Dune/docs/CURRENT_STATUS.md

# Current development status

Updated 6 October 2026. **The full twelve-faction goal is unfinished. Basic
is playable and the six classic factions have a user-authorized Advanced preview.
Expansion starts and full rules/publication acceptance remain gated.**

The user-supplied `UNOFFICIAL_Revised_Dune_Rulebook_v.2.3_web.pdf` is now
an [authorized Advanced source of truth](RULE_DECISIONS.md#authorized-source-amendment--1-october-2026),
including its identified unofficial rulings. The 44-page file has 2.3
metadata but a visibly retained 2.2 editorial heading; the index records its
SHA-256 and physical-page citations. Guild payment/source passages and Advanced
Homeworld sole/last-departure occupation now have explicit source cutovers.
Wider Advanced reconciliation remains open.
Adoption does not reset games, convert Basic, republish the local PDF or
open mode gates.


## Current checkpoint and work

**Classic Skills/Nexus/Discovery and paired native Nexus/Discovery — bounded
Development Verified:** original fresh classic base33/all14/all12 training
and separate paired E1/E2 no-Skills47/35/cache setup retain Discovery7/8,
Basic/Advanced2–6, optional Tech3+ and Advanced Strongholds2+.
Actual Maker losses/votes/typed rides, both piles, settled alliances and
end-Spice closing deals use original controls. Signed native nested markers
retain their one-invoice/current-revealed-site/physical-reserve contract.
Other overlays, native Skills/Nexus/Discovery, pending rulings, public starts
and played-save conversion stay gated.

Affected169, types/lint and build pass. All18 original six-seat samples complete:
13,576 accepted/13,576 attempts/359 JSON on unchanged7c65011d working tree.
Original human BT4SBSLB16/Charity retains natural training/Cistern3, six real
Guild Maker losses and its original Fremen closing draw. BZNXHKMU19/Charity
retains typed Shrine3/1Cyborg, two real Tleilaxu losses and native closing cards.
RJF6D6ML24/Movement retains original setup, two CHOAM losses, native closing
cards and actual signed No-Field5/3 Shrine8 settlement: Richese5→4/Guild3→4,
reserves19→14→11, no second fee. All three actual rides use two ordinary/one
Fedaykin free. Native undealt singleton ordering and controlled positions
are explicit, not natural-history/every-effect or deployed acceptance.
[Canonical combined evidence](DISCOVERY_PROTOTYPE.md#classic-skillsnexus-and-paired-native-nexus-discovery--6-october-2026).
Final cached-constructor/live-guide union50, TypeScript/lint and final build
pass; three final original programme re-runs complete1,659/1,659/44 JSON,
not added to the18 unique profile/seed samples.

**Native Leader Skills / Discovery — bounded Development Verified:**
fresh supported native Basic/Advanced family predicates retain original
decks, starting hands/offers/all14, Discovery7/8, optional Tech3+ and Advanced
Strongholds2+. Typed entry/range/rescue/Cyborg/Face Dance, native stash/
invoice/green marker and trained Moritani death/assassination/own revival use
original handlers. Native Ecaz mandatory owner-labelled coalition remains.
Other overlays/previews, pending rulings, public starts and conversion stay gated.

Affected107 pass. Actual programmes observe rescue3/three Tanks/one Cyborg
substitution, six-counter invoice5→receiver3/bank2, and five real native
leader deaths followed by turn4 Revival/printed5 debit/optional replacement.
Three genuine hidden-Smuggler stalls had legal human plans; the policy now
uses authoritative projected capability, not full-state rules on player views.
Failing-before/passing-after trainer regression covers all four policies.

All31 genuine six-seat samples complete after three unchanged capture resumes:
30,874 accepted/30,874 attempts/815 JSON across f2ec1d69 and corrected14d66863
trees. Resumes add989/387/783 no-rejection actions; they do not reconstruct the
prior random stream. Earlier duplicate-name runs remain incomplete/un-counted;
new names include full roster/expansions while old profiles/seeds stay unchanged.

Human 6NNTCFM2v12 moves one ordinary/one Cyborg into Shrine free, preserving
natural Bureaucrat and HMS6. 5NLWDL68v14 keeps native Killer Medic: actual
Stash5→6→5 through new Karama disposal without payment. MYPGMSW6 human
Master Bewt revealv10 kills its naturally trained Guild Bureaucrat, returns
that skill and pays10→13; winner cleanupv11 and ten original actions reach
v12/Mentat with retired cost and one private replacement. All390px refresh,
original starting hands/offers preserved, explicit staging and tabs released.
[Canonical native evidence](DISCOVERY_PROTOTYPE.md#native-leader-skills-composition--6-october-2026).
No full-faction, natural-every-effect, assurance or deployed acceptance claim.

Verified code **555afe4070d33e0dd9e6ad7c931920878e51d2e7** pushed.
[Exact CI37320041332/container111796483681](https://github.com/Quintine/Dune/actions/runs/37320041332/job/111796483681)
completed/success, isolated storage/HTTP7 before image9. Final original-hand/
guide36, types/lint and exact build pass. Original three QA outcomes retain
v12/v14/v12 and display555afe4 at390px after isolated reload; tabs closed.
No protected live deployment/access/snapshot/provider approval is claimed.

**Discovery / original Strongholds — bounded Development Verified:**
fresh original Discovery and separate classic Skills/Discovery preserve
Advanced Strongholds2–6, optional Tech3–6, original setup/held claims,
physical entry, paid nested routes and source-local battle effects.
Source-clear native HMS/CHOAM invoices, Richese nested marker/defense,
trained support/rescue and mandatory Ecaz coalition retain original outcomes.
Skills-native/Nexus/HW/variants/previews, pending rulings and public starts
are not opened.

Affected77 plus post-repair coalition39, final types/lint/build and actual
programmes pass. Five genuine six-seat samples finish3,096 accepted/
3,097 attempts/81 JSON across original and repaired trees. Original Ecaz
seed20265041's mandatory battle was reproduced, repaired and resumed unchanged
for557 more/no rejection/15 JSON. Richese seed20265033 remains captured after
1,639 accepted atturn10 Bidding on its existing exhausted-cache count ruling.
No skipped battle, invented count, reset or natural-every-effect claim.

Actual UWEH7WNBv14 retains natural Smuggler, earned Arrakeen, free Cistern3
then paid4, spice3→2/reserves16→15. Native4LBU44PTv21 records human typed
Shrine free/paid entry, earned HMS copy and real support3/bank2/own1,
CHOAM income1, three physical Cyborg losses, protected Shrine4/two Cyborgs
and original Production transferred Guild→Ixians. Both refresh at390px.
Original staging and source trees are explicit; tabs released.
[Canonical rule/evidence contract](DISCOVERY_PROTOTYPE.md#original-advanced-stronghold-composition--5-october-2026).
No production deployment or complete-mode acceptance is claimed.

Verified code **b0267827b5b16755ff3e091cb78f1543383b7f96** pushed.
[Exact CI37301604738/container111735386439](https://github.com/Quintine/Dune/actions/runs/37301604738/job/111735386439)
completed/success, isolated storage/HTTP7 before image9. Final guide10,
types/lint/exact build pass; UWEH7WNBv14 and4LBU44PTv21 retain their recorded
outcomes and show b026782 at390px after isolated QA reload. Tabs closed.
No protected NAS deployment/access/approval or live acceptance is claimed.

**Classic Nexus / Discovery — bounded Development Verified:** fresh explicit
`nexus --discoveries` composes classic/base33/all12/Discovery7/8,
Basic/Advanced2–6, original Tech3+ and/or Advanced Strongholds2+.
Original setup, end-Mentat ownership, next-turn physical free entry, Great
Maker's actual worm/vote/typed ride and end-Spice closing draw remain.
Source-clear Emperor/Fremen revival ledgers and Guild paid nested shipment/
battle/Tech use existing consumers. Skills/native/HW/variants/previews and
unresolved mixed-module Fremen Betrayal stay separate; no public activation.

