Offer Semuta on clean mandatory battle batch

docs/CURRENT_STATUS.md

@@ -9,22 +9,21 @@ Expansion starts and full rules/publication acceptance remain gated.**
 The explicit [Semuta development preview](SEMUTA_SOURCE_UPDATE_20260907.md#30-september-2026--bounded-clean-discard-runtime)
 pauses clean public ordinary-card, paid Box, retired Ornithopter,
 private Distrans, final definite Truthtrance, movement-order Sapho,
-mandatory winner or later optional winner battle-card discards without
-pending rewards. The two winner batches are separate: a claim on the
-mandatory Hero can resume the winner's optional weapon choice once.
-Every seat sees a neutral offer regardless of hidden Semuta possession.
-A sole eligible card transfers on commitment; a simultaneous winner
-batch first requires public commitment, then reveals eligible faces
-only to the holder for one-card selection. Other cards remain in the
-pile and the resolved battle resumes once. The flight queue, committed
-arrival, private gift, answer history and Sapho order also resume
-without replay. Minimal legal AI, exact JSON/SQLite continuation and
-competing-room CAS are connected. Mixed arrivals, auction/battle
-Sapho, queued or promise-bound Truthtrance, loser/mixed-owner battle
-batches, pending battle rewards, other discard producers, full-hand
-ordering, normal Richese starts and deployed acceptance remain
-unfinished. Neutral passes and free-slot guard are product safety
-choices, not publisher rulings.
+initial mandatory battle, mandatory winner and optional winner
+discards without competing rewards. A mutual-traitor battle can
+discard two public cards with different former owners in one batch;
+a holder must commit before seeing the selectable fresh faces and
+may take only a card discarded by another player. Mandatory Hero
+cleanup and later optional weapon disposal remain separate events.
+Every seat sees a neutral offer regardless of hidden Semuta custody.
+Casualties, battle results, flight arrival, private gifts, answer
+history and Sapho order resume without replay. Minimal legal AI,
+exact JSON/SQLite continuation and competing-room CAS are connected.
+Mixed arrivals, auction/battle Sapho, queued or promise-bound
+Truthtrance, pending battle rewards and other discard producers,
+full-hand ordering, normal Richese starts and deployed acceptance
+remain unfinished. Neutral passes and free-slot guard are product
+safety choices, not publisher rulings.
 
 One [natural Advanced Moritani assassination](MORITANI_ASSASSINATE_LEADERS.md#29-september-2026--natural-revealed-card-game)
 now proceeds from genuine battle loss to a dead-target Traitor reveal,

docs/IMPLEMENTATION_STATUS.md

@@ -1,5 +1,45 @@
 # Dune implementation status
 
+## 30 September 2026 — Semuta at first mandatory battle discard
+
+The explicit Richese Semuta preview now pauses a clean public
+`battleResolved` discard batch after its combat result and physical
+used-card disposal but before casualty choices or winner cleanup.
+A normal battle's used loser defense is one fresh card; a mutual
+Traitor battle can produce one simultaneous pair owned by both
+combatants. Every seat sees the same neutral offer. The holder may
+commit and recover only a card discarded by another player; two
+eligible cards require owner-only inspection and exact one-card
+selection. Other cards remain on the pile. The result, losses and
+later mandatory/optional winner batches continue once, separately.
+
+Genuine setup exercises a normal battle's loser defense, all-seat
+decline into winner choice, and a two-owner mutual-Traitor batch
+with committed selection and physical census. An isolated migrated
+SQLite room recovers both the initial and owner-committed mixed batch
+without auto-advancing; authenticated selection changes one card
+without rewriting seats or doubling casualties. Pending battle
+rewards, other discard producers, full-hand ordering, normal Richese
+starts and deployed acceptance remain gated.
+
+Independent rules review found no scoped issue. Privacy/recovery
+review found that the initial `battleResolved` metadata did not bind
+the exact original card/owner pair, permitting a malformed saved
+batch to reassign a former owner or substitute an old discarded
+card. Failing-before/passing-after cases now bind the original
+mandatory entries in the resolved battle receipt and reject both
+corruptions before projection or claim; frames predating that receipt
+continue automatically rather than inventing an offer.
+
+Follow-up privacy/recovery review found no remaining scoped defect.
+A direct production-engine run resolved a mutual-Traitor battle,
+opened one two-owner public batch, committed Semuta, selected one
+opponent card and left the other physically discarded without a
+winner. Phone-width rules showed the three separate battle stages.
+`npm run check` passed typecheck, lint and 5,811/5,811 offline
+cases; `npm run build` and all 55 Vite development HTTP cases
+passed. No deployed revision was exercised.
+
 ## 30 September 2026 — Semuta between mandatory and optional winner cleanup
 
 The explicit Richese Semuta preview now pauses a clean public

docs/RICHESE_COMPONENTS.md

@@ -12,7 +12,7 @@ Audited 6 September 2026. The ten physical identities and their readable face in
 
 - Player controls show both original plans, exact undialed counts or honest possible totals, the mode choice and a complete internal guide. No victim/death confirmation is added. The card stays physically reserved until standard cleanup; stale events, duplicate requests and corrupted source custody fail before resources change. All four AI profiles use public force possibilities, legal low-dial plans and revealed leader/bounty information. They preserve leader value when Artillery suppresses bounty and leave traitor/explosion precedence intact.
 
