Implement Advanced Ecaz Loyalty with public card inspection

Before genuine Advanced Ecaz Traitor dealing, randomly set aside one of the five
native Ecaz cards face up for the game. Store its owner and exact identity once;
exclude it from the initial deck, Tleilaxu Face Dancer setup and Nexus replacement
universes. Do not change leader custody or add choices, payment or Karama windows.
Absent markers preserve older already-dealt saves without taking held cards away.
Validate owner, timing and distinct physical custody before actions, normalization
and projection. Expose a detached public card identity, never private deck order.

Show the named card, portrait and enlarged Traitor inspection above the table.
A dedicated Loyalty context explains public set-aside custody and cannot-call
rules; browser review caught and fixed the generic held-Traitor guidance.
Add internal help, checklist, shared Advanced faction text and source documentation.
The official page8 requirement and page16 noKarama entry support the effect;
relative pre-Traitor prediction/skill sequencing is an explicit composition.
Gated Skills/Ecaz and Moritani assassination/Ecaz are not certified.

Twelve new cases plus related regressions cover candidate selection, immutable
invalid-state rejection,2..6 genuine deals, Basic/noEcaz, completed Tleilaxu setup,
Harkonnen/Tleilaxu Nexus draws, full physical census, detached public views, all4
legal AI setups, JSON continuation, legacy custody and public rendering.
Independent review found no material issue after genuine setup/legacy test fixes
and the focused inspector correction.50 related focused cases pass. A mistyped
filename filter failed closed before the corrected union ran successfully.
Types, lint, all 5012 offline tests, production build and 49 HTTP tests
pass on stable source. Earlier type/lint findings were corrected before this run.

Six genuine faction-game samples finish with no rejected actions and repeated
JSON restoration: CHOAM Basic1054/Advanced225 actions, Ecaz Basic91/Advanced245,
combined Basic476/Advanced704. Existing physical Treachery/force custody checks
pass; focused Loyalty tests cover expansion Traitor census. These bounded legal
samples are not strength calibration or complete expansion acceptance.

Browser QA created a fresh Ecaz/Easy Harkonnen ready lobby and initialized its
Advanced setup before dealing using backup and CAS. Bindikk Narvi was public
before choices and remained excluded through actual human Traitor/force setup,
Storm and refresh. The saved human Traitor is Beast Rabban; a pointer action just
after viewport reset differed from its intended Feyd target, so exact-target
pointer acceptance across viewport changes is not claimed. Ordinary source
bindings remain name/ID-specific. One hand card,12spice,14reserves and the pending
Storm dial restore; both public projections agree and saved seat records match.
The Loyalty inspector shows correct card-specific guidance; Escape restores focus.
At390px its panel has no horizontal overflow,16px text and44/48px controls; the
expanded scroll body fits342px. Internal help opens its complete checklist topic.
Normal viewport restored. Screenshot capture timed out; full visual, long-inspector
keyboard and broader module acceptance remain open.

All 1539 pre-existing rooms, 3259 human seat records and
auxiliary rows remain unchanged. SQLite integrity and foreign keys pass.
Only isolated QA/HTTP fixtures add rooms. No server restart, database reset,
migration, recurring automation, AI strategy change or mode/publication gate change.

Private evidence: 20260921-gameplay-review.
Verified source tree: 881bf1912665350086d80be664d479a1b2724146da6ccc9576790c07e0449ee6

docs/COMPONENT_INVENTORY.md

@@ -1,5 +1,11 @@
 # Component inventory and verification ledger
 
+**Ecaz Loyalty, 21 September 2026:** one existing native Traitor Card now has a
+separate face-up public location in new Advanced Ecaz setup. Its canonical
+identity and portrait use the enlarged Traitor inspector; it is excluded from
+all subsequent draw inventories without changing the corresponding leader disc.
+Old dealt games remain unchanged. See [source and evidence](ECAZ_LOYALTY.md).
+
 **Faction sheets, 21 September 2026:** every table player has an enlarged public
 faction guide, with Basic/Advanced preview and an internal twelve-faction gallery.
 Shared text and bundled Homeworld artwork preserve public identity; no private

docs/CURRENT_STATUS.md

@@ -6,29 +6,29 @@ gated.** Prototypes do not open completion or publication gates.
 
