and their original seat/recovery
-records were preserved, with 970 rooms after HTTP checks.
+Latest verified checkpoint: `cb691e1`, [Sapho Battle-phase order](SAPHO_BATTLE_ORDER.md).
+Types, lint, **4,792 offline tests**, build and **43 HTTP tests** passed.
+Six fixed genuine Basic/Advanced faction samples finished in 3,672 accepted actions
+with 97 periodic save/restore checks. They retained 82 rejected candidates at
+existing guarded arrival combinations and completed through legal fallbacks.
+Browser battle ordering, tie preservation and private refresh/replay passed.
+All 970 opening games and their original seat/recovery records were preserved,
+with 1,004 rooms after checks.
 Earlier evidence remains in the [implementation history](IMPLEMENTATION_STATUS.md).
 
 The connected [Harass & Withdraw prototype](HARASS_WITHDRAW_RUNTIME.md) supports either
@@ -30,12 +31,10 @@ and foreign-key checks passed, and refresh restored the test seat. No restart,
 database reset or recurring automation was needed. Exact verification, source
 fingerprints and delivery are recorded in the private report and Git message.
 
-Current work: [Sapho Battle-phase order](SAPHO_BATTLE_ORDER.md) connects first/last
-remaining battle choices without rewriting storm order or tie roles. The browser completed a reordered
-battle and restored its next choice; independent review and an actual Basic/Advanced
-Face Dance continuation passed. Reinforcements
-remains disabled while its reserve-cost question is pending; see the
-[latest source review](ECAZ_TREACHERY_RULES.md#14-september-reinforcements-cost-review).
+Current work: [compound shipment promises](COMPOUND_SHIPMENT_PROMISES.md) connects
+shipment-only AND/OR questions, whole-expression enforcement, usable controls,
+legal AI answers and saved continuation. Reinforcements and the other recorded
+material rule questions remain pending.
 
 ## Authoritative navigation