Dune/docs/NEXUS_IXIAN_REPLACEMENT_RULES.md

Ixian Nexus Secret Ally: purchased-card replacement

Source audit: 2026-09-10. Bounded local prototype integration and verification: 2026-10-01. Partial development verified, not complete Ixian/Nexus family or expansion acceptance. This document records the source and runtime boundary of the fresh ixian-replacement profile. Existing Nexus release gates remain in force.

Classic independent-card native reactions — 18 October 2026

Fresh normal classic2–6 Basic/Advanced independent36/Nexus12 now initializes the original purchased-card effect, optionally all14 Skills, alongside native Harkonnen cancellation where that faction is seated. No played game receives a new capability stamp. Original standalone classic/Tleilaxu/Richese entries and other roster/module boundaries remain; no separate overlay is selected.

The canonical catalogue recognizes the three original independent faces, but current sources admit them only from the explicit public selection. Other families/cache still require their original selected native context. Historical v1 receipts keep their existing shape. This extends physical recognition and fresh admission, not printed effect, pricing or universal response timing.

Actual paid2 delivers Reinforcements before the original private buyer choice. Use spends one Ixian Nexus, discards only that just-purchased card and draws the actual unused deck top, with the same hand size/wallet and one lot advance. Pass keeps purchase/Nexus and lets native Harkonnen receive one bonus card: actual Basic purse8, hand3→4 and next lot1. Original replacement-before-bonus order and neutral wrong-face acknowledgement remain visibly provisional.

Six combined consumer regressions pass. Two actual390px purchase journeys exercise all14 Use and native Harkonnen Keep, including original action notices and physical hand inspectors; no errors/overflow. Four legal policies retain this valuable independent lot with Pass and the original paid wallet. Combined source-bound proof and remaining gates.

Direct Richese special purchase during Bidding — 16 October 2026

An actual Advanced Richese special-Karama cache acquisition during Bidding now supplies its own committed purchase authority. The original printed Karama is discarded, three spice paid, selected cache card delivered and once-use committed before the independent Nexus choice. This is the same selected independent-cache interpretation, not a fabricated auction or another use of the special power. Other phases retain native acquisition without a Bidding-only Nexus opportunity; Basic special powers are not added.

The optional direct receipt binds buyer, cache target, original Karama, amount3, turn and phase3. It takes precedence over an unrelated normal sale or native lot. Original active player, response, decision and pending Karama are suspended exactly, including applicable new purchase income and any older control it wraps. Use/Keep retires only this receipt, then original income and controls resume. Existing v1 purchase/closed receipts remain unchanged; normal/native parents gain no new keys without a direct receipt.

The nested-income path exposed an existing funding defect: a normal bid was still reserved after its delivered currentAuctionSale had already consumed it. uncommittedSpice now reserves only unpaid normal bids. The actual remaining three spice can buy the special cache card, while a genuinely unpaid bid2 still stays reserved. No payment is waived, refunded or replayed.

Ten new direct scenario cases and the affected eleven-file 107/107 union pass, including existing Karama-intent/bribe budget consumers. Types/lint and production build pass with module-register, large-chunk and Unknown-route warnings. Ten original runtime paths cover Use/Keep, Emperor/bank, reserved bid, nested income and actual Revival exclusion; sixteen legal policy actions pass. All cards, clocks, wallets, Nexus and suspended controls come from original actions; only still-undealt deck order is selected.

Two actual styled390×844 journeys begin before the native special action. The already-paid income scene exposes an enabled three-spice purchase at wallet3, then direct Use exchanges Residual Poison for Artillery and preserves the older Poison Tooth: wallet0, Emperor10→15, one row advance. The unpaid bid scene keeps bid2 reserved at wallet5, pays direct3, then direct Keep lets the original funded bid2 complete automatically. Its distinct normal offer binds Poison Tooth/price2, not the old direct target/price3. Keeping that offer finishes wallet0/Emperor15 with both original acquisitions and Nexus retained. Power use and printed cost occur once. Both direct/income buffers clear. Width/scroll390 and no browser/application error.

