A ceiling that pins rather than ends

Climbing made a sixteen bit height count down past nought and round to
65535, so a lander that kept going came back through the bottom and hit
the ground FROM ABOVE. Two thousand pixels of climb, which a full tank
reaches easily.

Pinned instead, and told so in the window. Leaving upward is RECOVERABLE -
gravity is always there and a lander with fuel can always come back - so
ending the run would punish a state the player can fly out of. What kills
you out here is running dry a long way from the ground, which is a death
somebody flew into rather than one a boundary handed them.

TWO DIFFERENT LINES, and both were got wrong before they were got right.
The warning covers being AT the ceiling or above it: compared against the
ceiling itself, a pinned lander read as back inside the world the next
frame and the warning was written and wiped sixty times a second, so it
never appeared at all. The pin covers being STRICTLY above it: including
the ceiling dragged the height back every frame and the lander could never
descend, which is a lid nobody can leave and worse than the wrap.

And only the climb is spent, never the fall. Zeroing the speed outright
pinned it there for ever - gravity adds once a tick and a clamp running
every frame wiped the pull nine times out of ten.

The orbit check is gone, and the reason is in video.sh. Every window where
the difference showed turned out to be a few frames wide: hold the
thruster and both landers are pinned with their climbs spent, ease off and
both land and freeze. A version of it passed against one disk and failed
against another, which is a check measuring the boot time rather than the
physics. Orbit is verified by measurement and said to be so, rather than
left looking tested.

cosmosLanderDry wants seventy million cycles now instead of forty: it
spends the whole tank at the ceiling before it falls the length of the
world.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E2JrLzFvuFX9fgi1LDRjrW

Tests/manifest

@@ -1053,9 +1053,14 @@ cosmosLanderCrash    | CosmOS/Source/cosmos.asm           | run      | -
 # it - and an empty tank is not an ending, it is a lander that is still flying and can no
 # longer do anything about where.
 #
+# Seventy million cycles, and it was forty. A ceiling arrived: holding the thruster now pins
+# the lander sixty four pixels above the screen instead of sending it off for ever, so it
+# spends the whole tank up there and only then falls the length of the world. The ending is
+# the same and it takes longer to arrive at.
+#
 # Which is what says the fuel is real. A lander that could hold Up for ever would land every
 # time, and the whole economy this is the first half of would have nothing to buy.
-cosmosLanderDry      | CosmOS/Source/cosmos.asm           | run      | -                  | 40000000 | disks/cosmos.img | lander.keys | landerBurn.pad
+cosmosLanderDry      | CosmOS/Source/cosmos.asm           | run      | -                  | 70000000 | disks/cosmos.img | lander.keys | landerBurn.pad
 # ---- And the thing that says whether a controller is being seen at all ----
 #
 # Three states look identical from inside a game that is not responding: a pad the front end