Connect printed Diplomat defenses and Ecaz Tanked Duke Cunning

docs/CURRENT_STATUS.md

@@ -142,6 +142,22 @@ spice/counters and completed events. No broad suite, recovery campaign or
 deployed acceptance was run.
 Compiler/lint and two affected Ambassador/worm contract cases pass.
 
+**Printed defense / Tanked Duke wave integrated.** Disjoint helper/control
+slices are integrated by the parent. Native Ix/Richese skill battles prove
+hybrid protection, Weirding's non-Shield behavior, Chemistry against Tooth,
+additional Ix Snooper and sealed Portable, with one physical Worthless discard.
+Existing capability1 battles finish without a retroactive hybrid choice;
+new battles use capability2. Basic/Advanced Ecaz spends one actual Nexus,
+revives the same Tanked Duke, preserves deaths2, uses him in a native battle
+and releases once. The independent resurrection/use reset remains provisional;
+captured/Ghola and wider timing remain guarded.
+Live isolated React controls in Chromium reach hybrid survival/disposal and
+Tanked acquisition with exact native outcomes. No broad suite, recovery
+campaign, HTTP or deployed acceptance was run.
+Types/lint and the affected five-file union pass **33/33**. The sole initial
+failure was an erroneous unsupported-Shield fixture row, removed before
+the focused repair and union rerun; runtime code was not weakened.
+
 **7 October 2026 — five pending rulings resolved by the user.** The user
 answered five recorded questions; each is now recorded in
 [the decision index](RULE_DECISIONS.md#user-rulings--7-october-2026) and

docs/DIPLOMAT_DEFENSE.md

@@ -1,9 +1,11 @@
 # Diplomat copied-defense prototype
 
 13 September 2026. **Prototyped**, with **Partial** rules coverage. This connects
-the Diplomat's normal band for canonical base Shield and Snooper defenses only.
-The lower [retreat prototype](LEADER_SKILLS_RULES.md#bounded-diplomat-retreat-interpretation)
-is now connected separately; combined modules and other defense cards remain
+the Diplomat's normal band for the canonical printed defenses that the opponent
+actually used: Shield, Snooper, Shield Snooper, defensive Weirding Way,
+defensive Chemistry and Portable Snooper sealed in the defense slot. The lower
+[retreat prototype](LEADER_SKILLS_RULES.md#bounded-diplomat-retreat-interpretation)
+is now connected separately; combined modules and other defense sources remain
 unfinished. Public Leader Skills starts and publication remain gated.
 
 ## Source and interpretation
@@ -19,15 +21,36 @@ selected for battle, if applicable. Page 12 limits a captured skill to its
 lower band. The archived component photograph and transcript are retained in
 the local source archive described by [the common source contract](LEADER_SKILLS_RULES.md).
 
-The connected base interpretation therefore accepts one actual Worthless card
+The connected interpretation therefore accepts one actual Worthless card
 from either plan slot, or offers a choice when both slots contain Worthless
 cards. An actual defense makes the skill unavailable. The opponent must have
-played a canonical base Shield or Snooper; an empty defense supplies nothing to
-copy. The copied role protects exactly like that base defense without changing
-the Worthless card's identity or either revealed plan. This lets the selected
-native Diplomat protect itself: copied protection is resolved first, then the
-common surviving-trainer rule is evaluated. If the copied type does not stop
-the weapon, removing the dead trainer's skill does not change that outcome.
+played one of the canonical printed defenses; an empty, unsupported or forged
+face supplies nothing to copy. Canonical identity is matched by physical ID with
+printed kind, name and effect, so a tampered card cannot inherit a role by
+claiming a printed name.
+
+The copied role is the role the opponent actually used in the defense slot, and
+each printed distinction survives: a Shield Snooper protects against both
+projectile and poison weapons and still counts as a Shield for the lasgun
+explosion; a defensive Weirding Way stops a projectile weapon but is **not** a
+Shield and triggers no explosion; Chemistry stops Poison Tooth, which a Snooper
+copy does not; a Portable Snooper sealed in the defense slot copies only its
+poison-defense role. The shared battle-card role helpers supply
+these distinctions rather than a binary Shield/Snooper substitution.
+
+**First-version interpretation.** Copying the opponent's already-used defensive
+role does not copy its activation, its late-play opportunity or its own-slot
+prerequisite. Two consequences are explicit implementation inferences. A
+defensive Weirding Way keeps its printed requirement that another weapon or
+Worthless card occupy the weapon slot of the plan it was played in, so the
+opponent's real plan weapon is validated before any copy is offered; our own
+plan needs no weapon to receive that copied role. A copied Portable Snooper does
+not gain the original card's after-reveal play, which the prototype already
+excludes for every late defense. The copied role protects exactly like that
+defense without changing the Worthless card's identity or either revealed plan,
+and the copied defense is resolved first so that the common surviving-trainer
+rule is evaluated afterwards. If the copied type does not stop the weapon,
+removing the dead trainer's skill does not change that outcome.
 
