Dune/docs/HARASS_WITHDRAW_RUNTIME.md

Harass & Withdraw development prototype

Updated 14 September 2026. This connects the physical card to battle plans, private inspections, force returns, controls, AI and saved continuation. It does not complete the independent three-card variant or open public mode gates.

Authority and interpretation

The Ecaz card audit records the inspected physical face, designer walkthrough and publisher rules. The GF9 Ecaz & Moritani rulebook, printed pp. 11 and 16, establishes the slot/category distinction, mandatory after-use disposal and the restriction to the card user's undialed forces. The designer walkthrough at 9:11 and physical close-up at 4:28 establish reveal timing, opponent-Traitor cancellation, ordinary leader death, Face Dancer protection for returned forces and the own-Homeworld prohibition.

Two implementation inferences are explicit:

• Withdrawal precedes weapon/explosion losses because it acts during wheel reveal. Execution waits atomically for Traitor declarations so a successful opposing call cancels the return without reversing a previous resource change. No retrieved publisher FAQ directly answers the explosion combination.
• Discard the card after use even when its owner wins through a Traitor call. The later card-specific instruction overrides ordinary winner retention, using the same recorded precedence as Planetologist. This is a specificity inference, not a dedicated Harass FAQ.

Planetologist's existing inspection answers remain unchanged. Ecaz's explicit instruction to report no weapon/defense is not silently extended to other slot substitutions.

Connected behavior

Use the existing independent Ecaz card development setup. All three cards enter the physical deck before genuine Basic or Advanced setup; selecting Ecaz alone does not enable this variant. The owner may place Harass in either card slot. It supplies no weapon attack or defense, cannot occupy both slots, and cannot supply the actual opposite category needed by Chemistry or Weirding Way's alternate role. Ordinary leader and Voice requirements remain in force.

Atreides receives a category-null answer without learning the physical card's identity. The owner can retain a slot-only card after that answer. The sealed plan still contains its exact ID. Complete-plan inspection reveals the actual physical plan; Truthtrance's existing literal slot-occupancy promises keep their meaning. An empty-category answer is not a promise that the physical slot is empty.

The shared physical quote validates dialed counters from casualtyOptions, then returns the undialed normal and elite counters to their owner's reserves. The leader resolves normally. An opponent's successful Traitor call, including mutual calls, cancels withdrawal. Returned reserves are outside subsequent board losses and Face Dancer replacement. Harass is discarded once and excluded from ordinary winner retention and Moritani ally retention.

Both selectors enforce the complete pair in either selection order. The private guide explains unique returns or the later revealed allocation choice. The physical allocation follow-up connects typed and sector selection after reveal, with exact committed winner losses. All four AI profiles use the same physical quote and category-aware inspection comparison; the card adds no fictitious weapon or defense value. Stronger profiles value saved forces when expecting defeat and discourage use when expecting to win. This is a legal strategy path, not strength calibration.

Current boundaries

• Basic and Advanced now support explicit ordinary/elite and sector allocation after reveal. Unique returns are automatic; previously valid legacy battles retain unique-only derivation. See the allocation contract.
• Additional optional modules remain gated, including Homeworlds, Nexus, Leader Skills, Tech Tokens, Stronghold Cards and Discoveries. This includes the printed own-Homeworld prohibition without claiming other Homeworld battles are already implemented for this card.
• Richese card-family configurations remain gated because Stone Burner may compare original or post-withdrawal undialed forces, which can reverse the winner. A user question has been sent; no answer is assumed. The guard uses public configuration, never Stone Burner's hidden custody. CHOAM without Richese remains eligible. This is a development boundary, not a printed ban.
• Co-present armies remain guarded in Basic or without the supported Advanced Occupy profile. The combined-army follow-up returns only actual card-user forces: original fixed Ecaz commitment or the selected ally's native variable commitment. It never returns the other ally or recomputes mandatory fixed losses from the diminished board.
• Bounded Reinforcements can appear in the opposing Battle Plan in classic-faction Basic/Advanced games. The two cards cannot share one player's plan; their relative same-plan timing remains unresolved. Both prototypes retain their separate provisional cost and outcome interpretations.

Verification and preservation

Focused rules, controls, AI and authenticated recovery suites record the exact supported paths. Fixtures explicitly distinguish genuine variant setup from later conserved battle staging. Independent review precedes final complete-game samples and browser checks. Final commands and source fingerprints are retained in the private checkpoint report and Git message; a sample does not certify every faction or expansion combination.

The opening baseline contains 936 rooms and 1,959 seats. Every room and original seat/recovery/entry/handover record survived the reported outage unchanged; SQLite integrity and foreign-key checks passed. Browser refresh restored the existing test seat. The server was reused without a reset or scheduled restart.

The isolated browser room used a genuine three-seat Emperor/Atreides/Tleilaxu setup, followed by an explicitly conserved battle fixture. Actual controls verified full-card inspection, the category-None answer, Defense-first selection without a duplicate Harass or alternate Chemistry weapon, a one-force plan, public reveal and the owner’s traitor decline. Four forces returned; one went to the Tanks and the leader died. Opposing decisions completed through the engine, including a genuine Face Dancer replacement of the other army. Refresh restored the collection-phase state, exact private views and the single discarded Harass. The private script’s first comparison failed only because its expected version omitted the HTTP layer’s increment; the preserved failure was corrected without changing production code or overwriting a game.