An obsolete whole-serialization identifier-substring assertion was deleted; semantic rival-frame/hand privacy assertions remain. No new broad, HTTP or saved/deployed assurance ran. Only an owned memory-only loopback host ran; no human server, D1, saved room, deployment or public gate changed. Proof: /tmp/dune-richese-direct-ixian-runtime.json, /tmp/dune-richese-direct-ixian-ui-proof.json. All five facets stay Partial.

Current CLI help, four current source anchors and26 topic evidence paths resolve without reference parse diagnostics; all five facets remain Partial.

Genuine cache and Black Market purchases — 16 October 2026

The existing fresh Richese/CHOAM profile now binds actual positive sold cache lots in Basic/Advanced and actual Black Market lots in Advanced. Basic Black Market is not granted. The card is already delivered and its original bid debited before the independent purchased-card choice; Use/Keep then resumes the same eligible recipient, income, bonus and lot continuation. Unbid owner keeps/retains are not purchases and never create this choice.

Selected provisional cache scope: under the standing choose-recommended instruction, use the photographed Nexus face's independent grant for a genuine cache purchase. It does not name the actual native Ixian alliance advantage or repeat E2's cache exclusion. The interface labels this literal composition provisional; no new publisher FAQ or explicit user-selected cache ruling is claimed. Native Ixian allies still cannot replace a cache purchase. Direct special-Karama acquisitions were still separate at that checkpoint; their later Bidding-phase composition is recorded above.

The source uses the real sold native lot, owner, target and quoted price; no normal row or replacement Game is fabricated. Its single lot has index0 in the existing v1 receipt. Normal source/receipt shapes and parent strings remain unchanged; a live native lot enters the parent only when present. Shared native continuation quotes retain original authority. The projected origin is public source category only, not a new price or card disclosure.

Affected nine-file 98/98, types/lint and production build pass, retaining module-register, large-chunk and Unknown-route warnings. Six original native Use/Keep runtime paths and twelve legal policy actions cover cache in both modes and Advanced Black Market. Eleven actual native scenario cases cover already-paid timing, both outcomes and genuine unbid retention; pure source cases reject mismatched/open/unbid/competing lots and Basic Black Market. The fixture now respects real response priority before bidding. An obsolete exact projection-object pin was removed while semantic rival privacy checks remain; a callback typing annotation changes no behavior.

Two styled390×844 original-source journeys pass. Basic cache Use exchanges Residual Poison for the real deck-top Artillery, spends Nexus, retains the single price8→7 and seller5→6, and reaches Revival. Advanced Black Market Keep retains purchased Ornithopter and Nexus, price12→11/seller5→6, then returns to Richese's actual first/last declaration controls. Emperor income is unchanged in both specific other-buyer scenarios. Width/scroll390 and no browser/application errors. Current CLI help names exact mode/scope bounds.

Only an owned memory-only loopback host ran. No human server, D1, saved room, deployment or public gate changed. Proof: /tmp/dune-richese-seller-ixian-runtime.json, /tmp/dune-richese-seller-ixian-ui-proof.json. No broad suite or new HTTP/ saved-game assurance ran; all five checklist facets remain Partial.

Five current source anchors and23 topic evidence paths resolve without reference parse diagnostics; all five checklist facets remain Partial.

Native Richese normal purchases — 16 October 2026

This earlier normal-purchase checkpoint admitted Richese plus classics, Basic/Advanced, with CHOAM35, the separate original cache and Nexus alone. Original cache auctions and qualifying Nexus acquisition preceded each normal choice. Genuine cache and Advanced Black Market replacement were added afterward in the composition above; direct special purchases remain separate.

Live card validation now receives selected expansions and native richese presence. Exact base, Ix, CHOAM and cache membership is precomputed from the original catalogues: shared Poison Tooth/Artillery identities qualify under CHOAM, but other Ix-only cards do not. Cache custody requires both selected CHOAM and actual Richese. A cache face later recycled into the normal deck does not become a cache-origin sale merely because of its printed family. Historical receipts retain their original shape and canonical identities. The native source binds its original round/cache, not a replacement Game.

Six new selected-catalogue cases and twelve original Richese behavior cases pass in the affected seven-file 65/65 union. Eight original-action Use/Keep runtime paths cover both modes and native Richese/Atreides buyers; sixteen legal policy actions pass. Actual final-normal-lot continuation opens the original cache offer, and a subsequent real cache purchase by the same retained Nexus holder still creates no replacement.

