Connect occupied Tupile capacity and original cleanup

docs/CURRENT_STATUS.md

@@ -17,6 +17,39 @@ open mode gates.
 
 ## Current checkpoint and work
 
+**Occupied Tupile slots / normal-limit cleanup — bounded Development Verified:**
+fresh native CHOAM/Homeworld entries alone initialize the source marker/ledger;
+older occupation profiles remain unchanged. One validated slot per occupier/
+reciprocal ally feeds every existing capacity consumer. Advanced last departure
+and ally removal queue original holder-selected excess discards; Basic unknown
+expiry freezes its proved ledger/flags and blocks rather than guesses cleanup.
+Known occupation suppresses new low queries; proved expiry restores eligible
+contact without clearing historical private answers or lifetime usage.
+
+Source19/affected143 including guide cases, types/lint/build, all4 legal policies
+and actual native programs pass. Original Harkonnen buys its ninth card without
+a tenth bonus; real Tupile→Junction return1 queues both old-holder debts and
+preserves remaining movement, cards, typed forces and one price. Completed
+automatic invoices are accepted by the program helper; Basic genuinely observed
+continuous qualification retains one lease, unlike an unobserved turn boundary.
+
+Ten genuine samples on unchanged52ccb930 tree: allfive six-seat Advanced finish
+4,339/4,358/114 accepted/attempts/JSON; four of five five-seat Basic finish
+2,430/2,449/64, allfive total2,527/2,547/66. Atreides5Basic retains original
+seed20263432 contested Southern guard. Natural samples containzero owed cleanup
+choices, so changed-path proof is the original native program/human return.
+
+Original backed-up **D54MY8JJ v18/setup**, real turn-two Guild/Harkonnen Nexus
+alliance and labelled conserved post-Charity positions retain actors/deck/clock.
+Human390px Harkonnen8/9 buys5 atv26 (12→7) and holds9/9. Actual Guild last visitor
+returns1 to Junction for1 (6→5), then original Cheap Hero5→4 and ally Jubba9→8
+settle atv30 without another move/price. v31 ends only Guild’s original turn.
+A separate conserved native1/Fremen1 contact permits **v33** private3 spice/
+0 weapons; refresh keeps lifetime use and reveals no rival panel. No root390px
+overflow, reset, public activation or played-game upgrade. [Exact contract/evidence](HOMEWORLD_TUPILE_INTELLIGENCE_RUNTIME.md#occupied-tupile-slots-and-original-cleanup--5-october-2026).
+Full Homeworlds/overlays, Basic/CHOAM rulings, exceptional Duke, assurance and
+deployed acceptance remain open.
+
 **Occupied Homeworld economics / Bidding — bounded Development Verified:**
 original fresh2..6 Basic/Advanced setup and selected decks; Advanced uses the
 authorized supplied p22 sole qualification retained until its last force leaves,

docs/HOMEWORLD_OCCUPATION_RULES.md

@@ -42,8 +42,9 @@ occupied card selection is not authority to invent a sale after cancellation.
 Actual Collection percentage credits feed the original once-per-phase Giedi
 spice hook. Private producer proofs and suspended invoices stay server-private.
 Original receipt-free occupation captures may admit a new source lazily; no past
-percentage is back-awarded. Public starts, played-game conversion, other modules,
-occupied Tupile capacity/cleanup and exceptional Duke custody remain separate.
+percentage is back-awarded. A separate fresh marker now connects
+[occupied Tupile slots/cleanup and low-query restoration](HOMEWORLD_TUPILE_INTELLIGENCE_RUNTIME.md#occupied-tupile-slots-and-original-cleanup--5-october-2026).
+Public starts, played-game conversion, other modules and exceptional Duke custody remain separate.
 See [percentage receipts](../game/homeworld-occupied-percentage.ts),
 [Bidding authority](../game/homeworld-occupied-bidding.ts) and
 [original consumer programs](../tests/homeworld-occupied-producers-engine.test.ts).
@@ -216,6 +217,8 @@ The following is an implementation design derived from those timing requirements
 
 A public qualification record needs no hand, Traitor, Face Dancer or sealed-plan data. Malformed initialized evidence must fail validation; a legacy save lacking history cannot be claimed to prove that no earlier qualifier existed. Resolving entitlement by scanning current armies alone would discard the distinction the publisher created.
 
