Add authorized Storm Card inspection

Connect the six numeric reference faces, the existing private Fremen forecast and actual public reveals to a shared enlarged inspector. Create the structured public chronicle component only where beginStormTurn reveals the card. Weather Control and Ecological Testing Station may change effective movement but never rewrite the original receipt. No draw, movement, AI strategy or mode gate changes.

The face reader accepts only exact stormCard metadata with an integer value1 through6. Legacy text-only history still renders normally. Existing JSON saves preserve valid receipts within the normal250-entry chronicle; no card is inferred from a private forecast, current pending distance or old log text. Five new tests use genuine Advanced fixtures to verify forecast allowance/cancellation and privacy, public reveal, JSON/legacy continuation and original-versus-modified distances. The related reference suite also passes (17 focused cases total).

Independent privacy/provenance/UI review found no material findings. The initial check stopped at an accessibility lint rule; replacing the numeric group with a semantic figure resolved it, followed by a fresh final run and mobile recheck. Required types, lint, 4946 offline tests, production build and 46 HTTP tests pass on stable final source. Browser QA opens all six reference faces, uses keyboard Enter/Escape and checks settled modal focus/return. At390px the modal is359px wide and fits the viewport; Close is44px high. The viewport was reset. Screenshot capture remains unavailable, so full visual acceptance is not claimed. Live Advanced browser play and final manufactured-face/artwork verification remain open; fixture privacy checks and gallery controls are narrower evidence.

The existing server remained running. All 1337 original rooms, 2805 seats and existing recovery/entry/handover/delegation/migration rows remain unchanged; SQLite integrity and foreign keys pass. HTTP tests created only their own additional QA records. No database migration/reset, hourly automation, account-usage check or AI calibration. Standing automatic push authorization retained.

Private evidence: 20260921-storm-card-inspection.
Verified source tree: 3856e73f3cc3bb50003b6afda6ab4d08a513191c4e300e7742c2b5179a05cff1

docs/IMPLEMENTATION_STATUS.md

@@ -1,5 +1,17 @@
 # Dune implementation status
 
+## 21 September 2026 — Storm Card inspection
+
+The [Storm Card inspector](STORM_CARD_INSPECTION.md) connects six numeric reference
+faces, the existing private Fremen forecast and actual public reveal receipts in
+the chronicle. Inspection is read-only. Saved public records retain their original
+face after movement or Weather Control, separately from effective storm distance.
+Earlier text-only history remains valid; unknown component metadata fails closed.
+No AI strategy or rules mode changes. Focused projection/provenance checks,
+independent review, browser controls and final check/build/HTTP/preservation/Git
+evidence belong to the private checkpoint. Complete physical face/artwork and
+broader component acceptance remain unfinished.
+
 ## 21 September 2026 — Charity and Revival practice
 
 The [introduction](INTERACTIVE_INTRODUCTION.md) expands to eleven lessons and nine