 Two timing and cleanup rules are explicit implementation inferences. The
 optional public choice occurs after both plans reveal and before traitor calls,
@@ -43,15 +66,21 @@ specific discard instruction overrides in this prototype.
 ## Connected behavior
 
 New supported battles carry a version marker and an independent event-bound
-receipt. After reveal, the server derives the eligible physical Worthless IDs,
+receipt. The marker also records which copied sources that battle admits: a
+newly stamped battle admits every canonical printed defense above, while an
+already-open older battle keeps its original canonical base Shield and Snooper
+sources only, so widening the quote cannot invent a retroactive choice for a
+pending plan that never had one. After reveal, the server derives the eligible
+physical Worthless IDs,
 opposing defense and live native assignment from current custody. Choosing one
 records its copied kind; declining records that choice. Either result preserves
 the original plans and leaves every card in its hand until battle resolution.
 Legacy battles without the new marker keep their existing continuation and do
 not gain a retroactive Diplomat opportunity.
 
-The copied base role feeds ordinary weapon survival and existing Poison or
-Projectile Defense skill checks. The physical Worthless identity remains
+The copied printed role feeds ordinary weapon survival and existing Poison or
+Projectile Defense skill checks through the shared battle-card role helpers.
+The physical Worthless identity remains
 available to checks such as Warmaster. Only the chosen Worthless receives the
 mandatory skill discard; a second played Worthless follows ordinary winner or
 loser cleanup. The receipt is revalidated before views, normalization and
@@ -60,13 +89,24 @@ card faces and unique physical custody.
 
 The decision and its already-revealed card IDs are public. Internal frame,
 signature and binding fields are not projected. Before joint reveal, ordinary
-sealed-plan and hand privacy remain unchanged. Human controls name the copied
-defense and each eligible Worthless card, and allow an explicit decline. All
+sealed-plan and hand privacy remain unchanged. Human controls name the opposing
+card, the actual copied role and each eligible Worthless card, allow an explicit
+decline, and state the first-version interpretation above when the copied role
+is a hybrid or otherwise not a plain Shield or Snooper. All
 four AI profiles use the public revealed cards and shared legality; no opposing
 hand or pre-reveal plan is inspected.
 
 ## Evidence and remaining scope
 
+8 October native Ix/Richese skill-battle smokes prove hybrid protection
+against Poison Blade, Weirding against projectile and non-exploding lasgun,
+Chemistry against activated Tooth, additional Ix Snooper and sealed Portable.
+Each selected physical Worthless is discarded once. A capability1 battle
+finishes without a retroactive hybrid offer or missing-receipt rejection;
+new battles receive capability2. In Chromium, the live owned hybrid control
+reaches native leader survival and one disposal after actual traitor actions.
+This is isolated native engine/control proof, not deployed acceptance.
+
 Sixteen focused checks were observed before the broad checkpoint run. They
 cover the pure base quote, Basic and Advanced battles, either Worthless slot,
 two-card choice, same-disc survival, Shield explosion composition, captured
@@ -89,9 +129,11 @@ checkpoint commit and private source-bound report.
 
