A hash join plus a filter that needs the token and the fact together.
Produced when a per-condition guard reads a variable bound upstream — for
example, {:order, amt} when amt > t. :filter is arity 2:
(token_bindings, fact_bindings) -> boolean. It runs only on candidates
that already agree on :join_bind.