Prototype Jacurutu income, Testing Station and Shrine effects

Connect automatic unambiguous Jacurutu physical-force income, a sole-occupant
Testing Station storm choice and Shrine reciprocal physical card roles to
engine actions, player controls, legal AI and saved continuation. Preserve
Weather Control exclusion, exact card/force custody, private hand boundaries
and committed effects after restart. Shared role checks cover existing ordinary
and special Karama paths; reserved cards cannot enter another pending use.

Keep Orgiz, mixed-force Jacurutu allocation and contested Cistern/Testing
Station benefits explicitly pending. These are bounded prototypes; complete
Discovery/Advanced/expansion and publication gates remain closed.

Validation: types, lint and 4,345 offline tests passed (32 added), production
build passed, and 40 HTTP tests passed. Independent cross-reviews repaired
reserved-card deadlock, physical-card selection, alternate-role permission,
storm source/token binding and public-entitlement bot ordering. The first broad
run found five failures; focused repairs preceded the stable repeated check.

Browser A5EJQ2W4 used genuine Discovery setup/reveal/free entry with targeted QA
positioning. A human increased storm movement from two to three sectors,
moving sector 6 to 9. Refresh restored station forces and the private Snooper.
This was targeted control/recovery evidence, not an unmodified full game.
All 187 opening saved rooms remained unchanged; 31 QA/HTTP rooms were added
(218 total). Reused the running server; no restart or save reset.

Source-bound report:
/home/quintine/.local/share/dune/checkpoints/20260913-discovery-location-effects/verification-final/report.json
Source fingerprint: beecb85ab7ec39319115389c115434d161591e8549802c542a6343a0fc19bea6
Durations: check 140540ms; build 6741ms; integration 24956ms.
Aggregate goal counter 63,116,444 to 64,295,091 at final verification:
1,178,647 tokens before final Git/push overhead for three bounded functions.
Standing authorization: Push all from now on.

docs/EFFICIENCY_PILOT.md

@@ -117,3 +117,22 @@ browser room uses genuine setup followed by explicitly targeted scenarios; the
 156 opening rooms are preserved. Required stable checks and the aggregate endpoint
 are recorded in the checkpoint commit, without counting these prototypes as
 complete Discovery rules compliance.
+
+The next location-effects batch begins at aggregate counter 63,116,444. Two
+workhorse helpers implement Jacurutu and Shrine, then cross-review Shrine and
+review the owner's Testing Station. Reuse of the existing prototype starter,
+card-effect paths and SQLite fixtures connects three bounded functions. Review
+found a reserved-card Shrine deadlock, incomplete alternate-role permission and
+missing physical-card selection; these require fixes before broad verification.
+Station review strengthened restored source and physical-token binding. One
+focused rendered-control assertion was corrected to distinguish the native
+`disabled` attribute from the component's `data-disabled` attribute. A fresh
+browser scenario checks station controls and refresh; all 187 opening rooms
+remain the preservation baseline. The first broad run reached 4,345 offline tests with five failures: two exposed
+an unnecessary hand read before public Shrine entitlement, two old overlay
+fixtures queued nonexistent cards, and one assertion expected older rejection
+wording. The policy now checks public entitlement first; physical fixtures and
+wording are corrected without weakening custody validation. Focused regressions
+pass before the repeated stable broad run. Final aggregate endpoint and stable
+checks belong in the verified checkpoint commit. Pending rulings and complete-mode
+gates remain explicit rather than inflating accepted capability counts.