 The bounded [lower retreat](LEADER_SKILLS_RULES.md#bounded-diplomat-retreat-interpretation)
 now follows a documented conservative strength and outcome order; this does not
-settle a publisher priority ruling. Shield Snooper, Chemistry, defensive
-Weirding Way, Portable Snooper, Carthag-added protection and any future copied
-or modified defense still need a separate contract for whether generic roles or
-named exceptions are inherited. Homeworlds, Nexus, Discoveries, Stronghold
-Cards, Tech Tokens and other combined modules remain guarded. These limits
-preserve the existing public gates.
+settle a publisher priority ruling. Carthag-added protection, mirror and
+numeric or Stronghold strength modifiers, late Portable Snooper play, and any
+future copied or modified defense still need a separate contract for whether
+generic roles or named exceptions are inherited; the copied role never imports
+a modifier, an activation or a late-play window. Canonical additional Ix Shield
+and Snooper faces use those same printed roles in new battles. Homeworlds, Nexus,
+Discoveries, Stronghold Cards, Tech Tokens and other combined modules remain
+guarded. These limits preserve the existing public gates.

docs/NEXUS_ECAZ_RULES.md

@@ -87,25 +87,31 @@ the bounded runtime below.
 When Ecaz and Moritani are both seated in a three-to-six-player Basic or
 Advanced game using only their expansion and Nexus cards (other seats may be
 classic factions), an unallied Ecaz holder may spend the physical Ecaz Nexus
-card at a quiet Battle phase boundary to take the **existing** living,
-uncaptured, non-Ghola Duke Vidal. This transfers the one shared disc even if
-Moritani controls him; it does not add a leader or Traitor Card to a native
-roster. The owner's private offer reports the current public controller and
-availability. Other seats see no held-card-dependent offer or pause.
+card at a quiet Battle phase boundary to take the **existing** uncaptured,
+non-Ghola Duke Vidal, living or set aside in the Tanks. This transfers the one
+shared disc even if Moritani controls the living Duke; a Tanked acquisition
+revives that same disc and preserves its death count. It does not add a leader
+or Traitor Card to a native roster. The owner's private offer reports the
+current public controller and availability. Other seats see no
+held-card-dependent offer or pause.
 
-Acceptance binds the original controller, source, turn, seated factions and
-event to a signed saved receipt, discards the single card, changes Duke custody
-and retains independent replay markers. The ordinary battle leader path may
-then select Duke, and battle use sets him aside through its existing lifecycle.
+Acceptance binds the original controller, source, alive/dead status, turn,
+seated factions and event to a signed saved receipt, discards the single card,
+changes Duke custody and retains independent replay markers. Receipt keys and
+signature field order are unchanged: older completed living receipts remain
+valid, with no invented historical death count. The actual shared disc retains
+its death history. The ordinary battle leader path may then select Duke, and
+battle use sets him aside through its existing lifecycle.
 Unused **Nexus** custody ends at turn end. This distinct temporary source does
 not shorten the ordinary Ecaz Ambassador tenure, which lasts until battle use
 or a later Moritani acquisition. JSON restoration and saved-room replay retain
 the completed play without recomputing historical custody from a later turn.
 
-The printed Cunning explicitly reaches Duke in capture, Tanks or Ghola custody;
-this **bounded prototype does not**. Those return destinations and exceptional
-priority interactions need a coherent physical-custody contract before they
-are enabled. The face does not print a Battle-only timing restriction; the
+The printed Cunning explicitly reaches Duke in capture, Tanks or Ghola custody.
+The **bounded prototype now includes set-aside Tanks custody**, but not capture
+or Ghola acquisition. Those return destinations and exceptional priority
+interactions still need a coherent physical-custody contract before they are
+enabled. The face does not print a Battle-only timing restriction; the
 quiet phase-six window is a product implementation boundary, **not** a GF9
 ruling. Advanced Harkonnen tables are also excluded: the existing shared
 leader battle path cannot select Duke there, so the card must not be spent
@@ -113,6 +119,41 @@ for an unusable disc. At that initial checkpoint other expansion factions,
 Homeworlds, Discoveries, Leader Skills and combined optional modules remained
 gated. This was not full Ecaz, Moritani or Nexus module acceptance.
 
