Connect optional Sandmaster collection on native Fremen worm rides

After legal placement, a living native Sandmaster may take one board spice from the single destination pile before faction arrival reactions. A ride has no intermediate ground route and never consumes normal movement. Multiple source sectors and typed elite forces earn one collection total. Each separate ride has its own opportunity. Decline and legacy actions retain ordinary riding; empty/ambiguous piles and unsupported module combinations suppress collection without preventing the ride.

Share the public quote across server, destination checkbox and existing bot candidates. AI only gains minimal legal participation: no new destination policy or strength calibration. Keep base factions plus Leader Skills as the bounded scope; other expansion rosters/modules, Ecaz treachery and multiple positive piles remain guarded. Record the composition of printed worm-movement wording with the existing Sandmaster contract, including the existing per-distinct-movement inference. No combined-effect FAQ or complete module compliance is claimed.

The room's atomic versioned write settles the physical transfer once before a pending Bene Gesserit reaction. Saved continuation resumes only the arrival and remaining ride queue. Ten new engine, control and SQLite cases cover Basic/Advanced custody, opt-out, legacy fields, rejected-action immutability, trainer visibility/control, public mode guards, private views, simultaneous duplicates, restarted arrivals, distinct queued rides and a genuine special-Karama worm through Nexus. Correct the shared shipment fixture to retain each faction's actual elite total and support Bene Gesserit as the opponent. Independent source and implementation review found no material defects. Focused work found and fixed the generic decision handler clearing the decision before the new quote, plus test-only fixture/type issues.

Types, lint, 4894 offline tests, production build and 43 HTTP tests passed on unchanged source. Two genuine four-profile Leader Skills samples finished in 265 Basic and 211 Advanced actions, no rejected candidates, and 14 JSON restorations. Neither naturally encountered the new effect; targeted checks establish it. This is playability evidence, not AI calibration.

Isolated browser room RMMA6LEF used a normally created Fremen seat and a conserved staged Advanced Leader Skills position. Selected two forces from each of two sectors, including one elite each, toggled collection off and on, then rode to Red Chasm. The UI showed four arrived forces and balance six before the opponent reaction. Refresh preserved that pending decision, balance and explanatory once-only collection history. The opponent's production-engine arrival response resumed to CHOAM charity; another refresh retained six spice and the private Chani traitor. Seat rows were unchanged. This is a targeted staged browser journey; screenshot and complete human-game acceptance remain open.

All 1140 original rooms, 2385 seats and every original recovery, entry and handover row remain unchanged. HTTP/browser checks added 34 rooms and 71 seats. SQLite integrity and foreign keys pass. No restart, reset, migration, maintenance automation or usage check was needed. No mode or publication gate is opened.

Verified source tree: 7996a37c13c71992d9bb6baf7016558615b98db064eda300ce19604b429b0d73

docs/CURRENT_STATUS.md

@@ -6,19 +6,20 @@ gated.** Prototypes do not open completion or publication gates.
 
 ## Current checkpoint and work
 
-Latest delivered checkpoint: `9be7dfb`, the [interactive introduction](INTERACTIVE_INTRODUCTION.md).
-Types, lint, **4,872 offline tests** and production build passed. Five lessons
-connect shared-rule shipping, sealed battle and collection exercises, card
-inspection and browser-local continuation. Broader teaching remains unfinished.
-After the reported outage all 1,106 games matched the prior backup and a private
-QA seat restored after refresh. The healthy server was reused without a reset.
+Latest delivered gameplay checkpoint: `20cc605`, [Smuggler battle collection](SMUGGLER_BATTLE.md).
+Types, lint, **4,884 offline tests**, production build and **43 HTTP tests** passed.
+The surviving unmodified leader collects even after losing or capture, with saved
+settlement before Sandmaster. All 1,106 baseline rooms and 2,314 seats stayed
+unchanged; isolated checks added 34 rooms and 71 seats. No restart was needed.
+The subsequent `8f7a62c` policy checkpoint removed the usage cutoff and deferred
+AI refinement until feature completion, with three adjacent 75% win-rate targets.
 Earlier evidence remains in the [implementation history](IMPLEMENTATION_STATUS.md).
 
-Current work: [Smuggler battle collection](SMUGGLER_BATTLE.md) connects the
-unmodified lower band, automatic survival settlement, losing/captured leaders,
-Sandmaster order, shared controls and bots, and saved continuation. Modified
-strength and combined modules remain guarded. Final verification and delivery
-belong to the source-bound private report and Git message.
+Current work: [Sandmaster worm rides](SANDMASTER_WORM.md) connect optional native
+Fremen destination collection, multi-sector forces, controls, minimal legal AI
+participation and saved Bene Gesserit arrival continuation. Multiple piles and
+combined modules remain guarded. Final verification and delivery belong to the
+source-bound private report and Git message.
 
