Implement Tleilaxu and Ixian Nexus Cunning with durable private recovery

docs/COMPONENT_INVENTORY.md

@@ -1,6 +1,6 @@
 # Component inventory and verification ledger
 
-**Nexus update, 10 September 2026:** all twelve physical Nexus identities and all thirty-six effect panels are verified against the original printed components. The separate inventory preserves one card per faction, independent of the selected roster; held cards remain private. The internal rules gallery and owner panel provide complete original-language effect text, existing bundled faction artwork and enlarged inspection. Common draws, replacement, preselected own-faction redraw, alliance forfeiture and saved phase progress are integrated. Atreides Cunning and Secret Ally have inspected battle controls and private history. Harkonnen Cunning and Secret Ally now draw from the physical Traitor Deck before an exact private return; Tleilaxu receives Face Dancers while previously revealed dancers stay protected. The owner selects actual leader identities with enlarged inspection, and observers receive only pending metadata. This adds no duplicate physical deck or new artwork. Betrayal, remaining effects and complete module games remain unfinished and gated. See [NEXUS_HARKONNEN_RUNTIME.md](NEXUS_HARKONNEN_RUNTIME.md), [NEXUS_ATREIDES_RUNTIME.md](NEXUS_ATREIDES_RUNTIME.md), [NEXUS_CARD_RULES.md](NEXUS_CARD_RULES.md) and [NEXUS_CARD_RUNTIME.md](NEXUS_CARD_RUNTIME.md) for current verification and limits; final Harkonnen checkpoint acceptance is pending.
+**Nexus update, 10 September 2026:** all twelve physical Nexus identities and all thirty-six effect panels are verified against the original printed components. The separate inventory preserves one card per faction, independent of the selected roster; held cards remain private. The internal rules gallery and owner panel provide complete original-language effect text, existing bundled faction artwork and enlarged inspection. Common draws, replacement, preselected own-faction redraw, alliance forfeiture and saved phase progress are integrated. Atreides Cunning and Secret Ally have inspected battle controls and private history. Harkonnen Cunning and Secret Ally now draw from the physical Traitor Deck before an exact private return; Tleilaxu receives Face Dancers while previously revealed dancers stay protected. The owner selects actual leader identities with enlarged inspection, and observers receive only pending metadata. Native Tleilaxu Cunning now replaces all revealed Face Dancers atomically, drawing before returning the old identities and preserving unrevealed custody and ordinary cycling. Ixian Cunning gives Suboids strength one without support spice for the rest of the turn, while Cyborgs retain their own rules. Both use existing physical components and private offers; Ixian activation becomes public. This adds no duplicate physical deck or new artwork. Tleilaxu Secret Ally, Betrayal, remaining effects and complete module games remain unfinished and gated. See [NEXUS_HARKONNEN_RUNTIME.md](NEXUS_HARKONNEN_RUNTIME.md), [NEXUS_ATREIDES_RUNTIME.md](NEXUS_ATREIDES_RUNTIME.md), [NEXUS_CARD_RULES.md](NEXUS_CARD_RULES.md) and [NEXUS_CARD_RUNTIME.md](NEXUS_CARD_RUNTIME.md) for prior verification and limits. [NEXUS_CUNNING_RUNTIME.md](NEXUS_CUNNING_RUNTIME.md) records the new native Cunning behavior; its final checkpoint acceptance remains pending.
 
 **Homeworld update, 9 September 2026:** all 13 cards and 26 physical faces are verified, including native population/battle values and occupied income symbols. The internal gallery supplies both faces, complete original gameplay prose, enlarged inspection and thirteen original bundled illustrations. Separate typed custody and population helpers are tested; actual Homeworld gameplay, occupation and effect integration remain unfinished and gated. See [HOMEWORLD_IMPLEMENTATION.md](HOMEWORLD_IMPLEMENTATION.md) and [HOMEWORLD_COMPONENT_AUDIT.md](HOMEWORLD_COMPONENT_AUDIT.md). Earlier missing-Homeworld statements below are historical.
 

