Integrate Ixian Nexus Betrayal at original native attempts

docs/CURRENT_STATUS.md

@@ -16,6 +16,34 @@ open mode gates.
 
 ## Current checkpoint and work
 
+Ixian Nexus Betrayal now connects both actual native attempts: Bidding's
+extra-card inspection and Advanced Technology. Fresh local `ixian-betrayal`
+uses native Ix/allowed classic or Tleilaxu, the physical Ix deck and Nexus only.
+Native Karama counters resolve first; uniform public possible holders then
+acknowledge before the draw/exchange. Denial/allow uses the original transition
+once with exact Nexus cost, private controls, legal bots and saved continuation.
+This bounded ordering/privacy is an inference, not universal publisher priority.
+Original BG conversion and Harkonnen exchange suspensions retain native source
+ownership; legitimate pre-offer loss of a declared Technology card retains its
+spent attempt without a swap or fabricated Nexus gate. Public administrator
+progress follows the same unfinished acknowledgements as the player table.
+Final scoped native and privacy/administrator reviews have no finding.
+Types, lint, **6,315 offline tests**, **167 affected cases**, final guide
+**10/10** and build pass. Eight actual native scenarios plus both BG
+Worthless-Karama interruptions retain original stock and continuation.
+Four privately backed-up exact-version CLI/390px rooms prove Basic Bidding
+Use, Advanced Technology Use, wrong-face Bidding Pass and two-receiver
+Technology all-pass with partial refresh. Read-only proof retains all
+forty-seven Treachery/twelve Nexus cards and fourteen earlier QA games.
+The bounded path is **Partial development verified**, not full Ixian/Nexus
+completion, a public start or deployed acceptance.
+After the final isolated worker reload, all **55 original seats in eighteen
+rooms** reauthenticate; exact saved proof preserves all four outcomes and
+fourteen earlier games. The actual phone guide shows **Partial / Development:
+Verified** at 390px without horizontal overflow. Current HTTP integration is
+**52/55**, not green: three requests returned the known Wrangler proxy 503.
+No authorization weakening, automatic write retry, reset or deployment follows.
+
 Five implementation lanes connected the missing Ixian Nexus Secret Ally
 purchased-card replacement through fresh local `ixian-replacement`: exact
 normal paid/printed-Karama source, own private controls, native discard/draw