+### Tanks Cunning composition — 8 October 2026
+
+The printed Ecaz Cunning supplies the Tanks allowance. Only its native,
+unallied Ecaz holder may spend the actual Ecaz Nexus card to perform this
+acquisition at the existing quiet Battle boundary. The pure custody transition
+permits a dead disc only for `ecazNexus`, with controller, acquisition turn and
+source all null before acquisition. It revives the existing disc and assigns
+Ecaz's current-turn Nexus custody. Moritani, ordinary Ecaz Ambassador and ally
+acquisitions still reject a dead Duke; capture/Ghola and Advanced Harkonnen
+gates are unchanged.
+
+Clearing the old battle-use stamp on this independent resurrection permits
+one new use under the normal shared-Duke lifecycle. That allowance/use
+composition is **provisional**, not an inspected GF9 FAQ ruling. A living,
+already-used Duke remains unavailable; taking a living disc does not clear
+its stamp. There is no separate paid revival charge or native revival slot
+for this Nexus action. This does not broaden the exact user ruling that only
+Ecaz revives Duke, including when using the Ghola Treachery Card, into support
+for Cunning's exceptional Ghola custody or return destinations.
+
+Focused cases are authored in [the quote/source tests](../tests/nexus-ecaz-duke-quote.test.ts):
+source-specific dead-disc rejection, same-disc revival with preserved death
+history and cleared prior use, real Basic/Advanced setup and physical Nexus
+spending by all four bot profiles, living-used rejection, set-aside custody,
+and the unchanged historical receipt shape. These additions are not a claim
+of executed checks or live-control proof.
+
+Parent native Basic/Advanced smokes now spend one original Nexus, acquire
+the same Tanked Duke with deaths2 retained and old use cleared, then seal
+him in a real new battle and release once after survival. No spice is
+charged for the Nexus action. The live owned control in Chromium reaches
+the same acquisition, death history and card disposal against the native
+engine. This is isolated rule/control proof, not HTTP, recovery or deployed
+acceptance; no broad suite was run.
+
 ### Standalone skill/Nexus follow-up — 5 October 2026
 
 The fresh standalone Ecaz/classic ecaz33/all14/all12 entry now composes the
@@ -121,11 +162,16 @@ and selected original Tech/Advanced Strongholds. Moritani need not be seated.
 Five ordinary training discs remain; the shared Duke receives no assignment.
 Human YZLNTNEZ uses Duke6 with face-up normal Warmaster/Worthless and a held
 Shield against actual poison, wins7–5, releases Duke before cleanup and keeps
-the original winner reward/city income. Advanced Harkonnen, dead/captured/
-Ghola recovery, shared-Duke training and unrelated overlays remain guarded.
+the original winner reward/city income. At that checkpoint Advanced Harkonnen,
+dead/captured/Ghola recovery, shared-Duke training and unrelated overlays
+remained guarded; the Tanks-only Cunning change above supersedes its dead-disc
+gate, not its capture/Ghola boundaries.
 See [the exact standalone profile and evidence](NEXUS_CARD_RULES.md#standalone-e3-nexus-skills-and-original-components--5-october-2026).
 
 
+The following describes the initial living-only checkpoint, not verification
+of the Tanks follow-up:
+
 [The focused Duke tests](../tests/nexus-ecaz-duke-engine.test.ts) exercise
 genuine Ecaz/Moritani setup, physical draw/spend, Basic and Advanced transfer,
 ordinary leader projection, actual end-turn expiry, blocked custody,

