Dune/docs/CURRENT_STATUS.md

# Current development status

Updated 24 October 2026. **The full twelve-faction goal is unfinished. Basic
is playable. Advanced, expansion-faction and supported optional-module starts
are labelled previews; complete rules/publication acceptance remains gated.**

The user-supplied `UNOFFICIAL_Revised_Dune_Rulebook_v.2.3_web.pdf` is now
an [authorized Advanced source of truth](RULE_DECISIONS.md#authorized-source-amendment--1-october-2026),
including its identified unofficial rulings. The 44-page file has 2.3
metadata but a visibly retained 2.2 editorial heading; the index records its
SHA-256 and physical-page citations. Guild payment/source passages and Advanced
Homeworld sole/last-departure occupation now have explicit source cutovers.
Wider Advanced reconciliation remains open.
Adoption does not reset games, convert Basic, republish the local PDF or
open mode gates.


## Current checkpoint and work
**Ambassador repeated leaders and KH — 24 October. Prototyped / Partial.**
A shared death-cohort quote removes the generic lifetime first-death cap while
retaining ordinary repeat conditions. First returns remain immediate; actual
openings persist before resurrection, including the all-first-dead seam. Ecaz
keeps native identity accounting and the independent shared Duke. KH retains
activation losses/five native discs and advances its marker beyond the actual
opened cycle. The composition and ordinary-slot independence remain provisional.

A disjoint helper lane, bounded review and owner integration pass
**13 files114/114**, types/lint/build and three controlled gameplay/rendering
programmes. Two original Basic paid-entry sources receive explicitly assigned
repeat/cohort histories, then real free return, next-turn ordinary choice4 and
paid4 revival in27 continuations each. A separate controlled Advanced actual
entry returns KH with cohort3/old2 → marker4. Twelve existing legal policies
return a repeat and finish the original entrant. Tests also retain actual income
allow/cancel and first-death/ordinary timing boundaries.
[Source, interpretation, exact proof and limits](TLEILAXU_AMBASSADOR_RULES.md#ordinary-repeated-leaders--24-october-2026).
Full modes, wider custody/module combinations and final assurance/deployed
acceptance remain open. No strategy calibration or saved-room/reset/restart/
deployment operation.

**Earlier Basic Truthtrance shipment promises — 24 October. Prototyped / Partial.**
Bare classic Basic phases0–4 now bind the current-turn reserve event using
current-board feasibility, remaining owned Charity/normal Revival and net current
auction liabilities. Distinct Karama payment/shipping costs and Bidding escrow
expiration remain physical. A new answer reopens owned Charity/Revival readiness;
voluntary bids, payments or closure cannot erase the last route. Unresolved ally
invoices wait for actual income outcomes. The selected witness/readiness protocol
is provisional product composition; earlier Advanced/module boundaries remain.

A disjoint fixture/control lane, bounded review and owner integration pass
**18 files131/131**, types/lint/build, two original Storm/Charity question
programmes and four finite legal profiles. Actual purchase2, later shipment8/cost8
and turn completion use52/38 continuations from the original source snapshots.
The real table retains earlier promises; shipping controls stay at phase5.
Focused feedback repaired foreign-invoice release, deferred extra-revival cost,
a No-answer overbid policy and obsolete phase4 negative fixtures/type feedback.
[Source, explicit policy, exact proof and limits](TRUTHTRANCE_SHIPMENT_PROMISES.md#earlier-basic-phases--24-october-2026).
Full modes, wider future actions, final assurance and deployed acceptance remain
open. No strategy calibration or saved-room/reset/restart/deployment operation.

**Readable notices — 24 October follow-up.** Current source already keeps room
and seat confirmations/action notices until Continue, and toasts until Dismiss.
The new local create check retained its confirmation for 30 seconds through
polling and a lobby action; Continue left the room intact. Focused tests pass
23/23 and the bounded source audit found no remaining automatic text dismissal.
The live site still reports older revision `716304b`; the fix is pushed but
awaits deployment. [Exact evidence and limits](READABLE_NOTICES.md#verification).

**Tleilaxu Ambassador income — 24 October. Prototyped / Partial.** Positive
free force/leader returns now share the actual beneficiary's once-per-turn free
income ledger. This selected source composition remains explicitly provisional;
Ghola stays independent and decline earns nothing. A committed-return receipt
binds the distinct income response. Allow/cancel finishes the original Ambassador
once; canceling the bank spice keeps the return and spent entitlement. Persistent
controls explain both the provisional reward and the already-completed return.

A disjoint receipt/fixture/Basic-consumer wave, bounded source/composition review
and owner integration pass **8 files81/81**, types/lint/build, four original
Basic native/BG-copy allow/cancel gameplay/rendering programmes and eight legal
policy continuations. Sources158/159 retain original47/22 decks, actual paid
placements, Duke acquisition/death, Guild entry and its original dealt Karama.
The real Basic start exposed a conservative restriction; bare Ecaz+Ix with native
Tleilaxu now uses existing coalition/Face Dance mechanics. Six labelled controlled
Basic cases retain genuine setup, actual Nexus/alliance and funded shipments.
Feedback corrected a Guild-ally tariff expectation and an idle-policy private
driver; runtime alone reran on identical source. [Policy, exact proof and limits](TLEILAXU_AMBASSADOR_RULES.md#provisional-free-revival-income--24-october-2026).
Wider combinations, complete modes and final assurance remain open. No optional-module opening, strategic calibration or
saved-room/database/reset/restart/deployment operation in this batch.

**Ecaz's Ambassador Duke revival — 24 October. Prototyped / Partial.** The
original Tleilaxu grant now offers Ecaz the real shared dead Duke, including his
existing independent death histories. Native and BG-copy effects use canonical
identity/custody validation and the selected alive/set-aside return. Ordinary
first-death/KH limits and provisional independent allowance/income remain.
Persistent controls explain that revival grants no battle control. Record any
satisfied native cohort opening before clearing death; add no roster disc/skill.

A disjoint helper lane, original-source fixture lane, bounded source review and
owner integration pass **5 files42/42**, types/lint/build, two original Basic
gameplay/rendering programmes and eight legal policy continuations. Real paid
placements1+2, acquisition, two poison plans and Duke death precede the next-turn
Guild entry/cost1. Sources72/73 then use two actions for free return and original
entrant completion, preserving strength6/deaths1 and resources. Controlled
Advanced/repeat/cohort/ownership/event/reacquisition probes are separate. Fixture
expectations and a private disabled-attribute assertion needed feedback repair;
runtime alone reran with source unchanged. [Sources, exact proof and limits](TLEILAXU_AMBASSADOR_RULES.md#ecaz-shared-duke-alternative--24-october-2026).
No module opening, broad assurance, complete-mode or browser/deployed claim.
No saved-room/database/reset/restart/deployment operation in this rule batch.

**Original Ix Spice cards — 24 October. Prototyped / Partial.** The historical
Thumper/Sandtrout/Harvester audit now records explicit provisional first-turn
precedence, later generated-worm suppression and sequential physical doubling.
The source review found no reason to change the existing numerical mechanics.
Held Thumper warnings explain first-turn disposal and immediate replacements;
public logs explain ignored encounters. Relevant reference topics now describe
the actual preview controls instead of stale public-start prohibitions.

A disjoint genuine-fixture lane, bounded source review and owner integration
pass **4 files47/47**, types/lint/build, twelve original Basic/Advanced gameplay/
rendering programmes and four minimal legal profiles. Actual starting cards,
native Sandtrout across a real turn, Nexus and both Harvesters produce fresh8,
32 or enhanced64 as selected, reset readiness and finish the actual phase while
retaining original physical stock. A private rendering assertion was corrected
for the collapsed chronicle; runtime alone reran with source unchanged. No new
publisher clarification, module opening, broad assurance or native-faction/full-
mode/browser/deployed certification. [Sources, exact proof and remaining scope](IX_PROTOTYPE.md#original-spice-cards-and-selected-policy--24-october-2026).
No saved-room/database/reset/restart/deployment operation in this rule batch.

**Basic Tupile slot lifecycle — 24 October. Prototyped / Partial.** The
existing provisional Basic current-sole policy now supplies Tupile's slot and
normal-limit cleanup instead of stopping on its conservative lifecycle guard.
Observed continuous intervals distinguish turn changes from actual loss/return;
a new grant cannot erase an earlier required discard. Original intelligence use
and Advanced last-departure retention remain. Controls label the Basic policy.

A disjoint genuine-fixture lane, bounded source-identity review and owner
integration pass **10 files70/70**, types/lint/build and two original public
Basic gameplay/rendering programmes plus four legal cleanup profiles. Actual
normal1 purchases, earned Guild income2, invasion2/cost1 and native battle
create one visitor/slot. The fifth-card source really buys card5 for1. Sources
use88/91 actions; paid last return1 and zero/one cleanup use1/2 continuations,
retain unused movement and then explicitly finish. Controlled turnover/contest/
native-high/reacquisition/ally and intelligence probes are separate. Only a
TypeScript loop-narrowing fix followed feedback. No wider recovery audit,
complete-mode or browser/visual/deployed acceptance. No saved-room/database/
reset/restart/deployment operation.
[Canonical policy and exact proof](HOMEWORLD_TUPILE_INTELLIGENCE_RUNTIME.md#basic-current-sole-slot-lifecycle--24-october-2026).

**Truthtrance before the respondent's turn — 24 October. Prototyped / Partial.**
Same-phase questions now include a supported unused turn still in the original
queue. Waiting promises remain visible without an executable early action;
private reachability uses owned resources, and native Guild WAIT/TAKE retains its
original timing. Pending foreign declarations defer release; their approved ally
funding stays locked. Voluntary Emperor gifts/BG accompaniment cannot spend the
last completion. Minimal policies legally decline optional accompaniment while
bound; no strategy tuning, new profile/module or earlier-phase opening.

A disjoint genuine-fixture lane, bounded continuation review and owner
integration pass **14 files146/146**, one updated existing in-memory scope case,
types/lint/build and three original-action/rendered-table programmes plus four
finite policies. Public classic Basic/Advanced starting deals use40/45 source
actions; paid intervening turns and later Emperor3/cost3 or Guild3/half2 fulfill
in16/19/29 continuations. Four profiles make eight legal answer/shipment proposals
and finish. Separate controlled funding, price, gift and advisor probes pass.
Feedback repaired an obsolete negative waiting-target fixture and two type
declarations. No broader recovery campaign, browser/visual/deployed or full-mode
acceptance. No saved-room/database/reset/restart/deployment operation.
[Canonical behavior and exact proof](TRUTHTRANCE_SHIPMENT_PROMISES.md#same-phase-waiting-respondents--24-october-2026).

**Truthtrance with Advanced Guild — 18 October. Prototyped / Partial.** Base
Advanced questions include Guild without another profile/module opening. Native
interception, permission and rate responses retain the promise until delivery or
resolved opposition. A stop settles the whole expression against no shipment;
self-interception cannot evade a required shipment. Executable guidance waits
for pending controls, and owned alternatives survive an unaffordable repricing.

One disjoint fixture lane, bounded continuation review and owner integration pass
**10 files106/106**, one updated existing in-memory scope case, types/lint/build,
four original-action/rendered-table programmes and four finite legal policy
continuations. Public classic Advanced setup actually deals original unopened
Truthtrance/Karamas; native TAKE/WAIT creates the unused shipment in39 source
actions. Emperor typed3 costs3 or opposing stop costs/delivers0; Guild3 costs
half2 or actual opposing-Karama full3. Eight-to-ten continuations include the
respondent's finished turn. Four profiles make12 legal answer/ship/Guild proposals.
Controlled No/mixed/self-stop/price/permission probes remain separate. Frozen
feedback removed one unused fixture import; no rule changes followed. No broad
recovery audit, browser/visual/deployed or full-mode acceptance. No saved-room/
database/reset/restart/deployment operation.
[Canonical source, behavior and exact proof](TRUTHTRANCE_SHIPMENT_PROMISES.md#advanced-guild-interception-and-rates--18-october-2026).

**Residual Poison / Advanced Harkonnen — 18 October. Prototyped / Partial.**
The card now includes available ordinary captives, captured foreign Gholas and
the shared Duke. One selected public death pays no bounty; other living
captives stay concealed. Ghola revival custody, Duke disc/history and last-native
Harkonnen returns remain. Semuta locates the signed physical victim after
temporary control ends. Controls explain provisional ordinary Tanks handling;
this is source composition, not a Residual-specific publisher FAQ.

A disjoint genuine-fixture lane, bounded source review and owner integration
pass **9 files74/74**, types/lint/build and two original-action/rendered-table
programmes plus four finite policy continuations. Public Advanced start, real
opening bid1/seller purchase2, paid Hark3/Emperor1 desert/Richese1 Carthag
deployments, actual victory/capture/keep and second battle use70 source actions.
Native or captive selection from five eligible discs and battle completion use9
continuations; one death/discard, zero bounty and unselected concealment remain.
Four profiles make eight legal card/readiness proposals and finish. Separate
controlled probes cover Ghola/Duke, last-native returns and Semuta claim.

First feedback repaired only two fixture assumptions: Once Around's all-zero
shortcut needs a real opening bid before the seller's final raise, and resolved
discard uses null. No rule change followed frozen feedback. Actual GameTable
and enabled/busy card controls render the provisional consequence. No browser
clicks, visual/deployed or broad combination/assurance acceptance; complete modes
remain open. No saved-room/database/reset/restart/deployment operation.
[Canonical source, interpretation and proof](RICHESE_RESIDUAL_POISON_ENGINE_AUDIT.md#native-captive-death--18-october-2026).

**Sapho Extortion payer order — 18 October. Prototyped / Partial.** The general
ordered-action alternative now provisionally reorders only native Extortion's
unanswered payer suffix. Public replay preserves original membership and prior
declines; ledger answers retain the receipt. Every use expires the native payer
event, even if the same player remains next. Collected bank5, one payment3,
physical storm order and the user's placement-first policy remain. Persistent
controls display remaining names; existing minimal policies use real options.
A typed Semuta suffix parks one updated payer decision without paying/advancing.

Two disjoint helper/fixture lanes, bounded source/continuation review and owner
integration pass **9 files115/115**, types/lint/build and six original-action/
rendered-table programmes. Public Basic/Advanced cache1, real Extortion placement,
paid foreign1 entry/reveal, later actual Mentat placement-before-bank5 and one
Atreides decline use120/139 source actions. First/payment3 and last/payment3 or
all-decline use2–4 continuations: Moritani gains8 or5, the token retires or rotates
into hidden supply, and no earlier payer repeats. Four profiles make eight legal
holder/payer proposals and finish. Pure replay/no-op/recovered-reuse cases remain
separate. No dealt piece, wallet, clock, payer queue or receipt is installed.

Frozen feedback corrected only a deliberate-invalid-mode test cast; the whole
batch then passed together. Actual GameTable and enabled/busy card/payer controls
render public order and payer-only affordability. No browser clicks or visual/
deployed acceptance. Direct combined Semuta claim/capture, broader combinations,
complete modes and final assurance remain open. No saved-room/database/reset/
restart/deployment operation.
[Canonical source, protocol and exact proof](MORITANI_EXTORTION_RULES.md#sapho-payer-ordering--18-october-2026).

**Sapho first with an unspent Advanced Guild — 18 October. Prototyped / Partial.**
At a clean unstarted non-Guild boundary, first now reorders the remaining queue
and retains the Guild's native next-boundary take/wait choice. A granted current
Guild turn stays protected; actual Karama cancellation stays locked. Original
permissions, completed turns, payments and last protection remain. Existing
continuations and minimal policies need no new saved field or signature format.
This nonconflicting composition is provisional, not a publisher precedence FAQ.

One disjoint genuine-fixture lane, bounded source/continuation review and owner
integration pass **7 files97/97**, types/lint/build and six original-action/
rendered-table programmes. Original cache1/native wait uses49 source actions;
an actual Richese1 Polar Sink shipment costing2 and explicit end uses55. Original
grant/cancel branches fork from48 before the first wait. TAKE/WAIT with and
without that prefix use12–14 continuation actions, retain ordinary non-Guild
order and pay Emperor2/Guild1 once. Granted-current and actual dealt-Karama
cancellation use3/2 choice actions plus11/7 continuations. Four profiles make
eight legal holder/Guild proposals. Only unopened original deal/Spice positions
and scalar lotteries are selected; no postdeal pieces, funds, queue or receipt
is installed.

Frozen feedback corrected an obsolete first exclusion and a fixture that counted
an already completed player's later response pass as a repeated movement turn.
The exact two failures and then the whole batch pass. Actual controls render
first/busy, renewed native Guild timing, granted-current and locked states;
no browser click or visual/deployed acceptance. Direct combined Semuta claim/
capture, actual competing first, partly completed turns, wider ordered actions,
full modes and final assurance remain open. No saved-room/database/reset/restart/
deployment operation.
[Canonical source, interpretation and proof](JUICE_OF_SAPHO_RUNTIME.md#first-while-the-advanced-guild-remains--18-october-2026).

**Sapho late aggressor — 18 October. Prototyped / Partial.** Fresh public
Richese-roster battles permit clean intervention after commitments/reveal and
retain a fixed final opportunity for both combatants. Both explicitly finish;
an actual Sapho use clears both marks with a fresh event. Priority closes before
Stone counts and outcome settlement. Plans, votes, physical participants and
Habbanya precedence remain; the holder's sealed/inspected card stays reserved.
Old unstamped battles retain early timing and exact old discard-signature bytes.
The final acknowledgement protocol is provisional, not a publisher FAQ.

Two frozen disjoint lanes, bounded continuation review and owner integration
pass **16 files177/177**, types/lint/build and eight original-action/rendered-table
programmes. Actual cache1 and opposing paid shipments use40 Basic/47 Advanced
source actions; native Stone1 turn1/Sapho1 turn2 uses86, with accepted original
Richese circle4/Emperor circle5. Four-to-seven preparation actions and two-to-four
continuations cover ordinary ties, one opposing sealed plan, own prior final
acknowledgement and real mixed-Sardaukar count2. Sixteen minimal policy proposals
are legal. Pure lifecycle/control cases and controlled reservation probes stay
separately labelled.

Review repaired a final Harkonnen Nexus vote exit so all final-vote paths retain
native Homeworld Portable defense before the window. Frozen feedback corrected
four historical fixture assumptions: explicit legacy Stone stamping, a human
saving Sapho instead of letting a bot spend it, and Basic/Advanced pre-plan
readiness. All affected checks then passed together. Actual controls render
offered/busy/already-finished/revised states without browser clicks or visual/
deployed acceptance. Direct late Semuta claim/capture, combined World/Nexus/Sapho,
wider combinations, full modes and final assurance remain open. No saved-room/
database/reset/restart/deployment operation.
[Canonical source, protocol and proof](SAPHO_AGGRESSOR.md#late-aggressor-and-public-final-opportunity--18-october-2026).

**Sapho cyclic auctions — 18 October. Prototyped / Partial.** First/last now
works in ordinary cyclic lots and native Advanced normal Black Market under an
explicit provisional current-lot convention. Full local cycles preserve existing
bids, funding and passes; native traversal skips passes until a real raise.
Actual post-discard capacity admits a full holder. Original opener identity stays
with both Black Market settlement consumers; ordinary overrides clear on the
next lot. Persistent controls and existing minimal policies use the same options.

Two disjoint lanes, bounded source/continuation review and owner integration
pass **10 files134/134**, types/lint/build and eight finite original-action/
rendered-table continuations. Public host/setup and cache1 purchase use33 Basic/
38 Advanced source actions; actual next-turn Black Market uses81, including a
real lobby circle5 choice; a full hand from two normal1 purchases uses44.
Continuations use10–18 actions: prior1, actual holder2/rival3/holder4 wrap, native
payment4 and original next opener or final-lot Revival entry. Eight minimal
policy proposals are legal. Original-action passes remain spent until a real
raise; controlled pure-cycle/post-sale quotes are separately labelled.

Feedback repaired two fixture assumptions: turn2's native opener required the
original lobby circle choice, and Black Market completion must pass its native
cache auction before the following normal pool. The external rendering smoke
was corrected for default history visibility and final-lot phase closure; only
that smoke was rerun against identical source after tests/types/lint/build.
No engine repair followed frozen feedback. Actual offered/busy controls render,
without browser clicks or visual/deployed acceptance. Direct combined Semuta
claim/capture, other timing scopes, full modes and final assurance remain open.
No saved-room/database/reset/restart/deployment operation.
[Source, convention and exact proof](JUICE_OF_SAPHO_RUNTIME.md#cyclic-ordinary-and-black-market-bidding--18-october-2026).

**Guild Cunning / physical Ornithopter — 18 October. Prototyped / Partial.**
Either physical card mode may provisionally replace an earned unused Hajr
allowance after Cunning's second shipment. No ordinary move is added. Original
physical counts, prior completed flight credit and the active second-group right
remain distinct. Ending a partial flight grants no abandoned-group credit;
declaring Cunning disposes it before the original Nexus response resumes.
New v3 receipts/final-count snapshots retain exact old receipt formats.

Two disjoint lanes, bounded continuation review and owner integration pass
**13 files125/125**, types/lint/build and eight finite original-action/rendered-
table continuations. Two public host/setup programmes use81 Basic/93 Advanced
source actions: cache1/Hajr1 purchases, real worm/alliance/Guild Nexus draw and
paid first shipment2. Each second shipment pays1; continuations use6–8 actions.
Both modes and earlier completed flights work in Basic/Advanced; Basic early
endings preserve no abandoned credit. Eight minimal policy proposals are legal.
An additional original-action regression rejects both an unearned and already
spent Hajr grant without consuming the held physical card.

All frozen checks passed without repair. Actual GameTable views and isolated
accepted movement drafts render; no select/submit browser click or visual/
browser/deployed acceptance. Semuta's new suffix grammar is connected and prior
disposal regressions pass, but direct combined claim/capture proof stays open.
Wider combinations, full modes and final assurance remain due. No saved-room/
database/reset/restart/deployment operation.
[Source, composition and exact proof](NEXUS_GUILD_CUNNING_RUNTIME.md#physical-ornithopter-composition--18-october-2026).

**Advanced advisor / physical Ornithopter — 18 October. Prototyped / Partial.**
The supplied source excludes advisors from granting city access, rather than
using this physical card. Both modes now use native stance, arrival/locks and
original-group accounting. Fixed range3 is independent; normal groups recompute
current fighter-city access. Persistent controls explain the distinction, and
minimal bots use shared advisor-aware routes and native entry checks.

Two disjoint implementation lanes plus owner integration pass **10 files87/87**,
types/lint/build and three original-action/rendered-table programmes. Each uses58
source actions: original host/setup advisor, cache1 purchase, actual foreign
shipment1/accompaniment and paid BG2 Polar Sink or1 Carthag reinforcement.
Range3 uses2 continuations; advisor/fighter twoGroups and last-city-fighter
variants use3 each. Empty advisor arrivals flip normally, moved forces cannot
be reused, and remaining advisors grant no range after the last fighter leaves.
Eight minimal policy proposals are legal; four controlled geometry and six
isolated control cases remain separately labelled.

Feedback corrected only an expected-error matcher and a nullable fixture
annotation. No engine rule repair followed frozen checks. Rendering uses actual
GameTable views plus accepted movement drafts in the isolated control; no
select/submit browser click or visual/deployed acceptance. Wider combinations,
full modes and final assurance remain open. No saved-room/database/reset/restart
or deployment operation.
[Source cutover and proof](RICHESE_ORNITHOPTER_ENGINE_AUDIT.md#advanced-advisor-card-movement--18-october-2026).

**Advanced Kull effect scope — 18 October. Prototyped / Partial.** New
Advanced attempts adopt the supplied specific-effect wording. Basic and
unstamped older pending/settled restrictions remain all-purpose. Semantic keys
keep another effect available, normalize purchase/payment and native variants,
and bind the original CHOAM parent rather than its temporary Kull counter.
Retaining phase expiry is explicitly provisional; prior counter/BG/deferred
winning-overbid choices remain.

Two disjoint implementation lanes, bounded source review and owner integration
pass **12 files111/111**, types/lint/build and two original-action/rendered-table
programmes. Selected unopened deal/auction/Spice positions use62 Basic/70
Advanced source actions plus8/14 continuations: actual Baliset1 purchase,
CHOAM1 city shipment, Kull, normal desert2 shipment and real movement. Advanced
cancels Baliset with the retained original; Basic keeps it unavailable. Four
minimal policies legally pass the different-effect response; no tuning.

Feedback corrected fixture assumptions about automatic Harkonnen return,
CHOAM’s phase-end market and already-supported Fremen Cunning, plus one nullable
fixture guard. The external smoke was repaired to distinguish disabled actions
from enabled ones and CSS classes from actual attributes; only that smoke was
rerun after types/lint/build, against identical source. Recovery expectations
were updated without running deferred SQL assurance. Original Nexus/alias/wider
combinations, full modes, final assurance and browser/deployed acceptance remain
open. No saved-room/database/reset/restart/deployment operation.
[Source cutover and exact proof](CHOAM_KULL_DESIGN.md#advanced-effect-scope--18-october-2026).

**Recovered Hajr replay — 18 October. Prototyped / Partial.** The deck contains
one Hajr. Real paid Box recovery now permits playing that same held card again,
counting one extra allowance per accepted use. Advanced needs a fresh completed
movement; Basic retains broader timing. Legacy used markers/receipt bytes remain
compatible, while new Cunning declarations/count snapshots preserve unused Hajr
allowances without another ordinary move. Replay is an explicit interpretation.

Two disjoint lanes plus owner integration/review pass frozen **12 files102/102**,
types/lint/build and two original-action/rendered-table programmes. Actual cards
and shipment use38 Basic/45 Advanced source actions plus seven continuations.
The original sole-discard search pays2 and retrieves automatically; no fabricated
copy or manual selection. Both finish three ordinary moves, with four legal
policies in each mode. A historical Advanced Cunning case now earns Hajr before
its stopped second shipment, and respects the resulting normal range.
Native Cunning replay has pure/related regression evidence, not an original
paid-Box Nexus programme. Wider combinations, full modes and final assurance
remain open; no visual/browser/deployed acceptance, saved-room/reset/restart or
deployment operation.
[Source, counted protocol and proof](RICHESE_ORNITHOPTER_ENGINE_AUDIT.md#recovered-hajr-replay--18-october-2026).

**Ornithopter / Hajr — 18 October. Prototyped / Partial.** New card uses replace
one unused movement by the selected mode and retain the independent Hajr move.
Prior ordinary moves stay spent; groups are distinct within the flight and may
be reused by Hajr afterward. Advanced now adopts supplied immediate-after-move
play timing with an explicit online/card-group interpretation; Basic timing stays.

One disjoint fixture lane, owner integration and bounded source review pass
frozen **11 files132/132**, types/lint/build and12 original-action/rendered-table
programmes. Real cache/normal purchases and paid shipment use38 Basic/45 Advanced
source actions, native CHOAM/Baliset65. Early ends grant no abandoned group;
four minimal policies retain both legal movement continuations. Two historical
Homeworld/Semuta guard cases now exercise the new entitlement and source timing.
Multiple Hajr cards, advisor use, Guild Cunning/card and wider combinations remain
open. Framework aliases/CSS stubs mean no visual/browser/deployed acceptance.
No saved room/database mutation, reset, restart or deployment.
[Source cutover, provisional procedure and proof](RICHESE_ORNITHOPTER_ENGINE_AUDIT.md#hajr-and-unused-movement-entitlements--18-october-2026).

**Stone Burner physical allocation — 18 October. Prototyped / Partial.**
New original Basic/Advanced Stone and copied Mirror battles now finish
outcome-changing mixed-force comparisons. Only ambiguous sides privately commit
an undialed physical total; all original required values stay sealed until
complete. The winner retains compatible later ordinary/elite loss choices.
Ordinary/invariant battles and unstamped legacy frames retain their prior path.
Timing is explicitly provisional under the 14 October choose-recommended policy.

Three disjoint lanes and owner integration pass frozen **16 files146/146**,
types/lint/build and14 finite original-action/rendered-control programmes.
Original paid Stone uses69 Basic/52 Advanced source actions, actual next-turn
Mirror90, both native mixed sides95 in either seat order. Both outcomes and
same-count typed alternatives complete; four minimal policies make both legal
private choices. Actual Mirror feedback repaired a card-cleanup continuation
that lost the narrowed physical count; native consumers now retain it too.
Historical guard tests explicitly keep legacy coverage; no printed number changed.

Framework aliases/CSS stubs mean no visual/browser/deployed acceptance. Wider
combinations, full modes and final assurance remain open. No saved room/database,
reset, restart or deployment.
[Exact source, procedure and proof](STONE_BURNER_ENGINE_AUDIT.md#outcome-changing-physical-totals--18-october-2026).

**Independent cards with Discovery — 18 October. Prototyped / Partial.**
Fresh classic and selected-deck tables now combine independent36/38/50 with
Discovery7/8, with or without Nexus12. Original World/all14/Tech3+/Advanced
Strongholds remain optional. Real host/setup choices retain native pieces;
transient Sandtrout or Maker frames no longer remove unrelated capabilities.
The trained actual-E3/Harkonnen and unrelated-preview gates remain.

Three disjoint fixture/review lanes plus owner integration pass frozen
**15 files118/118**, types/lint/build and six finite original-action/control
programmes. Actual reveal/free-entry/Cunning uses97 Basic or359 Advanced
three-family World/all14/phase actions; original Sandtrout155. Basic nested
paid-card battles use75+4 without Nexus or78+5 with it. Selected50 World fee,
Sardaukar return and earned Recruits revival use149+8+52. Four minimal policies
retain legal Cunning and source-bearing positive Reinforcements plans; no tuning.

Bounded review repaired two no-Nexus Duke quote admissions. Fixture feedback
corrected Fremen's printed Hiereg knowledge and the existing Recruits view name.
The external control programme corrected its entry label and rendered the shared
reserve selector from the actual quote; application source stayed unchanged.
Framework aliases/CSS stubs mean no visual/browser/deployed acceptance. Broader
Nexus/Discovery/Semuta interactions, full modes and final assurance remain open.
No saved room/database, reset, restart or deployment.
[Exact source, proof and limits](NEXUS_CARD_RULES.md#independent-cards-with-discovery--18-october-2026).

The notice follow-up also rechecked the existing persistent room/seat/action
controls: **23/23** focused tests pass. Room confirmations still wait for Continue;
shared toasts have Dismiss and no automatic timeout. Their earlier local browser
proof remains dated; [deployed notice verification remains open](READABLE_NOTICES.md).

**Native Fremen Nexus modules — 18 October. Prototyped / Partial.**
Cunning and Betrayal now retain the original registered Nexus roster and selected
modules. Actual drawn Cunning, original Karama allowance/cancellation and the
typed post-negotiation ride keep their source and normal allowances. A living
native Sandmaster may collect one earned destination spice. Original HMS entry
requires its actual pointer to target the selected desert; Discovery destinations
had focused quote coverage here; the later independent Discovery checkpoint
above adds actual arrival proof.

Great Maker reserve riding now respects the predeclared worm restriction under
the explicit source composition. Votes, original casualties and Nexus continue;
the completed Maker no longer blocks a later ordinary empty-worm offer. Native
movement suppression leaves ordinary range1 and earned city range3 available.

Three disjoint lanes plus owner integration pass frozen **14 files86/86**,
types/lint/build and nine finite original-action/rendered-control programmes.
Basic selected Ix/CHOAM rides use160/100 actions; six-seat World/all14/phase
Sandmaster and actual HMS each373. Movement Basic/Advanced uses120+29/127+27,
earned city129+27; Maker source95 plus20 prevented/21 unspent, and a separate
later empty appearance95+21. Four policies retain legal Cunning and both
Betrayal declarations; no tuning/calibration. Framework aliases/CSS stubs and
a directly rendered actual Sandmaster quote mean no visual/browser acceptance.

Iteration fixed the cleared-decision Sandmaster adapter and corrected fixtures
to buy a real Karama, distinguish negotiations from the closing card draw,
and retain the subsequent Advanced pile. No printed numeric rule changed.
No saved room/database, reset, restart or deployment. Remaining dynamic arrival,
Nexus/Discovery/Semuta interactions, full modes and comprehensive assurance stay
open. [Source-bound proof and limits](NEXUS_CARD_RULES.md#native-fremen-nexus-modules--18-october-2026).

**Native Ecaz Betrayal / Moritani Atomics — 18 October. Prototyped / Partial.**
Selected modules now retain typed native returns, advisors, actual shared HMS,
face-down concealed recall and original paid Karama cancellation. Guild first/
wait and Sapho ordering preserve a full unspent Shipment/Movement opening.
Native Atomics retains capped No-Field materialization, original paid arrival,
ordered Ambassador/Terror continuation and fixed hand targets. Original Nexus
Cunning grants now support printed-desert Atomics and historical Aftermath;
ordinary placement, shipment bans and the Sneak Attack exception stay distinct.
Both No-Field overlaps remain explicitly provisional.

Three disjoint lanes and owner integration are frozen. **16 files115/115**,
types/lint/build and eight finite original-action/table-SSR programmes pass:
typed/marker/advisor/HMS Betrayal201/222/200/213 source actions plus two choices
per allowance/cancel; World Atomics/Sneak375, paired arrival176, Basic/Advanced
desert134/261. Four policies retain legal typed/concealed Betrayal and native
World Sneak choices; no calibration. SSR framework aliases/CSS stubs mean no
visual/browser or deployed acceptance. Corrected fixtures preserve native
placement chronology, optional allied No-Field revelation and Basic range1.
The external smoke initially selected an already completed Sneak result; its
corrected pending-choice run passed against unchanged application source.

No saved room/database, reset, restart or deployment. Remaining Nexus/Discovery/
Semuta envelopes and other rule interactions still require implementation;
comprehensive assurance and complete modes stay open.
[Source, evidence and limits](NEXUS_CARD_RULES.md#native-betrayal-and-atomics-composition--18-october-2026).

**Selected E3 independent Nexus — 18 October. Prototyped / Partial.**
Fresh selected E3, optionally Ix/CHOAM/both, now composes independent cards,
Nexus and original World/phase/all14 modules. Native Occupy, Advanced
Assassinate, Ambassador/Terror arrival order and shared-Duke Cunning continue
through the same public capability. Selected stock36/38/50 and actual cache10
remain. Existing Advanced actual-E3/Harkonnen/Skills exclusion stays.

Three disjoint helper/fixture lanes plus owner entry/arrival integration are
frozen. **17 files168/168**, types/lint/build and seven finite original-action
programmes pass: six-native host entry27; Ecaz/ally coalition leads157/158;
assassination/replacement/Recruits210; Duke battle142 (separate unused expiry42);
Basic/Advanced overlapping arrivals68/127 actions. Actual table SSR shows
lead/plan, assassination, revival, Duke and arrival controls; framework aliases/
CSS stubs mean no visual/browser acceptance. Four legal policies each complete
43 owned Cunning/expiry choices; no strength calibration.

Fixture corrections retain the real at-least-one-alliance draw gate and decline
unwanted paid Ambassador placement before the Duke invasion. Initial lint caught
a reserved loop binding. No printed numeric rule changed. Bounded shared-profile
review found no material defect. No saved room/database, reset, restart or
deployment. The later native Betrayal/Atomics checkpoint above supersedes these
original effect exclusions; remaining combinations and assurance stay open.
[Contract, evidence and boundaries](NEXUS_CARD_RULES.md#selected-e3-independent-nexus--18-october-2026).

**Selected-deck independent Nexus — 18 October. Prototyped / Partial.**
Original selected Ixian/CHOAM/combined decks now compose independent three-card
selection and Nexus12, optional all14/World/Tech3+/Advanced Strongholds2+.
Normal host entry retains selected stock38/50 and native Richese cache10 without
requiring a native from each selected family. Fresh Ixian reactions distinguish
native Betrayal from absent-faction Secret Ally replacement. Explicit CHOAM
conversion cannot execute its fuel card’s printed effect. Real No-Field pairs
retain their signed continuation through Guild payment acknowledgements.

Frozen19-file **194/194**, types/lint/build pass. Seven finite original-action
programmes pass: normal host/training19, mixed-fee Cunning/Harass181,
Cyborg substitution/matching Face Dance188, Richese pair/reveal/fee160,
actual bribe/paid-shipment two-reserve refusal199, CHOAM fuel140 and native
cache/replacement129 actions. Rendered entry, selected-plan and refusal controls
retain their real choices; framework aliases/CSS stubs mean no visual/browser
acceptance is claimed. Four minimal legal policies pass the affected batch.

Iteration fixed real role/dispatch/continuation defects and corrected fixture
assumptions about native Tech ownership, actual wallet limits, canonical0/3/5
markers, legal Storm dials and unopened Face Dancer lotteries. No printed
numeric rule was changed for a fixture. Bounded native invoice review also
fixed preflight priority and the original allied Guild bank tariff. No saved
room/database, reset, restart or deployment. Wider envelopes, comprehensive
assurance and deployed acceptance remain open.
[Source, controls and boundaries](NEXUS_CARD_RULES.md#selected-e1e2-independent-nexus--18-october-2026).

**Readable room confirmations — 18 October.** The user-requested create/join
confirmation stays above the table until local Continue, independently of
polling and game actions. Shared toasts default to no timeout and a visible
Dismiss control. Local QA room NAZLA8P4 retained the message for43 seconds,
including a circle change; Continue removed it without leaving the room and it
did not return on later polls. No browser console errors. Focused23/23,
types/lint/build pass; the QA room is preserved. Deployed verification remains
open. [Behavior and boundaries](READABLE_NOTICES.md).

**Classic independent World/Nexus — 18 October. Prototyped / Partial.**
Fresh classic2–6 independent36 + Homeworlds + Nexus12 now retains optional all14,
Tech3+ and Advanced Strongholds2+ through original module selection/setup.
Actual Recruits returns recheck Fremen population; foreign-World Harass returns
typed visitors and own-World Harass stays forbidden. Local Reinforcements fees
provisionally spend non-role normals before converted counters: Kaitain7 paying3
leaves normal4/temporary4, while the original Cunning declaration remains5.
Real Salusa stars, pre-fee face/support traits and physical fee/loss separation
remain. Shared engine, human selected-source limits and legal bot pools agree;
active/preview captions now explain declaration versus remaining roles.

Frozen15-file **128/128**, types/lint/build pass. Direct original-action smoke
finishes the local-fee battle (97 actions), Recruits (101), typed Harass (59),
and four legal policies' card plans within 89-action programmes each. Rendered
source/active controls retain the real choices and provisional explanation.
The first typecheck exposed a nullable test-view field; two setup assertions
were corrected to actual lobby selections/deal chronology. A smoke caption
assertion was corrected to the actual text; diagnostic logs are retained.
No saved room/database, server restart or deployment was involved. Browser,
full combinations and comprehensive assurance remain deferred. Other native
families, Discovery and unrelated preview envelopes remain separate.
[Canonical source, implementation and limits](NEXUS_CARD_RULES.md#classic-independent-world-nexus--18-october-2026).

**Current priority — Basic → Advanced → interaction refinement.** The user
requests usable first versions for every faction before refinement. Administration
is deferred. Broad suites and capture-resumption campaigns are deferred; rule
delivery uses brief changed-path smoke only, with batched compiler feedback.
**Active pass — rule interactions and remaining optional paths.** Basic and
Advanced standalone core-function inventories are closed at prototype level.
Bounded classic/expansion mapping plus the connected follow-ups below found
no further absent standalone faction primitive in the examined paths.
This is not complete-mode acceptance: exceptional custody, timing variants,
optional skill bands and combinations remain open.
Rules implementation continues; comprehensive assurance and administration
remain deferred until all rules are implemented.

**Integration review — 18 October.** The earlier non-AI checklist closure
was unsupported: a topic marked Prototyped/Partial does not prove every
rules-permitted combination works. Specific module envelopes and named interaction boundaries remain open. Rules delivery is not complete, and the
deferred comprehensive multiplayer/privacy/custody gate has not been opened.

The regression repair now admits original Ecaz CLI snapshots with their actual
native Occupy/Advanced assassination state. Resume preserves the saved scenario
and continues play; older snapshots with both powers absent retain that absence.
The focused Ecaz cases pass, including complete expansion-roster continuation.
Independent bounded review found no rule-contract blocker in the other repaired
fixtures. Banker controls retain their rules guidance, and all four legal policies
must actually fund a positive commitment in both original and combined-deck play.
Original city Collection and the selected deck's phase-opening window remain
separate from the battle payment. Frozen16-file **173/173**, types/lint and a direct original Ecaz CLI
resume-to-completion smoke (178 accepted actions) pass. Bounded source review
found no remaining blocker; no worker remains assigned to these files. The prior
recovery902/902 and HTTP55/55 are bounded historical evidence, not complete rules,
multiplayer or deployed acceptance. Comprehensive assurance remains deferred.

**Original World Nexus core — 18 October. Prototyped / Partial.**
Plain base33 World/Nexus lacked native reaction states; one public capability
now composes original Homeworlds with base33, optional14 and original
Tech3+/Advanced Strongholds2+. Actual host controls retain every selected
module through private training/Traitors into first Storm; salusa elite5 and
unassigned tokens/cards prove no premature owners. Independent36 World/Nexus was left pending at that checkpoint; its current
composition is the active delivery above. Other envelopes remain separate.

Real World fee sources pass their original gates: Guild Junction→Giedi
departure2, Cunning visitor return through native permission/rate/fee2;
Caladan→Carthag borrowed fee1/fee5 settles to the distinct holder with typed
custody waiting. Own-Kaitain temporary-Sardaukar battles keep ordinary-only
casualties and true Salusa custody across high/low support; Giedi native-call
cancellation follows original capture/execution/cleanup and one private
replacement. Normal Smuggler companions now also supply the funded fee in core.

Frozen45-file **448/448**, types/lint/build pass. The initial low-Salusa bound
failure was fixture-only (cap7 vs wallet2) and is asserted honestly; no engine
rule changed. Two actual390px journeys and four legal policies with 13–20
owned choices each pass; no calibration. One HMR route invalidation was
re-entered through its original scene and a DELETE204 cleanup was diagnosed
ERR_ABORTED—diagnostics preserved. Temporary memory/routes/programmes
removed/released204, no saved room/reset/restart/deployment. Independent
World/Nexus, occupation variants, full combinations and assurance stay open.
[Source, scenes and limits](NEXUS_CARD_RULES.md#original-world-nexus-core--18-october-2026).

**Classic core phase modules — 18 October. Prototyped / Partial.**
Fresh classic Nexus now composes original Tech3+ and Advanced Strongholds2+
with selected33/36 and optional14. Normal host controls retain all five
requested modules through actual training/Traitors into first Storm. Real
first-Storm ownership, phase payout and first-Mentat claims are not assigned
or retrofitted; other native/World/Discovery/Semuta envelopes stay separate.

Earned Arrakeen support3 uses bank2/personal1 beside real reserve fees;
trained base33 Carthag Shield survives poison after native call cancellation
and reaches original cleanup/private replacement. Fixed paid5 then ordinary
free2 retains Axlotl pending2 at purse8 until actual phase4 close pays10.
Combined phase funding/payout and paid2 replacement preserve original owners.

Frozen43-file **439/439**, focused1/1 and repaired Arrakeen2/2, types/lint/
build pass. Fixture corrections preserve original Guild-ally3 tariff and
separate city Collection2; no game calculation changed. Four actual390px
journeys and four legal policies/66 owned choices finish; no calibration claim.
No gameplay/application exception or overflow. Two DELETE204 cleanup fetches
logged ERR_ABORTED and an idle wait timed out; tool diagnostics are preserved.
Temporary memory/routes/executable scripts removed/released204, no stored room/
reset/restart/deployment. Full modes, universal timing and assurance stay open.
[Source-bound owner verification](NEXUS_CARD_RULES.md#classic-nexus-original-phase-modules--18-october-2026).

**Classic Nexus core — 18 October. Prototyped / Partial.**
Ordinary base33 all14 native calls/purchases lacked reaction prompts. One
public capability now admits original33 or selected36 with Nexus12 and
optional14, initializing actual Guild/Harkonnen/Ixian reaction states at fresh
setup. Independent cards are neither required nor silently added; no played
game is reflagged or supplied invented history. Other envelopes stay separate.

Original signed Cunning reserve/cross/return and Richese five-for-one groups
retain funded fee and physical continuation through the same acknowledgement.
Native counters and actual third-party Bureaucrat remain; one spent Guild
singleton cannot also authorize rival Use. Timing remains inherited/provisional.

Frozen31-file **304/304**, focused10/10, types/lint/build pass. Three390px
original-control journeys reach whole1 claim, Cunning return/turn finish and
third-party5→recipient3/Bank2, with no errors/overflow. Four legal policies
execute28 actual choices, not calibration or full games. One accurate classic
notice replaces contradictory standalone stacks. Three old exclusion cases
are deleted, not re-pinned; the driver honors actual owned fee acknowledgement.
Temporary memory/routes removed/released204, no stored room/reset/restart/
deployment. Other modes, universal timing and deferred assurance remain open.
[Exact source and current proof](NEXUS_CARD_RULES.md#classic-nexus-core-and-funded-card-shipments--18-october-2026).

**Selected-card native reactions — 18 October. Prototyped / Partial.**
Real Harkonnen call/Nexus and paid Reinforcements/Ixian purchase exposed absent
original effect prompts. Fresh classic2–6 independent36/Nexus12 optional14 now
initializes both native effect stamps; Harkonnen only if seated. Played games
without stamps keep their behavior. Public selection binds canonical36 and
retains original base33/history grammar; other overlays remain separate.

Personal/allied native allowance or Karama, actual Harass cancellation/return,
one private real Mentat replacement and paid-card Use/Keep/bonus pass. Three
actual390px journeys reach original Mentat inspector or next lot; no errors/
overflow. Four legal policies execute eight choices/four real replacements.
Inherited neutral acknowledgement and replacement-before-bonus timing remain
visibly provisional, not universal/publisher rulings.

Frozen16-file **156/156**, focused6/6, final types/lint/build pass. Fixture
post-training randomness and trained-disc posture use native controls; an
inferred Map key needed only a type annotation. Temporary memory/routes
removed/released204; no stored room/reset/restart/deployment. Other modes,
universal timing and deferred assurance remain open.
[Exact source and original quantities](NEXUS_CARD_RULES.md#classic-selected-card-reactions--18-october-2026).

**Classic independent Nexus — 18 October. Prototyped / Partial.**
Original classic3 normal start rejected unchanged. One public configuration
capability now composes fresh classic2–6 Basic/Advanced independent36/Nexus12,
optionally all14, through original setup and effect consumers. Native selected
families, World/phase/Discovery/Semuta and extra reaction-preview envelopes stay
separate. No played game is reflagged.

Actual original Recruits/fixed paid Tleilaxu5/free2, selected bank purchase and
native Cunning with separate Reinforcements reserves/physical Harass returns
pass, including cancellation and Basic power rejection. Three390px surfaces
cover normal all14 lobby/setup, full Revival into Shipment, and native paid
battle into Collection; no errors/overflow. Four legal all14 policies execute
575 actions/12 battles, not calibration or full-combination acceptance.

Frozen25-file **249/249**, types, final lint and build pass. A stale paired
Reinforcements helper now answers the actual Moritani choice before disposal;
its obsolete log-wording pin is deleted. Initial fixture-name lint is fixed.
Temporary routes/memory removed/released204; dedicated normal QA room preserved.
No reset/restart/deployment. Other effect bounds, complete modes and deferred
assurance remain open.
[Source, original quantities and exact proof](NEXUS_CARD_RULES.md#classic-independent-treachery-composition--18-october-2026).

**Paid Black Market retention — 18 October. Prototyped / Partial.**
Under the recorded choose-recommended policy, a positive seller win retains the
same card/order, pays native Emperor/Bank income and counts one sale. Zero/unbid
retention stays free/unsold. The supplied physical36/printed34 source ambiguity
remains explicit; this is not a publisher ruling or full-mode gate opening.

One shared current-hand rule now covers original eligibility, automatic
zero/pass, bid/commitment and settlement. Real earned4/4 hands need no extra
slot. Native Nexus retention supplies no new-acquisition/free-seller invoice;
the original paid path continues without spending a card or inventing a gain.
Actual bare/full/all14/Nexus programmes preserve card IDs/order and native fees.

Three390px flows exercise Silent full5→Bank2/one normal lot, Normal5+3 with
native cancellation and Once Around real1→final8/full income. No errors or
overflow. All four legal full-hand seller policies may retain free/unsold
through zero; strategy remains deferred. Frozen17-file **151/151**, focused1/1
and repaired old-exclusion1/1, types/lint/build pass. Initial native full-hand
auto-zero/slot failures are fixed through the shared rule; old pins are deleted.
Temporary routes/memory removed/released204, no rooms/reset/restart/deployment.
[Source, policy and evidence](RICHESE_AUCTION_RULES.md#provisional-paid-black-market-retention--18-october-2026).

**Advanced Richese split receipts — 18 October. Prototyped / Partial.**
Original buyer3/Richese donor5 wrongly supplied no Bureaucrat opportunity.
New signed seller sources use only the buyer share; the original Emperor
response stamps a distinct actual donor source/event. Native seller credit
first, then Emperor Karama/income remains a visibly provisional sequence.
Either use consumes the physical phase opportunity; declining the first
preserves the second. Basic, Bank exclusion, full costs/card/escrow stay.

Public portion guidance shows original price/payer-null, never a private
recipient amount or false whole-price-minus-two credit. Actual donor3+5 gives
Emperor3 (11→14), Richese3, Atreides8 and trainer9, then a real ordinary pass.
Two390px flows exercise dual5+5 seller decline→native allowance→donor diversion
and hidden5+3 seller diversion→native Emperor3→original cache selection.
Four policies legally settle the donor receipt with buyer as trainer.

