Ops hardening plus two rules gaps close (rev 13)

Operational: auto-reboot for kernel patches (09:30 UTC), Caddy access
logs at /var/lib/caddy (self-rotating; the sandbox denies /var/log),
logrotate for the backup log, a restore drill proving a Spaces snapshot
boots 56/56 rooms clean, the about page's plain sentence on permanent
recording, and /wizwar-pulse to read it all weekly.

Rules: safes now smash — attacks aimed at the box accumulate on it and
the fifteenth point bursts it (widening, ungated). And SLOW DEATH's
bites pause for a victim holding an ABSORB — the card named by the FAQ,
not Absorb Spell — each soaking exactly one point, rev-gated at 13 with
the instant-bite legacy pinned. Bots weigh the soak against their life.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015RCWSTnb1KYTPyL4GmhGnF

packages/engine/test/stones.test.ts

@@ -147,6 +147,45 @@ describe("slow death", () => {
     expect(sustainedOn(state, defender, "slow-death").length).toBe(1);
   });
 
+  it("an absorb in hand pauses the bites; each soaks one point (rev 13)", () => {
+    let { state } = newGame();
+    state = toRound2(state);
+    const { attacker, defender } = faceOff(state);
+    const sd = giveCard(state, attacker, "slow-death");
+    state = castAt(state, attacker, defender, sd);
+    state = must(state, attacker, { type: "endTurn", draw: 0 });
+    const d = state.players.find((p) => p.id === defender)!;
+    const toDiscard = d.hand.slice(0, 2).map((c) => c.instanceId);
+    state = must(state, defender, { type: "discard", instanceIds: toDiscard });
+    giveCard(state, defender, "absorb", "AB", 0);
+    state = must(state, defender, { type: "endTurn", draw: 2 });
+    // Two bites hang; nobody else may act.
+    expect(state.slowDeathPending).toEqual({ playerId: defender, points: 2 });
+    expect(applyCommand(state, attacker, { type: "endTurn", draw: 0 }).ok).toBe(false);
+    // One absorb soaks one point; the other lands.
+    state = must(state, defender, { type: "slowDeathChoice", absorbInstanceId: "absorb#AB" });
+    expect(state.slowDeathPending).toBeNull();
+    expect(state.players.find((p) => p.id === defender)!.life).toBe(14);
+    expect(state.players.find((p) => p.id === defender)!.hand.some((c) => c.cardId === "absorb")).toBe(false);
+  });
+
+  it("without an absorb the bites land instantly, as in older decks", () => {
+    let { state } = createGame({ playerIds: ["alice", "bob"], seed: 42, sets: ["basic"], deckRev: 12 });
+    state = toRound2(state);
+    const { attacker, defender } = faceOff(state);
+    const sd = giveCard(state, attacker, "slow-death");
+    state = castAt(state, attacker, defender, sd);
+    state = must(state, attacker, { type: "endTurn", draw: 0 });
+    const d = state.players.find((p) => p.id === defender)!;
+    giveCard(state, defender, "absorb", "AB", 0);
+    const toDiscard = d.hand.filter((c) => c.cardId !== "absorb").slice(0, 2).map((c) => c.instanceId);
+    state = must(state, defender, { type: "discard", instanceIds: toDiscard });
+    state = must(state, defender, { type: "endTurn", draw: 2 });
+    // Rev 12: even with an absorb in hand, the old decks bite instantly.
+    expect(state.slowDeathPending ?? null).toBeNull();
+    expect(state.players.find((p) => p.id === defender)!.life).toBe(13);
+  });
+
   it("a reverse at the casting turns the curse: a point gained per draw (rev 11)", () => {
     let { state } = newGame();
     state = toRound2(state);