docs/RULE_DECISIONS.md

@@ -376,7 +376,7 @@ dedicated retrieved worked FAQs. [Contract and remaining limits](HOMEWORLD_OCCUP
 | Spice Banker battle spending | Secret own-spice commitment is separate from support; only the surviving selected disc gains strength. Core Battle Plan payment rules spend it on death/loss and waive it for a sole traitor-call winner. This payment composition is explicit; upper deferred-income custody remains pending. | [Source contract and prototype](SPICE_BANKER_RUNTIME.md) |
 | Smuggler shipping | Optional free companion is included in the actual total; apply Guild rounding to the reduced priced count. Ordinary Fremen reserves are on planet. The officially permitted owned No-Field plus a separate free force is now prototyped at the unchanged one-marker price. Legacy unstamped ordinary declarations keep their quoted full price. | [Ordinary contract](SMUGGLER_SHIPMENT.md), [No-Field combination](SMUGGLER_NO_FIELD.md) |
 | Sandmaster movement | One optional board spice per distinct entered territory; source-only repositioning earns none. Per-movement Hajr reset is a documented grammatical inference. Canceled moves earn nothing. Native Fremen worm rides and physical Fremen Ambassador relocations collect optionally at the destination before arrival reactions, without an invented intermediate route. Multiple-pile and concealed-relocation collection remain guarded. | [Ground/direct relocation](SANDMASTER_MOVEMENT.md), [worm rides](SANDMASTER_WORM.md) |
-| Diplomat defense | With no actual defense, one physical Worthless card in either Battle Plan slot may copy the opponent's canonical base Shield or Snooper. The same native trained disc may protect itself. The public after-reveal/before-traitor choice and mandatory discard after traitor preemption are documented implementation inferences. Lower retreat and modified or multirole defenses remain guarded. | [Source and connected prototype](DIPLOMAT_DEFENSE.md) |
+| Diplomat defense | A committed Worthless copies the opponent's canonical printed defensive role: base/Ix Shield/Snooper, hybrid, defensive Weirding/Chemistry or sealed Portable. Named combat distinctions remain. Copying the used role, not activation or own-slot prerequisites, is a visibly qualified first version. Reveal-before-traitor timing and mandatory disposal remain implementation interpretations; existing base-only battle windows are not reopened. Late/mirror/numeric modifications remain separate. | [Source and connected prototype](DIPLOMAT_DEFENSE.md) |
 | Bureaucrat payments | Once per phase, optionally divert two from an actual third-party payment of at least five; payer cost is unchanged. Bribes trigger at transfer to the recipient's shield, not later collection. Native income is offered after Karama allowance as an explicit outcome-based inference; split contributions, split recipients and remaining payment families need further integration. | [Source and connected boundary](BUREAUCRAT_PAYMENTS.md) |
 | Mentat question preview | The physical card says to show the card to the questioner, privately; it stays in hand and does not bind a plan. Ask before posture/faction powers. A uniform target response protects held/absent privacy but awaits approval as an exception to skipping forced confirmations; standard activation stays disabled. Empty hands skip with no fabricated answer. | [Source and preview](MENTAT_QUESTION.md) |
 | Leader battle effects | Rihani normal peek and reshuffle precede a separate committed optional draw; ordering is an explicit printed-order inference. Unused excludes actual calls, not mere disclosure. Mentat/Bureaucrat change scores; Sandmaster adds board spice. Multiple piles and Face Dancer composition stay guarded. | [Source contract and prototype](LEADER_BATTLE_EFFECTS.md) |
@@ -467,7 +467,7 @@ These are unresolved in the cited records. Do not infer an answer from elapsed t
 | Recruits late accounting and rates | A user question has been sent for two free plus one paid Atreides return before Recruits: keep the disputed case gated, or one/two further free returns without refund. No answer is assumed. Late-changing free rates, pending repricing and same-turn recovered-card replay also stay gated. The connected clean-case preview retains the independent seven-force cap after faction-advantage cancellation as an explicit inference, not a direct combined FAQ. | [Source audit](RECRUITS_RULES.md), [runtime scope](RECRUITS_RUNTIME.md) |
