Connect native Richese normal-purchase Ixian Nexus replacement

docs/CURRENT_STATUS.md

@@ -34,17 +34,20 @@ Normal purchased-card replacement now composes:
 - successful native BG Karama conversion, after its original counter;
 - Harkonnen's original cancelable bonus and eight-card limit under a visibly
   provisional replacement → income → bonus order matching the native ally path;
-- original Tleilaxu/Ix47 setup and native purchases in Basic **and Advanced**.
+- original Tleilaxu/Ix47 setup and native purchases in Basic **and Advanced**;
+- native Richese/classics normal purchases with CHOAM35 and separate cache,
+  using selected-family card validation without enabling special-origin sales.
 
-Latest native cases7/7 and affected six-file47/47 pass; four original Advanced
-runtime paths, eight legal policy actions and actual CLI help pass. Earlier
-BG/Harkonnen rule and mobile-control evidence remains separately source-bound
-in the [canonical contract](NEXUS_IXIAN_REPLACEMENT_RULES.md), including the
-selected provisional policy and explicit controlled fixtures. All five
-facets remain Partial. Special origins/other modules and final assurance
-stay separate. No saved room, human server, D1, deployment or public gate
-changed. The latest admission slice adds no UI.
-Final types/lint pass; current source anchor and19 topic paths resolve.
+Latest affected seven-file65/65, eight original Richese runtime paths,
+sixteen legal policy actions and two390px original-source journeys pass.
+They preserve real payment/income, unchanged cache and one next-lot advance;
+real final-lot/cache continuation retains the cache-origin gate. Types/lint
+and actual CLI help pass. Two tool-only stale-node races were recovered
+without replay; no application error or overflow. Earlier evidence and
+explicit policies remain in the [canonical contract](NEXUS_IXIAN_REPLACEMENT_RULES.md).
+All five facets stay Partial. No saved room, human server, D1, deployment or
+public gate changed; full modules and final assurance remain separate.
+Current source anchors and21 topic evidence paths resolve.
 
 **Semuta connects both physical Shrine roles — 16 October.**
 Fresh private `semuta --discoveries` setup retains original Richese/CHOAM,

docs/IMPLEMENTATION_STATUS.md

@@ -1,5 +1,27 @@
 # Dune implementation status
 
+## 16 October 2026 — Native Richese normal-purchase Ixian replacement
+
+Admitted fresh Richese/classics, exact CHOAM35 plus original cache, both modes
+and Nexus alone. Precomputed selected-family validation admits shared original
+CHOAM identities and native cache custody, but rejects unrelated families and
+altered faces. Live context now receives selected expansions/native Richese;
+source/receipt shapes remain unchanged, with Richese's original round/cache
+bound only in its new native parent. Cache/Black Market/special origins remain
+gated; the same holder's real cache purchase proves the distinction.
+
+Six catalogue and twelve native cases pass in affected65/65. Eight original
+runtime paths, sixteen legal policy actions and two original390px journeys
+preserve paid Poison Tooth/Artillery outcomes, native income, unchanged cache
+and next/final-lot suffix. The fixture orders undealt cards before automatic
+row allocation; no native response is forced open. Final types/lint and CLI
+help pass after two fixture-only typing fixes. Two tool-only stale-node races
+were recovered without action replay. No human server, D1, saved room,
+deployment, public gate, new build, broad suite or HTTP assurance changed/run.
+[Canonical source and scoped proof](NEXUS_IXIAN_REPLACEMENT_RULES.md#native-richese-normal-purchases--16-october-2026).
+Seven current source anchors and21 topic evidence paths resolve; all five
+checklist facets remain Partial without full-family/deployed certification.
+
 ## 16 October 2026 — Advanced native Tleilaxu Ixian replacement
 
 Removed the Basic-only producer fence from original native Ix47/Tleilaxu

docs/NEXUS_CARD_RULES.md

@@ -1540,7 +1540,7 @@ The private holder offer contains CHOAM's name; it includes the hand count only
 
 Later focused source contracts cover [Emperor strength, purchases and revival](NEXUS_EMPEROR_RULES.md), [Ixian purchased-card replacement](NEXUS_IXIAN_REPLACEMENT_RULES.md), [Fremen worm and revival effects](NEXUS_FREMEN_RULES.md), and [Richese's separate shipment and auction panels](NEXUS_RICHESE_RULES.md). These audits distinguish implemented work from remaining source/timing questions; current runtime evidence is tracked in [implementation status](IMPLEMENTATION_STATUS.md). Bounded Richese auction and Guild shipment Betrayal checkpoints have their own direct local verification below; neither inherits certification of its complete faction, Nexus family or live deployment from earlier evidence.
 