+<a id="questions-the-retrieved-sources-do-not-settle"></a>
+
 ## Basic source questions and historical publisher gaps
 
 | Concrete situation | Missing decision; do not silently substitute a policy |

docs/HOMEWORLD_RULES.md

@@ -10,8 +10,9 @@ Collection, original Caladan/Ix/Richese/Giedi Bidding ownership and printed
 Wallach/Tleilax/Grumman/Salusa protections. Advanced follows the authorized supplied
 rulebook p22: qualify alone, retain until the last occupying force leaves.
 Basic still guards its publisher-source lifecycle questions. Original history,
-native population, invoices and private audiences remain separate. Tupile capacity,
-exceptional Duke, other modules, normal starts and full acceptance stay open.
+native population, invoices and private audiences remain separate.
+[Fresh occupied Tupile capacity/cleanup](HOMEWORLD_TUPILE_INTELLIGENCE_RUNTIME.md#occupied-tupile-slots-and-original-cleanup--5-october-2026)
+uses its own source lease; exceptional Duke, other modules, normal starts and full acceptance stay open.
 See the [source cutover and original consumers](HOMEWORLD_OCCUPATION_RULES.md#occupied-economics-bidding-and-advanced-source-cutover--5-october-2026).
 
 ## Module scope and component inventory

docs/HOMEWORLD_TUPILE_INTELLIGENCE_RUNTIME.md

@@ -2,7 +2,85 @@
 
 Runtime checkpoint, 10 September 2026. Native CHOAM can now request and retain a private Tupile intelligence observation in a game with proven setup history. This implements the bounded disclosure described in the [source contract](HOMEWORLD_TUPILE_INTELLIGENCE_RULES.md); occupation entitlement, expiry and occupied income remain unresolved. Advanced and unfinished expansion starts, publication and complete-rules release retain the gates in [README](../README.md).
 
-## Request and historical answer
+## Occupied Tupile slots and original cleanup — 5 October 2026
+
+The fresh original `homeworld-occupation` entry now separately enables Tupile
+capacity when native CHOAM is seated. `homeworldTupilePreview` and the original
+lease ledger are initialized at that unused entry only. Older occupation profiles
+are not converted and no current garrison supplies a missing source.
+
+The proved occupier and current reciprocal ally each receive **one** hand slot:
+regular4→5 or Harkonnen8→9. The same server-derived flag feeds every existing
+hand-capacity consumer, including auctions, gifts, searches, exchanges and actual
+bonus receivers; clients and bots never add a second slot. Original Atomics
+reduction composes with the native limit, not with a fabricated faction identity.
+The native CHOAM cannot ally with its own occupier to receive this benefit.
+
+Advanced uses the authorized supplied physical p22 retention rule. Losing the
+last force closes the original source epoch; ally removal/replacement closes the
+former ally’s grant. Original pending/completed cleanup events identify the lost
+lease and holder. A later lease cannot lend new space before its older cleanup
+settles. Basic unknown expiry/competition/native restoration preserves its last
+proved ledger/flags and blocks source-dependent controls; it never guesses a new
+holder or forces an unsupported discard. A genuinely observed continuous Basic
+turn qualification retains its one lease rather than stacking another slot.
+
+Each overfull old holder selects exactly its actual excess held IDs to reach the
+normal limit. No random discard, duplicate item, new draw or second payment is
+introduced. Protected/committed cards stay unavailable. Queued cleanup begins at
+a settled original control boundary after active battle/arrival/card obligations;
+the original phase opening is preserved, and remaining movement is not consumed.
+This scheduling/old-holder ordering is explicit application composition, not a
+new retrieved publisher priority FAQ. Normal discard effects remain separate.
+Reading a view or replaying an old event cannot dispose of another card.
+
+The fresh marker also makes low-intelligence availability use this authority.
+Known occupation suppresses new questions; proved Advanced departure restores
+the low opportunity when actual contact/population permit it. Past private
+answers and lifetime faction usage remain intact. Unmarked profiles retain the
+historical source guard below.
+
+Original programs prove two actual owed cleanups, all4 legal policies, private
+choices/JSON/replay rejection, restored native low inquiry and once-per-faction
+use. An actual native Harkonnen auction buys its ninth card but draws no tenth.
+Another original paid return moves the last typed visitor from Tupile to Junction
+for1 spice; both normal-limit cleanups preserve the unused original movement,
+force inventory, physical cards and one price.
+
+Human original CLI **D54MY8JJ v18/setup** preserves the selected deck, actors and
+starting choices. Real second-turn Nexus earns Guild/Harkonnen alliance before a
+labelled conserved post-Charity position. At390px, Harkonnen8/9 bids5 and reaches
+**v26 hand9/9**, spice12→7, with no extra card. Actual Guild return from Tupile
+to Junction costs1 (6→5), then its private Cheap Hero discard5→4 atv29 precedes
+Harkonnen’s own Jubba Cloak discard9→8 atv30. The real counter returns once;
+Guild remains active with its shipment used and movement unused. Refresh shows
+4/4 and original movement controls without root390px overflow. Only this QA
+record changes; no reset, credential disclosure or played-game conversion.
+
+Source cases19/related143 including guidance, types/lint/build and original
+runtime smoke pass. After the real Guild turn ends atv31, a separate labelled
+conserved contact restores one native force and places one unqualified Fremen
+beside it; no new occupier is created. Human **v33** records its private3 spice/
+0 weapons once, while a rival receives no panel. Refresh retains the historical
+observation and already-used-faction reason; no request is repeated.
+
+Ten genuine original samples run on unchanged tree
+`52ccb9305255ecf7234be7a98aea43f7cf44630215639042c50bb0474e93e892`.
+Allfive six-seat Advanced samples finish4,339 accepted/4,358 attempts/114 JSON.
+Four of five five-seat Basic samples finish2,430/2,449/64; allfive total
+2,527/2,547/66. The exact Atreides5Basic seed20263432 capture retains its existing
+contested Southern occupation guard. No source weakening or favorable replacement
+seed. These games exercise continuation but contain **zero owed Tupile cleanup
+choices**; the native programs and human actual return, not those counts, prove
+the changed cleanup path. Full-mode/zero-rejection claims remain excluded.
+
+See [lease source](../game/homeworld-occupied-tupile.ts),
+[real consumers](../tests/homeworld-occupied-tupile-runtime.test.ts) and
+[private cleanup controls](../components/homeworld-tupile-cleanup.tsx).
+Full Homeworld/module combinations, pending Basic/CHOAM rulings, normal starts,
+assurance and deployed acceptance remain separate.
+
+## Historical request and answer checkpoint
 