 | Sapho remaining timing | First versus unspent Advanced Guild priority, partly completed combined turns, cyclic auction duration and later battle timing stay guarded. The existing pre-plan opportunity supports [early aggressor](SAPHO_AGGRESSOR.md). Prior questions remain unanswered. | [Source audit](JUICE_OF_SAPHO_SOURCE_UPDATE.md), [battle review](JUICE_OF_SAPHO_BATTLE_REVIEW.md) |
 | Semuta Drug | Full-hand exchange is user-approved; neutral all-seat acknowledgements remain the explicit application policy. Other discard producers, nested continuation coverage and full-game acceptance remain unfinished. | [Source update and selected exchange](SEMUTA_SOURCE_UPDATE_20260907.md), [privacy review](SEMUTA_PRIVACY_REVIEW.md) |
-| Leader Skills edge cases | Capture/replacement eligibility, Banker escrow custody, Smuggler modifier/allocation boundaries, Mentat empty-hand fallback, modified Diplomat defenses and simultaneous optional timing remain source gaps. After an online publisher/designer/tournament check found no explicit priority ruling, the bounded standalone Diplomat retreat prototype explicitly chooses printed/copied disc strength and a surviving-loser retreat before ordinary casualties; other combinations remain guarded. This is an implementation interpretation, not an official clarification. | [Material boundaries and selected retreat interpretation](LEADER_SKILLS_RULES.md#bounded-diplomat-retreat-interpretation), [Diplomat defense boundary](DIPLOMAT_DEFENSE.md#evidence-and-remaining-scope) |
+| Leader Skills edge cases | Capture/replacement eligibility, Banker escrow custody, Smuggler modifier/allocation boundaries, Mentat empty-hand fallback, late/mirror/numeric Diplomat defenses and simultaneous optional timing remain source gaps. Printed alternate/hybrid defense roles now have a connected, explicitly interpreted copy path. The bounded Diplomat retreat prototype chooses printed/copied strength and surviving-loser retreat before casualties; this is not an official priority clarification. | [Material boundaries and retreat](LEADER_SKILLS_RULES.md#bounded-diplomat-retreat-interpretation), [Defense limits](DIPLOMAT_DEFENSE.md#evidence-and-remaining-scope) |
 | Smuggler collection strength | A fresh primary-source check found no modifier ruling. The user was asked whether to keep affected combinations gated, use printed/copied disc value, or include leader bonuses with Stunner zero. No answer is assumed. The reveal-bound deferred receipt is supported as an explicit timing inference; unmodified lower collection is now [prototyped](SMUGGLER_BATTLE.md); modified strength, multiple positive piles and combined modules remain gated. | [Smuggler follow-up](LEADER_SKILLS_RULES.md#20-september-smuggler-follow-up) |
 | Ordinary Guild cancellation | Unaffordable repricing, replacement/retry/decline, consumed opportunity, contributor adjustment and ordering with special shipment-stop. The affordability question was already sent. | [Material timing](GUILD_RATE_KARAMA_RULES.md#material-unresolved-timing) |
 | Base special Karama | Unfunded auction recovery, stopped-shipment settlement and Atreides full-plan commitment order remain provisional. Native full-plan/Voice/Prescience/Truthtrance/Ghola interactions now have genuine-setup focused evidence, but the source audit does not settle the special offer/deadline or target-first interpretation. | [Explicit base interpretations](BASE_ADVANCED_READINESS_20260907.md#explicit-unresolved-base-interpretations), [full-plan interaction audit](ATREIDES_FULL_PLAN_TIMING.md) |
@@ -481,7 +481,7 @@ These are unresolved in the cited records. Do not infer an answer from elapsed t
 | CHOAM Secret Ally battle timing | The printed after-victory inspection is optional and the Nexus identity stays secret. The connected prototype chooses a uniform use-or-continue window for every winner when Nexus is enabled and CHOAM absent; nonholders pass, while a holder may decide after the result. This privacy-preserving prompt is a product inference, not publisher text. A holder-only pause would reveal custody and a precommitment would remove the printed choice. Ordinary Karama cancellation remains unestablished by retrieved sources; no response is invented. | [After-victory inspection boundary](NEXUS_CHOAM_SECRET_ALLY.md#after-victory-inspection-audit) |