docs/IMPLEMENTATION_STATUS.md

@@ -1,5 +1,66 @@
 # Dune implementation status
 
+## 1 October 2026 — Ixian Nexus Betrayal at original native attempts
+
+Fresh local `ixian-betrayal` integrates native Ixian Bidding inspection/draw in
+Basic/Advanced and Advanced Technology exchange before the native effect.
+It admits unique 2..6 seats with native Ixians and otherwise classic/Tleilaxu,
+the physical Ix47 Treachery Deck and Nexus alone. Natural alliance-qualified
+Nexus draw remains required; no initial deal, old-save retrofit or public
+start is enabled. Richese/special lots and wider modules remain excluded.
+
+Actual native printed/BG Karama counters resolve first. Native denial spends
+no Nexus and opens no new gate. After all native passes, every publicly possible
+unallied non-Ixian held-Nexus owner gets a face-neutral acknowledgement.
+Privately eligible Use spends the actual singleton Ixian Nexus and prevents
+only this attempt; all-pass allows the original native transition once.
+Exact source/context/canonical stock/history checks reject stale, foreign,
+orphaned or changed committed parents without mutation. Nonrecursive history
+retains bounded serialization and later physical card recycling. Bots consume
+only canonical private Use/Pass projections; strategy remains uncalibrated.
+
+Independent review repaired original BG Worthless-Karama response ownership,
+retained native Harkonnen hand-exchange suspension, and restored the existing
+Technology fizzle when a legal pre-offer exchange removes the declared card.
+The spent native attempt stays used; no swap, Nexus spend or fabricated gate
+follows. Already-open Nexus source corruption still rejects. Administrator
+progress now uses only public unfinished acknowledgements, matching the player
+table instead of the original ordinary bidder; independent autopilot controls
+remain available during reactive gates. Both final scoped reviews report no
+findings.
+
+Parent verification: types/lint and **6,315/6,315** offline tests pass; the
+affected nine-file union is **167/167**. Final reference **10/10** and build
+pass. Actual scripts exercise eight Basic/Advanced allow/prevent/partial-pass
+scenarios plus both genuine BG Worthless counter interruptions; public
+administrator ownership goes from two responders to the actual sole remainder.
+Four exact-version private-backed-up CLI rooms continue their actual undealt
+setup without redealing, then declare/respond through the real HTTP API:
+
+- `MVLVQHVB` v11: Basic Bidding human Use spends Nexus, draws only the normal
+  allocation and resumes the original auction without private Ix inspection.
+- `T2XSABT4` v11: Advanced Technology human Use retains the selected hand card
+  and unseen lot, keeps the attempt spent and resumes original inspection.
+- `QBVHGDD5` v13: wrong-face Bidding Pass retains Nexus, then human Ix returns
+  Shield from the genuine extra-card inspection and declines Technology.
+- `7NKT45P7` v14: two wrong-face receivers Pass; partial refresh preserves the
+  first acknowledgement and exposes only the sole public remaining owner.
+  All-pass performs the original physical Technology swap once.
+
+Actual 390px controls/own inspector/refresh/native suffix and final expanded
+**Partial / Development: Verified** guide are observed. Read-only saved proof
+retains all forty-seven Treachery/twelve Nexus cards, unchanged spice/force
+cost, exact native suffix/history and fourteen earlier QA games. After the
+necessary final isolated worker reload, all **55 original seats in eighteen
+rooms** reauthenticate and all saved outcomes remain unchanged.
+
+Current HTTP integration is **52/55**, not green: three admin/discussion
+requests returned the known Wrangler proxy 503. No unsafe write retry,
+authorization change, game reset or deployment workaround is introduced.
+Complete Ixian/Nexus games, wider modules, public starts, strategic calibration
+and live acceptance remain open. The user removed the five-agent minimum:
+future waves choose useful agent count for speed and integration cost.
+
 ## 1 October 2026 — exact Ixian Nexus purchased-card replacement
 
 Five implementation lanes integrated runtime, pure source/custody/history,

docs/NEXUS_CARD_RULES.md

@@ -1,6 +1,6 @@
 # Nexus cards: primary-source contract
 
-Source audit, 10 September 2026. This document establishes the printed component inventory and implementation contract; it does not claim runtime support or lift expansion release gates. The ordinary worm-triggered alliance Nexus already in the engine is distinct from this optional card module.
+Original source audit, 10 September 2026, with dated bounded runtime follow-ups below. This document establishes the printed component inventory, source protocol and implementation boundaries; none lifts expansion release gates. The ordinary worm-triggered alliance Nexus already in the engine is distinct from this optional card module.
 
 ## Authority and acquisition
 
@@ -53,6 +53,97 @@ Every row below is a semantic transcription of the photographed face, not a repr
 
 Source for the entire table: [the twelve original printed components](https://boardgamegeek.com/image/7767032/dune-ecaz-and-moritani). All card identities appear once; the photograph is arranged Moritani/Tleilaxu/Richese/Ixians, Atreides/Bene Gesserit/CHOAM/Emperor, Guild/Ecaz/Harkonnen/Fremen.
 