 The engine accepts `{ type: 'tupileIntelligence', target, category }`, where `target` identifies a seated opposing faction and `category` is `weapons` or `defenses`. The server validates current eligibility before reading the answer or consuming use:
 

docs/IMPLEMENTATION_STATUS.md

@@ -1,5 +1,42 @@
 # Dune implementation status
 
+## 5 October 2026 — occupied Tupile capacity, original cleanup and low authority
+
+Fresh native CHOAM/Homeworld audit setup alone marks Tupile slots and the original
+lease ledger. A server-derived backed flag extends all existing real hand-limit
+consumers once; old profiles gain nothing. Original Advanced source/reciprocal
+holder loss retires the lease and queues owner-selected normal-limit excess.
+Pending old debt cannot borrow a new lease; Basic unknown source preserves its
+proved state and blocks rather than invents cleanup. Native low intelligence
+uses known current authority only in this marker, without clearing old answers/use.
+
+Source19/affected143 including guides, types/lint/build, all4 legal policies and
+original programs pass. Actual ordinary auction admits Harkonnen card9/no card10;
+one real paid foreign return queues both normal-limit cleanups and retains its
+remaining movement/counter/price. Fixtures now distinguish a genuinely observed
+Basic boundary from unobserved expiry, and accept a completed original invoice
+without manufacturing a pending sale. No wording/error-text pins or fake card.
+
+Ten genuine samples on unchanged
+`52ccb9305255ecf7234be7a98aea43f7cf44630215639042c50bb0474e93e892`:
+five six-seat Advanced complete4,339 accepted/4,358 attempts/114 JSON;
+four of five five-seat Basic complete2,430/2,449/64, allfive2,527/2,547/66.
+Original Atreides5Basic20263432 remains captured at its contested Southern guard.
+Natural samples containzero owed cleanup choices; native programs/human actual
+departure supply changed-path proof. No favorable seed or complete-mode claim.
+
+Original backed-up CLI D54MY8JJ v18 preserves deck/actors/clock; a real second-turn
+Nexus earns Guild/Harkonnen alliance before labelled conserved positions.
+390px human Harkonnen8/9 bids5 and holds9/9 atv26, wallet12→7/no tenth bonus.
+Real last Guild visitor returns to Junction for1 (6→5); Cheap Hero5→4 then allied
+Jubba9→8 settle atv30 with the original movement still available. v31 finishes
+only that turn. A separately labelled native1/Fremen1 contact permits private
+v33 inquiry3 spice/0 weapons; refresh preserves used-faction/history and no rival
+panel. No overflow/reset/public start/save conversion; private artifacts outside Git.
+[Canonical lease/consumer/evidence](HOMEWORLD_TUPILE_INTELLIGENCE_RUNTIME.md#occupied-tupile-slots-and-original-cleanup--5-october-2026).
+Full combinations, pending Basic/CHOAM and exceptional Duke, final assurance and
+deployed acceptance remain open.
+
 ## 5 October 2026 — occupied Homeworld economics, Bidding and Advanced retention
 