Two styled390×844 original-source journeys pass: Basic Atreides replaces Poison Tooth with actual deck-top Artillery (spice10→8, Emperor10→12); Advanced Richese keeps Poison Tooth and Nexus (spice5→3, Emperor10→12). The nine remaining cache cards stay untouched and each original lot advances once. Width/scroll390; no application/browser error. Two tool-only stale-node races were reported and recovered from authoritative state without replay. The producer was repaired to order its still-undealt cards before the declaration can automatically allocate its row; no native response is artificially held open. Two fixture-only typing annotations preserve behavior.

Final types/lint and actual CLI help pass. Only an owned memory-only loopback host ran; no human server, D1, saved room, deployment or public start changed. Proof is outside Git: /tmp/dune-richese-ixian-runtime.json, /tmp/dune-richese-ixian-ui-proof.json. No new production build, broad suite, HTTP or saved-game assurance was run; all five facets remain Partial.

Seven current source anchors and21 topic evidence paths resolve with no reference parse diagnostics; all five checklist facets remain Partial.

Advanced native Tleilaxu admission — 16 October 2026

The existing fresh Ix47/Tleilaxu-plus-classics profile now admits Advanced as well as Basic. This removes a producer fence, not a printed rule: the Nexus replacement face has no Advanced exclusion. Original staged setup, three Face Dancers, qualifying alliance/Nexus deal, paid purchase, private Use/Keep and exact native income/next-lot continuation remain original. Sandtrout is still omitted only at fresh setup; other optional modules, native Ixians, E2/E3 and public starts stay excluded.

The existing native behavior cases now exercise both modes: seven native cases and affected six-file 47/47 pass. Four original Advanced runtime Use/Keep paths cover Atreides and Tleilaxu buyers; eight legal policy actions pass. Original Thumper/Amal, payment and Emperor income are preserved, including final-lot completion. No played cards, wallets, clocks or Nexus hands are staged. Proof: /tmp/dune-advanced-tleilaxu-replacement-runtime.json. Actual CLI help now names both modes and the prior provisional Harkonnen order. No new UI, saved-room, human-server, D1, deployment or public gate changed; this is not full-family or combined-module acceptance.

Final types/lint pass; current source anchor and19 topic evidence paths resolve without reference parse diagnostics. All five facets remain Partial. No new build, broad suite, browser or HTTP assurance run for this admission.

Harkonnen purchase and bonus composition — 16 October 2026

Harkonnen buyers now receive the same neutral purchased-card choice in the existing original classic or native Tleilaxu Basic/Advanced profile. The printed one-for-one replacement preserves the purchase-earned bonus, its original hand cap and native Karama cancellation; it is not a second purchase and earns no extra bonus. The bonus itself is never a replacement target.

Selected provisional ordering: under the standing choose-recommended instruction, preserve the existing native Ixian ally sale pipeline: replacement choice → original income response → original Harkonnen bonus response → next lot. The Nexus face does not explicitly order these two draws; this is conservative product composition, not a publisher ruling or an explicit user-selected ordering. The actual table labels it provisional. No owner-selected ordering control or bonus-first inspection is introduced.

After Use, the actual next deck card is the replacement; any allowed bonus then draws the following card. After Keep, the next card is the bonus. Canceling that later bonus cannot undo replacement, restore Nexus, refund the purchase or repeat income. At eight held cards after purchase, replacing one-for-one still leaves eight and creates no bonus slot.

Three new behavior cases and the affected seven-file union pass 64/64. Eight original-action runtime paths cover both modes, Use/Keep and native bonus allow/cancel; eight legal policy actions pass. Genuine setup, actual worm/alliance and two Nexus draws, original Atreides purchase/Keep and the paid Harkonnen second lot precede every original source. The eight-card boundary separately controls only conserved undealt hand acquisition.

