Connect native paired E1 Bureaucrat funding

docs/BUREAUCRAT_PAYMENTS.md

@@ -93,14 +93,14 @@ Allied funding is evaluated per actual payer, not by adding different payers'
 shares to create the five-spice trigger. A three-plus-three payment, or
 four-plus-three, has no eligible payer and proceeds through original funding,
 payment, card/force commitment and recipient income without a Bureaucrat offer.
-In supported classic, E2 and E3 profiles without Homeworlds, individually
+In supported classic, E1, E2 and E3 profiles without Homeworlds, individually
 qualifying allied-funded auction and shipment receipts now offer one optional
 redirection:
 five-plus-three, three-plus-five, five-plus-five and fully ally-funded five.
 The receipt loses exactly two, never two per contributing payer. A share paid
 by the trainer or recipient cannot qualify, but does not mask a different
-eligible payer. Qualifying E1 funding and Homeworld allied/split-recipient
-composition retain their separate integration boundaries.
+eligible payer. Homeworld allied/split-recipient composition retains its
+separate integration boundary.
 Independent Karama shipments paid entirely to the Bank bypass player-income
 guards. A successful use remains tied to the physical card's turn and phase,
 including same-phase ownership changes; that accounting is an implementation
@@ -269,6 +269,50 @@ Atreides12 unchanged, one use). Browser errors are empty. Artifact outside Git:
 `/tmp/dune-e3-bureaucrat-3227.json`. Local rule/control proof only; no
 deployed, recovery or full-mode claim.
 
+## Native paired E1 receipts — 13 October 2026
+
+`tests/fixture-bureaucrat-e1-funding.ts` uses the original paired E1 roster
+Ixians/Tleilaxu + classics with skills; a classic seat (Atreides, or Harkonnen
+in the five-seat revival roster) genuinely trains Bureaucrat. Real Storm,
+Mentat, conserved worm, real alliance and real closing draws are reused from the
+existing paired Ix fixture; only the native all14 shuffle order and original
+unplayed card custody are scoped.
+
+Before this slice paired E1 was absent from Bureaucrat mode support, so a funded
+auction or shipment rejected at the mode guard
+('Bureaucrat with other optional modules is still being integrated.'),
+byte-identical after a real pledge. A paid revival produced no offer and no
+error: `stampBureaucratPayment` early-returns when mode support is false, and
+the revival path never calls the contributor check. Both gates now admit the
+no-Homeworlds paired E1 Nexus profile and nothing broader: single-native E1,
+preview overlays, multi-expansion and Homeworld allied funding stay excluded.
+
+Paid Tleilaxu revival is a genuine qualifying source: the source is stamped from
+the payer's actual `revival.cost` (not the combined receipt), so a separate
+one-spice free-revival award is excluded. Source kind is `revival`, phase 4,
+single payer, seated Tleilaxu payee. Axlotl accrual is a separate deferred token;
+Face Dance has no player-to-player payment; foreign-ghola acquisition is
+Tleilaxu-paid and yields no payer income. None of these are new blockers.
+
+Forty-nine consumer cases cover both modes: auction and shipment 5+3/3+5/5+5/
+fully donor-funded five, decline/redirect, sub-five nonpooling, owner/payee
+exclusion without masking an eligible payer, public gross/payee with payer null
+and no shares, stale/cross-actor rejection, four minimal bots, one physical use
+per phase, a single-payer bribe regression, and the revival cases above
+(qualifying price, below-five no-offer, Karama-canceled no-offer). The Guild's
+genuine Nexus Guild Cunning card is exercised: a Guild-authored shipment costs
+the bank and has no third-party payer, so it yields no receipt; Guild Secret Ally
+is unreachable because that offer requires a game without a Guild faction.
+Recorded, not fabricated.
+
+Two actual390px GameTable flows: Basic allied shipment5+3 redirects2 (Guild5→11,
+Harkonnen10→5 with eight reserves at Habbanya17, Ixians10→7, one use) and Basic
+paid revival (Atreides10→4 for cost6, Tleilaxu5→10 = paid6 + separate free award1
+− 2, one use). The private revival prompt shows the payer only to the owner.
+Browser errors are empty apart from the known Vite optimizer abort for
+`next_image.js`. Artifact outside Git: `/tmp/dune-e1-bureaucrat-3228.json`.
+Local rule/control proof only; no deployed, recovery or full-mode claim.
+
 ## Saved choices and verification
 
 Only the skill owner may redirect or allow the current payment. The saved event

docs/CURRENT_STATUS.md

@@ -29,6 +29,27 @@ optional skill bands, combinations and public expansion starts remain open.
 Rules implementation continues; comprehensive assurance and administration
 remain deferred until all rules are implemented.
 