+## Bounded Ixian Betrayal source protocol — 1 October 2026
+
+**Both printed alternatives are connected in the fresh local `ixian-betrayal`
+prototype:** prevent the native Ixian Bidding advantage, or prevent the native
+Advanced Technology advantage. This is an original-attempt interception, not
+just an inspectable catalog entry. Verification is **Partial**, with development
+stage **Verified** for genuine native, private, recovery, CLI and phone proof;
+it does not certify complete Ixian/Nexus play or deployment.
+The [runtime contract](NEXUS_CARD_RUNTIME.md#bounded-ixian-betrayal-local-runtime--1-october-2026)
+and internal `nexus-ixian-betrayal` topic describe the usable controls.
+
+### Source order and authority
+
+- **Face:** the [photographed publisher-authored Ixian Nexus face](https://boardgamegeek.com/image/7767032/dune-ecaz-and-moritani)
+  grants either prevention alternative and expressly says one card cannot
+  prevent both. The photograph, not uploader commentary, supplies this panel.
+- **E3:** [Ecaz & Moritani rules, printed pp.11,16](https://www.gf9games.com/dune/wp-content/uploads/EcazMoritani-Rulebook-LOWRES.pdf#page=11)
+  supply the separate physical Nexus inventory, unallied custody, opposing
+  native faction mode, discard-on-use and qualifying closing-phase draw.
+- **E1:** [Ixians & Tleilaxu rules, printed pp.8–9,12](https://www.gf9games.com/dunegame/wp-content/uploads/2020/09/IxianAndTleilaxuRulebook.pdf#page=8)
+  supply native auction preparation, the extra inspection card and return,
+  Advanced Technology before bidding and Atreides inspection, and native
+  cancellation. The [existing auction audit](RICHESE_AUCTION_RULES.md#evidence-and-limits)
+  records the retrieved publisher text and its limits.
+- **FAQ:** [November 2020 FAQ, printed pp.6–7](https://www.gf9games.com/dune/wp-content/uploads/2020/11/Dune-FAQ-Nov-2020.pdf#page=6)
+  distinguishes cancelable native Ixian advantages from other acquisition
+  effects. **E2**, [CHOAM & Richese rules, printed pp.10–11](https://www.gf9games.com/dune/wp-content/uploads/2021/11/CHOAM-Rulebook-low-res.pdf#page=10),
+  does not settle Technology's substituted cache/Black Market custody;
+  its Ixian ally replacement answer is not a Technology prohibition.
+
+The adopted user-owned `UNOFFICIAL_Revised_Dune_Rulebook_v.2.3_web.pdf` remains
+the source for relevant Advanced core defaults, not this Nexus face. It supplies
+no Ixian Nexus alternative, duration or response-priority ruling and is not
+republished. Read the face with the native attempt's own source, rather than
+borrowing another Nexus family's ban, response or cost.
+
+### One current native attempt, one physical cost
+
+Use requires the actual unallied non-Ixian holder of the singleton Ixian Nexus
+while another seat is native Ixians. It discards that Nexus exactly once,
+spending no Treachery Card, Karama, activation spice or force. Pass retains the
+Nexus. The source fixes which alternative applies: the holder cannot choose
+another attempt, draw count, hand card, lot, price or provider.
+
+For **Bidding**, prevention takes the original native denied path before any
+auction draw: draw exactly the normal allocated pool count, without the extra
+inspection card, Ixian private inspection or return selector. All-pass takes
+the original allowed path, including the real extra draw, private return and
+normal auction continuation. Physical deck depletion remains the native
+allocation's responsibility; this adapter does not manufacture cards.
+
+For **Advanced Technology**, prevention occurs after the actual accepted native
+declaration but before its swap or Atreides peek. Keep the selected Ixian hand
+card and unseen lot in their original custody, preserve the declaration's
+already-spent once-per-turn attempt, then resume the normal Atreides/auction
+continuation once. All-pass performs the real declared exchange and its normal
+continuation once. Declining the native Technology offer before declaration
+still saves that option. Basic offers only the Bidding alternative.
+
+Neither alternative undoes completed draws, selections, exchanges, peeks or
+purchases, revokes other Ixian powers, or establishes a whole-phase ban.
+Later legally available native attempts can create new events, including after
+later physical Nexus recycling. General duration over other multiple-lot or
+combined-module situations remains unresolved outside this current-attempt
+profile; the word “advantage” is not an entire-phase ruling.
+
+### Native counters first, then neutral acknowledgement
+
+Resolve the existing native Karama window first, including its legal Advanced
+Bene Gesserit substitution protocol. A successful native counter completes
+the native denied transition once, with **no Nexus gate or Nexus cost**.
+Only after all native counter passes, before draw/exchange/Atreides peek,
+do publicly possible unallied non-Ixian seats with public held-Nexus presence
+receive a uniform neutral acknowledgement. Irrelevant concealed faces also
+receive Pass; only the canonical eligible owner's private view permits Use.
+No publicly possible seat means immediate native allowance. All required
+passes allow the original attempt once; accepted Use denies it once.
+
+**Native-counter-first and uniform acknowledgement are explicit bounded
+privacy/ordering inferences for this prototype, not publisher-prescribed
+universal priority or resolution of other pending stacks.** No additional
+Karama counter to the direct Nexus prevention is invented, and no blanket
+Nexus-immunity rule follows. The native counter's cost and the independent
+physical Nexus cost remain distinct.
+
+The public event names only the original publicly announced kind and native
+provider. It reveals no selected hand card, unseen lot, extra inspection
+faces, deck order, private source receipt, rival Nexus identity or private
+eligibility reason. Existing inspection of one's own actually held Nexus
+remains authorized; a neutral prompt grants no new inspection entitlement.
+
 ## Bounded CHOAM Betrayal runtime
 