Two actual styled390×844 journeys pass. Basic replaces purchased Snooper16 with Shield11, allows Emperor12→14 and cancels only the bonus: Harkonnen keeps three cards/spice8 and spent Nexus. Advanced keeps purchased Chaumas4, allows original income and one Snooper16 bonus, retaining four cards/spice10 and Nexus. Both advance the original lot once. Width/scroll390; no browser/ application errors. Only an owned memory-only loopback host ran; no human server, D1, saved room, deployment or public start changed. Proof is outside Git: /tmp/dune-harkonnen-replacement-runtime.json, /tmp/dune-harkonnen-replacement-ui-proof.json. Special origins, other modules and final assurance remain separate; all five checklist facets stay Partial. Final types/lint and production build pass, retaining module-register, large-chunk and Unknown-route warnings. Current source anchor and19 topic evidence paths resolve with no reference parse diagnostics; all five facets remain Partial. No broad suite or HTTP assurance run.

Native BG converted purchases — 16 October 2026

Original normal-auction purchases now offer the same independent Ixian replacement after native Advanced BG Worthless-as-Karama succeeds, for both direct acquisition and winning-bid payment. The original native counter resolves first; a converted card is not a printed Karama, but its successful purchase is still a purchase under the existing source analysis below. The engine no longer carries a printed-cost-only settlement flag.

Canceling direct acquisition leaves the lot unpurchased and offers no Nexus replacement. Canceling winning payment preserves native payment recovery: when the original bid is funded, ordinary automatic spice payment buys the lot and earns a paid, not free, replacement opportunity. Original payment/income and Nexus discard/draw each finish once. No new cancellation, refund, bonus priority, profile or module combination is introduced.

Four new behavior cases and the affected nine-file union pass 74/74. The obsolete guard-pinning substitution test was removed, not re-pinned. Four original-action Use/Pass runtime paths and eight legal policy actions pass. Genuine setup, actual worm alliance/Nexus deal, paid Worthless purchase and first-lot Keep precede the second-lot conversion; no played state is staged. Two additional cancellation cases explicitly conserve the unused starting Karama into Emperor custody to isolate the native counter.

Two actual styled390×844 original-source table journeys pass. Direct free acquisition replaces Hajr with the actual next Ghola, spends Ixian Nexus and retains BG spice5/Emperor12. Winning free payment keeps the actual Shield and Ixian Nexus, also retaining5/12. Both advance the original auction once, with width/scroll390 and no browser/application error. Only an owned memory-only loopback host ran; no human server, D1, saved room, deployment or public gate changed. Proof remains outside Git: /tmp/dune-bg-ixian-runtime.json, /tmp/dune-bg-ixian-ui-proof.json. Broader profiles, special sale origins and final assurance remain separate; the later provisional Harkonnen composition is recorded above. All five checklist facets remain Partial. Final npm run check:quick passes; the current source anchor and17 topic evidence paths resolve, with no reference parse diagnostics. No production build, broad suite or HTTP assurance was run for this bounded rule slice.

Primary evidence

• Face: photograph of the twelve original GF9 Nexus Cards, independently inspected again at /tmp/dune-nexus-cards.jpg. The photographed publisher text is the authority, not commentary by its uploader.
• E3: GF9 Ecaz & Moritani rules, pp.11,16, indexed publisher text and the previously retrieved publisher-authored mirror, /tmp/dune-e3-nexus-rules.pdf and .txt.
• Base: GF9 base rules, pp.6,8,17, freshly retrieved publisher-indexed setup, bidding and Harkonnen text.
• E1: GF9 Ixian & Tleilaxu rules, p.9, freshly retrieved publisher-indexed alliance paragraph.
• FAQ: GF9 November 2020 FAQ, pp.6–7, freshly retrieved publisher-indexed inspection and Karama rulings.
• E2: GF9 CHOAM & Richese rules, pp.4,10–11, freshly retrieved publisher-indexed discard secrecy and purchase FAQ.

Direct official PDF retrieval returned 403. Several older temporary .pdf paths contain HTML error pages; they were not treated as readable PDFs. No tournament rewrite or community compilation supplies a ruling here.

The user-supplied UNOFFICIAL_Revised_Dune_Rulebook_v.2.3_web.pdf is the adopted source for relevant Advanced core rules, including later Storm determination. It does not contain the Nexus Cards or this face. It therefore supplies no new Ixian replacement, cache-scope, bonus-order or Nexus-cancellation ruling; the photographed publisher card and cited publisher rules remain this feature's evidence.