+**Bureaucrat / native paired E1 funding — 13 October.**
+Original paired E1 (Ixians/Tleilaxu + classics) with skills now admits
+qualifying allied ordinary-auction (Emperor), Guild-shipment and paid Tleilaxu
+revival receipts without Homeworlds. A classic seat genuinely trains Bureaucrat;
+the existing genuine paired-Ix setup supplies real Storm/Mentat/worm/alliance
+and native closing draws. Before this slice both families rejected at the mode
+guard after a real pledge; a paid revival silently produced no offer (mode
+support false). Both gates now admit the no-Homeworlds paired E1 Nexus profile
+only: single-native E1, preview overlays, multi-expansion and Homeworld funding
+stay excluded. Paid revival is stamped from the payer's actual cost, so the
+separate one-spice free award is excluded; Axlotl is a separate token, Face
+Dance has no payment, and foreign-ghola acquisition is Tleilaxu-paid. Forty-nine
+consumer cases cover both modes, 5+3/3+5/5+5/fully donor-funded five,
+decline/redirect, sub-five nonpooling, owner/payee exclusion, public gross/payee
+with payer null, stale/cross-actor, four bots, bribe regression, one use per
+phase and the revival cases. Two actual390px flows redirect2: Basic shipment5+3
+(Guild5→11, Harkonnen10→5 with eight reserves at Habbanya17, Ixians10→7) and
+Basic paid revival (Atreides10→4 for cost6, Tleilaxu5→10 = paid6 + free award1
+− 2). Artifact: `/tmp/dune-e1-bureaucrat-3228.json`. Frozen union + types/lint/
+build pass. No deployed, save/recovery or full-mode claim follows.
+
 **Bureaucrat / native paired E3 funding — 13 October.**
 Original paired E3 roster Ecaz/Moritani/Guild/Atreides/Emperor with skills now
 admits qualifying allied ordinary-auction (Emperor) and Guild-shipment receipts

docs/IMPLEMENTATION_STATUS.md

@@ -1,5 +1,47 @@
 # Dune implementation status
 
+## 13 October 2026 — native paired E1 Bureaucrat funding
+
+Before this slice the no-Homeworlds paired E1 Nexus profile was absent from
+Bureaucrat mode support, so a funded auction or shipment rejected at the mode
+guard ('Bureaucrat with other optional modules is still being integrated.'),
+byte-identical after a real pledge. A genuine paid revival produced no offer and
+no error: stampBureaucratPayment early-returns when mode support is false and the
+revival path never calls the contributor check. Both gates now admit the paired
+E1 Nexus profile only; single-native E1, preview overlays, multi-expansion and
+Homeworld allied funding stay excluded.
+
+A read-only review confirmed no revival-source change is needed: the source is
+stamped from the payer's actual revival.cost, so the separate one-spice
+free-revival award is excluded; the source is phase 4, single-payer, seated
+Tleilaxu. Axlotl accrual is a separate deferred token; Face Dance has no
+player-to-player payment; foreign-ghola acquisition is Tleilaxu-paid and yields
+no payer income.
+
+The new fixture reuses the genuine paired-Ix setup (real Storm, Mentat,
+conserved worm, real alliance, native closing draws) and scopes only the native
+all14 shuffle order and original unplayed card custody. A classic seat genuinely
+trains Bureaucrat. Forty-nine consumer cases pass across both modes: auction and
+shipment 5+3/3+5/5+5/fully donor-funded five, decline/redirect, sub-five
+nonpooling, owner/payee exclusion without masking an eligible payer, public
+gross/payee with payer null and no shares, stale/cross-actor rejection, four
+minimal bots, one physical use per phase, a single-payer bribe regression, and
+the revival cases (qualifying price, below-five no-offer, Karama-canceled
+no-offer). The genuine Guild Nexus card is exercised: a Guild-authored shipment
+costs the bank and has no third-party payer, so it yields no receipt; Guild
+Secret Ally is unreachable because that offer requires a game without a Guild
+faction. Recorded, not fabricated.
+
+Two actual390px GameTable flows: Basic allied shipment5+3 redirects2 (Guild5→11,
+Harkonnen10→5 with eight reserves committed at Habbanya17, Ixians10→7, one use)
+and Basic paid revival (Atreides10→4 for cost6, Tleilaxu5→10 = paid6 + separate
+free award1 − 2, one use; the private prompt shows the payer only to the owner).
+Browser errors are empty apart from the known Vite optimizer abort for
+next_image.js. Artifact outside Git `/tmp/dune-e1-bureaucrat-3228.json`. Frozen
+union + types/lint/build pass with unchanged build warnings. No source rule,
+strategy, Homeworld funding, public-start, save/deployed or full-mode claim is
+opened by this bounded proof.
+
 ## 13 October 2026 — native paired E3 Bureaucrat funding
 