docs/IMPLEMENTATION_STATUS.md

@@ -1,5 +1,7 @@
 # Dune implementation status
 
+**Tleilaxu and Ixian Nexus Cunning checkpoint, 10 September 2026:** [NEXUS_CUNNING_RUNTIME.md](NEXUS_CUNNING_RUNTIME.md) records atomic revealed Face Dancer replacement and full-strength Suboids in every battle for the rest of the turn. Basic and Advanced retain Cyborg support costs and exact physical losses. Review fixed fresh Ixian Nexus setup, future-plan search through an unspent Cunning card and its private preparation hint; prior commitments remain binding. **Types, lint, all 3,936 offline tests, production build and 40 HTTP/session tests pass.** Fifty-one new cases include real Face Dance, all four bots, mixed-force support, concurrent SQLite recovery and future Truthtrance/Prescience commitments. Desktop/phone card play, private refresh and a seven-strength/two-support sealed plan passed. The hourly restart preserved all **3,359** then-existing games; final comparison preserves all **3,327** opening room versions/hashes. Tleilaxu Secret Ally, Betrayal and remaining Nexus effects stay gated pending their recorded requirements. No expansion release gate opened; automation remains removed.
+
 **Harkonnen Nexus exchange checkpoint, 10 September 2026:** [NEXUS_HARKONNEN_RUNTIME.md](NEXUS_HARKONNEN_RUNTIME.md) records draw-first Cunning and absent-faction Secret Ally, exact private returns, protected revealed Face Dancers, saved suspended actions and durable prior traitor declarations. Shared controls and all four bot profiles use projected identities. Independent review fixed lost preceding decisions and the paid Nullentropy action gate. **Types, lint, all 3,885 offline cases, production build and 40 HTTP/session cases pass.** Forty-six new cases cover rules, consumers, continuations and concurrent SQLite recovery. Two three-seat browser rooms passed draw/return, private restoration and desktop/phone inspection. All **3,295** preexisting room versions/hashes remain unchanged. Betrayal remains blocked pending the existing private response timing decision; complete Nexus and expansion games remain unfinished, and no release gate opens. The server was reused, no restart was due, and automation remains removed.
 
 **Atreides Nexus inspection checkpoint, 10 September 2026:** [NEXUS_ATREIDES_RUNTIME.md](NEXUS_ATREIDES_RUNTIME.md) records Cunning's distinct second commitment and absent-faction Secret Ally, physical card disposal, No-Field distinctions, private history, all four editor locks and bot handling. Independent review fixed lost-response bypass, first-answer drift and a sealed plan contradicting its signed observation; legitimate Residual reanswers preserve the first historical disclosure. **Types, lint, all 3,839 offline tests, production build and 40 HTTP/session tests pass.** Forty-four new cases include concurrent SQLite recovery and four independent corruption regressions. Three-seat keyboard play, answer, protected plan submission and desktop/phone refresh passed. All **3,234** preexisting room versions/hashes survived the scheduled backup/restart and final comparison. Betrayal response timing, Residual after two answered Cunning fields, other card families and complete module games remain explicitly unfinished; no release gate opened. Automation stays removed; verified checkpoints are authorized for push without another confirmation.