Frozen18-file **413/413**, types/build and final lint/focused1/1 pass. Lint's one
unnecessary fixture iterator copy is removed; no production rule changed.
Temporary QA routes/memory removed/released204, no errors/overflow, no stored
rooms or restart. No new module admission, full-mode/deployed/assurance claim.
[Source and provisional sequencing](BUREAUCRAT_PAYMENTS.md#advanced-richese-portions--18-october-2026).

**Native allied Bureaucrat receipts — 18 October. Prototyped / Partial.**
An original no-Nexus Eca/Mori all14 five-own/five-allied shipment rejected
unchanged before repair. Single and allied receipts now share the existing
ordinary Skills capability; the extra classifier is removed without an alias.
Registered selected families need no incidental Nexus or exact single family.
Individual thresholds, private shares, full costs/escrow, native cancellation,
Bank diversion and module/Advanced role admission remain.

Real Basic cost10/five-force shipping leaves Eca/Mori seven each, Guild13,
Atreides10 and consumed escrow, then resumes Movement/Collection. New E1 plain
funding retains all native starting armies. Actual Advanced no-Nexus Guild
interception and all four policies settle an original3+5 receipt, preserve
Carthag10/HMS6 and continue to Ixian movement.

Three actual390px flows cover native allowance→redirect, Advanced unused-CHOAM
auction allowance→full income/next lot and native cancellation→no offer/use.
No browser errors/overflow. Temporary memory-only routes were removed/released;
no stored room or server restart. Frozen17-file **442/442**, focused1/1,
types/lint/build pass; existing build warnings remain. No new source/ruling,
complete-mode, deployed, calibration or deferred-assurance claim.
[Current contract and evidence](BUREAUCRAT_PAYMENTS.md#registered-native-allied-receipts--18-october-2026).

**Registered native E3 selected decks — 18 October. Prototyped / Partial.**
Sixteen ordinary plain/card all14 starts rejected before; all16 now reach
native setup. Registered seats simply require their selected ordinary family;
mixed E3 and unused extra decks need no incidental Nexus/single-family/card.
Original World/phase modules and native power bindings remain; Advanced
E3/Harkonnen, shared Duke, original Nexus/Discovery/Semuta and bare no-Skills
mixed World/phase guards stay separate. No played save is converted.

Genuine mixed Eca World play retains earned Tabr1, support2, fee3/H2 and
committed-only Suk3, separate allied losses and physical cards. Genuine native
Mori/CHOAM loss pays CHOAM’s source3, kills different unused trained Frankos4,
returns one skill and draws one Mentat replacement. Unused selected Ix/CHOAM
decks still permit actual Eca Duke6 without creating those faction seats.

Frozen53-file **609/609**, types/lint/build and actual controllers pass.
Old fixture shape/flag/helper-echo pins are deleted. The four-seat case no
longer assumes every player owns one of only three Tech tokens; its real Tabr
receipt remains, while the Basic three-seat case proves actual Tech transfer.
Three bounded normal tables reach turn3/earlier wins (nine battles). Real390px
four-seat five-module entry completes Ix card-before-training, native setup
and the Amal opening into Storm with no errors/overflow. Local prototype
evidence is not full-mode, calibration, deployed or deferred assurance acceptance.
[Current registered scope and source-bound evidence](LEADER_SKILLS_RUNTIME.md#registered-native-e3-selected-decks--18-october-2026).

**Planetologist mixed advisor gather — 18 October. Prototyped / Partial.**
A genuine turn-two Carthag fighter plus older Imperial Basin advisor reproduced
the enemy-Arrakeen guard despite ordinary city range. The explicit recommended
policy now declares one common fighter arrival before either source moves.
One native flip response carries the exact movement; allow commits once,
cancel leaves both groups/postures, spice, shipment and movement unchanged.
The current movement’s flip block prevents an immediate bypass; a legal
fighter-only replacement works. Fresh-advisor locks and original range,
occupancy, uniform/determined stances and old windows remain.

Related20-file **191/191**, types/lint/build and genuine controller programmes
pass. Original normal setup/shipments/accompaniment supply three regressions;
the only positioned card is one conserved original Karama. Four bot profiles
submit legal actions; three use mixed gathering into an empty destination,
not the new contested response. Actual390px GameTable controls execute the
declaration, native Allow/Cancel, blocked retry, ordinary replacement and fresh
lock against real engine actions in isolated memory, with no errors/overflow.
Owned QA routes/memory are released; no stored room/DB change or dev restart.
This is local changed-surface proof, not deployed, full-mode, calibrated AI or
deferred assurance acceptance.
[Source, provisional policy and current evidence](PLANETOLOGIST_RULES.md#mixed-advisor-and-fighter-gather--18-october-2026).

**Native E3 World Skills/cards — 17 October.** Fourteen of18 original normal
World/phase starts rejected before; all18 now start. Standalone/paired
Ecaz/Moritani/classic Worlds retains optional all14/cards and original phase
modules. Paired plain World Skills needs no Nexus/card; bare World cards needs
no Skills. Native6/6, exact one-family roster, shared Duke, Advanced role and
mixed-E3/Nexus/Discovery-card guards remain. No played save is converted.

Genuine Ecaz programmes preserve paid native World sources, earned Arrakeen,
separate fixed/variable armies, card-user fee/H and committed-only Suk. Genuine
paired Moritani loses, assassinates different unused trained Ecaz4, returns one
skill and gets one actual Mentat replacement. Real native Ecaz own-World H
rejects unchanged; real later Recruits returns2 free into Junction. Both World
arrival branches pay once, acquire untrained Duke6/Robbery and resume movement.

Frozen39-file **459/459**, types/lint/build and actual programmes pass. The
external-ID fixture now reads pending `lobbyOptions` rather than initialized
Skills/cards; an incorrect charge for an ordinary free ground move is deleted.
Three bounded World tables exercise all four legal policies (seven battles),
reaching turn3/earlier wins. Actual390px paired five-module normal entry
completes skill/Traitor/native6 into Storm; Grumman14 and native inspectors
render without browser errors/root overflow. Local working-tree evidence is
not deployed revision-matched, full-mode, calibration or deferred assurance.
[Current source envelope and evidence](LEADER_SKILLS_RUNTIME.md#native-e3-worlds-with-independent-cards--17-october-2026).

**World Skills and selected decks — 17 October.** Eight original World/card/
Skills phase starts and five bare selected-deck starts rejected before; one
selected-deck roster capability now serves Basic/Advanced without a required
native seat or independent cards. Explicit Advanced foreign-ghola authorization
remains. Unused Ecaz metadata is not a native E3 seat. Original classic/E1/E2
Worlds now retain all14/cards and original Tech/Advanced Strongholds; actual
E3 World cards, Nexus/Discovery and unrelated role/effect guards remain separate.

Genuine World revival keeps accepted invoices, native unlimited allowances and
separate Axlotl/normal Banker stores. Own-World fees cannot also be dialed or
rescued; visitor H/Suk keeps original typed destinations and every own-World
Harass ban remains. Marker funding is still checked after projected
materialization, before withdrawal. Earned support and skills supply no fee
subsidy. No counter, owner, wallet, phase or played-save history is fabricated.

Frozen61-file **683/683**, types/lint/build and actual rule programmes pass.
The harness now consumes optional Mentat naming and includes the original
pre-training three-card Ix draft in its stock count; null-preview/profile-copy
pins are removed. Two normal World tables exercise all four legal policies
through turn3 or an earlier win. Actual390px five-module normal entry completes
training/Traitor choice into Storm with Kaitain/Salusa/Stronghold inspectors,
no browser errors or root overflow. Detailed targeted programmes, not these
natural tables, prove fees, income and rescue. No complete-mode, calibration,
deployed or deferred assurance claim follows.
[Current envelope and source-bound evidence](LEADER_SKILLS_RUNTIME.md#world-skills-and-selected-decks--17-october-2026).

**Skills/cards with original phase modules — 17 October.** Fresh all14 Skills
and independent cards now retains original Tech3+ Basic/Advanced and
Strongholds2+ Advanced, optionally both, across existing classic, selected
E1/E2 and standalone/paired E3 rosters. Paired plain E3 Skills also retains
that phase envelope without requiring Nexus or cards. World/Nexus/Discovery,
mixed-E3 and existing special-role guards remain; no rules arithmetic or saved
history is invented.

Real revival preserves prior payment, one Axlotl accrual/phase-end payout and
the separate normal Banker threshold/Mentat grant. Real held Arrakeen support
is Bank contribution, not personal money or reserve-fee funding. Typed fees,
Harass/Suk, native prices, selected-holder versus ally, winner Tech and native
assassination/Mentat retain physical sources and original continuation.

Frozen44-file **471/471**, types/lint/build and actual programmes pass.
Eight natural composed tables reach turn3 or earlier wins; real390px normal
lobby selects all four modules, trains an offered Smuggler and reaches Storm
with no browser errors/root overflow. Targeted programmes, not those natural
tables, supply the detailed fee/income/claim evidence. Native controlled-card
positioning is labelled, including a repeated Richese R input; no natural
reacquisition or full-mode/deployed/deferred assurance claim follows.
[Current phase scope and evidence](LEADER_SKILLS_RUNTIME.md#independent-cards-with-original-phase-modules--17-october-2026).

**Paired E3 Skills and native arrivals — 17 October.** Native Ecaz+Moritani/
classics all14 Skills no longer requires Nexus Cards, Basic/Advanced2–6,
optionally independent cards only. Four normal plain/card starts failed before
the profile cutover. Shared original roster validation retains native6/6,
Loyalty, five-disc assignment, untrained Duke and Advanced Harkonnen/mixed-family
guards. No World/phase-module envelope or played-save history is fabricated.

Actual paired coalitions retain card-user fees/returns, separate native armies
and committed-only Suk; actual Moritani loss reveals unused trained Ecaz4,
returns one skill and gets one Mentat replacement. Four policies choose legal
native leads and assassination. Native Ambassador/Terror overlap also works
without Nexus for these Skills profiles and card-only factions: real placements,
one paid arrival, both storm-order branches, Duke6/Robbery and resumed movement.

Frozen29-file **323/323**, types/lint/build and genuine runtime programmes pass.
Four paired all14 table smokes reach turn3 or an earlier win; targeted programmes
supply assassination/overlap proof. Actual390px paired normal entry completes
training, Loyalty/Traitors and both native setups into Storm without errors or
overflow. Existing provisional arithmetic/timing and final acceptance limits remain.
[Paired scope and evidence](LEADER_SKILLS_RUNTIME.md#paired-e3-without-nexus--17-october-2026).

**Standalone E3 independent cards/native defaults — 17 October.** Fresh
standalone Ecaz OR Moritani/classic all14 Skills now retains the three
independent cards without other modules. Original Advanced Skills/Harkonnen,
E3 mixed-family Skills and shared-Duke guards remain. Plain/card Ecaz initializes
printed Basic/Advanced coalition participation; supported native Advanced
Moritani initializes assassination without an artificial Nexus dependency.
No played-save history is synthesized.

Genuine Ecaz programmes settle fixed/variable armies, card-user fees/returns and
trained Suk into Collection. Genuine Moritani loses, assassinates a different
held unused trained disc, returns one skill and gets one actual Mentat replacement;
plain no-card/no-Skills Harkonnen also retains native capture. Four policies
choose legal native leads/assassination. The same integration exposed and fixed
Mentat rejecting legal independent Specials: selected physical cards now work
as private fallback disclosures, never named weapons or automatic variant activation.

Frozen25-file **274/274**, types/lint, build and targeted runtime programmes pass.
Four native all14/card table smokes reach turn3 or an earlier win; nine no-Skills
native roster/default smokes also continue. Those natural games do not supply
the targeted assassination proof. Actual390px normal Moritani Skills/card entry
passes training, Traitor choice and native six-force setup into Storm without
browser errors/root overflow. Entropy/conserved card staging is explicit; the
Mentat-specific battle position is reduced, not a natural phase history.
No complete-mode, deployment, calibration or deferred assurance claim.
[Card scope and evidence](ECAZ_TREACHERY_RULES.md#standalone-e3-leader-skills-composition--17-october-2026).

**Native Ix/CHOAM independent cards + Skills — 17 October.** Fresh
classic or selected E1/E2 native/base all14 Skills now admits the three
independent cards without other modules. Original36/38/50 ordinary decks and
separate Richese cache remain. One shared independent profile feeds native
capabilities, avoiding setup/No-Field/Suk/Planetologist/Smuggler mismatches.
Original normal Sandmaster worm pickup also accepts this independent variant.

The frozen22-file set passes **223/223**, types/lint and build. Genuine Ix
programmes retain normal-first fees, typed returns, trained rescue and the
paid Cyborg revival price; Richese programmes retain funded/capped marker
materialization, trained Mentat scoring, mandatory disposal and legal Harass
fallback without spending a refused seal. All six bounded native/mixed-family
table smokes reach turn3 or an earlier win. Real390px native Ix card selection
then skill offer has no browser errors or overflow. Source entropy and conserved
physical card staging remain explicit, not invented armies/payments.

Evidence: `tests/fixture-ix-independent-skills.ts`,
`tests/ix-independent-skills-runtime.test.ts`,
`tests/fixture-choam-independent-skills.ts` and
`tests/choam-independent-skills-runtime.test.ts`.
Existing action/view shapes, profile exclusions and printed native components
are retained; no full-mode, calibration or deployed claim follows.

**Standalone Ecaz Skills coalition — 17 October.** Native Ecaz/classic all14
Skills now reaches ordinary allied Arrakis battles without Nexus or Worlds.
Fresh Basic participation and the existing native profile feed the same lead,
skill and separate-army continuation. Both normal starts were reproduced
blocked before repair. Actual Basic/Advanced Skills-only programmes reach
Collection, with no Nexus hand or World state added; all four policies work in
both modes with/without Worlds and retain physical counters. The affected
seven-file73/73, types/lint and build pass. Actual390px Skills-only entry has
no browser errors/overflow. Advanced Harkonnen/shared-Duke and other profile
guards remain; no complete-mode or deployed claim.
[Contract](LEADER_SKILLS_RUNTIME.md#standalone-ecaz-coalition--17-october-2026).

**Native World Ecaz Arrakis Occupy — 17 October.** Fresh Ecaz/classic
Homeworld games no longer need Nexus Cards for their ordinary Arrakis
coalition, including the supported native Skills entry. Basic setup now marks
Ecaz participation before shared movement/battle enumeration. Actual World
shipments, four Ecaz/four Imperial counters, selected lead, fixed losses,
Sardaukar/support and Karama use the existing physical rule paths. World
locations themselves do not gain Occupy or Intrusion. Seven new cases and the
affected91/91 union, types/lint and build pass; four native-action smokes reach
Collection. Actual390px Ecaz World+Skills lobby entry has no browser errors or
overflow; coalition arithmetic is engine evidence, not a browser-played battle.
[Source and limits](ECAZ_OCCUPY_RULES.md#native-world-reserves-with-arrakis-occupy--17-october-2026).

**Optional modules from the normal lobby — 17 October (user-directed speed pass).**
The host can now tick Leader Skills, Ecaz Treachery Cards, Nexus Cards,
Discoveries and Homeworlds as labelled previews alongside Tech Tokens and
Stronghold Cards. A normal start routes to the existing genuine setup for that
selection; each module's own admission still decides what combinations are
supported, and an unsupported choice is rejected at start with its reason.
Ecaz's native World Arrakis coalition is connected in the follow-up above.
Lobby choices for Skills and the independent cards live in `lobbyOptions` and
are consumed at start. A 240-start sweep (Basic/Advanced × classic/Ix/CHOAM/Ecaz
× ten selections, repeated three times) exercised 183 all-AI games to turn 3 or
an earlier win; the other 57 starts were explicit admission rejections. It found
no runtime crash after two fixes: Basic won Ecaz Occupy carries variable-army
casualties through mandatory card disposal, and bots with untyped forces round
fractional target dials to legal whole counters. Unsupported independent-card
combinations now reject the whole start instead of dropping the card selection.
Final proof: types/lint, **9,866/9,866 offline tests** and build pass. Seven
post-integration gameplay samples reach turn 3 or an earlier win with selected
modules active. Real390px lobby rejection/correction/start/skill assignment has
no browser errors or overflow. Ecaz setup now checks its existing combined
Occupy admission before starting, including World+Skills choices. Local QA only;
no deployed claim or full-combination certification.

**Expansion-faction lobby starts open — 17 October (user-directed speed pass).**
Hosts may now start Basic or Advanced-preview games with Ix, CHOAM and/or Ecaz
factions from the normal lobby; the start routes through the existing native
faction setup. Optional modules now use the labelled lobby controls described
above, retaining each native setup's supported roster and composition limits.
Eight all-AI 10-turn games (Basic/Advanced × Ix, CHOAM, Ecaz, all-three six-seat)
finished with no stuck or rejected actions. The lobby note warns of unfinished
interactions. **Regression triage (17 October):** the 133 failures that began
after `bc09ac3` were stale fixtures, not engine defects: newly connected
borrowed-Voice, Guild transport-permission/Guild-rate, Emperor seller-payment
and Richese declaration windows were not passed; same-turn phase rewinds broke
the mandatory Banker ledger; and assertions still pinned intentionally opened
start/roster gates. Fixtures now take the real actions; obsolete pins were
removed. A generic `declineBattlePower` now also passes borrowed Voice, and a
normal start rejects expansion factions whose expansion is not selected.

**Independent36/all14 Skills composition — 17 October.** Fresh ready classic
Basic/Advanced all14 now admits the printed independent three-card variant
(original36, no other modules, no played-game conversion). Real Recruits after a
prior free return prices4 as free1+paid3=6 to Bank and defers one Banker spice to
actual Mentat. R+H keep fee-before-return with opposing Warmaster (Worthless
required) and owner Suk rescue. All three cards print green Special headers:
Planetologist substitutes Recruits automatically; R/H need explicit
`planetologistSpecial` and then skip their native fee/return. Zero reserves block
native R but permit that substitution; a truthful named promise finds it and all
four policies execute it. Bureaucrat redirection is admitted. Frozen16-file 167/167,
types/lint and build pass; actual390px zero-reserve journey (5 UI actions) reaches
Collection with no errors/overflow. Combined-role choice is provisional.

**Mandatory normal Banker default — 17 October.** Fresh supported ordinary all14
Skills now creates the existing deferred-income ledger automatically, including
its original module/native overlay envelopes. Separate initializer/CLI profile
and fixture opt-ins are removed without aliases; existing played games are not
retrofitted. Original payment, per-payer/phase, trainer and earned-faction custody
rules remain; custody is still explicitly provisional.
The ordinary native World/Nexus/Discovery/Tech/Stronghold and Semuta/Skills
programmes both pay Bank4, retain Richese wallet5/front1, and collect wallet6/front0
only at actual Mentat1. Real Hajr→Semuta recovery creates no second invoice.
Below-band/player-recipient controls and a simulated legacy played save retain
their correct behavior. Two390px journeys/18 original actions include8 native
UI submissions, with no app errors or root overflow; all four legal policies
continue both contexts. Controlled setup entropy and conserved card staging are
explicit. The182-case related set exposed fixture-only issues, repaired with
final25/25 in affected3 files; the other157 passed initially. Actual CLI1/1 and
final types/lint/build pass with existing build warnings. Scratch proof host/files
are removed; no live room, database or deployment changed. See
[current contract and evidence](SPICE_BANKER_RUNTIME.md#mandatory-ordinary-skills-default--17-october-2026).
Companion payment/Nexus/Stronghold and global Skills guidance now reflects this
default. The older Bureaucrat and normal-Mentat absence claims were stale, not
new implementation gaps; current source contracts supersede them. Follow-up
reference loading and current link/command checks pass without gameplay changes.

**Diplomat used-defense contexts — 17 October.** Fresh capability3 copies the
canonical role actually used, including late Portable Snooper after a prior
false traitor choice; the recorded vote is never reopened. Native World-only
votes and original invader late-defense choices remain. A true declaration
prevents a fresh offer; a declined copy permits a legal own late defense, while
a selected copy cannot add a second defense. Old1/2 source windows stay.
World strength and held effects coexist independently, never imported by the
copy. Real first end-Mentat earns Carthag: its own original Snooper protects
a copied Shield from poison; no opposing source means no invented defense.
Genuine paid Arrakis copy/decline and native Kaitain programmes retain actual
survival/death, one selected Worthless disposal, source retention and typed
custody (Kaitain15N/Salusa5E; three visiting Guild counters reach Tanks).
Four390px journeys/25 actions reach original Collection with clean roots and
no app errors. Twelve four-policy programmes/40 actions remain legal; the held
Carthag policies decline and their context strategy remains deferred.
Conserved cards/decks and controlled context scalar entropy are explicit.
Parent removed forwarding and unrelated Guild-income pins. Frozen12-file union
86/86 and final10 cases pass after nullable-source/end-Mentat typing fixes;
types/lint/build pass with existing warnings. No full/deployed acceptance claimed.

**Smuggler modifier band — 17 October.** Under the standing recommended-choice
instruction, provisionally cap by copied/printed disc plus declared skill bonuses
and KH2. Actual Artillery zeroing voids collection; ordinary Stunner stays a
projectile. Sole own Traitor bypasses weapons and retains collection. This is
not a publisher FAQ or a numerical answer to the old question. Original piles,
survival, spending, bounties and other mode guards stay.
Both prior raw KH/trainer plans rejected unchanged; they now seal. Genuine
Atreides training and seven supported casualties unlock KH before the second
paid conflict: cap7 collects6/7 from actual6/8 piles, never before outcome.
Shielded Artillery leaves the leader alive but transfers0; own Traitor bypass
and shielded Stunner transfer6. Winner cleanup precedes ordinary Collection.
Four390px journeys/32 actions retain those controls, zero overflow/app errors;
eight four-policy programmes/64 actions use actually offered modified KH plans.
Conserved unopened decks/cards/identities are explicit; no live army, wallet,
phase, order, loss count, KH or receipt is assigned. Table admission now uses
the same original server projection as bots. Parent removed forwarding/default
pins, the obsolete modifier guard and its unused import. Focused23 cases and
frozen9-file union86/86, types/lint and build pass; existing build warnings remain.
Full modes, other exceptional combinations, calibration and deployment stay open.

**Native World phase modules — 17 October.** Selected E1/E2 native/base Worlds
now retain original Tech3+ Basic/Advanced and/or Advanced Strongholds2+ through
the independent-card entry. Original38/50 decks, native fees/custody, current
rates/unlimited allowances, marker funding and own-World H bans stay.
Fifteen genuine module setups enter. Three390px journeys/23 actions exercise
paid Cyborg reopening/thresholds, unlimited12-force CHOAM with its actual ending
market, one delayed Axlotl payout and genuinely earned Arrakeen bank2/personal1
support. Arrakeen applies only in its original territory, not on a foreign World.
Native fee3N precedes return3N; three actual Cyborgs alone become board casualties.
An original conserved optional Face Dance holds the invoice before Collection;
no initiative, army, wallet, owner or phase is assigned. Other native own/foreign
fees and board-only aftercare retain their paths. Parent removed a nondeterministic
second-conflict fixture and log-wording assertions rather than freezing later Storms.
Four policies finish16 useful Revivals/112 actions and12 native battles/82 actions.
Conserved cards/identities remain explicit staging. Related18-file union225/225,
types/lint, build and actual prototype help pass; existing build warnings remain.
Skills, Nexus, Discovery, E3 and other overlays stay gated; full-mode and
deployed acceptance remain open.

**Native E1/E2 World independent cards — 17 October.** Clean selected Ix/CHOAM
native/base Basic/Advanced Worlds retain original38/50 setup without phase
modules; classic base36 Tech/Strongholds stays separate. Shared roster checks
and renamed World profile have no alias. No E3, Skills, Nexus, Discovery,
Sandtrout or other preview/public-start/played-save gate opens.
Ten native setups and genuine fee/aftercare, marker-budget and revival programmes
preserve actual stock. Marker3/reserves5 preview/API now agree on rejection
before sealing; H-only remains legal and no early marker reveal is introduced.
Five390px journeys/42 actions complete native H fallback,1N2E fee before7N return,
one actual board-Cyborg exchange/native Face Dance, unlimited11-force revival
and real native Auditor inspection. Other native queues remain original.
Four policies finish28 battle programmes/112 continuations/2230 R-or-H proposals,
24 marker programmes/120 continuations/3050 proposals and40 useful native Revival
programmes/300 actions. Conserved card/identity staging is explicit. Parent
consolidated marker slots and removed fixture/text echoes. Frozen21-file union
passes251/251; types/lint, build and actual prototype help pass. The direct
marker3/reserves5 runtime probe confirms unchanged rejection and legal H-only.
Test cleanup removes transient-window/starting-wallet pins and observes audit
payment before unrelated Collection income. Existing build warnings remain.
Full modes, calibration and deployed proof stay open.

**Classic World cards with phase modules — 16 October.** Original independent36
Basic/Advanced Homeworlds now retains unused Tech3+ and Advanced Strongholds2+.
Native sources/rates, own-World H prohibition and existing provisional fee/rate
timing stay. No expansion Worlds, Skills, Nexus, Discovery or other overlay opens.
Real typed battles produce the Revival stock; actual Mentat earns held cards.
Three390px journeys/17 actions prove paid-return reopening, Fedaykin threshold,
one delayed Axlotl payment, bank2/personal1 support, exact split fee/typed return
and native-only Traitors. Revival reaches actual Guild timing, Arrakeen preserves
the next genuine Junction conflict, and the visitor battle reaches Collection.
Four policies finish24 useful World Revivals/156 actions and24 native battle/
aftercare programmes/48 continuations with7609 validated R-or-H proposals.
Conserved card/closed-deck staging and controlled original first-Storm entropy
remain explicit; no force/wallet/owner/phase/history assigned. Parent corrected
the contributed fixture’s board-sector versus combat-territory API mismatch.
Frozen related20-file union passes192/192, and final12 new cases pass after
fixture projection/generic-entropy typing fixes. Types/lint, build and actual
prototype help pass; existing build warnings remain. No complete-mode,
calibration, broad assurance or deployed acceptance is claimed.

**Native Stone/Mirror with phase modules — 16 October.** Selected Ix/CHOAM
retains original Tech/Advanced Strongholds in ordinary47 or independent50
setups; mixed E3 with these modules and Homeworlds/Skills/Nexus/Discovery/
Sandtrout remain guarded. Keep public allocation safety and the existing
provisional Stone-before-Tooth, printed copy-first and physical retention.
Genuine cache acquisition, paid marker shipment, earned Habbanya and next-turn
typed attack precede each new battle; no force/wallet/owner/phase is assigned.
Two actual mobile journeys/20 actions reach Collection with native typed losses,
one reserve fee and physical Stone/Mirror retention. Habbanya alone decides
the Advanced3-versus3 physical tie; without it, +2 R cannot save the same game.
Four policies complete32 original47/independent50 programmes,870 validated
candidates and256 continuations. All take a naturally held Traitor; normal
physical results are separate Node/UI proof. Related18-file union passes115/115;
final three rule cases also pass after fixture decision narrowing. Types/lint,
build and actual prototype help pass, with existing build warnings. No
complete-mode, calibration or deployed claim.

**Independent cards with original phase modules — 16 October.** Fresh clean
classic/selected Ix/CHOAM profiles retain original unused Tech3–6 Basic/Advanced
and/or Strongholds2–6 Advanced, with independent cards before genuine setup.
Original first-Storm assignment, phase triggers/delayed income and earned
end-Mentat custody remain. R keeps normal-first/all-outcome fee before Harass;
returned counters are not free Revival/shipment, and +2 is not supported force.
No Homeworlds, Skills, Nexus, Discovery, E3 mixture or unrelated overlay is added;
Stone/Mirror guards, public starts and played-save conversion remain separate.

Genuine battles fill Revival Tanks and earn actual held cards. Five mobile
journeys/35 actions prove original Storm/HMS setup, bank2/personal1 Arrakeen,
native mixed-fee Tabr return and two doubled-rate Revivals. Axlotl holds2
through both free returns, then pays exactly2 at phase end. Four policies
complete20 battles/52 continuations and9564 validated R-or-H proposals plus16
useful Recruits programmes/120 actions. No Face Dance or special-counter revival
is claimed. Original first-Storm randomness is controlled in Revival fixtures;
no force/wallet/module-owner/phase/history is assigned. A genuine two-token loser
also completes its mandatory winner selection through four policies without
replaying fee/return. Frozen related30-file union passes325/325, including nine
new behavioral cases; types/lint, build and actual prototype help pass.
Existing build deprecation/chunk/route warnings remain. No deployment ran.

**Clean selected-family Reinforcements — 16 October.** Plain selected Ix and/or
CHOAM native/base rosters now reuse original independent38/50-card setup in
Basic/Advanced. Original normal-first typed/all-outcome payment, score-only +2,
No-Field funding and fee-before-Harass order remain explicitly provisional.
Other overlays, mixed E3 and public/played-save gates stay separate.
Genuine paid-shipment programmes exercise Ixian normal/mixed fees, native
Face Dance and Auditor aftercare; Richese Basic four-turn collection/shipment
programmes reach funded/short marker budgets without invented wallets/armies.
Advanced markers0/3/5 use funded original turn-one reserves, not a later-storm
matrix. Conserved card/identity positioning remains labeled staging.
Seven actual mobile journeys reach Collection;48 four-policy programmes
validate3022 R candidates and194 continuations. Frozen related20-file union
passes262/262 after removing two obsolete profile-rejection tests; types/lint,
build and actual prototype help pass. This is not complete faction/mode
acceptance, calibration or deployment.

**Exact native Homeworld Reinforcements — 16 October.** Clean classic2–6
Basic/Advanced independent36-card setup now connects the native fee on Arrakis,
foreign Worlds and own Worlds. Exact normal-first source allocations seal in
the plan; ambiguous omission rejects and a unique source may derive. Reserve
fees never borrow visitors, allies or future Harass returns. On an own World,
exclude its fee from the physical dial/casualty pool while retaining original
pre-fee face/support. Nested plan sources and explosion-face receipt preserve
the actual allocation without a new game root or an invented own-World ban.

Canonical independent card names now work in existing current/named-slot
Truthtrance controls. Native question logging/preview/history no longer calls
an Arrakis-only lookup. A real named R+dial3 promise finds the needed off-World
fee, and private reviews/form filling preserve it. Six actual390px journeys
finish Collection, including physical0 own defense, threshold explosion,
three-Fedaykin fee before15 Harass returns and entitled whole-plan source read.
32 fresh four-policy programmes accept114 continuations and separately
validate1682 R candidates against the actual engine.

Frozen41-file464/464, types/lint and build pass. CLI help executes;218 evidence
paths/source anchors/related IDs resolve, with three coverage topics Partial.
Eight initial Vite dependency aborts and automation selector limitations are
recorded; no overflow/application exception. Owned hosts/tabs/scaffolds removed.
Other rosters/overlays, saved-game conversion, public/deploy gates, calibration,
whole-mode and final recovery/privacy/custody certification remain open.

**Current-rate Homeworld Recruits — 16 October.** Clean classic2–6 Basic and
Advanced independent36-card setup now admits native Revival. Reuse current
free rates/low bonuses, recorded usage and typed deposits, not a new saved
snapshot. Publisher E3 pp11/16 gives low Fremen4 doubled but capped7.
Separate-request population timing is explicitly provisional: bulk7 is free;
1 first crossing native2→3 leaves5 further free, total6, with no paid seventh
without Tleilaxu. Accepted prices/classifications remain. Special-force caps,
already-ready opportunity and no-refund prior paid accounting stay native.

Four actual mobile journeys prove bulk7, typed1+5, ready/paid Atreides and
mixed Emperor return. A stale elite1/remaining0 selection now disables the
invalid repeat with a limit notice; ordinary counters remain selectable.
16 fresh programmes/four minimal policies accept104 card/Revival/readiness
actions into phase5. Ten new regressions pass; related18-file167/167,
types/lint and build pass. The test-only nullable-world narrowing is followed
by a passing10-case rerun. CLI help and207 guide evidence paths/source anchor
pass. Initial QA middleware ordering and eight Vite dependency aborts are
recorded, not called zero diagnostics. No overflow/application exception.
Owned hosts/tab/scaffolds removed; no games/DBs/human services touched.
Reinforcements uses its separate exact native-source composition above. Other
overlays/rosters, public starts, whole-mode/final assurance and deployment stay gated.

**Classic Homeworld Harass — 16 October.** Fresh classic2–6 Basic/Advanced
Homeworlds can compose the original independent36-card variant. Harass works
on Arrakis or a foreign World, never any own World, including both Emperor
Worlds in Advanced. Recruits uses the separate native-rate composition above;
Reinforcements uses its separate native fee contract. No other overlays,
expansion rosters, public starts or played-save conversion open.

Actual undialed counters return through one native custody quote: Basic
original primary retains typed elites; Advanced normal→Kaitain/elite→Salusa.
Original commitment/support stays fixed as returned population changes later
observations. Native-only voters, Traitor/explosion and card disposal remain;
the UI no longer offers invader votes. Preserve the full Harass complement in
the World loss receipt with an optional nested `fullyCommitted` bit, not a new
game root, fake board key or delayed rescore.

23 new regressions; related27-file246/246, types/lint and build pass. Four actual
mobile journeys complete native Collection;16 native programs/four policies
accept36 continuation actions and validate precommit proposals. CLI help and
guide evidence import pass. Initial Vite optimization aborted four old dependency
requests; no overflow/application exception. Partial prototype, no deployed,
whole-mode, recovery/custody certification or original-Ghola gate change.

**Current concealed No-Field value facts — 16 October.** Truthtrance can ask
whether the respondent currently has a concealed printed0/3/5. Absent or
revealed is No even for0; concealed5 with exhausted reserves remains5. Read
only that player's original model, never allied pools, prospective counters
or shipment intent. The private expected/public aggregate path leaves token,
event, forces, reserves and history untouched; original card disposal resumes
the parent. This broad game-fact/source composition is explicit, not a dedicated
No-Field FAQ. Physical-force facts remain separate; no new saved root or mode.

Twenty-three new cases and23-file228/228 related union pass; types/lint/build
pass with existing warnings. One Advanced fixture now completes original Guild
interception before expecting deployment; no product guard changes. The allied
negative case uses actual native Ecaz/Richese Nexus, not staged ally metadata.
Four actual390px queries publish one reply/card and return to original phase5/
Richese activity: concealed0 Yes, exhausted5 AND physical0 Yes, undeployed0 No,
revealed5 No. No overflow/application exception; four initial Vite dependency
requests were aborted by startup optimization reload before completed journeys.
Sixteen fresh programs/four policies accept48 priority/reply actions, then legal
shipment/reveal or full-plan/battle continuation. Guide import resolves42 paths/
source anchor; five No-Field facets and all three coverages stay Partial.
Owned host/tab/scaffolds removed; no human game, D1 or deployment changed.
[Exact question semantics and scoped proof](RICHESE_NO_FIELD_RULES.md#current-concealed-value-truthtrance--16-october-2026).

**Distinct Advanced special Karama / No-Field — 16 October.** Supplied p27 C
and p36 B bar ordinary dial Prescience; distinct p27 F grants an entire-plan
special. Standing choose-recommended provisionally keeps them separate.
Native special Karama now reads the complete committed No-Field plan while
ordinary dial remains barred. Private target-first reading is not public
token revelation; both seals still materialize once, then original fees,
returns, support/losses and history run. No new saved field, Basic power,
mode or module gate. This is explicit composition, not a new combined FAQ.

Eighteen new actual-shipment cases and29-file393/393 related union pass.
Types/lint and build pass with existing warnings; the final narrowed real
Traitor case also passes1/1. Four actual390px journeys show zero with real
cards, ordinary mixed3.5/support2, capped Ecaz5/support0 and Richese H/R6/
support3 private reads, followed by native cleanup/market into phase7.
First reads retain concealed marker/force/reserve custody; ordinary UI still
offers no dial request. Sixteen fresh native programs/all four policies accept
92 policy actions through Collection. Actual guide import resolves34 evidence
paths/source anchor; five No-Field facets and both topic coverages stay Partial.
Fixture-only fixes complete real preleader readiness, test a different legal
leader's broken commitment, and narrow Action.leader. No product guard weakened.
Owned host/tab/scaffolds removed; no human game, D1 or deployment changed.
[Exact supplied-source distinction and proof](ATREIDES_FULL_PLAN_TIMING.md#supplied-source-no-field-composition--16-october-2026).

**Mixed ordinary/No-Field native Occupy — 16 October.** The selected Advanced
profile extends the existing explicitly provisional additive pool to allied
and opposing Richese. Original fixed Ecaz strength stays separate. The selected
Ecaz plan now receives its Richese variable-owner mixed warning; prevention
restores only the selected lead's own pool. Both seals still precede actual
reserve-capped revelation/history. No new saved field, Basic mixed-co-side,
public start or optional-module gate opens; the FAQ mixed cap stays unresolved.

Twenty-eight new native cases and the26-file358/358 related union pass, as do
types/lint and build with existing warnings. Four actual390px journeys finish
original CHOAM market into phase7: capped Ecaz lead, funded H/R Richese lead,
opposing zero/ordinary army and actual Karama prevention/redial. First seals
stay concealed; physical losses, original reserve cost and history hold.
Sixteen fresh native programs/all four policies accept80 policy actions through
Collection. Two generated guide topics retain Partial coverage;28/22 evidence
paths and the new source anchor resolve. One fixture's incidental tie was
repaired by a real three-counter commitment, not weakening the winner check.
Owned native-image mount prerequisite fixed, then hosts/tabs/scaffolds removed;
no human game, D1, deployment or new assurance campaign changed.
[Exact provisional pool and scoped proof](RICHESE_NO_FIELD_RULES.md#mixed-native-occupy-pool--16-october-2026).

**Preceding concealed No-Field battle-card checkpoint — 16 October.** Own Harass privately forecasts
native reserve-limited ordinary counters at their actual sector, without moving
them before both plans seal. Original reveal/history precedes card effects.
Reinforcements requires three own reserves after projected materialization,
before future Harass returns; token3/reserves3 now rejects the first fee plan
instead of sealing a battle that stalls at Traitor resolution. Harass-only stays
legal. Owner-only optional previews add no saved Game field or new mode gate.
This existing-order composition is explicitly provisional, not a new FAQ.

New genuine-shipment tests34/34; related17-file210/210, types/lint and build pass
with existing warnings. Sixteen fresh programs/all four policies accept48
continuation actions. Four actual390px journeys cover mixed-sector full return,
zero marker, blocked fee/legal fallback and funded native Occupy. Co-side cases
finish original CHOAM market into phase7 with original fixed/variable losses;
no overflow/browser/application error. Three guide topics import with all15
facets Partial; their25/16/28 evidence paths and three new anchors resolve.
Owned QA hosts/tabs/scaffolds removed; no human game/D1/deployment changed.
[Exact order, boundaries and scoped proof](HARASS_WITHDRAW_RUNTIME.md#own-no-field-composition--16-october-2026).

**Selected Richese weapon/card interaction wave — 16 October.**
- Clean selected CHOAM/Ix profiles now admit Stone/Mirror with native
  Ixians/Tleilaxu in Basic/Advanced; Ecaz/Moritani stays Advanced-only.
  Original Stone-first then uncopied Tooth reuses existing CHOAM priority
  under explicitly provisional choose-recommended interpretation. Printed
  Mirror copy-first and the user's physical-Mirror retention stay independent.
- Richese-family Harass/Stone uses provisional post-withdrawal counts.
  Same-plan Harass/Reinforcements pays its original reserve quote before returns.
  Native Advanced Occupy Reinforcements/Stone adds no physical +2 tokens.

Original fixed Ecaz commitment, native variable counters, support, Traitor
precedence, reserve cost and physical-card disposal/retention remain native.
Earlier questions remain unanswered; no new publisher ruling, state field,
public start or played-game conversion is implied. New Ix Tech/Stronghold,
other module bands and winner-changing allocation boundaries remain guarded.

The preceding clean-Ix affected thirteen-file99/99, TypeScript, lint and build pass.
Eight fresh Node native programs/all four policies accept42 continuation actions; two
original47/10-cache programs also complete without independent Ecaz cards.
Two real390px control journeys prove Advanced copied Tooth activation versus
unused original (both deaths, actual cyborg losses, physical Mirror kept,
spice34) and Basic Stone-before-Tooth (four-vs-zero, army/Stone kept, spice39).
Both clear battle/decision into the original Ix Collection opening, with legal
hands and no overflow/browser/application error. These use genuine setup with
explicit conserved battle staging, not unstaged complete-game acceptance.

Actual generated guide import, policy anchor and23 Stone/Mirror evidence paths
resolve; all ten facets stay Partial. Exact policies/earlier bounded proof:
[clean Ix](MIRROR_WEAPON_ENGINE_AUDIT.md#clean-selected-ix-composition--16-october-2026),
[Harass/Stone](HARASS_WITHDRAW_RUNTIME.md#provisional-stone-burner-timing--16-october-2026),
[Harass/Reinforcements](REINFORCEMENTS_RUNTIME.md#combined-utility-plan--16-october-2026),
[Reinforcements/Stone](REINFORCEMENTS_RUNTIME.md#native-stone-composition--16-october-2026).
Other profile/module limits remain. Own concealed No-Field Harass follows the
separate checkpoint above. No human server, saved room, D1, deployment or new
assurance campaign changed; final assurance follows all rules.

**Ixian Nexus purchased-card interaction wave — 16 October.**
Purchased-card replacement now composes:
- successful native BG Karama conversion, after its original counter;
- Harkonnen's original cancelable bonus and eight-card limit under a visibly
  provisional replacement → income → bonus order matching the native ally path;
- original Tleilaxu/Ix47 setup and native purchases in Basic **and Advanced**;
- native Richese/classics normal purchases with CHOAM35 and separate cache;
- actual positive native cache purchases in both modes and Black Market in
  Advanced, using the real sold lot and original price/continuation;
- Advanced direct special-Karama acquisition during Bidding, using its own
  committed price3/cache target rather than an unrelated row or older income.

Cache provisionally uses the independent-Nexus grant under the standing
choose-recommended priority; the native ally cache exclusion is unchanged.
Actual controls show that policy. Latest eleven-file107/107, types/lint/build,
ten original direct runtime paths, sixteen legal policy actions and two390px
native-action journeys pass. An already-paid bid no longer holds spice twice;
genuinely unpaid commitments stay reserved. Direct Use/Keep preserves original
cost/once-use, active player, income and suspended controls. Native automatic
payment may open a distinct following normal offer, not replay the old source.
Other-phase special acquisition keeps its native behavior without Nexus.
Receipt v1 shapes and ordinary parents remain unchanged. Earlier evidence
and exact policies are in the [canonical contract](NEXUS_IXIAN_REPLACEMENT_RULES.md).
All five facets stay Partial. Other modules and final assurance remain
separate. No human server, saved room, D1, deployment or public gate changed.
Current CLI help, source anchors and26 topic evidence paths resolve.

**Semuta connects both physical Shrine roles — 16 October.**
Fresh private `semuta --discoveries` setup retains original Richese/CHOAM,
optional Ix, unused Tech3+/Advanced Strongholds and original Discovery7/8.
Truthtrance spent as Karama is recoverable before the same original effect;
Karama spent as Truthtrance is recoverable after its single definite answer.
Neither changes its printed face. Emperor revival does not repeat; original
price provenance and normal-auction physical identity remain.

Affected six-file57/57, eight controlled runtime paths and32 legal policy
probes pass. Two controlled390px journeys recover both faces; actual Guild
shipment then pays bank3 for three counters, while the reverse path retains
one yes answer. Width/scroll390; no application/browser error after isolated
host setup repair. No saved room, human server, D1, deployment or public gate
changed. Skills/Homeworld/Nexus/E3 composition and final assurance remain
separate. [Source and exact evidence](SEMUTA_SOURCE_UPDATE_20260907.md#shrine-physical-role-costs--16-october-2026).
Final types/lint and private CLI help pass; current source links and55
Semuta evidence paths resolve. No build or broad assurance run in this slice.

**Semuta preserves native BG conversion and the separate counter cost — 16 October.**
Physical Worthless recovery now precedes the same native conversion counter,
not its effect. The card stays Worthless in its new faction. A later printed
counter is its own fresh cost; recovery still applies the same denial and
restores an older power without resetting passes. Allowed converted prices
retain claimed-cost provenance through real subsequent CHOAM rediscard/stop.

Affected nineteen-file238/238 passes, including eight new cases.
Twenty-six original-action runtime/policy paths and one controlled
acquisition/phase, actual-rediscard refund probe pass. Four actual390px
original journeys cover bank3, conversion denial, original full4 repricing
and the unchanged free normal-auction lot. No overflow/browser/application
errors; actual advisors/next-lot controls finish. Three stale Nexus Kull
fixtures now follow mandatory native preparation/borrowed Voice; three
focused cases and two controlled parent runtime probes pass without
weakening production checks or changing Kull priority.
No worker/D1/real room, human server, deployment or gate changed.
[Canonical stages and exact scope](SEMUTA_SOURCE_UPDATE_20260907.md#native-bg-worthless-and-conversion-counter-costs--16-october-2026).
Final types/lint and production build pass with existing warnings. The
eight new cases pass again after a fixture-only repair; current source
links and all five still-partial Semuta evidence facets resolve.

**Semuta preserves native special effects and separate CHOAM cashout — 16 October.**
Printed special costs now pause at their native disposal point, then resume
one original effect with the committed card even after recovery. Emperor's
existing post-revival disposal remains post-revival and cannot return the
same counters again. CHOAM's later selected hand cards are a separate private
simultaneous batch after one earned credit; only one fresh card is recoverable.

Affected sixteen-file224/224 passes, including thirteen new cases.
Twenty-six runtime/policy paths pass: eight original-action/eighteen
controlled. Four actual390px journeys pass: two original Guild source
claim/decline/prevention and two controlled CHOAM/Emperor sources, with real
movement, private selection and public force inspectors. No overflow/browser/
application error. No worker/D1/real room, human server, deployment or gate
changed. Advanced E3 Semuta entries, converted costs and final assurance
remain separate.
[Canonical stages, evidence and scope](SEMUTA_SOURCE_UPDATE_20260907.md#printed-native-special-costs-and-choam-cashout--16-october-2026).
Final types/lint and production build pass with existing warnings.
The two affected CHOAM paths pass again after a type-only repair; current
links and all five still-partial Semuta evidence facets resolve.

**Semuta keeps the purchased price, not a duplicated refund — 16 October.**
Printed shipment-price costs now offer their exact fresh card before the
same original price activates. Recovery changes physical custody, not the
beneficiary/creator or bank invoice. A claimed cost no longer qualifies for
the provisional special-stop refund—even if its new holder later discards
that very card to pay the stop. Unclaimed original refunds remain unchanged.

Affected eighteen-file234/234 passes, including eight new cases. Fourteen
original-action runtime/policy paths and two explicitly controlled extra-card
refund probes pass. Four actual390px journeys exercise ordinary bank3,
same-card reserve stop, typed bank2 after all-seat decline, and same-card
typed stop followed by ordinary movement. No overflow/browser/application
error; two transient tool-only stale-node errors were handled without replay.
No real room, worker/D1, human server, deployment or mode gate changed.
Converted/special-cost producers and final assurance remain separate.
[Canonical source, policy and proof](SEMUTA_SOURCE_UPDATE_20260907.md#shipment-price-cost-and-claimed-card-refund--16-october-2026).
Final types/lint and production build pass with existing warnings.
Current source links and all five still-partial Semuta facets resolve.

**Semuta recovers native Guild cancellation costs — 16 October.**
Printed permission/rate costs now offer the exact public Karama while the
original reserve, cross/return or typed Homeworld parent stays unpaid.
Claim/pass applies the same native cancellation once: no restored route,
retained discount, invented funding or repeated shipment. Original paid
cache/normal auctions provide both physical cards without played-state staging.

Affected thirteen-file158/158 and32 original-action runtime/policy paths pass,
including both modes and all four profiles for both native families.
Four actual390px cancellation/continuation journeys prove reserve full4,
denied cross plus ordinary1, typed full2 all-seat decline, and unfunded2/full4
then one-force full2. No overflow, browser error or application exception.
One transient stale-node tool error was followed by fresh evidence, not replay.
No worker/D1/real room, human server, deployment or public gate changed.
Shipment-price activation disposal/refund binding remains separate.
[Canonical source and scoped proof](SEMUTA_SOURCE_UPDATE_20260907.md#native-guild-permission-and-rate-costs--16-october-2026).
Final types/lint and production build pass with existing warnings; the
twelve new cases pass again after fixture-only type narrowing. Current
source links and all five still-partial Semuta facets resolve.

**Native Guild rate with Richese Secret Ally — 15 October.**
The original unpaid counter now preserves one billed counter and all five
physical forces: sand1→2, not ten. Unfunded full2 keeps forces/spice and the
ordinary full-price shipment, but its declared Nexus stays spent without a
refund/reusable coupon under the explicit selected affordability policy.
A still-held card quotes an earlier canceled rate correctly; an independent
purchased price remains separate.

Affected thirteen-file92/92 and eleven original-action runtime/policy paths
pass, including all four existing profiles. Four actual390px journeys prove
typed Junction5/fee2, unfunded release/ordinary replacement, corrected held
source2 then legal stronghold1, and independent purchased1. No overflow,
browser error or application exception. Two transient browser-tool stale-node
errors were followed by fresh evidence, not replay. No worker/D1/real room,
human server, deployment or mode gate changed.
[Canonical source choice and scoped proof](NEXUS_RICHESE_RUNTIME.md#native-guild-rate-followup--15-october-2026).
Final types/lint and production build pass with existing warnings.
Current links and both still-partial five-facet evidence sets resolve.