 The connected [Harass & Withdraw prototype](HARASS_WITHDRAW_RUNTIME.md) supports either
 battle-card slot, private category inspections, exact undialed normal/elite
@@ -75,7 +76,7 @@ These links define bounded working behavior, not complete module certification.
 | --- | --- |
 | Base/Advanced setup | [Genuine setup](ADVANCED_SETUP_TEST_SEAM.md), [Advanced study](AI_ADVANCED_SETUP_CALIBRATION_20260907.md), [Fremen cancellation](FREMEN_MOVEMENT_KARAMA_RULES.md), [Atreides full-plan audit](ATREIDES_FULL_PLAN_TIMING.md). Earlier Basic-then-flip fixtures do not establish current setup coverage. |
 | Expansion factions | [Ixians/Tleilaxu](IX_PROTOTYPE.md) and [all seven faction selections](EXPANSION_FACTIONS_PROTOTYPE.md): genuine setup, Ecaz six-force placement, separate optional card variants, private controls and saved per-lot Ixian/Richese decline. Actual special-lot exchange remains pending. |
-| Leader Skills | [Common lifecycle](LEADER_SKILLS_RUNTIME.md), [known skilled capture](LEADER_SKILLS_CAPTURE.md), [Mentat question preview](MENTAT_QUESTION.md), [Bureaucrat payments](BUREAUCRAT_PAYMENTS.md), five battle disciplines, [Planetologist](PLANETOLOGIST_RULES.md), [Suk Graduate](SUK_GRADUATE_RULES.md), [Rihani and other battle effects](LEADER_BATTLE_EFFECTS.md), [Smuggler shipment](SMUGGLER_SHIPMENT.md), [No-Field](SMUGGLER_NO_FIELD.md) and [battle collection](SMUGGLER_BATTLE.md), [Sandmaster routes](SANDMASTER_MOVEMENT.md), [Banker spending](SPICE_BANKER_RUNTIME.md), [Diplomat defense](DIPLOMAT_DEFENSE.md). Remaining bands and combinations are explicit in those contracts. |
+| Leader Skills | [Common lifecycle](LEADER_SKILLS_RUNTIME.md), [known skilled capture](LEADER_SKILLS_CAPTURE.md), [Mentat question preview](MENTAT_QUESTION.md), [Bureaucrat payments](BUREAUCRAT_PAYMENTS.md), five battle disciplines, [Planetologist](PLANETOLOGIST_RULES.md), [Suk Graduate](SUK_GRADUATE_RULES.md), [Rihani and other battle effects](LEADER_BATTLE_EFFECTS.md), [Smuggler shipment](SMUGGLER_SHIPMENT.md), [No-Field](SMUGGLER_NO_FIELD.md) and [battle collection](SMUGGLER_BATTLE.md), [Sandmaster routes](SANDMASTER_MOVEMENT.md) and [worm rides](SANDMASTER_WORM.md), [Banker spending](SPICE_BANKER_RUNTIME.md), [Diplomat defense](DIPLOMAT_DEFENSE.md). Remaining bands and combinations are explicit in those contracts. |
 | Discoveries | [Prototype](DISCOVERY_PROTOTYPE.md): genuine setup, Great Maker, seven cards/eight tokens, inspection and stash rewards, nested sites, signed later free entry, carried Ornithopter, sole Cistern, bounded Jacurutu income, Testing Station and Shrine. Orgiz and contested/mixed cases remain pending. |
 | Nexus/Homeworlds | [Decision index](RULE_DECISIONS.md) links each integrated faction family, native/borrowed effects, physical custody, private choices, payments and transport. [CHOAM Collection trade](NEXUS_CHOAM_SECRET_ALLY.md) and [Emperor extra revival](NEXUS_EMPEROR_SECRET_ALLY_RUNTIME.md) are connected; CHOAM inspection and Emperor purchase remain pending. A source audit or helper alone is not a completed effect. |
 | Truthtrance | [Spice facts](TRUTHTRANCE_SPICE_FACTS.md), [card counts](TRUTHTRANCE_CARD_COUNT.md), [hand inventory](TRUTHTRANCE_HAND_INVENTORY.md), [recorded knowledge](TRUTHTRANCE_KNOWLEDGE.md), and [Basic/no-Guild Advanced reserve-shipment promises](TRUTHTRANCE_SHIPMENT_PROMISES.md) use authoritative private state. Earlier readiness audits do not supersede these follow-ups. |