Printed operation

The face permits the holder, when Ixians are absent, to discard the Treachery Card just purchased during Bidding and then draw the top Treachery Deck card. This identifies one particular purchase, not an arbitrary held card. The replacement is optional, but playing it spends the Nexus Card. No spice refund, extra payment, free choice from the deck, or second replacement is printed. The panel has no Advanced-only qualification. Face

Common Nexus rules require an unallied holder; joining an alliance discards the held Nexus Card. Secret Ally applies when the represented faction is absent, distinct from native Cunning or Betrayal. The E3 FAQ contains no Ixian replacement clarification. E3

The buyer takes the purchased card after payment. The native Ixian allied replacement explicitly occurs immediately after purchasing; November's FAQ permits viewing that purchased card before choosing. Applying the same inspection entitlement to this independently printed just-purchased replacement is ordinary composition, not a Nexus-specific FAQ. Base p.8, E1 p.9, FAQ p.6

Custody, deck and purchase consequences

• Discard first, then draw. A full but legal hand is supported: the discard opens the slot before replacement; neither transient overcapacity nor a full-hand exception is needed.
• Base setup requires discard reshuffling to replenish an exhausted Treachery Deck. Therefore an empty deck is not a reason to disallow this effect: its own preceding discard supplies a card. That physical identity can be drawn again. Do not exclude it or promise a different card.
• The already dealt auction row is distinct from the remaining deck. Draw the actual deck top, not the next unsold auction lot. Do not rebuild the auction pool.
• Harkonnen retains the bonus earned by the original purchase, subject to its ordinary hand cap and cancellation. Replacement is a draw, not another purchase, so it earns no second bonus. At seven cards before purchase, the purchase fills the eighth slot; a one-for-one replacement does not create bonus capacity.

These are compositions of the printed discard-then-draw operation with base pp.6,8,17. Preserve the original paid price and recipient exactly once; this card contains no reversal instruction.

An ordinary Karama acquisition is described by November's FAQ as purchasing without spice, so zero payment alone does not exclude a genuine Bidding purchase. Gifts, bonus draws, Ambassador draws, Nullentropy retrieval and Technology swaps are not purchases merely because they occur in Bidding. FAQ p.7

Richese and cancellation: distinguish source scope

E2 explicitly excludes a direct Richese cache purchase from the Ixian ally replacement, while allowing Black Market purchases, including a Richese-family card. It also awards Harkonnen's normal bonus for both sale kinds. The restriction follows purchase origin, not card family. E2 pp.10–11

That question names an ally of Ixians. The later Nexus face independently grants the operation when Ixians are absent and does not name the native alliance advantage or repeat the cache exclusion. The selected 16 October provisional interpretation therefore includes genuine cache purchases during Bidding under the standing choose-recommended instruction. Extending the older exception is an alternative reading, but no retrieved primary clarification selects it; the native ixAllyCard cache filter remains unchanged, not imported as Nexus authority. The same literal purchase analysis now connects genuine Advanced Richese special-Karama acquisition during Bidding through its real committed receipt, without inventing an auction. Outside Bidding that native acquisition gains no Nexus opportunity. Other timing/cap boundaries remain in the acquisition audit.

November's Karama table expressly permits stopping the native Ixian ally from discarding a purchased card. For this separately worded Nexus grant, Ixians are absent and the holder is not using a present faction's native or actual alliance advantage. Treating it as a direct card effect without that native cancellation window is the supported category composition used for Atreides Secret Ally; it is not an express general Nexus-immunity ruling. Unlike Bene Gesserit Secret Ally, this face does not say to use a named faction advantage. FAQ p.7, Face

Ordering and unresolved boundaries

Harkonnen draw order: the purchase earns its original bonus, while Nexus applies only to the purchased card. The inspected source does not explicitly order these draws. Under the standing choose-recommended instruction, the selected provisional composition reuses native Ixian ally ordering: replacement first, then original income and bonus responses. The table labels this policy; it is not publisher timing or an explicit user-selected sequence. Replacement grants no second bonus or extra capacity, and the free bonus is never the purchased target.