**Purchased price and immune Junction source choice — 15 October.**
The original offered half/full tariff remains immune; normal payees are unchanged.
An already played ordinary price no longer blocks the panel; acceptance
explicitly acknowledges that it ends unused, with no card refund.
Only actual delivery consumes it, including deferred Betrayal. Failed,
unfunded or stale actions preserve it; an ordinary purchased route remains
an alternative. This is a conservative product composition, not a publisher
worked example.

Affected eleven-file131/131 and fourteen actual runtime/policy paths pass
(eleven original-action/three controlled). Four actual390px original-action
journeys prove full3, poor2/full3 then replacement half2, ordinary purchased2,
and normal full6 Guild income plus movement. No overflow/application
exception; one initial Vite dependency request aborted. No real room,
database, human server, deployment or public-start gate changed.
[Canonical policy and scoped evidence](JUNCTION_TRANSPORT_RUNTIME.md#purchased-price-source-choice--15-october-2026).
Final types/lint and production build pass with existing warnings.
Current local links and both still-partial five-facet evidence sets resolve.

**Separate transport permission, purchased typed price and allied marker — 15 October.**
Native cross/return now has its own unpaid counter before price. Denial
preserves legal alternatives and half price; the bounded original-opportunity
scope is provisional and does not remove a signed Cunning second opportunity
or immune Junction permission. Purchased ordinary Karama halves original
typed routes without granting a route and sends the whole invoice to bank.
Existing special-stop returns the original purchase card under its prior
provisional policy. Allied marker cancellation never charges materialized
zero/five forces or silently increases a supplier’s approved whole fee.

Five actual390px journeys pass, including fresh full2 supplier reoffer/consent.
That surface caught and fixed lender UI/AI quote drift using an authorized
recipient-specific price descriptor, not private wallet data. Twenty main
runtime/policy paths pass (15 original-action/five controlled), plus four
controlled optional-offer/recipient continuations. No overflow/application
exception; one initial Vite dependency fetch aborted. Only the owned
memory-only QA engine reloaded, retaining its exact synthetic states.
The separately tracked purchased-price/Junction source composition is
connected by the newer checkpoint above; full combinations, assurance,
public starts and full goal remain open.
[Earlier authority and explicit interpretation](GUILD_RATE_KARAMA_RULES.md#permission-purchase-and-allied-marker-composition--15-october-2026).
Affected25-file263/263 passes across frozen237+26 selections; final saved/
deployed assurance is deliberately not claimed by these source checks.
Final types/lint/build and repeated20+4 source smoke pass; existing build
warnings remain. Current links and both partial five-facet checklists resolve.

**Native rate price sources, modules and typed Homeworlds — 15 October.**
Original price receipts replace blanket module exclusions. Smuggler's free
companion remains free; own No-Field bills one concealed marker, never its
hidden value. Native typed world/cross/return and Cunning Homeworld receipts
retain exact sources, original approved split and prepayment rate control,
including after automatic Guild interception. Immune Junction and independent
Nexus prices stay separate. Deferred Betrayal keeps full-price authority
until actual physical settlement, without replay or false early payment.

Affected18-file198/198 and21 runtime/policy paths pass:17 original-action,
four explicitly controlled Cunning/No-Field. Four actual390px journeys prove
composed Smuggler, native return, poor world replacement and controlled
No-Field reveal; no overflow/browser errors. Original ground movement and
out-of-order turn resume. Donor escrow is consumed without another wallet debit.
All four native Homeworld policies pass here; no calibration claim.
Allied No-Field/special receipts, ordinary permission cancellation, complete
combinations, assurance and public starts remain open.
[Canonical source composition and evidence](GUILD_RATE_KARAMA_RULES.md#native-price-source-composition--15-october-2026).
Final types/lint/build pass with existing warnings; a separate controlled
Betrayal runtime also completes full3 Use. Current links/evidence resolve.

**Native Guild rate cancellation, including Cunning — 15 October.**
Expansion/Nexus rosters now retain the prepayment native rate window for
reserve/cross/return declarations. Original physical group, tariff and approved
funding remain fixed. Affordable cancellation pays full price once; unaffordable
cancellation spends only Karama and preserves a full-price replacement.
Cunning retains its true original shipped history and second allowance;
its reserve receipt follows the pending rate event and settled price.
No first shipment, ordinary movement or Nexus reopens.

Affected nine-file101/101 and five action-only original API/policy paths pass.
All four policies pass the native rate response and pay two for three here.
Three actual390px journeys prove full-price transport, no-debt withdrawal/
replacement and Cunning reserve repricing through turn completion; no overflow
or browser errors. Two scenes are action-only native; Cunning is its explicitly
controlled existing fixture. Homeworld/Skills/Discovery/Tech/Stronghold rate
composition, full assurance and public starts remain open, not silently certified.
[Current contract and original/controlled evidence distinction](GUILD_RATE_KARAMA_RULES.md#native-expansion-and-nexus-admission--15-october-2026).
Final types/lint and production build pass, with existing deprecation/chunk/
Unknown-route warnings. Current contract links and checklist evidence resolve.

**Native Guild/BG own-arrival continuations — 15 October.**
Direct Guild transport's owner-view candidate now matches its executable
income-before-queued-Ambassador path. Ordinary shipment stops predicting its
own BG accompaniment as busy; shared preflight distinguishes resulting
Intrusion from an actual decision. Existing controls/queue own settlement,
with unchanged prices, payments, physical groups and original movement.
Actual busy/pre-entry fighter/storm and unsupported paired/profile guards remain.

Original-action fixtures and six-file55/55 plus20 API/policy paths pass,
including income/accompaniment/flip cancellation and all four legal policies.
Four actual styled390px journeys prove Guild transport with income canceled,
advisor accompaniment, accepted Intrusion, and retained fighters with a
distinct child then original offer. No replay, overflow or browser errors.
Existing child-first/live-token ordering is explicitly provisional, not a
publisher priority. No played wallet/hand/army/phase/decision staging or real
saved/deployed room. Guild rate-Karama expansion/Nexus admission remains a
separate tracked gap; public starts and full-goal acceptance remain closed.
[Canonical contract and evidence](DEFERRED_SHIPMENT_ARRIVAL.md#native-own-arrival-continuations--15-october-2026).
Final types/lint and production build pass; existing deprecation/chunk/
Unknown-route warnings remain. Canonical changed links/evidence resolve.

**Physical Traitor replacements and permanent markers — 15 October.**
Original native Ix play now draws the real Hero Traitor after Dominic4's
retirement, without turning it into a leader disc or faction target.
Shared optional permanent-card census preserves retired victims across
Nexus exchange, Face Dancer, Betrayal source/replacement and Rihani consumers.
Old absent-zone formats remain; completed source history stays historical.
A replacement may legally return and be drawn again: native Hasimir6 return,
retained Esmar3, a real turn-three Guild loss/retirement and one Hasimir6
redraw now work without rewriting the first receipt or older Nexus history.

Affected15-file134/134, final types/lint/build and11 original API/policy paths pass.
Existing build deprecation/chunk/Unknown-route warnings remain. Actual styled390px
controls Ready through owned Mentat initialization, inspect private Hero,
return Hasimir/Caid, restore/pass Mori placement, reach next Storm and reveal
Esmar3 before the second draw. One live Hasimir, two permanent markers;
no overflow/browser errors. All four mandatory-return policies legally keep
Hasimir; the human/scripted old-card return is distinct, not calibrated strategy.
Older adjacent fixtures now consume actual borrowed Voice before native
Prescience/plans; obsolete ownership/uniqueness and wording/markup pins are
removed, not re-pinned. No wallet/hand/army/leader/phase/battle staging.
[Canonical roles, exact source and boundaries](MORITANI_ASSASSINATE_LEADERS.md#physical-replacement-roles-and-retired-card-zone--15-october-2026).
No saved/deployed room touched. Full assurance, optional combinations,
exceptional targets, public starts and full project completion remain open.

**Canonical Moritani winning discs and ordinary Guild arrival — 15 October.**
The surviving played disc no longer has to be an ordinary native of its
victorious player. Original Ecaz/Duke6 opens Sanya Ecaz4; original
projectile deaths and paid foreign return let Tleilaxu win with Guild's
Staban Tuek5, then expose native Zoal3. Actual optional CHOAM Auditor2 opens
Frankos4, and its real matching Traitor is itself a different native target
for two. The played Auditor's card stays excluded, with original private
Continue and no spend. Printed faction, death/use/custody, original
Mentat retirement/replacement, once-use and game-long forfeiture remain.

The native producer found a stale future-Guild-income preflight. Ordinary
shipment now uses existing income-before-queued-Ambassador sequencing;
the bot adapter matches. Actual390px controls ship/permit one
(Moritani12→11, reserves14→13, Guild6→7), acquire Duke and reveal the
native target. Actual Sanya4, Zoal3 and both Auditor reveal/Continue paths
reach original physical replacement or no-spend decline.
Affected15-file134/134, types/lint, production build and25 original API/policy
paths pass. Existing module.register, large-chunk and Unknown-route warnings remain.
Final Guild/Ghola surfaces have no overflow/browser errors; an earlier
temporary QA-client metadata-error handler was repaired before final proof.
No hands, wallets, armies, leaders, phases or battles are staged.
[Canonical source, controls and boundaries](MORITANI_ASSASSINATE_LEADERS.md#canonical-winning-discs-and-native-targets--15-october-2026).
Exceptional targets, direct Guild transport, BG/other arrival combinations,
private-step UX, full assurance, calibration and deployed acceptance remain open.
No saved/deployed rooms touched; public starts remain gated.

**Native Moritani/Harkonnen custody — 15 October.** Original standalone,
paired and mixed-family no-Skills E3 Nexus now admit Advanced Harkonnen in
their existing module envelopes. Original capture/Keep/Execute feeds a later
qualifying Moritani takeover of living captive Duke, preserving physical
identity/history and original one-battle/current-turn release. Karama cancels
with the real card. Public qualification uses the public snapshot; allowed
resolution exposes actual unavailability without reviving private execution.
Takeover/visibility and Terror effective-control/public-victim/spent-empty
behavior are explicitly provisional product compositions.
An actual Harkonnen win using captive Duke6 opens the distinct native-Harkonnen
Traitor choice: Beast Rabban4 dies for four Bank spice, then its original card
retires face up and distinct Esmar Tuek arrives privately at Mentat.
Affected22-file union195/195, types/lint/build and fourteen actual API/policy
paths pass. Actual styled390px GameTable completes movement, shows Duke Ready,
uses original Karama/reveal and Terror death6, without overflow/browser errors.
The empty-pool boundary has staged preceding Guild deaths; it is not a genuine
five-death chronology. Four-profile decisions are legal, not calibrated.
Ecaz-only revival, Ambassador exclusions, Skills/Harkonnen/shared-training,
unrelated non-Nexus and public-start guards remain. No saved/deployed rooms
touched. Existing build deprecation/chunk/route warnings remain.
[Canonical lifecycle, source and remaining boundaries](DUKE_VIDAL_RULES.md#native-moritani-acquisition-from-captivity--15-october-2026).

**Ecaz identity-tracked repeated cohorts — 14 October.** The repeated-history
fence is replaced by provisional native-disc accounting: five Tanks including
Duke or the existing unavailable-roster exception opens ordinary returns;
completed native IDs preserve the remainder and later first deaths do not
need to match a global death number. Duke stays physically separate and
independently revivable. Actual paid, Ghola/Ambassador/foreign returns record
completion, not requests; the absent-Tleilaxu waiver remains local.
Affected19-file union230/230 and types/lint/build pass. Two original native
chronologies, both four-profile paths and actual styled390px controls prove
first-cohort11→8 and second-cohort12→10, one normal slot and original death
history. The fifth native can remain alive at deaths0; Duke stays dead1
without holding the native cohort. Actual bribes fund QA, not wallet staging.
No overflow/browser errors or saved/deployed room touched.
[Current policy/source and proof](ECAZ_REVIVAL_RULES.md#identity-tracked-repeated-cohorts--14-october-2026).
Full combinations, assurance, calibration and publication remain open.
Existing build deprecation/chunk/route warnings remain.

**Original quiet-phase Ecaz Cunning — 14 October.** Printed current-turn
tenure no longer has an artificial Battle-only fence. Existing quiet
boundaries preserve committed decisions, native chooser/phase, costs and
one-battle/turn expiry. New version3 binds actual phase/custody; historical
ordinary/version2 Battle records remain strict and actual prior QA receipts
are accepted unchanged. No roster, shared-training or foreign-Ghola widening.
Affected19-file union189/189, types/lint/build and thirty-one native scenarios pass,
including six original phases, all four legal profiles in Revival/Shipment,
both native expiry sources and actual battle release. Actual styled390px
Revival10→10, other-player Shipment and returned Tanks preserve original
allowances/turn; Ambassador placement and Guild timing keep their own controls.
No overflow/browser errors or saved/deployed room touched. Obsolete phase/
blanket Harkonnen and held-hand pins are removed, not re-pinned.
[Canonical timing/source proof](NEXUS_ECAZ_RULES.md#original-quiet-phase-cunning-timing--14-october-2026).
Broad assurance, calibration and complete-mode/deployed gates remain.
Existing build deprecation/chunk/route warnings remain; no release gate opens.

**Original captured Duke and legal Ghola composition — 14 October.**
Standalone Ecaz/classic no-Skills Nexus now connects the actual Advanced
Harkonnen lottery, including the surviving just-used losing Duke, Keep/Execute,
captive use/all-native-dead returns and Cunning liberation of the same disc.
Capture priority and return destinations are labelled provisional; native
secret capture/execution remains private. Actual Ecaz Ghola returns Duke
set aside before separate Cunning; foreign-Ghola revival stays forbidden.
Related13-file union127/127, types/lint/build pass. Actual390px controls retain,
liberate, select Duke6 and resolve once into Collection; used Execute pays2.
Real Ghola then separate Cunning retains death history and no ordinary slot.
Thirteen actual API scenarios also pass, including Cunning after both
retention/execution variants, original captive returns and unused expiry.
No overflow/errors or saved/deployed room touched. Obsolete SSR/wiring/wording
pins are removed, not re-pinned. Broader Skills/paired/timing, assurance,
calibration and publication remain open; existing build warnings remain.
[Current source, return policy and proof](NEXUS_ECAZ_RULES.md#original-captured-duke-and-ecaz-ghola-composition--14-october-2026).

**Emperor original native bank purchase — 14 October.** Normal bank retention
now uses original native Nexus roster/module profiles and their own canonical
optional envelopes, preserving exact prior classic admission. Uniform public
payment, personally affordable positive price, original acquisition/bonus/
Atreides next inspection and unchanged bank receipt remain. No bank subsidy or
Richese seller/cache route is invented; strict legacy physical revival guard
stays classic and never replays forces.
Affected16-file union217/217, types/lint/build and thirty-six actual API profiles
pass: all six natives Basic/Advanced Pay/Use plus Advanced Homeworld/Tech.
Actual390px Richese5→5/Ecaz12→12 retain modules, Basic Tleilaxu5→5 and wrong-face
CHOAM Pay14→12 preserve one actual card and index0→1; Atreides sees next card.
No overflow/errors or saved/deployed room touched. Fixture-only forced-response
and five-disc Auditor-exclusion pins are deleted. Existing public assets are
served in QA; this does not certify complete artwork or combinations.
[Canonical source/proof](NEXUS_EMPEROR_RULES.md#original-native-bank-auction-admission--14-october-2026).
Broad assurance, AI calibration and deployed/publication gates remain. Proof
receipts stay outside Git; existing build route/chunk warnings remain.

**Emperor Secret Ally joint native special purchase — 14 October.** Advanced
Richese may jointly spend its original Karama plus actual Emperor Nexus at
native purchase commit after proving three own uncommitted spice. Recommended
provisional composition keeps price, one private cache acquisition, native
once-use/full-hand/final-cache and original enclosing controls; no bank money,
reimbursement, ally bonus, fake auction or automatic public pause.
Affected13-file union112/112, types/lint/build and twelve native API profiles
pass. Actual390px retain5→5, full-hand4→4/spice3, final-cache1→0/turn9 and normal
Pay5→2 preserve both costs/one acquisition/once-use without overflow/errors.
Final depletion reaches ordinary Bidding; Easy keeps its native budget and
uses one real seller-income path. No fixture money or Kull admission invented.
[Canonical source/proof](NEXUS_EMPEROR_RULES.md#recommended-joint-richese-special-purchase--14-october-2026).
Full combinations, assurance and deployed/publication gates remain. No saved
or deployed room touched; proof receipts stay outside Git. Existing build
route-classification/chunk-size warnings remain.

**Emperor Secret Ally original Ambassador purchase — 14 October.** Original
Richese trigger now offers uniform beneficiary Pay/eligible Use under visibly
provisional outside-Bidding purchase composition. No new decline, bank payment,
reimbursement or fake auction. Version-three receipts bind actual entry/token/
buyer/card; native phase/resume authority, draw/recycling, private inability
and movement/worm suffix remain. Actual allied Harkonnen Pay bonus runs once;
forming alliance still disposes held Nexus originally.
Affected13-file union111/111, types/lint/build and eight native API profiles
pass. Four actual390px surfaces prove Basic Use11→11, Advanced Pay11→8,
irrelevant-card Pay and phase-one worm Use11→11, one original card and real
entrant/spice controls without overflow/errors. CHOAM closing market only
sells/trades; no missing direct purchase producer is invented. Other real
purchase sources, full combinations, assurance and deployed gates remain.
[Canonical policy/proof](NEXUS_EMPEROR_RULES.md#recommended-original-ambassador-purchase--14-october-2026).
No saved/deployed room touched; proof receipts remain outside Git. Build
retains existing route-classification/chunk-size warnings.

**Emperor Secret Ally original Richese purchases — 14 October.** Basic/Advanced
cache, legal self-cache and Advanced Black Market now connect uniform buyer
Pay/eligible Use after original Richese Betrayal. Recommended provisional
seller-unpaid policy retains the personally affordable full price without bank
reimbursement. Original self-discard prevents acquisition/Nexus spend; diverted
bank provenance does not create payment on Use. Signed source receipts preserve
actual lot; original stock, hand limits, bonus and source successor run once.
Affected10-file union108/108, types/lint/build and twenty native API profiles
pass. Actual390px cache/Black/self-cache/diverted-cache Use retains wallets,
one lot and original bonus/round, with no overflow/errors. The distinct
Ambassador composition is above; full combinations/assurance/publication remain.
[Source policy and proof](NEXUS_EMPEROR_RULES.md#recommended-richese-seller-unpaid-purchase--14-october-2026).
No saved/deployed room touched; proof receipts remain outside Git. Existing
build route-classification/chunk-size warnings remain.

**Emperor Secret Ally original extra-return continuation — 14 October.**
Exactly three now enters native pending revival after one Nexus spend.
Requested/returned/denied receipts track real settlement; ordinary force/free
and native allied-extra usage stay unchanged. Native Tleilaxu prevention/
once-only income, actual typed reserves, Axlotl and Homeworld handling continue
under explicit provisional independent-source policy. Recruits/ordinary free
blocking do not reprice this fixed grant; no leader/provider/refund is invented.
Native Ix typed counts and newly returned Fedaykin placement remain physical.
Affected16-file union266/266, types/lint/build pass. Fourteen real API profiles
continue to Movement, including Basic/Advanced native deposits and Fedaykin.
Actual390px Allow→ordinary3, Prevent and Fedaykin placement prove unchanged
ordinary usage, actual income/Tech once, denied no-return/no-refund, and one
star to Sietch Tabr14. No overflow/browser errors; no saved/deployed room touched.
[Canonical policy and proof](NEXUS_EMPEROR_RULES.md#recommended-independent-extra-return--14-october-2026).
Owned QA host/tab/scaffolding is removed; proof receipts remain outside Git.
Existing build route-classification/chunk-size warnings remain.

**Emperor Nexus compulsory original purchase — 14 October.** The conservative
provisional full-price policy now connects normal-auction Betrayal before
winner payment, with neutral public held-Nexus storm-order acknowledgements.
One actual card forces native Emperor's full original allied obligation,
reusing prepaid aid and adding only missing own spice. Original acquisition,
income allow/cancel and next-lot inspection continue; all-pass keeps ordinary
payment. Truthtrance's original discard restores the same source event.
Affected10-file union155/155, types/lint/build pass. Four API profiles and
actual390px neutral/Use/allow/cancel preserve buyer6, prepaid1/missing1,
one purchased card and one Nexus; original Emperor income10 or canceled8
restores next lot1 with no refund, overflow or browser errors.
Special seller lots, full combinations, assurance and deployed acceptance remain.
[Source-bound policy and proof](NEXUS_EMPEROR_RULES.md#recommended-original-full-price-funding--14-october-2026).
Owned QA scaffolding is removed; API/phone proofs remain outside Git.
Final build retains existing route-classification/chunk-size warnings.

**Fremen Secret Ally ordinary free quota — 14 October.** Recommended
provisional fixed-three permission now replaces the early-only exact-three
transfer. Activation spends one Nexus and moves nothing; original revival
controls support partial/late typed groups and original prevention, income,
Tech and Homeworld continuations. Prior free use counts, paid returns are
not refunded, higher native rates and Recruits' minimum-seven total survive.
The affected20-file union passes329/329; types/lint pass. Four real API
profiles reach Movement after late activation. Actual390px activation then
one-plus-two returns uses original Tleilaxu Allow controls, preserves spice13,
returns three counters and produces native income1 once, with no overflow
or browser errors. Old physical receipts adopt metadata without replay.
Final module, assurance and deployed acceptance remain open.
[Canonical interpretation and proof](NEXUS_FREMEN_RULES.md#recommended-fixed-ordinary-quota--14-october-2026).
Final connected UI build passes; existing route-classification/chunk-size
warnings remain. Owned QA scaffolding is removed; proof receipts are outside Git.

**BG Cunning fresh/storm card exceptions — 14 October.** The recommended
in-place any/all prototype now permits current-turn accompanied and storm-
bound/separated advisor territories during BG's own Advanced action. Native
whole-group custody, one Karama response and ordinary flip/arrival/movement/
battle rules remain. Real Shield Wall2/lockedTurn2, Arrakeen2 under storm10
and False Wall East5/9 separated by storm7 feed allow/cancel and four legal
profiles. Related10-file union65/65 passes; types/lint pass.
Three actual390px tables prove fresh allowance plus one fighter movement
and Battle handover, storm-bound stance-only allowance and separated batch
Karama cancellation. A live existing Move-button mismatch was reproduced
and fixed using shared projected geometry/range; blocked origin and
cross-storm detour now disable with accessible explanation. No engine rule
was weakened. No overflow/browser errors; wider module and release gates stay open.
Final compiler/lint and app build pass, with existing build warnings. Native
API receipts show fresh distance1/range1, bound route unreachable and separated
distance2/range1, with original battle geometry unchanged. Owned QA service/
scaffold removed and tabs released or auto-closed; proofs remain outside Git.
See [the source-bound prototype](NEXUS_ADVISOR_RUNTIME.md#fresh-and-storm-card-exception-prototype--14-october-2026).

**Fremen Secret Ally worm protection — 14 October.** The recommended
independent-operation prototype now saves only the actual unallied holder's
groups before original devouring. Publicly possible threatened held-Nexus
seats acknowledge in frozen storm order, independent of hidden face; no
additional Karama provider or riding is invented. Native casualties/spice,
Great Maker vote and the next blow/Nexus remain original. Actual Basic/
Advanced source and four legal profiles pass in the related9-file union86/86.
The390px table preserves Emperor1/reserves19/Tanks0/spice10, devours the BG
advisor to Tanks1, clears four Hagga Basin spice, spends one Nexus and accepts
the resumed Sihaya blow without overflow or browser errors. A storm-invalid
fixture source was corrected to a real safe shipment, not weakened engine
legality. Broader module/marker combinations and final acceptance stay open.
Final types/lint/build pass. Four actual Basic/Advanced normal/Great Maker
API runs preserve those costs, close the original vote where applicable and
reach Sihaya once. Owned QA host/tab/scaffolding removed; proofs outside Git.
See [the source-bound policy](NEXUS_FREMEN_RULES.md#recommended-independent-protection--14-october-2026).

**Bene Gesserit borrowed Voice — 14 October.** The recommended provisional
policy is now connected: actual unallied absent-BG holder, attacker-first
neutral continuation before Prescience, one spent-card declaration and the
original Karama response. Cancellation retains card expenditure and original
preparation; all-pass preserves the card. Native compliance and special/mode
restrictions are reused; no in-flight preparation retrofit. Genuine Basic/
Advanced runtime and four legal profiles pass in the related50-case union;
types/lint/build pass. Actual390px neutral Continue→projectile command→real
Karama→native Prescience decline→Seal battle plan preserves one Nexus discard,
canceled receipt and unchanged forces/spice, without overflow or browser
errors. QA host configuration errors were repaired before final surface proof.
Broader combinations, assurance and public/deployed acceptance remain open.
See [the source-bound contract](NEXUS_BENE_GESSERIT_RULES.md#recommended-borrowed-voice-prototype--14-october-2026).

**Tleilaxu Secret Ally combined revival — 14 October.**
The recommended prototype now provides owner-only leader/paid-force controls
in quiet Revival, with the actual Tleilaxu Nexus held and faction absent.
One mandatory own dead leader returns free and consumes the ordinary slot;
zero-to-five exact counters cost one bank spice each and share an ordinary
ceiling expanded to at least five. Earlier ordinary returns count; larger
native/Recruits allowances remain. Only the unopened roster trigger is waived:
ordinary cycles, repeated deaths, typed caps and special custody remain.
This policy is visible and provisional, not publisher clarification.

Genuine Basic/Advanced setup, shipment, opposing weapon, eight-counter loss,
worm pact and real closing draw lead to this action. No target hand/force/
wallet/death/phase is fabricated. Original skill return, reserves and typed
Homeworld deployment source are reused. Final nine-file union141/141,
types/lint/build pass. Four legal profiles execute the real leader+five return.
Actual390px table: Dr. Yueh alive with deaths1/cycle0; spice11→6,
Tanks8→3, reserves10→15, returns5 and leader slot consumed, one Nexus
discard and Ready restored. No overflow or browser errors. Existing Ecaz
six-disc/Advanced-Harkonnen Duke candidate guards and full module/deployed
acceptance remain open.
[Contract](NEXUS_TLEILAXU_RULES.md#recommended-combined-revival-prototype--14-october-2026).

**Moritani Atomics after alliance change — 14 October.**
The recommended interpretation keeps the permanent hand-limit penalty on
Moritani and its original ally at detonation. Later Nexus and Enemy of My Enemy
alliances are legal without transferring it to an uninvolved new ally; an
unallied detonation never gains an ally target later. Original stored targets,
casualties and random discards remain authoritative. The choice is visibly
provisional, not publisher clarification.

Genuine Basic/Advanced setup, placement, worms, pact, paid entry and detonation
lead to a later Nexus or Robbery-based Enemy of My Enemy. A new
Moritani/Emperor pact preserves limits3/3/4 for Moritani/former Atreides/Emperor
and Tanks6/0/1. Legacy active policy adoption preserves input and effects.
Final six-file union112/112, types/lint/build pass; actual390px break/offer/
accept controls and the persistent-target notice are verified with no overflow
or browser errors. Four legal policies can accept the pact. Full Moritani,
other Atomics module combinations and deployed acceptance remain open.
[Contract](MORITANI_TERROR_RULES.md#recommended-persistent-activation-targets--14-october-2026).

**Basic shared Orgiz settlement — 14 October.**
Both modes now wait for the original Ecaz/ally allocation before Orgiz.
`quoteSharedOrgiz` replaces the Advanced-only path: Advanced charges once per
territory; Basic counts actually reduced positive deposits in the original
saved source map for that territory. Positive foreign recipients are considered
Ecaz first, then ally, skipping zero shares, self and empty purses. Every
transfer updates available balances and checks cumulative overflow. The
original allocation event prevents replay; no saved schema is added.

The native Basic equal split reproduced the missing payment before the fix.
Now equal/full/zero shares, acceptance timing, wrong actors and stale events
pass in both modes; multi-source/fallback/overflow boundaries also pass.
Final six-file union80/80, types/lint/build pass. Actual390px Basic Red Chasm
lot4: Use equal split changes Ecaz7/Guild8→8/11 with one transfer, no decision
and Ready restored. No horizontal overflow or browser errors. All four legal
policies independently complete that Basic split through real engine actions.
Basic's per-deposit mapping and ordering remain provisional; broader module,
rules-mode and deployed acceptance remain open.
[Contract](DISCOVERY_PROTOTYPE.md#multi-occupant-and-shared-cisternorgiz-collection--14-october-2026).

**Earlier canonical Orgiz Collection sources (`bcd1b10`) — 14 October.**
The original ordinary quote now records positive player/location/amount deposit
receipts before Orgiz. Both modes use actual collectors, not co-present force
inference: Basic groups by positive deposit; Advanced groups by territory.
Original storm-order eligibility skips self, zero actual collection and empty
purses. City income and unresolved Ecaz escrow cannot identify an ordinary
payer. The former shared-sector withholding branch and `collectorAt` are gone;
phase controls and Advanced bilateral allocation remain original.

Genuine Basic/Advanced Sihaya Ridge paths preserve setup, cards, armies,
alliance, reveal/entry, departure and paid shipments. Exact source receipts
show both collectors taking2, or one consuming the original6-spice pile with
the other taking0. Face1 is selected at the actual turn-two forecast shuffle,
not assigned to a later source. Final six-file union72/72; types/lint and app
build pass. Actual390px Finish shipment & movement turns phase5→7,
Ecaz7/Guild10→Ecaz8/Guild14 with one Orgiz transfer and Ready restored.
No horizontal overflow or browser errors. Basic shared settlement was pending
at that checkpoint and is now connected above; full/deployed acceptance remains open.
[Contract](DISCOVERY_PROTOTYPE.md#multi-occupant-and-shared-cisternorgiz-collection--14-october-2026).

**Earlier Orgiz payer ordering and native proof (`bc09ac3`) — 14 October.**
Every Cistern fighter occupant receives two bank spice. Orgiz occupants resolve
in original storm order without debt. Advanced charges once per territory,
selecting the first definite foreign collected-sector payer in storm order that
can pay; self and empty purses are skipped. Basic retains the provisional
positive-deposit mapping. Shared Ecaz desert lots wait for actual bilateral
allocation, then consider positive foreign recipients Ecaz first, ally second.
These occupant/payer orderings are provisional recommended interpretations.

The shared fixture now uses original setup, inspection/reveal, free entry,
worm alliance, real departure and fresh paid shipments. It no longer clears
armies/cards or fabricates alliances/phases/spice positions. Fresh original
desert blows avoid the former rock-terrain precondition failure. Native cases
cover equal/full/zero Ecaz shares, self exclusion, acceptance timing,
wrong-actor rejection and stale allocation. Final three-file union27/27;
types/lint and app build pass. Actual390px table proposal4/0 leaves wallets7/11
unchanged until Guild accepts, then credits Ecaz10/Guild12 with one transfer,
no remaining decision and enabled Ready. No horizontal overflow; fresh settled
surface has no application errors. The earlier checkpoint's genuine-fixture
and app-build claims were unsupported and are corrected here. That checkpoint's
ordinary-source ambiguity gap is superseded by the canonical receipt pass
above; Basic shared allocation and complete/deployed acceptance remain open.
[Contract](DISCOVERY_PROTOTYPE.md#multi-occupant-and-shared-cisternorgiz-collection--14-october-2026).


**Recommended Jacurutu and Testing Station choices — 14 October.**
Following the choose-recommended-option priority, mixed physical Jacurutu dials
now use a defeated-player exact ordinary/elite/paid selection before battle
mutates. Original withdrawal/retreat counters do not earn Tanks income;
unique readings stay automatic, and original payment/casualty/Collection resumes
once. Testing Station gives each non-advisor occupant one cumulative adjustment
in original storm order, then traverses once; natural source/base/from/token,
Weather exclusion and existing sole-frame signatures remain.
Both are visible provisional interpretations, not new publisher or separately
answered numerical user rulings. Actual native original setup, token lottery,
ship/reveal/entry, declared battle or worm alliance retain printed stock and
starting armies. Actual390px dial choice earns1 with two losing Tanks/one elite;
native city income remains separate. Guild+1 changes pending2→3 without moving
storm3; Ecaz−1 then moves it once to5 and opens Spice Blow, with both garrisons
intact. Browser errors empty and no root overflow. Related12-file union104/104,
types/lint and app build pass; [precise source and proof](DISCOVERY_PROTOTYPE.md#recommended-physical-dial-and-cumulative-storm-choices--14-october-2026).
That checkpoint's Cistern/Orgiz/shared-collector gaps are superseded by the
Collection proof above; ambiguous collected-sector payers and full acceptance
remain open.

**Classic Homeworld normal Banker and whole-invoice accounting — 14 October.**
Fresh `banker-income --homeworlds` reuses original classic Basic/Advanced
occupation/all14 setup and income-v1, without Nexus/Discovery/Tech/Strongholds
or native expansion overlays. The user selected same-payer/same-invoice Bank
combination, first eligible Bureaucrat contributor primary-first internally,
and low native whole-invoice rounding with primary-first extra Bank units.
Original payer shares and private prompts remain unchanged. The two-odd
declaration/UI/AI fence is removed; actual final native/occupied receipts,
not wallet deltas or full canceled occupied gross, authorize grants.
Native5+3 without tax banks3/1 and earns none; tax2 banks4/1 and earns one.
Occupied cancellation preserves occupier4 and banks only native4 as3/1.
Actual world-to-world4 and sponsored board-return4 bank fees qualify; low
Kaitain’s later eight-spice native auction yields Emperor4/Bank4.
Actual390px **Redirect2** leaves wallet11/front1; ordinary city Collection
makes13, last native **Ready** enters Mentat and makes14/front0 with one credit.
Browser errors empty, no root overflow. Isolated actual `HWBANKQA v8` CLI
retains original setup/custody. Related18-file union292/292, types/lint and
app build pass with existing warnings. [Accounting contract and proof](SPICE_BANKER_RUNTIME.md#classic-homeworld-final-bank-income--14-october-2026).
No existing save conversion, complete-mode, broad-assurance or deployed claim.
Recommended options are chosen without another clarification question.

**Ruled Grumman removal and Cunning addition — 14 October.**
The user selected supply-only Cunning, HMS exclusion, preserved Grumman
addition prerequisite and unrevealed return to hidden supply. Native removal
now rotates supply IDs and pays4 once without revealing the face or spending
Mentat placement. High-Grumman Cunning consumes one actual Nexus, binds its
phase7 source/prerequisite and permits a static Arrakis destination only when
an ordinary stacked addition was already eligible. No new cancellation window.
Genuine Basic/Advanced before/after programs preserve all original stock;
later real Guild entry at Polar Sink recognizes the Cunning placement, and its
later Grumman removal retires only that live location. No prerequisite means
no Cunning spend or reward. All four existing policies apply legal choices.
Actual390px return and Red Chasm Cunning addition each pay12→16, preserve
Mentat usage1 and close the original choice. Browser errors empty, no root
overflow; `/tmp/dune-ruled-grumman-ui-proof.json` records local proof.
[Cunning rulings](NEXUS_MORITANI_RULES.md#user-rulings--14-october-2026)
and [removal ruling](GRUMMAN_STACKED_TERROR_RULES.md#user-ruling--14-october-2026)
are interpretations selected by the user, not new publisher answers.
No complete-mode, broad-assurance or deployed acceptance claim follows.
Final affected14-file union92/92, types/lint and app build pass with the
existing module-registration, chunk-size and route-classification warnings.

**Documented Skills CLI validation corrected — 13 October.**
The actual CLI still rejected `guild-betrayal --leader-skills` with
`--leader-skills requires --profile semuta`, despite the already-connected
room dispatcher and documented Homeworld/Skills entry. Its fence now matches
the existing Semuta, Homeworld occupation and Guild Betrayal support.
Actual isolated `GUILDCLI v8` and `HWCLIQA0 v8` both reach native
`leaderSkills` with all14 real offers/deck cards; Guild also retains Nexus12,
and Homeworld retains original custody and occupation preview.
Prototype-room56/56 and types/lint pass. No rule, public start or saved-room
conversion is added.

**Classic Nexus normal Banker income — 13 October.**
The existing explicit `banker-income --nexus-cards` entry now composes native
classic Basic/Advanced all14/all12 setup, optionally Tech3+ and Advanced
Strongholds2+. Printed final-bank-leg, phase-use, deferred budget and original
Mentat settlement are unchanged. Native Guild pays4/wallet5→1/front1; paid3
and Emperor's player-recipient4 earn none. Actual390px Collection Ready credits
Atreides10→11 at real Mentat, removes front1 and adds no collect action.
CLI `BANKERQA v8` retains real offers/all14, Nexus deck12 and income-v1.
Existing earned-custody policy and ordinary opt-in remain; Homeworlds,
Discovery, native-family Nexus, Betrayal and full-mode gates stay separate.
[Canonical source and local proof](SPICE_BANKER_RUNTIME.md#classic-nexus-income-composition--13-october-2026).
Final seven-file union159/159 and types/lint pass, including actual separate
Heighliners settlement. No broad-suite, full-combination or deployed claim.

**Checkpoint test repairs — 13 October.**
The observed occupied-Guild failure came from always shipping to Arsunt11,
even when the actual turn3 storm was there. The native fixture now chooses
the first printed Arsunt sector outside the current storm; no storm, force,
payment or occupation rule changes. Twenty actual Advanced receipts retain
native3/occupied3/Bank2, including storm11 with shipment to Arsunt12.
The obsolete reference tests pinned prose, checklist defaults and test-only
evidence paths; these are removed, retaining actual topic/link reachability.
The two-file union passes10/10 and types/lint pass. No whole-suite or deployed
acceptance is claimed.

**Captured Leader Skill replacement ruling — 13 October.**
The user resolved the previously gated captured-card replacement question: the
original faction keeps its existing Skill assignment while its trained leader is
captured, so reviving a different eligible own leader is legal and simply draws
no replacement card while that assignment exists. This is the selected reading
of the authorized supplied Advanced physical p21 condition "if you have no
Leader Skill Card"; it is not a new publisher ruling. The engine's earlier
guard vetoed the whole ordinary/Ghola revival instead of only the replacement
offer. `leaderSkillRevivalBlocked`/`requireLeaderSkillRevival`, the
`gholaLeaders` early return, the view `revival.leaders: []` filter and the
beginRevival/Ghola/Emperor-special-Karama call sites are removed;
`offerRevivedLeaderSkill` is unchanged and still suppresses a second assignment
or draw. The previously committed rejection assertions at
`tests/advanced-native-skills.test.ts:258` and
`tests/leader-skills-capture.test.ts:322` are the program-level BEFORE; both are
rewritten to the ruling. Bounded changed-path smoke covers ordinary, Ghola and
Emperor special-Karama revival of a different own leader with exact cost, no
offer/draw, retained captive card/controller and a conserved all14 deck. Docs
`LEADER_SKILLS_CAPTURE.md`, `LEADER_SKILLS_RULES.md` and `NEXUS_CARD_RULES.md`
record the ruling. No expanded-slice, complete-mode, save/deployed or assurance
claim follows.

Actual390px `GameTable` proof now exercises all three captured-skill controls:
Thufir5 paid revival10→5, held Ghola10→10 and Emperor special Karama8→8.
Native dead discs revive once; Lady Jessica/Fenring stay captive under Harkonnen
with byte-identical Skill state, no replacement offer or draw. Real controls
remove the consumed Ghola/Karama and the ordinary once-per-phase choice.
No root overflow or browser errors after the isolated QA host's React/shim
setup was corrected. Artifact `/tmp/dune-captured-revival-ui-proof.json`;
owned tab/host/scaffold removed. This is local component/engine proof, not
production or saved-room acceptance.

**Ordinary Skills in Guild Betrayal — 13 October.**
The new Bureaucrat composition had exposed all14 cards but omitted its profile
from ordinary skill quotes. A real Sandmaster move rejected while ordinary
movement succeeded; native Mentat battle naming was absent before posture.
The exact native-Guild classic profile now joins ordinary skill legality; it
explicitly rejects Homeworlds/Tech/Strongholds/Semuta and other overlays.
Actual CLI `guild-betrayal --leader-skills` dispatch is connected and exercised.
Native Sandmaster wallet5→6/pile6→5/moved1 precedes original Collection
wallet8/pile3. Actual390px Mentat naming→target Crysknife show retains the card,
records the answer only for entitled seats and restores original posture; paid
trainer wallet3 and all other wallets stay unchanged. Artifact:
`/tmp/dune-betrayal-mentat-3232.json`; browser errors empty.
Frozen42/42 across three affected files and types/lint pass after removing a
nonexistent controller-property pin and an incidental zero-spice-map shape pin.
No source rule, strategy, public start, saved-game or full-mode claim follows.
Final68/68 across five related unit files, types/lint and app build pass with
unchanged warnings; owned QA resources are released.

**Advanced occupied Bureaucrat receipts — 13 October.**
Actual Advanced Emperor and Guild gross8 receipts now prove native3/occupied3/
Bank2 through retained original qualifications, with original full payer shares.
Emperor's real twenty-counter departure uses15 normal Kaitain plus5 Salusa
elites. Guild's native flexible timing delays foreign invasion until turn2;
the later receipt uses a real turn3 worm/alliance, not a past-phase predicate.
Native Harkonnen preparation and a fifth BG occupier preserve original rules.
Initial fixture traversals chased an already-past Spice phase to the native
turn10 Guild win; turn-relative traversal fixes the fixture without changing
game rules. The old Basic paths remain. Four new outcome/boundary cases bring
the two-file union to21/21; types/lint pass. No new production code, strategy,
save/deployed, full-game or completed-mode claim follows.

**Actual occupied Homeworld / Skills composition — 13 October.**
The earlier marked-done split-recipient task had only proved plain Homeworld
funding; it did not finish the ruled occupied allocation. That missing composition
is now connected through original classic occupation+all14 Skills entry and CLI
`--profile homeworld-occupation --leader-skills`. Paid receipts preserve original
amount/shares and carry optional Bank diversion2; allocation uses gross−2.
Native Basic empty-Junction and empty-Kaitain invasions prove actual occupied
gross8→Bank2/native3/occupied3, decline4+4, and cancellation native0/occupied4
without a Bureaucrat use. No armies, wallets or qualification histories are
assigned. Original low-Junction two-odd funding guards remain;6+2 is legal.
Actual390px Emperor redirect→Guild allocation→original bonus allowance reaches
lot1 at E8/H0/G16/A10, one use; evidence
`/tmp/dune-occupied-bureaucrat-3231.json`. Browser errors empty; one transient
AX failure after Seat change was recovered without replay.
Both Basic/Advanced fresh entry and actual prototype dispatch are exercised;
occupied payment paths here are Basic, not retention/full-game acceptance.
Final110/110 across seven affected unit files, types/lint and app build pass;
existing build warnings remain. No deployed or complete-mode claim follows;
broader rules, administration and final assurance remain due.

**Bureaucrat / Guild Nexus Betrayal receipt — 13 October.**
Per the user ruling, a Betrayal receipt now carries Bureaucrat: the holder
receives the fee minus two. A new bounded composition
(`initializeGuildBetrayalLeaderSkillsGameForAudit`, `guildBetrayalNexusLeaderSkillsProfile`)
admits classic Nexus + Leader Skills with the Betrayal preview, and the accepted
Use completes the original native shipment and records the unchanged full-fee
receipt before offering Bureaucrat from the invoice's own payment legs with the
holder as payee. Redirect subtracts exactly two from the holder; decline leaves
the full fee; no offer when the holder is the shipper, no leg reaches five, or
the skill was already used. No other Betrayal or preview composition is admitted.
35 consumer cases cover both modes and 5+0/5+3/3+5/5+5/0+5 legs, redirect and
decline, unchanged invoice/payer/donor debits/escrow/physical shipment/receipt,
single Nexus discard, no-offer boundaries, private projection with payer null,
stale/tampered rejection and all four bots. Two actual390px flows redirect2:
single-leg5 (holder14→12, shipper still pays5) and allied5+3 (holder17→15,
private payer null, donor escrow consumed). The shared betrayal fixture gained
distinct conserved Nexus faces for additional unallied seats; existing
single-extra expectations are unchanged. Union462/462 across twenty-four files,
types/lint and build pass. No deployed, save/recovery or full-mode claim follows.

**Bureaucrat / Homeworld allied income and two 13 October rulings — 13 October.**
Homeworlds + Leader Skills games now connect qualifying allied-funded ordinary
auction and Guild-shipment income through the admitted Homeworld Skills
capability. Genuine Basic/Advanced classic Homeworld Skills games train
Bureaucrat on Atreides and seat native Guild;
53 consumer cases cover 5+3/3+5/5+5/fully donor-funded five, decline/redirect,
sub-five nonpooling, owner/payee exclusion without masking an eligible payer,
private gross-only invoices with payer null, stale/cross-actor rejection, four
bots, once-per-phase use and original Karama cancellation for both income types.
Two actual390px flows redirect2: Basic auction5+3 (Emperor8→14, Harkonnen10→5,
Guild5→2) and Basic shipment3+5 (Guild5→11, Harkonnen10→7 with eight reserves at
Habbanya17, Emperor8→3). Artifact: `/tmp/dune-homeworld-bureaucrat-3229.json`.
Two user rulings were recorded: the diversion comes off the gross before any
Homeworld occupation split, and a Guild Nexus Betrayal receipt still carries
Bureaucrat (holder receives the fee minus two). Neither is exercisable yet — the
occupied-percentage preview and the Betrayal preview are both fenced from Leader
Skills by explicit validation, so both remain exact recorded boundaries rather
than silent omissions. Union369/369 across sixteen files, types/lint and build
pass. No deployed, save/recovery or full-mode claim follows.

**Bureaucrat / native paired E1 funding — 13 October.**
Original paired E1 (Ixians/Tleilaxu + classics) with skills now admits
qualifying allied ordinary-auction (Emperor), Guild-shipment and paid Tleilaxu
revival receipts without Homeworlds. A classic seat genuinely trains Bureaucrat;
the existing genuine paired-Ix setup supplies real Storm/Mentat/worm/alliance
and native closing draws. Before this slice both families rejected at the mode
guard after a real pledge; a paid revival silently produced no offer (mode
support false). Both gates now admit the no-Homeworlds paired E1 Nexus profile
only: single-native E1, preview overlays, multi-expansion and Homeworld funding
stay excluded. Paid revival is stamped from the payer's actual cost, so the
separate one-spice free award is excluded; Axlotl is a separate token, Face
Dance has no payment, and foreign-ghola acquisition is Tleilaxu-paid. Forty-nine
consumer cases cover both modes, 5+3/3+5/5+5/fully donor-funded five,
decline/redirect, sub-five nonpooling, owner/payee exclusion, public gross/payee
with payer null, stale/cross-actor, four bots, bribe regression, one use per
phase and the revival cases. Two actual390px flows redirect2: Basic shipment5+3
(Guild5→11, Harkonnen10→5 with eight reserves at Habbanya17, Ixians10→7) and
Basic paid revival (Atreides10→4 for cost6, Tleilaxu5→10 = paid6 + free award1
− 2). Artifact: `/tmp/dune-e1-bureaucrat-3228.json`. Frozen union + types/lint/
build pass. No deployed, save/recovery or full-mode claim follows.

**Bureaucrat / native paired E3 funding — 13 October.**
Original paired E3 roster Ecaz/Moritani/Guild/Atreides/Emperor with skills now
admits qualifying allied ordinary-auction (Emperor) and Guild-shipment receipts
without Homeworlds. Atreides genuinely trains Bureaucrat; a real turn-two worm
forms the actual Ecaz/Moritani alliance, retaining native armies and Basic
Ecaz12/Moritani12/Guild5/Atreides10/Emperor10 (Advanced differs only at Guild6,
Atreides12). Unlike E2, E3 mode support already existed, so both families and
modes rejected only at the allied-funding guard after a real pledge5, byte-identical.
The gate now admits single-Ecaz paired E3 and preserves every prior admission;
Ix paired, Discovery, Tech, Stronghold, multi-expansion and Homeworld funding
stay excluded. Ix paired is deferred because enabling it would newly admit the
existing revival payment stamp in an Ixian-native Tleilaxu composition whose
Bureaucrat handling is not yet source-reviewed. Forty-six consumer cases cover
both families and modes, 5+3/3+5/5+5/fully donor-funded five, decline/redirect,
sub-five nonpooling, owner/payee exclusion without masking an eligible payer,
public gross/payee with payer null and no shares, stale/cross-actor rejection,
four bots, original Emperor-income cancellation and a real phase refresh.
Two actual390px flows redirect2: Basic auction5+3 (Emperor10→16, Ecaz12→7,
Moritani12→9, one use, next lot at Guild) and Advanced shipment3+5 (Guild6→12,
Ecaz12→9 with eight reserves at Habbanya17, Moritani12→7, Atreides12 unchanged).
Artifact: `/tmp/dune-e3-bureaucrat-3227.json`; browser errors empty. Frozen
union203/203 across nine files and types/lint/build pass. No deployed,
save/recovery or full-mode claim follows.