 The authorized supplied p22 resolves Advanced qualification/retention: sole

docs/RULE_DECISIONS.md

@@ -177,7 +177,7 @@ dedicated retrieved worked FAQs. [Contract and remaining limits](HOMEWORLD_OCCUP
 
 | Topic | Decision to preserve | Detailed authority and evidence |
 | --- | --- | --- |
-| Stable Homeworld occupation | Fresh original Homeworlds alone and source history. Advanced uses authorized p22 sole qualification retained until last-force departure; Basic keeps historical lifecycle guards. Actual bank/percentage income, immediate sharing, Caladan/Ix/Richese/Giedi original ownership and Wallach/Tleilax/Grumman/Salusa defenses are connected. No inferred current controller, past-income back-award, invented canceled-auction count, public/save conversion or unrelated overlay. Tupile capacity and exceptional Duke remain separate. | [Source cutover and original consumers](HOMEWORLD_OCCUPATION_RULES.md#occupied-economics-bidding-and-advanced-source-cutover--5-october-2026) |
+| Stable Homeworld occupation | Fresh original Homeworlds alone and source history. Advanced uses authorized p22 sole qualification retained until last-force departure; Basic keeps historical lifecycle guards. Actual bank/percentage income, sharing, Caladan/Ix/Richese/Giedi ownership and native defenses are connected. Native CHOAM fresh entries separately mark original Tupile slots, owner-selected normal-limit cleanup and low-query restoration; old profiles are not upgraded. No inferred controller, back-award, invented canceled-auction count, public/save conversion or unrelated overlay. Exceptional Duke remains separate. | [Source cutover](HOMEWORLD_OCCUPATION_RULES.md#occupied-economics-bidding-and-advanced-source-cutover--5-october-2026), [Tupile original lease and consumers](HOMEWORLD_TUPILE_INTELLIGENCE_RUNTIME.md#occupied-tupile-slots-and-original-cleanup--5-october-2026) |
 | Standalone E3 Nexus / Skills / original components | Fresh Ecaz OR Moritani/classic ecaz33/all14/all12, Basic/Advanced2..6, original Tech3+/Advanced Strongholds2+. Original Duke/assassination/Terror, chosen-plan Advanced Occupy and separate physical armies remain. Ecaz-led Suk rescues only its own fixed casualties; Diplomat uses the selected faction's own undialed commitment. Owner-pool skill composition is an explicit implementation inference, not a combined-skill FAQ. E3 pairs/Harkonnen Advanced/HW/previews/shared-Duke training/enhanced relocation and pending rulings remain guarded. | [Source and verified scope](NEXUS_CARD_RULES.md#standalone-e3-nexus-skills-and-original-components--5-october-2026), [coalition contract](ECAZ_OCCUPY_RULES.md#standalone-nexus--skills-coalition--5-october-2026) |
 | Harkonnen special-Karama forced return | Return automatically only when the combined hand equals the count owed. Keep actual drawn-card observations owner-private after settlement; legacy forced saves describe held-card history without inventing draw provenance. Existing provisional auction-payment recovery and mode gates remain. | [Contract and limits](HARKONNEN_EXCHANGE.md) |
 | Basic Moritani / Leader Skills | Ordinary Terror death returns the assigned skill once; own revival offers the existing private optional replacement. Sabotage does not take skills, alliances do not transfer assignments, and mandatory Planetologist/Diplomat disposal excludes those cards from ally retention. This is composition of existing contracts, not a new ruling or resolution of unfinished skill effects. Advanced and other roster/module combinations remain gated. | [Integration contract](MORITANI_LEADER_SKILLS.md) |