docs/NEXUS_CUNNING_RUNTIME.md

@@ -0,0 +1,43 @@
+# Tleilaxu and Ixian Nexus Cunning checkpoint
+
+10 September 2026. Two native Cunning effects extend the existing [Nexus lifecycle](NEXUS_CARD_RUNTIME.md), [Atreides inspections](NEXUS_ATREIDES_RUNTIME.md) and [Harkonnen exchanges](NEXUS_HARKONNEN_RUNTIME.md). The [Tleilaxu source audit](NEXUS_TLEILAXU_RULES.md) and [Ixian source audit](NEXUS_IXIAN_CUNNING_RULES.md) distinguish printed effects from their digital timing composition. Neither this checkpoint nor its focused tests open incomplete mode or expansion starts.
+
+## Tleilaxu replacement
+
+Native Tleilaxu holding its own Nexus card can replace the entire revealed Face Dancer group. The engine sets those identities aside, draws the same number from the existing reserve, then shuffles the set-aside cards into the remaining Traitor Deck. The old revealed identities cannot be among this operation's new draws. Existing unrevealed dancers remain held, and replacement dancers begin unrevealed.
+
+The operation spends the physical Nexus card and records one completed receipt atomically. There is no subset selection, post-draw choice or extra acknowledgement. A nonempty revealed group and sufficient original reserve are required; a missing reserve is not supplied by recycling another player's cards. Canonical source/result evidence binds the physical operation, and reads or retries do not repeat it. These signatures check saved-state consistency, not cryptographic authenticity against a deliberately rewritten save.
+
+The card has no phase restriction. Its engine path preserves the existing response or owned decision, including paid Nullentropy, while replacing the Face Dancers. Live Truthtrance, automatic card disposal, closing common Nexus draws and a pending Harkonnen Traitor Deck return retain priority. This does not authorize rewriting a completed Face Dance or interrupting its mandatory native cycle at an invented point.
+
+Ordinary Mentat replacement and the native all-three-revealed reset remain different operations. Both shuffle returned cards before their draws; Cunning draws before returning its set-aside group. Cunning does not spend or refresh the ordinary Mentat usage counter. A stable third native reveal already performs its mandatory reset, so Cunning normally has one or two revealed cards to replace. No extra native reset follows Cunning.
+
+Only the owner receives new Face Dancer identities. Other seats receive the public effect and count, without the reserve order or historical private replacement snapshot. The owner has one explicit button to play the effect; all four bot profiles use the same event-bound private offer without inspecting another hand.
+
+## Ixian Suboid strength
+
+Native Ixians can play Cunning in their own current battle before submitting their plan. The effect spends the Nexus card and records its native owner, activation battle and turn. Every Ixian Suboid then counts as **one strength instead of one half**, in Basic and Advanced, throughout that turn. Later battles use the same grant; the actual next turn removes the benefit while keeping its history. It does not replay or amend an earlier battle.
+
+The force profile separates free Suboid support from Cyborg support. Suboids cannot be charged support spice while the effect is active; Cyborgs retain their usual strength, support and substitution rules. Counter counts, physical losses, movement and revival remain unchanged. The shared combat solver, Stone Burner comparison and battle resolution consume this typed profile. The table bounds paid support to the remaining eligible Cyborg count and explains the distinction; bot plans use the server's projected forces rather than guessing an effect from the discarded card.
+
+Prior Prescience and Truthtrance commitments remain binding. The engine checks whether the boosted profile still permits a reachable compliant plan before offering activation. A previously promised half-strength dial can make activation impossible; the card is then retained and no promised field is silently released. Compatible commitments do not require the opposing player to unseal a plan. The public active notice identifies Ixian Suboids and never implies that another faction's forces gain the bonus.
+