docs/IMPLEMENTATION_STATUS.md

@@ -1,5 +1,17 @@
 # Dune implementation status
 
+## 20 September 2026 — Sandmaster worm-ride prototype
+
+[Native Fremen worm rides](SANDMASTER_WORM.md) collect one optional destination
+spice after legal placement and before faction arrival reactions. Shared server,
+control and minimal AI paths preserve source exclusion, typed force custody and
+normal movement. Existing atomic room writes and saved arrival decisions prevent
+repeated payment after concurrent requests or restoration. Empty/ambiguous piles,
+unsupported combinations and legacy actions preserve ordinary riding. Ten focused
+engine/control/SQLite checks and independent review cover the bounded contract;
+final check/build/HTTP, browser/sample and preservation results belong to the
+source-bound private checkpoint and Git message. No release gate is opened.
+
 ## 20 September 2026 — Smuggler battle collection prototype
 
 [Unmodified Smuggler collection](SMUGGLER_BATTLE.md) binds the reveal-time pile

docs/LEADER_SKILLS_RUNTIME.md

@@ -165,5 +165,7 @@ recorded in the commit and private verification report. Full module and combined
 game acceptance remain unfinished.
 
 The [Sandmaster ground-movement follow-up](SANDMASTER_MOVEMENT.md) adds explicit
-routes, optional collection, human/AI controls and saved cancellation. Special
-relocation and combined modules remain unfinished.
+routes, optional collection, human/AI controls and saved cancellation. The
+[worm-ride follow-up](SANDMASTER_WORM.md) adds native Fremen destination collection
+and saved arrival reactions. Other special relocation and combined modules
+remain unfinished.

docs/RULE_DECISIONS.md

@@ -12,7 +12,7 @@ Updated 14 September 2026. This is the authoritative navigation index for existi
 | Ixian Technology on Richese lots | Replacement-card ownership, income and unsold disposition remain unresolved. A saved explicit per-lot decline permits an unchanged offer to proceed and leaves Technology available later. This development continuation does not implement the exchange or settle its custody. | [Auction source boundary](RICHESE_AUCTION_RULES.md#13-september-saved-per-lot-technology-decline) |
 | Spice Banker battle spending | Secret own-spice commitment is separate from support; only the surviving selected disc gains strength. Core Battle Plan payment rules spend it on death/loss and waive it for a sole traitor-call winner. This payment composition is explicit; upper deferred-income custody remains pending. | [Source contract and prototype](SPICE_BANKER_RUNTIME.md) |
 | Smuggler shipping | Optional free companion is included in the actual total; apply Guild rounding to the reduced priced count. Ordinary Fremen reserves are on planet. The officially permitted owned No-Field plus a separate free force is now prototyped at the unchanged one-marker price. Legacy unstamped ordinary declarations keep their quoted full price. | [Ordinary contract](SMUGGLER_SHIPMENT.md), [No-Field combination](SMUGGLER_NO_FIELD.md) |
-| Sandmaster movement | One optional board spice per distinct entered territory on an explicit legal route; source-only repositioning earns none. Per-movement Hajr reset is a documented grammatical inference. Canceled moves earn nothing; multiple-pile collection remains guarded. | [Source and connected prototype](SANDMASTER_MOVEMENT.md) |
+| Sandmaster movement | One optional board spice per distinct entered territory on an explicit legal route; source-only repositioning earns none. Per-movement Hajr reset is a documented grammatical inference. Canceled moves earn nothing. Native Fremen worm rides collect optionally at the destination before faction arrival reactions, with no intermediate route. Multiple-pile collection remains guarded. | [Ground routes](SANDMASTER_MOVEMENT.md), [worm rides](SANDMASTER_WORM.md) |
 | Diplomat defense | With no actual defense, one physical Worthless card in either Battle Plan slot may copy the opponent's canonical base Shield or Snooper. The same native trained disc may protect itself. The public after-reveal/before-traitor choice and mandatory discard after traitor preemption are documented implementation inferences. Lower retreat and modified or multirole defenses remain guarded. | [Source and connected prototype](DIPLOMAT_DEFENSE.md) |
 | Bureaucrat payments | Once per phase, optionally divert two from an actual third-party payment of at least five; payer cost is unchanged. Bribes trigger at transfer to the recipient's shield, not later collection. Native income is offered after Karama allowance as an explicit outcome-based inference; split contributions, split recipients and remaining payment families need further integration. | [Source and connected boundary](BUREAUCRAT_PAYMENTS.md) |
 | Mentat question preview | The physical card says to show the card to the questioner, privately; it stays in hand and does not bind a plan. Ask before posture/faction powers. A uniform target response protects held/absent privacy but awaits approval as an exception to skipping forced confirmations; standard activation stays disabled. Empty hands skip with no fabricated answer. | [Source and preview](MENTAT_QUESTION.md) |