Other immediate disposal effects: use the ordinary physical-discard pipeline. Applicable Ecaz poison income and Semuta reactions must neither duplicate the discarded card nor cause a second replacement. Precise competing immediate-effect priority is not supplied by this Nexus face. Existing Semuta and occupation source gaps remain separate.

Nullentropy and custody interruptions: a paid Box search freezes the searched pile in the existing subsystem. The replacement cannot draw or reshuffle that pile while browsing. Conversely, playing or transferring the just-purchased card cannot leave a live replacement offer pointing at custody it no longer owns. Preserve or settle the exact purchase continuation; do not reopen an expired purchase from an arbitrary historical card ID. Whether a player can interleave a particular anytime power before exercising an immediate purchase right needs an explicit sequencing policy, not an invisible loss of the right. See the Box audit.

Private opportunity timing: a pause offered only to the eligible Ixian-card holder may reveal the secret identity. This bounded prototype instead gives every publicly unallied supported buyer with public held-Nexus presence the same neutral Purchased card choice, independently of its hidden face. An irrelevant-face buyer can Pass but cannot Use. This is an inferred development privacy convention, not publisher-prescribed timing, a ruling on all anytime interleavings or approval of every unresolved private-response design. Unsupported-origin guards depend on public origin, not secret face.

Bounded local runtime contract

The fresh ixian-replacement profile admits two through six unique seats in Basic/Advanced: classics/base33, Tleilaxu plus classics/Ix47, or Richese plus classics/CHOAM35 with the separate original cache, always with Nexus alone. Native Ixians, other native families, Leader Skills, Homeworlds, Semuta, Discoveries, Ecaz variants and other overlays remain excluded. No branch retrofits an in-play game, enables a public start, resets a saved room or changes native Ixian allied replacement.

There is no starting Nexus deal. Native draws require a qualifying closing Nexus with a settled alliance, so a two-seat profile can continue its base game but cannot naturally produce an unallied Secret Ally holder. Actual replacement scenarios need at least three seats; two simultaneous unallied recipients need at least four. Fixtures form genuine nonrecipient alliances and never add seats to an admitted game or fabricate Nexus hands.

Connected purchase and choice

1. Connect actual normal-auction purchases, positive sold Richese cache lots (Basic/Advanced), Black Market lots (Advanced) and genuine Advanced Richese special-Karama acquisition during Bidding. Native cost/payment and card delivery precede the source-bound choice; original recipient/income/controls/bonus or lot continuation follow once. A direct receipt binds its own target/price3 even while an unrelated row or older income remains pending. Outside Bidding, native special acquisition keeps its original behavior without a Nexus offer. Unbid keeps/retains, gifts, bonus draws, Technology swaps, old hand cards and historical IDs supply no purchase.
2. Cache uses the visibly provisional independent-Nexus interpretation above, not the actual native ally advantage excluded by E2. Harkonnen retains the visibly provisional replacement-before-income/bonus order, original cancelable bonus and eight-card limit. Neither selected composition is a located publisher timing FAQ.
3. Every publicly possible supported buyer receives the same event and public buyer identity, regardless of its secret Nexus face. Only that buyer receives Pass and the exact already-owned purchased card for inspection; only a truly eligible unallied holder of the physical Ixian Nexus receives Use. Opponents receive neither the purchased/replacement face nor private price, receipt, deck order or eligibility reason. The buyer may inspect its own actually held Nexus through the existing authorized inspector; the neutral prompt grants no rival entitlement.
4. Pass retains the purchased card and Nexus, closes this opportunity and continues the original sale once. Use spends that singleton Nexus once, discards exactly the just-purchased physical Treachery Card, then draws the actual next deck card privately. There is no card selector, arbitrary hand exchange, new Karama counter, refund, repayment or re-auction.
5. The discard opens a full legal hand's slot before the draw. An exhausted deck recycles eligible Treachery discards, including that just-discarded card; drawing the same physical card again is legal. The unsold auction row is not the draw deck. Earlier Atreides auction inspection does not grant a new peek of this replacement.
6. The original funded amount, own/authorized-ally contribution and recorded free/paid source are preserved. Already completed payment is not repeated, and original income and native auction suffix run once through their genuine continuation. Other response/decision priorities remain native: finish the source-bound choice before another payment, lot, transfer or card effect can change its reserved source. No expiry bypass or raw-action replay is added.
7. Refresh restores the same pending event or closed outcome without another payment, shuffle, draw or Nexus spend. Closed, stale, foreign or malformed events cannot reopen that purchase. Historical receipts remain valid after later transfers, reshuffles and same-card recycling; they do not require an old purchased card to stay in discard forever. Cursor/descriptor consistency is not authentication against arbitrary rewritten saves; authenticated sessions and production compare-and-swap remain required.

