Connect Fremen Nexus protection before original worm devouring

docs/CURRENT_STATUS.md

@@ -29,6 +29,23 @@ optional skill bands, combinations and public expansion starts remain open.
 Rules implementation continues; comprehensive assurance and administration
 remain deferred until all rules are implemented.
 
+**Fremen Secret Ally worm protection — 14 October.** The recommended
+independent-operation prototype now saves only the actual unallied holder's
+groups before original devouring. Publicly possible threatened held-Nexus
+seats acknowledge in frozen storm order, independent of hidden face; no
+additional Karama provider or riding is invented. Native casualties/spice,
+Great Maker vote and the next blow/Nexus remain original. Actual Basic/
+Advanced source and four legal profiles pass in the related9-file union86/86.
+The390px table preserves Emperor1/reserves19/Tanks0/spice10, devours the BG
+advisor to Tanks1, clears four Hagga Basin spice, spends one Nexus and accepts
+the resumed Sihaya blow without overflow or browser errors. A storm-invalid
+fixture source was corrected to a real safe shipment, not weakened engine
+legality. Broader module/marker combinations and final acceptance stay open.
+Final types/lint/build pass. Four actual Basic/Advanced normal/Great Maker
+API runs preserve those costs, close the original vote where applicable and
+reach Sihaya once. Owned QA host/tab/scaffolding removed; proofs outside Git.
+See [the source-bound policy](NEXUS_FREMEN_RULES.md#recommended-independent-protection--14-october-2026).
+
 **Bene Gesserit borrowed Voice — 14 October.** The recommended provisional
 policy is now connected: actual unallied absent-BG holder, attacker-first
 neutral continuation before Prescience, one spent-card declaration and the

docs/IMPLEMENTATION_STATUS.md

@@ -1,5 +1,48 @@
 # Dune implementation status
 
+## 14 October 2026 — Absent-Fremen Nexus pre-devour protection
+
+Explicit recommended interpretation: independent printed protection, without
+inventing an absent native Karama provider or a ride. The original public
+threatened/unallied/held-Nexus membership determines one frozen storm-order
+queue; private face determines only Use. Both passes and one physical-card
+declaration precede all original devouring. Protect only that owner; original
+other losses, spice removal, replacement blow and Nexus resume once.
+
+Disjoint public-source and native-proof slices were integrated by one owner.
+Occurrence UUID/turn/territory/pile/index or summon parent, ordered cursor,
+spent owner and current decision are bound before settlement. Public quotes
+read no No-Field denomination. Existing protected-victim skipping retains
+protected markers; unprotected native materialization stays unchanged.
+Unrelated dynamic groups do not block the actual printed worm territory.
+Completed receipts tolerate later legitimate physical-card reshuffling.
+Original Great Maker worm protection now preserves its original vote and
+delays the replacement until that vote finishes.
+
+The native fixture initially selected a storm-caught Cielago South sector;
+its real shipment correctly failed. It now chooses original Hagga Basin12
+through actual paid shipment, with no storm/phase/force/hand rewrite. Setup,
+natural worm/alliance/closing draw, free Advanced BG accompaniment, collection
+and the next accepted worm are original producers; only conserved undealt
+deck order and scoped scalar entropy are staged. Fixture-trace/copy assertions
+were removed. Shared continuation helpers and exhaustive decision catalogs
+now recognize the new protection and preceding borrowed Voice queues.
+
+Related9-file union86/86 and actual390px table pass. Neutral Continue leaves
+all groups/spice intact; holder Use preserves Emperor1/reserves19/Tanks0/
+spice10, moves BG advisor1 to Tanks, removes four source spice and spends one
+Nexus. No ride; original Accept spice blow accepts the resumed Sihaya card.
+No overflow/errors. Four legal profiles execute own Use or neutral Pass.
+Stale Nexus table prose was corrected to list the connected effects and
+supply-only Moritani Cunning rather than claiming Grumman remained unavailable.
+Final types/lint and build pass, retaining existing build warnings. Four
+actual Basic/Advanced normal/Great Maker API runs preserve source4→0,
+owner1/Tanks0/reserves19/spice10 and one discard; the Maker retains vote→
+complete before Sihaya, with no ride. Owned host/tab/scaffold removed;
+source-bound phone/API receipts remain outside Git.
+Broader module/marker continuations, comprehensive assurance, full modes,
+calibration and deployed acceptance remain open.
+
 ## 14 October 2026 — Bene Gesserit Secret Ally borrowed Voice
 