 ## Current checkpoint and work
 
-Latest delivered checkpoint: `e3cfd82`, [private-hand browsing](HAND_BROWSING.md).
-Types, lint, **4,996 offline tests** and production build passed. Search, category
-filters, all sort orders, an auction acquisition under an active filter, keyboard
-scrolling, internal help, tab reset and refresh passed browser checks. All 1,538
-opening rooms, 3,258 seats and auxiliary rows stayed unchanged; the isolated QA
-game brought the baseline to 1,539 rooms and 3,259 human seat records. Screenshot
-capture timed out; full visual acceptance remains open. The healthy server was
-reused. Prior checkpoints include `14a7800` for draw counts, `537da4a` for force
-inspection and `2b071a4` for Nexus offers.
+Latest delivered checkpoint: `c2f24fc`, [public faction sheets](FACTION_SHEETS.md).
+Types, lint, **5,000 offline tests** and production build passed. Public table
+inspection, all twelve gallery entries, Basic/Advanced preview, keyboard and
+mobile layouts, internal help and refresh passed bounded browser checks. All
+1,539 opening rooms, 3,259 human seats and auxiliary rows stayed unchanged.
+Screenshot capture timed out; full visual acceptance remains open. The healthy
+server was reused. Prior checkpoints include `e3cfd82` for hand browsing,
+`14a7800` for draw counts and `537da4a` for force inspection.
 
-Current work: [public faction sheets](FACTION_SHEETS.md) adds a table inspector
-and twelve-faction internal gallery with Basic/Advanced preview. Shared guidance
-fills Richese’s missing overview, centralizes Ecaz/Moritani and corrects stale
-CHOAM/Ecaz summaries from existing contracts. Public ID and mode are the only
-inspector inputs; no private state or game action is involved. Focused rendering
-checks accompany independent review, browser verification and saved preservation.
-Full printed-sheet text and all remaining rules still require completion.
+Current work: [Ecaz Loyalty](ECAZ_LOYALTY.md) selects one native Traitor Card
+before genuine Advanced dealing, keeps it publicly set aside through setup and
+Nexus replacement draws, and adds enlarged inspection and internal guidance.
+Focused custody, public-view, all-profile legal setup and JSON checks accompany
+independent review, browser checks, final check/build/HTTP and saved preservation.
+Legacy dealt games remain unchanged; combined Skills/assassination rosters and
+complete faction acceptance remain gated.
 The separate Bureaucrat/Emperor gift question is pending.
 The `8f7a62c` policy checkpoint removed usage checks/cutoffs and deferred AI
 refinement until feature completion, followed by three adjacent 75% targets.
 
 A bounded remaining-effect audit found that the reviewed faction/Nexus candidates
-still cross recorded pending rulings. Continue independent features rather than
+cross recorded pending rulings, with the independent Loyalty setup omission now
+being connected. Continue independent features rather than
 inventing answers. The [platform audit](AUTOPILOT.md#platform-audit-20-september-2026)
 found no supported Sites scheduler or Durable Object provisioning contract.
 Durable unattended bot resumption remains blocked on that capability; current
@@ -89,7 +89,7 @@ These links define bounded working behavior, not complete module certification.
 | Area | Current connected work and evidence |
 | --- | --- |
 | Base/Advanced setup | [Genuine setup](ADVANCED_SETUP_TEST_SEAM.md), [Advanced study](AI_ADVANCED_SETUP_CALIBRATION_20260907.md), [Fremen cancellation](FREMEN_MOVEMENT_KARAMA_RULES.md), [Atreides full-plan audit](ATREIDES_FULL_PLAN_TIMING.md). Earlier Basic-then-flip fixtures do not establish current setup coverage. |
-| Expansion factions | [Ixians/Tleilaxu](IX_PROTOTYPE.md) and [all seven faction selections](EXPANSION_FACTIONS_PROTOTYPE.md): genuine setup, Ecaz six-force placement, separate optional card variants, private controls and saved per-lot Ixian/Richese decline. Actual special-lot exchange remains pending. |
+| Expansion factions | [Ixians/Tleilaxu](IX_PROTOTYPE.md) and [all seven faction selections](EXPANSION_FACTIONS_PROTOTYPE.md): genuine setup, Ecaz six-force placement and [Advanced Loyalty](ECAZ_LOYALTY.md), separate optional card variants, private controls and saved per-lot Ixian/Richese decline. Actual special-lot exchange remains pending. |
 | Leader Skills | [Common lifecycle](LEADER_SKILLS_RUNTIME.md), [known skilled capture](LEADER_SKILLS_CAPTURE.md), [Mentat question preview](MENTAT_QUESTION.md), [Bureaucrat payments](BUREAUCRAT_PAYMENTS.md), five battle disciplines, [Planetologist](PLANETOLOGIST_RULES.md), [Suk Graduate](SUK_GRADUATE_RULES.md), [Rihani and other battle effects](LEADER_BATTLE_EFFECTS.md), [Smuggler shipment](SMUGGLER_SHIPMENT.md), [No-Field](SMUGGLER_NO_FIELD.md) and [battle collection](SMUGGLER_BATTLE.md), [Sandmaster routes](SANDMASTER_MOVEMENT.md) and [worm rides](SANDMASTER_WORM.md), [Banker spending](SPICE_BANKER_RUNTIME.md), [Diplomat defense](DIPLOMAT_DEFENSE.md). Remaining bands and combinations are explicit in those contracts. |
 | Discoveries | [Prototype](DISCOVERY_PROTOTYPE.md): genuine setup, Great Maker, seven cards/eight tokens, inspection and stash rewards, nested sites, signed later free entry, carried Ornithopter, sole Cistern, bounded Jacurutu income, Testing Station and Shrine. Orgiz and contested/mixed cases remain pending. |
 | Nexus/Homeworlds | [Decision index](RULE_DECISIONS.md) links each integrated faction family, native/borrowed effects, physical custody, private choices, payments and transport. [CHOAM Collection trade](NEXUS_CHOAM_SECRET_ALLY.md) and [Emperor extra revival](NEXUS_EMPEROR_SECRET_ALLY_RUNTIME.md) are connected; CHOAM inspection and Emperor purchase remain pending. A source audit or helper alone is not a completed effect. |