Affected64, types/lint/build and actual programmes pass. Two genuine six-seat
Basic Tech / Advanced four-module games finish1,150/1,150/31 JSON on unchanged
761f5ca5 tree. Actual3D7SAG45 original CLIv8, human free-entryv10,
Great Maker votesv12–14/typed ridev15 and original Advanced blow/alliance
settlementv16–26 culminate in Guild's physical closing drawv27/Charity.
Richese delivered, original deck12→11,390px refresh. Controlled unplayed
Spice order/token lottery is explicit; no natural-every-effect or production
claim. [Contract and evidence](DISCOVERY_PROTOTYPE.md#classic-nexus-composition--5-october-2026).

Verified code **a2a92bb40881e6b517e618a5ffd6b3389c960a3d** pushed.
[Exact CI37296234655/container111717999496](https://github.com/Quintine/Dune/actions/runs/37296234655/job/111717999496)
is completed/success, isolated storage/HTTP7 before verified image9.
Final guide10/types/lint/exact build pass. Preserved3D7SAG45v27/Charity
shows a2a92bb at390px with Richese/deck11 after isolated QA reload; tab closed.
No production deployment or protected NAS approval is claimed.

**Advanced Orgiz / classic Discovery Skills — bounded Development Verified:**
the supplied Advanced rulebook p24 uses a territory-Collection trigger.
Advanced transfers one collected spice per territory with a unique rival payer;
Basic keeps the provisional per-positive-deposit interpretation. Shared,
contested or inconsistent payers withhold only uncertain transfers. Original
bank income, collected/desert facts and paid continuations remain.

Fresh explicit `leader-skills --discoveries` composes classic/base33/all14
Skills with Discovery7/8, optional original Tech3–6, Basic/Advanced2–6.
Trained physical entry, original nested invoices, separate Planetologist/fixed3
movement, Harkonnen8-card stash, Suk rescue/Tech reward and distinct-party
Bureaucrat diversion use original controls and four minimal legal policies.
Native skill families, Nexus/Strongholds/HW and Banker/Mentat previews stay
outside this entry; no public start or played-game conversion.

Affected rule/control/reference **75 cases**, types/lint/build and actual
programmes pass. Two genuine six-seat Basic/Advanced Tech games finish
**1,578 accepted / 1,578 attempts / 42 JSON** on unchanged946335ef tree.
Counts prove continuation, not natural activation of every new effect.

Actual **PCDX5J8M** CLI starts v7; human natural Warmaster/Staban assignment v8.
Human Cistern inspect/reveal v10/v11 keeps it empty; original turn-two entry v12,
human three-counter entry **v13** costs no spice/reserves/movement. Atv14 the
protected counters survive and ordinary shipment is available. Original human
one-force shipment/Guild allowance reach **v16**, spice3→2/reserves12→11,
four Cistern counters and unchanged Warmaster; refresh fits390px.

Actual **FCVCEA3R** final movement ending opens **v8/Collection** automatically.
Controlled conserved positions collect5 across three deposits/two territories:
owner11→13/payer's own view10→8; two named-territory notices preserve bank
income and ordinary facts. Expanded Advanced guidance/refresh fit390px.
Tabs released; no unrelated record was written.
[Source, prototype bounds and evidence](DISCOVERY_PROTOTYPE.md#classic-leader-skills-and-advanced-orgiz--5-october-2026).
Full combinations, pending rulings, assurance and deployed acceptance remain.


Exact code **c12b463439521134f5ca3ee9c00bf0fbd33fbd3b** is pushed.
[CI37273231864](https://github.com/Quintine/Dune/actions/runs/37273231864) /
container111644528093 succeeds isolated storage/HTTP7 before verified-image9.
Final reference10, types/lint and exact pushed build pass. Preserved PCDX5J8M
**v16/movement** shows **c12b463**, Warmaster/four Cistern counters/spice2/reserves11,
at390px. FCVCEA3R **v8/Collection** retains owner13/payer-own8/two notices.
Tab released; publication is not deployment or protected NAS approval.


**Native Discovery / optional original Tech — bounded Development Verified:**
fresh classic, selected E1/E2 or standalone Ecaz OR Moritani Basic/Advanced
profiles retain original setup, decks/cache, seven Discovery Spice Cards and
eight tokens. Tech requires three through six seats. Native Cyborg/starred entry,
paid nested No-Fields, CHOAM stash capacity and Face Dance rewards reuse original
controls and minimal legal policies. Moritani's live profile and assassination
history now retain actual revealed nested sites. Public starts, other overlays,
paired/mixed E3 and contested/shared/mixed rulings remain separate.

The frozen affected union passes **71 cases**, types/lint and build. Real
programs prove Ixian three-counter/one-Cyborg free entry, one-spice Richese marker
and reserve materialization, and original Ecaz/Moritani setup. A reproduced
nested Moritani battle now reaches its actual different-Leader Traitor choice
and printed three-spice bounty.

Four original six-seat Advanced Tech games finish; the preserved Moritani
setup then finishes after the profile correction at original seed20263765.
Combined completed paths: **1,940 accepted / 1,940 attempts / 49 JSON**.
The initial and corrected trees differ; this is not a five-game frozen-tree
certification or evidence that every new effect triggered naturally.

Actual **Q3AWYZWC** phone Collection inspection/reveal reaches v8/v9. Original
continuation reaches turn-two Richese movement v10. Human Cistern marker5
declaration and Guild Allow shipment reach v12: spice5→4, reserves20, effective1.
Human reveal reaches **v13**, reserves15/five actual Cistern counters and no
second price; refresh retains v13 and fits390px. The isolated QA worker was
reloaded after an old-validator rejection; nested sector zero now says inside
the location, not Polar Sink. Tab released; other games were not written.
[Source, programs and limits](DISCOVERY_PROTOTYPE.md#native-setup-and-original-consumers--5-october-2026).
No reset, public activation, save conversion or deployed claim. Complete
Discovery combinations, assurance and protected NAS deployment remain open.


Exact code **67ce690064e7cd943e61043d41818ddbd8bdd023** is pushed.
[CI37263699075](https://github.com/Quintine/Dune/actions/runs/37263699075) /
container111615980358 succeeds isolated storage/HTTP7 before verified-image9.
Final guide10, types/lint and exact pushed build pass. Preserved Q3AWYZWC
**v13/turn2/movement**, marker **67ce690**, spice4/reserves15/five Cistern
counters, fits390px. Tab released. Publication is not protected NAS deployment.


**Printed high Ecaz Homeworld alliance victory — bounded Development Verified:**
fresh native Ecaz/Homeworld entry only. Current native7+, reciprocal alliance
jointly holds one actual uncontested stronghold and proved physically held worlds
of two other native factions. Emperor’s two worlds countone; own/ally worlds,
Tech sets, advisors and ordinary points cannot manufacture this conjunction.
Qualifying members join original winners before BG prediction/final fallback.
The source result prevents Ecaz/Fremen’s printed win from being mislabeled as
Fremen fallback; Duke’s explicit Ecaz-only revival and exceptional custody stay
separate. Old/public profiles gain no new victory source.

Source34/affected119 including guide cases, types/lint/build and real original
Movement→Collection→Mentat pass; all4 legal policies finish readiness.
High6/nonjoint/one-native/same-Emperor cases donotwin; prediction/simultaneous
ordinary union and public-only inputs retain original semantics. A separate
original734-action clock reaches turn10 before a conserved Ecaz/Fremen snapshot
proves printed-source precedence.

