Connect Truthtrance promises to printed Hajr and Ghola plays

docs/CURRENT_STATUS.md

@@ -16,6 +16,43 @@ open mode gates.
 
 
 ## Current checkpoint and work
+**Next: remaining Basic action families and native timing.**
+Continue broader card-play and owned battle-power declarations before Advanced
+and wider interactions. Prototype labels and final acceptance gates remain.
+
+**Truthtrance / printed Hajr and Ghola plays — 27 October. Prototyped / Partial.**
+Whole current-turn questions now include actual future printed Hajr/Ghola use,
+with existing AND/OR/No semantics and frozen facts. Hajr counts even when its
+extra move is unused and closes at own Movement end; Ghola closes at turn end.
+Earlier plays, disposal, alternative roles and recovery alone do not count.
+Ordinary Revival and Ghola share real Tanks/purse but retain separate receipts
+and quotas. A known Double opening closes payments without closing Ghola.
+
+Runtime-first feedback fixes shared Revival resources, Advanced Box forecasts
+that preserved a spent Hajr window, and guide metadata reaching strict native
+card controls. The supported Advanced source47 actually moves once and plays
+Hajr before the answer; Box2/recovery must precede a second real move and replay.
+The Basic Richese source's Semuta composition remains excluded. No played
+cards, purse, casualties, timing window or progress are installed in a source.
+
+Evidence covers **22 files,278/278** across source-bound runs: V5 retains234
+passing cases in twenty unchanged files; V6 reruns both repaired files44/44.
+The only intervening changes fix two test oracles: guidance wording and the
+actual one-spice Tleilaxu Ghola income. A per-file manifest verifies unchanged
+production, fixtures and runtime script. Final types/lint/build pass. Thirty-six
+new cases include16 native/controlled-token checks; four profiles maintain only
+minimal legal participation. Seven runtime paths pass with33 GameTable SSR
+renders,7 actual answer callbacks and17 exact native guide callbacks.
+
+Proof/manifest: `/home/quintine/.local/share/dune/checkpoints/20261027-truth-printed-proof-v6/`;
+reused journeys/HTML: adjacent `20261027-truth-printed-runtime-v5/`.
+Original Hajr19/Advanced23, Ghola forces53, leader102, typed-source58,
+Advanced replay47 and whole-No force42 prefixes derive from actual arrays.
+No HTTP/storage boundary changed; no database, reset/deletion, restart or
+deployed operation is performed. Wider card/power families, Semuta compositions
+and final browser/deployed/recovery/privacy/custody acceptance remain open.
+[Contract and scope](TRUTHTRANCE_TURN_ACTIONS.md#printed-hajr-and-ghola-plays--27-october-2026).
+
 **Ordinary-auction ten-second bidding — 27 October. Prototyped / Partial.**
 New ordinary lots in Basic and Advanced now use trusted server time. Silence
 follows the actual native pass; when a binding Truthtrance answer forbids it,

docs/IMPLEMENTATION_STATUS.md

@@ -1,5 +1,40 @@
 # Dune implementation status
 
+## 27 October 2026 — Future printed Hajr and Ghola plays
+
+**Truthtrance / printed Hajr and Ghola plays — 27 October. Prototyped / Partial.**
+Whole current-turn questions now include actual future printed Hajr/Ghola use,
+with existing AND/OR/No semantics and frozen facts. Hajr counts even when its
+extra move is unused and closes at own Movement end; Ghola closes at turn end.
+Earlier plays, disposal, alternative roles and recovery alone do not count.
+Ordinary Revival and Ghola share real Tanks/purse but retain separate receipts
+and quotas. A known Double opening closes payments without closing Ghola.
+
+Runtime-first feedback fixes shared Revival resources, Advanced Box forecasts
+that preserved a spent Hajr window, and guide metadata reaching strict native
+card controls. The supported Advanced source47 actually moves once and plays
+Hajr before the answer; Box2/recovery must precede a second real move and replay.
+The Basic Richese source's Semuta composition remains excluded. No played
+cards, purse, casualties, timing window or progress are installed in a source.
+
+Evidence covers **22 files,278/278** across source-bound runs: V5 retains234
+passing cases in twenty unchanged files; V6 reruns both repaired files44/44.
+The only intervening changes fix two test oracles: guidance wording and the
+actual one-spice Tleilaxu Ghola income. A per-file manifest verifies unchanged
+production, fixtures and runtime script. Final types/lint/build pass. Thirty-six
+new cases include16 native/controlled-token checks; four profiles maintain only
+minimal legal participation. Seven runtime paths pass with33 GameTable SSR
+renders,7 actual answer callbacks and17 exact native guide callbacks.
+
+Proof/manifest: `/home/quintine/.local/share/dune/checkpoints/20261027-truth-printed-proof-v6/`;
+reused journeys/HTML: adjacent `20261027-truth-printed-runtime-v5/`.
+Original Hajr19/Advanced23, Ghola forces53, leader102, typed-source58,
+Advanced replay47 and whole-No force42 prefixes derive from actual arrays.
+No HTTP/storage boundary changed; no database, reset/deletion, restart or
+deployed operation is performed. Wider card/power families, Semuta compositions
+and final browser/deployed/recovery/privacy/custody acceptance remain open.
+[Contract and scope](TRUTHTRANCE_TURN_ACTIONS.md#printed-hajr-and-ghola-plays--27-october-2026).
+
 ## 27 October 2026 — Ordinary-auction ten-second deadline
 