-- Semuta Drug has an explicit bounded development preview for clean public ordinary-card, paid Box, retired Ornithopter, private Distrans, final definite Truthtrance, movement-order Sapho and separate mandatory/optional winner battle-card batches. A multi-card winner batch exposes candidates only after holder commitment and transfers one physical card. Private gifts, unresolved promises, reactive arrivals, auction/battle Sapho, loser/mixed-owner battle batches and pending battle rewards remain outside scope. Other producers, full-hand ordering and normal Richese starts remain unfinished. Mirror Weapon and Juice of Sapho have separate bounded paths, not complete combined-mode certification. Other unfinished systems, mobile acceptance, difficulty calibration and complete Advanced/expansion games still prevent goal completion. No start gate was removed.
+- Semuta Drug has an explicit bounded preview for clean public ordinary-card, paid Box, retired Ornithopter, private Distrans, final definite Truthtrance, movement-order Sapho and three distinct battle discard stages: initial mandatory combatants, mandatory winner and optional winner. A multi-card batch, including two-owner mutual-Traitor cleanup, exposes candidates only after holder commitment and transfers one other-player physical card. Private gifts, unresolved promises, reactive arrivals, auction/battle Sapho and pending battle rewards remain outside scope. Other producers, full-hand ordering and normal Richese starts are unfinished. Mirror Weapon and Juice of Sapho have separate bounded paths, not complete combined-mode certification. Other systems, mobile acceptance, difficulty calibration and complete Advanced/expansion games still prevent goal completion. No start gate was removed.
 
 The complete integrated validation checkpoint is recorded in [IMPLEMENTATION_STATUS.md](IMPLEMENTATION_STATUS.md).
 
@@ -113,10 +113,11 @@ explicitly opted-in Richese development profile. Neutral all-seat
 responses, physical one-card recovery, a provisional free-slot guard,
 minimal legal AI and saved continuation work after clean public
 ordinary-card, paid Box, retired Ornithopter, private Distrans, final
-definite Truthtrance, movement-order Sapho and separate mandatory
-and optional winner battle-card batches, including committed
-owner-only multi-card selection. Queued questions, promise-bound
-answers, reactive arrivals, auction/battle Sapho, loser or mixed-owner
-battle batches and pending battle rewards remain unconnected.
-Full-hand ordering, ten-card inventory, cache custody and public
-expansion start gate are unchanged.
+definite Truthtrance, movement-order Sapho and three separate battle
+card stages: initial mandatory combatants, mandatory winner and
+optional winner. Multi-owner batches require committed owner-only
+selection of one other-player card. Queued questions, promises,
+reactive arrivals, auction/battle Sapho, pending battle rewards and
+other semantic discard families remain unconnected. Full-hand
+ordering, ten-card inventory, cache custody and public expansion
+start gate are unchanged.

docs/SEMUTA_DISCARD_CONTINUATIONS.md

@@ -35,16 +35,17 @@ sources. The final forces and move counter are held in the existing
 bound flight frame; claim or decline retires that frame and logs the
 arrival once. Mixed entry reactions remain unsupported for Semuta.
 
-Mandatory winner cleanup now pauses at `winnerMandatoryDiscard`
-after any earlier loser/battle batch has retired; a Hero already in
-the public pile can be claimed before the exact optional winner
-choice resumes. If the winner then selects other played cards,
-their public disposal is a separate `battleCleanup` batch. Each
-stage has a neutral all-seat offer; only a committed holder inspects
-multiple eligible cards, selects one, and leaves the others in the
-pile. No battle award or card cost repeats. Moritani loser retention
-and pending Auditor, capture, tech, Face Dance or CHOAM rewards
-remain automatic without this reaction.
+Clean `battleResolved` now pauses the first public mandatory batch
+after combat result and actual card custody are committed but before
+casualty choices or winner follow-up. A mutual-Traitor outcome may
+place two cards from different former owners in that one batch;
+claimants can choose only a card from another player. Later mandatory
+winning-card cleanup uses a separate `winnerMandatoryDiscard` batch,
+and an optional winner selection uses a third `battleCleanup` batch.
+Every supported stage has a neutral all-seat offer; committed holders
+select one fresh card, leave the others in the pile and resume exactly
+once. Pending Auditor, capture, tech, Face Dance or CHOAM rewards
+remain automatic without Semuta.
 