 The unallied holder of the CHOAM Nexus card may use its Betrayal panel when CHOAM is seated and holds at least one Treachery Card. The printed panel names no phase, so the current prototype offers it at a clean playing boundary, not during another decision, response or automatic continuation. The server samples one card uniformly from CHOAM's actual hand; neither the holder nor the bot chooses its identity. The physical Nexus card and sampled Treachery Card are discarded once. CHOAM receives no spice, and this panel does not create an additional Karama reaction. The ordinary fresh-discard continuation handles any applicable discard consequence.

docs/NEXUS_CARD_RUNTIME.md

@@ -1,5 +1,16 @@
 # Nexus cards: common lifecycle checkpoint
 
+**Later Ixian Betrayal prototype:** the fresh local `ixian-betrayal` profile
+connects both printed alternatives to original native attempts: Bidding
+extra-card inspection/draw and Advanced Technology exchange. Native counters
+resolve first; a uniform neutral acknowledgement then precedes the native
+effect. These are explicit bounded privacy/ordering inferences, not publisher
+priority. Verification is **Partial**, with development stage **Verified** for
+the bounded native/private/recovery/CLI/phone path recorded below.
+See the [source protocol](NEXUS_CARD_RULES.md#bounded-ixian-betrayal-source-protocol--1-october-2026)
+and [current local contract](#bounded-ixian-betrayal-local-runtime--1-october-2026);
+the historical lifecycle counts below do not verify this later feature.
+
 **Later Ixian Secret Ally replacement prototype:** [NEXUS_IXIAN_REPLACEMENT_RULES.md](NEXUS_IXIAN_REPLACEMENT_RULES.md#bounded-local-runtime-contract) records the fresh local `ixian-replacement` profile: exact just-purchased normal paid/printed Karama card, discard before private deck draw, full-hand and genuinely depleted-deck same-card behavior, unchanged original payment and native sale continuation once. Harkonnen buyers, cache/Black Market/special origins and combined modules remain guarded. The neutral buyer choice is an inferred development privacy convention, not publisher timing. Its bounded native/SQLite/four-bot/CLI/phone evidence is **Partial development verified**; this historical lifecycle checkpoint does not certify full effects or enable public/module starts.
 
 The later [Emperor Secret Ally revival prototype](NEXUS_EMPEROR_SECRET_ALLY_RUNTIME.md) adds exactly three additional free force returns, separate ordinary allowances, private controls and saved continuation. Its purchase alternative and full module acceptance remain pending.
@@ -57,3 +68,115 @@ The panel also shows deck/discard/held counts and the names of players still cho
 ## Remaining release gates
 