Five genuine six-seat Advanced games allfinish4,339/4,358/114 on unchanged
b0ebb815 tree;19 rejected candidates remain recorded. Counts establishcontinuation,
not natural triggering ofeverynewroute. Specific source proof is native/human.
Original **S8N26ADW v18/setup** retainsdeck/actors/choices; real turn-two Nexus
earnsEcaz/Guild before labelledsurvivingpositions. Storm7 unchanged, native7/7,
jointHabbanyaSietch1/1, Emperor/BG2/2, EcazKaitain/GuildWallach. HumanlastReady
reaches **v25/Mentat/finished Ecaz+Guild** whileordinary1/4/Ecaz1/3 stayfalse.
Refresh fits390px. No reset/secret/public/save-conversion or Duke permission.
[Exact source/runtime evidence](HOMEWORLD_RULES.md#printed-high-ecaz-alliance-victory--5-october-2026).
Full Homeworlds/overlays, pending Basic/CHOAM/Duke, assurance and deployment remain.

Exact code **17bc4537c3de7f40a0c7802c6530e7ed3a45ba02** is pushed.
[CI37260419689](https://github.com/Quintine/Dune/actions/runs/37260419689) /
container111606286541 succeeds isolated storage/HTTP7 before verified-image9.
Final119 source/consumer/guide cases, types/lint and exact pushed build pass.
Preserved S8N26ADW **v25/Mentat/finished** shows **17bc453** at390px, actual
Ecaz+Guild winners, ordinaryqualifiesfalse/sourcequalifiestrue. Tab released.
Publication is not deployment; protected NAS prerequisites remain unchanged.


**Occupied Tupile slots / normal-limit cleanup — bounded Development Verified:**
fresh native CHOAM/Homeworld entries alone initialize the source marker/ledger;
older occupation profiles remain unchanged. One validated slot per occupier/
reciprocal ally feeds every existing capacity consumer. Advanced last departure
and ally removal queue original holder-selected excess discards; Basic unknown
expiry freezes its proved ledger/flags and blocks rather than guesses cleanup.
Known occupation suppresses new low queries; proved expiry restores eligible
contact without clearing historical private answers or lifetime usage.

Source19/affected143 including guide cases, types/lint/build, all4 legal policies
and actual native programs pass. Original Harkonnen buys its ninth card without
a tenth bonus; real Tupile→Junction return1 queues both old-holder debts and
preserves remaining movement, cards, typed forces and one price. Completed
automatic invoices are accepted by the program helper; Basic genuinely observed
continuous qualification retains one lease, unlike an unobserved turn boundary.

Ten genuine samples on unchanged52ccb930 tree: allfive six-seat Advanced finish
4,339/4,358/114 accepted/attempts/JSON; four of five five-seat Basic finish
2,430/2,449/64, allfive total2,527/2,547/66. Atreides5Basic retains original
seed20263432 contested Southern guard. Natural samples containzero owed cleanup
choices, so changed-path proof is the original native program/human return.

Original backed-up **D54MY8JJ v18/setup**, real turn-two Guild/Harkonnen Nexus
alliance and labelled conserved post-Charity positions retain actors/deck/clock.
Human390px Harkonnen8/9 buys5 atv26 (12→7) and holds9/9. Actual Guild last visitor
returns1 to Junction for1 (6→5), then original Cheap Hero5→4 and ally Jubba9→8
settle atv30 without another move/price. v31 ends only Guild’s original turn.
A separate conserved native1/Fremen1 contact permits **v33** private3 spice/
0 weapons; refresh keeps lifetime use and reveals no rival panel. No root390px
overflow, reset, public activation or played-game upgrade. [Exact contract/evidence](HOMEWORLD_TUPILE_INTELLIGENCE_RUNTIME.md#occupied-tupile-slots-and-original-cleanup--5-october-2026).
Full Homeworlds/overlays, Basic/CHOAM rulings, exceptional Duke, assurance and
deployed acceptance remain open.

Exact code **3e79021a6e32d0f0570f0b60a0f12c64c6ec66e1** is pushed.
[CI37257844991](https://github.com/Quintine/Dune/actions/runs/37257844991) /
container111598626752 succeeds isolated storage/HTTP7 before verified-image9.
Final143 source/consumer/guide cases, types/lint and exact pushed build pass.
Preserved D54MY8JJ **v33** displays **3e79021** at390px and retains its one
private observation/lifetime use. Managed tab released. Publication is not
deployment; protected NAS snapshot/safe-point/sign-in/approval gates remain.


**Occupied Homeworld economics / Bidding — bounded Development Verified:**
original fresh2..6 Basic/Advanced setup and selected decks; Advanced uses the
authorized supplied p22 sole qualification retained until its last force leaves,
while Basic keeps its historical lifecycle guards. Actual Kaitain/Junction/
Richese percentages and completed total Southern Collection retain original
invoices, one payer debit, immediate sharing and signed once-only continuations.
Caladan shares the admitted private face, Ix transfers its actual pool, Richese
keeps native terms/seller/invoice while the occupier chooses only the card, and
Giedi awards one original purchase bonus using actual receiving capacity.
Native cancellation remains distinct from printed occupied effects.

Final247 affected cases/24 files, types/lint/build and all4 legal policies pass.
Human shipping exposed lost concurrent BG accompaniment; the signed suffix
now preserves it through allocation/JSON and actual subsequent advisor placement.
Wrong bonus recipients use normal RuleError; actual HTTP409 leaves version42.
Nondeterministic original-deal capacity/stock fixtures are conserved, not rerolled.

Pre-advisor-repair50 genuine games on unchanged09cfdd19 tree:44 finish18,977
accepted/19,149 attempts/491 JSON continuations; all50 total22,383/22,580/580.
Six remaining captures are four Basic occupation and two CHOAM source guards.
Five original Advanced captures finish3,135/3,136/83 at their original seeds;
resume restarts rather than reconstructs the random stream. After repair,
five fresh six-seat Advanced games finish4,339/4,358/114 on unchanged2ada8996
tree, including19 recorded rejected candidates. No zero-rejection/full-mode claim.

Original CLI HH7VHT2U v21/4H5CZDMA v18/6K5JFNPH v18 preserve actors and stock.
Real turn-two alliances precede labelled conserved positions. Human390px verifies
Kaitain1/1, one allied bonus despite full Harkonnen8, actual three-force shipping6
and Junction1/2 with restored BG accompaniment. Completed Fremen Collection9
retains5 and shares4 as1/3; HH7VHT2U **v72/Mentat** wallets are Emperor5/Guild17/
Harkonnen11/Fremen10/Atreides13/BG9. Richese native counterclockwise terms,
original Ornithopter5 invoice and3/2 net split reach **v29**; sole Ix pool6→5
reaches **v25**, with native Ix-known0 and Technology still native.
Refresh has no root390px overflow. [Exact source/program evidence](HOMEWORLD_OCCUPATION_RULES.md#original-runtime-and-human-evidence).

Tupile capacity/cleanup, exceptional Duke, Basic/CHOAM rulings, other overlays,
public/save conversion and full/deployed assurance remain open. No reset or
current-garrison shortcut. Publication is not deployment; NAS prerequisites
and last observed liveab5c782 remain unchanged.

Exact code **0774ae6f83e2795330823a0d8b2e8e2c49880105** is pushed.
[CI37252859564](https://github.com/Quintine/Dune/actions/runs/37252859564) /
container111583875100 succeeds isolated storage/HTTP7 before verified-image9.
Final247 consumer cases,10 guide cases, types/lint and exact pushed build pass.
The three preserved390px QA rooms display **0774ae6** at v72/v29/v25,
with Guild spice17/6/6 and their original Mentat/native-lot/Technology states.
Managed tabs are released. Publication is not deployment; no NAS gate bypass.