+Independent review found that the reachability search omitted an available Cunning activation. The corrected search can accept a future full-strength dial commitment while leaving the real Nexus card unspent. It supplies Cunning as the owner's explicit preparation step; the private hint names that effect rather than incorrectly describing an undefined Ghola force count. Actual Truthtrance and Prescience regressions exercise the future-strength commitment, and a separate server-rendered control regression checks its private instruction and subsequent real activation. This follow-up selection passed **3/3**, with focused lint passing. See [reachability tests](../tests/nexus-suboid-reachability.test.ts) and [preparation controls](../tests/nexus-suboid-reachability-controls.test.ts).
+
+The genuine Nexus audit setup now accepts Ixians' initialized seven elite reserves. This fixes setup validation for the existing physical seven-Cyborg/thirteen-Suboid inventory; it does not grant public access to gated modes or migrate existing force custody.
+
+## Verified checkpoint and unfinished work
+
+The latest observed consumer selection passed **17/17** cases: thirteen new Tleilaxu/Ixian controls and bot regressions plus four existing Harkonnen bot cases. It verifies all four profiles, private getter traps, pending-control priorities, zero-spice boosted plans and the actual table's Cyborg-only support bounds. Type-aware lint passed for the owned consumer files. Full-table SSR still emits the preexisting React SVG title-array warning; this is not browser acceptance.
+
+**Types, lint, all 3,936 offline tests, production build and 40 HTTP/session tests pass.** This checkpoint adds 51 cases: eight pure Face Dancer, ten Face Dancer engine, six support solver, seven Suboid engine, thirteen consumer, four production SQLite recovery, two future-plan reachability and one private preparation-control regression.
+
+The SQLite races accept one card spend, draw/shuffle or turn grant. Lost responses restore the same private state, subsequent boosted plans persist, and damaged receipts or a missing last-play marker reject without writes. Engine coverage includes a real completed Face Dance before Cunning, paid Nullentropy and Prescience interruptions, native Mentat replacement in both orders, compatible and impossible prior commitments, a second battle in the same turn and turn expiry.
+
+Two isolated three-seat browser rooms verified desktop/phone play, Tleilaxu's atomic replacement and six private seat refreshes. The Ixian editor allowed seven strength from three Suboids and two Cyborgs, capped support at two, and accepted that sealed plan with an available leader. Opponents saw the public bonus and no sealed plan. The ordinary no-leader rejection remained enforced. Reviewed phone renders show readable controls and no horizontal page overflow; no page errors occurred.
+
+The controlled hourly restart preserved all **3,359** then-existing room versions and hashes, restored both Cunning rooms and the earlier three-seat Atreides inspection checkpoint. Final comparison preserves all **3,327** rooms from this checkpoint's opening baseline. Two browser rooms and sixty isolated HTTP rooms were added across the pre/post-review test runs. No recurring automation was recreated.
+
+Implementation: [Face Dancer operation](../game/nexus-face-dancers.ts), [Suboid grant](../game/nexus-suboids.ts), [combat solver](../game/combat.ts), [Tleilaxu controls](../components/nexus-tleilaxu.tsx), [Ixian controls](../components/nexus-suboids.tsx). Evidence: [Face Dancer engine](../tests/nexus-face-dancer-engine.test.ts), [Suboid engine](../tests/nexus-suboids-engine.test.ts), [support solver](../tests/normal-free-support.test.ts), [Tleilaxu controls](../tests/nexus-tleilaxu-controls.test.ts), [Tleilaxu bots](../tests/nexus-tleilaxu-bots.test.ts), [Ixian controls](../tests/nexus-suboid-controls.test.ts), [Ixian bots](../tests/nexus-suboid-bots.test.ts), [SQLite recovery](../tests/nexus-cunning-recovery.test.ts).
+
+Tleilaxu Secret Ally remains wholly gated pending the question about normal revival accounting, leader prerequisites and whether the combined leader benefit is optional. Its fixed price does not settle those separate permissions. Betrayal retains the existing private response timing gate. Other Ixian modes, unfinished Nexus families and complete module/expansion games remain separate release requirements.