 Every effect family still needs its own original-action timing, cancellation, payment/discard/force or leader custody, hidden-information, bot, UI and recovery integration. Atreides' inspected elements are a distinct upcoming family; they are not enabled merely because the panel is displayed. Existing unresolved Homeworld, revival, No-Field and occupation interpretations remain isolated. Original-format saved games without this optional module are not retroactively dealt cards, and arbitrary saved JSON is not a substitute for a genuine setup/draw history.
+
+## Bounded Ixian Betrayal local runtime — 1 October 2026
+
+### Fresh local entry and natural card rights
+
+The `ixian-betrayal` profile admits a fresh ready two-to-six-seat Basic or
+Advanced lobby with unique factions, native Ixians and otherwise classic
+factions or Tleilaxu. It uses the actual forty-seven-card Ix Treachery Deck and
+the independent Nexus module. It excludes CHOAM, Richese, Ecaz and Moritani
+factions/decks/variants, Homeworlds, Leader Skills, Semuta, Discoveries, Tech
+Tokens, Stronghold Cards and other optional overlays. This is a private local
+development entry, not a public start, reset, saved-game retrofit or approval
+of complete Ixian/Nexus play.
+
+`initializeIxianNexusBetrayalGameForAudit` in `game/engine.ts` initializes that
+fresh boundary. `tools/prototype-room.ts` and `tools/start-prototype.ts` retain
+the exact-version and private-backup safeguards of other prototype entries.
+For an existing named fresh lobby, use the starter's `--profile ixian-betrayal
+--db PATH --room CODE --version NUMBER --out /private/new-directory` options;
+the output directory must satisfy the existing private backup contract.
+Original room IDs, seats, names, rules and setup custody are preserved.
+
+There is **no starting Nexus deal or automatic draw**. Complete genuine setup,
+then the normal qualifying Spice Blow and Nexus phase: a Nexus must have
+occurred, negotiations and earlier responses must finish, and at least one
+alliance must exist at the whole phase's close. An unallied seat may then draw
+through the normal private policy. Three actual seats are the minimum for
+one unallied receiver alongside a two-seat alliance; four are needed for two
+simultaneous unallied receivers. A two-seat profile can continue base play but
+does not fabricate an unreachable Betrayal card.
+
+### Original-source continuation and controls
+
+`game/nexus-ixian-betrayal.ts` supplies the bounded source/custody protocol;
+the original native engine callback owns the actual allow/deny continuation.
+The source distinguishes `bidding` from `technology`, binding the original
+provider, native window, turn/phase and required public responders. It does
+not replay a raw action, snapshot/undo the whole game, duplicate native draw
+algorithms or fabricate a Karama-cost card.
+
+1. Complete the original native Karama responses first. A successful printed
+   or legal Advanced BG counter takes the native denied path once without
+   opening a Nexus gate or spending Nexus.
+2. After native passes, pause before the original Bidding draw or declared
+   Technology swap/Atreides peek. Publicly possible unallied non-Ixian held-
+   Nexus seats acknowledge uniformly, regardless of their concealed face.
+   Native role and publicly impossible source/seat membership can omit an
+   impossible offer; the concealed Nexus identity cannot determine the pause.
+3. Pass retains Nexus and records that seat's acknowledgement for this event.
+   Only an actually eligible unallied rival Ixian-card holder receives private
+   Use. Use spends exactly one physical Nexus and denies the current native
+   attempt. All required passes allow it; no possible seats allow immediately.
+4. Bidding denial draws only the original normal allocated count, without