**Prior checkpoint5e902e3: stable Homeworld occupation — bounded Development Verified:**
fresh original2..6 Basic/Advanced setup/selected decks and Homeworlds alone;
no played-game conversion or inferred current controller. Continuously present
sole qualification, without competing/departed/contested/restored-high history,
supports actual bank Collection/immediate ally allocation and printed Wallach/
Tleilax/Grumman/Salusa protections without physical star conversion.
Original board/shared allocation/phase order and once-only credit receipts
remain; actual Homeworld portions feed Giedi once. Original dispatcher capture
and zero-icon income admission defects are repaired, not their source guards.
Twenty-four original setups,21 new/262 affected cases, types/lint/build and
original-phase bank/native programs/four legal keep-all policies pass.

Fifty genuine2..6 samples attempted on unchanged09f8b0d tree:37 complete with
11,762 accepted actions/300 JSON continuations, including153 rejected candidates
(not a zero-rejection certificate). All50 total19,080 accepted/19,283 attempts/
491 JSON continuations. Two preserved zero-award captures finish7/14 more actions
at their original seeds on correction treeeed8f319. **39/50 finish**; nine
occupation/Salusa-combat and two low-Tupile CHOAM source-ruling captures remain
preserved, with no rerun to hide failures, forced outcome or guard bypass.

Original CLI **CPBXKFGD v14/setup** retains actual offers/cards/actors. Real
turn-two Nexus earns Guild/Harkonnen alliance. Human390px **v21/Mentat** shares
Caladan2 as1/1, gives Wallach1 to Harkonnen and awards Giedi2 once: Guild3→4,
Harkonnen8→12; original readiness reaches Mentat. Refreshed original source
cards/notice and force inspector show18 Guild reserves/0 Tanks/two separate
foreign visitors, no root390px overflow. Controlled positions are labelled;
only dedicated QA changes, no reset. Owned temporary scripts are removed.
Percentage receipts, other occupied powers, unresolved occupation/CHOAM
rulings, public starts, save conversion and full/deployed assurance remain.
[Exact source and evidence](HOMEWORLD_OCCUPATION_RULES.md#stable-continuous-occupation-prototype--5-october-2026).

Exact code **5e902e384d67b38b3dae5bc3da04b40b7766c397** is pushed.
[CI37239145022](https://github.com/Quintine/Dune/actions/runs/37239145022) /
container111544136910 succeeds: isolated storage/HTTP7 precedes verified-image
publication9. Final11 clean-boundary/reference cases, types/lint and exact
pushed build pass. CPBXKFGD remainsv21/Mentat with actual Guild4/Harkonnen12
and conserved18+1+1 Guild counters, displaying **5e902e3** at390px.
Managed tabs are released. Publication is not deployment; last observed
liveab5c782 and protected NAS snapshot/safe-point/signed-in/approval gates remain.


**Standalone E3 Nexus / Skills / selected Tech/Strongholds — bounded Development Verified:**
native Ecaz OR Moritani plus classics, exact ecaz33/all14/all12,
Basic/Advanced2..6; original Tech3+ and/or Advanced Strongholds2+, both3+.
Fifty-four original setup programs/four legal policies and26 immutable
prerequisite rejects pass; new24/affected224 cases, types/lint/build pass.
All54 genuine games finish24,845 accepted actions/no rejection,648 JSON
continuations/28 closing choices/five coalition leads on unchanged tree
`ceebd866c4de7dfd122c0ddb9754a730b7bbdd93340afddffbd26ec157561816`.
Three preserved Advanced Occupy captures finish918/752/21 more actions at
their original scenario seeds; resume restarts, not reconstructs, the stream.
The mandatory coalition guard is connected; no skipped fight or replaced
saved position. Meaningful regressions exposed and repaired wrong-army Suk rescue and
combined-dial Diplomat retreat. Selected-plan skills retain separate physical
armies; Ecaz rescues its own fixed casualties, never the ally's variable losses.

Original backed-up CLI hands/offers/IDs remain authoritative. Human390px
**YZLNTNEZ v23/Collection** spends living-Duke Cunning, wins7–5 with normal
Warmaster/held Shield against poison, releases Duke, retains five assignments,
receives original Emperor Production and city2 (12→14).
**R2S5UX5U v27/Mentat** preserves normal Guild Suk, publicly kills unused
Master Bewt3/returns its skill/pays bounty11→14 after loss, retains original
cleanup/Tech order and one private replacement, then places supply Robbery
with Cunning at Red Chasm. No eligible human Karama counter; source programs
separately exercise cancellation/stacking.
**L7C8HTQT v23/Collection** uses real Ecaz/Atreides alliance, held Arrakeen
bank2/own0, trained Sanya4/dial5/support2 and independent fixed3 rescue:
Ecaz17 reserve/0 Tanks/3 board; ally16 reserve/2 Tanks/2 board. Emperor Axlotl
transfers to Ecaz after cleanup; allied Production stays Atreides; city2 pays
12→14. Refreshed controls/force/Terror inspectors show no root390px overflow.
Only dedicated QA rooms change; conserved positions are labelled.
Advanced Harkonnen, E3 pairs/mixed families/HW/independent cards/previews,
shared Duke training, enhanced Terror relocation/HMS/Grumman, pending rulings,
public starts, save conversion and full/deployed acceptance stay guarded.
[Canonical scope and evidence](NEXUS_CARD_RULES.md#standalone-e3-nexus-skills-and-original-components--5-october-2026).

Exact code **83f825513a79d51bdd4a3a096d65e103e654251c** is pushed.
[CI37227846375](https://github.com/Quintine/Dune/actions/runs/37227846375) /
container111511103168 completes successfully: isolated storage/HTTP step7
before verified image publication step9. Final13 coalition/guide cases,
types/lint and exact pushed build pass. Rebuilt QA displays **83f8255** in all
three original human rooms with unchanged outcomes at390px; managed tabs are
released. Publication is not deployment; live **ab5c782** remains last observed
and protected NAS snapshot/safe-point/signed-in/approval prerequisites remain.


**Paired checkpoint verified and published:** exact code
**8b6bf385601dd878e81ca11d47076aa93e7cb806** is pushed.
[CI37211854749](https://github.com/Quintine/Dune/actions/runs/37211854749) /
container111464477749 completes successfully: isolated storage/HTTP step7
before verified image publication step9. Final59 module/native cases,
types/lint and exact pushed build pass; rebuilt QA displays **8b6bf38** with
both original outcomes unchanged at390px. Publication is not deployment;
last live observation remains **ab5c782** and NAS prerequisites are unchanged.

Earlier **2d24f43** / [CI37208188809](https://github.com/Quintine/Dune/actions/runs/37208188809)
failed isolated step7 and correctly skipped publication. Public metadata
revealed only exit1; authenticated logs were unavailable. Its exact cause was
not established and no production HTTP defect is claimed repaired.
The original proxy-free adapter passes25 admin and55 HTTP cases with a
checksum-verified official **Node v22.23.3** binary and same-executable test
subprocesses. Earlier npm-selected “Node22” commands actually used v26.10.0;
their successful replacement/HTTPS witnesses are Node26 evidence, not Docker.
The passing exact Docker CI now supplies the required full container proof.
Only new private QA stores changed; no existing games or unsafe POST retries.
Verifier diagnostics now expose redacted failing stages, admin request/status
and up to three failing integration names without weakening nonzero failure
or publication gates. Local missing-Docker diagnostic smoke still exits1.