docs/SANDMASTER_MOVEMENT.md

@@ -69,7 +69,8 @@ reserves, no Tanks and the same private Crysknife and Caid. Movement completion
 awaited the human. This is targeted browser evidence, not a complete human game.
 Broad checkpoint results are recorded with the checkpoint. These checks do not certify every skill or combined module.
 
-Remaining work includes worm riding and other nonordinary relocation, special
-movement cards, expansion/module integration, multiple-pile adjudication and
+The [worm-ride follow-up](SANDMASTER_WORM.md) connects native Fremen destination
+collection, including saved arrival reactions. Remaining work includes other
+nonordinary relocation, special movement cards, expansion/module integration, multiple-pile adjudication and
 wider interaction and strategy acceptance. The lower battle band remains in
 [the battle-effects contract](LEADER_BATTLE_EFFECTS.md).

docs/SANDMASTER_WORM.md

@@ -0,0 +1,58 @@
+# Sandmaster worm-ride collection
+
+20 September 2026. **Prototyped**, with **Partial** rules coverage. Native
+Fremen worm rides connect optional destination collection in Basic/Advanced
+Leader Skills development games. Public module and publication gates stay closed.
+
+## Source contract
+
+The [existing Sandmaster contract](SANDMASTER_MOVEMENT.md#source-contract),
+checked physical card and designer walkthrough allow one spice when forces move
+into or through a territory containing spice. The [GF9 core rulebook, Shai-Hulud
+and Fremen sections](https://www.gf9games.com/dunegame/wp-content/uploads/Dune-Rulebook.pdf)
+calls riding a move of some or all forces to a destination after Nexus, subject
+to storm and occupancy. The archived core text is identified in the
+[source archive](LEADER_SKILLS_RULES.md#sources-and-local-evidence).
+
+Applying that movement wording gives one optional spice at the destination;
+a worm ride specifies no traversed route. The source earns nothing. Separate
+rides are distinct movements under the existing explicit per-movement inference.
+This composes the printed rules; it is not a newly located combined-effect FAQ.
+The native trainer must be alive, uncaptured and available for its normal band.
+Collection follows legal placement and precedes faction arrival reactions under
+the common skill-before-faction order. Subsequent arrival effects do not undo it.
+
+## Connected behavior
+
+A shared public quote validates the player, destination, skill and single positive
+pile. The checkbox defaults to collection but permits declining it. An empty or
+ambiguous pile suppresses collection without blocking ordinary riding. Legacy
+saved actions without the new field retain their original behavior. No invented
+intermediate route or extra normal movement is consumed. Multi-sector and typed
+elite selections transfer one spice total, not one per force or source sector.
+
+The engine validates every force before moving spice from the board to the
+player, logs the automatic effect and then opens any Bene Gesserit arrival choice.
+Existing versioned room writes commit that transfer once. A saved pending arrival
+resumes only the remaining reaction and ride queue; no new receipt is needed.
+All four AI profiles attach the optional collection flag to the existing legal
+ride candidates. Destination policy and strength tuning are unchanged.
+
+## Verification and remaining work
+
+Focused engine, controls and SQLite checks cover Basic/Advanced force custody,
+source exclusion, decline, omitted legacy fields, empty and ambiguous piles,
+illegal requests without mutation, native trainer ownership/visibility, public
+mode guards, private views, duplicate concurrent requests and restart during a
+Bene Gesserit reaction. Separate queued rides and a real special-Karama worm
+through Nexus exercise the production continuation. The fixture preserves the
+Fremen three-elite total rather than assuming the Emperor five-elite total.
+Independent source and implementation review found no material defect in this
+bounded contract. Final check/build/HTTP results, targeted browser continuation,
+sample games, saved-game preservation and Git delivery belong to the private
+source-bound checkpoint and commit message.
+
+Other expansion factions/modules, the Ecaz card variant and multiple positive
+piles remain guarded. Other special relocation, full Leader Skills integration,
+complete human games and final presentation remain unfinished. Strategy refinement
+waits for the [AI feature-completion gate](AI_DEVELOPMENT_PLAN.md).