 Recommended interpretation: one Karama-cancellable named Voice advantage,

docs/NEXUS_CARD_RULES.md

@@ -2,6 +2,18 @@
 
 Original source audit, 10 September 2026, with dated bounded runtime follow-ups below. This document establishes the printed component inventory, source protocol and implementation boundaries; none lifts expansion release gates. The ordinary worm-triggered alliance Nexus already in the engine is distinct from this optional card module.
 
+## Recommended absent-Fremen protection — 14 October 2026
+
+The printed Secret Ally protection now connects before original worm
+destruction through a neutral storm-order queue of publicly possible
+unallied threatened held-Nexus seats. Only the actual Fremen-card holder may
+spend. It protects that owner's groups only; original other casualties,
+spice removal, Great Maker vote and subsequent Nexus continue once.
+Independent protection has no invented extra Karama provider/window under
+an explicit provisional interpretation. No hidden-holder-only pause, revival
+or ride is created. Native Fremen Cunning remains a different producer.
+[Source, controls and changed-path proof](NEXUS_FREMEN_RULES.md#recommended-independent-protection--14-october-2026).
+
 ## Recommended absent-BG borrowed Voice — 14 October 2026
 
 The named-advantage recommendation now connects Secret Ally Voice through
@@ -1365,6 +1377,7 @@ The [bounded Ixian Secret Ally replacement integration](NEXUS_IXIAN_REPLACEMENT_
 - Duration is explicit for several panels but not all. Ixian Betrayal's scope over multiple auction lots, the optional continuation after canceling native Prescience, and exact multi-party cancellation priority require the corresponding existing faction timing contract. Do not make an entire-phase cancellation merely from the word “advantage.”
 - Emperor forced ally payment and purchase refunds retain their precise source-invoice requirements. Tleilaxu's combined revival now uses the [explicit recommended policy](NEXUS_TLEILAXU_RULES.md#recommended-combined-revival-prototype--14-october-2026): a mandatory free own leader/ordinary slot and fixed paid physical group sharing an expanded ordinary ceiling, with preserved cycles and typed caps. This is a provisional implementation, not a new publisher answer; the five counters are not free.
 - Bene Gesserit borrowed Voice now follows the [recommended cancellable named-advantage policy](NEXUS_BENE_GESSERIT_RULES.md#recommended-borrowed-voice-prototype--14-october-2026), with neutral pre-Prescience timing and original native command checks. The prototype does not answer generic hidden-reaction priority, fresh advisor/storm permission or broader named-special/module combinations.
+- Fremen Secret Ally protection now follows the [recommended independent-operation policy](NEXUS_FREMEN_RULES.md#recommended-independent-protection--14-october-2026), using original threatened public membership and pre-devour timing. This does not resolve general reactive Betrayal priority or widen native Cunning, and broader revival/module accounting remains separate.
 - Richese's two-No-Field effect has a bounded native Cunning shipment follow-up, but wider marker/module compositions remain separate. Its [bounded Betrayal auction contract](NEXUS_RICHESE_RULES.md#bounded-betrayal-auction-contract--30-september-2026) connects public self-cache veto and other-buyer sale diversion, not normal-deck hidden-family self-purchases or private special-Karama acquisition. Ecaz's Duke override needs explicit restoration/end-turn handling across capture, death and Ghola records. These are material implementation tasks, not reasons to invent substitute effects.
 - A complete twelve-card reference/inventory and common lifecycle are substantial first work, but do not alone make all thirty-six panels playable. Keep the public module release gated until every face's supported timing, secrecy, custody, bots, UI, rejection, multiplayer CAS and saved continuation paths are verified. If development supports only Atreides' family first, other faces must remain accurately represented and explicitly unavailable in the audit mode; they must not silently act as blanks in a released module.
 