**Paired E1/E2 Nexus / Skills / Tech / Strongholds — bounded Development Verified:**
both Ixians+Tleilaxu OR CHOAM+Richese plus classics, one original family47/
35+cache deck/all14/all12, selected unused Tech3..6 Basic/Advanced and/or
Strongholds2..6 Advanced; both3..6 Advanced. Original setup/offers/hands/IDs,
real closing draws, typed rescue/equal substitution, signed pair/one invoice,
phase-end industry and original winner reward-before-FaceDance remain.
New50/affected175, types/lint/build,34 original setups/26 retained prerequisite
rejects and four legal policies pass. Thirty-four genuine2..6 games complete
16,094 accepted actions/no rejection,420 JSON continuations and22 actual
closing choices on unchanged tree
`472b5705ca5376fb95f8e6ff6f40192d9f1745d7d08c41efdef2b3e53783139a`.
The older native fixture now controls the original initializer remainder and
later scalar actions; final59 module/native cases, types/lint/build pass.
Original backed-up CLI **PPL5CNEB / TZRU5GYP v10/setup** retains actual
offers/hands/IDs after a scoped original14 shuffle. Human390px **PPL5CNEB
v28/Collection** copies held Arrakeen into HMS, uses full Suboids and trained
C’tair5/dial4/support1 (bank1/own0), commits3 actual Cyborg losses, keeps1
through Suk and exchanges only the actual2 Tank losses for2 Suboids.
HMS ends1 Suboid/3 Cyborgs,12 reserves/2 ordinary Tanks,4 Cyborg reserves/
zero Cyborg Tanks. Guild Production transfers to original Ix winner;
held Arrakeen/HMS remain Ix. Support leaves wallet10, separate city2 pays12.
Actual original Face Dancer stock has no matching trainer and remains unchanged;
matching trainer death/skill return and partial Cunning are separately exercised
native source programs, not claimed as human or natural shuffle results.
**TZRU5GYP v21/Battle** declares actual immediate5/concealed3 at Habbanya17,
passes real Karama and separate Guild allowance, pays Richese4→3/Guild6→7,
reveals3 into real ordinary counters (12 reserves/8 board/last-used3).
CHOAM then spends actual Hajr as Kulon fuel, passes the native response and
moves one ordinary force WindPass14→Bight14 via legal Planetologist range3.
Hajr/Nexus are spent once; original market completion pays Heighliners1,
CHOAM19→20, not at declaration or fuel/movement. Original skill custody stays.
Controls/inspectors/refresh/source guide have no root390px overflow; only QA
rooms changed. Mixed families/E3/HW/previews, borrowed companions, native
Nexus free-return accounting, pending rulings and public/deployed gates remain.
[Canonical source and evidence](NEXUS_CARD_RULES.md#paired-nexus-skills-and-original-techstrongholds--5-october-2026).

**Classic Nexus / Skills / Tech / Strongholds — bounded Development Verified:**
original fresh skill/Nexus setup retains selected unused Tech3..6 Basic/Advanced
and/or Strongholds2..6 Advanced; both require3..6. Original base33/all14/all12,
saved offers/hands/IDs and owner/deal timing remain. Seventeen setup programs
and four retained prerequisite rejections pass;192 affected cases, types/lint/
build, original physical rescue/payment programs and four legal policies pass.
Seventeen genuine2..6 games finish11,526 accepted actions/no rejection,
303 JSON continuations and12 actual closing choices on unchanged source tree
`480664928339c7e7026564687099bb5ddda9a7391fdfea9dc054bc1d088ebd88`.
The original stranded6-seat Collection state also finishes807 accepted actions/
no rejection after the fix. Original Bureaucrat invoices are no longer guarded
in this composition; Ghola/ordinary leader guidance obeys existing captured
training prohibition without removing force Ghola or deciding replacement skills.
Controlled original backed-up CLI **P4D8MY3V v10 / UVHFYQB8 v8 setup**
preserves real offers/hands/IDs after a scoped original14 shuffle.
Human390px **P4D8MY3V v22/Collection** selects trained Fenring6/dial10/
support6/Shield with bank2/own4, saves three actual ordinary casualties
(one kept/two returned):15 reserve/3 Tanks/2 board, all five actual Sardaukar
reserved. Cleanup transfers original Guild Heighliners before inspection;
actual wallet10→6 then city2→8. **UVHFYQB8 v13/movement** spends actual
Fremen Nexus on three ordinary free returns including one actual starred piece:
17 reserves/3 Tanks, starred4 reserve/1 Tank, ordinary allowance3/elite1.
Axlotl1 accrues without wallet income, then original Revival end pays12→13 once.
Original posture/Cunning/support/rescue/cleanup/free-return/phase-end controls,
force inspectors, refresh and source guide have no root390px overflow.
Only dedicated QA rooms changed. Native overlays, HW, Banker/Mentat previews,
borrowed Smuggler arithmetic, pending rulings, public/save conversion and full
module/deployed acceptance stay separate. [Canonical scope and evidence](NEXUS_CARD_RULES.md#classic-nexus-skills-and-original-techstrongholds--4-october-2026).

Exact code **449e27b4151bf63355c2e5a270a0dd63c565f175** is pushed.
Final48 cases/types/lint and pushed build pass; rebuilt QA displays449e27b
and both unchanged original outcomes at390px.
[CI37204049860](https://github.com/Quintine/Dune/actions/runs/37204049860) /
container111441442571 completes successfully, isolated storage/HTTP step7
before verified image publication step9. No deployed claim; last live
observation remains **ab5c782**, with NAS prerequisites unchanged.

**Paired E1/E2 Nexus / Leader Skills — bounded Development Verified:** both
Ixians+Tleilaxu OR CHOAM+Richese plus classics, one family deck/all14/all12,
Basic/Advanced2..6 through original `leader-skills --nexus-cards`, no overlays.
New27/affected136, types/lint/build, twenty real setup programs, fourteen native
programs/four legal pair policies and twenty genuine2..6-seat games pass:
7,458 actions/no rejection,195 JSON continuations/four actual closing choices.
Natural Cunning combinations are not claimed. Real Basic/Advanced pair proof
conflict now routes the native signed two-token frame through original
validation/response/Guild continuation, keeping single-marker skill proofs
and companion exclusions intact. Original CLI **FZ2END3W/GZFAT6AE v8/setup**
preserves first offers/hands/IDs after a scoped original14 shuffle.
Human390px **FZ2END3W v24/Collection** uses normal Suk with full Suboids:
three Cyborg losses save1, then only two actual Tank losses exchange for two
Suboids. One Suboid/two Cyborgs remain;15 reserves/2 ordinary Tanks,5 Cyborg
reserves/zero Cyborg Tanks. Support10→9 once precedes city2→11.
**GZFAT6AE v15/movement** pays Guild1 for immediate5/concealed3, then reveals
actual3:12 reserves/8 board/last-used3; original training remains.
Actual phone controls/inspectors/refresh pass without root390px overflow;
controlled positions are labeled and only QA rooms change.
[Scope and evidence](NEXUS_CARD_RULES.md#paired-e1e2-nexus-and-leader-skills-composition--4-october-2026)
preserve foreign replacement, companion/mixed-plan, native revival and all gates.
Code **fba673d215ad0decbec675c0241e34b5ced7e422** is pushed. Final37
module/guide cases, types/lint and exact-revision build pass; rebuilt QA marker
**fba673d** preserves both physical outcomes and displays the updated390px guide.
Exact [CI37198972228](https://github.com/Quintine/Dune/actions/runs/37198972228) /
container111426544242 completes successfully: isolated storage/HTTP step7
precedes verified image publication step9. Publication is not deployment;
live **ab5c782** remains last observed.