docs/NEXUS_IXIAN_CUNNING_RULES.md

@@ -0,0 +1,36 @@
+# Ixian Nexus Cunning: full-strength Suboids
+
+Primary-source audit, 10 September 2026. This is a source contract, not an implementation or expansion-release claim. Other Ixian Nexus modes are outside this checkpoint.
+
+## Authority and result
+
+The original Ixian face was freshly inspected in `/tmp/dune-nexus-cards.jpg`, the [photograph of GF9's twelve printed cards](https://boardgamegeek.com/image/7767032/dune-ecaz-and-moritani). Its Cunning panel applies before the native Ixian player's Battle Plan is formulated. All that player's Suboids count at full strength in all battles during that turn, without spending spice to support them. The physical Nexus card is then discarded under the [E3 common rules, p.11](https://www.gf9games.com/dune/wp-content/uploads/EcazMoritani-Rulebook-LOWRES.pdf#page=11).
+
+[E1 p.9](https://www.gf9games.com/dunegame/wp-content/uploads/2020/09/IxianAndTleilaxuRulebook.pdf#page=9) makes Suboids half-strength in Basic. Its Advanced paragraph keeps them at half strength and prohibits increasing that value by paying spice. The new card explicitly overrides that limitation. It is useful in **both Basic and Advanced**, rather than an Advanced-only advantage.
+
+| Force profile | Ordinary rules | With Cunning active this turn |
+| --- | --- | --- |
+| Basic Suboid | 0.5 per physical counter | 1 per physical counter |
+| Advanced Suboid | 0.5, unaffected by spice support | 1, without a support payment |
+| Cyborg | Its existing Basic/Advanced values and support rules | Unchanged |
+
+The Advanced support distinction comes from [base p.13](https://www.gf9games.com/dunegame/wp-content/uploads/Dune-Rulebook.pdf#page=13), combined with E1's Suboid exception. Cunning does not double a Cyborg, create extra counters, or change shipment, revival, spice collection or movement. The [November FAQ p.7](https://www.gf9games.com/dune/wp-content/uploads/2020/11/Dune-FAQ-Nov-2020.pdf#page=7) expressly excludes Suboid strength from Karama cancellation. Applying that named exception to enhanced Suboid strength is a source composition; it does not establish immunity for every Nexus card or suppress separately cancelable Cyborg substitution.
+
+Fresh official-domain indexed excerpts were retrieved for E1 p.9, base p.13 and the November FAQ. The card is the primary source for its duration and timing; no tournament or fan rewrite was used.
+
+## Executable composition
+
+- Activation belongs to native Ixians holding its own Nexus card, before its plan in a current battle. Preserve the common unallied requirement. Playing it spends the single physical card and records one public activation; no subsequent confirmation is needed.
+- Bind the grant to `{event, owner, faction: ixians, turn, activationBattle}`. Eligibility is not re-created from whether the discarded card remains visible in the current discard pile: recycling or a later draw must not end or duplicate this turn's grant.
+- The effect covers the activation battle and later battles that turn. It cannot change an already resolved earlier battle. Native ownership of affected counters is the relevant identity; do not turn another faction's forces into Suboids.
+- Every strength consumer must use the same active-turn force profile: feasible dials, support choices and costs, Truthtrance/Prescience commitments, bot plans, previews, resolution and the winner's legal casualty allocations. A Suboid still represents one physical token when lost. Preserve ordinary survivor-for-Cyborg substitution and its separate cancellation conditions.
+- In Advanced, support selection/payment must not charge the active Suboids; Cyborg support remains chargeable. A blanket free-support flag for the whole Ixian army would be wrong.
+- Keep the receipt after card disposal and through JSON restoration. Compare its recorded turn at each relevant calculation, and expire the benefit on the actual turn transition without replaying an earlier activation.
+
+“Before formulating” is the printed timing. Treating the server's first committed plan as the submission boundary is an implementation convention, not additional publisher wording. A prior inspected element or Truthtrance commitment must remain binding if activation is allowed afterward; the effect is not permission to change an already promised dial. No source permits reopening a sealed plan to play the card. Early battle preparation before any own commitment is the unambiguous activation window; later partial-plan timing needs to be represented consistently with the game's established plan workflow.
+
+## Boundaries and verification
+
+The face does not restrict the bonus to one territory, the first battle, or the counters present at activation. Later revived/arriving Suboids are still that player's Suboids in a battle during the same turn. This follows its turn-wide class description rather than a new per-counter grant. Homeworld combat and any Ecaz combined-force adapter must retain their existing physical-owner and printed battle-size rules while applying the applicable token profile; Cunning does not enlarge a Homeworld's allowed defensive army.
+
+Test Basic and Advanced with mixed Cyborg/Suboid armies, zero spice, a later same-turn battle, expiration next turn, physical losses and substitution, unchanged protected commitments, duplicate/stale activation, owner/phase integrity, and JSON/CAS recovery. Preserve all existing Homeworld, Advanced and expansion gates; passing this force modifier does not certify the other two Ixian Nexus effects.