docs/NEXUS_FREMEN_RULES.md

@@ -1,6 +1,6 @@
 # Fremen Nexus: worm and revival contract
 
-Primary-source and integration audit, 10 September 2026; narrow Secret Ally Revival and native Cunning prototypes integrated later. This document does not certify Fremen protection, combined-module Cunning or complete Fremen effects, and does not open a release gate. The [common Nexus rules](NEXUS_CARD_RULES.md) apply. No new user question was sent.
+Primary-source and integration audit, 10 September 2026, with dated Secret Ally revival, protection and native Cunning prototypes. These bounded paths do not certify complete Fremen/Nexus effects or open a release gate. The [common Nexus rules](NEXUS_CARD_RULES.md) apply.
 
 ## Evidence
 
@@ -114,16 +114,62 @@ fails before the software guard removal and passes afterward.
 
 ## Secret Ally protection
 
-With Fremen absent, `wormSurvival` currently proceeds directly to destruction. The protection must be committed before that destruction; it cannot revive already devoured troops, prevent removal of spice, or grant a ride. Bind it to one worm occurrence and the holder's affected physical group, including the existing No-Field reveal/capped-materialization path. Other factions remain vulnerable.
+With Fremen absent, protection must be committed before original destruction.
+It saves only the holder's threatened groups at this accepted appearance,
+not already-devoured troops, territory spice or other factions, and grants
+no riding or native Fremen identity.
 
-A pause offered only when the threatened player secretly holds this card would disclose possession. Do not add a holder-dependent automatic stop or an unsolicited confirmation for every victim. This intersects the existing unanswered reaction/automatic-pass policy. A saved public occurrence may support a future permitted response design, but it is not authorization to pick that design here. No source found gives the absent-faction card blanket Karama susceptibility; do not reuse a native Fremen cancellation response without establishing its classification.
+### Recommended independent protection — 14 October 2026
+
+Choose-recommended-option priority adopts the printed protection as an
+independent Secret Ally operation, with **no invented extra Karama response**
+or absent native provider. This contrasts with explicitly borrowed named
+Voice. It is a visible provisional interpretation, not publisher clarification
+or blanket Nexus immunity.
+
+Before devouring, every publicly possible unallied threatened seat holding
+any Nexus acknowledges in original storm order, regardless of private face.
+Seats without public card presence, with no affected group, or allied receive
+no impossible prompt. Only the current actual Fremen-card holder may Use.
+Pass preserves the card; Use discards it once and protects only that owner.
+The entire frozen queue closes before any casualty or spice removal. Its
+original public membership survives an unrelated anytime card exchange.
+Truthtrance and unfinished Traitor returns retain priority.
+
+`game/nexus-fremen-protection.ts` binds original UUID/turn/territory/origin and
+actual pile/index or summon parent, ordered acknowledgements and one protected
+owner. The engine resumes original `devour`/`afterWorm` once. Original protected
+victim skipping also leaves a protected No-Field hidden; unprotected markers
+still use native reserve-capped revelation/casualties. The public quote never
+reads denomination. Unrelated dynamic-board groups do not invalidate this
+printed-territory occurrence. Completed receipts do not require the singleton
+to remain discarded after a later legitimate deck reshuffle.
+
+Genuine Basic/Advanced setup, original worm/alliance/closing draw, paid
+Hagga Basin shipment and Advanced free accompanied advisor produce the source.
+Only undealt physical deck order and scoped scalar producer entropy are staged.
+The original Great Maker path is also exercised: protection precedes its
+unchanged vote, and the replacement is drawn only after that vote. Native
+Fremen protection/riding/Cunning remain separate.
+
+The related nine-file union passes86/86. Actual390px neutral Continue then
+holder Use keeps the Emperor's one ordinary counter/reserves19/Tanks0/spice10,
+devours the BG advisor into Tanks1, removes four Hagga Basin spice, discards
+one Nexus, grants no ride and restores the original Accept spice blow control.
+That control accepts the resumed Sihaya Ridge blow. No horizontal overflow
+or browser errors. Four minimal legal profiles answer their own opportunity.
+Final types/lint/build pass. Four normal/Great Maker Basic/Advanced API runs
+observe the same preserved costs and original vote→replacement sequencing.
+Owned QA host/tab/scaffolding is removed; proof receipts remain outside Git.
+Broader module/No-Field continuations, comprehensive recovery, complete games
+and deployed acceptance remain due.
 