**Classic Nexus / Leader Skills — bounded Development Verified:** fresh
classic/base33/all14 Skills/all12 Nexus, Basic/Advanced2..6, explicit original
`leader-skills --nexus-cards`, without other overlays/public starts/new rulings.
New40/affected151, types/lint/build, ten actual setup and twelve native rule
programs, four legal Suk/free-return policies and ten genuine2..6-seat games
pass (4,446 actions/no rejection,117 JSON continuations/eight closing choices).
Natural Cunning/Suk is not claimed. Actual normal and trained Suk revealed
two pending-Cunning lifecycle failures; matching original casualty commitment
now stays pending through rescue and completes only at physical settlement.
Original backed-up CLI **HKCLYXPK / APXBER55 v8/setup** preserves exact
starting hands/offers/actors after a scoped original14 shuffle.
Human390px **HKCLYXPK v20 / APXBER55 v24, Collection** chooses posture,
Cunning, Caid3 or Fenring6/dial6/support3/Shield. Normal loss4 saves1 to reserves
(14 reserve/3 Tanks/3 board); trained loss5 keeps the original7 pending until
rescue3 (1 kept/2 returned), then15 reserve/2 Tanks/3 board. Both preserve all5
starred reserves, zero starred Tanks, Shield/Suk, support10→7 once and separate
city2→9. Actual phone controls/inspectors/refresh and no root390px overflow
pass; only dedicated QA rooms change. [Scope and bounded evidence](NEXUS_CARD_RULES.md#classic-nexus-and-leader-skills-composition--4-october-2026)
preserve borrowed Smuggler, Atreides Suk/KH, pending Nexus and all release gates.
Code **3ae5e1f99455ee22e6243b9331b32adc0fab22ff** is pushed. Final50
module/guide cases, types/lint and exact-revision build pass; rebuilt QA marker
**3ae5e1f** preserves both physical outcomes and displays the updated390px guide.
Exact [CI37192972625](https://github.com/Quintine/Dune/actions/runs/37192972625) /
container111408871482 completes successfully: isolated storage/HTTP step7
precedes verified image publication step9. Publication is not deployment;
live **ab5c782** remains last observed.

**Paired E1/E2 Nexus / Tech / Strongholds — bounded Development Verified:**
fresh both Ixians+Tleilaxu OR CHOAM+Richese plus classics/one family deck
preserves Tech3..6 Basic/Advanced and Strongholds2..6 Advanced without Skills.
New18/affected139, types/lint/build, eight actual native programs and all four
legal paired-shipment/Face-Dance policies pass. Eight genuine five-seat games
complete3,926 accepted actions/no rejection/102 JSON continuations and six
real closing Nexus choices; natural Cunning use is not claimed.
Original backed-up CLI **7N2FKGKW / EFQGWA8F v10/setup** preserves actors
and first deals. Human390px **7N2FKGKW v30/Collection** activates full-turn
Suboids; actual Arrakeen and HMS-copy support each pays bank1/own0.
Three lost Cyborgs return by equal three-Suboid sacrifice; a subsequent original
Dominic Face Dancer returns two remaining winners and places two Tleilaxu
reserves inside HMS. Original Heighliners/Production remain at Ix; Tleilaxu
Cunning replaces only the revealed physical card and keeps Burseg/Soo-Soo.
**EFQGWA8F v15/Battle** sends immediate5/concealed3 to Habbanya17 for
Guild1 (Richese4→3/Guild6→7); real CHOAM Heighliners1 pays only at movement
end, wallet19→20. Original held cards, private controls/inspector/refresh and
no root390px overflow remain. Controlled positions are labeled and only QA
rooms change. [Scope, commands and bounded evidence](NEXUS_CARD_RULES.md#paired-e1e2-tech-and-stronghold-composition--4-october-2026)
preserve mixed-family/E3/Skills/HW/public/deployment and pending-ruling gates.
Code **9f254a6912e7b9e9f24234ffceae010eb5c08796** is pushed. Final28
module/guide cases, types/lint and exact-revision build pass; rebuilt QA marker
**9f254a6** displays both preserved outcomes and the updated390px guide.
Exact [CI37188948092](https://github.com/Quintine/Dune/actions/runs/37188948092) /
container job111396870925 completes successfully: isolated storage/HTTP
verification step7 precedes verified image publication step9. Publication is
not deployment; live **ab5c782** remains last observed.

**Classic Nexus / Tech / Strongholds — bounded Development Verified:**
fresh classic/base33/all12 Nexus composes Tech3..6 Basic/Advanced and/or
Advanced Strongholds2..6, without Skills, public starts or new rulings.
New24/affected188, final34 guide/module cases, types/lint/build, fourteen
actual programs and all four legal free-return policies pass. Eight genuine
four/five-seat games complete4,440 accepted actions/no rejection/116 JSON
continuations; five-seat samples include five real closing Nexus choices.
Original CLI **DPA6UGWK v10 / HXEMRA32,FQNN62UG v8** keeps undealt setup.
Human390px **HXEMRA32 v13/movement** returns2 normal+1 actual Sardaukar,
ordinary/free3 and elite1; real Axlotl1 stays pending at wallet12 then collects13.
**FQNN62UG v14/Mentat** ships5 for original Guild3 (wallet12→9),
Heighliners1 stays unavailable until real phase end and pays Harkonnen10→11.
**DPA6UGWK v18/Collection** pays bank2/own4 for support6, keeps Shield,
loses6 ordinary/no starred counters and retains1 Arrakeen survivor. Guild
spends Moritani to retain played Crysknife before original Heighliners transfer;
Emperor spends CHOAM to inspect only unused Trip to Gamont. Separate city2
yields wallet8. Actual controls, inspector, refresh and guide have no root390px
overflow. Controlled positions are labeled; no natural free-return/inspection
claim. [Scope and evidence](NEXUS_CARD_RULES.md#classic-tech-and-stronghold-composition--4-october-2026)
retain native Fremen on-planet and native-Guild-only industry exclusions.
Other modules, unresolved effects, full/public/deployed acceptance remain open.
Code **8ceee7afd097d36e2ae7471b744d127062e39c29** is pushed.
[Exact CI37181553391](https://github.com/Quintine/Dune/actions/runs/37181553391),
container job111374984514 completed/success: mandatory isolated storage/HTTP
step7 and subsequent verified-image publication step9 both pass:
`ghcr.io/quintine/dune:sha-8ceee7afd097d36e2ae7471b744d127062e39c29`.
Final rebuilt QA marker shows8ceee7a and retains original human v18/Collection,
v13/movement andv14/Mentat. Owned script/tabs are removed; store/proof remain.
Publication is not deployment; live **ab5c782** remains last observed.

**Native Tech / Strongholds without Skills — bounded Development Verified:**
fresh selected E1/E2 native or standalone Ecaz OR Moritani entry preserves
original Tech3..6 Basic/Advanced and optional Advanced Strongholds, without
Skills or public-start changes. New32 cases are included in affected187/187;
final types/lint, rebuilt surface and two final entropy consumers pass.
Thirty original admission probes, both below-three rejections, twelve actual
native programs and all four legal Face Dance policies pass. Fifteen genuine
three-seat games complete4,902 accepted actions/no rejection/125 JSON continuations.
Human390px **BZVLA22D v21/Mentat** chooses native Ecaz lead, real dial5/
support1/Sanya4 versus dial2/Bashar2:9–4, fixed Ecaz3/Guild3 casualties,
held Tabr2 income, native2+1 survivors and original Axlotl+Heighliners.
**YENG8B6U v15/Mentat** keeps losing Tuek4/support1, Master3 bounty/death,
wallet18, Guild winner Tech and one actual private Bashar replacement.
Original CLI v8 setup, refresh, public owner labels and updated reference pass;
root390px has no overflow. Controlled positions are labeled; no natural
assassination claim. Read [scope and evidence](EXPANSION_FACTIONS_PROTOTYPE.md#native-tech-composition--4-october-2026).
Other overlays, pending rulings, public starts and full/deployed acceptance
remain open. Existing games and the user PDF are preserved.
Code **2da3c9273b02efd06c283999c225f56e62214dd1** is pushed.
[Exact CI37175645562](https://github.com/Quintine/Dune/actions/runs/37175645562),
container job111357583598, completed/success: mandatory isolated storage/HTTP
step7 and subsequent verified-image publication step9 both pass:
`ghcr.io/quintine/dune:sha-2da3c9273b02efd06c283999c225f56e62214dd1`.
Final rebuilt QA marker shows2da3c92; original human v21/v15 Mentat outcomes
remain. Owned drivers/tabs are removed; rooms/store persist. Publication is not
deployment; live **ab5c782** remains last observed.