 | Moritani Secret Ally battle timing | The printed after-loss retention is optional and the Nexus card remains secret. The connected prototype offers the same choice to every loser when Moritani is absent and at least one publicly revealed played card is retainable; a loser with no eligible public card has no useful choice, independent of hidden custody. Only an unallied holder may spend the physical card. This prompt is a privacy-preserving product inference, not publisher timing text. Native Moritani alliance retention and its Karama response remain separate; no generic Secret Ally counter is invented. | [Nexus retention boundary](NEXUS_CARD_RULES.md#moritani-secret-ally-retention-timing) |
 | Ecaz Secret Ally traitor inquiry | The printed panel asks one selected player whether they hold any of the holder's leaders as Traitors, without identifying a leader; it specifies neither native-versus-controlled scope nor answer audience. The connected prototype chooses native printed faction leaders (including dead/captured), ordinary Traitor Cards rather than Face Dancers, and a holder-only historical yes/no. This is a privacy-preserving product interpretation, **not** a publisher ruling. Foreign Ghola/captive scope and table-wide disclosure remain release boundaries. | [Ecaz inquiry source and bounded runtime](NEXUS_ECAZ_RULES.md#bounded-secret-ally-traitor-inquiry-runtime) |
-| Ecaz native Nexus Cunning timing | The printed Cunning takes Duke Vidal for this turn even from capture, Tanks or Ghola custody, but names no phase. The connected first version chooses the quiet Battle phase boundary and a living, uncaptured, non-Ghola shared disc, including a Moritani-controlled Duke. This is a bounded product timing and custody decision, **not** a publisher restriction. Advanced Harkonnen is gated because its existing battle path cannot select Duke. Exceptional return destinations, response priority and combined modules remain gated; ordinary Ecaz Ambassador custody is unaffected. | [Source and bounded runtime](NEXUS_ECAZ_RULES.md#bounded-native-cunning-duke-vidal) |
+| Ecaz native Nexus Cunning timing | The printed Cunning takes Duke for this turn even from capture, Tanks or Ghola, without a phase. The quiet Battle prototype now covers living control or set-aside Tanks. Tanks preserve deaths and reset use under a provisional independent-resurrection policy; this is not a numerical user ruling. Captured/Ghola return destinations and Advanced Harkonnen remain guarded; ordinary Ambassador and paid-revival custody are unchanged. | [Source and bounded runtime](NEXUS_ECAZ_RULES.md#bounded-native-cunning-duke-vidal) |
 | Emperor Secret Ally purchase timing | The bounded normal bank-auction prototype chooses a uniform winner payment confirmation in classic-faction Nexus-only games with Emperor absent, including otherwise sole spice payments. This prevents a holder-only pause from exposing hidden card eligibility. It is a provisional product privacy choice, **not** a user or publisher ruling; the previously asked confirmation-versus-gate question remains open. Seller-paid/allied purchases and other sources stay gated. | [Source contract and bounded prototype](NEXUS_EMPEROR_RULES.md#secret-ally-retain-the-actual-purchase-price), [runtime](NEXUS_EMPEROR_SECRET_ALLY_RUNTIME.md#bank-auction-purchase-alternative) |
 | Discovery prototype inferences | Free entry uses storm order and ordinary source-storm restrictions; these are general-rule inferences. Great Maker currently follows ordinary first-turn worm skipping and Sandtrout suppression; an exhausted token type creates no replacement token. These preserve current source interpretation and physical inventory but are not separately confirmed rulings or complete combined-module certification. | [Interpretations for refinement](DISCOVERY_PROTOTYPE.md#interpretations-retained-for-refinement) |
 | Other Homeworld combinations | Population/force splitting, removal custody, replacement shortages, income accounting and placement ordering remain local to their detailed contracts. | [Homeworld rules](HOMEWORLD_RULES.md), [occupation](HOMEWORLD_OCCUPATION_RULES.md) and the effect documents above |