-The [bounded Ixian Secret Ally replacement integration](NEXUS_IXIAN_REPLACEMENT_RULES.md#bounded-local-runtime-contract) connects genuine normal paid and Karama purchases in the original fresh classic or Tleilaxu profile in Basic/Advanced. Successful native BG conversion qualifies after its native counter. Harkonnen's explicitly provisional order is replacement, original income, original cancelable bonus; no extra bonus or eight-card slot is gained. Replace only the purchased physical card and preserve settlement/full-hand/same-card semantics. Cache/Black Market/special origins and combined modules remain guarded. Neutral timing and provisional ordering are product composition, not publisher policy. The adopted Advanced core PDF supplies no Nexus face or priority ruling. Full-module, recovery and deployed acceptance remain open; source-qualified rule/control proof is recorded in the linked contract.
+The [bounded Ixian Secret Ally replacement integration](NEXUS_IXIAN_REPLACEMENT_RULES.md#bounded-local-runtime-contract) connects normal paid/Karama purchases in fresh classic, native Tleilaxu or native Richese profiles in Basic/Advanced. Richese retains exact CHOAM35 plus separate cache; selected catalogue membership does not enable cache/Black Market/special-origin replacement. Successful native BG conversion qualifies after its counter. Harkonnen's provisional order remains replacement, income, cancelable bonus, with no second bonus or eight-card slot. Original settlement/full-hand/same-card semantics remain. Neutral timing/order are product composition, not publisher policy; the adopted core PDF adds no Nexus face or priority ruling. Other modules and full/recovery/deployed acceptance remain open.
 
 **Atreides is the first complete effect family to implement.** It has independent rulebook and physical-face evidence, and the engine already has private plan-element inspection. The Nexus effect needs its own cause and receipt rather than temporarily changing the inspecting faction. The second element must differ from the already inspected element. Preserve the original disclosed value if an allowed later battle edit occurs; follow the existing plan commitment rules instead of refreshing an old observation. The card specifies an element, not the entire hand or battle plan. A weapon/defense request uses actual played-card classification, including the published Reinforcements/Harass exclusions, rather than leaking a card merely because it occupies that slot.
 

docs/NEXUS_IXIAN_REPLACEMENT_RULES.md

@@ -2,6 +2,51 @@
 
 Source audit: 2026-09-10. Bounded local prototype integration and verification: 2026-10-01. **Partial development verified**, not complete Ixian/Nexus family or expansion acceptance. This document records the source and runtime boundary of the fresh `ixian-replacement` profile. Existing [Nexus release gates](NEXUS_CARD_RUNTIME.md) remain in force.
 
+## Native Richese normal purchases — 16 October 2026
+
+The fresh private profile additionally admits native Richese plus classic
+opponents in Basic/Advanced with exact CHOAM35, its separate original
+ten-card cache and Nexus alone. Original cache auctions and qualifying
+Nexus acquisition precede any normal purchased-card choice. Only a genuine
+**normal-auction** purchase is connected; cache, Black Market and special
+purchase replacement stay excluded under their separate source boundaries.
+
+Live card validation now receives selected `expansions` and native `richese`
+presence. Exact base, Ix, CHOAM and cache membership is precomputed from the
+original catalogues: shared Poison Tooth/Artillery identities qualify under
+CHOAM, but other Ix-only cards do not. Cache custody requires both selected
+CHOAM and actual Richese. A cache face later recycled into the normal deck
+does not become a cache-origin sale merely because of its printed family.
+Historical receipts retain their original shape and canonical identities.
+The native source binds its original round/cache, not a replacement Game.
+
+
+Six new selected-catalogue cases and twelve original Richese behavior cases
+pass in the affected seven-file **65/65** union. Eight original-action
+Use/Keep runtime paths cover both modes and native Richese/Atreides buyers;
+sixteen legal policy actions pass. Actual final-normal-lot continuation
+opens the original cache offer, and a subsequent real cache purchase by the
+same retained Nexus holder still creates no replacement.
+
+Two styled390×844 original-source journeys pass: Basic Atreides replaces
+Poison Tooth with actual deck-top Artillery (spice10→8, Emperor10→12);
+Advanced Richese keeps Poison Tooth and Nexus (spice5→3, Emperor10→12).
+The nine remaining cache cards stay untouched and each original lot advances
+once. Width/scroll390; no application/browser error. Two tool-only stale-node
+races were reported and recovered from authoritative state without replay.
+The producer was repaired to order its still-undealt cards **before** the
+declaration can automatically allocate its row; no native response is
+artificially held open. Two fixture-only typing annotations preserve behavior.
+
+Final types/lint and actual CLI help pass. Only an owned memory-only loopback
+host ran; no human server, D1, saved room, deployment or public start changed.
+Proof is outside Git: `/tmp/dune-richese-ixian-runtime.json`,
+`/tmp/dune-richese-ixian-ui-proof.json`. No new production build, broad suite,
+HTTP or saved-game assurance was run; all five facets remain Partial.
+
+Seven current source anchors and21 topic evidence paths resolve with no
+reference parse diagnostics; all five checklist facets remain Partial.
+
 ## Advanced native Tleilaxu admission — 16 October 2026
 