**Bureaucrat / native paired E2 funding — 13 October.**
Original six-seat CHOAM/Richese/Harkonnen/Fremen/Emperor/Guild Skills Nexus
now admits qualifying allied normal/cache/Advanced Black Market and shipment
receipts without Homeworlds. Native CHOAM trains Bureaucrat; real bribe3/Mentat,
next worm and mutual alliance retain original armies and C26/R5/H7 Basic or9
Advanced/F6/E10/G5 Basic or6 Advanced before pledges. Two shipment and five
source-specific auction before programs rejected immutably at the earlier
module guard. Existing native E2 profile and centralized allied support now
connect original full costs, one flat2, private receipt fields and four legal bots.
Native Guild/Emperor cancellation stays first; Richese proceeds use original
seller credit with no invented cancellation. Basic no-Black-Market and normal-only
free Karama purchase boundaries remain. E1/E3 and Homeworld funding stay separate.
Three actual390px flows: Advanced3+5 Guild redirect G12/H6/F1/C26 and original
Finish→Fremen; Basic5+3 cache allowance R13/H2/F3/C26, one purchase/bonus and
normal lot0; Advanced wholly F-funded5 Black Market redirect R8/H9/F1/C26,
one transfer/bonus then original declaration/cache-first selection, no extra cost.
Artifact: `/tmp/dune-paired-bureaucrat-3226.json`; browser errors empty.
Four parent actual source programs and two actual cache-last closings retain
original CHOAM market→Revival, no additional debit/purchase/use. Final157/157
across eight files pass. Initial direct-to-Revival and exact sealed-log order
pins were removed, not re-pinned; independent public Storm order is not private
funding. A fixture narrowing is repaired; one shared-gate/bare-not-throw echo
case is removed. No rule, strategy, save/deployed/full-mode claim follows.
Final types/lint and app build pass after removing the unused offer-initializer
import left by that obsolete case. Existing build warnings are unchanged.

**Bureaucrat / qualifying classic allied receipts — 13 October.**
Original Basic/Advanced five-plus-three, three-plus-five, five-plus-five and
fully ally-funded five auction/shipment payments now offer one two-spice Bank
redirection after original Karama allowance, with every original payer cost
unchanged. Six before shipment and six before auction programs rejected
immutably at the old guard after actual pledges. New fixtures retain original
setup armies, first-turn bribe/Mentat credit, real next worm and mutual alliance;
the old folded-army threshold fixture and obsolete guard assertions are removed.
Public gross/recipient remain, but private shares and qualifying identity do
not: allied prompt payer is null. Owner/payee contributions cannot qualify;
both-five still spends one physical use. Qualifying expansion-faction funding
and split-recipient Homeworld income remain guarded; gifts stay excluded.
Four parent actual fully-funded programs and two actual390px GameTable flows
preserve original forces/acquisitions and one bonus/continuation. Basic Guild
redirect finishes Movement at Fremen with G11/H2/F3/B10; Advanced Emperor
decline returns original next lot1 with E18/H6/F1/B12 and no use.
Artifact: `/tmp/dune-native-bureaucrat-3225.json`.
The isolated virtual-refresh resolver needed repair and the actual built
stylesheet supplied styling; one accepted allowance preceded a stale-node
tool failure and was not replayed. Network-idle timed out; direct fresh control
and state observations prove both paths. Types/lint and66/66 across five
affected unit files pass (44 new native consumer cases plus one quote case);
build passes with unchanged deprecation/chunk/route-classification warnings.
Initial feedback removed superseded guards, copy-only renderer pins and an
incorrect unchanged-wallet expectation across legitimate Advanced Collection;
fixture narrowing was repaired, not game rules or bots.
No deployed, save/recovery, whole-game or full-mode acceptance follows.

**Semuta / native battle-reward cancellation — 13 October.**
Original Advanced Harkonnen capture, CHOAM Auditor and quoted force-income
printed Karama costs now offer before denial. Six positive before programs
had no offer;13 parent programs preserve paid deployments/support, accepted
casualties, unsampled captives, killed Auditor and income-before-audit order.
Three actual390px declaration/cancel/4-of-4 recovery flows finish original
Collection: H9→11/E8, canceled income C8/E0→4, canceled audit C9/E2→6.
The two E survivors collect4 once; no support refund, extra income, captive
transfer, audit payment/inspection or casualty replay. Artifact:
`/tmp/dune-homeworld-native-reward-3224.json`.
Basic retains no native capture. No profile/signature/price/public gate changes
or save/deployed/full-mode acceptance follows.
Types/lint and117/117 across eight affected unit files pass (31 new cases).
The initial fixture type narrowing and zero-bounty-null representation pins
were corrected/removed; no rule or bot change. Build passes with unchanged
deprecation, large-chunk and static route-classification warnings.

**Semuta / original shared-benefit cancellations — 13 October.**
Native Advanced BG extra-charity and genuinely allied Emperor gift/extra-revival
printed Karama costs now offer their cards. Six positive before programs had
no offer; a wealthy Basic BG claim rejected immutably. Twenty-one parent
programs retain BG5/C12 and spent claim1, or real A3 storm casualties, turn2
E/A alliance and unawarded benefit. Ordinary revival remains3 (free2/paid1),
not a granted extra allowance. Three actual390px declarations/cancellations/
4-of-4 exchanges keep those outcomes; Advanced A3 ordinary revival then
returns toreserves10/Tanks0 atcost2. Artifact:
`/tmp/dune-homeworld-native-shared-3223.json`.
No profile/signature/price or public-gate change; no save/deployed/full-mode
certification follows.
Types/lint and175/175 across seven focused unit files pass (28 new cases).
The initial Basic test incorrectly pinned Advanced Harg Pass/population;
those setup-only assumptions were deleted, not replaced. Build passes with
unchanged deprecation/chunk/route-classification warnings.

**Semuta / native economic Karama producers — 13 October.**
Printed Karama canceling CHOAM opening income/Inflation, direct normal-lot
purchase and free winning-bid payment now offer their costs. Eight genuine
before programs had no offer;18 parent claim/pass/side programs preserve
withheld8, spent placement, ordinary next-turn C18 or one free original lot.
Four actual390px flows exchange at4/4: C stays2 after income denial,
Inflation attempt1 has no token, and purchase/payment acquires exactly one
reserved lot without charging A10 (real payment bid11). Normal pool3 and
cache continuation remain original. Artifact:
`/tmp/dune-homeworld-native-economic-3222.json`.
One actual Medium Gamont follow-on settles normally after the retired denial;
A10→9/reserves11, original A12 Collection and next-turn C18 remain valid.
No BG substitution, Kull, Richese-lot, signature/profile or public gate change.
Local staged proof is not save/deployed/natural-full-game acceptance.
Frozen types/lint and176/176 across seven related files pass (68 new cases).
The application build passes with unchanged deprecation, large-chunk and
static route-classification warnings. Five initial fixture assumptions were
repaired without a production rule or bot change.

**Semuta / clean Homeworld preparation and chooser costs — 13 October.**
Clean Residual Poison, early Sapho aggressor and remaining Battle chooser
disposal now offer their used cards without new timing or signatures. Eight
genuine before programs had no offer;24 parent after programs preserve one
random death/no bounty or the original tie/finite chooser state and finish
native Collection. The ready-Poison guard and already-ready Sapho opponent
retain their distinct original behavior. C is already eligible-last after
the real R/A prefix, so the legal last fixture uses Emperor, not a forced option.
Five actual390px flows exchange at4/4 and continue original shared readiness
or choose the opposing physical attacker from C's control. Artifacts:
`/tmp/dune-homeworld-native-preparation-3221.json`,
`/tmp/dune-homeworld-native-chooser-3221.json`.
UI preparation proof stops before plans; the24 runtime programs reach phase7.
Late timing, inspected/readied Poison interruption and Advanced Harkonnen
disclosure remain guarded. No save/deployed/full-mode certification.
Types/lint and92/92 across seven focused unit files (62 new cases) pass.
The build passes with existing deprecation/chunk/classification warnings.
One unused type import failed initial lint; only lint/tests were retried.

**Semuta / original Homeworld battle costs — 13 October.**
Accepted losing-card, later mandatory winning-card and optional winner-selected
disposal now offer separate fresh events. Six genuine before programs had no
offer; fourteen parent claim/pass/exact-choice programs preserve paid native
deployments, accepted combat and original casualty/cleanup order. Four further
positive-deposit programs preserve six killed-leader income and collect six
from the original eight-spice blow once: CHOAM8→14 Basic,7→13 Advanced.
Three actual390px controls recover a losing Maula Pistol, mandatory Cheap Hero
and selected winner Crysknife at Richese4/4; original winner cards and native
Collection remain usable. Artifact: `/tmp/dune-homeworld-native-battle-3220.json`.
No other timing/module/signature/price or public gate changes; local staged
proof is not deployed/save/natural-full-game acceptance.
Types/lint,118/118 across five focused files (48 new cases) and the application
build pass. Initial fixture union-narrowing and comparator lint errors were
repaired; deprecation, large chunks and static route-classification warnings
remain recorded, not suppressed.

**Semuta / native Homeworld flight and finite order — 13 October.**
Final Ornithopter and clean Sapho Once Around/Movement order costs now
offer their used card. Six flight/eight order before programs had no offer;
28 parent after claim/pass programs preserve completed groups, paid prefixes,
finite opportunities and original turn ownership. Seventy new cases cover
both modes, empty-cohort early end, queue/funding and all four legal profiles.
Three actual390px flight paths exchange at4/4 without another move; four
actual390px Sapho paths exchange at4/4, keep Emperor10→9/Richese5→6 native
invoice or finish original unstarted turns without global order rewriting.
Artifacts: `/tmp/dune-homeworld-native-flight-3218.json`,
`/tmp/dune-homeworld-native-sapho-3219.json`. Hajr/prior movement, active
Homeworld transfers, advisors and unresolved cyclic/partial/Guild/late Sapho
timing remain guarded. Local staged-card proof is not release/save/deployed
or complete-faction acceptance.
Types/lint and126/126 across six focused card test files pass. Seventy new
cases keep original flight/finite-order constraints rather than opening
unresolved timing. No broader assurance suite was substituted.
The application build passes with deprecation, large-chunk and static
route-classification warnings recorded; no warning or mode gate is suppressed.

**Semuta / native Homeworld market disposal — 13 October.**
Completed legal CHOAM market sales now offer their used card after the
original physical discard and two/three-spice credit. High Tupile's
Worthless-sale prohibition remains, including duplicate Worthless cards.
Actual shipment10 to Habbanya Sietch17 lowers native Tupile20→10 and pays
ten spice before cashout C0→2; ordinary Shield surplus C2→5 remains legal
at high Tupile, retaining its same-name witness. Four before programs had
no offer; eight after claim/pass programs retain credit, paid forces and
the original closing owner. Fourteen new cases cover both modes, full-hand
exchange, high prohibition and all four minimal legal profiles.
Two actual390px sale/allow/commit flows exchange at4/4 and finish the same
market. Artifact: `/tmp/dune-homeworld-native-sale-3217.json`. Native price
and bank-income classification are unchanged; no full/deployed certification.
Types/lint,236/236 across13 affected unit files and the application build
pass. Build warnings retain deprecation, large chunks and static route
classification; no suppression or public-release gate change.

**Semuta / original Homeworld storm and native counter costs — 13 October.**
The same profile now offers Jubba before protection and printed Karama
canceling a native CHOAM Worthless power before denial. Kull/Nexus and other
producer gates remain unchanged. Ten corrected before programs had no cost
offer;24 parent claim/pass programs now complete the original suffixes.
Jubba protects the actual paid counter through recorded Weather storm1→7;
canceling it retains the fuel and loses exactly that threatened counter after
the original protection decision declines. Native counter claims recover
only Karama: Baliset's original move commits once, Kulon has no bonus,
La La La keeps free allowance and Gamont returns no force before its close.

Six actual390px flows exercise four power cancellations and protected/canceled
storm, with movement/storm exchanges at4/4. Evidence:
`/tmp/dune-homeworld-native-counter-3215.json` and
`/tmp/dune-homeworld-native-storm-3216.json`. The original Weather was played
by Atreides; the earlier C-caster probe was superseded after correcting the
fixture's target alias, not counted as the specified before proof. The frozen
ten-file unit union passes192/192 with types/lint clean. This is local fixture
proof, not deployed, saved-room or full-mode acceptance.
The application build passes with the recorded deprecation, large-chunk and
static route-classification warnings unchanged; no warning or gate is suppressed.

**Semuta / native Homeworld Worthless powers — 13 October.**
The existing Homeworld envelope now offers the printed Kulon, reactive
Baliset, La La La and Trip to Gamont discard costs before their original
effects. Native setup, real Homeworld reserve shipment and original phase
controls remain; no wallet, clock, alliance or force/custody ledger is assigned.
Eight actual before programs had no offer. Sixteen parent claim/pass programs
now finish original movement, Revival or closing Mentat once. Kulon adds one
range without another move; Baliset stops an uncommitted Atreides move;
La La La removes only free allowance; Gamont returns one original board
counter to Caladan, not Tanks revival.

Four actual390px controls declare/allow the powers, recover their costs and
resume original ownership. Kulon/Baliset exchange at4/4; the paid CHOAM counter
moves at range two and Atreides takes one alternate move after Baliset.
Gamont board10→9/reserves10→11/Tanks0 precedes the original CHOAM close to
turn2. La La La retains forces and reaches original phase5 Atreides foresight.
Evidence: `/tmp/dune-homeworld-native-powers-3214.json`. This is local staged-
card proof, not deployed, saved-room or full-mode acceptance. Jubba, Kull
counter costs, Nexus and unrelated Homeworld producers remain excluded.
The batch passes types/lint and122/122 across eight affected unit files.
Forty-two new behavioral cases cover both modes, original decline/cancel,
full-hand private exchange and all four minimal legal bot profiles.
The application build passes with Vinext's large-chunk and static route-
classification warnings; no warning was suppressed and no release gate opens.


**Bureaucrat individual-payer threshold and evidence correction — 13 October.**
Separate allied shares below five are no longer summed to create Bureaucrat
eligibility. Basic/Advanced native setup and an actual worm alliance reproduce
the rejected three-plus-three shipment; four post-cutover shipment/auction
programs retain the original six-spice payment and full recipient income.
Eight cases cover three/four personal plus three allied and the still-guarded
five-plus-three contribution. The actual390px Basic controls pledge three,
ship six counters for three personal plus three allied and finish Movement.
This does not open individually qualifying private/split-payment reactions.

The Homeworld Box, Distrans and Truthtrance controls now have six actual390px
claim/pass flows, including real paid search/transfer/question controls and
original Movement completion. The evidence bundle is
`/tmp/dune-homeworld-controls-proof-3212.json`; it is local, not deployed or
saved-room acceptance. Earlier summaries wrongly claimed these UI runs and
pre-cutover Box proof; the feature log now distinguishes observed evidence.
The unrelated shared parent-signature augmentation is removed. It had changed
other Homeworld receipt bytes; no historical-save certification follows.
The frozen batch passed types, lint and135/135 across13 unit files. Eight
native bot programs (both modes × four profiles) complete shipment without
rejected candidates; Hard/Brutal actually use below-threshold allied shares.


**Semuta / Homeworld Truthtrance reaction — 11 October.**
`truthtranceDiscard` is now admitted in the same envelope, so a definite
Truthtrance answer offers the consumed card. A genuine original Homeworld
state declares Truthtrance, passes storm priority and answers a real fact;
the consumed card is then offered. Claim recovers the exact Truthtrance,
pass leaves it discarded, and the published answer history, wallets,
occupation authority and original Movement are unchanged. The claim/pass
pair and all four legal bots pass alongside the existing Homeworld cases.

**Semuta / Homeworld Distrans reaction — 11 October.**
`distransDiscard` is now admitted in the same envelope, so a completed
private Distrans transfer offers its used card. A genuine original Homeworld
state plays Distrans, delivers the private card to a real seat, then offers
the used Distrans; the transferred card is never a candidate. Claim recovers
the exact Distrans, pass leaves it discarded, and the gift, wallets,
occupation authority and original Movement are unchanged. The claim/pass
pair and all four legal bots pass alongside the existing Homeworld cases.

**Semuta / Homeworld paid Box reaction — 11 October.**
`semutaOfferSupported` admits `nullentropyDiscard` in this envelope.
A real post-cutover singleton search pays two spice, recovers the selected
card and places the used Box on top before offering Semuta. Claim recovers
the exact Box; pass leaves it discarded. No pre-cutover Box program was run;
the previous absence claim was inferred from the gate. The unrelated shared
parent-signature augmentation is removed by the subsequent correction:
it changed other Homeworld receipts and was unnecessary for admission.
The final Box checkpoint passed 107/107 across ten files with types/lint;
other producers remain guarded.

**Semuta / Homeworld ordinary-card reaction — 11 October.**
The Homeworld Semuta envelope admitted only three producers, so a used
ordinary special card played there produced no reaction even though the
printed card has no module restriction. `semutaOfferSupported` now also
admits `ordinaryCardDiscard` in that roster; its existing effect signature
includes Homeworlds/revival state, not the separate history/percentage fields.
No new payment rule was added. A genuine original Homeworld
occupation state at an active Movement owner plays Hajr, commits its
movement grant, then offers the used card. Claim recovers it, pass leaves it
discarded; wallets, custody, occupation history, percentage ledger and the
Hajr grant are unchanged and original Movement still finishes. The before
program printed no offer, then failed an incidental null/undefined assertion.
Four post-cutover programs, seven new cases and the six-file union77/77
passed with types/lint clean. The actual390px claim and finish were exercised.

**Tleilaxu Ambassador first-death Kwisatz Haderach — 11 October.**
The source-supported separate KH identity (base p17) now appears in the
private native or Bene Gesserit-copied Tleilaxu grant. It is not appended to
the five ordinary native leaders; battle losses, wallets, force pools and
ordinary leader usage are unchanged, while its original activation and
first-kill cycle1 record are required. Every existing KH return advances the
same cycle marker; a prior return stays guarded by the pending repeat-death
interpretation. Two native before programs with real seven-loss combat, a
KH Lasgun/Shield death and an actual placed-token arrival offered no KH and
rejected it. Four native/copied human/Easy programs now return that same
token and resume the original entrant. Six consumer cases and all four legal
bot profiles pass; the frozen six-file union passes44/44 with types/lint
clean. Styled390px humans use the native button, inspect awakened10-loss
private status and explicitly select the legal copied effect. No
repeat-return, shared-leader or revival-income ruling changes.

**Semuta / Homeworld income costs and retained printed shares — 11 October.**
The existing `karamaIncomeDiscard` now also covers the same source-qualified
Guild, Emperor auction and Richese special-purchase income in the original
Homeworld Semuta envelope. Only its HW income signature adds original
custody, occupation history and percentage ledger; plain cost shapes stay
unchanged. Seven before programs had no cost offer; fourteen actual
post-cutover claim/pass programs retain full payment and canceled native
credit0. Low native ceilings3 from5 or2 from3 remain original; occupied
floors2 or1 still go through their original controller/ally allocation once.
Styled390px humans claim at4/4, settle Junction2 to Richese, settle Kaitain2
and1 to real Atreides ally, and resume original Movement/auction/cache
controls. The just-purchased Karama can be the actual canceled-auction cost;
the separately bought Residual Poison and Richese's paid activation remain.
No broader module admission, payment policy or public gate changes.
Twenty-six new consumer cases and the frozen six-file union65/65 pass with
types/lint clean. No broad-suite or deployed acceptance follows.

**Semuta / native Homeworld discard composition — 11 October.**
The separate fresh `--profile semuta --homeworlds` route reuses original
Richese/CHOAM/classic occupation setup, exact CHOAM, Basic/Advanced2–6 and
no other optional modules. Only paid high-Kaitain closing disposal and
proved Tupile lost-slot cleanup offer Semuta in this envelope.
Four native Kaitain before cases and real two-holder Tupile cleanup had no
Semuta opportunity; the original ready Homeworld lobby was rejected.
Eleven post-cutover native programs and two real memory-only prototype
dispatches pass. Kaitain keeps the2/card debit and original two closing
owners; private groups require commitment before selection. Tupile keeps
actual departure, lost limits and separate old-holder costs before original
Movement. Twenty new consumer cases pass; the frozen five-file union is
51/51, original Semuta private-entry case1/1, types/lint clean.
Styled390px humans pay4/select Poison Tooth at4/4, retain Emperor6 spice and
reach actual Revival only after both owners finish. Guild's Snooper claim,
Atreides's separate Gom Jabbar disposal and four neutral acknowledgements
restore both normal4 hands and usable original Guild Movement.
Basic unresolved Tupile epochs, other Homeworld producers, mixed modules,
public starts and full/deployed acceptance remain separate.

**Semuta / native income-cancellation costs — 11 October.**
Printed Karama canceling original `guildIncome`, non-Ambassador
`emperorIncome` or `richesePurchaseIncome` now offers its public discard before
the original denial finishes. The existing typed cost envelope restores the
same saved response once; paid shipment/purchase mechanics are not replayed.
Five native before scenarios had no cost offer. Ten post-cutover claim/pass
programs now pass, including Basic/Advanced Guild shipment, paid auction,
the just-purchased Karama as its own cancellation cost, and Advanced Richese
special purchase. Guild denial keeps the six-spice debit and three arrived
forces; auction keeps the one-spice payment and next-lot inspection; Richese
keeps its three-spice payment, cache acquisition, spent activation and original
declaration owner. Sixteen new consumer cases pass, including genuine full
hands and minimal legal bots. Styled390px human Cancel→Commit controls prove
all three sources; native Movement and Richese cache-choice controls remain
usable afterward. No Homeworld/Ambassador composition or public gate opens.
The frozen seven-file response-cost union passes70/70 with types/lint clean.

**Semuta / Emperor-share native continuation proof — 11 October.**
`karamaEmperorShareDiscard` covers printed Karama canceling `emperorGift`
and `emperorRevival` before the original denial. The initial fixture assigned
the clock, phase, alliance and wallets directly; its tests and 390px UI
exercise did not prove native setup or phase qualification.
The replacement now completes original setup, the first turn, a real turn-two
worm and reciprocal alliance through native actions. Only original unplayed
Spice Cards and conserved later hand/force positions are staged. Gift reaches
actual Charity; extra revival reaches actual Revival. Four runtime claim/pass
paths preserve all45 original Treachery identities,20 counters per faction,
native ten-spice Emperor wallet and the ally's three Tanks. Six consumer cases
pass; claiming acquires the same printed Karama without applying the denied
share. This does not certify all Emperor or Semuta compositions. See
[Semuta ordering](SEMUTA_SOURCE_UPDATE_20260907.md#30-september-2026--bounded-clean-discard-runtime).

**Obsolete test pins and original Moritani cleanup — 11 October.**
The previous checkpoint's four repaired unit files passed33/33, but the full
unit run remained7066/7067. Its remaining failure expected `battleCards`
instead of `moritaniSpecialKarama`; passing isolated reruns did not establish
a pre-existing cause.
The original winner cleanup legitimately offers Moritani's unused special
Karama when it holds an eligible physical Karama. Deterministic native
scenarios now control that unused card before sealed plans: without it,
assassination resumes winner cleanup directly; with it, the owned native
decline precedes the same cleanup. Both runtime paths finish in Collection
with one Master Bewt death and exactly three assassination spice; no engine
rule was changed. Permanent cases retain the original rescue, cleanup and
income assertions for both branches. The pure panel-wording case, exact
incidental worm-quote shape and rejection-message pins have been removed,
not reworded. Comprehensive review and broad-suite acceptance remain deferred.
The frozen five-file repair union passes39/39 with types/lint clean; the six
native runtime scenarios above are local evidence, not a green full suite.

**Stale battle-frame recovery expectation repaired — 11 October.** The
`authenticated clean Semuta producers claim once through restart and room CAS`
case asserted the winner's cheap-hero frame as the first post-battle
continuation. Actual native order is the mandatory battle batch
(`battleResolved`/`battle:mandatory`, loser's used defense) followed by the
winner's compulsory discard (`winnerMandatoryDiscard`/`battle:winnerMandatory`,
the hero). The case now walks that real order, keeps its restart/room-CAS and
single-claim assertions on the winner frame, and asserts the loser frame
separately. Verified pre-existing: the same assertion failed at `5b3729e` in a
clean worktree, so it was not a regression from this session's slices.
`tests/semuta-recovery.test.ts` passes15/15; the affected offline rule union
passes650/650 across60 files; types/lint pass.

**Semuta / printed native CHOAM cancellation cost — 11 October.**
`karamaChoamWorthlessDiscard` reuses the original response-cost path and
Worthless cancellation quote for five ordinary printed/Cunning powers.
Public printed Karama now pauses before native denial; CHOAM fuel stays held
and Cunning's Nexus stays spent. Claim/pass restores the saved response,
cancels once and resumes the same native movement/revival/storm/Mentat suffix.
Actual before-cutover Kulon canceled without a cost offer; after-cutover its
pending native receipt survives all views and a real claim leaves range denied.
Types/lint and179 affected unit cases across10 files pass. Thirty native
reaction cases plus one actual Basic case cover five families, claim/pass,
full hands and four legal profiles. Styled390px Gamont Cancel→Commit preserves
the Emperor's elite at Arrakeen/reserves4 and CHOAM's Hajr; only original
Finish assigns Emperor Arrakeen at claim2/turn3. Jubba Cancel→Commit keeps
Maula Pistol; original Continue loses6 CHOAM/4 opposing counters and both
covered spice piles, reaching native market once. Acquired Karama inspector
and current warning were inspected. All own probes/service/tab removed.
Existing games/stores/PDF, deployment, Kull, unsupported parents and public
gates unchanged; no assurance campaign. See
[native cost contract](NEXUS_CHOAM_RUNTIME.md#printed-native-cancellation-cost--11-october-2026).

**Semuta / original CHOAM Cunning fuel — 11 October.** The five ordinary
Cunning effects now reuse original Worthless continuations with a completed
native event binding owner/card/effect/targets and parent flags. Canonical
arbitrary fuel stays private, never a manufactured named Worthless. Native
cancellation retains fuel and the spent Nexus; allowance offers the exact
fresh discard before one original effect/suffix. Old printed receipt signatures
are unchanged when the optional event is absent.
Actual Kulon before cutover discarded fuel/applied its bonus without an offer;
afterward Commit restores one bonus and permits one real distance-two move.
Types/lint pass; affected union120 cases across9 files. Two proactive and24
reactive runtime scenarios cover Basic/Advanced claim/pass, four legal profiles
and original skill/module closing. Actual Advanced storm uses its original
revealed card, not the Basic fixture's dialers. Incorrect test-only absence,
response, alias-binding and protected-spice assumptions were repaired; no rule
was changed to satisfy them, and paired-view audit scaffolds were removed.
Five styled390px human power→native Allow→full-hand Commit paths pass.
Gamont returns an elite before restoring original Finish/claim2/turn3; La La La
keeps3Tanks/0revived/10spice until a legal paid-two revival reaches1/2/6.
Advanced Jubba keeps3 protected forces, loses3 other CHOAM and4 opposing forces,
destroys both covered spice piles and reaches original market. Original
projectile inspector and updated preview guidance were inspected.
All own probes/service/tab removed; existing games/stores/PDF, deployment,
Kull and full-mode/public gates remain unchanged. See
[five-effect contract](NEXUS_CHOAM_RUNTIME.md#original-five-effect-semuta-composition--11-october-2026).

**Semuta / original native Nexus — 11 October.** Fresh `semuta --nexus-cards`
delegates original single/paired CHOAM or both selected E1/E2 setup, optionally
explicit Skills and original Tech/Advanced Strongholds. There is no starting
Nexus hand: actual turn-two worm, reciprocal alliance and unallied closing draws
precede the changed producers. CHOAM-absent Secret Ally trade pays two bank spice
and spends both cards before its public Worthless offer; seated-CHOAM Betrayal
commits one server-random physical hand card before its private offer.
Semuta claim/pass retires the same original receipt without payment/sampling
again. Existing singleton-at-Commit behavior remains; an incorrect test-only
manual selection assumption was removed, not added to runtime.
Types/lint and119 affected unit cases across10 files pass. Eight original entry
scenarios, two memory-only prototype option dispatches and sixteen actual
reaction scenarios cover claim/pass, full hands and four legal profiles.
Styled390px human trade→Commit→all Collection readiness reaches Mentat with
Atreides12 spice and Richese's acquired Trip to Gamont at4/4. Native
Betrayal→Commit acquires the exact Snooper, leaves CHOAM Maula Pistol/Kulon and
enables original Charity readiness; both enlarged card inspectors work.
Post-action frames measure390px width; initial four-seat snapshots measured
554px scroll width, so this is not full presentation acceptance.
Live preview guidance now names original Nexus. All probes/tabs/services removed;
existing games/stores, user PDF, deployment and public gates remain untouched.
See [Nexus composition](NEXUS_CARD_RULES.md#semuta-with-original-native-nexus--11-october-2026)
and [Semuta ordering](SEMUTA_SOURCE_UPDATE_20260907.md#30-september-2026--bounded-clean-discard-runtime).

**Semuta / trained Ixian response ownership — 11 October.** Newly admitted
native Ixian skills exposed a real projection failure: during a printed
substitution-cancellation cost, the validator ignored the response saved in
`karamaBattleDiscard` and reported a lost original choice. It now recognizes
that exact saved Ixian response while preserving quote/signature/force checks.
Both claim/pass regressions fail before and pass after. Types/lint and70
affected unit cases across9 files pass; six runtime cases cover claim/pass/four
legal profiles and all three views. Styled390px Cancel→Commit→later Tooth
acknowledgements→original Shield choice reaches phase7; actual counters remain
board2Suboids/Tanks1Cyborg/reserves17, cost held by Richese, with no overflow.
No skill/native effect, module gate, existing game/store or deployment changed.

**Semuta / explicit original Leader Skills — 11 October.** The initializer's
optional second argument and `--profile semuta --leader-skills` now delegate
original all14 native Basic Richese/CHOAM or Advanced E1/E2 training, retaining
original Tech/Advanced Stronghold prerequisites. Default callers are unchanged.
Three original profile gates recognize explicit native-Richese context; ordinary
and native-Tech skill eligibility survives Semuta. Original Suk/Rihani handlers
already preserve the correct order and need no separate effect rewrite.
No E3, Homeworld/Nexus/Discovery/Banker, new Mentat ruling or public gate opens.
Types/lint and184 affected unit cases across18 files pass. Four genuine starts,
36 private-question and48 aftermath runtime cases cover claim/pass, four legal
profiles and original modules. Actual memory-only prototype dispatch persists
original offers/version1; CLI parses the new flag. Styled390px controls complete
Hajr→Commit→Crysknife naming/showing/face-up Mentat; Suk inspector shows14reserves,
1normalTank,5board including2Sardaukar; Rihani keeps Flinto/reveals Lady Jessica
before Artillery and Shield cleanup. Human training in all three native seats
reaches original Traitors, with Auditor excluded from CHOAM's eligible five.
Observed stale skill guidance was corrected and reinspected. Existing games,
storage, user PDF/deployment untouched; full skill/mode acceptance remains open.
See [explicit original skill contract](LEADER_SKILLS_RUNTIME.md#explicit-semuta-composition--11-october-2026).

**Semuta / original Advanced Strongholds — 11 October.** Fresh Richese
CHOAM/optional-Ix games now retain original unused Stronghold Cards at2–6
Advanced seats, optionally original Tech at3–6. The existing native initializer
and extracted roster predicate are reused; no redeal, Skills/other overlay,
Basic Moritani composition, played-save retrofit or public gate opens.
Both closing regressions fail before entry and pass after. Types/lint and
161 affected unit cases across13 files pass; entry help executes. Nine genuine
setup/first-Storm runtime cases and twelve closing cases cover both
configurations, claim/pass and four legal profiles. Gamont removes sole
Carthag control before Semuta restores CHOAM's original final owner window.
Only its actual Finish assigns the six public cards: Arrakeen to Atreides,
Carthag unclaimed, claim2, next turn3Storm; Tech/card custody stays intact.
Both styled390px paths show those original controls and public ownership with
no overflow. Existing games/storage/user PDF/deployment remain untouched.
See [original Stronghold composition](STRONGHOLD_CARDS.md#semuta-composition--11-october-2026).

**Semuta / printed native battle-cancellation costs — 11 October.** One
`karamaBattleDiscard` receipt now pauses the physical printed Karama before
native capture, Auditor, quoted battle-income, Ixian-substitution or Basic
Moritani-retention cancellation. Claim/pass restores the original response
and cancels once; acquiring its cost cannot restore the canceled effect.
Original quotes and signed physical facts remain authoritative. Auditor
validation recognizes its saved response; no module, Worthless conversion,
source ruling or public gate is opened.
Targeted gaps fail before and pass after. Types/lint and 203 affected unit
cases across 18 files pass. Forty-eight isolated runtime cases cover all five
families, both Ix modes, enemy/ally cancelers, distinct/full-hand holders,
claim/pass/four legal AI profiles and native cleanup/markets. Actual styled
GameTable at390px completes all five Cancel→Commit paths. CHOAM11/10 wallets,
canceled Ix board2Suboids/Tanks1Cyborg and Guild4/4→2/4 with only Worthless and
Karama demonstrate original consequences; no inspection or keeper choice
reopens. The first temporary harness omitted Tailwind PostCSS; it was corrected
from the app config and all five styled paths plus the enlarged inspector
were repeated. Earlier unstyled captures do not certify styled presentation.
No existing game/store, deployment or mode gate changed. See
[cost and ordering contract](SEMUTA_SOURCE_UPDATE_20260907.md#30-september-2026--bounded-clean-discard-runtime).

**Semuta / native casualty and retention continuations — 11 October.**
Mandatory loser discards now react while the original compulsory winner card
remains reserved. Native Ixian casualties/substitution still finish before
the used winning Tooth becomes its own fresh target. Basic native Moritani
additionally admits preceding compulsory/optional winner batches and completed
unkept allied-card disposal, preserving its original choice, Karama response,
kept card and played-card pool. Existing canonical aftermath validation and
reciprocal alliance checks bind the pending native opportunity; pending Ixian
substitution, `battleResolved` with retention, Advanced Moritani and Nexus
retention remain guarded. No module/profile or mode gate changed.
Targeted cases fail before and pass after; 162 affected unit cases across
thirteen files pass. Eighty-six isolated runtime cases prove both native modes,
actual ordering, claim/pass/four legal profiles, typed substitution/decline and
original cancellation. Real390px tables claim Snooper, confirm1/1 and inspect
the final Ixian counters; native Basic retention declines, commits and selects
Maula Pistol from two fresh cards. Both reach original phase7 with no overflow
or repeated effect. Types/lint passed; one fixture narrowing and the obsolete
Hero timing assumption were repaired rather than changing native behavior.
See [native retention contract](MORITANI_ALLY_RETENTION_RULES.md#semuta-composition--11-october-2026)
and [Semuta ordering evidence](SEMUTA_SOURCE_UPDATE_20260907.md#30-september-2026--bounded-clean-discard-runtime).

**Semuta / original native Tech — 11 October.** Fresh three-through-six-seat
Basic/Advanced Richese games with CHOAM and optional Ix now retain original
unused Tech under existing native roster prerequisites. Printed and first-Storm
owners remain native. Mandatory/winner card reactions preserve token custody
until original cleanup, then the original winner takes one loser-owned token
before Face Dance. Other native Tech callers remain strict; Skills, Strongholds,
other overlays and the separate CHOAM/Ecaz Moritani entry remain excluded.
Four regressions pass after the original profile failure. Types/lint and
123 affected unit cases across eight files pass. Eight genuine fresh-start
runtime scenarios cover both modes and three through six seats; twenty-four
battle cases cover both producers, claim/pass and four legal AI profiles,
including sixteen original Tech AI choices. Real GameTable at390px claims
Hunter Seeker, takes only Heighliners for Atreides, restores native Face Dance
and reaches phase7 original Ix opening with the card/owners intact and no
horizontal overflow. No existing game/store, deployment or mode gate changed.
See [entry and reward contract](SEMUTA_SOURCE_UPDATE_20260907.md#30-september-2026--bounded-clean-discard-runtime).

**Semuta / native Auditor — 11 October.** Mandatory/winner discard reactions
now preserve the original audit before cleanup/income finish and its owner
offer. Frozen survival and opposing-player used IDs are unchanged; the current
hand supplies eligibility and payment. Authorized supplied p29 excludes cards
the audited opponent used, not every combatant's cards; the quote already
implements that distinction. Both regressions fail before and pass after.
Types/lint and 152 affected unit cases across twelve files pass.
Twenty-four runtime cases cover target/third-party holders, claim/pass, four
legal Semuta AI profiles and pay/inspect. Real GameTable at 390px claims Snooper,
retains Crysknife, shows Pay1/Allow and privately inspects only Snooper for
CHOAM; hands remain intact and target/observer insight is null. The original
market reaches phase7's Ix opening with the snapshot intact and no overflow.
Temporary QA scaffolds are removed; no saved store or deployed game was targeted.
See [source and live-hand semantics](CHOAM_AUDITOR.md#semuta-and-current-hand-eligibility--11-october-2026).

**Semuta / quoted CHOAM battle income — 11 October.** Mandatory and winner
discard offers now preserve the original Advanced force-payment quote unpaid
through cleanup, then restore its native allow/Karama response. Allow credits
once; cancellation redirects income without refunding paid support.
The regression fails before and passes after; types/lint and 119 affected unit
cases across eight files pass. Twenty-four runtime scenarios
cover both producers, claim/pass, four legal Semuta AI profiles and allow/cancel,
then finish the original market without another credit.
Real GameTable at 390px claims Crysknife, restores the actual one-spice response,
credits CHOAM2→3 and finishes the market to phase7's Ix opening with spice still3.
Two eligible paid support spice yield one income under the unchanged native
quote. No overflow; other reward exclusions remain.
Temporary QA scaffolds are removed; no saved store or deployed game was targeted.
See [the source/runtime boundary](SEMUTA_SOURCE_UPDATE_20260907.md).

**Semuta / native Face Dance — 11 October.** Mandatory and winner battle
discards now offer Semuta while native Tleilaxu replacement remains pending.
Original casualties and card cleanup still precede the same private opportunity;
one native replacement preserves the claimed Treachery card. Other reward
exclusions are unchanged. The regression fails before and passes after.
Types/lint and 117 affected unit cases across eight files pass.
Twenty-four runtime scenarios cover both producers/modes, claim/pass and four
Semuta AI profiles; eight more prove all four native Face Dance AI continuations
in both modes. Real GameTable at 390px claims Hunter Seeker, restores the original
reserves/sector controls and replaces three in Arrakeen10. Old winner
reserves18/Tanks2, Tleilaxu board3/reserves12/Tanks5, claimed card still held.
Phase7's native Ix opening remains; no premature Collection claim or overflow.
Temporary QA scaffolds are removed; no saved store or deployed game was targeted.
See [the source/runtime boundary](SEMUTA_SOURCE_UPDATE_20260907.md).

**Semuta / CHOAM final Mentat — 11 October.** Gamont disposal in the native
final opportunity now offers Semuta, then restores the same CHOAM-owned window.
Claim/pass returns the selected force but never checks victory or advances
the turn; the original owner must still finish. The regression fails before
and passes after, with a native baseline that would give Atreides victory
without the recall. Twelve runtime scenarios cover both modes, claim/pass and
four legal AI profiles, including owner-window completion.
Types/lint and 82 affected unit cases across six files pass.
Real GameTable at 390px performs Return this force → Commit Semuta → restored
Finish and check victory → turn3/Storm, still playing, without overflow.
Temporary QA scaffolds are removed; no saved store or deployed game was targeted.
Nexus and other parents remain separate. See
[the source/runtime boundary](SEMUTA_SOURCE_UPDATE_20260907.md).

**Semuta / typed and concealed Gamont — 11 October.** A clean proactive
discard now preserves the selected elite counter or native No-Field event,
instead of hard-coding an ordinary return. The original native helper performs
one exact return or reveal/capped recall; zero invents no force and revival
usage is unchanged. All three regressions fail before and pass after.
Types/lint and 163 affected unit cases across nine files pass.
Thirty runtime scenarios cover Advanced elite and Basic/Advanced zero/three
markers with claim/pass and all four legal AI profiles. Real GameTable at 390px
claims all three cases: capped three leaves board1/reserves1/Tanks18, zero leaves
board0/reserves2, and elite returns to elite reserves5. The actual force inspector
shows twenty counters; no overflow. Other parents remain separate.
Temporary QA scaffolds are removed; no saved store or deployed game was targeted.
See [the source/runtime boundary](SEMUTA_SOURCE_UPDATE_20260907.md).

**Semuta / reactive Baliset and La La La — 11 October.** Accepted native
declarations now offer their used card after stopping the original uncommitted
move or free-force request. Claim/pass installs the same restriction once;
denied requests consume no forces, movement, revival usage or spice. Another
legal move or paid revival remains available. Both regressions fail before
and pass after; types/lint and 130 affected unit cases across seven files pass.
Twenty-four runtime scenarios cover both effects, both rule
modes, claim/pass and four legal AI profiles; four Karama cancellations retain
the card and finish the original request without a Worthless discard.
Real GameTable at 390px claims Baliset, keeps the Carthag restriction and
moves once to Arrakeen; its revival case claims La La La, shows the four-spice
quote and returns two paid counters to reserves19/Tanks1/spice6. No overflow.
Other parents remain separate. Temporary QA scaffolds are removed; no saved
store or deployed game was targeted. See
[the source/runtime boundary](SEMUTA_SOURCE_UPDATE_20260907.md).

**Semuta / clean battle Distrans — 11 October.** The completed clean transfer
now offers only its public used Distrans during battle. The private gift and
sealed opposing plan remain committed; the recipient may itself claim with
Semuta without losing or repeating the gift. The original regression fails
before and passes after; the final cases cover both separate and claimant
recipients. Types/lint and 69 affected unit cases across seven files pass.
Twenty-four runtime scenarios cover both rule modes, recipient
roles, claim/pass and all four legal AI profiles, followed by legal planning.
Competing parents remain separate. Temporary scripts are removed; no saved
store or deployed game was targeted. Existing human panels are reused; no new
browser evidence is claimed. See
[the source/runtime boundary](SEMUTA_SOURCE_UPDATE_20260907.md).

**Semuta / native Basic Terror — 11 October.** The local `semuta` entry now
admits fresh Basic native Richese/Moritani plus classics with CHOAM/Ecaz decks
and no optional modules. Private Sabotage and Robbery overflow after clean
ordinary shipment/movement arrivals offer the fresh card before the original
gift/arrival suffix; no victim, draw, payment or forces repeat. The persistent
table warning visibly qualifies the profile and Basic Moritani boundary.
Two native regressions fail before and pass after; types/lint and 80 affected
unit cases across eight files pass. CLI help prints the entry without store
access. Thirty-six runtime scenarios
cover both producers/arrival types, claim/pass, four legal AI profiles and
Sabotage gift accept/decline; four excluded-entry probes reject without mutation.
Real GameTable at 390px hides candidates, claims Stunner, gives Shield and ends
the original Atreides turn to Richese with Carthag2/reserves18 and no overflow.
Advanced Moritani, native Ecaz, Ix/E3 mixtures and other arrival parents remain
separate. Temporary QA scaffolds are removed; no saved store or deployed game was
targeted. See [source and entry scope](SEMUTA_SOURCE_UPDATE_20260907.md).

**Semuta / paid battle Box — 11 October.** A completed paid Nullentropy Box
search now offers only the used Box during battle, preserving the payment,
private acquired card, shuffled pile and opposing sealed plan. The regression
fails before and passes after; types/lint and 72 affected unit cases across seven
files pass. Twenty-four isolated runtime scenarios cover
Basic/Advanced, sole/multiple-target selection, claim/pass and all four legal AI
profiles; each uses the recovered weapon in a legal plan with one two-spice
payment. Competing parents remain separate. Temporary scripts are removed; no
saved store or deployed game was targeted. Existing human controls are reused;
no new browser evidence is claimed. See
[the source/runtime boundary](SEMUTA_SOURCE_UPDATE_20260907.md).

**Semuta / ordinary battle Ghola — 11 October.** A completed ordinary Ghola
now offers its consumed card during battle. Revival, the opposing sealed plan
and existing competing-parent boundaries are unchanged. The regression fails
before and passes after; 24 isolated runtime scenarios cover Basic/Advanced,
leader/three-force revival, claim/pass and all four legal AI profiles, then
legal planning. Resumption cannot revive again or alter the opposing plan.
Temporary scripts are removed; no saved store or deployed game was targeted.
Types/lint and 101 affected unit cases across seven files pass.
Human controls reuse the existing panels; no new browser acceptance is claimed.
See [the source/runtime boundary](SEMUTA_SOURCE_UPDATE_20260907.md).

**Semuta / native Advanced Harkonnen capture — 11 October.** Mandatory and
winner-card battle discards now offer Semuta with the original capture pending.
Claim or all-seat decline preserves winner casualties and cleanup before the
same capture offer; no early sampling or second capture. Other pending reward
exclusions are unchanged. The regression fails before and passes after;
types/lint and 97 affected cases pass. Thirty-six isolated runtime scenarios
cover both producers, claim/pass, four legal AI profiles and capture
decline/retention/execution; execution earns exactly two extra spice against the
same decline suffix. Real GameTable at 390px claims Stunner, resumes capture and
retains one captive before Collection with no overflow. Temporary QA scaffolds
are removed; no saved store or deployed game was targeted. See
[the source/runtime boundary](SEMUTA_SOURCE_UPDATE_20260907.md).

**Semuta / ordinary battle Truthtrance — 11 October.** Ordinary definite
Truthtrance answers now offer the consumed card during battle, including a bound
unsubmitted-plan promise, a question about a submitted/revealed plan and a fact
question. Submitted/revealed plans bind no new promise; they do not skip Semuta.
An isolated engine smoke covers all four paths with claim, all-seat pass and four
legal AI profiles (24 scenarios), preserving history and plans, rejecting retired
events and enforcing the unsubmitted-plan promise. Types/lint and 126 affected
cases passed at implementation. No saved store or deployed game was targeted.
See [the source/runtime boundary](SEMUTA_SOURCE_UPDATE_20260907.md).

**Semuta / Truthtrance shipment promise — 11 October.** A classic payer's ordinary
Truthtrance shipment answer in the Richese Semuta profile now offers the consumed
card; the binding promise and its enforcement are unchanged. The structured
shipment-question scope gained that profile for a non-Richese active payer, and the
availability boundary is now server-projected (`truthShipmentSupported`) so the
human Truthtrance panel and validation share it. Native Richese/No-Field shipment
questions and other module combinations remain outside this admitted question
scope. Types/lint pass and 125 affected cases pass. Eight isolated runtime
scenarios cover both answers across four legal AI profiles; a real 390px control
check confirms the shipment question is selectable for the active classic payer
and refused for a non-active Richese target, with no horizontal overflow.
No saved store or deployed game was targeted. See
[the source/runtime boundary](SEMUTA_SOURCE_UPDATE_20260907.md).

**Guidance accuracy — 11 October.** Three stale player/developer records were
corrected: the card-inspector Semuta availability text now lists every connected
producer and the approved full-hand exchange; `verification.runtime` marks all ten
Richese effects as bounded `partial` (Juice of Sapho, Mirror Weapon and Semuta Drug
were wrongly `not-implemented`); and `RICHESE_COMPONENTS.md` no longer says Juice of
Sapho play is inert. A tautological test that mirrored the old runtime list was
deleted. Types/lint pass and 41 cases pass.

**Queued Truthtrance answer — 11 October.** An ordinary definite Truthtrance
answer now offers its consumed card even when another question remains reserved.
Only the `remaining === null` software restriction changed: claim or all-seat
decline leaves public history and the consumed card's custody settled, then
restores the same remaining queue at `ask` once. At that checkpoint, promise-bound
shipment and battle answers still continued automatically; the later checkpoints
above admit those paths. Shrine-source answers remain automatic. Types/lint
pass; the affected 97-case union passes. Seven isolated
runtime scenarios cover claim/pass, four legal AI profiles and a rejected
retired-event replay. The permanent regression fails before and passes after.
No saved store or deployed game was targeted. See
[discard continuations](SEMUTA_DISCARD_CONTINUATIONS.md).

**Fremen Cunning / original components — 11 October.** Classic Nexus games
with original Tech Tokens and/or Advanced Stronghold Cards now receive the same
empty-worm native Cunning offer as Nexus alone. The isolated software guard is
removed; physical card/occurrence, provisional Karama response and one post-Nexus
remote ride remain original. Dynamic destinations, Great Maker, Skills,
Homeworlds, Discovery and expansion factions/decks stay separate.
Types/lint and 41 affected cases pass. Nine runtime scenarios cover the four
legal component configurations, four legal bots and printed Karama cancellation.
Real GameTable at 390px spends Cunning and moves two Wind Pass14 counters to
Polar Sink0; reserves8/spice3 and original component custody remain unchanged.
A labelled QA control advances the original post-Nexus suffix between real
spend and ride controls. No saved store or deployed game was targeted. See
[the native contract](NEXUS_FREMEN_RULES.md#original-tech-and-strongholds--11-october-2026).

**Semuta / native Intrusion — 11 October.** Final Ornithopter movement now
offers the retired card before the original Bene Gesserit Intrusion choice.
Forces and move counters stay committed; claim or decline cannot move twice or
skip the original arrival. Basic keeps no Advanced Intrusion; Ecaz/Moritani and
overlap guards remain. Types/lint pass and 113 affected cases pass after replacing
a mistaken advisor-storage assertion with actual fighter-count behavior.
Ten isolated runtime scenarios cover both modes, claim/pass, fighter retention,
two-group completion and four legal bots. Real GameTable at 390px proves Commit,
Become advisors and Finish shipment & movement advancing to the next seat with
unchanged force counts and no horizontal overflow. The observed stale Semuta
tooltip now names Black Market replacement, native Intrusion and the approved
full-hand exchange. No saved store or deployed game was targeted. See
[the movement continuation](ORNITHOPTER_DISCARD_CONTINUATIONS.md#11-october-2026--semuta-before-native-intrusion).

