Allow replay of the recovered physical Hajr

Count one movement grant per accepted Hajr play after original paid Box recovery. Preserve physical card custody, Basic timing and fresh Advanced post-movement opportunities. Carry unused counts through Guild Cunning with counted declarations and signed final history while retaining legacy receipt compatibility.

Validation: frozen12-file102/102, types/lint/build and two original-action/rendered-table programmes; four minimal policies retain third moves in both modes. Real cache and normal purchases, paid shipment and Box2 recovery reuse the single original Hajr. Replay is an explicit source interpretation. Native Cunning replay has pure/related evidence; wider combinations, final assurance and deployed acceptance remain open. No saved-game, reset, restart or deployment operation.

docs/CURRENT_STATUS.md

@@ -16,6 +16,26 @@ open mode gates.
 
 
 ## Current checkpoint and work
+**Recovered Hajr replay — 18 October. Prototyped / Partial.** The deck contains
+one Hajr. Real paid Box recovery now permits playing that same held card again,
+counting one extra allowance per accepted use. Advanced needs a fresh completed
+movement; Basic retains broader timing. Legacy used markers/receipt bytes remain
+compatible, while new Cunning declarations/count snapshots preserve unused Hajr
+allowances without another ordinary move. Replay is an explicit interpretation.
+
+Two disjoint lanes plus owner integration/review pass frozen **12 files102/102**,
+types/lint/build and two original-action/rendered-table programmes. Actual cards
+and shipment use38 Basic/45 Advanced source actions plus seven continuations.
+The original sole-discard search pays2 and retrieves automatically; no fabricated
+copy or manual selection. Both finish three ordinary moves, with four legal
+policies in each mode. A historical Advanced Cunning case now earns Hajr before
+its stopped second shipment, and respects the resulting normal range.
+Native Cunning replay has pure/related regression evidence, not an original
+paid-Box Nexus programme. Wider combinations, full modes and final assurance
+remain open; no visual/browser/deployed acceptance, saved-room/reset/restart or
+deployment operation.
+[Source, counted protocol and proof](RICHESE_ORNITHOPTER_ENGINE_AUDIT.md#recovered-hajr-replay--18-october-2026).
+
 **Ornithopter / Hajr — 18 October. Prototyped / Partial.** New card uses replace
 one unused movement by the selected mode and retain the independent Hajr move.
 Prior ordinary moves stay spent; groups are distinct within the flight and may

docs/IMPLEMENTATION_STATUS.md

@@ -1,5 +1,25 @@
 # Dune implementation status
 
+## 18 October 2026 — Recovered physical Hajr replay
+
+The original inventory has one Hajr; genuine paid Box retrieval now allows that
+same physical card to grant another move when legally replayed. Counts preserve
+Basic timing and Advanced's fresh completed-movement opportunity. Cunning
+forfeits the ordinary slot while carrying counted unused grants; new v2 receipts
+and signed final counts retain old v1 compatibility. Replay remains an explicit
+composition interpretation, not a new publisher FAQ.
+
+Two exclusive lanes plus owner integration/review pass frozen12-file102/102,
+types/lint/build and two actual-source/rendered-table programmes. Actual cache/
+normal purchases, paid shipment and Box2 retrieval use38/45 source plus7 actions;
+one original Hajr finishes three moves. All four policies retain a third move in
+both modes. A historical Advanced Cunning case now earns its allowance at the
+proper movement and uses a legal post-city route; nullable search typing fixed.
+[Canonical source, exact proof and limits](RICHESE_ORNITHOPTER_ENGINE_AUDIT.md#recovered-hajr-replay--18-october-2026).
+Native Nexus replay has quote/regression rather than complete original-Box proof;
+other producers, full combinations/assurance/modes and deployed acceptance stay
+open. No saved-room/reset/restart/deployment operation.
+
 ## 18 October 2026 — Ornithopter and unused Hajr movement
 
 One unused normal/Hajr entitlement now supports either card mode without losing

docs/NEXUS_GUILD_CUNNING_RUNTIME.md

@@ -83,7 +83,19 @@ Truthtrance questions and fulfillment searches recognize the second shipment as
 
 ## Hajr and bot policy
 
-No ordinary movement follows the extra shipment. Only an unused Hajr move is available, and a Hajr move already consumed cannot create a third move. The source's exception retains the same active Guild player through the optional extra move. Native city ornithopter range still applies normally; combining this with the separate physical Ornithopter Treachery Card remains unavailable.
+No ordinary movement follows the extra shipment. Every remaining movement must
+come from an actually earned unused Hajr allowance. A consumed grant cannot be
+spent twice; a legally recovered and replayed physical Hajr adds a new grant.
+The same native Guild player retains that continuation. Native city range still
+applies normally; physical Ornithopter card composition remains unavailable.
+
+The [18 October replay checkpoint](RICHESE_ORNITHOPTER_ENGINE_AUDIT.md#recovered-hajr-replay--18-october-2026)
+adds counted v2 declarations and current/final count snapshots, retaining exact
+legacy v1 receipt compatibility. Remaining movement subtracts the original
+ordinary slot even when it was forgone. Advanced uses the supplied fresh
+post-movement play window; holding or recovering Hajr alone cannot open it.
+Count composition has focused pure and related native regression evidence;
+the original paid-Box replay programme itself is a non-Nexus table.
 