Public APIs and ownership

• initializeIxianNexusReplacementGameForAudit(state: Game): Game in game/engine.ts is the fresh-only initializer; Game.nexusIxianReplacementPreview?: true marks the admitted profile. Genuine setup and Nexus dealing remain native.
• GameView.nexusIxianReplacementPreview reports the profile. GameView.nexusIxianReplacement is the neutral event/buyer view with canPass, canUse, blocked and purchased; rivals have no face or private blocked reason.
• { type: 'nexusIxianReplacementPass', event } and { type: 'nexusIxianReplacementUse', event } accept only that event-bound shape. There is no client-chosen purchased ID, replacement, recipient, price or Nexus identity.
• game/nexus-ixian-replacement.ts owns canonical physical/source/custody/history validation through createIxianReplacementSource, validateIxianReplacementSource, closeIxianReplacementSource and validateIxianReplacementHistory, with initialIxianReplacementCursor and ixianReplacementEvent for bounded progress. The source snapshots the exact purchased descriptor, not a whole-Game undo or payment replay. Canonical descriptor, original parent, owned exact target, legal hand cap and single physical custody are validated before Nexus cost or randomness. The closed receipt chain and independent cursor do not require an old discard to remain in its historical location. The engine alone owns purchase authorization, original payment and native discard/draw/sale continuation. Existing native Ixian ally response remains a distinct cancelable ability, not an alias or fallback for the absent-faction Nexus grant.
• components/nexus-ixian-replacement.tsx and components/game-table.tsx own the private inspector and neutral controls; game/bots.ts consumes each bot's own legal projection. Easy, Medium, Hard and Brutal have minimal legal Use/Pass policies, not calibrated Nexus strategy.
• The local CLI entry is node --import tsx tools/start-prototype.ts --profile ixian-replacement --db PATH --room CODE --version NUMBER --out /private/new-directory. It requires the exact current room version, a fresh supported setup and a private new backup/kit directory; it preserves room/seat/setup identity and existing saves rather than replacing or resetting a game. tools/prototype-room.ts owns admission and the private backup transaction.

Native Basic Tleilaxu integration — 2 October 2026

The 2 October native integration originally admitted Basic Tleilaxu plus unique classic opponents, Ix47 and Nexus alone, with Ixians absent. The 16 October addition above extends that same native profile to Advanced; native CHOAM/Richese, mixed expansions and other overlays remain excluded. Fresh setup still omits optional Sandtrout under the existing bounded native setup convention; existing games and their cards are not changed.

game/nexus-ixian-replacement.ts uses the original treacheryDeck(['ix']) catalogue for exact descriptors. Original base33 identities remain valid alongside the fourteen original Ix cards; a matching ID or generic special kind cannot authorize a different name, kind, effect or extra field, and unrelated Richese faces do not enter this catalogue. The existing source, event, cursor and history APIs remain the only receipt path. In particular, buying an Ix special does not replay its payment or turn the replacement draw into another purchase.

tests/fixture-native-ixian-replacement.ts exports createNativeIxianReplacementFixture and assertNativeIxianReplacementInventory. The fixture accepts a fresh native lobby or its undealt admitted setup, completes native setup and turn one, forms an actual nonrecipient alliance during the next qualifying Nexus, and draws the Ixian Nexus through the native lifecycle. It then buys an original physical card in a normal auction for two spice. Its default purchase is Thumper and its ordered remaining-deck top is Amal; options also allow an actual Tleilaxu buyer and the final native auction lot. Only conserved undealt cards are reordered; no held Nexus, acquired Treachery face, paid-source receipt or continuation is manufactured.

tests/native-ixian-replacement.test.ts covers the native special-card Use and Pass outcomes, exact discard/top draw, preserved original payment and income, native next-lot/final-lot continuation, single Nexus/Treachery custody, replay rejection, and forged/unrelated descriptor rejection. Existing base-profile full-hand and genuinely depleted-deck regressions already exercise the same discard-first/replenishment path and are retained rather than duplicated with an artificially emptied native deck.