**Standalone E3 Skills / Tech / Strongholds — bounded Development Verified:**
fresh original Ecaz OR Moritani ecaz33/all14 profiles preserve Tech3..6
Basic/Advanced and Strongholds2..6 Advanced, optionally both. Original
Ecaz ordinary-five/Duke assignment and Advanced-Hark exclusions, skill-first
Moritani assassination/normal-call forfeiture and unrelated guards remain.
New15/affected152, types/lint/build and nine actual programs pass. Eight genuine
E3 games complete1,531 actions/no rejection/38 JSON continuations; broader47
games complete13,936 actions/no rejection/358 continuations on unchanged source.
Original CLI **X4YSWBLR/BJH3UVQF v8** keeps genuine setup and unused modules.
Human390px **334W75B6 v13/Collection** uses normal Warmaster1/Duke6/Carthag
Shield for a real7–6 poison-surviving win, living release and sole Axlotl.
**AL6WCG8B v13/Mentat** retains normal Guild Suk rescue, actual losing
Tuek income/support, printed Master3 bounty/skill return, winner Tech and one
private Caid replacement. Collection stays separate; refresh/no overflow pass.
Controlled positions are labeled. E3 pairs/mixtures, allied Occupy skills,
other overlays, public starts, save conversion and new rulings remain excluded.
See [scope and source-bound evidence](LEADER_SKILLS_RUNTIME.md#standalone-e3-module-composition--4-october-2026).
Full rules, assurance, AI, public and deployed acceptance remain open.
Final guide10/10, types/lint/build and rebuilt390px E3 reference pass
(351px topic, no overflow). Final isolated reload retains original human
v13/Collection andv13/Mentat; owned drivers/tabs are removed, rooms/store remain.
Code **2b7202161170a7e0c108389c273b0cc1591603ac** is pushed.
[Exact CI37165705653](https://github.com/Quintine/Dune/actions/runs/37165705653),
container job111328037714, completed/success: isolated storage/HTTP step7
and subsequent verified-image publication step9 both pass:
`ghcr.io/quintine/dune:sha-2b7202161170a7e0c108389c273b0cc1591603ac`.
Publication is not deployment; live **ab5c782** remains last observed.

**Advanced Skills / Stronghold Cards — bounded Development Verified:**
fresh classic or supported E1/E2 native2..6 Advanced preserves original
all14 skills/six unused cards; optional Tech requires3..6. Original setup,
decks/cache/wallets, real end-Mentat card control and printed/first-Storm Tech
remain. No Basic Strongholds, E3/other overlays, public starts, save conversion
or unrelated rulings. New21/affected277/final fixture-consumer72 cases,
types/lint/build and twelve actual rule programs pass. Twenty-two genuine
paired/triple-module3-seat games complete6,672 actions/no rejection and171
JSON continuations on captured unchanged source. Original CLI **J5AAWGEQ v8**
and **NY6Y4J4K v10** retain real setup and unused Strongholds/native Tech.
Human390px **HERCFX3B v20/Mentat** pays4 after Arrakeen bank2, rescues3,
retains Shield and original winner Tech, then collects separate Banker12→13.
**PG2GR3RC v26/Collection** declares real HMS copy and uses bank1/own0,
typed4 Suboid+2 cyborg losses and real rescue before original Axlotl reward.
Market/phase openings remain native; refresh retains both versions/outcomes.
Controlled positions are labeled, not claimed natural histories. Original
copied-Diplomat/skill-Stone and other guards remain. See
[combined scope and source evidence](LEADER_SKILLS_RUNTIME.md#advanced-stronghold-composition--4-october-2026).
Full combinations, assurance, AI, public and deployed acceptance remain open.
Final guide10/10, types/lint/build and rebuilt390px reference pass (351px topic,
no overflow); original human v20/Mentat andv26/Collection remain after the
final isolated QA reload. Owned drivers/tabs are removed; rooms/store remain.
Code **f259488a9a6a507d450c5134f6f627ea2151256b** is pushed.
[Exact CI37159813365](https://github.com/Quintine/Dune/actions/runs/37159813365),
container job111310738376, completed/success: isolated storage/HTTP step7
and subsequent verified-image publication step9 both pass:
`ghcr.io/quintine/dune:sha-f259488a9a6a507d450c5134f6f627ea2151256b`.
Publication is not deployment; live **ab5c782** remains last observed.

**Native E1/E2 Leader Skills / Tech Tokens — bounded Development Verified:**
fresh supported Ixian/Tleilaxu/CHOAM/Richese Basic/Advanced3..6-seat entries
preserve canonical unused tokens, original family decks/all14 skills, Richese
cache and native setup/first-Storm owners. Other overlays/E3, public starts,
save conversion and unrelated rulings remain excluded. Existing Richese
Banker invoice validation admits native marker/event fields; payment, typed
casualties, Suk/card cleanup and original winner Tech before Face Dance remain.
Native52/52, shared261 passing plus the corrected exact obsolete-rejection case,
types/lint/build and nine actual rule programs pass. Seventeen genuine3-seat
games (fifteen native) complete5,733 actions/no rejection and149 JSON
continuations on unchanged source. Original CLI **VQ3AVFTC/M7HPHNTN/PQ6U2X4S**
retain native setup atv7. Human390px **7RPHJN87 v15** rescues actual mixed
Suboid/cyborg losses before retaining Shield and taking sole Axlotl;
**F244P8DT v8** replaces actual board/reserve sources after original Guild
Tech reward, preserving win/cards/bounty; **YWVH5XQF v8** ships concealed5
plus one free physical companion for1 while original Tech and unavailable
Banker currencies remain separate. Refresh preserves those versions/outcomes.
See [scope, source pages and evidence](LEADER_SKILLS_RUNTIME.md#native-e1e2-tech-tokens-composition--4-october-2026).
Full combinations/assurance/AI/public/deployed gates remain open.
Final guide10/10, types/lint/build and rebuilt390px native reference pass
(351px topic, no page overflow). Original human versions remain after the
final isolated QA reload; owned temporary drivers/tabs are removed.
Code **219489ae04896ab838735a25091b76a3e4e5bd24** is pushed.
[Exact CI37156345578](https://github.com/Quintine/Dune/actions/runs/37156345578),
container job111300388598, completed/success: isolated storage/HTTP step7
and subsequent verified-image publication step9 both pass:
`ghcr.io/quintine/dune:sha-219489ae04896ab838735a25091b76a3e4e5bd24`.
Publication is not deployment; live **ab5c782** remains last observed.