 The server supplies `hajrAvailable` independently of the displayed movement ceiling. [Ordinary card availability](../game/card-availability.ts) uses this permission during the Cunning continuation, avoiding a false second Hajr offer when a derived ceiling happens to equal one. Controls disable movement during the second-shipment step and explain the remaining Hajr allowance afterward.
 

docs/RICHESE_ORNITHOPTER_ENGINE_AUDIT.md

@@ -2,6 +2,69 @@
 
 Audit: 2026-09-06. Document-only source and engine review. The canonical component is `richese-ornithopter`; this is distinct from ordinary Arrakeen/Carthag ornithopter access and the later Ecaz discovery token. No runtime effect or complete expansion compliance is claimed here.
 
+## Recovered Hajr replay — 18 October 2026
+
+**Prototyped / Partial.** The earlier multiple-physical-Hajr boundary had an
+incorrect premise: the original inventory has only one Hajr. A real missing
+case is recovering that discarded card with the original paid
+[Nullentropy Box](NULLENTROPY_BOX_ENGINE_AUDIT.md) and playing it again.
+The supplied physical p39/logical p37 paragraph gives each Hajr play one extra
+normal move and immediate-after-Force-Movement timing, but establishes no
+once-per-turn cap. Under choose-recommended, a genuinely recovered held card
+may be played again for one further allowance. This replay interpretation is
+explicit; it is not a newly retrieved publisher FAQ or permission to duplicate
+the printed card. Basic retains broader timing; Advanced requires a fresh
+completed movement after the preceding Hajr consumed its opportunity.
+
+Actual accepted Hajr plays are counted separately from the unique legacy
+has-used marker. The physical card must be back in hand: repeating a consumed
+first-use ID before recovery, or after its second discard, grants nothing.
+The original Box pays two bank spice and retrieves the one eligible discard
+automatically when no selection is needed. Searching grants no movement or
+Advanced timing opportunity. Basic may replay after retrieval; Advanced's
+programme retrieves while one earned move remains, completes that movement,
+then plays the same Hajr at the fresh opportunity. Both finish three ordinary
+movements with one physical Hajr and one paid Box.
+
+The shared movement ceiling and owned control count accepted plays, preserving
+Ornithopter's separate completed-group credit. Ordinary/flight disposal binds
+the new count without altering legacy signatures when the field is absent.
+The count resets with the original turn/movement counters; old marker-only
+positions mean one play, without reconstructing saved history. Guild Cunning
+now carries counted unused Hajr allowances while forfeiting the ordinary slot.
+New declarations use v2 count receipts; legacy v1 boolean bytes stay valid.
+Signed current/final counts bound the native continuation after the second
+shipment and remain in completed history. Advanced Cunning now uses the same
+held-card/fresh-window timing. Physical Ornithopter/Cunning remains separate.
+
+Two exclusive fixture/pure lanes plus owner integration and bounded review pass
+frozen **12 files102/102**, types/lint/build and **two** original-action/
+actual-GameTable programmes. Real cache Box1, ordinary Hajr1 and paid three-counter
+desert shipment reach the source in38 Basic/45 Advanced actions; seven subsequent
+actions include first use, the original two-spice search, same-ID second use,
+three ordinary moves and actual turn ending. Advanced retains two originally
+shipped Sardaukar. Both sole-discard searches are automatic, with no fabricated
+second card or manual selection claim. Four minimal policies retain the third
+move in each mode (eight proposals); strategy/calibration is deferred.
+
+Pure cases additionally cover old receipt bytes, counted before/after grants,
+ordinary forfeiture, spent counters and invalid mixed formats. Related Cunning,
+Box, disposal and prior flight regressions pass. One historical Advanced Cunning
+case now earns Hajr after the real first move before carrying it through a
+stopped shipment; its later route respects lost city access. Fixture type
+feedback corrected a nullable private search reference. No printed number changed.
+
+Proof base `72e77d7f4d96a3eca5987eba5287cc36dea3e99c`, frozen tree
+`8c1122bd35446db71d09245dad128be1c8df440392c7d1ac7b0014fca3cadecc`;
+private reports/HTML are under
+`/home/quintine/.local/share/dune/checkpoints/20261018-hajr-replay/`.
+Cunning replay composition has pure/related regression evidence, not a genuine
+paid-Box native Nexus replay programme. Framework aliases/CSS stubs mean no
+visual/browser/deployed acceptance. Other recovery producers, advisor/card and
+wider module combinations, comprehensive assurance and full modes remain open.
+No saved room/database mutation, reset, restart or deployment. Earlier one-Hajr
+and multiple-copy descriptions below remain dated implementation history.
+
 ## Hajr and unused movement entitlements — 18 October 2026
 
