Play PAPER WINDOW with the shipped pregens; fix four silent defects

Ran the starter end to end. It closed, and it found four defects in what I shipped an
hour earlier — all in the scenario data, all silent.

R-247: the Borrowed Authority did not work. I wrote scope "operate", which is not one
of the five scope tiers; an unrecognised scope ranks 0 and every action came back
"impossible" with no error. The first scene of the starter is the Borrowed Authority
tutorial. Fixed, guarded in check-kits, and covered by a test that documents the
failure mode.

R-248: the contact subsystem was unreachable in the scenario built around it. The case
file carried a standing for the Returned Clerks and no GROUP ITEM; resolveContact
returns null without one, so READ, SIGNAL and OFFER did nothing. Groups are data now,
and a test asserts every standing on a shipped case file has a group behind it.

R-249: legs wrote `kindId` where resolveLegDialog reads `leg.kind`. It worked only
because the terrain text happens to begin with "Extraction".

Not a defect: phase four went Difficult because Resources hit 0 and destitution makes
every remaining phase Difficult. Best beat in the session.

All four phases failed and the case still closed — Containment 8 to 2, Resources 8 to
0 — which is what the scenario is built to survive. Two of six closing requirements
succeeded and the settlement still completed. The Cancellation Man opened with a
critical against a raised riot shield and went through 10 points of armour, teaching
the shield and graded-defence lessons in one roll.

Also documented: nobody on the starter team can aim the return, because only the Anchor
Officer trains Transposition. The extraction page now says to narrate it rather than
roll six dice that will all fail.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

docs/REVIEW_LOG.md

@@ -4941,3 +4941,73 @@ stable keys after import (raw ids do not survive one), the handouts come in
 player-visible and the GM text does not, and **phase one runs straight out of the box** —
 Nia leading the cordon on Tradecraft 53. Then everything imported was deleted again,
 which the pack does not notice.
+
+## PAPER WINDOW — played with the shipped pregens
+
+Ran the starter end to end with the six pregens exactly as they import. It closed, and
+it found four defects in what I had shipped an hour earlier — all four in the scenario
+data rather than the engine, and every one of them silent.
+
+**R-247. The Borrowed Authority did not work, and said nothing.** I wrote the
+credential's scope as `"operate"`, which is not one of the five scope tiers. An
+unrecognised scope ranks 0 — *nothing* — so `scopeStanceFor` returned "impossible" for
+a routine site inspection by a surveyor at a demolition site. No error, no warning: the
+credential was simply inert, and the first scene of the starter is the Borrowed
+Authority tutorial. Fixed to `"routine"`, guarded in check-kits, and covered by a test
+that asserts an unrecognised scope makes everything impossible so the failure mode is
+documented rather than rediscovered.
+
+**R-248. The contact subsystem was unreachable — in the scenario built around it.** I
+gave the case file a standing record for the Returned Clerks and no group *item*.
+`resolveContact` looks up the group and returns null without one, so READ, SIGNAL and
+OFFER did nothing at all. PAPER WINDOW's central scene is a three-stage negotiation with
+those clerks. The group is now data in `scenario-starter.mjs`, consumed by the builder,
+and a test asserts every standing on a shipped case file has a group behind it.
+
+**R-249. A phase kind written to the wrong field.** I wrote `kindId` on the legs;
+`resolveLegDialog` reads `leg.kind` and falls back to a regular expression on the terrain
+prose. It worked only because "Extraction — closing the register" happens to begin with
+the word. Rename a phase and the return clock stops moving.
+
+**And one that was not a defect.** Phase four resolved as Difficult when the scenario
+table says Average — because Resources had reached 0 and destitution makes every
+remaining phase Difficult. That is the rule working, and it was the best beat in the
+session: they ran out of supplies and the way home doubled in difficulty.
+
+### How it actually played
+
+The credential carried them in and then the stretch for an asbestos exclusion spent it
+to **Trust 0** — two hours bought, and nothing left for later. Phases one, two, three and
+four **all failed**, which the scenario is explicitly built to survive: Containment 8 → 2,
+Resources 8 → 0, Clearance 6 → 5, and the case still closed.
+
+The investigation split cleanly across four players and three of the four discoveries
+landed. Amira's READ turned up **both** taboos on one roll — Read the Room granting the
+extra fact — and Elin **criticalled on 01** for the desire. SIGNAL and OFFER at
+favourable took the clerks to **Standing 2**, which fired Evelyn's rewards automatically
+and put the clean settlement on the table.
+
+The Cancellation Man opened with a **critical on 01** against Callum, whose riot shield
+was raised and whose arm therefore had 10 points of armour. A critical ignores armour
+entirely: 10 through, Major Wound, 15 → 5. That is the shield lesson and the graded
+defence lesson in a single roll, in round one, without any prompting from me.
+
+Then the closing scene did the thing the scenario promises: **two of six requirements
+succeeded and the settlement still completed.** Nia's authority failed and spent the
+Clearance anyway; Callum's containment failed for a point; Elin certified them and is
+now personally responsible for reviewing all 317 cases; Owen's repair worked and took
+the last of the spare cells. Sennen's **special on 07** recovered the crown stamp with
+the procedure intact, using the +20% Evelyn had given him at Standing 2 — a reward
+granted by the contact engine, spent in the final scene. That chain is the whole design
+working unassisted.
+
+### One thing the starter needs saying out loud
+
+**Nobody on this team can aim the return.** Transposition is trained by exactly one
+posting in the register — the Anchor Officer — and none of the six has it, so all six
+roll the printed 1%. The rule that failure gets an agent home *near* the target and
+never strands them is what makes that survivable, but asking a GM to roll six dice that
+are all going to fail teaches nothing. The extraction page now says so: narrate it, roll
+only if somebody wants a clean arrival, and note at debrief that the department sent six
+people to a crossing and no anchor. That is the campaign rather than an oversight — but
+it is a deliberate choice a GM should be able to see, not a hole they fall into.