 The paired E3 Nexus skill profile was already admitted to Bureaucrat mode

docs/RULE_DECISIONS.md

@@ -400,7 +400,7 @@ dedicated retrieved worked FAQs. [Contract and remaining limits](HOMEWORLD_OCCUP
 | Smuggler shipping | Optional free companion is included in the actual total; apply Guild rounding to the reduced priced count. Ordinary Fremen reserves are on planet. The officially permitted owned No-Field plus a separate free force is now prototyped at the unchanged one-marker price. Legacy unstamped ordinary declarations keep their quoted full price. | [Ordinary contract](SMUGGLER_SHIPMENT.md), [No-Field combination](SMUGGLER_NO_FIELD.md) |
 | Sandmaster movement | One optional board spice per distinct entered territory; source-only repositioning earns none. Per-movement Hajr reset is a documented grammatical inference. Canceled moves earn nothing. Native Fremen worm rides and physical Fremen Ambassador relocations collect optionally at the destination before arrival reactions, without an invented intermediate route. Owned one-pile-per-territory allocation now covers ground, direct destinations and native HMS relocation; sector allocation remains provisional and concealed No-Field movement stays separate. | [Ground/direct/HMS relocation](SANDMASTER_MOVEMENT.md), [worm rides](SANDMASTER_WORM.md) |
 | Diplomat defense | A committed Worthless copies the opponent's canonical printed defensive role: base/Ix Shield/Snooper, hybrid, defensive Weirding/Chemistry or sealed Portable. Named combat distinctions remain. Copying the used role, not activation or own-slot prerequisites, is a visibly qualified first version. Reveal-before-traitor timing and mandatory disposal remain implementation interpretations; existing base-only battle windows are not reopened. Late/mirror/numeric modifications remain separate. | [Source and connected prototype](DIPLOMAT_DEFENSE.md) |
-| Bureaucrat payments | Once per phase, optionally divert two when one third-party payer pays at least five; payer cost is unchanged. Different below-five allied shares never pool. Supported classic/E2/E3 no-Homeworlds ordinary and Richese-source auctions/shipment funding, including a fully qualifying ally, offer one gross-receipt redirection; private shares and selected qualifying payer remain withheld. Owner/payee contributions cannot qualify but do not mask a different eligible payer. Bribes trigger at transfer to the shield, not later collection. Existing Guild/Emperor income follows Karama allowance as an outcome-based inference; canceled gross creates no offer/use. Richese uses its original seller-credit callback, not an invented income cancellation. Qualifying E1 funding, Homeworld split recipients and remaining payment families need further integration. | [Source and connected boundary](BUREAUCRAT_PAYMENTS.md) |
+| Bureaucrat payments | Once per phase, optionally divert two when one third-party payer pays at least five; payer cost is unchanged. Different below-five allied shares never pool. Supported classic/E1/E2/E3 no-Homeworlds ordinary, Richese-source and Guild auctions/shipment funding, including a fully qualifying ally, offer one gross-receipt redirection; private shares and selected qualifying payer remain withheld. Owner/payee contributions cannot qualify but do not mask a different eligible payer. Bribes trigger at transfer to the shield, not later collection. Existing Guild/Emperor/revival income follows Karama allowance as an outcome-based inference; canceled gross creates no offer/use. Richese uses its original seller-credit callback, not an invented income cancellation. Homeworld split recipients and remaining payment families need further integration. | [Source and connected boundary](BUREAUCRAT_PAYMENTS.md) |
 | Leader battle effects | Rihani normal peek and reshuffle precede a separate committed optional draw; ordering is an explicit printed-order inference. Unused excludes actual calls, not mere disclosure. Mentat/Bureaucrat change scores; Sandmaster adds board spice. Owned multi-pile Smuggler debits and Sandmaster victory placement are connected under provisional allocation policies; modifier and exceptional Face Dancer composition remain separate. | [Source contract and prototype](LEADER_BATTLE_EFFECTS.md), [Smuggler allocation](SMUGGLER_BATTLE.md) |
 | Source and readiness | Separate published rules, explicit implementation choices and unfinished interpretations; Advanced/expansion gates stay closed. | [Base/Advanced audit](BASE_ADVANCED_READINESS_20260907.md), [checklist](../game/reference.ts) |
 | Setup and Fremen movement | Preserve source-ordered setup and the distinct declared-movement cancellation; do not recreate fixed historical gaps. | [Setup contract](ADVANCED_SETUP_TEST_SEAM.md), [Fremen Karama](FREMEN_MOVEMENT_KARAMA_RULES.md) |