docs/ECAZ_LOYALTY.md

@@ -0,0 +1,69 @@
+# Ecaz Loyalty
+
+Connected Advanced development prototype, 21 September 2026. This does not
+certify the complete faction, open public Advanced starts or change AI strategy.
+
+## Authority and interpretation
+
+The official [Ecaz & Moritani rulebook, printed page 8](https://www.gf9games.com/dune/wp-content/uploads/EcazMoritani-Rulebook-LOWRES.pdf#page=8)
+requires a random native Ecaz Traitor Card to be set aside publicly before the
+initial Traitor draw and excluded for the rest of the game. The
+[page 16 Karama table](https://www.gf9games.com/dune/wp-content/uploads/EcazMoritani-Rulebook-LOWRES.pdf#page=16)
+lists no Karama effect for Loyalty. Five ordinary Ecaz cards are candidates;
+Duke Vidal has no Traitor Card. This is a card movement, not a change to leader
+ownership, availability, death or revival. Independent source review confirmed
+the indexed official rulebook text; direct PDF retrieval failed in this audit.
+
+The implementation resolves this automatic step immediately before the existing
+initial shuffle and deal. Bene Gesserit prediction and any supported pre-Traitor
+skill setup therefore precede it. That relative sequencing is an implementation
+composition of the printed before-draw requirement, not a separately printed
+ordering ruling. No optional choice, payment, Karama window or acknowledgment
+is introduced.
+
+## State and physical custody
+
+`game/ecaz-loyalty.ts` owns the selector, deck exclusion and saved invariant.
+New genuine Advanced setup with native Ecaz records the player and a pending
+card, then chooses exactly once before initial dealing. The selected physical
+card stays in this separate public location. Its identity is removed from initial
+Traitor dealing, the Tleilaxu setup reconstruction and Nexus replacement
+universes. Later Face Dancer cycling uses the remaining physical cards.
+
+Validation rejects invalid owners, Basic/lobby markers, late pending draws and
+duplicated cards across the reserve, held Traitors, setup choices, Face Dancers
+or recorded Moritani assassination cards. Action, normalization and view
+boundaries validate before mutating or exposing state. JSON continuation keeps
+the selection and does not replay the notice. A save without the marker is
+legacy state: no already-dealt card is retroactively taken away.
+
+The player view returns only a detached public player/card pair once chosen.
+Every viewer sees the same identity. The table renders the existing enlarged
+Traitor inspector and an internal help link; no private hand or deck order is
+added to this public component. The automatic chronicle entry uses the existing
+Ecaz action notice.
+
+## Evidence and limits
+
+- `tests/ecaz-loyalty-engine.test.ts`: genuine two-through-six-player deals,
+  prediction ordering, Basic/no-Ecaz absence, completed Harkonnen/Tleilaxu setup,
+  all four legal AI profiles, JSON continuation and completed legacy saves.
+- `tests/ecaz-loyalty.test.tsx`: random candidate bins, physical inventory,
+  immutable invalid-state rejection, public rendering and internal inspection.
+- `tests/nexus-traitor-engine.test.ts`: actual Harkonnen and Tleilaxu Nexus
+  replacement draws keep the same excluded card and full physical census.
+- Existing expansion setup and Nexus fixtures count the separately held card
+  instead of treating it as a loss or reconstructing it into the deck.
+
+Leader Skills plus Ecaz and the Moritani assassination preview plus Ecaz remain
+outside their currently supported combined rosters. Compatible code does not
+establish combined-game acceptance. The no-Ecaz Leader Skills regression checks
+only that existing setup is unchanged. Broader card/leader effects retain their
+own guards and pending rulings.
+
+Private source-bound check/build/HTTP logs, six faction-game samples, browser
+inspection and saved-game preservation are recorded outside the checkout under
+`20260921-gameplay-review`. The commit message records actual final results.
+The browser uses a newly created ready Ecaz/Harkonnen lobby initialized through
+the genuine Advanced audit seam before any draw; it does not retrofit a game
+that has already started. Existing rooms and saved seats are preserved.