**Semuta / Black Market replacement — 11 October.** A clean native Ixian
allied replacement now offers Semuta before drawing from a Black Market
purchase, as already supported for normal auctions. The discarded card belongs
to the buyer and stays private; payment, seller income and one replacement
resume once before Richese Declaration. Cache purchases retain their printed
allied-replacement prohibition. The regression fails before/passes after;
types/lint and 63 affected cases pass. Twelve isolated runtime scenarios cover
three methods, claim/pass, four legal bots, empty-deck refill and full hand.
Real 390px controls prove neutral ally visibility, private Commit and buyer
hand 0→1 with Declaration restored. No saved store or deployed game was targeted.
See [the current source/runtime boundary](SEMUTA_SOURCE_UPDATE_20260907.md).

**Approved skill decisions — 11 October.** Normal Mentat now uses the approved
uniform private card-show step throughout the existing supported Leader Skills
envelope; the separate flag and CLI option are removed. Newly opened battles
carry the question version. Already opened unversioned battles do not reopen.
The exact-match and sole-card target steps stay private; empty-hand skip and
Moritani's separate uniform-Continue decision remain unresolved. Emperor gifts
are explicitly not Bureaucrat payments: no threshold signal or skill consumption,
and exact gift amounts remain private to sender and ally. Other payments retain
their existing behavior.

TypeScript/lint pass; the affected 20-file union passes 217 cases, and the two
changed recovery/module fixture consumers pass 11 cases. Nine isolated engine
scenarios cover Basic/Advanced matching/fallback shows, all four legal bots,
and a private 7-spice gift followed by a qualifying 5-spice bribe. Real 390px
controls show the compulsory private card step and owner-only receipt without
changing the target hand. CLI help uses normal activation and rejects the removed
option. No deployed or complete-mode acceptance is claimed. See
[Mentat](MENTAT_QUESTION.md) and [Bureaucrat](BUREAUCRAT_PAYMENTS.md).

**Owned HMS Sandmaster piles — 9 October.** Storm relocation and Advanced
Ixian special Karama now select one bonus debit pile per entered territory,
or decline that bonus while retaining native collection. Existing preparation
and the pending route retain the keys; cancellation transfers nothing.
The preview applies Sandmaster before native collection. Native smoke in
both modes and a labelled special-Karama seam show12 total when debiting
the traversed pile versus13 from another sector. All four legal policies
retain declared keys. At390px, the actual control previews12→13 and commits
Arsunt11/Arsunt12 at0/4 with personal spice10→23.
Types/lint, 15 movement/control and 92 shared special-power cases pass.
See [the HMS policy](SANDMASTER_MOVEMENT.md#owned-native-hms-pile-allocation--9-october-2026);
allocation remains provisional and public/comprehensive gates stay closed.


**Owned Sandmaster destination piles — 9 October.** Native worm rides and
physical Fremen Ambassador relocation now select an exact positive pile
when several exist. Collection remains optional and capped at one spice;
invalid/omitted ambiguous keys reject before transfer. Stored Ambassador
reconstruction retains the selected key. Basic/Advanced native smokes and
all four existing legal policies pass without destination-strategy changes.
At390px, actual worm controls debit Pasty Mesa6 while landing four forces
in Mesa5 (spice5→6); Ambassador controls reset on a destination change and
debit South Mesa5 while landing two forces in Mesa4 (spice20→21).
Types/lint and 91 affected cases pass; the later HMS checkpoint above extends these controls.
See [worm](SANDMASTER_WORM.md#connected-behavior) and
[physical Ambassador](SANDMASTER_MOVEMENT.md#physical-ambassador-owned-destination-allocation--9-october-2026).


**Owned Sandmaster ground-pile choice — 9 October.** Ordinary route
collection now offers every positive pile, but permits only one selected
sector per entered territory. The checkbox group supports switching piles
or declining the whole territory; default human/bot choices are legal.
Basic/Advanced native engine smokes preserve an unselected South Mesa
pile and collect two total spice across two territories. A 390px isolated
production control switches sector4→5, opts out/reselects, and completes
the move with personal spice10→12 and three Cielago East forces.
Multi-pile destination and HMS controls retain their existing boundaries.
The [ground policy](SANDMASTER_MOVEMENT.md#owned-ground-route-pile-selection--9-october-2026)
is provisional owner allocation, not a publisher ruling.


**Built-runtime proxy cutover — 9 October.** `npm start` now uses the
existing direct Miniflare adapter rather than Wrangler's development proxy.
Local storage defaults to `.wrangler/state`; the container explicitly keeps
`/data`. No API authorization, retry or migration policy changed. A
checksum-verified Node22.23.3 build/start and eleven real HTTP probes pass:
HTML200, invalid JSON400, foreign origin403, oversized413, create201,
authenticated read200, anonymous denial409 and four five-second-cadenced
invalid POST400 responses. Four original focused integration cases also
pass against a dedicated new QA store; types/lint and entrypoint syntax pass.

The separate historical paired CI failure remains unidentified:
[job111453717886](https://github.com/Quintine/Dune/actions/runs/37208188809/job/111453717886)
exposes only step7/exit1; annotations add no failing request, log download
returns403, and this host has neither `gh` nor Docker. The later
[job111464477749](https://github.com/Quintine/Dune/actions/runs/37211854749/job/111464477749)
is independently observed success, not proof of the earlier cause. Those
diagnosis/dependent-repair tasks remain blocked on authorized historical
logs or an exact reproducible failure. No deployment or Docker proof is
claimed for this cutover.


**Multi-pile battle skills prototype — 9 October.** A surviving Smuggler
controller can allocate its fixed reveal-time collection across existing
sectors; a surviving Sandmaster winner selects one remaining pile for +3.
Single-pile, forced all/none and void collections remain automatic.
Owner selection is explicitly provisional, not a publisher ruling.
Both mode smokes preserve frozen spice until the choices finish, then settle
Smuggler before Sandmaster and resume the original battle. All four legal
bot policies finish the same path. A 390px isolated production-control
surface collects six spice as 2/4, then adds three to sector 15, leaving
Wind Pass piles 2/4 and the Smuggler holder at 26 spice. See
[Smuggler allocation](SMUGGLER_BATTLE.md#multi-pile-allocation-policy-and-pure-api--9-october-2026)
and [Sandmaster placement](LEADER_BATTLE_EFFECTS.md#source-contract).


**Kulon/Ornithopter coexistence prototype — 9 October.** Active Kulon no
longer blocks the card's fixed-range mode in either rules mode. The labeled
provisional policy retains its three-territory maximum and extends both
normal-range groups. Real Kulon/card activation, boundary rejection and
four-profile legal-candidate smoke pass in both modes. Isolated Chromium
controls complete the three-territory move against the production engine;
no saved room or deployed application was changed. Hajr/prior moves and
advisor composition remain guarded. See the
[movement contract](RICHESE_ORNITHOPTER_ENGINE_AUDIT.md#provisional-kulon-coexistence--9-october-2026).


**Richese cache cancellation connected.** The printed Karama cancellation
now reaches the restore-one-ordinary-lot policy selected on 7 October. First/last
cache offers are skipped after cancellation; the physical cache stays intact.
Advanced Bene Gesserit conversion uses its existing separate response.
Seven direct engine smoke scenarios pass, including Basic first/last cancellation;
no broad suite was run for this change.

**Basic Ecaz odd-force Occupy prototype.** The main printed paragraph supplies
ceiling contribution/loss and floor survivors, including odd counts. Controls
explicitly label the conflicting-FAQ interpretation as provisional. One five-counter
coalition smoke reaches Collection with three Ecaz losses and two survivors.

**Tleilaxu Ambassador leader alternative.** The beneficiary can revive a
first-death own leader for free instead of returning forces. Private choices,
zero price and legal AI are connected. Independent allowance treatment is
provisional; repeat-death/shared-disc and income interactions remain for refinement.
One Basic arrival-and-bot smoke passes.
**Basic Ecaz new-ally Duke loan.** After an Ambassador alliance is accepted,
Ecaz can lend the available existing disc to that new ally or continue without
lending it. Owned controls and legal AI are connected; the entrant resumes once.
One-battle use and turn-end set-aside expiry are provisional first-version policies.
One direct Basic alliance-and-loan smoke passes; no broad suite was run.
**Guild Secret Ally return control corrected.** The human transport preview
no longer rejects the already-ruled own-native-reserve return. One Basic quote
smoke offers three physical counters for two spice; no broad suite was run.
**Basic allied shipment transit prototype.** Ordinary physical reserve forces
can ship into an ally's territory and then depart through native movement.
Owned warnings and minimal legal AI are connected. A visibly provisional
no-exit policy sends only excess new visitors to Tanks when the turn ends;
old co-occupation timing remains separate. Three brief engine scenarios pass,
including Medium departure, old/ally force preservation and stronghold capacity.
Advanced entry and concealed/optional arrivals remain unchanged.
**Basic Richese mixed No-Field battle prototype.** Physical forces plus a
concealed token can enter ordinary Basic battles. The private pool uses existing
physical forces plus reserve-limited token materialization, visibly marked as a
provisional formula. Native sealing/reveal, casualties, controls and legal AI
are connected. One before/after engine smoke completes the battle; types pass.
Advanced mixed battles and combined Occupy remain guarded.
**Basic Richese allied discounted prices prototype.** Guild recipients and
already-active Karama rates can receive allied No-Field shipments. The explicit
provisional policy is one spice at the rounded one-force Guild rate, entirely
to bank even when Richese pays. Shared quotes connect engine, owned controls
and AI. Two before/after engine scenarios pass, including an actual native
Karama purchase and Easy consent; types pass. Advanced counterparts remain guarded.
**Basic full-hand Nullentropy Box prototype.** A holder at its current limit
can pay for the private search and atomically exchange the Box for one non-Box
card without increasing the final hand. Owned controls label intermediate
capacity as unresolved. One before/after smoke pays two once, uses Easy's
private selection, retains four final cards and puts the Box on top. Types pass;
Advanced full-hand and Guild-refund guards remain.
**Bounded Basic faction inventory.** Read-only Ixians/Tleilaxu and Ecaz/Moritani
mapping found no additional absent core Basic faction primitive in the examined
paths; Advanced-only powers and deferred combinations were kept separate.
Compact faction guides now describe connected Basic Richese/Ecaz prototypes
and bounded Moritani effects rather than stale blanket absence. This is an
inventory result, not comprehensive rules or complete-mode acceptance.
**Advanced Ecaz new-ally Duke grant.** Supplied PDF physical p30 adds an available
shared Duke automatically after Ambassador alliance consent. The accepting action
now grants the original disc and resumes the entrant without another loan choice.
Basic remains optional. One-battle tenure stays provisional; unavailable/captured
scope remains guarded. One actual grant-and-battle smoke and three changed
contract cases pass; types pass. No broad suite or deployed acceptance was run.
**Advanced Ecaz and Moritani special Karama connected.** Ecaz's supplied p30
unarmed disc-difference declaration now reaches real cost/once-use and virtual
strength without additional physical losses. Moritani's supplied p35 post-loss
power now controls exact public winner-card keep/discard subsets before optional
cleanup. Both have owned live controls and minimum legal AI; numeric/custody
precedence interpretations are explicit. Two direct battle smokes and types pass;
live isolated React declarations/selectors submit exact native payloads in Chromium.
No broad suite, deployed acceptance or strategic AI work was run.
**Advanced Fremen/Ecaz protected sietches cutover.** Supplied physical p32
permits cooccupation in Habbanya as well as Tabr. The shared quote now feeds
both public progress and actual turn-ten victory. Basic stays Tabr-only;
solitary Ecaz and third-party blockers remain. One before/after native ending
smoke and three Habbanya contract cases pass; no broad suite was run.

**Advanced Richese first-version follow-up.** Ordinary mixed No-Field battles,
Guild/active-Karama allied rates and full-hand Box exchange now share the
visibly provisional Basic policies. Native Advanced support and Guild-stop
timing remain connected. Four direct scenarios cover unsupported/supported
mixed battles, actual allied shipment settlement and private Box exchange;
GameTable SSR surfaces were observed in Chromium. Types/lint and one affected
bot contract pass. Combined Occupy, whole-plan inspection and Guild-refund
boundaries remain; no broad suite or deployed acceptance was run.
The preceding supplied p34 cutover excludes Ixian Technology from Richese
auctions; ordinary Technology and allied post-purchase replacement remain.

**Advanced Auditor revival connected.** Supplied p29 each-turn permission now
works after repeat deaths. The separate ordinary-cycle prototype excludes
Auditor from the five ordinary discs, visibly marked as provisional.
Two native Easy smokes, two cycle regression cases, owned GameTable SSR
Chromium choices and types/lint pass. No broad suite or deployed acceptance
was run; prevention, price, death history and one-leader allowance remain.

**Advanced ordinary allied arrival connected.** Scoped physical reserve
shipment can enter an ally's territory before movement. Native supplied
p15 ending removes all shared actor forces, including old counters; Basic
keeps its separate provisional visitor policy. Medium departs typed arrivals
without a city sentinel. Three direct scenarios, one cross-mode arrival/ending
regression, types/lint and native GameTable SSR pre-arrival/ending controls
pass; no broad suite or deployed proof was run.

**Sandmaster / physical Fremen Ambassador connected.** Relocation now offers
optional destination collection before arrival reactions, without an invented
route or extra ordinary move. Shared quotes preserve trainer/profile and
single-pile bounds; CHOAM-suspended orders keep the distinct collection receipt.
Basic/Advanced direct smokes and the adjacent native worm path pass. Live React
controls in Chromium reach native collection and opt-out outcomes with exact
spice/counters and completed events. No broad suite, recovery campaign or
deployed acceptance was run.
Compiler/lint and two affected Ambassador/worm contract cases pass.

**Printed defense / Tanked Duke wave integrated.** Disjoint helper/control
slices are integrated by the parent. Native Ix/Richese skill battles prove
hybrid protection, Weirding's non-Shield behavior, Chemistry against Tooth,
additional Ix Snooper and sealed Portable, with one physical Worthless discard.
Existing capability1 battles finish without a retroactive hybrid choice;
new battles use capability2. Basic/Advanced Ecaz spends one actual Nexus,
revives the same Tanked Duke, preserves deaths2, uses him in a native battle
and releases once. The independent resurrection/use reset remains provisional;
captured/Ghola and wider timing remain guarded.
Live isolated React controls in Chromium reach hybrid survival/disposal and
Tanked acquisition with exact native outcomes. No broad suite, recovery
campaign, HTTP or deployed acceptance was run.
Types/lint and the affected five-file union pass **33/33**. The sole initial
failure was an erroneous unsupported-Shield fixture row, removed before
the focused repair and union rerun; runtime code was not weakened.

**Late-paid Recruits first version connected.** Recorded free usage now allows
play after paid ordinary returns. The visible provisional policy retains
payment and total counters, without refund: Atreides' two-free/one-paid may
take two additional free forces. Missing ledgers and pending/rate/replay
guards remain. Two native Basic/Advanced smokes and live owned React controls
prove exact usage/payment/card results; no broad suite or deployed proof.
Types/lint and two targeted late-accounting/remaining-guard cases pass.

**Richese acquisition edges connected.** Final-cache special purchase now
follows the resolved exhausted-cache rule and reaches native ordinary Bidding.
Full-hand purchase uses a visible provisional spent-Karama exchange, keeping
final capacity and separate Emperor income. Three native edge smokes and live
owned React purchase/income controls prove hand4/cache0, one fee/card/once-use.
No broad suite, recovery campaign or deployed acceptance was run.
Types/lint and the three-file acquisition union pass **21/21**.

**Basic occupied Homeworld lifecycle connected.** The shared stable-occupation
quote now has a visibly provisional Basic current-sole policy: the present sole
foreign garrison controls occupied income, Caladan/Ix/Richese/Giedi Bidding
authority, printed defenses, percentage shares and the Ecaz-victory holding, and
expires immediately on departure, contest or native repopulation. A recorded
source observation is still required. Basic Tupile slot leasing deliberately
keeps the conservative original-epoch gate. Frozen receipts keep their original
entitlement. The 738-case Homeworld union passes, including the changed-path
native smokes; one unrelated stale Richese cache-cancellation test was corrected
to the already-implemented 7 October ordinary-lot contract.

**Stale-guard test sweep and one bot correctness fix.** Full offline runs
(`npm test`) were compared against the pre-session revision `4ed6beb` to
separate inherited debt from new regressions. Superseded guard pins now assert
the shipped contracts: Basic/Advanced mixed No-Field admission, allied reserve
arrival and its departure obligation, the combined-Occupy rejection message, the
resolved exhausted-cache cancellation, the authorized odd-force Basic Ecaz
Occupy arithmetic (`ceil(E/2)` provisional), Advanced Fremen/Ecaz Habbanya
cooccupation, both structured Truthtrance promise answers, and the two-entry
Ecaz alliance acceptance chronicle. Three reference wording-pin tests were
deleted in favour of the existing structural five-facet/evidence check, and the
Tleilaxu negotiated-revival, Duke-Tanks and pending-shipment cases were updated
to real native outcomes. Two genuine bot defects were fixed: a bot kept
proposing `acceptLeaderRevival` for a request whose leader was no longer a dead
uncaptured disc (it now requires the leader to still be revivable and otherwise
cancels the request, removing 22 rejected actions from the combined-expansion
CLI sample), and a concealed marker with a physical companion alongside now
reveals before that companion moves, in both modes. A repeated-Karama
cancellation of an already-canceled compulsory cache lot remains an explicit
open boundary recorded in the decision index. Two intermittently failing
Moritani skill-runtime tests were measured at the same 3/30 rate on both
revisions, so they are pre-existing nondeterminism rather than a regression.
The Occupy policy failure (2/20 at `4ed6beb`, 3/20 here) is now explained by
an obsolete immediate-plan assertion: seed 8 legally activates Ecaz special
Karama before sealing. All four profiles finish that captured state in two
actions; the deterministic regression now checks finite legal progression.
The Harass/explosion failure is now reproduced at deterministic seed 62:
the fixture's donor exchange removed its already-selected Harass card.
Staging now uses a conserved deck replacement while hand capacity remains.
The repaired physical scenario returns two forces before the explosion,
discards Harass once and reaches Collection. Neither finding changes rules
or bot behavior; the earlier attribution to prototype/AI gaps was incorrect.

**Gated captures resumed under the new prototypes.** The 14 captures that
remained gated after the 7 October rulings were resumed in place against their
saved positions. Every previously stalled Southern Hemisphere occupied-benefit
capture and every previously stalled odd-force Basic Ecaz Occupy capture now
completes (`homeworld-occupation-atreides-4/5-basic`, `ixians-6-basic`,
`moritani-6-basic`, plus five Basic Occupy bodies finishing in 135–688 actions).
The four Advanced captures that still stopped on the high-Homeworld-threshold
revival-deployment timing now also complete (78/68/932/133 further actions) after
that question received a visibly provisional resulting-population policy. One
Basic `native-homeworld-skills` capture still stops on the explicitly gated
combined-Occupy optional-overlay composition. No capture was reset,
force-completed or bypassed; results and logs are under
`/tmp/dune-resume-wave2-20261009` and `/tmp/dune-resume-wave3-20261009`. See
[the resumption evidence](IMPLEMENTATION_STATUS.md#9-october-2026--gated-captures-resumed-under-the-basic-occupation-and-odd-force-occupy-prototypes).

**7 October 2026 — five pending rulings resolved by the user.** The user
answered five recorded questions; each is now recorded in
[the decision index](RULE_DECISIONS.md#user-rulings--7-october-2026) and
implemented:
- CHOAM's opening income counts as a qualifying collection, so low-population
  Tupile adds its bank increment under the Inflation multiplier
  (`game/engine.ts`, charity projection and controls).
- A Richese exhausted cache is legal and a canceled/prevented compulsory cache
  auction restores one ordinary lot (`game/richese-settlement.ts`,
  `game/auction-continuation-quote.ts`, `game/engine.ts`).
- Suk-rescued casualties count toward Advanced Atreides' seven Kwisatz Haderach
  losses, and the earlier Suk availability restriction is removed.
- The Guild Nexus Secret Ally reserve return overrides the Arrakis-to-native-
  Homeworld restriction for the holder's own reserves, depositing through the
  shared native-reserve pipeline (`game/nexus-guild-secret-ally-options.ts`,
  `game/engine.ts`).
- Interior passengers count as entering the territories a relocated Ixian HMS
  points into, so Sandmaster collects there before the native collection
  (`game/sandmaster-movement.ts`, `game/engine.ts`).

The earlier remaining questions were Recruits accounting, ordinary Guild
cancellation, base special Karama, Nexus composition, Discovery benefits
and Homeworld interpretation/restoration. The Bureaucrat/gift question was
later resolved on 11 October: gifts are not payments.

**Preserved captures resumed under the rulings.** All 123 preserved
`failed-*.json` captures were resumed in place (same position, seed and
custody, no reset): **102 now complete**, 14 remain. The low-Tupile CHOAM
ruling unblocked all 23 `choamCharity` captures, the exhausted-cache ruling all
three `richeseBlackMarket` captures, and nine of thirteen occupation captures.
The 14 remaining are gated on **three other unresolved questions** — the
competing-occupier/native-repopulation occupation lifecycle, the Homeworld
high-threshold revival-deployment timing, and the odd-force Basic Ecaz Occupy
casualty rounding — not on the five implemented rulings. See
[the resumption evidence](IMPLEMENTATION_STATUS.md#7-october-2026--preserved-captures-resumed-under-the-five-rulings).

**In progress — mixed E3 and three-family Nexus.** Original selected Ecaz
plus Ix and/or CHOAM now requires an actual native from every selected
family, with optional classics: Basic/Advanced2–6/all12 Nexus, optionally
all14 Skills/Homeworlds/Discovery7/8/Tech3+/Advanced Strongholds2+.
Original1536 admissions across36 roster families reach actual Traitors,
Skills or Ixian pre-training offers versus eight legacy combined admissions
before, on an unchanged source tree. The original generic Nexus/Skills and
the combined five/six-native entry now also mark fresh native Ecaz Occupy
and Advanced Moritani assassination, and the ordinary coalition, Bureaucrat,
Duke, Richese Cunning, serialized overlap and printed native-opponent
consumers are connected. Two real captured consumer omissions are repaired:
the CLI's fixed physical stock check now counts Ecaz's separately held
Loyalty card, and the engine's assassination inventory check now counts
Tleilaxu Face Dancers. Selected decks/cache, shared-Duke/capture,
force/payment and pending-effect guards remain.

Dedicated original programme evidence for this envelope is now green for the
Moritani pair (9/9) and the Ecaz pair (14/14, stable across 20 consecutive
full-file runs). The former recorded engine
constraints are resolved as real fixture or engine defects: Moritani must start
in an unoccupied printed stronghold (never a seated faction's own start), a
pending Leader-Skill posture must be concealed before both plans are submitted,
a normal Traitor call is legal only for the card that actually matches the
opponent's plan leader, the winner's automatic casualty application is not an
assassination effect, and the mixed-E3 Moritani Terror/Cunning window now uses
its own real shipment. **New engine behavior:** a Terror arrival whose entry
coincides with the arrival's own interaction (Guild income, Bene Gesserit
fighter Intrusion or advisor choice, Fremen storm protection) is queued in the
additive `Game.pendingArrivalReaction` and opens as soon as that interaction
settles, without replaying payment or force transfer. A Terror entry already in
flight and every Ambassador combination still reject. Selected decks/cache,
shared-Duke/capture, force/payment and pending-effect guards remain.

**In progress — Sneak Attack shipment classification.** A positive Moritani
Sneak Attack in Shipment and Movement now accrues the Heighliners token once
for its owner through the ordinary off-planet-arrival helper, under an
**explicitly adopted** shipment classification rather than a retrieved ruling;
a zero-force resolution accrues nothing, and the token still enforces its
working phase, Guild exception and one accrual per turn. Bene Gesserit
spiritual-advisor accompaniment and Intrusion are now composed: the committed Terror entry resolves first, then an eligible
Bene Gesserit Intrusion choice (Advanced, with fighters present) carries the
free spiritual-advisor follow-up, and declining it still offers the one-to-two
force advisor shipment; a zero-force resolution opens none of them. See
[MORITANI_ASSASSINATION_SNEAK.md](MORITANI_ASSASSINATION_SNEAK.md#adopted-shipment-classification-7-october-2026).

**In progress — Tleilaxu Ambassador force return.** The last unimplemented
Ambassador effect is now wired: a placed Tleilaxu token gives its beneficiary —
the Ecaz owner or its ally — a private decision to return one to four physical
counters from the Tanks to reserves at zero cost, using the existing
`game/tleilaxu-ambassador-forces.ts` quotation, the shared Fedaykin/Sardaukar
one-per-turn counter, a beneficiary-only projection and an entry control with
an explicit decline. All four AI profiles pick a legal return or decline. The
printed leader alternative, ordinary allowance accounting, dead-twice
eligibility and Tleilaxu income repeat scope stay gated exactly as recorded in
[TLEILAXU_AMBASSADOR_RULES.md](TLEILAXU_AMBASSADOR_RULES.md#implementation-decision-boundary);
no ordinary revival allowance, price, phase or income path changed.

**In progress — administrator failed-attempt history.** Rejected administrator
authentication and authorization attempts are now recorded durably with a fixed
reason, the attempted role and an already-known account id — never a key, token,
body or address — and the owner-only operations page lists seven-day per-reason
counters plus the twenty most recent entries. Recording is best-effort inside
the rejection path, so a rejected request keeps its own answer, and the history
never locks out, disables or revokes anything by itself. See
[ADMIN_ATTEMPTS.md](ADMIN_ATTEMPTS.md).

**In progress — administrator operations.** The owner-only operations page now
also diagnoses [stalled decisions](ADMIN_STALLED_DECISIONS.md): a bounded,
read-only sample of at most ten live rooms whose public pending interaction — a
decision, response, Truthtrance or phase opening — has been idle longest, plus
`stalledRooms` and `oldestStalledChange` counters in the aggregate sample.
Paused, closed, removed and archived rooms are excluded and no private game
content is selected; `GET /api/admin/operations?stalled=1` stays owner-only,
`no-store` and read-only, and it repairs nothing. Failed-attempt records and
disk capacity were the remaining operations gaps; the aggregate sample now also
reports the SQLite database size and page count, while free disk space and
maintenance controls remain.


**Mixed E1/E2 and paired E3 Nexus — bounded Development Verified.**
Original both-family Ix+CHOAM/union47 or both Ecaz+Moritani/ecaz33/classic
entries preserve Skills or no Skills, original Homeworld/Discovery/Tech3+/
Advanced Strongholds2+.312 original admissions reach setup versus four
before; actual Ix pre-training offers and ordinary native setup remain.
New31 physical programmes plus two Loyalty-stock regressions and the
final489/489 affected checks across42 files pass with types/lint/build.
Native Ecaz assassination, separately held physical Loyalty
stock and exact paired original overlap admission repair real consumer
omissions, without new printed rulings or public activation.

Across64 original six-seat families,258/288 finish338,931accepted/
339,426attempted/9,013JSON across three frozen trees and preserved-prefix
continuations. Every original/continuation source receipt and all30
remaining source-guard traces are read. This is not288 uninterrupted passes.
Actual390px original native human setup/offers, Maker/both piles and card
draws, typed paid Ixian visitor/free Suboid plan and Ecaz foreign arrival/
separate living Duke preserve20 counters in **3AVHJN76 v765** and
**PSDLV4FJ v121**. Losing Ixians receive no winner-only Suk rescue; no missed
human nested entry or Moritani reveal is invented. Final489/489, bundle
and actual390px guide pass. Exact pushed
**05ab2c92b05a41edd3691aaf3592e32ed2c989e3** build/owned cutover retains
both full SHA markers, original765/121 and compiled guide. Terminal
[container run37565696416](https://github.com/Quintine/Dune/actions/runs/37565696416),
job112612773421, completes success with isolated7 ending03:17:43Z before
publication9 starts03:17:44Z on7 October2026; the full final record is read.
Protected deployment and complete modes remain gated.
[Canonical qualified evidence](NEXUS_CARD_RULES.md#mixed-e1e2-and-paired-e3-nexus--7-october-2026).

**Single-native E1/E2 Nexus — bounded Development Verified.** Original Ixians OR
Tleilaxu OR CHOAM OR Richese/classic entries compose Nexus with Skills or no
Skills, optional Homeworld/Discovery/Tech3+/Advanced Strongholds2+ and one
family deck.192 original admissions reach real setup versus eight before;
paired predicates remain both-native. New15 semantic programmes and
affected398/398 across35 files plus types/lint pass. The actual bare-Skills
Smuggler deadlock is repaired in the shared ordinary-skill predicate.
Across32 original six-seat families,190/192 complete208,205accepted/
208,213attempted/5,539JSON across two frozen trees including one preserved
capture continuation; exhausted-cache/low-Tupile ruling stops remain.
Actual390px original Ixian trained offer/typed Cistern entry/Cunning/free
Suboid plan/equal Cyborg substitution and no-training Richese one-invoice
five-plus-three pair/reveal preserve20 counters in **4CR7JHUL v160** and
**LNHZXDEE v102**. Final types/lint/build and actual compiled390px guide
pass; exact pushed **30a0bdbbb6830eeb1b1fa6c765f958cc7e66a3e4**
build/owned QA cutover retains both versions/pools and full SHA markers.
[CI37554058440/job112576050305](https://github.com/Quintine/Dune/actions/runs/37554058440/job/112576050305)
is completed/success: isolated7 before publication9, complete terminal
record read. No full-mode or protected deployment claim.
[Canonical qualified evidence](NEXUS_CARD_RULES.md#single-native-e1e2-nexus-composition--7-october-2026).

**Standalone E3 Nexus without Skills — bounded Development Verified.**
Original Ecaz OR Moritani/classic ecaz33/all12 composes optional Homeworld/
Discovery/Tech3+/Advanced Strongholds2+ through the existing generic entry.
48 original admissions reject before and reach Traitors after. Original
native setup, distinct roster/Cunning exclusions and ruling gates remain.
New15 semantic cases and affected372/372 across32 files, types/lint/build pass.

Across16 families,46/48 original six-seat games complete44,796accepted/
45,084attempts/1,189JSON across two frozen trees. Eight initial new trace
name collisions are preserved/repaired without changing seeds; only those
interrupted families rerun. Basic odd-force/high-threshold revival captures
keep their actual source guards; no first-batch48-green claim.
Actual390px no-training `W6SCKGAA`v114 consumes supply Cunning then reveals
on paid Guild1 arrival: Staban dies once, bounty5 credits12→17, Guild
res14/Polar1/Tanks0. `WFEGQTRU`v94 retains random Cistern/free2 entry, actual
Maker/both-pile/alliance close, paid native Junction1 and living-Duke Cunning:
res11/Imperial6/Cistern2/visitor1/Tanks0, unchanged Cunning purse7.
[Canonical source/game/human receipts](NEXUS_CARD_RULES.md#standalone-e3-nexus-without-skills--6-october-2026).
Final types/lint/build and compiled no-training Nexus guide pass.
Pushed gameplay `185f3b37be96d7f09f1e35f774521bcedbbc2fac` receives an
exact rebuild/owned QA cutover: both originalv114/v94 tables show its full
revision with retained Terror/Staban/bounty/Duke/counters, and the new
scope/evidence renders390. All tabs close; temporary helpers are removed.
Final container
[run37545814914/job112549436153](https://github.com/Quintine/Dune/actions/runs/37545814914/job/112549436153)
completes successfully, isolated verification7 before publication9.
The terminal record is read; no protected server is deployed. Other native
families, pending rulings and full-mode acceptance remain open.

**Native Homeworld Nexus — bounded Development Verified.** Existing paired
E1/E2 Skills/no-Skills module/Discovery and standalone Ecaz OR Moritani
Skills entries retain original Homeworld/Nexus with optional Discovery/
Tech/Advanced Strongholds.24 original admissions reject before and pass
after; actual setup/private offers/native custody and ruling gates remain.
New15 meaningful cases and the affected25-file union307/307 pass.
Across23 families,59 of68 original six-seat games finish71,137 accepted/
71,484 attempted actions with1,894 JSON on one unchanged source tree;
nine captures retain seven low-CHOAM opening-income, Basic odd-force Ecaz
and high-threshold revival timing guards. No guard bypass or68-green claim.

Actual390px original no-Skills `AB7UKV8K`v145 randomly reveals Cistern,
finishes Maker/both piles/alliance before native Richese draw, then commits
5+3 Cunning for one-spice invoice: reserves12/Cistern8/Tanks0, wallet4.
Original `8Q2WZQMA`v88 chooses real offered Warmaster/Sanya, pays for native
Wallach visitor1, then spends Ecaz for the living Duke with unchanged
purse12 and original training. Both inspectors show original20 counters;
fresh choice/result screenshots and document390 are observed.
[Canonical source/programme receipts](HOMEWORLD_RUNTIME_IMPLEMENTATION.md#native-homeworld-nexus-composition--6-october-2026).
Final types/lint/build and compiled390px guide pass. Pushed gameplay
`2efa10a9d6d1f60e3725404f5d0a4b36de596732` receives an exact rebuild and
owned QA cutover: both originalv145/v88 tables show its full revision with
retained counters/Duke/training, and the updated native guide stays390.
All tabs close; temporary scripts are removed. Final container
[run37537171148/job112521014337](https://github.com/Quintine/Dune/actions/runs/37537171148/job/112521014337)
completes successfully, isolated verification7 before publication9.
The terminal job record is read; no protected server is deployed.
Other native families, pending rulings, full-mode acceptance and protected
deployment stay open.

**Classic Homeworld Nexus — bounded Development Verified.** Fresh original
classic Basic/Advanced2–6 now composes Homeworlds/all12 with all14 Skills,
Discovery7/8 or both, optional Tech3+/Advanced Strongholds2+. No-Skills/
no-Discovery also retains the industry/card modules. Original predicates,
setup, typed native returns and pending guards remain; native families are
separate. New13 semantic cases, affected242/242 across20 files and final
types/lint/build pass. All15 added families finish22 original six-seat
games14233/14233 actions/375 JSON on one unchanged source tree.
Actual human390px `RCGZK4CF`v167 draws a real Fremen singleton, submits paid
typed invasion/zero-Suk and exact-three return: Kaitain14, Salusa5, native
19/5, Tanks0/0, original visitor1 and unchanged return wallet6.
`A3LV8Y3U`v74 randomly reveals Shrine, enters3 Imperial counters, votes the
Maker majority, rides2 native Fremen including1 Fedaykin inside, then draws
Moritani after both actual Advanced piles and settled alliance. Atreides
losses2 do not repeat; original armies remain. All tabs closed; temporary
scripts removed. [Exact scope/source receipts](HOMEWORLD_RUNTIME_IMPLEMENTATION.md#classic-homeworld-nexus-composition--6-october-2026).
No complete-mode, final assurance, calibration or protected-deployment claim.

Pushed gameplay `c7073dc6b6602f09d15bea55c89608eaabb82613` receives an exact
build/owned isolated-QA restart. Both originalv167/v74 tables and the actual
combined Homeworld guide display/retain the observed state at390px on that
revision. Final [run37524999649/job112479645440](https://github.com/Quintine/Dune/actions/runs/37524999649/job/112479645440)
completes successfully, isolated verification7 before image publication9.
Protected deployment remains separate.

**Native Homeworld modules — bounded Development Verified.** Existing E1/E2 and
standalone Ecaz OR Moritani/classic setup now compose Skills, Discovery or
both with optional Tech/Advanced Strongholds, no Nexus. Genuine Ixian
pre-training nullable custody and physical-Suk residual Cyborg forwarding
repair reproduced setup/crash cases. New35 cases and affected180/180 across
19 files pass; final repair union46/46, types/lint/build pass.
Original six-seat samples14/19 complete; all12 new families run144 original
Advanced three-seat samples, initially134 complete. Eight CHOAM ruling
captures remain; two genuine Ecaz placement deadlocks were repaired by
using the engine/UI's existing base-board stronghold enumeration. All four
policies advance both exact captures, which finish102/124/2 and21/29/0
further accepted/attempted/JSON actions. Source batches and prior five
six-seat ruling captures remain explicit; no uninterrupted144/final-tree
certificate is claimed. Actual human390px `4AG8J2ZX`v74 chooses its original
Ixian card/training and ships one Suboid/one Cyborg to Kaitain for2, retaining
Ix9/3, visitor1/1 and original HMS3/3. `TYH3JS3C`v56 submits actual native
Moritani Suk rescue: Grumman14, own Tanks0, defeated Guild Tanks2; original
Collection follows. Both tabs closed; throwaway smoke scripts removed.
[Exact native scope](HOMEWORLD_RUNTIME_IMPLEMENTATION.md#native-optional-module-compositions--6-october-2026).
No public, ruling, comprehensive-assurance or protected-deployment gate changes.

Gameplay `3fb047c93d4f41840ee527883b3d7deda35b1645` is pushed. Both original
v74/v56 native tables and the updated guide were observed at390px on that
exact build after an owned isolated-QA restart. Final
[run37510034689/job112428482102](https://github.com/Quintine/Dune/actions/runs/37510034689/job/112428482102)
completed successfully, isolated verification7 before publication9. Protected
deployment remains separate.

**Classic Homeworld optional modules — bounded Development Verified.**
Fresh classic Basic/Advanced2–6 now composes Skills, Discovery or both with
original Tech3+ and/or Advanced Strongholds2+. Original all14/DS7+8 setup,
native pools, phase-end industry, source-local held effects and mandatory
winner Tech timing remain. New14 cases and affected145/145 across17 files,
types/lint/build pass. Fourteen completed original six-seat samples total
9008/9008 actions/237 JSON across two source batches; an incidental internal
view-copy failure was preserved, repaired and continued, not hidden or
reported as an uninterrupted first-tree pass. Actual human390px
`XJCJ3H3W`v17 submits typed nested Suk allocation; `WM8E7CFG`v17 chooses
Spice Production after real Homeworld battle cleanup, retaining the actual
visitor/native armies. Both tabs closed and temporary scripts removed.
[Exact scope and provenance](HOMEWORLD_RUNTIME_IMPLEMENTATION.md#classic-optional-module-compositions--6-october-2026).
Nexus/native rosters, pending specific rulings, public starts and protected
deployment remain separate; the complete project goal is unchanged.

Pushed gameplay `fa025220f858e1cf3797f9a34ed39c0822c29bbd`; both originalv17
tables and updated Homeworld guide were observed on that exact build at390px.
Final container [run37432875364/job112167625286](https://github.com/Quintine/Dune/actions/runs/37432875364/job/112167625286)
completed successfully, isolated verification7 before publication9. Protected
deployment remains separate.

**Classic Homeworld + Skills or Discovery — bounded Development Verified.**
Fresh Basic/Advanced two–six unique base factions retain original Homeworld
setup with either all fourteen Skills or Discovery seven cards/eight tokens.
The authorized revision permits these variants together or separately
(physical PDF21–23). Other overlays and native expansion rosters remain
separate in this checkpoint; the complete project scope is unchanged.
Typed Suk casualties conserve native/visitor custody. Native rescue stays in
its original home; external Emperor returns use an explicit split-home
allocation, a documented implementation interpretation, not a revival ruling.
Original Maker, entry and nested shipment mechanics retain physical sources.
Affected tests94/94 across12 files, types/lint and build pass. Four original
six-seat games finish2330/2330 actions with61 JSON continuations, on two
unchanged source trees, not one final-tree certificate.
Human mobile QA: `3NM6MS4T`v11 submits trained Suk allocation and retains
three ordinary visitors in Junction, Kaitain11+1 elite and Salusa1+4 elite;
`CLQYLURH`v11 submits Cistern entry for two ordinary/one Sardaukar while
retaining native reserves and the earlier real internal transfer. Both
surfaces are390px without overflow. See
[Homeworld runtime](HOMEWORLD_RUNTIME_IMPLEMENTATION.md#classic-skills-and-discovery--6-october-2026)
for exact scope, source provenance and limitations. Public starts, full-mode
certification and protected deployment remain gated.

Pushed gameplay revision: `e2dcebca35a89ed1e1d129b1fbc2428378b1d700`.
After exact build and owned isolated-QA restart, both original humanv11 tables
show that full revision at390px; the actual Homeworld guide paragraph renders
without overflow. Tabs are closed and temporary human staging scripts removed.
Exact container [run37427758535/job112151199196](https://github.com/Quintine/Dune/actions/runs/37427758535/job/112151199196)
completed successfully: isolated storage/HTTP verification7 finished before
publication9. Final job record was read. This is not protected-server
deployment evidence.

**Native trained Skills/Nexus/Discovery — bounded Development Verified:**
original paired E1 Ixians+Tleilaxu/Ix47, paired E2 CHOAM+Richese/CHOAM35+cache
and standalone Ecaz **or** Moritani with classics now compose all14 original
offered training, all12 Nexus and Discovery7/8 in Basic/Advanced2–6, with
optional unused Tech3+ and Advanced Strongholds2+. Only the existing
paired/E3 skill-family predicates gained the Discovery envelope; original
setup, first hands, offers, actors and native components remain authoritative.
Mixed/E3 pairs, shared-Duke training, borrowed Smuggler/pair-companion
arithmetic, native free-return, captured/foreign training, Basic odd Ecaz,
Advanced Harkonnen and the exhausted-cache count ruling stay guarded.

Affected205/14files, types/lint and build pass. All eight new six-seat profiles
were exercised: **23 of24** original samples completed with **25,751 accepted/
25,751 attempts/685 JSON**, including actual typed Cunning rescue before equal
Cyborg substitution, physical winner cleanup/Tech before matching Face Dance,
one-invoice signed E2 nested pairs, mandatory owner-labelled Ecaz Occupy and
original Moritani assassination/own revival. The single unfinished sample
(Richese seed20273010) is preserved at turn-10 Bidding with an empty cache and
the existing `richese-settlement` exhausted-cache count guard:1,726accepted/
1,727attempts/46JSON, no bypass. Original human rooms BWHS4DU6/GRM4XMUH/
5JS3SUYY/VFQCEVFB retain actual offered training (Rihani/Prana/Suk/Smuggler,
Master of Assassins, Killer Medic/Sandmaster) and free entry, with Duke Vidal
and the Moritani Atomics/assassination state live. Local working-tree proof,
not deployed acceptance.
[Canonical combined evidence](DISCOVERY_PROTOTYPE.md#native-trained-skillsnexusdiscovery--6-october-2026).
Verified code **2270c07f9722660f3dfe1d90626f7ecc81537a73** pushed;
[exact CI37387218604/container112023319943](https://github.com/Quintine/Dune/actions/runs/37387218604/job/112023319943)
job completed/success, isolated storage/HTTP7 before image9. Exact pushed build
and own worker reload retain the four native rooms and full 2270c07 marker at
390px (document width390, no overflow); owned tabs closed. No protected live
deployment/access/snapshot/provider approval is claimed.

**Classic Skills/Nexus/Discovery and paired native Nexus/Discovery — bounded
Development Verified:** original fresh classic base33/all14/all12 training
and separate paired E1/E2 no-Skills47/35/cache setup retain Discovery7/8,
Basic/Advanced2–6, optional Tech3+ and Advanced Strongholds2+.
Actual Maker losses/votes/typed rides, both piles, settled alliances and
end-Spice closing deals use original controls. Signed native nested markers
retain their one-invoice/current-revealed-site/physical-reserve contract.
At that earlier checkpoint, native Skills/Nexus/Discovery stayed gated; the
newer trained checkpoint above supersedes that limit. Other overlays, pending
rulings, public starts and played-save conversion stay gated.

Affected169, types/lint and build pass. All18 original six-seat samples complete:
13,576 accepted/13,576 attempts/359 JSON on unchanged7c65011d working tree.
Original human BT4SBSLB16/Charity retains natural training/Cistern3, six real
Guild Maker losses and its original Fremen closing draw. BZNXHKMU19/Charity
retains typed Shrine3/1Cyborg, two real Tleilaxu losses and native closing cards.
RJF6D6ML24/Movement retains original setup, two CHOAM losses, native closing
cards and actual signed No-Field5/3 Shrine8 settlement: Richese5→4/Guild3→4,
reserves19→14→11, no second fee. All three actual rides use two ordinary/one
Fedaykin free. Native undealt singleton ordering and controlled positions
are explicit, not natural-history/every-effect or deployed acceptance.
[Canonical combined evidence](DISCOVERY_PROTOTYPE.md#classic-skillsnexus-and-paired-native-nexus-discovery--6-october-2026).
Final cached-constructor/live-guide union50, TypeScript/lint and final build
pass; three final original programme re-runs complete1,659/1,659/44 JSON,
not added to the18 unique profile/seed samples.
Verified code **c8a6d0bb3caa3a4e651a8153b085b6db4bde1fe6** pushed;
[exact CI37345919728/container111884319700](https://github.com/Quintine/Dune/actions/runs/37345919728/job/111884319700)
job completed/success, isolated storage/HTTP7 before image9.
Exact pushed build/isolated reload preserves the three outcomes and full
c8a6d0b marker at390px, document width390; owned tabs closed.
No protected live deployment/access/snapshot/provider approval is claimed.

**Native Leader Skills / Discovery — bounded Development Verified:**
fresh supported native Basic/Advanced family predicates retain original
decks, starting hands/offers/all14, Discovery7/8, optional Tech3+ and Advanced
Strongholds2+. Typed entry/range/rescue/Cyborg/Face Dance, native stash/
invoice/green marker and trained Moritani death/assassination/own revival use
original handlers. Native Ecaz mandatory owner-labelled coalition remains.
Other overlays/previews, pending rulings, public starts and conversion stay gated.

Affected107 pass. Actual programmes observe rescue3/three Tanks/one Cyborg
substitution, six-counter invoice5→receiver3/bank2, and five real native
leader deaths followed by turn4 Revival/printed5 debit/optional replacement.
Three genuine hidden-Smuggler stalls had legal human plans; the policy now
uses authoritative projected capability, not full-state rules on player views.
Failing-before/passing-after trainer regression covers all four policies.

All31 genuine six-seat samples complete after three unchanged capture resumes:
30,874 accepted/30,874 attempts/815 JSON across f2ec1d69 and corrected14d66863
trees. Resumes add989/387/783 no-rejection actions; they do not reconstruct the
prior random stream. Earlier duplicate-name runs remain incomplete/un-counted;
new names include full roster/expansions while old profiles/seeds stay unchanged.

Human 6NNTCFM2v12 moves one ordinary/one Cyborg into Shrine free, preserving
natural Bureaucrat and HMS6. 5NLWDL68v14 keeps native Killer Medic: actual
Stash5→6→5 through new Karama disposal without payment. MYPGMSW6 human
Master Bewt revealv10 kills its naturally trained Guild Bureaucrat, returns
that skill and pays10→13; winner cleanupv11 and ten original actions reach
v12/Mentat with retired cost and one private replacement. All390px refresh,
original starting hands/offers preserved, explicit staging and tabs released.
[Canonical native evidence](DISCOVERY_PROTOTYPE.md#native-leader-skills-composition--6-october-2026).
No full-faction, natural-every-effect, assurance or deployed acceptance claim.

Verified code **555afe4070d33e0dd9e6ad7c931920878e51d2e7** pushed.
[Exact CI37320041332/container111796483681](https://github.com/Quintine/Dune/actions/runs/37320041332/job/111796483681)
completed/success, isolated storage/HTTP7 before image9. Final original-hand/
guide36, types/lint and exact build pass. Original three QA outcomes retain
v12/v14/v12 and display555afe4 at390px after isolated reload; tabs closed.
No protected live deployment/access/snapshot/provider approval is claimed.

**Discovery / original Strongholds — bounded Development Verified:**
fresh original Discovery and separate classic Skills/Discovery preserve
Advanced Strongholds2–6, optional Tech3–6, original setup/held claims,
physical entry, paid nested routes and source-local battle effects.
Source-clear native HMS/CHOAM invoices, Richese nested marker/defense,
trained support/rescue and mandatory Ecaz coalition retain original outcomes.
Skills-native/Nexus/HW/variants/previews, pending rulings and public starts
are not opened.

Affected77 plus post-repair coalition39, final types/lint/build and actual
programmes pass. Five genuine six-seat samples finish3,096 accepted/
3,097 attempts/81 JSON across original and repaired trees. Original Ecaz
seed20265041's mandatory battle was reproduced, repaired and resumed unchanged
for557 more/no rejection/15 JSON. Richese seed20265033 remains captured after
1,639 accepted atturn10 Bidding on its existing exhausted-cache count ruling.
No skipped battle, invented count, reset or natural-every-effect claim.

Actual UWEH7WNBv14 retains natural Smuggler, earned Arrakeen, free Cistern3
then paid4, spice3→2/reserves16→15. Native4LBU44PTv21 records human typed
Shrine free/paid entry, earned HMS copy and real support3/bank2/own1,
CHOAM income1, three physical Cyborg losses, protected Shrine4/two Cyborgs
and original Production transferred Guild→Ixians. Both refresh at390px.
Original staging and source trees are explicit; tabs released.
[Canonical rule/evidence contract](DISCOVERY_PROTOTYPE.md#original-advanced-stronghold-composition--5-october-2026).
No production deployment or complete-mode acceptance is claimed.