docs/NEXUS_TLEILAXU_RULES.md

@@ -0,0 +1,59 @@
+# Tleilaxu Nexus: primary-source contract
+
+Source audit, 10 September 2026. This document does not certify runtime support or open expansion release gates. The [common Nexus rules](NEXUS_CARD_RULES.md) apply. Betrayal's existing unanswered reaction-privacy question remains separate.
+
+## Sources
+
+- The Tleilaxu face in the [original printed-component photograph](https://boardgamegeek.com/image/7767032/dune-ecaz-and-moritani), freshly inspected at `/tmp/dune-nexus-cards.jpg`. The authority is the photographed GF9 card text.
+- [GF9 Ecaz & Moritani, pp.9,11,16](https://www.gf9games.com/dune/wp-content/uploads/EcazMoritani-Rulebook-LOWRES.pdf#page=11): common mode and disposal rules, Duke restrictions, Homeworld and Nexus FAQ. The previously acquired publisher-authored PDF mirror at `/tmp/dune-e3-nexus-rules.pdf` and its extracted text were reread; fresh publisher-indexed excerpts were retrieved. Direct official PDF access remains unavailable.
+- [GF9 Ixians & Tleilaxu, pp.6–7,9 and Karama table](https://www.gf9games.com/dunegame/wp-content/uploads/2020/09/IxianAndTleilaxuRulebook.pdf#page=7): ordinary Face Dancer cycle, native revival powers, typed Ixian forces and cancellation boundaries.
+- [GF9 base rulebook, pp.9,13,16–19,22](https://www.gf9games.com/dunegame/wp-content/uploads/Dune-Rulebook.pdf#page=9), and [November 2020 FAQ, pp.2,5–9](https://www.gf9games.com/dune/wp-content/uploads/2020/11/Dune-FAQ-Nov-2020.pdf#page=2): ordinary revival, repeated deaths, special forces, Kwisatz, Ghola and special revival permissions. Fresh official indexed excerpts were inspected. Existing Ghola implementation is not substitute authority for this Nexus effect.
+
+## Cunning: complete physical operation
+
+Native Tleilaxu sets aside every revealed Face Dancer, privately draws the same number of replacements, and only then shuffles the set-aside identities into the Traitor Deck. Unrevealed dancers remain held. The panel has no phase restriction, no subset choice and no second choice after drawing. [Printed Tleilaxu face](https://boardgamegeek.com/image/7767032/dune-ecaz-and-moritani)
+
+Implementation composition:
+
+1. Bind the native owner, currently held Tleilaxu Nexus card, event, turn/phase, complete original Face Dancer group and original reserve order.
+2. Take the entire revealed group out of held custody. Draw exactly its size from the original reserve. New dancers are unrevealed; retained dancers keep their identities/statuses.
+3. Shuffle the removed identities into the remaining reserve, spend the physical Nexus card and commit one receipt. The removed identities cannot be among this action's replacement draws. No player acknowledgement is needed after this automatic operation.
+4. Return only public owner/count/effect information to other seats. New identities, reserve order and historical private snapshots stay server/owner-only. Reads and retries cannot repeat the draw, shuffle or reset.
+5. Use the shared physical census from [Harkonnen Nexus](NEXUS_HARKONNEN_RULES.md); do not recreate cards from current leaders or borrow held identities when a malformed reserve is short.
+
+E1's native third-reveal cycle is different: after all three reveal, return all three, shuffle, then draw three. Its ordinary Mentat action replaces one unrevealed dancer, also shuffling before drawing. Preserve both operations and their original usage counters. Cunning does not consume ordinary Mentat replacement or grant a second such replacement. In a stable ordinary game the third reveal already completes native cycling, so Cunning normally sees one or two revealed dancers. Do not manufacture an interruption before that mandatory reset or trigger another reset after Cunning. [E1 pp.6–7](https://www.gf9games.com/dunegame/wp-content/uploads/2020/09/IxianAndTleilaxuRulebook.pdf#page=7)
+
+With zero revealed dancers there is no replacement group. No retrieved source grants a free zero-card reshuffle. A nonempty-group runtime prerequisite is the supported useful action boundary; this audit does not establish a general rule permitting voluntary no-effect Nexus disposal. The native Karama table stops ordinary Mentat replacement but excludes other Face Dancer effects, supporting treatment of this distinct refresh without that ordinary cancellation window. This is source composition, not blanket Nexus immunity.
+
+Recommended pure API: `refreshRevealedFaceDancers(snapshot, universe, {event, owner, turn, phase}, random) -> {state, receipt}`. It should require no selected IDs and return a completed operation. Engine timing must preserve any pending native reveal/cycle transaction instead of replacing that transaction's reserved dancer underneath it.
+
+## Secret Ally: established facts
+
+Only an unallied holder in a game without Tleilaxu can use this mode. During Revival the panel grants one own leader for free **and** up to five own forces at one spice each. The five forces are not free; zero forces is permitted by the quantity wording. This is neither the Ghola card's alternative choice nor an acquisition of foreign leaders. [Printed Tleilaxu face](https://boardgamegeek.com/image/7767032/dune-ecaz-and-moritani)
+