 ## Secret Ally revival
 
 The card's total-of-three wording and the native alliance's ordinary free-three benefit support a **free-rate interpretation within ordinary revival accounting**, rather than three additional counters beyond the usual allowance. This is source composition, not an explicit Nexus FAQ. Preserve it as the proposed contract; do not silently apply Emperor's separate extra-return producer.
 The current first path is a deliberate subset of that proposed contract: with Fremen absent, an unallied base-faction holder in Basic or Advanced Revival may spend the physical Nexus card to transfer exactly three eligible forces from Tanks to reserves at zero spice cost. It is available before any ordinary force return, with no competing expansion/module revival modifier, pending response or decision. The three returned forces consume the ordinary allowance and free-force ledger; they are **not** Emperor-style extra returns. The Advanced one-elite-per-turn cap and physical elite census apply. The server's private offer provides the eligible elite counts; the action validates its current turn and group. A signed before/after receipt and independent event markers persist through JSON saves.
 
-The bounded classic Tech/Advanced Stronghold composition now calls the existing Axlotl activity hook after this actual free batch; spice stays on the token until native phase-end settlement, without changing these ordinary ledgers. See [the composition contract](NEXUS_CARD_RULES.md#classic-tech-and-stronghold-composition--4-october-2026). Tleilaxu income and Homeworld arrivals remain excluded: those broader continuations require the native pending-revival pipeline, not this quiet transfer. Fewer-than-three Tanks, previous force returns and higher free rates/modifiers still remain unavailable rather than guessing a ruling. Protection remains unimplemented; Cunning's bounded path is separate.
+The bounded classic Tech/Advanced Stronghold composition now calls the existing Axlotl activity hook after this actual free batch; spice stays on the token until native phase-end settlement, without changing these ordinary ledgers. See [the composition contract](NEXUS_CARD_RULES.md#classic-tech-and-stronghold-composition--4-october-2026). Tleilaxu income and Homeworld arrivals remain excluded: those broader continuations require the native pending-revival pipeline, not this quiet transfer. Fewer-than-three Tanks, previous force returns and higher free rates/modifiers remain unavailable rather than guessing a ruling. The independent protection prototype above and native Cunning remain separate producers.
 
 The separate fresh classic `leader-skills --nexus-cards` composition preserves
 the same ordinary/free-three ledgers, zero wallet cost, actual counters and