Verified code **b0267827b5b16755ff3e091cb78f1543383b7f96** pushed.
[Exact CI37301604738/container111735386439](https://github.com/Quintine/Dune/actions/runs/37301604738/job/111735386439)
completed/success, isolated storage/HTTP7 before image9. Final guide10,
types/lint/exact build pass; UWEH7WNBv14 and4LBU44PTv21 retain their recorded
outcomes and show b026782 at390px after isolated QA reload. Tabs closed.
No protected NAS deployment/access/approval or live acceptance is claimed.

**Classic Nexus / Discovery — bounded Development Verified:** fresh explicit
`nexus --discoveries` composes classic/base33/all12/Discovery7/8,
Basic/Advanced2–6, original Tech3+ and/or Advanced Strongholds2+.
Original setup, end-Mentat ownership, next-turn physical free entry, Great
Maker's actual worm/vote/typed ride and end-Spice closing draw remain.
Source-clear Emperor/Fremen revival ledgers and Guild paid nested shipment/
battle/Tech use existing consumers. Skills/native/HW/variants/previews and
unresolved mixed-module Fremen Betrayal stay separate; no public activation.

Affected64, types/lint/build and actual programmes pass. Two genuine six-seat
Basic Tech / Advanced four-module games finish1,150/1,150/31 JSON on unchanged
761f5ca5 tree. Actual3D7SAG45 original CLIv8, human free-entryv10,
Great Maker votesv12–14/typed ridev15 and original Advanced blow/alliance
settlementv16–26 culminate in Guild's physical closing drawv27/Charity.
Richese delivered, original deck12→11,390px refresh. Controlled unplayed
Spice order/token lottery is explicit; no natural-every-effect or production
claim. [Contract and evidence](DISCOVERY_PROTOTYPE.md#classic-nexus-composition--5-october-2026).

Verified code **a2a92bb40881e6b517e618a5ffd6b3389c960a3d** pushed.
[Exact CI37296234655/container111717999496](https://github.com/Quintine/Dune/actions/runs/37296234655/job/111717999496)
is completed/success, isolated storage/HTTP7 before verified image9.
Final guide10/types/lint/exact build pass. Preserved3D7SAG45v27/Charity
shows a2a92bb at390px with Richese/deck11 after isolated QA reload; tab closed.
No production deployment or protected NAS approval is claimed.

**Advanced Orgiz / classic Discovery Skills — bounded Development Verified:**
the supplied Advanced rulebook p24 uses a territory-Collection trigger.
Advanced transfers one collected spice per territory with a unique rival payer;
Basic keeps the provisional per-positive-deposit interpretation. Shared,
contested or inconsistent payers withhold only uncertain transfers. Original
bank income, collected/desert facts and paid continuations remain.

Fresh explicit `leader-skills --discoveries` composes classic/base33/all14
Skills with Discovery7/8, optional original Tech3–6, Basic/Advanced2–6.
Trained physical entry, original nested invoices, separate Planetologist/fixed3
movement, Harkonnen8-card stash, Suk rescue/Tech reward and distinct-party
Bureaucrat diversion use original controls and four minimal legal policies.
Native skill families, Nexus/Strongholds/HW and Banker/Mentat previews stay
outside this entry; no public start or played-game conversion.

Affected rule/control/reference **75 cases**, types/lint/build and actual
programmes pass. Two genuine six-seat Basic/Advanced Tech games finish
**1,578 accepted / 1,578 attempts / 42 JSON** on unchanged946335ef tree.
Counts prove continuation, not natural activation of every new effect.

Actual **PCDX5J8M** CLI starts v7; human natural Warmaster/Staban assignment v8.
Human Cistern inspect/reveal v10/v11 keeps it empty; original turn-two entry v12,
human three-counter entry **v13** costs no spice/reserves/movement. Atv14 the
protected counters survive and ordinary shipment is available. Original human
one-force shipment/Guild allowance reach **v16**, spice3→2/reserves12→11,
four Cistern counters and unchanged Warmaster; refresh fits390px.

Actual **FCVCEA3R** final movement ending opens **v8/Collection** automatically.
Controlled conserved positions collect5 across three deposits/two territories:
owner11→13/payer's own view10→8; two named-territory notices preserve bank
income and ordinary facts. Expanded Advanced guidance/refresh fit390px.
Tabs released; no unrelated record was written.
[Source, prototype bounds and evidence](DISCOVERY_PROTOTYPE.md#classic-leader-skills-and-advanced-orgiz--5-october-2026).
Full combinations, pending rulings, assurance and deployed acceptance remain.


Exact code **c12b463439521134f5ca3ee9c00bf0fbd33fbd3b** is pushed.
[CI37273231864](https://github.com/Quintine/Dune/actions/runs/37273231864) /
container111644528093 succeeds isolated storage/HTTP7 before verified-image9.
Final reference10, types/lint and exact pushed build pass. Preserved PCDX5J8M
**v16/movement** shows **c12b463**, Warmaster/four Cistern counters/spice2/reserves11,
at390px. FCVCEA3R **v8/Collection** retains owner13/payer-own8/two notices.
Tab released; publication is not deployment or protected NAS approval.


**Native Discovery / optional original Tech — bounded Development Verified:**
fresh classic, selected E1/E2 or standalone Ecaz OR Moritani Basic/Advanced
profiles retain original setup, decks/cache, seven Discovery Spice Cards and
eight tokens. Tech requires three through six seats. Native Cyborg/starred entry,
paid nested No-Fields, CHOAM stash capacity and Face Dance rewards reuse original
controls and minimal legal policies. Moritani's live profile and assassination
history now retain actual revealed nested sites. Public starts, other overlays,
paired/mixed E3 and contested/shared/mixed rulings remain separate.

The frozen affected union passes **71 cases**, types/lint and build. Real
programs prove Ixian three-counter/one-Cyborg free entry, one-spice Richese marker
and reserve materialization, and original Ecaz/Moritani setup. A reproduced
nested Moritani battle now reaches its actual different-Leader Traitor choice
and printed three-spice bounty.

Four original six-seat Advanced Tech games finish; the preserved Moritani
setup then finishes after the profile correction at original seed20263765.
Combined completed paths: **1,940 accepted / 1,940 attempts / 49 JSON**.
The initial and corrected trees differ; this is not a five-game frozen-tree
certification or evidence that every new effect triggered naturally.

Actual **Q3AWYZWC** phone Collection inspection/reveal reaches v8/v9. Original
continuation reaches turn-two Richese movement v10. Human Cistern marker5
declaration and Guild Allow shipment reach v12: spice5→4, reserves20, effective1.
Human reveal reaches **v13**, reserves15/five actual Cistern counters and no
second price; refresh retains v13 and fits390px. The isolated QA worker was
reloaded after an old-validator rejection; nested sector zero now says inside
the location, not Polar Sink. Tab released; other games were not written.
[Source, programs and limits](DISCOVERY_PROTOTYPE.md#native-setup-and-original-consumers--5-october-2026).
No reset, public activation, save conversion or deployed claim. Complete
Discovery combinations, assurance and protected NAS deployment remain open.


Exact code **67ce690064e7cd943e61043d41818ddbd8bdd023** is pushed.
[CI37263699075](https://github.com/Quintine/Dune/actions/runs/37263699075) /
container111615980358 succeeds isolated storage/HTTP7 before verified-image9.
Final guide10, types/lint and exact pushed build pass. Preserved Q3AWYZWC
**v13/turn2/movement**, marker **67ce690**, spice4/reserves15/five Cistern
counters, fits390px. Tab released. Publication is not protected NAS deployment.


**Printed high Ecaz Homeworld alliance victory — bounded Development Verified:**
fresh native Ecaz/Homeworld entry only. Current native7+, reciprocal alliance
jointly holds one actual uncontested stronghold and proved physically held worlds
of two other native factions. Emperor’s two worlds countone; own/ally worlds,
Tech sets, advisors and ordinary points cannot manufacture this conjunction.
Qualifying members join original winners before BG prediction/final fallback.
The source result prevents Ecaz/Fremen’s printed win from being mislabeled as
Fremen fallback; Duke’s explicit Ecaz-only revival and exceptional custody stay
separate. Old/public profiles gain no new victory source.

Source34/affected119 including guide cases, types/lint/build and real original
Movement→Collection→Mentat pass; all4 legal policies finish readiness.
High6/nonjoint/one-native/same-Emperor cases donotwin; prediction/simultaneous
ordinary union and public-only inputs retain original semantics. A separate
original734-action clock reaches turn10 before a conserved Ecaz/Fremen snapshot
proves printed-source precedence.

Five genuine six-seat Advanced games allfinish4,339/4,358/114 on unchanged
b0ebb815 tree;19 rejected candidates remain recorded. Counts establishcontinuation,
not natural triggering ofeverynewroute. Specific source proof is native/human.
Original **S8N26ADW v18/setup** retainsdeck/actors/choices; real turn-two Nexus
earnsEcaz/Guild before labelledsurvivingpositions. Storm7 unchanged, native7/7,
jointHabbanyaSietch1/1, Emperor/BG2/2, EcazKaitain/GuildWallach. HumanlastReady
reaches **v25/Mentat/finished Ecaz+Guild** whileordinary1/4/Ecaz1/3 stayfalse.
Refresh fits390px. No reset/secret/public/save-conversion or Duke permission.
[Exact source/runtime evidence](HOMEWORLD_RULES.md#printed-high-ecaz-alliance-victory--5-october-2026).
Full Homeworlds/overlays, pending Basic/CHOAM/Duke, assurance and deployment remain.

Exact code **17bc4537c3de7f40a0c7802c6530e7ed3a45ba02** is pushed.
[CI37260419689](https://github.com/Quintine/Dune/actions/runs/37260419689) /
container111606286541 succeeds isolated storage/HTTP7 before verified-image9.
Final119 source/consumer/guide cases, types/lint and exact pushed build pass.
Preserved S8N26ADW **v25/Mentat/finished** shows **17bc453** at390px, actual
Ecaz+Guild winners, ordinaryqualifiesfalse/sourcequalifiestrue. Tab released.
Publication is not deployment; protected NAS prerequisites remain unchanged.


**Occupied Tupile slots / normal-limit cleanup — bounded Development Verified:**
fresh native CHOAM/Homeworld entries alone initialize the source marker/ledger;
older occupation profiles remain unchanged. One validated slot per occupier/
reciprocal ally feeds every existing capacity consumer. Advanced last departure
and ally removal queue original holder-selected excess discards; Basic unknown
expiry freezes its proved ledger/flags and blocks rather than guesses cleanup.
Known occupation suppresses new low queries; proved expiry restores eligible
contact without clearing historical private answers or lifetime usage.

Source19/affected143 including guide cases, types/lint/build, all4 legal policies
and actual native programs pass. Original Harkonnen buys its ninth card without
a tenth bonus; real Tupile→Junction return1 queues both old-holder debts and
preserves remaining movement, cards, typed forces and one price. Completed
automatic invoices are accepted by the program helper; Basic genuinely observed
continuous qualification retains one lease, unlike an unobserved turn boundary.

Ten genuine samples on unchanged52ccb930 tree: allfive six-seat Advanced finish
4,339/4,358/114 accepted/attempts/JSON; four of five five-seat Basic finish
2,430/2,449/64, allfive total2,527/2,547/66. Atreides5Basic retains original
seed20263432 contested Southern guard. Natural samples containzero owed cleanup
choices, so changed-path proof is the original native program/human return.

Original backed-up **D54MY8JJ v18/setup**, real turn-two Guild/Harkonnen Nexus
alliance and labelled conserved post-Charity positions retain actors/deck/clock.
Human390px Harkonnen8/9 buys5 atv26 (12→7) and holds9/9. Actual Guild last visitor
returns1 to Junction for1 (6→5), then original Cheap Hero5→4 and ally Jubba9→8
settle atv30 without another move/price. v31 ends only Guild’s original turn.
A separate conserved native1/Fremen1 contact permits **v33** private3 spice/
0 weapons; refresh keeps lifetime use and reveals no rival panel. No root390px
overflow, reset, public activation or played-game upgrade. [Exact contract/evidence](HOMEWORLD_TUPILE_INTELLIGENCE_RUNTIME.md#occupied-tupile-slots-and-original-cleanup--5-october-2026).
Full Homeworlds/overlays, Basic/CHOAM rulings, exceptional Duke, assurance and
deployed acceptance remain open.

Exact code **3e79021a6e32d0f0570f0b60a0f12c64c6ec66e1** is pushed.
[CI37257844991](https://github.com/Quintine/Dune/actions/runs/37257844991) /
container111598626752 succeeds isolated storage/HTTP7 before verified-image9.
Final143 source/consumer/guide cases, types/lint and exact pushed build pass.
Preserved D54MY8JJ **v33** displays **3e79021** at390px and retains its one
private observation/lifetime use. Managed tab released. Publication is not
deployment; protected NAS snapshot/safe-point/sign-in/approval gates remain.


**Occupied Homeworld economics / Bidding — bounded Development Verified:**
original fresh2..6 Basic/Advanced setup and selected decks; Advanced uses the
authorized supplied p22 sole qualification retained until its last force leaves,
while Basic keeps its historical lifecycle guards. Actual Kaitain/Junction/
Richese percentages and completed total Southern Collection retain original
invoices, one payer debit, immediate sharing and signed once-only continuations.
Caladan shares the admitted private face, Ix transfers its actual pool, Richese
keeps native terms/seller/invoice while the occupier chooses only the card, and
Giedi awards one original purchase bonus using actual receiving capacity.
Native cancellation remains distinct from printed occupied effects.

Final247 affected cases/24 files, types/lint/build and all4 legal policies pass.
Human shipping exposed lost concurrent BG accompaniment; the signed suffix
now preserves it through allocation/JSON and actual subsequent advisor placement.
Wrong bonus recipients use normal RuleError; actual HTTP409 leaves version42.
Nondeterministic original-deal capacity/stock fixtures are conserved, not rerolled.

Pre-advisor-repair50 genuine games on unchanged09cfdd19 tree:44 finish18,977
accepted/19,149 attempts/491 JSON continuations; all50 total22,383/22,580/580.
Six remaining captures are four Basic occupation and two CHOAM source guards.
Five original Advanced captures finish3,135/3,136/83 at their original seeds;
resume restarts rather than reconstructs the random stream. After repair,
five fresh six-seat Advanced games finish4,339/4,358/114 on unchanged2ada8996
tree, including19 recorded rejected candidates. No zero-rejection/full-mode claim.

Original CLI HH7VHT2U v21/4H5CZDMA v18/6K5JFNPH v18 preserve actors and stock.
Real turn-two alliances precede labelled conserved positions. Human390px verifies
Kaitain1/1, one allied bonus despite full Harkonnen8, actual three-force shipping6
and Junction1/2 with restored BG accompaniment. Completed Fremen Collection9
retains5 and shares4 as1/3; HH7VHT2U **v72/Mentat** wallets are Emperor5/Guild17/
Harkonnen11/Fremen10/Atreides13/BG9. Richese native counterclockwise terms,
original Ornithopter5 invoice and3/2 net split reach **v29**; sole Ix pool6→5
reaches **v25**, with native Ix-known0 and Technology still native.
Refresh has no root390px overflow. [Exact source/program evidence](HOMEWORLD_OCCUPATION_RULES.md#original-runtime-and-human-evidence).

Tupile capacity/cleanup, exceptional Duke, Basic/CHOAM rulings, other overlays,
public/save conversion and full/deployed assurance remain open. No reset or
current-garrison shortcut. Publication is not deployment; NAS prerequisites
and last observed liveab5c782 remain unchanged.

Exact code **0774ae6f83e2795330823a0d8b2e8e2c49880105** is pushed.
[CI37252859564](https://github.com/Quintine/Dune/actions/runs/37252859564) /
container111583875100 succeeds isolated storage/HTTP7 before verified-image9.
Final247 consumer cases,10 guide cases, types/lint and exact pushed build pass.
The three preserved390px QA rooms display **0774ae6** at v72/v29/v25,
with Guild spice17/6/6 and their original Mentat/native-lot/Technology states.
Managed tabs are released. Publication is not deployment; no NAS gate bypass.


**Prior checkpoint5e902e3: stable Homeworld occupation — bounded Development Verified:**
fresh original2..6 Basic/Advanced setup/selected decks and Homeworlds alone;
no played-game conversion or inferred current controller. Continuously present
sole qualification, without competing/departed/contested/restored-high history,
supports actual bank Collection/immediate ally allocation and printed Wallach/
Tleilax/Grumman/Salusa protections without physical star conversion.
Original board/shared allocation/phase order and once-only credit receipts
remain; actual Homeworld portions feed Giedi once. Original dispatcher capture
and zero-icon income admission defects are repaired, not their source guards.
Twenty-four original setups,21 new/262 affected cases, types/lint/build and
original-phase bank/native programs/four legal keep-all policies pass.

Fifty genuine2..6 samples attempted on unchanged09f8b0d tree:37 complete with
11,762 accepted actions/300 JSON continuations, including153 rejected candidates
(not a zero-rejection certificate). All50 total19,080 accepted/19,283 attempts/
491 JSON continuations. Two preserved zero-award captures finish7/14 more actions
at their original seeds on correction treeeed8f319. **39/50 finish**; nine
occupation/Salusa-combat and two low-Tupile CHOAM source-ruling captures remain
preserved, with no rerun to hide failures, forced outcome or guard bypass.

Original CLI **CPBXKFGD v14/setup** retains actual offers/cards/actors. Real
turn-two Nexus earns Guild/Harkonnen alliance. Human390px **v21/Mentat** shares
Caladan2 as1/1, gives Wallach1 to Harkonnen and awards Giedi2 once: Guild3→4,
Harkonnen8→12; original readiness reaches Mentat. Refreshed original source
cards/notice and force inspector show18 Guild reserves/0 Tanks/two separate
foreign visitors, no root390px overflow. Controlled positions are labelled;
only dedicated QA changes, no reset. Owned temporary scripts are removed.
Percentage receipts, other occupied powers, unresolved occupation/CHOAM
rulings, public starts, save conversion and full/deployed assurance remain.
[Exact source and evidence](HOMEWORLD_OCCUPATION_RULES.md#stable-continuous-occupation-prototype--5-october-2026).

Exact code **5e902e384d67b38b3dae5bc3da04b40b7766c397** is pushed.
[CI37239145022](https://github.com/Quintine/Dune/actions/runs/37239145022) /
container111544136910 succeeds: isolated storage/HTTP7 precedes verified-image
publication9. Final11 clean-boundary/reference cases, types/lint and exact
pushed build pass. CPBXKFGD remainsv21/Mentat with actual Guild4/Harkonnen12
and conserved18+1+1 Guild counters, displaying **5e902e3** at390px.
Managed tabs are released. Publication is not deployment; last observed
liveab5c782 and protected NAS snapshot/safe-point/signed-in/approval gates remain.


**Standalone E3 Nexus / Skills / selected Tech/Strongholds — bounded Development Verified:**
native Ecaz OR Moritani plus classics, exact ecaz33/all14/all12,
Basic/Advanced2..6; original Tech3+ and/or Advanced Strongholds2+, both3+.
Fifty-four original setup programs/four legal policies and26 immutable
prerequisite rejects pass; new24/affected224 cases, types/lint/build pass.
All54 genuine games finish24,845 accepted actions/no rejection,648 JSON
continuations/28 closing choices/five coalition leads on unchanged tree
`ceebd866c4de7dfd122c0ddb9754a730b7bbdd93340afddffbd26ec157561816`.
Three preserved Advanced Occupy captures finish918/752/21 more actions at
their original scenario seeds; resume restarts, not reconstructs, the stream.
The mandatory coalition guard is connected; no skipped fight or replaced
saved position. Meaningful regressions exposed and repaired wrong-army Suk rescue and
combined-dial Diplomat retreat. Selected-plan skills retain separate physical
armies; Ecaz rescues its own fixed casualties, never the ally's variable losses.

Original backed-up CLI hands/offers/IDs remain authoritative. Human390px
**YZLNTNEZ v23/Collection** spends living-Duke Cunning, wins7–5 with normal
Warmaster/held Shield against poison, releases Duke, retains five assignments,
receives original Emperor Production and city2 (12→14).
**R2S5UX5U v27/Mentat** preserves normal Guild Suk, publicly kills unused
Master Bewt3/returns its skill/pays bounty11→14 after loss, retains original
cleanup/Tech order and one private replacement, then places supply Robbery
with Cunning at Red Chasm. No eligible human Karama counter; source programs
separately exercise cancellation/stacking.
**L7C8HTQT v23/Collection** uses real Ecaz/Atreides alliance, held Arrakeen
bank2/own0, trained Sanya4/dial5/support2 and independent fixed3 rescue:
Ecaz17 reserve/0 Tanks/3 board; ally16 reserve/2 Tanks/2 board. Emperor Axlotl
transfers to Ecaz after cleanup; allied Production stays Atreides; city2 pays
12→14. Refreshed controls/force/Terror inspectors show no root390px overflow.
Only dedicated QA rooms change; conserved positions are labelled.
Advanced Harkonnen, E3 pairs/mixed families/HW/independent cards/previews,
shared Duke training, enhanced Terror relocation/HMS/Grumman, pending rulings,
public starts, save conversion and full/deployed acceptance stay guarded.
[Canonical scope and evidence](NEXUS_CARD_RULES.md#standalone-e3-nexus-skills-and-original-components--5-october-2026).

Exact code **83f825513a79d51bdd4a3a096d65e103e654251c** is pushed.
[CI37227846375](https://github.com/Quintine/Dune/actions/runs/37227846375) /
container111511103168 completes successfully: isolated storage/HTTP step7
before verified image publication step9. Final13 coalition/guide cases,
types/lint and exact pushed build pass. Rebuilt QA displays **83f8255** in all
three original human rooms with unchanged outcomes at390px; managed tabs are
released. Publication is not deployment; live **ab5c782** remains last observed
and protected NAS snapshot/safe-point/signed-in/approval prerequisites remain.


**Paired checkpoint verified and published:** exact code
**8b6bf385601dd878e81ca11d47076aa93e7cb806** is pushed.
[CI37211854749](https://github.com/Quintine/Dune/actions/runs/37211854749) /
container111464477749 completes successfully: isolated storage/HTTP step7
before verified image publication step9. Final59 module/native cases,
types/lint and exact pushed build pass; rebuilt QA displays **8b6bf38** with
both original outcomes unchanged at390px. Publication is not deployment;
last live observation remains **ab5c782** and NAS prerequisites are unchanged.

Earlier **2d24f43** / [CI37208188809](https://github.com/Quintine/Dune/actions/runs/37208188809)
failed isolated step7 and correctly skipped publication. Public metadata
revealed only exit1; authenticated logs were unavailable. Its exact cause was
not established and no production HTTP defect is claimed repaired.
The original proxy-free adapter passes25 admin and55 HTTP cases with a
checksum-verified official **Node v22.23.3** binary and same-executable test
subprocesses. Earlier npm-selected “Node22” commands actually used v26.10.0;
their successful replacement/HTTPS witnesses are Node26 evidence, not Docker.
The passing exact Docker CI now supplies the required full container proof.
Only new private QA stores changed; no existing games or unsafe POST retries.
Verifier diagnostics now expose redacted failing stages, admin request/status
and up to three failing integration names without weakening nonzero failure
or publication gates. Local missing-Docker diagnostic smoke still exits1.

**Paired E1/E2 Nexus / Skills / Tech / Strongholds — bounded Development Verified:**
both Ixians+Tleilaxu OR CHOAM+Richese plus classics, one original family47/
35+cache deck/all14/all12, selected unused Tech3..6 Basic/Advanced and/or
Strongholds2..6 Advanced; both3..6 Advanced. Original setup/offers/hands/IDs,
real closing draws, typed rescue/equal substitution, signed pair/one invoice,
phase-end industry and original winner reward-before-FaceDance remain.
New50/affected175, types/lint/build,34 original setups/26 retained prerequisite
rejects and four legal policies pass. Thirty-four genuine2..6 games complete
16,094 accepted actions/no rejection,420 JSON continuations and22 actual
closing choices on unchanged tree
`472b5705ca5376fb95f8e6ff6f40192d9f1745d7d08c41efdef2b3e53783139a`.
The older native fixture now controls the original initializer remainder and
later scalar actions; final59 module/native cases, types/lint/build pass.
Original backed-up CLI **PPL5CNEB / TZRU5GYP v10/setup** retains actual
offers/hands/IDs after a scoped original14 shuffle. Human390px **PPL5CNEB
v28/Collection** copies held Arrakeen into HMS, uses full Suboids and trained
C’tair5/dial4/support1 (bank1/own0), commits3 actual Cyborg losses, keeps1
through Suk and exchanges only the actual2 Tank losses for2 Suboids.
HMS ends1 Suboid/3 Cyborgs,12 reserves/2 ordinary Tanks,4 Cyborg reserves/
zero Cyborg Tanks. Guild Production transfers to original Ix winner;
held Arrakeen/HMS remain Ix. Support leaves wallet10, separate city2 pays12.
Actual original Face Dancer stock has no matching trainer and remains unchanged;
matching trainer death/skill return and partial Cunning are separately exercised
native source programs, not claimed as human or natural shuffle results.
**TZRU5GYP v21/Battle** declares actual immediate5/concealed3 at Habbanya17,
passes real Karama and separate Guild allowance, pays Richese4→3/Guild6→7,
reveals3 into real ordinary counters (12 reserves/8 board/last-used3).
CHOAM then spends actual Hajr as Kulon fuel, passes the native response and
moves one ordinary force WindPass14→Bight14 via legal Planetologist range3.
Hajr/Nexus are spent once; original market completion pays Heighliners1,
CHOAM19→20, not at declaration or fuel/movement. Original skill custody stays.
Controls/inspectors/refresh/source guide have no root390px overflow; only QA
rooms changed. Mixed families/E3/HW/previews, borrowed companions, native
Nexus free-return accounting, pending rulings and public/deployed gates remain.
[Canonical source and evidence](NEXUS_CARD_RULES.md#paired-nexus-skills-and-original-techstrongholds--5-october-2026).

**Classic Nexus / Skills / Tech / Strongholds — bounded Development Verified:**
original fresh skill/Nexus setup retains selected unused Tech3..6 Basic/Advanced
and/or Strongholds2..6 Advanced; both require3..6. Original base33/all14/all12,
saved offers/hands/IDs and owner/deal timing remain. Seventeen setup programs
and four retained prerequisite rejections pass;192 affected cases, types/lint/
build, original physical rescue/payment programs and four legal policies pass.
Seventeen genuine2..6 games finish11,526 accepted actions/no rejection,
303 JSON continuations and12 actual closing choices on unchanged source tree
`480664928339c7e7026564687099bb5ddda9a7391fdfea9dc054bc1d088ebd88`.
The original stranded6-seat Collection state also finishes807 accepted actions/
no rejection after the fix. Original Bureaucrat invoices are no longer guarded
in this composition; Ghola/ordinary leader guidance obeys existing captured
training prohibition without removing force Ghola or deciding replacement skills.
(That captured-training prohibition is superseded by the
[13 October 2026 replacement ruling](LEADER_SKILLS_CAPTURE.md#user-ruling--13-october-2026).)
Controlled original backed-up CLI **P4D8MY3V v10 / UVHFYQB8 v8 setup**
preserves real offers/hands/IDs after a scoped original14 shuffle.
Human390px **P4D8MY3V v22/Collection** selects trained Fenring6/dial10/
support6/Shield with bank2/own4, saves three actual ordinary casualties
(one kept/two returned):15 reserve/3 Tanks/2 board, all five actual Sardaukar
reserved. Cleanup transfers original Guild Heighliners before inspection;
actual wallet10→6 then city2→8. **UVHFYQB8 v13/movement** spends actual
Fremen Nexus on three ordinary free returns including one actual starred piece:
17 reserves/3 Tanks, starred4 reserve/1 Tank, ordinary allowance3/elite1.
Axlotl1 accrues without wallet income, then original Revival end pays12→13 once.
Original posture/Cunning/support/rescue/cleanup/free-return/phase-end controls,
force inspectors, refresh and source guide have no root390px overflow.
Only dedicated QA rooms changed. Native overlays, HW, Banker/Mentat previews,
borrowed Smuggler arithmetic, pending rulings, public/save conversion and full
module/deployed acceptance stay separate. [Canonical scope and evidence](NEXUS_CARD_RULES.md#classic-nexus-skills-and-original-techstrongholds--4-october-2026).

Exact code **449e27b4151bf63355c2e5a270a0dd63c565f175** is pushed.
Final48 cases/types/lint and pushed build pass; rebuilt QA displays449e27b
and both unchanged original outcomes at390px.
[CI37204049860](https://github.com/Quintine/Dune/actions/runs/37204049860) /
container111441442571 completes successfully, isolated storage/HTTP step7
before verified image publication step9. No deployed claim; last live
observation remains **ab5c782**, with NAS prerequisites unchanged.

**Paired E1/E2 Nexus / Leader Skills — bounded Development Verified:** both
Ixians+Tleilaxu OR CHOAM+Richese plus classics, one family deck/all14/all12,
Basic/Advanced2..6 through original `leader-skills --nexus-cards`, no overlays.
New27/affected136, types/lint/build, twenty real setup programs, fourteen native
programs/four legal pair policies and twenty genuine2..6-seat games pass:
7,458 actions/no rejection,195 JSON continuations/four actual closing choices.
Natural Cunning combinations are not claimed. Real Basic/Advanced pair proof
conflict now routes the native signed two-token frame through original
validation/response/Guild continuation, keeping single-marker skill proofs
and companion exclusions intact. Original CLI **FZ2END3W/GZFAT6AE v8/setup**
preserves first offers/hands/IDs after a scoped original14 shuffle.
Human390px **FZ2END3W v24/Collection** uses normal Suk with full Suboids:
three Cyborg losses save1, then only two actual Tank losses exchange for two
Suboids. One Suboid/two Cyborgs remain;15 reserves/2 ordinary Tanks,5 Cyborg
reserves/zero Cyborg Tanks. Support10→9 once precedes city2→11.
**GZFAT6AE v15/movement** pays Guild1 for immediate5/concealed3, then reveals
actual3:12 reserves/8 board/last-used3; original training remains.
Actual phone controls/inspectors/refresh pass without root390px overflow;
controlled positions are labeled and only QA rooms change.
[Scope and evidence](NEXUS_CARD_RULES.md#paired-e1e2-nexus-and-leader-skills-composition--4-october-2026)
preserve foreign replacement, companion/mixed-plan, native revival and all gates.
Code **fba673d215ad0decbec675c0241e34b5ced7e422** is pushed. Final37
module/guide cases, types/lint and exact-revision build pass; rebuilt QA marker
**fba673d** preserves both physical outcomes and displays the updated390px guide.
Exact [CI37198972228](https://github.com/Quintine/Dune/actions/runs/37198972228) /
container111426544242 completes successfully: isolated storage/HTTP step7
precedes verified image publication step9. Publication is not deployment;
live **ab5c782** remains last observed.

**Classic Nexus / Leader Skills — bounded Development Verified:** fresh
classic/base33/all14 Skills/all12 Nexus, Basic/Advanced2..6, explicit original
`leader-skills --nexus-cards`, without other overlays/public starts/new rulings.
New40/affected151, types/lint/build, ten actual setup and twelve native rule
programs, four legal Suk/free-return policies and ten genuine2..6-seat games
pass (4,446 actions/no rejection,117 JSON continuations/eight closing choices).
Natural Cunning/Suk is not claimed. Actual normal and trained Suk revealed
two pending-Cunning lifecycle failures; matching original casualty commitment
now stays pending through rescue and completes only at physical settlement.
Original backed-up CLI **HKCLYXPK / APXBER55 v8/setup** preserves exact
starting hands/offers/actors after a scoped original14 shuffle.
Human390px **HKCLYXPK v20 / APXBER55 v24, Collection** chooses posture,
Cunning, Caid3 or Fenring6/dial6/support3/Shield. Normal loss4 saves1 to reserves
(14 reserve/3 Tanks/3 board); trained loss5 keeps the original7 pending until
rescue3 (1 kept/2 returned), then15 reserve/2 Tanks/3 board. Both preserve all5
starred reserves, zero starred Tanks, Shield/Suk, support10→7 once and separate
city2→9. Actual phone controls/inspectors/refresh and no root390px overflow
pass; only dedicated QA rooms change. [Scope and bounded evidence](NEXUS_CARD_RULES.md#classic-nexus-and-leader-skills-composition--4-october-2026)
preserve borrowed Smuggler, Atreides Suk/KH, pending Nexus and all release gates.
Code **3ae5e1f99455ee22e6243b9331b32adc0fab22ff** is pushed. Final50
module/guide cases, types/lint and exact-revision build pass; rebuilt QA marker
**3ae5e1f** preserves both physical outcomes and displays the updated390px guide.
Exact [CI37192972625](https://github.com/Quintine/Dune/actions/runs/37192972625) /
container111408871482 completes successfully: isolated storage/HTTP step7
precedes verified image publication step9. Publication is not deployment;
live **ab5c782** remains last observed.

**Paired E1/E2 Nexus / Tech / Strongholds — bounded Development Verified:**
fresh both Ixians+Tleilaxu OR CHOAM+Richese plus classics/one family deck
preserves Tech3..6 Basic/Advanced and Strongholds2..6 Advanced without Skills.
New18/affected139, types/lint/build, eight actual native programs and all four
legal paired-shipment/Face-Dance policies pass. Eight genuine five-seat games
complete3,926 accepted actions/no rejection/102 JSON continuations and six
real closing Nexus choices; natural Cunning use is not claimed.
Original backed-up CLI **7N2FKGKW / EFQGWA8F v10/setup** preserves actors
and first deals. Human390px **7N2FKGKW v30/Collection** activates full-turn
Suboids; actual Arrakeen and HMS-copy support each pays bank1/own0.
Three lost Cyborgs return by equal three-Suboid sacrifice; a subsequent original
Dominic Face Dancer returns two remaining winners and places two Tleilaxu
reserves inside HMS. Original Heighliners/Production remain at Ix; Tleilaxu
Cunning replaces only the revealed physical card and keeps Burseg/Soo-Soo.
**EFQGWA8F v15/Battle** sends immediate5/concealed3 to Habbanya17 for
Guild1 (Richese4→3/Guild6→7); real CHOAM Heighliners1 pays only at movement
end, wallet19→20. Original held cards, private controls/inspector/refresh and
no root390px overflow remain. Controlled positions are labeled and only QA
rooms change. [Scope, commands and bounded evidence](NEXUS_CARD_RULES.md#paired-e1e2-tech-and-stronghold-composition--4-october-2026)
preserve mixed-family/E3/Skills/HW/public/deployment and pending-ruling gates.
Code **9f254a6912e7b9e9f24234ffceae010eb5c08796** is pushed. Final28
module/guide cases, types/lint and exact-revision build pass; rebuilt QA marker
**9f254a6** displays both preserved outcomes and the updated390px guide.
Exact [CI37188948092](https://github.com/Quintine/Dune/actions/runs/37188948092) /
container job111396870925 completes successfully: isolated storage/HTTP
verification step7 precedes verified image publication step9. Publication is
not deployment; live **ab5c782** remains last observed.

**Classic Nexus / Tech / Strongholds — bounded Development Verified:**
fresh classic/base33/all12 Nexus composes Tech3..6 Basic/Advanced and/or
Advanced Strongholds2..6, without Skills, public starts or new rulings.
New24/affected188, final34 guide/module cases, types/lint/build, fourteen
actual programs and all four legal free-return policies pass. Eight genuine
four/five-seat games complete4,440 accepted actions/no rejection/116 JSON
continuations; five-seat samples include five real closing Nexus choices.
Original CLI **DPA6UGWK v10 / HXEMRA32,FQNN62UG v8** keeps undealt setup.
Human390px **HXEMRA32 v13/movement** returns2 normal+1 actual Sardaukar,
ordinary/free3 and elite1; real Axlotl1 stays pending at wallet12 then collects13.
**FQNN62UG v14/Mentat** ships5 for original Guild3 (wallet12→9),
Heighliners1 stays unavailable until real phase end and pays Harkonnen10→11.
**DPA6UGWK v18/Collection** pays bank2/own4 for support6, keeps Shield,
loses6 ordinary/no starred counters and retains1 Arrakeen survivor. Guild
spends Moritani to retain played Crysknife before original Heighliners transfer;
Emperor spends CHOAM to inspect only unused Trip to Gamont. Separate city2
yields wallet8. Actual controls, inspector, refresh and guide have no root390px
overflow. Controlled positions are labeled; no natural free-return/inspection
claim. [Scope and evidence](NEXUS_CARD_RULES.md#classic-tech-and-stronghold-composition--4-october-2026)
retain native Fremen on-planet and native-Guild-only industry exclusions.
Other modules, unresolved effects, full/public/deployed acceptance remain open.
Code **8ceee7afd097d36e2ae7471b744d127062e39c29** is pushed.
[Exact CI37181553391](https://github.com/Quintine/Dune/actions/runs/37181553391),
container job111374984514 completed/success: mandatory isolated storage/HTTP
step7 and subsequent verified-image publication step9 both pass:
`ghcr.io/quintine/dune:sha-8ceee7afd097d36e2ae7471b744d127062e39c29`.
Final rebuilt QA marker shows8ceee7a and retains original human v18/Collection,
v13/movement andv14/Mentat. Owned script/tabs are removed; store/proof remain.
Publication is not deployment; live **ab5c782** remains last observed.

**Native Tech / Strongholds without Skills — bounded Development Verified:**
fresh selected E1/E2 native or standalone Ecaz OR Moritani entry preserves
original Tech3..6 Basic/Advanced and optional Advanced Strongholds, without
Skills or public-start changes. New32 cases are included in affected187/187;
final types/lint, rebuilt surface and two final entropy consumers pass.
Thirty original admission probes, both below-three rejections, twelve actual
native programs and all four legal Face Dance policies pass. Fifteen genuine
three-seat games complete4,902 accepted actions/no rejection/125 JSON continuations.
Human390px **BZVLA22D v21/Mentat** chooses native Ecaz lead, real dial5/
support1/Sanya4 versus dial2/Bashar2:9–4, fixed Ecaz3/Guild3 casualties,
held Tabr2 income, native2+1 survivors and original Axlotl+Heighliners.
**YENG8B6U v15/Mentat** keeps losing Tuek4/support1, Master3 bounty/death,
wallet18, Guild winner Tech and one actual private Bashar replacement.
Original CLI v8 setup, refresh, public owner labels and updated reference pass;
root390px has no overflow. Controlled positions are labeled; no natural
assassination claim. Read [scope and evidence](EXPANSION_FACTIONS_PROTOTYPE.md#native-tech-composition--4-october-2026).
Other overlays, pending rulings, public starts and full/deployed acceptance
remain open. Existing games and the user PDF are preserved.
Code **2da3c9273b02efd06c283999c225f56e62214dd1** is pushed.
[Exact CI37175645562](https://github.com/Quintine/Dune/actions/runs/37175645562),
container job111357583598, completed/success: mandatory isolated storage/HTTP
step7 and subsequent verified-image publication step9 both pass:
`ghcr.io/quintine/dune:sha-2da3c9273b02efd06c283999c225f56e62214dd1`.
Final rebuilt QA marker shows2da3c92; original human v21/v15 Mentat outcomes
remain. Owned drivers/tabs are removed; rooms/store persist. Publication is not
deployment; live **ab5c782** remains last observed.

**Standalone E3 Skills / Tech / Strongholds — bounded Development Verified:**
fresh original Ecaz OR Moritani ecaz33/all14 profiles preserve Tech3..6
Basic/Advanced and Strongholds2..6 Advanced, optionally both. Original
Ecaz ordinary-five/Duke assignment and Advanced-Hark exclusions, skill-first
Moritani assassination/normal-call forfeiture and unrelated guards remain.
New15/affected152, types/lint/build and nine actual programs pass. Eight genuine
E3 games complete1,531 actions/no rejection/38 JSON continuations; broader47
games complete13,936 actions/no rejection/358 continuations on unchanged source.
Original CLI **X4YSWBLR/BJH3UVQF v8** keeps genuine setup and unused modules.
Human390px **334W75B6 v13/Collection** uses normal Warmaster1/Duke6/Carthag
Shield for a real7–6 poison-surviving win, living release and sole Axlotl.
**AL6WCG8B v13/Mentat** retains normal Guild Suk rescue, actual losing
Tuek income/support, printed Master3 bounty/skill return, winner Tech and one
private Caid replacement. Collection stays separate; refresh/no overflow pass.
Controlled positions are labeled. E3 pairs/mixtures, allied Occupy skills,
other overlays, public starts, save conversion and new rulings remain excluded.
See [scope and source-bound evidence](LEADER_SKILLS_RUNTIME.md#standalone-e3-module-composition--4-october-2026).
Full rules, assurance, AI, public and deployed acceptance remain open.
Final guide10/10, types/lint/build and rebuilt390px E3 reference pass
(351px topic, no overflow). Final isolated reload retains original human
v13/Collection andv13/Mentat; owned drivers/tabs are removed, rooms/store remain.
Code **2b7202161170a7e0c108389c273b0cc1591603ac** is pushed.
[Exact CI37165705653](https://github.com/Quintine/Dune/actions/runs/37165705653),
container job111328037714, completed/success: isolated storage/HTTP step7
and subsequent verified-image publication step9 both pass:
`ghcr.io/quintine/dune:sha-2b7202161170a7e0c108389c273b0cc1591603ac`.
Publication is not deployment; live **ab5c782** remains last observed.

**Advanced Skills / Stronghold Cards — bounded Development Verified:**
fresh classic or supported E1/E2 native2..6 Advanced preserves original
all14 skills/six unused cards; optional Tech requires3..6. Original setup,
decks/cache/wallets, real end-Mentat card control and printed/first-Storm Tech
remain. No Basic Strongholds, E3/other overlays, public starts, save conversion
or unrelated rulings. New21/affected277/final fixture-consumer72 cases,
types/lint/build and twelve actual rule programs pass. Twenty-two genuine
paired/triple-module3-seat games complete6,672 actions/no rejection and171
JSON continuations on captured unchanged source. Original CLI **J5AAWGEQ v8**
and **NY6Y4J4K v10** retain real setup and unused Strongholds/native Tech.
Human390px **HERCFX3B v20/Mentat** pays4 after Arrakeen bank2, rescues3,
retains Shield and original winner Tech, then collects separate Banker12→13.
**PG2GR3RC v26/Collection** declares real HMS copy and uses bank1/own0,
typed4 Suboid+2 cyborg losses and real rescue before original Axlotl reward.
Market/phase openings remain native; refresh retains both versions/outcomes.
Controlled positions are labeled, not claimed natural histories. Original
copied-Diplomat/skill-Stone and other guards remain. See
[combined scope and source evidence](LEADER_SKILLS_RUNTIME.md#advanced-stronghold-composition--4-october-2026).
Full combinations, assurance, AI, public and deployed acceptance remain open.
Final guide10/10, types/lint/build and rebuilt390px reference pass (351px topic,
no overflow); original human v20/Mentat andv26/Collection remain after the
final isolated QA reload. Owned drivers/tabs are removed; rooms/store remain.
Code **f259488a9a6a507d450c5134f6f627ea2151256b** is pushed.
[Exact CI37159813365](https://github.com/Quintine/Dune/actions/runs/37159813365),
container job111310738376, completed/success: isolated storage/HTTP step7
and subsequent verified-image publication step9 both pass:
`ghcr.io/quintine/dune:sha-f259488a9a6a507d450c5134f6f627ea2151256b`.
Publication is not deployment; live **ab5c782** remains last observed.

**Native E1/E2 Leader Skills / Tech Tokens — bounded Development Verified:**
fresh supported Ixian/Tleilaxu/CHOAM/Richese Basic/Advanced3..6-seat entries
preserve canonical unused tokens, original family decks/all14 skills, Richese
cache and native setup/first-Storm owners. Other overlays/E3, public starts,
save conversion and unrelated rulings remain excluded. Existing Richese
Banker invoice validation admits native marker/event fields; payment, typed
casualties, Suk/card cleanup and original winner Tech before Face Dance remain.
Native52/52, shared261 passing plus the corrected exact obsolete-rejection case,
types/lint/build and nine actual rule programs pass. Seventeen genuine3-seat
games (fifteen native) complete5,733 actions/no rejection and149 JSON
continuations on unchanged source. Original CLI **VQ3AVFTC/M7HPHNTN/PQ6U2X4S**
retain native setup atv7. Human390px **7RPHJN87 v15** rescues actual mixed
Suboid/cyborg losses before retaining Shield and taking sole Axlotl;
**F244P8DT v8** replaces actual board/reserve sources after original Guild
Tech reward, preserving win/cards/bounty; **YWVH5XQF v8** ships concealed5
plus one free physical companion for1 while original Tech and unavailable
Banker currencies remain separate. Refresh preserves those versions/outcomes.
See [scope, source pages and evidence](LEADER_SKILLS_RUNTIME.md#native-e1e2-tech-tokens-composition--4-october-2026).
Full combinations/assurance/AI/public/deployed gates remain open.
Final guide10/10, types/lint/build and rebuilt390px native reference pass
(351px topic, no page overflow). Original human versions remain after the
final isolated QA reload; owned temporary drivers/tabs are removed.
Code **219489ae04896ab838735a25091b76a3e4e5bd24** is pushed.
[Exact CI37156345578](https://github.com/Quintine/Dune/actions/runs/37156345578),
container job111300388598, completed/success: isolated storage/HTTP step7
and subsequent verified-image publication step9 both pass:
`ghcr.io/quintine/dune:sha-219489ae04896ab838735a25091b76a3e4e5bd24`.
Publication is not deployment; live **ab5c782** remains last observed.

**Classic Leader Skills / Tech Tokens — bounded Development Verified:**
fresh classic3..6 Basic/Advanced `leader-skills` and separate `banker-income`
preserve unused selected Tech Tokens with base33/all14 and original setup/
first-Storm ownership. Native rosters and other overlays remain separate;
no public start, played-game conversion or pending-ruling change is added.
New25 and affected shared/CLI146/146, types/lint/build and seven native programs
pass. Eight genuine Basic/Advanced3..6 games complete2,712 accepted actions,
no rejection and69 JSON continuations on a stable source tree. Original
**WHTKGXEJ/5YMNGCCT v7** retain native skill/prediction setup and unowned tokens.
Human390px **63LV57W2 v13/Mentat** ships physical5 at actual Smuggler cost4:
native wallet10→6, separate Emperor Heighliners1 and Atreides Banker-front1.
At phase end Emperor10→11; ordinary city income takes Banker10→12 while its
front1 stays unavailable. Original readiness collects it once to13; refresh
keeps the empty pile. **HC35JG8P v18/Collection** retains a genuinely earned
two-token opponent. Skilled Staban5/dial4/support4/Crysknife/Shield wins9–0;
Suk keeps one and returns two, leaving original Guild Hagga5/reserves12/Tanks3
(including two earlier casualties). Actual card cleanup keeps both; human takes
only Axlotl, Emperor keeps production. Wallet3 before separate board Collection6
becomes9 after refresh. Original optional Diplomat decline, rescue and mandatory
token choice use existing controls. The guide is351px within390px.
Controlled positions are labeled, not claimed natural histories. Owned drivers/
tabs are removed, rooms/store remain; full assurance/AI/public/deployed gates stay.
See [native scope and evidence](LEADER_SKILLS_RUNTIME.md#classic-tech-tokens-composition--4-october-2026).
Final guide10/10, types/lint/build and the final rebuilt390px reference pass;
the final isolated QA reload retains human v13/Mentat and v18/Collection.
Code **b71f953635e013dab3fd184baf01523681883fdc** is pushed.
[Exact CI37146422525](https://github.com/Quintine/Dune/actions/runs/37146422525),
container job111271205483, completed/success: isolated storage/HTTP step7
and subsequent verified-image publication step9 both pass:
`ghcr.io/quintine/dune:sha-b71f953635e013dab3fd184baf01523681883fdc`.
Publication is not deployment; live **ab5c782** remains last observed.

**Standalone E3 Stronghold composition — bounded Development Verified:**
fresh Advanced `stronghold-factions` admits native Ecaz OR Moritani with classic
opponents, the exact ecaz33 deck and six Stronghold Cards alone; Moritani excludes
Harkonnen. Original setup/end-Mentat control, Ecaz selected-holder-only effects
and Moritani native loss/assassination compose without public or played-game
changes. E3 pairs, mixed families and unrelated overlays remain separate.
Affected native/CLI179/179, final Richese8/8, types/lint/build and original
controlled rule programs pass. Four genuine E3 two/three-seat games complete642
accepted actions/no rejection,15 JSON continuations and3 battles, with no natural
assassination claim. Original CLI **XK8X548M/HALWWQ6V v6** retain Traitor setup
and six unowned cards. Human390px **N5SQHZE4 v18/Mentat** uses actual Ecaz lead,
total6/support3/Sanya4/Shield: fixed Ecaz3 is free, actual bank2/personal1 takes
native wallet1→0 before separate Collection2 each. Ecaz2/Guild1 survive; Shield
remains held, Ecaz wallet2/Guild7 after refresh. Human390px **ANUJE8L5 v11/Mentat**
reveals Master Bewt printed3 after actual losing Tuek income4/support1:
wallet15→18, original Guild three-dial casualties once, one private Burseg
replacement and public retired card. Actual enlarged faces are readable at390px.
The controlled boards/cards are labeled, not claimed natural history.
See [scope and source effects](STRONGHOLD_CARDS.md#standalone-e3-stronghold-composition--4-october-2026).
Full combinations/assurance/public/deployed acceptance remain open.
Final guide10/10, types/lint/build and the rebuilt390px guide pass (351px topic).
The final QA worker reload preserves both original Mentat versions; owned
temporary drivers and managed tabs are removed.
Code **39e2954ab468aa252d91a33e2e0b52f99a2fe135** is pushed.
[Exact CI37133540369](https://github.com/Quintine/Dune/actions/runs/37133540369),
container job111233294920, completed/success: isolated storage/HTTP verification
and subsequent verified-image publication both pass:
`ghcr.io/quintine/dune:sha-39e2954ab468aa252d91a33e2e0b52f99a2fe135`.
Publication is not deployment; live **ab5c782** remains last observed.