 **Prototyped / Partial.** The photographed Ornithopter face supplies its two

docs/RULE_DECISIONS.md

@@ -873,7 +873,7 @@ These are unresolved in the cited records. Do not infer an answer from elapsed t
 
 | Boundary | Still unresolved | Existing record |
 | --- | --- | --- |
-| Ornithopter / Hajr | Standing choose-recommended provisionally replaces one unused ordinary/Hajr entitlement by range-three or two distinct normal groups, with no retroactive credit. A later Hajr may reuse card-moved forces. Advanced adopts supplied physical39/logical37 immediately-after-play timing; treating a completed card group as Force Movement and preserving its window through required arrivals are explicit composition choices. Basic retains broader face timing. Multiple physical Hajr stacking remains an existing unsupported boundary: the supplied paragraph establishes neither permission nor a once-per-turn prohibition. | [Source cutover and exact procedure](RICHESE_ORNITHOPTER_ENGINE_AUDIT.md#hajr-and-unused-movement-entitlements--18-october-2026) |
+| Ornithopter / Hajr | Standing choose-recommended provisionally replaces one unused ordinary/Hajr entitlement by range-three or two distinct normal groups, with no retroactive credit; a later Hajr may reuse those forces. Advanced adopts supplied physical39/logical37 immediately-after-play timing with explicit online/card-group interpretation; Basic retains broader face timing. The inventory has one physical Hajr, not several copies. A genuine paid Box retrieval now permits replaying that held card for another allowance because no once-per-turn cap is established. This is an explicit replay interpretation; other recovery producers and full combinations remain open. | [Original source cutover](RICHESE_ORNITHOPTER_ENGINE_AUDIT.md#hajr-and-unused-movement-entitlements--18-october-2026) · [Physical replay and counted Cunning](RICHESE_ORNITHOPTER_ENGINE_AUDIT.md#recovered-hajr-replay--18-october-2026) |
 | Reinforcements cost | The earlier all-outcome versus sole-Traitor-winner question remains unanswered. The bounded prototype provisionally charges on every revealed outcome, chooses normal reserves first and counts the transfer as battle losses. Same-plan Harass pays the original quote before returns; future returns cannot fund or change it. Native Advanced Occupy Stone/Mirror composition keeps the fee but ignores +2 normal score in physical-token comparison. These are product interpretations, not a new publisher ruling or user answer. Other profile/module gates remain; eligibility never depends on concealed Traitors. | [Source review](ECAZ_TREACHERY_RULES.md#14-september-reinforcements-cost-review) · [Combined policy](REINFORCEMENTS_RUNTIME.md#combined-utility-plan--16-october-2026) · [Stone composition](REINFORCEMENTS_RUNTIME.md#native-stone-composition--16-october-2026) |
 | Harass / Stone Burner | The earlier keep-gated versus compare-after-withdrawal question is unanswered. Standing choose-recommended provisionally compares counters left after successful withdrawal. Opposing Traitor cancels the return; original fixed Occupy commitment stays. Public preflight considers possible fixed Ecaz withdrawal without hidden custody. Clean Ix priority follows its separate explicitly provisional contract; new physical commitments do not remove other profile/module limits. This is implementation interpretation, not a new publisher ruling or user answer. | [Withdrawal](HARASS_WITHDRAW_RUNTIME.md#provisional-stone-burner-timing--16-october-2026) · [Clean Ix priority](MIRROR_WEAPON_ENGINE_AUDIT.md#clean-selected-ix-composition--16-october-2026) |
 | Stone mixed-force allocation timing | The older timing question remains unanswered by a source. Under 14 October choose-recommended, new original outcome-ambiguous Stone/Mirror battles provisionally commit each ambiguous side's undialed physical total after revealed modes/actual withdrawal and decisive Traitor/explosion branches. Storm-order owners choose privately; every original required value stays sealed until all commit. The eventual winner retains all legal typed casualty choices with the count. Ordinary/invariant and unstamped legacy frames keep their existing path. Publisher physical-count text and supplied Advanced physical12/logical10 casualty timing provide the numerical rules, not this online commitment convention. | [Source, versioned procedure and bounded proof](STONE_BURNER_ENGINE_AUDIT.md#outcome-changing-physical-totals--18-october-2026) |