docs/RULE_DECISIONS.md

@@ -549,6 +549,7 @@ These are unresolved in the cited records. Do not infer an answer from elapsed t
 | Nexus responses and composition | Betrayal private-response timing, Emperor fewer-than-five, fresh advisor/storm cases, Duke restoration and remaining faction-specific combinations remain source-bound. Tleilaxu Secret Ally now has the explicitly provisional recommended combined policy in its own row below; it is not borrowed authority from native revival or Ghola. | [Common boundaries](NEXUS_CARD_RULES.md#remaining-source-questions-and-release-boundaries) and individual faction source/runtime documents |
 | Tleilaxu Secret Ally revival | Under choose-recommended-option priority, a quiet unallied actual holder with Tleilaxu absent returns one mandatory own dead leader free, using the ordinary leader slot, and zero-to-five exact counters at one bank spice each. The card shares an ordinary ceiling expanded to at least five; prior normal returns count, larger native/Recruits allowances remain, and the fixed card group is never doubled. Only the unavailable-roster trigger is waived; repeated-death/face-down and special custody rules remain, with original ordinary cycles preserved. No force-only use, native Tleilaxu income or nonexistent cancellation owner is invented. This is provisional implementation policy, not publisher clarification or a separately answered numerical user ruling. | [Recommended combined policy](NEXUS_TLEILAXU_RULES.md#recommended-combined-revival-prototype--14-october-2026) |
 | Bene Gesserit borrowed Voice | Choose-recommended-option priority selects one Karama-cancellable named Voice advantage when BG is absent. Every fresh Nexus battle has the same attacker-first two-combatant continuation before Prescience/inspection/plans, independent of hidden face. Only the actual unallied holder can Use. Declaration spends the Nexus; cancellation removes only Voice and retains the spent card, receipt and native preparation. No retrofit/reset of old preparation. This is explicit provisional implementation policy, not retrieved publisher clarification. | [Recommended borrowed Voice](NEXUS_BENE_GESSERIT_RULES.md#recommended-borrowed-voice-prototype--14-october-2026) |
+| Fremen Secret Ally protection | Choose-recommended-option priority adopts independent printed protection before one original worm's destruction, not a borrowed named native advantage or riding. Publicly possible unallied threatened held-Nexus seats acknowledge in frozen storm order regardless of face; only the actual Fremen holder can spend. Protect that owner's original groups only, retain other casualties/spice removal and original Great Maker vote/Nexus continuation. No invented additional Karama response or native provider. Protected No-Field uses native protected-victim skipping; broader combinations remain unverified. This is visible provisional implementation policy, not publisher clarification or universal reaction priority. | [Recommended independent protection](NEXUS_FREMEN_RULES.md#recommended-independent-protection--14-october-2026) |
 | Moritani Atomics after alliance change | The publisher’s permanent −1 text does not identify later-ally treatment, and prior requested searches found no clarification. Under choose-recommended-option priority, retain the original affected pair permanently: Moritani and its ally at detonation. Later Nexus and Enemy of My Enemy alliances are allowed without moving the penalty to a new ally; an unallied detonation gains no later ally target. Existing stored activation targets migrate immutably, without replaying effects. This is a conservative provisional implementation interpretation, not publisher clarification or a separately answered numerical user ruling. | [Recommended persistent targets](MORITANI_TERROR_RULES.md#recommended-persistent-activation-targets--14-october-2026) |
 | Moritani Sneak Attack entry classification | The printed verb is “Send”; no retrieved ruling classifies the off-planet reserve transfer as a shipment for other arrival powers. The engine now **explicitly adopts** the supported shipment composition: a positive Sneak Attack in Shipment and Movement accrues the Heighliners token once for its owner, then offers the Bene Gesserit Intrusion (Advanced, with fighters present) and the free spiritual-advisor shipment, with the committed Terror entry resolving first; a zero-force resolution accrues nothing and opens no reaction. This order is an implementation interpretation, not a publisher ruling. | [Source boundary and adopted classification](MORITANI_ASSASSINATION_SNEAK.md#adopted-shipment-classification-7-october-2026) |
 | Orgiz collection | Basic retains the publisher-p13 per-blow ambiguity and provisional one-transfer-per-positive-deposit mapping. Authorized supplied Advanced rulebook physical24 says each time Collection occurs in a territory containing spice: one transfer per actual positive territory Collection per fighter occupant, never extra transfers for multiple source keys. Canonical ordinary deposit receipts identify actual payers, including co-present collectors; force presence and old wallets alone do not qualify. Under choose-recommended-option priority, owners and eligible foreign ordinary payers resolve in original storm order. Shared Ecaz lots in both modes wait for actual bilateral allocation, then consider positive foreign recipients Ecaz first, ally second; Advanced charges once per territory, Basic counts actually reduced positive source deposits in that territory. Self, zero shares and empty purses are skipped; balances track every transfer without debt. Ordering and the Basic mapping are provisional implementations, not separate numerical user answers or publisher rulings. | [Advanced source cutover and Basic boundary](DISCOVERY_PROTOTYPE.md#authorized-advanced-collection-wording) |