**Basic Ecaz Occupy even-force — bounded Development Verified:**
fresh Basic `ecaz-occupy` now admits native Ecaz with classic or optional
Moritani opponents and the exact `ecaz` deck, no optional modules. Genuine
setup, original Nexus/worm alliance, shipments, Karama and Collection remain
native; older played Basic tables are not retrofitted. For an even Ecaz force
count the publisher page-8 paragraph and the page-15 example agree, so the
contribution and ordinary-win Ecaz losses are E/2. Their odd-count examples
still contradict each other, so an uncanceled odd Basic count is rejected at
the original battle choice before any lead frame is saved — not rounded,
canceled or replaced. Advanced keeps its separately authorized ceiling
arithmetic. Basic has no Emperor/Fremen elite inventory and its supplied
support normalizes to zero, so the shared editor blocks nonzero support rather
than inventing a Basic payment rule.
The pure coalition quote now requires an explicit `advanced` band with no
default or alias; every production re-quote caller passes the actual band.
Affected Basic/helper cases47/47, the affected Advanced/CLI union352/352 on a
stable tree, types and lint pass. Five genuine Basic two-through-six-seat games
were run: four complete with 2,090 accepted actions, no rejections and 54 JSON
continuations; four-seat seed **20261299** is captured at the preserved
odd-count conflict after 321 accepted actions. It is not rerun or bypassed.
Those four completed natural games contain no coalition lead choice, so the
actual coalition arithmetic evidence comes from the controlled programs and the
human path. Authenticated human390px **FEJ6SBFB v14** kept the admitted
Ecaz/Guild/Emperor seats and native wallets, then used a conserved even-force
board after a genuine Nexus alliance. The table showed the correct Basic labels:
a total-dial slider bounded2..6 (2 fixed Ecaz strength for four Ecaz forces,
variable pool Guild's four) with no spice-support control. Real sealed plans
(Ecaz Sanya4 plus total dial4 against Emperor Hasimir6) produced an8–6 Ecaz win;
the log and state record Ecaz's two mandatory Occupy casualties, Guild's two
variable casualties, and the Emperor's eight territory forces to the Tanks. Every
seat remains at20 physical forces after refresh. See
[Basic even-force source](ECAZ_OCCUPY_RULES.md#basic-even-force-composition--4-october-2026).
Full combinations/assurance/public/deployed acceptance remain open.
Code **5f082696a60ac8b75e3eb4bcaa042826526fbdac** is pushed.
[Exact CI37116854539](https://github.com/Quintine/Dune/actions/runs/37116854539),
container job111185228169, completed/success: isolated storage/HTTP verification
and subsequent verified image publication both pass:
`ghcr.io/quintine/dune:sha-5f082696a60ac8b75e3eb4bcaa042826526fbdac`.
Publication is not deployment; live **ab5c782** remains last observed.

**Native Ecaz ordinary-disc Skills — bounded Development Verified:**
fresh Basic/Advanced Ecaz with classic opponents retains the exact `ecaz` deck,
all fourteen skills, five native assignment discs and original Loyalty/setup.
Ordinary role scores, physical Suk rescue, trainer death/own revival and
Ambassador handlers compose. Separately acquired Duke6 gets only normal
Warmaster1, not trained-disc3; release/death preserves the actual native trainer.
Existing-skilled Ecaz paid5 Duke revival retains the earlier living set-aside
result. Shared-Duke assignment, combined Occupy skills, Advanced Harkonnen and
other roster/module boundaries remain explicit.
Affected67/67, types/lint/build and twenty controlled programs pass. Ten genuine
Basic/Advanced two-through-six-seat games complete4,264 accepted actions/no
rejection,110 JSON continuations and59 battles, including50 Ambassador choices
and one Suk rescue. Original CLI **24HGMJCD v4** retains native setup.
Human390px **LQWE8TZM v18** keeps admitted seats, then uses a conserved
pre-placement board. Actual Ecaz token costs1, Emperor reserve arrival costs1,
and the original owner acquires Duke. A second conserved board/card position
retains that actual acquisition. Real face-up Sanya Ecaz/Warmaster, Duke6,
Baliset and dial0 beat Captain Aramsham5/dial2/support2 by the original7–7
aggressor tie. Native cleanup keeps Baliset and releases living Duke; refresh
retains Collection/wallet11/eight real Wind Pass counters/Tanks0 and unchanged
training. Opponent's owned view retains wallet7 after the actual two-spice
support. The enlarged Duke component is readable at390px.
See [native scope](LEADER_SKILLS_RUNTIME.md#native-ecaz-ordinary-disc-composition--4-october-2026).
No natural-history claim for controlled positions, full assurance, calibration,
public activation or deployed acceptance.
Final native/guide19/19, types/lint/build and hydrated390px guide pass
(351px topic). The updated Duke inspector now states the implemented
revival/native-skill scope; actual visible proof and QA worker reload retain
human v18/Collection/wallet11/eight counters/living set-aside disc.
Owned temporary drivers/tabs are removed; original games and store remain.
Code **f17f4e703eb09d0870abb3233974da2f31f24bea** is pushed.
[Exact CI37110175538](https://github.com/Quintine/Dune/actions/runs/37110175538),
container job111166376104, completed/success: isolated storage/HTTP verification
and subsequent image publication pass:
`ghcr.io/quintine/dune:sha-f17f4e703eb09d0870abb3233974da2f31f24bea`.
Publication is not deployment; live **ab5c782** remains last observed.

**Native Richese Skills and contribution recipients — bounded Development Verified:**
Basic/Advanced fresh native Richese retains its required CHOAM deck, separate
ten-card cache, original setup and all fourteen skills. Canonical green
Richese Specials can supply Planetologist strength without their native effect;
marker-only force loss feeds actual capped Suk rescue. Ordinary allied
declarations and own Smuggler companions retain their separate physical rules.
Advanced Richese ally contributions now go to Emperor/bank, separately from
buyer-to-Richese credit; Basic keeps its publisher receipt. Normal Banker
uses only final bank legs and cannot spend deferred spice before native Mentat.
Final affected rule/CLI union151/151, types/lint/build and eleven controlled programs pass.
The genuine29-game batch is **not green**:28 finish11,788 accepted actions,
303 JSON continuations and130 battles; six-seat Advanced seed20261267 stops
after1,523 actions at the retained exhausted-cache count ruling guard.
The captured state/report remain intact; selected two/three-seat follow-ups
finish without rejection after native marker eligibility integration.
Original CLI **FXK6Z8BW v6** retains setup. Human390px **358WLPYA v16**
uses original admitted identities followed by a conserved zero-marker battle:
Ein5/Residual Poison/+2 wins7–7, without its native leader-kill effect or any
physical marker casualty. Original cleanup/refresh reaches Collection with
reserves20/Tanks0. Human **E2K2U5ZW v26** uses real funded cache controls:
buyer4/Richese4 buys one Ornithopter for8, Richese earns buyer4 and donor4 goes
to bank. Guild Banker earns one unspendable front-shield spice, retains it
through original Revival/movement/Collection, and collects once at Mentat
(wallet6→7); refresh keeps the empty pile. The detailed guide is readable at
390px (351px topic). See [native scope and evidence](LEADER_SKILLS_RUNTIME.md#native-richese-composition--4-october-2026)
and [Advanced recipient authority](RICHESE_AUCTION_RULES.md#authorized-advanced-contribution-recipients--4-october-2026).
Mixed own No-Field, exhausted-cache arithmetic, special-lot Technology,
positive Black Market self-bidding and other existing rulings remain gated.
No full assurance, calibration, public activation or deployed evidence.
Code **032b41aa8721fd869a1b25d0fd29213c22b9ba69** is pushed.
[Exact CI37107445770](https://github.com/Quintine/Dune/actions/runs/37107445770),
container job111158645504, completed/success: isolated storage/HTTP verification
and subsequent verified image publication both pass:
`ghcr.io/quintine/dune:sha-032b41aa8721fd869a1b25d0fd29213c22b9ba69`.
Final guide10/10/build and fresh390px visible guidance pass; the reloaded
isolated QA worker retains human payment v26/Mentat/wallet7/empty deferred pile.
Owned throwaway drivers/tabs are removed; captured games and store remain.
Publication is not deployment; live **ab5c782** remains last observed.

**Advanced Moritani Skills — bounded Development Verified:**
all fourteen skills now compose with the original native/classic non-Harkonnen
assassination preview, exact `ecaz` deck and five native assignment discs.
Winner Suk rescue and Rihani choice precede assassination; completed casualties
do not replay. Actual trained-disc death returns its card once with only printed
bounty; normal traitor revelation still forfeits assassination for the game.
Affected64/64, CLI2/2, final native/guide25/25, types/lint/build and nine
controlled runtime cases pass. Five genuine games finish1,425 accepted actions/
no rejection,37 JSON continuations and24 battles; none opens assassination.
Fresh original CLI **7JGUWMAP v6** retains setup. Human390px **TQH86DL4 v20**
uses original admitted identities followed by a conserved battle/traitor/hand/
disc position. Actual Captain Aramsham5 plus normal Warmaster1 beats Vando1,
then native Moritani reveals the different Hasimir Fenring6, gains6 and returns
Warmaster once. Actual winner Trip to Gamont disposal and native Mentat produce
one private replacement; owned enlarged inspection and refresh keep wallet18/
Tanks8 with the retired card absent from the hand. The detailed current guide
is visually readable at390px (351px topic).
See [native Moritani composition](MORITANI_LEADER_SKILLS.md#advanced-assassination-composition--4-october-2026).
Basic/Harkonnen entries, Ecaz/Duke assignment, ordinary/private-step UX and
other roster/module gates remain. No full assurance, AI calibration or deployment.
Code **d41a7e03a94bcc785e1417d26a882c5f6dc2ac4e** is pushed.
[Exact CI37100245846](https://github.com/Quintine/Dune/actions/runs/37100245846),
job111138195904, completed/success: isolated storage/HTTP verification and
subsequent verified image publication pass:
`ghcr.io/quintine/dune:sha-d41a7e03a94bcc785e1417d26a882c5f6dc2ac4e`.
No deployed claim; live **ab5c782** remains last observed.

**Advanced Tleilaxu Skills and foreign gholas — bounded Development Verified:**
native Tleilaxu, optional Ixians/CHOAM and classic seats now compose all fourteen
skills with original half-price foreign revival and no foreign skill draw.
Native trainer normal bonuses, own revival, dead-ghola negotiated return,
Harkonnen capture/revelation/use-return/execution and Face Dance retain their
original handlers. Actual captured-plan revelation exposed a new integrity
overconstraint; it now permits the original public disclosure transition.
Affected56/56, native CLI3/3, types/lint/build and nine controlled runtime cases
pass. Fourteen genuine games finish6,620 accepted actions/no rejection,
171 JSON continuations,62 battles, two foreign and five own leader revivals.
Original CLI **H485PLF5 v6** retains native setup. Human390px **VNQ5PF54 v33**
begins at an explicitly conserved Revival/Worthless/storm position after
genuine setup, then uses actual foreign revival, funded shipment and battle:
Bashar costs1, no skill offer; two real Wind Pass counters cost4; face-up Zoal's
Warmaster gives the foreign Bashar2 exactly+1 with Trip to Gamont, defeating
Caid3 on the aggressor tie3–3. Actual cleanup/opening reaches Collection with
two board counters, wallet0 and the living controlled foreign disc after refresh.
The detailed current guide is visually readable at390px. See the
[native Tleilaxu contract](TLEILAXU_LEADER_SKILLS.md#advanced-native-composition--4-october-2026).
Basic/public starts, captured replacement, Advanced Atreides Suk/KH and other
optional-module/ruling gates remain. No full assurance or deployed claim.
Final native15/15, all nine runtime cases and types/lint/build pass after
per-action public-profile validation is computed only once when foreign discs
exist. The final isolated build retains human v33/Collection and CLI v6/setup.
Code **d86d2088e6acc020e44bda0dfbba5093ec98df8f** is pushed.
[Exact CI37095454758](https://github.com/Quintine/Dune/actions/runs/37095454758),
job111124330662, completed/success: isolated storage/HTTP verification and
subsequent image publication both pass:
`ghcr.io/quintine/dune:sha-d86d2088e6acc020e44bda0dfbba5093ec98df8f`.
Publication is not deployment; live **ab5c782** remains last observed.

**Advanced native Ixian/CHOAM Leader Skills — bounded Development Verified:**
fresh two-to-six-seat native Ixian and/or CHOAM plus classic tables retain
all fourteen skills, distinct required family decks and genuine native setup.
Typed support, mixed Suk rescue and native Suboid substitution compose; CHOAM
keeps Auditor exclusion, original support payer/income and Smuggler Collection
order. Explicit private Mentat and separate normal Banker opt-ins also retain
their original boundaries. Basic/public starts and unresolved rulings are unchanged.
Affected122/122, types/lint/build, ten controlled actual native programs and
three genuine CLI games pass:511 accepted actions/no rejection/twelve JSON
continuations. The natural games contain no battles, so they do not certify
battle effects. Fresh CLI **KFW75TCB v6** and human390px **ARRHUS7Z v20**
preserve original seats; actual typed-loss/rescue/substitution controls reach
Collection after refresh with wallet9, three board counters including one
cyborg and four Tanks counters. Controlled battle positions are staged after
genuine setup, not represented as natural histories. See the
[Advanced native skill contract](LEADER_SKILLS_RUNTIME.md#advanced-native-ixian-and-choam-composition--4-october-2026).
Full assurance/deployment remains open; live **ab5c782** remains last observed.
Final CLI2/2 and native/guide18/18 pass after the contract update. The latest
isolated build preserves human v20/Collection/wallet9; its native-scope guide
is visually readable at390px (351px topic width).
Code **7ee064df14b79a06d41317f9f8eb193e078d2219** is pushed.
[Exact CI37092109758](https://github.com/Quintine/Dune/actions/runs/37092109758),
job111114441767, completed/success: isolated storage/HTTP verification and
subsequent image publication both pass:
`ghcr.io/quintine/dune:sha-7ee064df14b79a06d41317f9f8eb193e078d2219`.
No deployed claim.

**Native Richese Occupy — bounded Development Verified:**
Richese-present Advanced tables now resolve their mandatory Ecaz coalitions
instead of rejecting unrelated native factions. Ordinary or marker-only Richese
pools retain the selected plan owner, original force owners and concealed
0/3/5 reveal timing. Stone/Mirror compare actual undialed physical counters,
including the fixed Ecaz remainder; cancellation uses only the selected own pool.
The original same-owner mixed No-Field, whole-plan disclosure, Ix Stone/Tooth,
Harass/Stone and optional-module guards remain. Basic/public starts are unchanged.
Affected363/363, types/lint, build and26 actual native programs pass.
The previously failed genuine six-native Advanced sample finishes2424 accepted
actions/no rejection/65 JSON continuations. Fresh CLI **GQ4FEWNW v8** and
human390px **T78EFNZK v22** exercise original setup, private combined total5/
support2, No-Field5 materializing only two reserves, actual owner losses and
native CHOAM income/Collection. See
[native Richese composition](ECAZ_OCCUPY_RULES.md#native-richese-no-field-and-stone-composition--3-october-2026).
The final guide is readable at390px; the original human v22 state remains at
Collection after the required isolated worker reload. A stale prior-build guide
chunk required a cache-free local navigation; deployed cache-upgrade acceptance
is not claimed.
Code **113667da55647117082c0a502eded30d8d9bdb2e** is pushed.
[Exact CI37074437398](https://github.com/Quintine/Dune/actions/runs/37074437398),
job111061051259, completed/success: original isolated storage/HTTP verification
and subsequent image publication both pass:
`ghcr.io/quintine/dune:sha-113667da55647117082c0a502eded30d8d9bdb2e`.
No deployed claim; live **ab5c782** remains last observed.



**Mixed current-fact/shipment Truthtrance — bounded Development Verified:**
structured questions now combine supported current facts with this-turn reserve
shipments in bounded nested AND/OR trees. Current facts freeze privately at a
definite answer; later legal card/force/spice changes cannot rewrite them, and
unknown is never treated as false. One eventual shipment or skip honors every
separate promise. Default public parsers reject caller-supplied frozen answers;
only the respondent receives the compiled fixed answers.
Two bounded owners supplied the pure expression logic and nested authoring
controls; one integration owner wired the question, private projection,
promise receipt, public redaction, policies and existing continuation.
Types/lint, affected88/88, mixed/reference23/23 and build pass. Eight actual
program cases cover the four truth/skip/shipment/changed-spice paths and all four
policies; nested and joint promises have rule regressions. Human390px **4PVKRRWB v10**
authored and answered the actual OR question, then spent all20 spice as a bribe, skipped shipment and
fulfilled the promise while its public answer stayed Yes. Earlier phases, other
future actions and existing module gates remain unfinished. See
[mixed compounds](COMPOUND_SHIPMENT_PROMISES.md#mixed-current-facts-and-future-shipment--3-october-2026).
Code **cd985c7c34a05057ed98b34838effdbcddb7697d** is pushed.
[Exact CI37065338944](https://github.com/Quintine/Dune/actions/runs/37065338944),
job111031663449, completed/success. Existing isolated storage/HTTP verification
and verified-image publication pass:
`ghcr.io/quintine/dune:sha-cd985c7c34a05057ed98b34838effdbcddb7697d`.
The prior full offline run exposed a pre-existing native combined-Occupy
integration failure, not an illegal bot offer; native Richese composition now repairs it.
No deployment or new assurance campaign; live **ab5c782** remains last observed.

**Requested priority — 2 October 2026:** throughput improvements are verified
and rule content has resumed. Implement all remaining rules first; comprehensive
review and save/recovery/privacy/custody assurance follow afterward, not at each
prototype. Keep legal rule behavior, usable controls, minimal legal AI and
changed-path smoke. Existing games are not reset/deleted; secret protection,
authorization and deployment/publication safeguards remain intact. Use the
[bounded context index](DEVELOPMENT.md#context-index) and
[feedback/proof schedule](DEVELOPMENT.md#feedback-and-proof-schedule).

**Native payment rules — bounded Development Verified:** `banker-income` now
admits supported Basic Ixian/Tleilaxu/CHOAM/Moritani skill rosters with all14
skills and their original single-family decks. Tleilaxu self-revival and canceled
revival income preserve actual payer debit, not the separate free-revival award.
`ixian-replacement` adds Basic Tleilaxu/classic Ix47 with Ixians absent and Nexus
alone; only this fresh variant omits optional Sandtrout. Original payment,
actual purchased-card discard/top draw and native auction suffix stay unchanged.
Two bounded owners supplied source/fixtures; one integration owner repaired
the two real revival bank-hook gaps and the premature Ix Mentat smoke endpoint.
Types/lint, affected110/110, final native/guide26/26 and build pass.
Twenty-eight actual programs cover12 Banker cases,12 replacement cases and4
post-income policy continuations. Human390px **86WQMSZV v18** proves actual
four-spice self-auction, deferred1 with Ix wallet10, then real Mentat11;
**NMFTVV6N v8** proves Thumper→Amal, spent Ixian Nexus, unchanged buyer3
and original Emperor10→12 before phase4 opening. Genuine CLI **7B55PLA5 v8**
and **XLFRHKPF v6** preserve original native setup. No new assurance campaign,
public start, pending ruling answer or old-game retrofit. See
[native Banker](SPICE_BANKER_RUNTIME.md#basic-native-banker-integration--2-october-2026)
and [native replacement](NEXUS_IXIAN_REPLACEMENT_RULES.md#native-basic-tleilaxu-integration--2-october-2026).
Final reference10/10 and build pass; both390px Partial/Development Verified
guides show the native boundary, and eleven changed-region local links/anchors
are valid. All owned tabs/workers are closed and five smoke drivers removed;
private inputs/CLI backups remain outside the checkout.
Code **b83d75d9d313d2ff1926e11f2155ea0c78ed1757** is pushed.
[Exact CI36999767861](https://github.com/Quintine/Dune/actions/runs/36999767861),
job110814548718, completed/success. Existing isolated storage/HTTP verification
and subsequent verified-image publication pass:
`ghcr.io/quintine/dune:sha-b83d75d9d313d2ff1926e11f2155ea0c78ed1757`.
No deployment or new assurance campaign; live **ab5c782** remains last observed.


**Native Mentat preview — bounded integration:** explicit fresh
`--profile leader-skills --mentat-question` connects the existing private
question to supported Basic Ixian/Tleilaxu/CHOAM/Moritani skill starts.
Exact/default weapon roles, compulsory held-card or fallback disclosure,
posture and native battle continuation reuse the existing controls and policies.
Five new behavior cases and twelve actual runtime scenarios pass; the affected
inquiry/lifetime rule batch passes45/45. Uniform-response UX, empty hands,
Advanced native skills and other modules remain pending; public/default starts
are unchanged. See
[native scope](MENTAT_QUESTION.md#native-skill-integration--2-october-2026).
Final types/lint, build and guide/inspector12/12 pass; eighteen changed-region
local links/anchors are valid. Genuine flagged CLI room **BGK6YQCK v6** reaches
native Ixian setup. Human390px **8HTTTZMA v9** asks for Weirding Way, answers
privately, inspects the observation and conceals the native Mentat. Fresh
**6ZR8HPWD v6** verifies Reinforcements' own inspector/topic and battle-slot
hand explanation without changing its provisional outcome cost.
Code **589e1b9df245cff4577f9c1d0094eca3f6db4b29** is pushed.
[Exact CI36990728282](https://github.com/Quintine/Dune/actions/runs/36990728282),
job110786065439, completed/success. Existing isolated storage/HTTP verification
and verified-image publication both pass; image
`ghcr.io/quintine/dune:sha-589e1b9df245cff4577f9c1d0094eca3f6db4b29`.
No deployment or new assurance campaign; live **ab5c782** remains last observed.


**Authorized Advanced Moritani forfeiture:** the supplied PDF physical35 resolves
the old duration question: a normal own-Traitor-Card reveal forfeits Assassinate
Leaders for the rest of the game, across turns and opponents. The persisted
normal-call flag already enforced that scope; guidance, public history and the
log now name the sourced forfeiture. Basic, exceptional leader custody and the
private-step UX preview gates are unchanged. A permanent engine regression
exercises a genuine turn advance plus a real later loss with no opportunity and
the owner-facing forfeiture reason. See
[the cutover](MORITANI_ASSASSINATE_LEADERS.md#authority-and-advanced-duration-cutover)
and [authorized source](RULE_DECISIONS.md#authorized-source-amendment--1-october-2026).
Final types/lint, coherent assassination/guide38/38, build and390px Prototyped
guide pass; four changed-region local links/anchors are valid.
Code **934b2ee4d7c5d41905bb339a62b64fb8824d2034** is pushed.
[Exact mandatory CI36986837326](https://github.com/Quintine/Dune/actions/runs/36986837326),
job110773684551, completed/success: existing isolated storage/HTTP verification
passed before publication of
`ghcr.io/quintine/dune:sha-934b2ee4d7c5d41905bb339a62b64fb8824d2034`.
No new assurance campaign or deployment; live **ab5c782** remains last observed.

**Independent cards + Advanced Occupy — bounded Development Verified:** fresh
explicit CLI `--ecaz-treachery` adds all three physical cards36/50/38/50.
Own Ecaz Harass returns only its floor count while original mandatory ceil
stays fixed/free; allied/opposing/canceled typed pools stay owner-labelled.
Reinforcements retains provisional own3-reserve/+2-score accounting.
Native/pure67, affected284/284 and27 actual programs/four policy seals pass.
Current46 complete games:26,619 accepted/no rejects/696JSON continuations,
source unchanged and9 combined lead choices. Full counters correct earlier
compact-summary misreading: prior five/23-game batches had1/3 choices.
Original CLI/human390px **T8T3ZYWH v12** and **WW54BZGM v12** prove own
withdrawal/fixed loss and decisive +2/own reserve cost through actual Collection.
Current mandatory-discard owner/selected-commitment blockers are fixed; Basic/
unprofiled co-side guard stays. Final scoped reviews find no defect.
See [combined-card source and proof](ECAZ_OCCUPY_RULES.md#independent-cards-with-combined-armies--2-october-2026).
Final types/lint, canonical guide10/10, build,390px bounded guide and actual
explicit-variant CLI help pass; ten changed-region local links/anchors are valid.
Owned drivers/tabs/workers are removed/closed without resetting games.
Code **cd532222a5dd098dc7a4a1d3ec6383f5bdde62b2** is pushed.
[Exact mandatory CI36980970342](https://github.com/Quintine/Dune/actions/runs/36980970342),
job110755165940, completed/success: existing isolated storage/HTTP verification
passed before publication of
`ghcr.io/quintine/dune:sha-cd532222a5dd098dc7a4a1d3ec6383f5bdde62b2`.
This is existing-pipeline evidence, not a new assurance campaign or deployment;
live **ab5c782** remains the last observed marker.

**Native E1/E2 Ecaz Occupy — bounded Development Verified:** existing profile
now composes Ixians/Tleilaxu/CHOAM with Ecaz/classic/optional Moritani2..6 and
distinct selected E3/E1/E2 ordinary33/47/35 decks. Physical Ix owns native
Suboid substitution, selected lead keeps card aftermath; CHOAM original paid
support shares exclude free fixed Ecaz strength. External FaceDance returns
both winning armies with combined maximum; own-winning Tleilaxu is excluded.
Native34, affected191/191, types/lint and19 actual program cases pass;23
unstaged games complete13,004 accepted/no rejects/339JSON continuations,
source unchanged. Full `results.json` records three combined lead choices;
human390px **5B4FW8D3 v12** and **UVGT4DLN v10** exercise explicit rule edges.
Two scoped rule reviews find no defect. Richese mixed planning, optional
overlays, full factions/public starts remain gated; assurance follows all rules.
See [native force-owner integration](ECAZ_OCCUPY_RULES.md#native-e1e2-force-owner-integration--2-october-2026).
Final types/lint, canonical guide10/10, build and390px expanded guide pass;
six changed-region local links/anchors are valid. Owned drivers/tabs/workers
are removed/closed without a saved-game reset.
Code **1057eb271938a92a651feebeeef13738659ec8c0** is pushed.
[Exact mandatory CI36966120859](https://github.com/Quintine/Dune/actions/runs/36966120859),
job110710144783, completed/success: existing isolated storage/HTTP verification
passed before publication of
`ghcr.io/quintine/dune:sha-1057eb271938a92a651feebeeef13738659ec8c0`.
No new assurance campaign or deployment; live **ab5c782** remains last observed.

**Advanced Ecaz Occupy — bounded Development Verified:** the authorized
supplied PDF physical32/19 resolves ceiling-half free Ecaz contribution,
floor-half ordinary survivors and selected-lead-own forces after Karama.
Whole-army Advanced storm eligibility (physical6/11) retains canonical
co-side membership for native voluntary BG advisor conversion. Basic and the
specific Ecaz-only Duke/Ghola decision stay unchanged.
Seven actual native-program cases and named repair feedback18/18 pass, with
types/lint, all four actual legal policies and two original CLI/human390px
battles: **Q5Z2WH8X v22**, Ecaz lead total9/free Fedaykin leaves Ecaz2/Fremen0;
**LZHMY454 v14**, printed Karama, own dial1/support1 leaves Ecaz2/Guild4 and
debits exactly1. Both reach original Collection. Source/rule and integration
reviews have no remaining finding. Fresh profile remains Ecaz/classic/optional
Moritani2..6 Advanced, base33/no overlays; full Ecaz and public starts remain gated.
See [the cutover and proof](ECAZ_OCCUPY_RULES.md#authorized-advanced-cutover--2-october-2026).
Final coherent affected rule/guide **173/173** passes. Current-source five
unstaged2..6 games complete:2,123 accepted actions, zero rejections and54JSON
continuations, `sourceUnchanged:true`. Full `results.json` records one
combined lead choice; the seven native cases and human rooms cover exact branches.
Final types/lint, corrected guide10/10, build and390px Partial/Development
Verified guide pass; six changed-region local links/anchors are valid.
Code **e112df858a5a3d27992d22478c5c0d4f3dfac642** is pushed.
[Exact mandatory CI36958647494](https://github.com/Quintine/Dune/actions/runs/36958647494),
job110687174806, completed/success: the existing isolated storage/HTTP verifier
passed before image publication. Immutable image:
`ghcr.io/quintine/dune:sha-e112df858a5a3d27992d22478c5c0d4f3dfac642`.
This is observed existing-pipeline evidence, not a new assurance campaign or
deployment. Live **ab5c782** remains the last observed marker.

**Development-throughput improvements implemented and verified:** default
test output preserves failures/details/stdout/stderr/counts while omitting
passing rows; `--verbose` retains full spec. Empty/bad file or name selections
and zero executed cases fail, including source-bound `verify focused --name`.
Cancellation remains non-success even when a driver exits zero. Actual tooling
contracts15/15, six negative CLI cases, positive/negative source-bound runs,
`check:quick` and206 local doc links pass. Final scoped review has no finding.
Identical15-case native rule runs emitted278 bytes/12 lines concise versus
2,455 bytes/27 lines verbose (2.35s versus2.36s: no computation-speed claim).
Named Carthag feedback took0.90s; discovery-only list0.18s. The earlier162-case
union took100.22s with different coverage; use narrow failing-case feedback
before one coherent affected batch. Canonical context index/handoff avoids
mass file moves or duplicate ruling registries. Preserved Stronghold work is
verified and Advanced Ecaz rule work has resumed; no new assurance campaigns.
Code checkpoint **e9830b6ced80c95253cfa112bb8ed2eb6e50b74c** is pushed.
[Exact mandatory CI36941218637](https://github.com/Quintine/Dune/actions/runs/36941218637),
job110632894258, completed/success: existing isolated storage/HTTP verification
passed before image publication. This is observed pipeline evidence, not a
new per-feature assurance campaign or deployment claim. Immutable image:
`ghcr.io/quintine/dune:sha-e9830b6ced80c95253cfa112bb8ed2eb6e50b74c`.


**Expanded Stronghold rules — bounded Development Verified:** selected E1/E2
native pairs/mixed Ixians/Tleilaxu/CHOAM/Richese plus classic2..6 Advanced,
ordinary decks35/47 and separate Richese cache10. Types/lint, targeted16/16
and11 actual rule-program cases pass. Eighteen unstaged games complete with
11,066 accepted actions, no rejections and290JSON restores. Human390px
original CLI rooms **G7VDY6KB v12** and **736HJUD3 v8** exercise real Stone
kill/Habbanya outcome and partial Face Dance replacement. A stale report
descriptor was fixed and exercised on all three two-seat families.
Mixed No-Field/full-plan, Stone/Poison Tooth and Ecaz questions remain guarded;
new save/privacy/custody/seat/full-suite assurance stays deferred.
Code **288870c84289bb1172bd8e21dac046fbab3b5704** is pushed.
[Exact mandatory CI36949291343](https://github.com/Quintine/Dune/actions/runs/36949291343),
job110658387235, completed/success: the existing isolated storage/HTTP verifier
passed before image publication. Immutable image:
`ghcr.io/quintine/dune:sha-288870c84289bb1172bd8e21dac046fbab3b5704`.
This is observed existing-pipeline evidence, not a new assurance campaign or
deployment claim; the last observed live revision remains **ab5c782**.

**Stronghold rule integration — bounded Development Verified:** fresh
`stronghold-factions` connects Advanced native Ixians/CHOAM plus classic2..6,
canonical combined47 Treachery Cards and six Stronghold Cards alone.
Eighteen native battle/copy cases, all four legal policy paths and five
unstaged complete games pass (3,129 accepted actions, no rejection,82JSON
restores). Earlier162 affected cases and6,513 full checks/type/lint/build
were recorded before the new assurance deferral, not rerun as a prototype gate.
Human390px original CLI room **LAUDR2WN v14** chose HMS Arrakeen copy,
sealed dial6/support3 with bank2/personal1 and completed the real battle
(personal1→0, three cyborg losses, CHOAM income1). Existing classic preview,
public expansion and pending Ecaz rounding boundaries stay unchanged.
New save/privacy/custody/seat campaigns remain deferred until all rules.
See [the bounded integration](STRONGHOLD_CARDS.md#native-ixian-and-choam-integration--2-october-2026).

The checkpoint counts, room/seat observations and live markers below are
historical evidence recorded by **2 October 2026**, tied to their named
revisions/reports. They do not describe a fresh result or require repeating
those assurance loops under the new priority.

Normal Spice Banker income now connects every reachable actual final-bank
auction, shipment, paid revival and resolved support source in fresh local
`banker-income`: unique classic2..6-seat Basic/Advanced, base33/all14-skills only.
One physical-card turn/phase stamp gains1 unavailable front-shield spice;
real native Mentat collects once before optional work/victory. No public
start, existing-game retrofit or combined overlay is activated. Original
earned-faction retention after trainer death/capture/reassignment and separate
payer/source nonaggregation remain explicit LOCAL provisional boundaries,
not an answer to the existing custody question or a publisher split FAQ.

Three implementation owners and two final independent reviews covered runtime,
canonical history and private authenticated entry/recovery; both final reviews
have no finding. Types/lint, **6,487 offline tests**, **140 focused cases** and
build pass. Eighteen native source-to-Mentat cases conserve all33 Treachery
Cards/14 skills; all four legal policies exclude deferred money from budgets.
Original private-backed-up six-seat setups **6VZ8G5BY Basic v38** and
**8TN8BTLT Advanced v31** exercised native Emperor self-auction and Guild
own-bank shipment/allow, human390px controls, refresh and final Collection
readiness to actual Mentat (original Banker wallets10→11 and3→4).
The initial26px notice squeeze was reproduced and repaired in the main column;
fresh notice width is354px. Cards/skills/normal and elite forces are conserved;
the23 prior isolated QA rooms' states/versions are unchanged. After final
guide-worker reload, all82 original seats across25 targeted QA rooms restore;
Basicv38/Advancedv31 remain at native Mentat without double collection.
Local HTTP remains **49/55 with six upstream503 rejection failures**, not green.
Guide coverage is Partial / Development Verified; final guide10/10,
types/lint/build and expanded390px guide pass. Final frozen check after the
phone repair again passes all6,487 offline cases. Code checkpoint
**6785e622a7bc8b850aa5e3d338c63be5a33a9403** is pushed.
[Exact CI run36923901367](https://github.com/Quintine/Dune/actions/runs/36923901367),
container job110576362446, is completed/success: mandatory isolated storage/
HTTP verification passes before verified-image publication. Image:
`ghcr.io/quintine/dune:sha-6785e622a7bc8b850aa5e3d338c63be5a33a9403`.
This does not turn local49/55 green or prove deployment. No deployed/full-module
claim; protected NAS rollout/restoration prerequisites remain unavailable.

Harkonnen Nexus Betrayal now connects actual personal and allied native traitor
calls, exact immediate physical retirement, the surviving original battle once
and one private actual Mentat replacement. Fresh local `harkonnen-betrayal`
retains classic/base33/Nexus-only bounds, natural card rights and original
allied counter preemption. Uniform acknowledgements are provisional; the
previously asked universal reaction-policy question remains open.
Independent review repaired an orphanable native allowance, added the public
declared-Traitor inspector and corrected wrong-face bot fixture assumptions.
Genuine sand battles/native declines replace an invalid Polar Sink fixture;
real counter-free normalization is retained, not forced into a fictitious pause.
Both final scoped reviews have no finding. Types/lint, **6,401 offline tests**,
the **138-case affected union**, final guide **10/10** and build pass.
Ten actual native cases and printed/BG preemption prove original stock and
current Mentat continuation. Four privately backed-up same-setup CLI/390px
rooms exercise human Use/Pass, actual public/own inspectors, partial refresh,
administrator owner and original native HTTP battle/Collection/Mentat once.
Saved proof retains all33 Treachery/all12 Nexus/Traitors, identity/circles,
one actual private reserve-top draw and nineteen earlier QA games.
The bounded path is **Partial development verified**, not full modes or
deployment. Final local HTTP integration is **49/55**, not green: six requests
returned the known Wrangler proxy 503. No automatic POST retry or weaker
authorization is introduced. After the final isolated worker reload, all
**70 original seats in twenty-three QA rooms** reauthenticate; saved proof
preserves all four outcomes and nineteen earlier rooms. The actual expanded
390px guide shows **Partial / Development: Verified** without page overflow.
Code **1cf8ff72c721691f1924e2f27db5936ce79dd4d2** is pushed.
Its [exact workflow](https://github.com/Quintine/Dune/actions/runs/36890229643)
and container job **110463692950** completed successfully: mandatory isolated
storage/HTTP verification and verified image publication both pass. Immutable
image: `ghcr.io/quintine/dune:sha-1cf8ff72c721691f1924e2f27db5936ce79dd4d2`.
Publication does not deploy or turn local 49/55 into green. Protected NAS
snapshot, human safe point and exact interactive deployment approval remain
unavailable; the last observed live marker remains **ab5c782**.

The authorized Advanced **leaderless Battle Plan announcement** is now
connected. Physical PDF page 11 requires disclosure before reveal when no
leader or Cheap Hero can be used; existing leader/card legality was already
enforced. Sealing that legal plan now records one public announcement and
shows a shared table notice while dial, support and other choices remain sealed.
No extra decision, cost, confirmation or serialized duplicate state is added;
Basic behavior is intentionally unchanged by this Advanced cutover.
Failing-before/passing-after privacy/refresh/duplicate regression passes.
Types/lint, **6,316 offline tests**, the **1,025-case selected union**, final
guide **10/10** and build pass. Actual native Advanced preview setup followed
by a conserved staged exhausted-leader battle proves public-before-reveal,
private other choices, JSON continuation and unchanged physical stock.
Backed-up real room `3Y5U53RW` v9 exercised human phone sealing, opponent
refresh, original reveal and native Collection continuation once. Saved proof
retains all thirty-three cards, typed forces, original identities and one
native stronghold income, with no announcement cost. The actual 390px notice
is 354px wide; all **57 original seats in nineteen QA rooms** reauthenticate.
This source-bound behavior is not a complete Advanced-game or deployed claim.
Code checkpoint **44d90bb9aea4032fb8ffda51daa64cc53d11d7f8** is pushed.
Its [exact workflow](https://github.com/Quintine/Dune/actions/runs/36862512991)
and container job **110369907670** completed successfully: mandatory isolated
storage/HTTP verification and verified image publication both pass. Immutable
image: `ghcr.io/quintine/dune:sha-44d90bb9aea4032fb8ffda51daa64cc53d11d7f8`.
This is publication, not deployment; protected NAS snapshot, human safe point
and exact interactive approval remain unavailable.
Subsequent source-frozen genuine continuation completes all ten classic
Basic/Advanced 2..6-seat samples. Combined Homeworld/Nexus samples complete
six-seat Advanced and five-seat Basic; six-seat Basic and five-seat Advanced
stop at turn-six CHOAM Charity on the existing unresolved low-Tupile income
guard. Those stops are not new crashes or permission to remove that ruling
boundary, and do not certify complete combined games.

Ixian Nexus Betrayal now connects both actual native attempts: Bidding's
extra-card inspection and Advanced Technology. Fresh local `ixian-betrayal`
uses native Ix/allowed classic or Tleilaxu, the physical Ix deck and Nexus only.
Native Karama counters resolve first; uniform public possible holders then
acknowledge before the draw/exchange. Denial/allow uses the original transition
once with exact Nexus cost, private controls, legal bots and saved continuation.
This bounded ordering/privacy is an inference, not universal publisher priority.
Original BG conversion and Harkonnen exchange suspensions retain native source
ownership; legitimate pre-offer loss of a declared Technology card retains its
spent attempt without a swap or fabricated Nexus gate. Public administrator
progress follows the same unfinished acknowledgements as the player table.
Final scoped native and privacy/administrator reviews have no finding.
Types, lint, **6,315 offline tests**, **167 affected cases**, final guide
**10/10** and build pass. Eight actual native scenarios plus both BG
Worthless-Karama interruptions retain original stock and continuation.
Four privately backed-up exact-version CLI/390px rooms prove Basic Bidding
Use, Advanced Technology Use, wrong-face Bidding Pass and two-receiver
Technology all-pass with partial refresh. Read-only proof retains all
forty-seven Treachery/twelve Nexus cards and fourteen earlier QA games.
The bounded path is **Partial development verified**, not full Ixian/Nexus
completion, a public start or deployed acceptance.
After the final isolated worker reload, all **55 original seats in eighteen
rooms** reauthenticate; exact saved proof preserves all four outcomes and
fourteen earlier games. The actual phone guide shows **Partial / Development:
Verified** at 390px without horizontal overflow. Current HTTP integration is
**52/55**, not green: three requests returned the known Wrangler proxy 503.
No authorization weakening, automatic write retry, reset or deployment follows.
Code checkpoint **cdfe0e5370d6fd9f6844f064bafd8198ce897252** is pushed.
Its [exact container workflow](https://github.com/Quintine/Dune/actions/runs/36858699841)
and container job **110357305474** completed successfully: mandatory isolated
storage/HTTP verification and verified image publication both pass.
Published immutable image:
`ghcr.io/quintine/dune:sha-cdfe0e5370d6fd9f6844f064bafd8198ce897252`.
This proxy-free CI evidence does not turn local 52/55 into green or deploy
the checkpoint. Protected NAS snapshot, human safe point and exact interactive
deployment approval remain unavailable; the last observed live marker is
**ab5c782**.

Five implementation lanes connected the missing Ixian Nexus Secret Ally
purchased-card replacement through fresh local `ixian-replacement`: exact
normal paid/printed-Karama source, own private controls, native discard/draw
and original fee/income/auction suffix once. Full hands and genuinely
depleted-pool same-card redraw are supported. Native Nexus still requires
a settled alliance and has no initial deal; actual effects need three seats.
Richese origins, Harkonnen buyers, wider modules and public starts stay gated.
Independent review repaired recursive saved-history growth and silently
dropped seat-control actions. Nine Pass records now serialize to 134,145
bytes rather than 7,030,825; nonrecursive links retain source/replay checks.
Actual pending-choice Take back control now sends one 200 and preserves
the same source. Both final scoped rules/privacy reviews have no finding.
Types, lint, **6,227 offline tests**, **73 selected cases** and build pass.
Fourteen standalone native scenarios retain exact original ledger/custody,
including captured legal six-seat depletion with four reserved lots.
Three privately backed-up same-setup CLI/390-pixel QA rooms prove Basic
paid Use, Advanced printed free Use, irrelevant-face Keep, inspection,
takeback and refresh. Saved proof preserves Treachery/Nexus/forces/elites
and eleven prior QA rooms; all **42 original seats in fourteen rooms**
reauthenticate after isolated build reload. Actual expanded guide shows
Partial / Development Verified. Local HTTP is **51/55**, four POST 503s,
not green. Full families, modes, strategy and live acceptance remain open.
Code `a2b04dbfba13eeb913c93de87981a58cb6b7d99d` is pushed.
[Workflow 36829040552](https://github.com/Quintine/Dune/actions/runs/36829040552)
and its exact-source container job report completed/success. Mandatory
isolated storage/full HTTP verification and verified-image publication
both succeeded. Immutable image:
`ghcr.io/quintine/dune:sha-a2b04dbfba13eeb913c93de87981a58cb6b7d99d`.
Publication is not deployment; the last observed live revision is unchanged.


Five implementation lanes reconciled two source-clear Advanced defaults
from the authorized revised rulebook: all new post-first Storm openings
draw the Storm Deck, even without Fremen; each player's own combined-turn
end applies allied separation without waiting for the ally. Advisor
coexistence in either direction, native Ecaz and Polar Sink remain exempt.
Basic is unchanged; a genuine prior-revision recorded Advanced dial save
finishes its original sum, then uses the Deck on its next new turn.
Canonical engine quotes supply own public loss-territory names only,
with unchanged native ending, force/elite/No-Field custody and pending locks.
Four existing minimal bot policies use native availability, not a second
separation calculator. Independent rules and storage reviews have no finding.
Consumer fixture repairs retain original Storm bindings and native progress;
they do not weaken source validation or remove the allied-entry guard.
Types, lint, **6,169 offline tests**, **339 selected cases** and build pass.
Standalone native continuation covers exact owned normal/elite losses,
advisor/Ecaz/Polar exceptions, unchanged Basic and captured old Storm.
Three backed-up fresh authenticated Advanced preview rooms exercise actual
390-pixel public Storm inspection/confirmation, first/later human ending
and refresh. Read-only proof conserves physical forces/elites/Treachery,
retains the eight prior Guild rooms, and all **33 seats in 11 QA rooms**
reauthenticate after necessary isolated-worker build reloads.
The actual expanded source guide retains Partial gates and exercised evidence.
Local built-worker HTTP is **51/55**, four POST 503s, not green.
Full Advanced, wider source differences, strategic AI and live acceptance
remain open; container publication is not deployment.
Code `e1056a4db0a546400fd9a4461507f93ae6ca57d2` is pushed.
[Workflow 36814701820](https://github.com/Quintine/Dune/actions/runs/36814701820)
and its exact-source container job report completed/success. The mandatory
isolated storage/full HTTP verifier and verified-image publication steps
both succeeded. Immutable image:
`ghcr.io/quintine/dune:sha-e1056a4db0a546400fd9a4461507f93ae6ca57d2`.
This is publication evidence, not a change to the last observed live revision.


Five implementation lanes connected [Guild Nexus Betrayal](NEXUS_GUILD_RULES.md#nexus-guild-betrayal):
full funded shipment-payment replacement, including own upfront payment
and the explicit occupied-Junction override. Fresh `guild-betrayal` admits
classic/native-Guild plus base decks/Nexus, optionally genuine lobby-enabled
Homeworlds; no in-play retrofit or public start. Four typed native source
adapters retain exact payer/escrow, force custody and one shipment suffix.
Neutral public acknowledgements reveal no otherwise private fee/routes;
only own canonical eligibility exposes Use. Both scoped final reviews have
no finding after fixing precommitted Richese parents and independently
revalidating the native transport grant. Unsupported Cunning/Richese producer
overlays block before spending; outside-profile behavior stays unchanged.
Current-quote fixture progression, durable SQL rejection and same-source
private-face comparisons replace random-route/SQL-text/independent-seed pins.
Types, lint, **6,114 offline tests**, build and **147 selected cases** pass.
Eighteen standalone Basic/Advanced paid/free scenarios, eight exact-version
backed-up real CLI entries, 390-pixel Use/Pass/inspector/context-link/refresh
and read-only saved-state checks prove exact native forces, whole-fee ledger,
single donor escrow consumption and physical cards. Original authenticated
seats and all unrelated games remain preserved.
Local built-worker HTTP is **48/55**, five POST 503s plus two timeouts,
not green. Code `8a56299155d0f12c8c4678bfbe5913be71fea5bb` is pushed;
[workflow 36798718410](https://github.com/Quintine/Dune/actions/runs/36798718410)
reports completed/success for that exact source. Its mandatory isolated
full HTTP/storage verifier precedes immutable-image publication.
Full modes, strategic AI, public starts and live deployment stay gated;
container publication does not update the last observed live revision.

Five implementation lanes connect [CHOAM Nexus Cunning Kull](NEXUS_CHOAM_RUNTIME.md#bounded-nexus-kull-profile)
through the new fresh `nexus-kull` profile. Actual canonical Treachery fuel
and physical Nexus are distinct costs: Nexus spends at accepted declaration,
fuel remains held pending response, and only success disposes fuel and bans
the original actor for the phase. Distinct prevention retains fuel, leaves
Nexus spent and resumes the reserved original once; BG is still preconversion.
Review repaired counterfeit descriptor trust, native suspended-parent
ownership, nested reserved counters and CHOAM winning-payment coverage.
Verified old printed counter saves migrate their binding immutably without
enabling new choices or accepting source-omitting Use; new corrupt Nexus
selections remain rejected. The fresh Spice Deck excludes Sandtrout.
Types, lint, **6,022 offline tests**, build and actual Basic/Advanced
CLI/runtime/phone success/prevention/refresh pass with conserved physical
cards and unchanged spice. Local HTTP is **49/55**, four POST 503s plus two
timeouts, not green. Code `0d9d0a72d63b29d93161857cee2d1a2cd6acd7e3`
is pushed and [workflow 36770260638](https://github.com/Quintine/Dune/actions/runs/36770260638)
reports completed/success for that immutable source; the mandatory
isolated storage/HTTP verifier precedes image publication. Live deployment
and full-mode acceptance remain separate; no public/deployed claim.

Five implementation lanes now connect the bounded
[Richese Nexus Betrayal](NEXUS_RICHESE_RULES.md#bounded-betrayal-auction-contract--30-september-2026)
preview: original public self-cache purchase veto without payment,
and another buyer's cache/Black Market sale diversion to bank with
unchanged price, contributions, physical delivery and earned Harkonnen
bonus. Fresh `richese-betrayal` CLI entry requires paired CHOAM/Richese,
classic remaining seats, the CHOAM deck and Nexus alone. Public possible
responders acknowledge uniformly; only own canonical eligibility shows Use.
Independent review repaired escrow double-counting and post-bonus
exhausted-cache preflight. Types, lint, 5,953 offline tests, build and
80 focused cases pass. Genuine local CLI/runtime and phone controls prove
Basic veto, Advanced all-pass and Basic cache/Advanced Black Market
diversion, exact custody and refresh. Local Wrangler HTTP is **51/55**:
three POST 503s and one Advanced timeout, not green HTTP acceptance.
Code checkpoint `9c0000e469935d9f0fae1605358d5e6a2617be56` is pushed.
The [container workflow](https://github.com/Quintine/Dune/actions/runs/36720704874)
reports completed/success for that exact revision; its mandatory isolated
storage/HTTP verifier and immutable-image publication are separate from
local Wrangler and live deployment. Normal hidden self-buys, private special
acquisition, wider compositions and full-family completion remain open;
no public start or live NAS deployment is claimed.