+   private Ixian inspection/return. Allowance retains the real native extra
+   draw and selection. Technology denial preserves both original card
+   locations and the declaration's used attempt; allowance swaps them.
+   Both branches resume the original normal auction/Atreides suffix once.
+
+The table uses `GameView.nexusIxianBetrayalReaction` and the preview marker.
+The reaction carries only the public event, kind and provider plus that
+viewer's own `canPass`, `hasPassed`, `canUse` and private `blocked` reason.
+`nexusIxianBetrayalPass` and `nexusIxianBetrayalUse` submit exactly the offered
+event, not client-selected source, draw count, card ID, price or provider.
+Multiple outstanding public responders have no fabricated sole owner; the
+last remaining public responder may own the acknowledgement.
+
+The controls explain the selected native alternative and distinguish Pass
+from private eligible Use. The holder's existing own-Nexus inspector shows
+their actually held face; an irrelevant-face prompt cannot grant an Ixian
+identity inspector. Neither the prompt nor the rival view reveals selected
+Ixian cards, unseen lots, inspection faces, deck order, private source or
+other seats' eligibility reasons. The bounded native-counter-first/neutral-
+acknowledgement policy is an application inference, not universal publisher
+priority, blanket Nexus immunity or an invented Karama response to Nexus.
+
+### Saved boundaries and remaining acceptance
+
+Refresh preserves the same pending source, passes and event. A completed
+event expires; it cannot reopen or replay the original declaration, counter
+cost, Nexus spend, draw, exchange or suffix. Closed history uses nonrecursive
+bounded source links, so later real card recycling does not require an old
+card to remain forever in discard or recursively copy prior signatures.
+These are consistency safeguards, not cryptographic authentication of
+arbitrarily fabricated saved JSON.
+
+The pending source blocks ordinary bids, draws, exchanges and competing card
+mutation while preserving existing response/decision/Truthtrance priority.
+A missing or orphaned source must reject, not silently allow or heal during
+a read. Independent own-seat `setAutopilot` remains available to every seat.
+Easy, Medium, Hard and Brutal use only their own projected legal Use/Pass
+choices: minimal continuation, not calibrated Nexus strategy.
+
+Verification is **Partial**, with development stage **Verified** for this bounded
+profile. The frozen parent check passed **6,315/6,315** offline tests, types and
+lint; the affected nine-file union passed **167/167**. Actual native scripts
+exercised eight allow/prevent/partial-pass cases and both original BG
+Worthless-Karama interruptions. Genuine Harkonnen exchange and public
+administrator acknowledgement ownership retain the original continuation.
+Four exact-version, backed-up CLI rooms exercised 390px human Use, wrong-face
+Pass, two-receiver partial refresh, original Ixian return and Technology
+exchange. Read-only saved-state proof retained all forty-seven Treachery and
+twelve Nexus cards, original wallets/forces and fourteen earlier QA games.
+Earlier checkpoints and image publication do not deploy this path or certify
+complete Ixian/Nexus play; wider and deployed acceptance remain open.
+
+Both alternatives concern **one current attempt**, not a whole-phase ban or
+retroactive undo of completed inspection, selection, exchange or purchase.
+Advanced Technology on Richese cache/Black Market lots remains outside the
+profile and unresolved; its special-lot decline continuation elsewhere is not
+an exchange ruling. General multiple-lot duration, competing effect priority,
+other modules/rosters, complete Ixian/Nexus games, strategy calibration,
+public release and live deployment remain separate open gates.