 The existing fresh Ix47/Tleilaxu-plus-classics profile now admits Advanced
@@ -166,7 +211,7 @@ November's Karama table expressly permits stopping the native Ixian ally from di
 
 ## Bounded local runtime contract
 
-The fresh `ixian-replacement` profile admits two through six unique classic factions in Basic/Advanced with base Treachery, or native Tleilaxu plus classics in either mode with original Ix47, always with Nexus alone. Native Ixians, other expansion families, Leader Skills, Homeworlds, Semuta, Discoveries, Ecaz variants and other overlays remain excluded. Neither branch retrofits an in-play game, enables a public start, resets a saved room or changes existing native Ixian allied replacement.
+The fresh `ixian-replacement` profile admits two through six unique seats in Basic/Advanced: classics/base33, Tleilaxu plus classics/Ix47, or Richese plus classics/CHOAM35 with the separate original cache, always with Nexus alone. Native Ixians, other native families, Leader Skills, Homeworlds, Semuta, Discoveries, Ecaz variants and other overlays remain excluded. No branch retrofits an in-play game, enables a public start, resets a saved room or changes native Ixian allied replacement.
 
 There is no starting Nexus deal. Native draws require a qualifying closing
 Nexus with a settled alliance, so a two-seat profile can continue its base

docs/RULE_DECISIONS.md

@@ -694,7 +694,7 @@ dedicated retrieved worked FAQs. [Contract and remaining limits](HOMEWORLD_OCCUP
 | Advanced Richese ally contribution | The authorized supplied Advanced Richese Bidding clause routes Richese's contribution to its ally's cache/Black Market purchase to Emperor or bank, even when Emperor buys. Preserve the original donor leg separately from buyer-to-Richese credit; cancellation redirects only the Emperor leg without paying twice. Basic retains R2's earlier receipt. Native Banker counts only final bank legs; exhausted-cache counts, positive Black Market self-bidding and Technology custody remain unresolved. | [Source distinction and recipient contract](RICHESE_AUCTION_RULES.md#authorized-advanced-contribution-recipients--4-october-2026) |
 | Richese Nexus Betrayal auctions | Pause at a valid original prepayment quote. Public self-cache veto discards the exact card without debit/acquisition; another buyer's positive cache/Black Market invoice keeps price/contributions/delivery and earned Harkonnen bonus while overriding the recipient to bank. All publicly possible unallied other-faction held-Nexus seats acknowledge uniformly; private identity controls only own Use. This neutral protocol is an application choice, not publisher timing. Normal hidden-family self-purchases, special-Karama veto and unsupported overlays remain excluded; no native Karama exception certifies them. Bounded engine/SQL/bot/phone scenarios are verified locally; broader verification remains Partial and public starts/full Nexus gates stay closed. | [Printed face, profile, API and saved continuation](NEXUS_RICHESE_RULES.md#bounded-betrayal-auction-contract--30-september-2026), [common privacy protocol](NEXUS_CARD_RULES.md#richese-betrayal-prepayment-protocol), [auction source boundaries](RICHESE_AUCTION_RULES.md) |
 | Guild Nexus Betrayal shipment payment | Replace one original funded positive fee in full, including own pre-funded payment and the printed full occupied-Junction override; preserve original payer/contributions, consume already-debited donor escrow once and deliver the original physical shipment once. Native applicable stop/rate responses precede the bounded gate; zero/stopped shipments supply no award or Nexus cost. Public possible held-Nexus seats acknowledge uniformly; private Use changes no public price/source disclosure. Fresh classic/native-Guild/Nexus with optional genuinely seeded Homeworlds only; unsupported native Cunning/Richese shipment overlays block before card/parent commitment, and restored transport independently requires the native Guild grant. Bounded engine/SQL/bot/CLI/phone custody and refresh are locally verified; no new priority/immunity, ordinary occupation/rounding ruling or extra shipment. Broad/public/live gates remain closed. | [Printed source and bounded contract](NEXUS_GUILD_RULES.md#nexus-guild-betrayal), [common protocol](NEXUS_CARD_RULES.md#guild-betrayal-funded-payment-protocol), [internal checklist](../game/reference.ts) |