The explicit `kull` development profile now connects printed Kull
Wahad interception in Basic/Advanced CHOAM-plus-classic rosters
with the physical CHOAM/Ix deck. Five implementation lanes delivered
the typed engine, pure policy, human controls/legal bots, authenticated
SQLite scenarios and internal guide. An original Karama stays
reserved; only a distinct eligible card can counter Kull before the
phase ban. BG is intercepted before conversion. Unpayable winning
overbid remedies remain deferred: non-CHOAM unfunded bids are
privately fenced before commitment to avoid an unfinishable payment.
Numeric UI limits and non-preview rules are unchanged. Original,
counter and Kull costs honor live promises; unproven suffixes reject
before disposal. Review exposed Auditor-parent, orphan-frame and
promise defects, which are repaired with regressions. Focused rules,
controls, legal AI and SQLite checks pass; direct smoke kept the
original card, spent one Kull and applied a phase ban without a rate.
`npm run check` passed types, lint and 5,907 offline tests; build
passed. Phone-width Basic/Advanced QA exercised Use, a distinct
counter and Decline after refresh: Basic retained the original
and phase ban; Advanced resumed BG conversion and its saved
cancellation once. Independent repair reviews found no remaining
scoped defect. Isolated Wrangler-dev HTTP passed 49/55 with five
proxy 503s and one timeout, not a green local HTTP suite.
Proxy-free workflow `36706704939` passed the full isolated
HTTP suite for `aeae152` and published its image.
Nexus Cunning Kull, wider modules and full expansion acceptance
remain separate; no public starts or live NAS deployment are claimed.

The explicit [Semuta development preview](SEMUTA_SOURCE_UPDATE_20260907.md#30-september-2026--bounded-clean-discard-runtime)
accepts a fresh Richese roster with CHOAM & Richese and optionally
the physical Ix deck. Clean public ordinary-card, paid Box, retired
Ornithopter, used Distrans, final Truthtrance, four bounded Sapho,
pre-leader Residual Poison, printed Karama canceling clean CHOAM
Charity, Inflation or Bene Gesserit Charity or settling a clean
normal-auction lot, a completed CHOAM sale or clean
Kulon/La La La/Baliset/ordinary Trip to Gamont, accepted
Jubba Cloak Worthless, battle-card and Ix-deck
Thumper/Amal discards open the same neutral offer regardless
of hidden Semuta custody.
A clean **private** normal-auction Ixian ally replacement discard
also pauses before its draw; no unknown face is shown before a
holder commits. A completed CHOAM sale pays its quoted bank spice
before the offer and resumes the same market afterward. Karama waits
after its public cost but before cancellation or the reserved lot settles.
Kulon's public card is spent before this offer; its single movement
range bonus and same turn resume only after claim or all-seat decline.
Proactive La La La likewise spends its public card before the
selected target loses remaining free revival; paid revival remains
available. Proactive Baliset spends its public card before the
selected player is barred from movement into CHOAM's occupied
territory; shipment stays legal.
Clean ordinary Trip to Gamont spends its public card before
one opponent force returns to reserves; elite and concealed
No-Field returns retain their earlier automatic path.
Accepted Jubba Cloak spends its public card before protecting
one CHOAM territory; the moving storm resolves only after a
claim or all-seat decline.
Residual Poison commits one random death before the offer; only an
uninspected battle with nobody ready qualifies. Once Around commits
bidder order and frees a slot; other Sapho scopes commit chooser or
aggressor priority. Claim or decline resumes the saved effect once.
A Black Market Semuta reserved as the offered card cannot Commit.
Thumper waits before worm/spice draw; Amal waits after halving spice
and clearing opening passes. Mixed-owner battle cards require
committed owner-only selection; mandatory and optional winner cleanup
remain separate. Minimal legal AI, JSON/SQLite continuation and
competing-room CAS are connected. Mixed arrivals, queued or
promise-bound Truthtrance, other Karama uses, pending rewards,
normal Richese starts and deployed acceptance remain unfinished.
Neutral passes are application policy. The user approved Semuta's
atomic exchange at the faction hand limit; completed hand counts
and reserved incoming capacity remain protected.

Full-hand Semuta exchange passes normal/faction-limit and
incoming-reservation regressions, authenticated SQLite and
independent review. `npm run check` passed types, lint and
5,854 offline tests; build passed. Direct smoke and an actual
phone-width full-hand QA seat acquired Hajr, spent Semuta,
kept four cards and preserved that result across refresh.
Isolated Wrangler-dev HTTP passed 49/55 with five proxy 503s
and one timeout; this is not a green local HTTP suite.
Proxy-free workflow `36684960601` passed the full isolated
HTTP suite for `3285172` and published its image. No NAS
deployment is claimed.
Kull's approved distinct counter/BG-before-conversion timing
is recorded but runtime remains unfinished; unpayable
winning-overbid recovery is deliberately not chosen.

Accepted printed Jubba Cloak passes focused engine and
authenticated SQLite, a direct one-storm claim smoke and
independent review without findings. `npm run check` passed
types, lint and 5,853 offline tests; the production build
and phone-width in-app guide passed. Isolated built-worker
HTTP passed 50/55 with four Wrangler-dev proxy 503s and
one timeout. The local suite is not green. Proxy-free workflow
`36676105785` passed the full isolated HTTP suite for `98d556a`
and published its image. No NAS deployment or complete faction
claim follows.

Clean ordinary Trip to Gamont passes focused engine and
authenticated SQLite checks, a direct physical claim/force
return smoke and independent review without findings.
`npm run check` passed types, lint and 5,851 offline tests;
typecheck, lint and 18 guide/Semuta tests passed after the
in-app text update, and the production build passed. The
built phone-width rules guide displayed both new CHOAM
discard scopes. Isolated built-worker HTTP passed 50/55:
four Wrangler-dev proxy 503s and one timeout. It is not a
green local HTTP suite or a live deployment. Proxy-free
workflow `36674543364` passed the full isolated HTTP suite
for `953be21` and published its image; this is not NAS
deployment.

Clean proactive Baliset passes focused engine and authenticated
SQLite checks, a direct engine claim/restriction smoke and
independent review without findings. `npm run check` passed
types, lint and 5,849 offline tests; the production build
passed. Isolated built-worker HTTP passed 49/55: four POSTs
returned the Wrangler-dev proxy's 503 rather than app statuses,
and two requests timed out. This is **not** a green local HTTP
suite or production deployment. Proxy-free workflow
`36673190056` passed the full isolated HTTP suite for
`756af19` and published its image; this is not NAS deployment.

Clean proactive La La La passes engine, authenticated SQLite,
direct engine smoke and phone-width guide checks. `npm run check`
passed types, lint and 5,847 offline tests; the build passed.
In an isolated QA room, the actual Richese seat showed Continue
and Commit, acquired the physical card, then retained zero free
revivals and a two-spice paid quote across refresh. Direct
Wrangler-dev HTTP passed 50/55 with four 503s and one timeout;
proxy-free workflow `36671450678` passed the **full** HTTP suite
for `b130cff` and published its image. This is not NAS deployment.

Clean Kulon-before-bonus continuation passed engine, authenticated
SQLite and genuine-setup targeted smoke checks. `npm run check`
passed types, lint and 5,845 offline tests; build and phone-width
guide inspection passed. Direct Wrangler-dev HTTP passed 48/55;
six tests saw HTTP 503 instead of their expected status, and one
Advanced-lobby request timed out at 15 seconds. The proxy-free
container workflow `36670493579` for `88bcb33` passed the full
HTTP suite and published its image; this is not a NAS deployment.

The completed CHOAM card-sale reaction passed two- and three-spice
engine cases, canceled-sale exclusion, authenticated SQLite recovery,
direct engine smoke and rendered phone-width guide inspection.
`npm run check` passed types, lint and 5,843 offline tests; the build
passed. A direct Wrangler-dev HTTP suite passed 50/55; four
origin/validation requests returned 503 and one Advanced-lobby
request timed out after 15 seconds. This local proxy run is not
a green suite; the proxy-free container run below passed.

One diagnostic POST returned Wrangler's literal "Your worker restarted
mid-request" 503 body; 100 subsequent identical requests returned the
application's expected 400. [Cloudflare workers-sdk issue #14641](https://github.com/cloudflare/workers-sdk/issues/14641)
documents a local dev-proxy disconnect with this misleading status.
This points to the proxy for those transient failures, not to a
verified application fix. The existing [container verifier](../tools/verify-container.mjs)
runs the **full** HTTP suite against isolated Docker without that
Wrangler dev proxy. Revision `4c07e1b` passed workflow
`36668822954`, including this full HTTP suite, and published its
image. Live NAS deployment and acceptance remain open.

The private normal-auction Ixian ally reaction passed genuine-setup
engine, authenticated SQLite and direct engine smoke checks. The full
`npm run check` passed types, lint and 5,839 offline tests; build and
phone-width guide inspection passed. The isolated built-worker HTTP
suite passed 49/55 tests: five returned 503 instead of expected
authorization/validation/success statuses, and one Advanced-lobby
request exceeded its 15-second limit. Full HTTP acceptance remains open.

The previous printed Karama purchase/payment checkpoints passed
engine and authenticated SQLite checks; their local HTTP caveats
are recorded in the implementation log.

The previous purchase revision `eede77a` passed container workflow
`36664985601`, including its isolated storage/HTTP gate, and published
an image. This does not deploy it to the live NAS.

The following paid Karama revision `8f6b1c8` also passed container
workflow `36665999972` through isolated storage/HTTP verification
and published its image. Neither checkpoint has been deployed to the NAS.

The subsequent private Ixian ally revision `9bfc3ec` passed workflow
`36667534804` and published after isolated storage/HTTP verification.
It too is not a live NAS deployment.

Container workflow `36656043783` built `32d9ef4` but failed
isolated storage/HTTP verification; that image was not published and
the public job exposes no assertion log. The next checkpoint
`d9c67ca` passed the same verification and published its image in
workflow `36657454120`. The live homepage footer now displays
`ab5c782`, confirmed in an independent browser view and screenshot.
This marker is not a complete production gameplay or administrator
check, nor evidence that the later pushed revisions are deployed.

One [natural Advanced Moritani assassination](MORITANI_ASSASSINATE_LEADERS.md#29-september-2026--natural-revealed-card-game)
now proceeds from genuine battle loss to a dead-target Traitor reveal,
face-up retirement and private Mentat replacement. The six-seat game
completed 1,666 accepted actions, zero rejected candidates and 45 JSON
restores; a separate replay checked every private view across reveal and
replacement. A natural living-target kill, exceptional combinations and
the unresolved duration/UX rulings remain open. Public expansion starts
and deployed acceptance remain gated.

Another natural six-seat Moritani game exposed two illegal Fremen worm
rides into a placed Terror with a pending BG fighter intrusion. The
[worm-arrival bot preflight](BOT_ARRIVAL_PREFLIGHT.md#29-september-worm-ride-into-terror-with-bg-intrusion)
now omits only that public reaction conflict. Same-seed replay completes
1,541 accepted actions, zero rejects and 41 JSON restores. This does not
implement the simultaneous reaction or demonstrate a natural assassination
reveal; expansion starts and deployment remain gated.

A six-seat Advanced Moritani sample exposed six illegal bot Guild
cross-planet transport candidates into a placed Terror while Guild income
was pending. [Arrival preflight](BOT_ARRIVAL_PREFLIGHT.md#29-september-guild-cross-planet-transport-and-terror)
now quotes the submitted single-source transport and payment using public
arrival triggers. The same genuine game completes 1,262 accepted actions,
zero rejected candidates and 34 JSON restores; both assassination choices
were declined. This repairs AI candidate legality, not the unsupported
arrival composition, natural assassination reveal coverage, normal
expansion starts or deployed acceptance.

The owner-only [administrator accounts](ADMIN_ACCOUNTS.md) prototype now
lists, provisions, changes roles, disables and rotates another account’s
personal key. Rotation can re-enable a disabled target only with a fresh
key; old credentials and sessions remain revoked, including attempted
A→B→A reuse. Live owner/target fences, durable exact retries and safe
actor-attributed history preserve rooms and seats. A disposable owner
and target completed authenticated local **network** rotation and
re-enable on an isolated built-worker D1 store, and mobile browser review
showed exact impact and a superseded-replay warning. The supported dev
HTTP suite passes 55/55; the built-worker full suite hit intermittent
local workerd 503 restarts and is not a green production-bundle suite.
Failed-attempt history, the rest of administration, deployment and
production acceptance remain unfinished. This code is not in the last
verified live image.

The bounded [Advanced Moritani Assassinate Leaders preview](MORITANI_ASSASSINATE_LEADERS.md)
now has repeatable genuine games across two through six supported seats.
Five samples completed 2,511 accepted actions, no rejected candidates
and 65 JSON continuations. The six-seat game reached two private
assassination offers, both declined. The separate natural reveal sample
above adds one dead-target use, not a complete Moritani rules claim. The
unresolved duration/UX questions and public expansion gate remain
unchanged. This source is not in the last verified live image.

The independent Ecaz three-card variant now has a repeatable
[genuine-game sample profile](VERIFICATION_WORKFLOW.md#reusable-base-and-faction-sample-games)
for paired Ecaz/Moritani rosters from two to six seats. Ten Basic/Advanced
games at base seed `20260929` completed with 3,768 accepted actions, zero
rejected candidates and 95 JSON continuations; the six-seat Advanced game
actually played Recruits, Reinforcements and Harass & Withdraw. That run
exposed and confirmed a saved-view drift from unlocked Bene Gesserit advisor
stances, now corrected at four arrival/movement writers. These samples do
not certify all card interactions, full expansion modes or deployment.

The separate [Reinforcements card prototype](REINFORCEMENTS_RUNTIME.md)
now works in clean Ecaz/Moritani expansion battles as well as classic-faction
tables in Basic and Advanced. Genuine setup, owner-only two-slot controls,
legal AI offers, typed reserve-to-Tanks payment and saved D1 continuation
follow the existing card contract. Co-present Ecaz allied armies, Richese,
Ixians/Tleilaxu and other optional modules remain gated; the printed cost
timing is still a documented product interpretation, not a publisher ruling.
This does not open public expansion or card-variant starts, and this source is
not in the last verified live image.

A five-seat Advanced combined Homeworld/Nexus/expansion sample exposed two
known-unsupported Ecaz Ambassador/Moritani Terror shipment candidates from
Tleilaxu's own Homeworld. [AI arrival preflight](BOT_ARRIVAL_PREFLIGHT.md#29-september-homeworld-sourced-shipment-overlap)
now excludes them using only public entry reactions. The same genuine game
completed with 786/786 legal attempts and 21 JSON continuations; this is a
candidate-legality repair, not support for the combined arrival or a public
expansion start. The source is not in the last verified live image.

Six fixed paired-expansion Basic/Advanced [game samples](IMPLEMENTATION_STATUS.md#29-september-2026--paired-expansion-game-samples)
at `b9c8b74` completed with 4,641 legal actions and 122 JSON continuations.
They do not establish complete faction effects, module combinations or
release readiness.

Five Basic Moritani and five Basic Tleilaxu plus Leader Skills
[game samples](IMPLEMENTATION_STATUS.md#29-september-2026--moritani-and-tleilaxu-leader-skills-samples)
across two through six seats completed with 4,736 legal actions and 123 JSON
continuations. This is sampled playable coverage, not complete skills,
Advanced or optional-module acceptance.

A bounded [Ecaz Ambassador/Moritani Terror same-entry continuation](MORITANI_ENTRY_TIMING.md#selected-bounded-overlap-order--29-september-2026)
now snapshots both original optional triggers and offers their owners sequential
choices in current storm order on classic plus Ecaz/Moritani Basic/Advanced
tables. This order is a conservative provisional table interpretation, not
a publisher ruling. The original shipment, move or Fremen worm ride transfers
forces only once; JSON/SQLite recovery keeps token custody private and proceeds
to the second owner even after the first declines or resolves a supported effect.
A summoned worm during the overlap retains its Nexus before the queued ride;
Robbery overflow and Sabotage discards preserve physical custody. The table
shows public owner order without disclosing the hidden Terror face; existing
owned controls and minimal legal AI remain usable. Competing BG Intrusion,
Fremen/Guild Ambassador child arrivals and optional-module combinations remain
gated, as do normal public expansion starts. The bounded Atomics path below
does not open these overlap combinations. This source is not in the last
verified live image.

A bounded [Guild native rate Karama path](GUILD_RATE_KARAMA_RULES.md#native-transport-extension--29-september-2026)
now interrupts classic Guild/reciprocal-ally ordinary reserve shipments and
eligible cross-planet transport before payment, including Guild's own return
to abstract reserves and allied Fremen southern-reserve transport. Canceling
the rate charges normal destination price for the **exact saved force group**
and original approved funding split; return costs one spice per force under
the documented conservative doubled-tariff interpretation. If the group or
split cannot complete, Karama is spent but the declaration returns unused and
a replacement uses full price this turn. Saved typed custody, a legal AI path,
SQLite CAS recovery and local read-only browser previews of the cancel control
and replacement quote are connected. Guild income, transport permission and
independently purchased Karama rates remain separate. Optional-module and
Homeworld rate cancellation remain gated; this code is not in the verified
live image below.

Moritani Extortion now has a bounded local reveal-to-Mentat continuation:
five bank spice stays reserved until Moritani finishes normal Terror placement
and any Karama response; then non-Moritani seats in storm order may pay three
once or decline. Payment removes the revealed token; all declines rotate it
back into hidden supply. The [placement-first order](MORITANI_EXTORTION_RULES.md)
was selected by the user, not sourced as a publisher priority ruling. Public
notices hide the current payer's affordability from other seats. Owner controls,
legal AI, JSON/SQLite CAS, nested Box/gift interruptions and a genuine late
Mentat Ambassador entry have focused coverage; each still settles before the
turn ends. A separate bounded classic-plus-Moritani Atomics path now records
public Aftermath with permanent shipment prohibition and a one-card hand-limit
reduction for Moritani and its ally at activation; later alliance changes are
gated pending a ruling. Complete expansion starts stay gated. These local
changes are not in the last verified live image below.

The live NAS Apps `dune` image is the immutable
`ghcr.io/quintine/dune:sha-c9a3625ff2a9ddafdbc08e64de809eca6029db85`
from successful container workflow `36358270534`. The public footer's title and
accessibility name show that full revision; visible text shows `c9a3625`.
After the update, owner sign-in succeeded and nine existing rooms remained,
including a playing room at version 54. A fresh 0600 online SQLite backup in
the persistent app volume passed `PRAGMA quick_check` before the update. The
earlier temporary remote plaintext owner key and provisioning SQL were removed.
Private saved-seat reconnection, complete historical-data comparison and live
Diplomat retreat gameplay were not exercised; its local behavior is verified,
not production gameplay-proven.

The bounded Discovery Orgiz Collection transfer is connected in current local
source for Basic/Advanced, with an automatic public log and saved continuation.
It treats each positive collected board deposit as one observable blow, a source
inference pending a publisher clarification. A focused engine/browser/SQLite
checkpoint is in [Discovery prototype](DISCOVERY_PROTOTYPE.md); this code is
not yet in the live `c9a3625` image. Contested/shared transfers and full
Discovery release acceptance remain gated.

Checkpoint `209fb18` was pushed and its matching container workflow
`36359970371` completed successfully. The dedicated deployment agent could not
enter TrueNAS Apps because the host desktop was OS-locked; it made no NAS change,
backup or post-rollout claim. Production remains at the last verified `c9a3625`
image until the Apps session is unlocked and this exact image is deployed.

An owner-only [room-backup prototype](ADMIN_BACKUPS.md) now captures, lists and
downloads immutable private snapshots with live authorization, unchanged room
versions and append-only capture/export receipts. The per-room size/storage
limits, missing import/restore and absent unified action-history entries keep
the saved-game operations gate open. Local isolated capture/export and a
signed-out browser denial passed; this is not deployed evidence.

The owner-only [operations page](ADMIN_PANEL.md) samples build revision,
room/seat and lifecycle counts, invalid JSON, latest write and backup usage.
It now also offers a separate **manual** SQLite quick/foreign-key check.
Only owner requests can run it; the result contains pass/fail and time, never
private rows or raw diagnostics. In-memory SQLite tests and an authenticated
owner request against an isolated built Wrangler worker passed. The same worker
reported a deliberately orphaned foreign key as failed without exposing its row;
the phone-width owner UI showed both outcomes and the no-auto-repair warning.
Live NAS checks remain unverified. This is not a disk-capacity, restore-safety
or game-rule validation tool. No game or seat changes during a check.

Current work adds [action history](ADMIN_ACTION_HISTORY.md): a searchable,
paginated view of nine durable admin receipt sources with public before/after
settings. Owners/operators receive operational reasons; viewers do not. Queries
preserve live authority and reject private or malformed metadata from search.
Failed-attempt coverage, operational health and the remaining full admin scope
are still unfinished.

Discussion checkpoint `160fdc1` is pushed. Types/lint, 5,431 offline tests,
52 HTTP tests, build, twenty-four administrator HTTP groups and desktop/mobile
browser checks passed; all 2,230 baseline games and 4,746 seats were preserved.
Its container workflow `36218058095` succeeded; the later NAS Apps deployment
and current live revision are recorded above.

The bounded [Fremen Nexus Cunning](NEXUS_FREMEN_RULES.md#connected-native-cunning-path)
prototype connects an initially empty worm's public offer, one spent private
card, a Karama response, a typed remote ride after the Nexus, human controls
and minimal legal AI in classic-faction Nexus-only games. Basic/Advanced
natural continuation, an additional-worm placement and an actual Advanced
special-Karama summon retain their physical parent, response and native-then-
remote ride order across JSON/isolated SQLite recovery and duplicate CAS.
Natural and summoned offer/ride browser surfaces were exercised. Review found
and fixed an inherited-key force-custody bypass. A second Cunning offer
inside an interrupted control, Great Maker, combined modules, Secret Ally
protection and complete Nexus games remain gated. The bounded Atomics reveal
is a separate classic-plus-Moritani path, not a playable Nexus Terror effect;
its later-alliance hand-limit policy is unresolved.

The bounded [Fremen Nexus Betrayal alternatives](NEXUS_FREMEN_RULES.md#bounded-betrayal-movement-and-worm-riding)
let an unallied holder spend the physical card either before the first Spice
Blow to prevent Fremen worm rides for that turn, or before Fremen move in
Shipment and Movement to suppress their native two-territory advantage.
Worm destruction/protection and Nexus still resolve; independent movement
bonuses remain available. One saved card cannot use both modes, even if
recycled later that turn. Owner controls, prioritized legal bot play,
Basic/Advanced JSON and authenticated concurrent SQLite continuation are
connected. Post-appearance Betrayal timing and combined modules remain gated;
no public Nexus gate changes.

The bounded [Ecaz Nexus Betrayal](NEXUS_ECAZ_RULES.md#bounded-betrayal-runtime)
path lets a card holder select one public territory shared by Ecaz and its
ally before the first Shipment and Movement turn advances. One spent card,
a provisional Karama response and exact typed ally-force return are wired
through human controls, legal bot action, JSON and in-memory SQL continuation,
and focused gameplay, race and restart tests. A local browser fixture rendered
the holder-only offer and rival Karama notice without writing a room. The
Secret Ally inquiry has a bounded private prototype; its native-leader
scope/answer audience and combined modes remain release gates.

The bounded [native Ecaz Nexus Cunning](NEXUS_ECAZ_RULES.md#bounded-native-cunning-duke-vidal)
prototype spends the one card to take the existing living Duke from Moritani
at a quiet Battle boundary in paired Ecaz/Moritani Nexus games. Owner controls,
legal AI, ordinary battle selection, temporary end-turn custody and signed
saved continuation are connected in Basic/Advanced outside Advanced Harkonnen
tables, where the battle path cannot select Duke. Captured, dead and Ghola
destinations and all combined modules remain gated. The Battle-only timing
is a documented product boundary rather than printed phase text. This code
is not yet in the live image.

The bounded [Ecaz-only Duke revival](ECAZ_REVIVAL_RULES.md#selected-product-interpretation-28-september-2026)
returns the existing dead shared disc alive and set aside after ordinary paid
revival or a Ghola card. The user selected this custody interpretation; it is
not a publisher clarification. Five spice (three with the existing Tleilaxu
alliance discount), stop/cancellation windows, first five-in-Tanks cohort,
owner choices, legal AI and JSON/SQLite continuation are connected. Further
six-disc native cycles, exceptional custody and Advanced Harkonnen remain
guarded; no complete Ecaz start is certified.

The bounded [Mirror Weapon battle path](MIRROR_WEAPON_ENGINE_AUDIT.md#user-selected-cleanup-interpretation-28-september-2026)
admits the canonical physical card in CHOAM/Richese-deck Basic/Advanced
classic/CHOAM/Richese battles and source-clear Advanced Ecaz/Moritani
composition without optional overlays. Effective copied attacks, copy-first
Tooth/Stone choices, public Stone feasibility,
saved custody, human controls and legal AI are connected. A victorious
physical Mirror can be kept even after a copied activated Tooth or Artillery
attack under the user's interpretation, not a GF9 clarification. Combined
modes and full Richese starts remain gated. Neither new path is in the
verified live `c9a3625` image.

The bounded [Bureaucrat/Tleilaxu revival payment](BUREAUCRAT_PAYMENTS.md)
path adds the Basic Tleilaxu/Leader Skills profile's actual single-payer
revival prices to the skill's post-Karama redirection. Paid custody, separate
free-revival income, private negotiated amounts, owner controls, four legal
AI policies and concurrent SQLite continuation are connected. Other expansion
payment families, gifts and combined modules remain gated; this is not a
complete Leader Skills or Tleilaxu certification.

Earlier [complete-game integration samples](IMPLEMENTATION_STATUS.md)
finished 62 genuine games: Basic Leader Skills with Tleilaxu, Moritani,
Ixians or CHOAM; Basic/Advanced classic Homeworld + Nexus; all three paired
faction-expansion + Nexus profiles across two through six seats; and two
six-seat all-expansion games. All 29,333 actions were accepted, with 765
JSON/private-view restorations and unchanged source fingerprints. Rare effects
not encountered naturally and all public release gates remain unverified.

Four further [all-expansion Nexus samples](IMPLEMENTATION_STATUS.md)
completed genuine five/six-seat Basic and Advanced games: 4,098 accepted
actions, 109 JSON/private-view restorations, unchanged source fingerprints
and five Nexus Card draw/keep decisions in the five-seat games. No Nexus
effect was played in those samples; card-specific combinations and public
expansion/Nexus starts remain gated.

Four more [all-expansion Homeworld/Nexus samples](IMPLEMENTATION_STATUS.md)
completed five/six-seat Basic and Advanced games with 2,800 accepted
actions, 74 JSON/private-view restores and unchanged source fingerprints.
Five-seat tables drew/kept three Nexus Cards and used real Homeworld
deployment decisions. Eight proposed entries were rejected by the existing
Ecaz Ambassador/Moritani Terror overlap gate; bots found alternate actions
and completed. Their unresolved priority and all public mode gates remain.

The bounded [native Richese Nexus Cunning shipment](NEXUS_RICHESE_RULES.md#bounded-native-cunning-prototype-27-september-2026) now uses two distinct physical No-Field tokens in one priced shipment in genuine Richese/CHOAM paired Nexus games. One token immediately reveals a reserve-capped public force group; the other remains concealed. Owner-only controls, four legal AI profiles, Karama/Guild responses, signed saved receipts and concurrent in-memory SQLite settlement are connected in Basic/Advanced. A read-only local browser fixture displayed the owner selector and no rival private panel. Same-shipment nonrepeat is a documented product interpretation; faceup-component artwork, combined modules, Betrayal and full Nexus acceptance remain gated. This code is local and not in the last verified production image.

The independent [Reinforcements Battle Plan prototype](REINFORCEMENTS_RUNTIME.md)
connects its physical card in either slot for Basic/Advanced classic-faction
games without other optional modules. Three own reserve counters enter the
Tanks, +2 affects normal battle score only, and the card is discarded on all
revealed outcomes. Owner-only availability, controls, legal AI, private
inspection and saved continuation are connected. Traitor/explosion payment,
normal-first elite selection and battle-loss accounting remain explicitly
provisional interpretations, not a publisher or user ruling; full variant and
public mode gates remain closed. This source is not in the live image.

The bounded [Emperor Nexus Secret Ally bank-auction purchase](NEXUS_EMPEROR_SECRET_ALLY_RUNTIME.md#bank-auction-purchase-alternative)
connects the separate retained-price alternative in Basic/Advanced
classic-faction Nexus-only games. An unallied winner proves the final bid from
their own spice, keeps it, takes the physical Treachery lot and spends the
Nexus; owner controls, legal AI, signed history and saved SQLite continuation
are wired. Every eligible winner receives the same payment confirmation
regardless of hidden card custody; this privacy-preserving timing is
**provisional**, with the prior user question still pending. Seller payments,
allied splits, non-Bidding sources, Betrayal and complete Nexus remain gated.
This source is not in the live image.

The main page
labels its build's Git commit in the lobby and active-table masthead; local
Git HEAD does not represent uncommitted work. The main-branch container
workflow publishes an image but does not deploy the live site automatically.

[Discussion moderation](ADMIN_DISCUSSION.md): owners/operators
can mute or unmute new public/private messages from a human seat. History,
incoming messages, game state and credentials remain saved; the setting follows
recovery/handover. Atomic authority/version fences, durable audit and exact
admin/message retries are connected. This is partial participant support;
access revocation, participant removal, assisted recovery, permanent deletion,
bulk actions and backup/operations tools remain unfinished.

[Participant AI](ADMIN_PARTICIPANT_AI.md) checkpoint `2cddf03` is pushed. Types/lint,
5,408 offline tests, 52 HTTP tests, build, twenty-two administrator HTTP groups
and desktop/mobile browser acceptance passed. Deployment delivery was
unconfirmed at that checkpoint; the current production revision is recorded
above. No strategic AI refinement was added.

Readable-notice checkpoint `137f922` is pushed. Types/lint, 5,381 offline tests,
52 HTTP tests, build and delayed-response desktop/mobile browser QA passed.
Its new-revision deployment handoff is pending confirmation.

The [readable-notice follow-up](READABLE_NOTICES.md) extends first-request progress
to admin operations, AI permissions and seat handovers, preventing recovery
instructions from flashing before a successful response. Seat recovery/handover
confirmations remain above the table until Continue. Existing retry proofs and
rules/AI pacing are unchanged. New-revision deployed acceptance remains separate
from local checks; positive production admin testing still needs authorized access.

The connected [administrative archive/unarchive](ADMIN_ROOM_ARCHIVE.md) prototype lets
closed rooms leave the default directory without changing saved games,
credentials, discussion or AI deadlines. Unarchiving leaves play closed;
reopening requires unarchiving first. Exact saved retries and combined archive /
removal filters preserve recovery. Permanent deletion, bulk actions and full
participant/backup support remain unfinished.

Checkpoint `98b1b32` added [close/reopen](ADMIN_ROOM_CLOSURE.md) and passed types/lint,
5,356 offline tests, 52 HTTP tests and build, with seventeen administrator HTTP
groups and lost-response desktop/mobile browser QA. It is deployed on the NAS:
container verification passed, migration 0013 applied, all eight prior rooms and
ten seats were preserved, and public HTTPS/browser saved-seat restoration passed.
Anonymous admin routes remain denied. Positive production administrator acceptance
still awaits authorized QA access. Archive checkpoint `e918e2e` is also deployed:
migration 0014, integrity and public HTTPS/browser saved-seat restoration passed;
all eight prior rooms and ten seats were preserved. Its positive production
administrator acceptance remains pending the same authorization.

Checkpoint `238de38` added [recoverable removal/restoration](ADMIN_ROOM_REMOVAL.md)
and passed types/lint, 5,314 offline tests, 52 HTTP tests and build, with fourteen
administrator HTTP groups and lost-response desktop/mobile browser QA. It is
deployed on the NAS: container verification passed, migration 0012 applied,
all eight prior rooms and ten seats were preserved, and public HTTPS/browser
saved-seat restoration passed. Anonymous removal and other admin routes remain
denied. Positive production administrator acceptance remains pending authorized
QA operator access.

Checkpoint `c0cc4de` added [neutral administrator lobby configuration](ADMIN_LOBBY_CONFIGURATION.md)
and passed types/lint, 5,260 offline tests, 52 HTTP tests and build, with eleven
dedicated administrator HTTP groups and lost-response desktop/mobile browser QA.
It is deployed on the NAS: container verification passed, migration 0011 applied,
all eight prior rooms and ten seats were preserved, and public HTTPS/browser
saved-seat restoration passed. Anonymous creation, control and configuration
requests remain denied. Positive production administrator acceptance remains
pending authorized QA operator access.

Checkpoint `e7d4efc` added [administrator room creation](ADMIN_ROOM_CREATION.md)
and passed types/lint, 5,240 offline tests, 52 HTTP tests and build, with independent
review and eight dedicated administrator HTTP groups. It is deployed on the NAS:
container verification passed, migration 0010 applied, all eight prior rooms and
ten seats were preserved, and a saved seat restored through public HTTPS and the
browser. Anonymous administrator creation remains denied. Positive production
administrator acceptance still requires explicitly authorized QA operator access.

Checkpoint `8c922b4` added [pause/resume and joining locks](ADMIN_ROOM_CONTROLS.md)
and passed types/lint, 5,223 offline tests, 52 HTTP tests and build, with independent
review and dedicated local administrator/browser checks. It is deployed on the
NAS: container verification passed, migration 0009 applied, all eight prior rooms
and ten seats were preserved, and a saved seat restored through public HTTPS.
Anonymous administrator requests remain denied. Authenticated production admin
acceptance still requires the pending QA-access confirmation.

Checkpoint `f29d056` was pushed and deployed to the NAS instance. Readable
create/join progress and Continue notices passed actual HTTPS browser acceptance,
including mobile and saved-seat refresh; existing production records survived
the update. Administrator sign-in renders closed by default. Authenticated admin
production checks remain pending provisioning approval.

The [readable-notice fix](READABLE_NOTICES.md) replaces the flashing recovery
screen during ordinary room creation/join with concise progress. Actual recovery
instructions stay until resolved, and completed-action text waits for a local
Continue control. It does not add confirmation steps to game rules or AI turns.

Administrator access/directory checkpoint `c2d392e` passed types, lint, 5,196
offline tests, 52 HTTP tests and build, plus focused authenticated/browser checks.
Its authenticated production acceptance remains pending; the current deployment
preserves saved games and full administration gates.

The user added a complete [administration panel](ADMIN_PANEL.md) to the goal on
22 September: secure admin access, room creation/removal and lifecycle controls,
participant support, backup/restore, operational views and audited actions.
The first prototype now connects separate administrator sign-in, persistent
sessions/revocation and a searchable, filtered, paginated room directory at
`/admin`. Private game contents remain excluded. Operator provisioning and
recovery instructions are in the admin guide. Room creation, lifecycle/removal,
participant support, backups and operational controls remain unfinished; these
belong before full AI refinement/calibration. Existing rules, Git, subagent and
preservation requirements remain in force.

The goal also requires testing the deployed application at
**https://dune.procrastination.games**. Match the running revision, exercise
relevant real player/admin flows in dedicated QA rooms, and record deployed
results separately from local checks. See [production verification](VERIFICATION_WORKFLOW.md#verify-the-deployed-application).
This requirements update does not claim a new deployed test result.

Earlier completed rules checkpoint: `0f79f28`, [forced Harkonnen exchange return](HARKONNEN_EXCHANGE.md).
Types, lint, **5,150 offline tests**, **49 HTTP tests** and the production build
passed. One complete Advanced sample had no rejected actions across 158 actions
and four JSON restores. Browser inspection and exact refresh were checked;
full visual acceptance remains open. All 1,586 prior rooms and 3,354 human seats
were preserved; new QA/HTTP rooms brought the baseline to 1,626 rooms and 3,442 seats.

Current work exposes [Advanced preview](ADVANCED_PREVIEW.md) through normal room
creation and host lobby controls. It uses genuine setup, explicit unfinished-mode
start, renewed human readiness after mode changes, private seat restoration and
saved continuation. Six classic factions, existing Tech Tokens (3+ players) and
Stronghold Cards are admitted; expansion/module gates and pending rulings remain.
Focused engine, controls, retry and concurrent recovery checks are connected;
final independent review, browser, sample-game and required checks accompany the
Git checkpoint. Preview access does not certify complete rules compliance.

The [Sandmaster/HMS source comparison](SANDMASTER_MOVEMENT.md#21-september-native-hms-relocation-eligibility)
found no official clarification that passengers remaining in the interior
trigger collection from outside territories during native relocation. A ruling
question was sent; ordinary HMS relocation and force entry/exit remain working.
No extra collection is silently applied. The Bureaucrat/Emperor gift question
and the other recorded skill boundaries remain pending.

Remaining native Ecaz/Moritani effects, repeated six-disc Duke cycles and Richese
empty-cache auction arithmetic still cross recorded source questions. Native
Tleilaxu revival now creates its skill offer at successful commitment, including
automatic response chains; the former dependency is resolved in its Basic profile.
The `8f7a62c` policy checkpoint removed usage checks/cutoffs and deferred full AI
work until feature completion, followed by three adjacent 75% targets.

The [platform audit](AUTOPILOT.md#platform-audit-20-september-2026) found no supported
Sites scheduler or Durable Object provisioning contract. Durable unattended bot
resumption remains blocked on that capability; request/reconnect continuation
does not establish it. Preserve pending rules questions and mode gates.

The connected [Harass & Withdraw prototype](HARASS_WITHDRAW_RUNTIME.md) supports either
battle-card slot, private category inspections, exact undialed normal/elite
returns, opponent-Traitor cancellation, mandatory disposal, controls and all
four AI profiles. New battles also have [revealed physical allocation](HARASS_ALLOCATION.md) for
ordinary/elite mixtures and multi-sector returns. Richese card combinations
and additional optional modules stay gated. Withdrawal before explosion and
card-specific discard precedence are explicitly labeled inferences. The Stone
Burner timing question is pending; no user answer is assumed. The separate
Reinforcements prototype has its own provisional timing and cost boundary.
Neither prototype opens variant, mode or publication gates.

The preceding [early Sapho aggressor](SAPHO_AGGRESSOR.md) connects the
printed battle-priority effect during the existing shared pre-plan opportunity.
Physical attacker/defender/chooser stay stable; Habbanya takes precedence in either
slot. Shared priority feeds Stone admission, ordinary/Stone resolution, public
controls and all four AI profiles. Battle-bound history survives private saved
continuation. Later intervention remains unfinished; no new ruling is assumed.
Final checks, samples, browser evidence and delivery belong to the source-bound
private report and Git message.

The earlier [Mirror admission review](MIRROR_WEAPON_ENGINE_AUDIT.md) flagged
copied-attack choice and physical-card cleanup gaps in genuine Richese decks.
The user subsequently chose ordinary winner retention for the physical Mirror,
and the bounded Basic/Advanced battle path above now handles copy-first choices.
Full Richese starts and combined-module play remain gated; the former blanket
admission block does not apply to the connected profile.

The Smuggler follow-up review supports a saved reveal-time receipt with settlement
only on leader survival, but located no official ruling on modified leader
strength. The user has been asked about Kwisatz/trainer/Stunner composition; no
answer is assumed. See the [source follow-up](LEADER_SKILLS_RULES.md#20-september-smuggler-follow-up).

## Authoritative navigation

- [Rules checklist](../game/reference.ts), topic `implementation-checklist` and
  each feature's entries: track implementation, controls, AI, documentation and
  verification, plus Missing, Prototyped, Integrated, Verified and Polished stages.
- [Rule decision index](RULE_DECISIONS.md): settled contracts, source precedence
  and pending material interpretations. Consult it before reopening research.
- [Development context index](DEVELOPMENT.md#context-index), [canonical lookup](DEVELOPMENT.md#canonical-feature-lookup)
  and [verification tools](VERIFICATION_WORKFLOW.md): bounded paths, narrow
  feedback, frozen-batch proof and deferred final assurance.
- [Implementation history](IMPLEMENTATION_STATUS.md): newest first. Historical
  evidence and outage records stay there and in feature documents; read bounded
  relevant sections and verify old absence claims against current code/tests.
- [Efficiency pilot](EFFICIENCY_PILOT.md): the first three milestones are pushed;
  measurement limits remain explicit. Reuse tools and checks, without promising
  an unmeasured savings percentage.

## Connected development capabilities

These links define bounded working behavior, not complete module certification.

| Area | Current connected work and evidence |
| --- | --- |
| Base/Advanced setup | [Normal Advanced preview](ADVANCED_PREVIEW.md), [genuine setup](ADVANCED_SETUP_TEST_SEAM.md), [Advanced study](AI_ADVANCED_SETUP_CALIBRATION_20260907.md), [Fremen cancellation](FREMEN_MOVEMENT_KARAMA_RULES.md), [Atreides full-plan audit](ATREIDES_FULL_PLAN_TIMING.md). Earlier Basic-then-flip fixtures do not establish current setup coverage. |
| Expansion factions | [Ixians/Tleilaxu](IX_PROTOTYPE.md) and [all seven faction selections](EXPANSION_FACTIONS_PROTOTYPE.md): genuine setup, Ecaz six-force placement, [Advanced Loyalty](ECAZ_LOYALTY.md), separate optional card variants and private controls. The [adopted Ixians D source](RICHESE_AUCTION_RULES.md#explicit-source-boundaries) excludes Richese auctions from Technology; no special-lot exchange or decline is required. |
| Leader Skills | [Common lifecycle](LEADER_SKILLS_RUNTIME.md), [known skilled capture](LEADER_SKILLS_CAPTURE.md), [Mentat question preview](MENTAT_QUESTION.md), [Bureaucrat payments](BUREAUCRAT_PAYMENTS.md), five battle disciplines, [Planetologist](PLANETOLOGIST_RULES.md), [Suk Graduate](SUK_GRADUATE_RULES.md), [Rihani and other battle effects](LEADER_BATTLE_EFFECTS.md), [Smuggler shipment](SMUGGLER_SHIPMENT.md), [No-Field](SMUGGLER_NO_FIELD.md) and [battle collection](SMUGGLER_BATTLE.md), [Sandmaster routes](SANDMASTER_MOVEMENT.md) and [worm rides](SANDMASTER_WORM.md), [Banker spending](SPICE_BANKER_RUNTIME.md), [Diplomat defense](DIPLOMAT_DEFENSE.md) and [bounded retreat](LEADER_SKILLS_RULES.md#bounded-diplomat-retreat-interpretation). Remaining bands and combinations are explicit in those contracts. |
| Discoveries | [Prototype](DISCOVERY_PROTOTYPE.md): genuine setup, Great Maker, seven cards/eight tokens, inspection and stash rewards, nested sites, signed later free entry, carried Ornithopter, sole Cistern, bounded Orgiz transfers, Jacurutu income, Testing Station and Shrine. Orgiz's per-deposit interpretation, contested/shared benefits and mixed physical allocation remain provisional or pending. The Orgiz path in current source is not yet deployed. |
| Nexus/Homeworlds | [Decision index](RULE_DECISIONS.md) links each integrated faction family, native/borrowed effects, physical custody, private choices, payments and transport. [CHOAM Secret Ally trade and bounded after-victory inspection](NEXUS_CHOAM_SECRET_ALLY.md), [Moritani Secret Ally losing-card retention](NEXUS_MORITANI_RULES.md#secret-ally-losing-card-retention-prototype), [Ecaz private yes/no inquiry and bounded native Duke Cunning](NEXUS_ECAZ_RULES.md#bounded-native-cunning-duke-vidal), [Emperor extra revival and bounded bank-auction purchase](NEXUS_EMPEROR_SECRET_ALLY_RUNTIME.md) are connected. Uniform CHOAM winner/Moritani loser windows, Ecaz inquiry scope/audience and Ecaz Cunning's Battle-only window are product inferences, not publisher rulings. Source audits or helpers alone do not certify full module games. |
| Truthtrance | [Spice facts](TRUTHTRANCE_SPICE_FACTS.md), [card counts](TRUTHTRANCE_CARD_COUNT.md), [hand inventory](TRUTHTRANCE_HAND_INVENTORY.md), [recorded knowledge](TRUTHTRANCE_KNOWLEDGE.md), and [base Basic/Advanced reserve-shipment promises, including Guild](TRUTHTRANCE_SHIPMENT_PROMISES.md) use authoritative private state. Earlier readiness audits do not supersede these follow-ups. |
| Other cards | [Sapho runtime](JUICE_OF_SAPHO_RUNTIME.md) includes first among remaining unstarted movement turns after Advanced Guild has finished. [Recruits](RECRUITS_RUNTIME.md) connects clean Revival play; [Harass & Withdraw](HARASS_WITHDRAW_RUNTIME.md) and [Reinforcements](REINFORCEMENTS_RUNTIME.md) connect bounded battle effects in the same independent three-card preview. Richese card contracts and the checklist identify other connected effects and explicit gaps. |
| Multiplayer | [Public and private discussion](TABLE_DISCUSSION.md), saved rooms/seats, [recovery](../README.md#saved-seats-and-reconnecting), uncertain-request retry, [own-seat AI](AUTOPILOT.md), [named-player AI permission](SEAT_AI_PERMISSION.md) and [voluntary seat handover](SEAT_HANDOVER.md) have connected controls and recovery evidence. |

## Remaining readiness

| Area | Remaining gate |
| --- | --- |
| Basic core | Broader truthful commitments, unresolved special timing and integrated rules/human/AI acceptance. Ordinary Guild rate cancellation now exists: the `guildRate` prepayment response and `guildRateBlocked` turn window cover ordinary reserve shipment, eligible cross-planet transport and Guild return through the normalized `guildTransport`/shipment intents (`game/engine.ts`, `docs/GUILD_RATE_KARAMA_RULES.md`); the older 7 September readiness note that called it absent is superseded. |
| Six-faction Advanced | Base gaps, provisional special-Karama outcomes, remaining timing audits and authentic multiplayer/browser acceptance. The user-authorized unfinished preview is available; setup matrices and complete samples do not certify full compliance. |
| Twelve factions and all optional modules | Every missing effect, remaining skill bands, Ecaz card variant, Kull Wahad, unfinished Richese cards, Terror effects, occupation entitlement, Nexus interactions, contested Discoveries and complete games across valid combinations. The 7 October 2026 rulings settled CHOAM's low-population opening income, the Richese exhausted/canceled cache count, Suk/Kwisatz loss counting, the Guild Secret Ally Homeworld reserve return and Sandmaster HMS-relocation eligibility; the preserved captures can be resumed. Detailed boundaries remain in the checklist/decision index. |
| AI | Maintain minimal legal participation and critical correctness fixes while game features are unfinished. Full implementation, strategy refinement and calibration wait until all non-AI features are complete; then target approximately 75% higher-tier wins for Medium/Easy, Hard/Medium and Brutal/Hard. See the [AI development plan](AI_DEVELOPMENT_PLAN.md). These targets remain unverified. |
| Multiplayer | Broader disconnected/abandoned-seat recovery, unattended continuation and network-failure acceptance, while preserving authoritative versioning, custody, privacy and saves. |
| Administration | Complete the [admin panel](ADMIN_PANEL.md): permissions, room directory and creation/removal, lifecycle controls, participant support, backup/restore and operational audit tools. Required before full AI refinement. |
| Components and experience | Full component inventory/text verification, all readable inspectors, original artwork, animation/sound/accessibility/mobile polish, complete internal guidance and end-to-end human play. |

[AI calibration](AI_CALIBRATION.md), [multiplayer audit](MULTIPLAYER_AUDIT.md),
[component inventory](COMPONENT_INVENTORY.md) and [visual playtest](VISUAL_PLAYTEST.md)
record their measured scope. [README](../README.md) retains publication gates.

## Working sequence and preservation

Prototype all remaining rules in dependency-related batches using existing
controls and minimal legal AI. Continue independent functions while material
rulings are pending. The integration owner freezes each batch, repairs the
smallest failing case first, then runs affected tests/types/lint and changed-path
smoke once. Do not run the full offline suite or repeat HTTP/seat/save/privacy/
custody audits at every tiny prototype.

After all rules are implemented, run full proof, comprehensive independent
review, integration games and save/recovery/privacy/custody assurance; repair
failures and finish all non-AI scope, including complete administration. Only
then fully implement/refine AI and calibrate adjacent difficulty pairs. Final
components, human journeys, browser/deployed and publication acceptance remain
required. The [proof schedule](DEVELOPMENT.md#feedback-and-proof-schedule) records
the checkpoints without duplicating the rules checklist.
Commit and push verified checkpoints under **“Push all from now on”**, verify push
success. The user removed the usage cutoff and routine account-usage checks;
efficient work, Git delivery and selective subagents remain required.

The user-authorized 13 September reset happened once; preserve all games created
since it. Keep `.wrangler/state`, credentials and private backup artifacts out of
Git. Reuse a healthy server; restart only for a relevant change or observed
problem, warn before interrupting human play and use a safe point. Observe health;
comprehensive restoration assurance follows all rules, while actual production
deployments retain their existing safeguards. No hourly restart or recurring
maintenance automation is installed; do not recreate one.