docs/RULE_DECISIONS.md

@@ -110,6 +110,7 @@ independent decisions are not reconciled by this cutover.
 | Richese Nexus Betrayal auctions | Pause at a valid original prepayment quote. Public self-cache veto discards the exact card without debit/acquisition; another buyer's positive cache/Black Market invoice keeps price/contributions/delivery and earned Harkonnen bonus while overriding the recipient to bank. All publicly possible unallied other-faction held-Nexus seats acknowledge uniformly; private identity controls only own Use. This neutral protocol is an application choice, not publisher timing. Normal hidden-family self-purchases, special-Karama veto and unsupported overlays remain excluded; no native Karama exception certifies them. Bounded engine/SQL/bot/phone scenarios are verified locally; broader verification remains Partial and public starts/full Nexus gates stay closed. | [Printed face, profile, API and saved continuation](NEXUS_RICHESE_RULES.md#bounded-betrayal-auction-contract--30-september-2026), [common privacy protocol](NEXUS_CARD_RULES.md#richese-betrayal-prepayment-protocol), [auction source boundaries](RICHESE_AUCTION_RULES.md) |
 | Guild Nexus Betrayal shipment payment | Replace one original funded positive fee in full, including own pre-funded payment and the printed full occupied-Junction override; preserve original payer/contributions, consume already-debited donor escrow once and deliver the original physical shipment once. Native applicable stop/rate responses precede the bounded gate; zero/stopped shipments supply no award or Nexus cost. Public possible held-Nexus seats acknowledge uniformly; private Use changes no public price/source disclosure. Fresh classic/native-Guild/Nexus with optional genuinely seeded Homeworlds only; unsupported native Cunning/Richese shipment overlays block before card/parent commitment, and restored transport independently requires the native Guild grant. Bounded engine/SQL/bot/CLI/phone custody and refresh are locally verified; no new priority/immunity, ordinary occupation/rounding ruling or extra shipment. Broad/public/live gates remain closed. | [Printed source and bounded contract](NEXUS_GUILD_RULES.md#nexus-guild-betrayal), [common protocol](NEXUS_CARD_RULES.md#guild-betrayal-funded-payment-protocol), [internal checklist](../game/reference.ts) |
 | Ixian Nexus Secret Ally replacement | Fresh classic/base-deck/Nexus-only Basic or Advanced local `ixian-replacement` profile binds one genuine normal paid/printed Karama purchase. Discard exactly that purchased physical card before privately drawing the actual deck top; full-hand and exhausted-deck same-card redraw are legal. Keep original payment, income and native auction suffix once; no refund, re-auction or new native Ixian Karama response. Every publicly possible supported unallied held-Nexus buyer gets the same neutral choice irrespective of hidden face; only the owner has Pass/entitled inspection and private eligible Use. This is an inferred development privacy convention, not publisher timing. Harkonnen buyers, Richese cache/Black Market/special origins, anytime overlays and combined modules stay guarded pending their independent source/priority questions. Existing native Ixian ally replacement is distinct. Verification Planned; no retrofit, public start or full-family certification. | [Photographed face and bounded runtime contract](NEXUS_IXIAN_REPLACEMENT_RULES.md#bounded-local-runtime-contract) |
+| Ixian Nexus Betrayal: Bidding or Technology | Fresh native-Ixian/classic-or-Tleilaxu Basic/Advanced local `ixian-betrayal` uses Ix47 Treachery and Nexus alone, with no initial Nexus deal or old-save retrofit. Resolve actual native Karama/BG counters first; a native denial opens no Nexus gate or cost. After all native passes, uniform publicly possible unallied non-Ixian held-Nexus seats acknowledge before the native effect; concealed face governs only private Use. These are bounded privacy/ordering inferences, not publisher universal priority. One physical Ixian Nexus denies one current Bidding attempt (normal count, no Ixian inspection/return) or one Advanced Technology declaration (both card locations preserved, attempt remains used); all-pass allows the original effect and suffix once. No whole-phase ban, completed undo, invented direct-Nexus Karama counter or blanket immunity. Richese special-lot exchange, wider priority/modules, complete games, strategy and public/live release remain open; verification is Planned pending frozen direct evidence. | [Photographed face and native source protocol](NEXUS_CARD_RULES.md#bounded-ixian-betrayal-source-protocol--1-october-2026), [fresh local runtime and acceptance](NEXUS_CARD_RUNTIME.md#bounded-ixian-betrayal-local-runtime--1-october-2026), [five-facet internal topic](../game/reference.ts) |
 | CHOAM Secret Ally | Absent-faction Collection trade spends one actual Worthless card and the Nexus for two bank spice. It is separate from native Cunning and Auditor; the battle inspection alternative remains missing. | [Prototype contract](NEXUS_CHOAM_SECRET_ALLY.md) |
 | Sapho movement | At a clean boundary, first reorders only remaining unstarted turns; completed turns stay completed. Advanced Guild must have finished or be absent. Last retains existing protection after Guild. | [Existing source contract](JUICE_OF_SAPHO_SOURCE_UPDATE.md#movement-firstlast), [runtime](JUICE_OF_SAPHO_RUNTIME.md) |
 | Basic CHOAM / Leader Skills | Compose existing ordinary skills with native sales and own-leader Ghola revival. Finish the private optional replacement before the exact suspended sale resumes. The free revival remains completed if the resumed sale is canceled. Basic uses five ordinary leaders and 35 Treachery Cards; Auditor remains Advanced and ineligible for skills. | [Integration and source contracts](CHOAM_LEADER_SKILLS.md) |