+The amount and price override normal values for the granted return. A native faction's free rate does not automatically make these specified paid counters free. Recruits doubles ordinary free rates; it does not say to double this fixed five. Preserve exact normal/starred counters and actual bank payment, never battle strength as a counter count. Returned forces ordinarily enter reserves. [Base p.9](https://www.gf9games.com/dunegame/wp-content/uploads/Dune-Rulebook.pdf#page=9), [E3 p.11](https://www.gf9games.com/dune/wp-content/uploads/EcazMoritani-Rulebook-LOWRES.pdf#page=11)
+
+Important compositions and exclusions:
+
+- Tleilaxu is absent, so no native Tleilaxu revival income, negotiated service or special Karama can apply. Secret Ally does not import the faction's entire ability sheet. At the time of playing it, the holder also has no formal Emperor ally; do not offer Emperor-funded extras as part of this transaction. A later alliance/ordinary action has its own rules.
+- A Cheap Hero is a Treachery Card, not a dead leader disc, and is not revivable. Neither a living captured leader nor an opponent's dead leader becomes eligible through this grant.
+- Advanced Fedaykin/Sardaukar share the one-per-turn revival limit across producers. The November FAQ preserves that limit through Ghola, Emperor extras and Tleilaxu. Basic stars retain physical identity without importing the Advanced cap. Ixian Cyborgs have no matching one-per-turn restriction. [November FAQ p.2](https://www.gf9games.com/dune/wp-content/uploads/2020/11/Dune-FAQ-Nov-2020.pdf#page=2), [E1 p.9](https://www.gf9games.com/dunegame/wp-content/uploads/2020/09/IxianAndTleilaxuRulebook.pdf#page=9)
+- The one-spice force price expressly applies to this card's force group, including permitted typed counters. Do not call ordinary Fremen paid-revival validation and silently reject the explicit card grant, or charge Ixian Cyborgs their ordinary three-spice price.
+- Kwisatz is revived like a leader, supporting its own Atreides identity as a candidate once accounting is resolved. Auditor is CHOAM's own leader, with existing special revival/slot rules. Duke may only be revived by Ecaz, including through Ghola; its destination/cycle questions remain pending. These exceptional identities cannot resolve the general leader-accounting question. [Base p.17](https://www.gf9games.com/dunegame/wp-content/uploads/Dune-Rulebook.pdf#page=17), [CHOAM & Richese p.8](https://www.gf9games.com/dune/wp-content/uploads/2021/11/CHOAM-Rulebook-low-res.pdf#page=8), [Ecaz revival audit](ECAZ_REVIVAL_RULES.md)
+- Southern Hemisphere applies to newly revived starred Fedaykin and therefore needs this producer's exact earned group, subject to the existing threshold/splitting/arrival boundaries. Tleilax's own Homeworld cannot confer a native benefit when Tleilaxu is absent. High Ix's paid-Cyborg trigger may apply to an actual positive payment here; its existing bonus quota/shortage questions remain unresolved. Preserve both [deployment](HOMEWORLD_REVIVAL_DEPLOYMENT_RULES.md) and [Ix benefit](HOMEWORLD_BENEFITS_RULES.md) gates.
+
+## Secret Ally questions that still affect implementation
+
+The inspected E3 FAQ does not answer these. Keep Secret Ally gated rather than implementing a smaller interpretation disguised as the complete effect.
+
+| Issue | Concrete interpretations requiring a ruling |
+| --- | --- |
+| Ordinary force accounting | Is this an independent five-counter return in addition to normal revival, or a replacement/expanded normal allowance? For example, may a player take normal three and then five with this card, and does the card spend subsequent free allowance? |
+| Leader slot and eligibility | Does the free leader use the ordinary one-leader slot, or grant an additional revival? Does its unqualified permission waive the all-leaders-unavailable condition and the distinct face-down/repeated-death restriction? |
+| Partial combined benefit | Can a holder play only the paid-force portion when no eligible dead leader exists, or decline an available leader while taking forces? The panel joins one leader and the force allowance with “and,” unlike an explicitly optional leader clause. |
+
+Normal leader revival has an unavailable-roster trigger and a separate repeated-death cycle. E1 expressly permits face-down leaders for its negotiated service, and the FAQ separately discusses native foreign-ghola revival. Neither automatically grants those permissions to an absent-faction Nexus effect. Similarly, the FAQ's Emperor extras are explicitly additional, while this panel does not settle its ordinary counter debit. [Base p.9](https://www.gf9games.com/dunegame/wp-content/uploads/Dune-Rulebook.pdf#page=9), [E1 p.7](https://www.gf9games.com/dunegame/wp-content/uploads/2020/09/IxianAndTleilaxuRulebook.pdf#page=7), [November FAQ p.6](https://www.gf9games.com/dune/wp-content/uploads/2020/11/Dune-FAQ-Nov-2020.pdf#page=6)
+
+Coordinator question recommendation: ask explicitly about independent versus ordinary force/leader allowance, waived leader prerequisites, and whether the leader portion is optional. The related [Ambassador accounting questions](TLEILAXU_AMBASSADOR_RULES.md) are already pending; do not duplicate those or assume an answer covers differently worded Nexus text. No user question was sent by this audit.
+
+Future revival quote inputs should retain source `nexusTleilaxuSecretAlly`, chosen leader/Kwisatz identity, exact normal/starred force counts, payment and existing usage histories. Require a resolved accounting policy before mutating ordinary counters. A receipt must preserve original revival, subsequent Homeworld deployment and phase continuation once; no card/force/spice effect should be inferred afresh from a restored hand or current Tanks.