-| Ixian Nexus Secret Ally replacement | Fresh classic/base33 or Tleilaxu/classic Ix47 in Basic/Advanced, Ixians absent and Nexus alone. Replace only the normal purchased card with the actual deck top; paid, printed Karama and successful native BG conversion retain original settlement. Native BG counter resolves first; funded winning-payment recovery supplies a paid receipt. Harkonnen uses visibly provisional native order: replacement, original income, original cancelable bonus. No second bonus or eight-card capacity gain. Sequencing and neutral timing are product policy, not publisher priority. Special origins/other overlays stay guarded; no public start or retrofit. | [Base contract](NEXUS_IXIAN_REPLACEMENT_RULES.md#bounded-local-runtime-contract), [Advanced native admission](NEXUS_IXIAN_REPLACEMENT_RULES.md#advanced-native-tleilaxu-admission--16-october-2026), [BG composition](NEXUS_IXIAN_REPLACEMENT_RULES.md#native-bg-converted-purchases--16-october-2026), [provisional Harkonnen order](NEXUS_IXIAN_REPLACEMENT_RULES.md#harkonnen-purchase-and-bonus-composition--16-october-2026) |
+| Ixian Nexus Secret Ally replacement | Fresh Basic/Advanced classics/base33, Tleilaxu/classics Ix47, or Richese/classics CHOAM35 plus original cache, with Ixians absent and Nexus alone. Replace only a normal purchased card with the actual deck top and preserve settlement. Native BG counter resolves first; paid recovery supplies a paid receipt. Harkonnen uses provisional replacement → income → cancelable bonus, with no second bonus or capacity gain. Selected card families and native cache membership remain exact. Neutral timing/order are product policy, not publisher priority. Cache/Black Market/special origins and other overlays stay guarded; no public start or retrofit. | [Base contract](NEXUS_IXIAN_REPLACEMENT_RULES.md#bounded-local-runtime-contract), [native Richese scope](NEXUS_IXIAN_REPLACEMENT_RULES.md#native-richese-normal-purchases--16-october-2026), [BG composition](NEXUS_IXIAN_REPLACEMENT_RULES.md#native-bg-converted-purchases--16-october-2026), [provisional Harkonnen order](NEXUS_IXIAN_REPLACEMENT_RULES.md#harkonnen-purchase-and-bonus-composition--16-october-2026) |
 | Ixian Nexus Betrayal: Bidding or Technology | Fresh native-Ixian/classic-or-Tleilaxu Basic/Advanced local `ixian-betrayal` uses Ix47 Treachery and Nexus alone, with no initial Nexus deal or old-save retrofit. Resolve actual native Karama/BG counters first; a native denial opens no Nexus gate or cost. After all native passes, uniform publicly possible unallied non-Ixian held-Nexus seats acknowledge before the native effect; concealed face governs only private Use. These are bounded privacy/ordering inferences, not publisher universal priority. One physical Ixian Nexus denies one current Bidding attempt (normal count, no Ixian inspection/return) or one Advanced Technology declaration (both card locations preserved, attempt remains used); all-pass allows the original effect and suffix once. No whole-phase ban, completed undo, invented direct-Nexus Karama counter or blanket immunity. Richese special-lot exchange, wider priority/modules, complete games, strategy and public/live release remain open; verification is Planned pending frozen direct evidence. | [Photographed face and native source protocol](NEXUS_CARD_RULES.md#bounded-ixian-betrayal-source-protocol--1-october-2026), [fresh local runtime and acceptance](NEXUS_CARD_RUNTIME.md#bounded-ixian-betrayal-local-runtime--1-october-2026), [five-facet internal topic](../game/reference.ts) |
 | Harkonnen Nexus Betrayal local preview | Fresh classic/base33/Nexus-only `harkonnen-betrayal` admits genuine personal/allied native matching calls. Native allied Karama/BG allowance comes first; a provisional uniform acknowledgement precedes the original outcome. Use returns the exact physical traitor immediately and preserves one automatic private actual Mentat replacement. The local ordering/privacy convention is not publisher/user priority and does not answer the previously asked universal reaction policy; public starts, old-game retrofit, arbitrary stacks and combined modules remain gated. Bounded native/private/recovery/CLI/phone verification is Partial development verified, not complete modes or deployment. | [Bounded source contract](NEXUS_HARKONNEN_RULES.md#bounded-betrayal-preview-contract--1-october-2026), [runtime limits](NEXUS_CARD_RUNTIME.md) |
 | CHOAM Secret Ally | Absent-faction Collection trade spends one actual Worthless card and the Nexus for two bank spice. It is separate from native Cunning and Auditor; the battle inspection alternative remains missing. | [Prototype contract](NEXUS_CHOAM_SECRET_ALLY.md) |