 **Ordinary-auction ten-second bidding — 27 October. Prototyped / Partial.**

docs/TRUTHTRANCE_TURN_ACTIONS.md

@@ -295,3 +295,73 @@ correlations and final rules/recovery/privacy/custody acceptance remain. Full
 AI strategy and calibration stay deferred. Native mode/module preview fences
 remain; this batch performs no database/save/server/reset/restart/deployment
 operation and does not certify any complete mode.
+
+## Printed Hajr and Ghola plays — 27 October 2026
+
+**Prototyped / Partial.** Add one atomic named-effect leaf:
+`{kind:'cardPlay',effect:'hajr'|'ghola'}`. It asks about an actual accepted use in
+that printed role after this answer during the current turn. Hajr counts even
+if its extra move remains unused; Ghola card use is distinct from ordinary
+force or leader Revival. Earlier plays, disposals, sales, role conversions and
+recovery alone do not count. A legitimate later physical replay can count.
+This is an explicit composition of the existing current-turn Truth authority
+and native card contracts, not a new publisher per-card promise ruling.
+
+Per-answer optional private stages retain played/closed booleans only. Native
+private counters supply detached witness baselines; earlier counts are never
+installed as future answer progress. Old raw records remain valid without the
+new stages. Original raw conditions and aggregate status remain the only own
+history; physical card IDs and selected completion branches stay private.
+
+Hajr's remaining opportunity closes at the owner's actual Movement end; Ghola
+continues through the full current turn. Whole alternatives retain payments
+and other native deadlines. A known Inflation Double opening closes payments
+before Mentat without closing a remaining Ghola alternative; Ready quotes only
+that payment closure. Full turn expiry still closes both families.
+Basic Hajr uses its original own-turn timing;
+Advanced must earn its actual immediate window through real completed movement
+and required arrival decisions. Recovery supplies no extra timing privilege.
+
+Detached native witnesses share the real purse, Tanks, card cost, leader and
+movement allowance with ordinary Revival, payments, transport and current plan
+constraints. No branch is stored in the real ledger. Known owned Box routes
+can recover a real eligible card; unknown future draws/gifts/casualties are not
+invented. Broader future preparation/funding and module combinations remain.
+The current Basic Richese public replay source includes Semuta and remains
+outside this whole-turn composition's existing envelope; recovery evidence
+uses an original supported Advanced source instead of removing that marker.
+Its actual first move and first Hajr precede the answer. The future paid Box
+must precede a second real movement before Hajr can be replayed: a voluntary
+Box play closes any earlier immediate Advanced window, including in detached
+forecasts. Exact guide metadata is checked before passing the original native
+action to strict card controls; it never becomes a Box selection field.
+Native accepted printed plays, rather than their later income effects, record
+receipts. Own post-cost completion is checked before foreign income/discard
+responses can mask voluntary evasion. Human controls and four minimal profiles
+receive the same exact native packet. All existing mode, final assurance and
+AI strategy/calibration gates remain open.
+
+The frozen source-bound proof covers22 related files and278 passing cases:
+V5's234 cases in twenty unchanged files plus V6's44/44 in the two repaired
+files. Six counter, ten aggregate helper, four control and sixteen native/
+controlled-token cases add36 checks. Final types/lint/build pass. Seven native
+journeys provide33 complete GameTable SSR renders,7 actual answer callbacks
+and17 exact guide callbacks. They exercise Basic Hajr/frozen facts/payment,
+Advanced actual first movement, Ghola/ordinary shared Tanks and purse, Hidar,
+Advanced typed source selection, paid Advanced replay and whole No through
+Mentat. The forced Sardaukar return is separately covered by the native test;
+a minimal guide may choose a legal normal force instead.
+
+The initial runtime expectation incorrectly demanded an elite guide selection;
+its native packet can legally choose a normal force. The original Basic replay
+source is rejected by the existing Semuta fence, so the supported Advanced
+chronology is used. Targeted feedback repairs the real shared-Tanks, early
+payment-closure, Box-window forecast and strict native packet issues. Type/lint
+feedback is repaired. The final two test-oracle fixes change no production or
+fixture behavior; the per-file manifest preserves the passing runtime evidence.
+
+Proof/manifest: `/home/quintine/.local/share/dune/checkpoints/20261027-truth-printed-proof-v6/`;
+reused journeys/HTML: adjacent `20261027-truth-printed-runtime-v5/`.
+This is local engine/SSR/control evidence. No HTTP/storage boundary changes,
+server restart, reset/deletion or deployed operation occurs. Full browser,
+deployed, recovery/privacy/custody and wider-combination acceptance remain.