docs/IMPLEMENTATION_STATUS.md

@@ -1,5 +1,16 @@
 # Dune implementation status
 
+## 21 September 2026 — Advanced Ecaz Loyalty
+
+Genuine Advanced Ecaz setup now randomly sets one native Traitor Card aside face
+up before dealing. A persisted public identity, enlarged inspector and automatic
+notice connect to initial setup, Tleilaxu Face Dancers and Nexus replacements.
+Physical census and invalid-state checks preserve its separate custody; older
+already-dealt games stay unchanged. [Ecaz Loyalty](ECAZ_LOYALTY.md) records official
+sources, sequencing interpretation, focused tests and combined-module limits.
+Independent review accompanies private check/build/HTTP, genuine faction samples,
+browser and saved-preservation evidence. AI strategy and release gates remain unchanged.
+
 ## 21 September 2026 — public faction-sheet inspection
 
 Every table player now has a public faction inspector and the internal guide

docs/RULE_DECISIONS.md

@@ -6,6 +6,7 @@ Updated 14 September 2026. This is the authoritative navigation index for existi
 
 | Topic | Decision to preserve | Detailed authority and evidence |
 | --- | --- | --- |
+| Ecaz Loyalty | Before initial Traitor dealing, randomly set aside one native Ecaz card face up permanently. No Karama effect; no change to its leader disc. Resolving after existing pre-Traitor setup is an explicit sequencing composition. Older dealt saves are not retrofitted; combined Skills/assassination rosters remain gated. | [Official sources and runtime](ECAZ_LOYALTY.md) |
 | Sapho battle order | First/last reorders remaining Battle-phase choosers at clean boundaries. Phase priority persists through aftermath; actual legal pairs determine eligibility. Separating the chooser from physical attacker/tie advantage is an explicit implementation interpretation of the card's distinct alternatives, not a dedicated FAQ ruling. Last does not prevent others from choosing the holder as an opponent. | [Runtime scope and source interpretation](SAPHO_BATTLE_ORDER.md) |
 | Harass & Withdraw | Either slot but neither category; private Prescience answers null. Return uniquely determined own undialed physical forces before weapon losses, canceled by an opposing successful Traitor. Mandatory after-use discard overrides winner retention. Explosion ordering and own-Traitor disposal are explicit timing/specificity inferences, consistent with the recorded Planetologist precedent. | [Runtime and sources](HARASS_WITHDRAW_RUNTIME.md) |
 | Expansion-faction setup | Selecting Ecaz/Moritani factions does not select their independent three-card variant. Ordinary decks contain 33/35/47 cards; Richese's ten-card cache stays separate. Ecaz allocates six total forces within Imperial Basin sectors 9–11, retaining fourteen reserves. Flexible sector allocation is the literal printed territory constraint; Fremen→Ecaz→Advanced BG order is an implementation inference, while Moritani-last is printed. | [Source and profile contract](EXPANSION_FACTIONS_PROTOTYPE.md) |