This is ordinary composition of printed replacement and existing native setup/auction lifecycle, not a new Nexus ruling or completed family claim. Special sale origins, private opportunity timing, cache scope and combined modules keep their bounds above. This earlier deck/faction integration did not choose Harkonnen ordering; the later explicit provisional composition is recorded at the opening of this document. Native verification below belongs to the frozen native payment wave, not the newer Harkonnen proof.

Bounded native verification passes four meaningful regressions in the shared 110-case affected batch; final native/guide26/26, types/lint and build pass. Twelve actual native programs cover four original Ix purchase/draw pairs, Atreides/Tleilaxu buyers, next/final lots and all four legal policies. Genuine CLI XLFRHKPF v6 reaches original native setup. Human390px NMFTVV6N v8 inspects Thumper, spends the original Ixian Nexus, draws Amal, keeps the buyer's already-paid wallet3, and permits Emperor's original income10→12 once before the next phase's ordinary Amal window. Full-family games, other modules, pending rulings and deployment remain open.

Verification and retained release gates

Partial development verified. Types, lint, 6,227 offline cases and the 73-case selected six-file union pass. Actual standalone native execution covers fourteen Basic/Advanced paid/printed-Karama Use/Pass, wrong-face Keep, full-hand and depleted-source outcomes with exact original ledger, physical Treachery/Nexus/force/elite custody and replay rejection.

The depleted source is captured from genuine six-seat play, seed 11: turn five, native auctionPayment, seventeen held cards, twelve actual discards, four native reserved lots and an empty draw deck. All 33 cards are present. Legal purchases, Battle Plans and winner discards produced it; no row inflation, stock deletion or phase rewrite was used. tests/fixtures/nexus-ixian-native-depleted.json then exercises the actual payment and native replenishment shuffle, including exact same-card redraw.

Independent rules/privacy rereviews have no finding after two actual fixes. Nine retained purchase records grew to 7,030,825 bytes under recursive signature nesting; nonrecursive result-head links reduce them to 134,145 bytes. A permanent linear-history regression retains corruption/replay checks without a cryptographic-authentication claim. Actual phone Take back control previously sent no POST during a pending choice; it now sends one 200, restores the original seat controller and retains that same paid-source event. Gameplay locks still protect the offer. Incidental disabled-attribute-order and attempted-SQL-write pins were removed; actual room/eligibility locks, durable total_changes() and credential CAS remain checked.

Three same-admitted setup/seat/circle QA rooms were privately backed up and entered by exact-version CLI: GTCHEGKU Basic paid Use plus independent takeback, JUXLJXHC Advanced printed free Use, and HJ5Q64T5 Basic irrelevant-face Keep. Actual 390-pixel inspection, actions, native income and refresh retain the source. The wrong-face owner receives no Use or Ixian inspector. Read-only saved proof conserves original native inventories, exact spice and one closed outcome; all eleven previous QA rooms are unchanged.

Repository evidence: tests/nexus-ixian-replacement.test.ts (pure source, custody/history), tests/nexus-ixian-replacement-engine.test.ts and genuine tests/fixture-nexus-ixian-replacement.ts (native acquisition/continuation), tests/nexus-ixian-replacement-controls.test.tsx (private controls), tests/bot-nexus-ixian-replacement.test.ts (four legal policies), tests/nexus-ixian-replacement-recovery.test.ts (authenticated SQLite) and tests/prototype-room.test.ts (fresh profile and exact-version backed-up CLI). This evidence is not complete family/module or deployed acceptance.

Expansion-card discard reactions, Semuta/Ecaz priority and further anytime interleaving remain outside this profile. Cache's independent-grant scope and Harkonnen's replacement-before-bonus order are explicitly provisional, not settled publisher priority. Direct special acquisition is connected only during Bidding and preserves its older native controls rather than granting another auction. Full Ixian/Nexus families, combined modules, public starts, complete games and live release acceptance remain separate gates.