 ## Main findings
 

docs/SEMUTA_SOURCE_UPDATE_20260907.md

@@ -62,33 +62,32 @@ Do not ask again about normal targets, forced-discard owner bookkeeping, simulta
 ## 30 September 2026 — bounded clean-discard runtime
 
 The explicit `semuta` development profile starts a fresh Richese roster
-without opening ordinary expansion starts. It interrupts **one public
-ordinary-card discard, the used Box after a paid Nullentropy search,
-either retirement of a played Ornithopter in a clean flight, the used
-Distrans after a private transfer, a final definite Truthtrance,
-movement-order Juice of Sapho, mandatory winning-card cleanup, or a
-later winner-selected battle-card batch without pending rewards**,
-provided the parent transaction is clean. Every seat sees a neutral
-fresh-discard opportunity regardless
-of hidden Semuta possession. An early-ended Ornithopter advances its
-saved movement queue; a completed flight has committed its forces
-and resumes its one arrival only without BG, Ecaz or Moritani entry
-reactions. Distrans's gift stays private with its recipient. The
-Truthtrance answer/history and Sapho first/last queue are bound.
-Mandatory winning cards form one public fresh batch after the
-previous loser cleanup, and any later optional winner selection is a
-separate batch. Neither a Semuta claim nor all-seat decline replays
-casualties or re-discards an already claimed card.
+without opening ordinary expansion starts. It interrupts **clean public
+ordinary-card, paid Box, retired Ornithopter, used Distrans, final
+Truthtrance, movement-order Sapho and battle discard batches**, provided
+the parent transaction has no competing response. Every seat sees a
+neutral fresh-discard opportunity regardless of hidden Semuta custody.
+An early-ended Ornithopter advances the saved queue; a completed
+flight resumes one committed arrival only without BG, Ecaz or
+Moritani entry reactions. Distrans's gift remains private with its
+recipient; Truthtrance answer/history and Sapho first/last order are
+already bound.
+
+The first battle mandatory batch may contain public cards belonging
+to both combatants. Its accepted result and card custody precede
+the neutral offer; casualty allocation and winner cleanup still
+follow it once. Mandatory winning-card cleanup, if present, is a
+separate later batch; optional winner-selected disposal is later
+again. No Semuta claim replays combat or combines these events.
 
 Each seat can Continue; only the canonical holder with a free hand
 slot and a card discarded by another player can commit. A sole
 eligible fresh card transfers automatically in that same action.
-Multiple eligible public winner cards instead open a committed,
-owner-only inspection and exact one-card selection; the other fresh
-cards stay in the pile and Semuta is discarded once. The saved
-ordinary effect or Box parent resumes once. No undisclosed face is
-projected before commitment. Other simultaneous discard producers
-remain unfinished.
+Multiple eligible public battle cards open a committed, owner-only
+inspection and exact one-card selection; the other cards remain in
+the pile and Semuta is discarded once. The saved ordinary effect or
+Box parent resumes once. No undisclosed face is projected before
+commitment. Other simultaneous discard producers remain unfinished.
 
 This neutral all-seat acknowledgement is a conservative **application
 policy**, not a newly discovered publisher timing rule. The explicit
@@ -96,12 +95,12 @@ free-slot requirement is a provisional safety guard, not the printed
 resolution of full-hand take-before-discard. Auction, CHOAM market,
 pending gifts, competing responses, completed Ornithopter arrivals
 with BG intrusion, Ecaz Ambassador or Moritani Terror, queued or
-promise-bound Truthtrance, auction/battle Sapho, loser or mixed-owner
-mandatory battle batches and pending battle rewards retain their
-automatic continuation; Semuta cannot claim those events yet.
-The completed Box's selected search card stays private and its paid
-shuffle is not repeated when another seat takes the used Box.
-No source ruling is inferred from this omission. The
+promise-bound Truthtrance, auction/battle Sapho, pending battle
+rewards and other typed producers retain their automatic continuation;
+Semuta cannot claim those events yet. The completed Box's selected
+search card stays private and its paid shuffle is not repeated
+when another seat takes the used Box. No source ruling is inferred
+from this omission. The
 separate [reaction privacy audit](SEMUTA_PRIVACY_REVIEW.md) explains why
 auto-closing only when nobody secretly holds the card would leak
 possession. The main game and public expansion gates remain closed.