**Classic Leader Skills / Tech Tokens — bounded Development Verified:**
fresh classic3..6 Basic/Advanced `leader-skills` and separate `banker-income`
preserve unused selected Tech Tokens with base33/all14 and original setup/
first-Storm ownership. Native rosters and other overlays remain separate;
no public start, played-game conversion or pending-ruling change is added.
New25 and affected shared/CLI146/146, types/lint/build and seven native programs
pass. Eight genuine Basic/Advanced3..6 games complete2,712 accepted actions,
no rejection and69 JSON continuations on a stable source tree. Original
**WHTKGXEJ/5YMNGCCT v7** retain native skill/prediction setup and unowned tokens.
Human390px **63LV57W2 v13/Mentat** ships physical5 at actual Smuggler cost4:
native wallet10→6, separate Emperor Heighliners1 and Atreides Banker-front1.
At phase end Emperor10→11; ordinary city income takes Banker10→12 while its
front1 stays unavailable. Original readiness collects it once to13; refresh
keeps the empty pile. **HC35JG8P v18/Collection** retains a genuinely earned
two-token opponent. Skilled Staban5/dial4/support4/Crysknife/Shield wins9–0;
Suk keeps one and returns two, leaving original Guild Hagga5/reserves12/Tanks3
(including two earlier casualties). Actual card cleanup keeps both; human takes
only Axlotl, Emperor keeps production. Wallet3 before separate board Collection6
becomes9 after refresh. Original optional Diplomat decline, rescue and mandatory
token choice use existing controls. The guide is351px within390px.
Controlled positions are labeled, not claimed natural histories. Owned drivers/
tabs are removed, rooms/store remain; full assurance/AI/public/deployed gates stay.
See [native scope and evidence](LEADER_SKILLS_RUNTIME.md#classic-tech-tokens-composition--4-october-2026).
Final guide10/10, types/lint/build and the final rebuilt390px reference pass;
the final isolated QA reload retains human v13/Mentat and v18/Collection.
Code **b71f953635e013dab3fd184baf01523681883fdc** is pushed.
[Exact CI37146422525](https://github.com/Quintine/Dune/actions/runs/37146422525),
container job111271205483, completed/success: isolated storage/HTTP step7
and subsequent verified-image publication step9 both pass:
`ghcr.io/quintine/dune:sha-b71f953635e013dab3fd184baf01523681883fdc`.
Publication is not deployment; live **ab5c782** remains last observed.

**Standalone E3 Stronghold composition — bounded Development Verified:**
fresh Advanced `stronghold-factions` admits native Ecaz OR Moritani with classic
opponents, the exact ecaz33 deck and six Stronghold Cards alone; Moritani excludes
Harkonnen. Original setup/end-Mentat control, Ecaz selected-holder-only effects
and Moritani native loss/assassination compose without public or played-game
changes. E3 pairs, mixed families and unrelated overlays remain separate.
Affected native/CLI179/179, final Richese8/8, types/lint/build and original
controlled rule programs pass. Four genuine E3 two/three-seat games complete642
accepted actions/no rejection,15 JSON continuations and3 battles, with no natural
assassination claim. Original CLI **XK8X548M/HALWWQ6V v6** retain Traitor setup
and six unowned cards. Human390px **N5SQHZE4 v18/Mentat** uses actual Ecaz lead,
total6/support3/Sanya4/Shield: fixed Ecaz3 is free, actual bank2/personal1 takes
native wallet1→0 before separate Collection2 each. Ecaz2/Guild1 survive; Shield
remains held, Ecaz wallet2/Guild7 after refresh. Human390px **ANUJE8L5 v11/Mentat**
reveals Master Bewt printed3 after actual losing Tuek income4/support1:
wallet15→18, original Guild three-dial casualties once, one private Burseg
replacement and public retired card. Actual enlarged faces are readable at390px.
The controlled boards/cards are labeled, not claimed natural history.
See [scope and source effects](STRONGHOLD_CARDS.md#standalone-e3-stronghold-composition--4-october-2026).
Full combinations/assurance/public/deployed acceptance remain open.
Final guide10/10, types/lint/build and the rebuilt390px guide pass (351px topic).
The final QA worker reload preserves both original Mentat versions; owned
temporary drivers and managed tabs are removed.
Code **39e2954ab468aa252d91a33e2e0b52f99a2fe135** is pushed.
[Exact CI37133540369](https://github.com/Quintine/Dune/actions/runs/37133540369),
container job111233294920, completed/success: isolated storage/HTTP verification
and subsequent verified-image publication both pass:
`ghcr.io/quintine/dune:sha-39e2954ab468aa252d91a33e2e0b52f99a2fe135`.
Publication is not deployment; live **ab5c782** remains last observed.

**Basic Ecaz Occupy even-force — bounded Development Verified:**
fresh Basic `ecaz-occupy` now admits native Ecaz with classic or optional
Moritani opponents and the exact `ecaz` deck, no optional modules. Genuine
setup, original Nexus/worm alliance, shipments, Karama and Collection remain
native; older played Basic tables are not retrofitted. For an even Ecaz force
count the publisher page-8 paragraph and the page-15 example agree, so the
contribution and ordinary-win Ecaz losses are E/2. Their odd-count examples
still contradict each other, so an uncanceled odd Basic count is rejected at
the original battle choice before any lead frame is saved — not rounded,
canceled or replaced. Advanced keeps its separately authorized ceiling
arithmetic. Basic has no Emperor/Fremen elite inventory and its supplied
support normalizes to zero, so the shared editor blocks nonzero support rather
than inventing a Basic payment rule.
The pure coalition quote now requires an explicit `advanced` band with no
default or alias; every production re-quote caller passes the actual band.
Affected Basic/helper cases47/47, the affected Advanced/CLI union352/352 on a
stable tree, types and lint pass. Five genuine Basic two-through-six-seat games
were run: four complete with 2,090 accepted actions, no rejections and 54 JSON
continuations; four-seat seed **20261299** is captured at the preserved
odd-count conflict after 321 accepted actions. It is not rerun or bypassed.
Those four completed natural games contain no coalition lead choice, so the
actual coalition arithmetic evidence comes from the controlled programs and the
human path. Authenticated human390px **FEJ6SBFB v14** kept the admitted
Ecaz/Guild/Emperor seats and native wallets, then used a conserved even-force
board after a genuine Nexus alliance. The table showed the correct Basic labels:
a total-dial slider bounded2..6 (2 fixed Ecaz strength for four Ecaz forces,
variable pool Guild's four) with no spice-support control. Real sealed plans
(Ecaz Sanya4 plus total dial4 against Emperor Hasimir6) produced an8–6 Ecaz win;
the log and state record Ecaz's two mandatory Occupy casualties, Guild's two
variable casualties, and the Emperor's eight territory forces to the Tanks. Every
seat remains at20 physical forces after refresh. See
[Basic even-force source](ECAZ_OCCUPY_RULES.md#basic-even-force-composition--4-october-2026).
Full combinations/assurance/public/deployed acceptance remain open.
Code **5f082696a60ac8b75e3eb4bcaa042826526fbdac** is pushed.
[Exact CI37116854539](https://github.com/Quintine/Dune/actions/runs/37116854539),
container job111185228169, completed/success: isolated storage/HTTP verification
and subsequent verified image publication both pass:
`ghcr.io/quintine/dune:sha-5f082696a60ac8b75e3eb4bcaa042826526fbdac`.
Publication is not deployment; live **ab5c782** remains last observed.

**Native Ecaz ordinary-disc Skills — bounded Development Verified:**
fresh Basic/Advanced Ecaz with classic opponents retains the exact `ecaz` deck,
all fourteen skills, five native assignment discs and original Loyalty/setup.
Ordinary role scores, physical Suk rescue, trainer death/own revival and
Ambassador handlers compose. Separately acquired Duke6 gets only normal
Warmaster1, not trained-disc3; release/death preserves the actual native trainer.
Existing-skilled Ecaz paid5 Duke revival retains the earlier living set-aside
result. Shared-Duke assignment, combined Occupy skills, Advanced Harkonnen and
other roster/module boundaries remain explicit.
Affected67/67, types/lint/build and twenty controlled programs pass. Ten genuine
Basic/Advanced two-through-six-seat games complete4,264 accepted actions/no
rejection,110 JSON continuations and59 battles, including50 Ambassador choices
and one Suk rescue. Original CLI **24HGMJCD v4** retains native setup.
Human390px **LQWE8TZM v18** keeps admitted seats, then uses a conserved
pre-placement board. Actual Ecaz token costs1, Emperor reserve arrival costs1,
and the original owner acquires Duke. A second conserved board/card position
retains that actual acquisition. Real face-up Sanya Ecaz/Warmaster, Duke6,
Baliset and dial0 beat Captain Aramsham5/dial2/support2 by the original7–7
aggressor tie. Native cleanup keeps Baliset and releases living Duke; refresh
retains Collection/wallet11/eight real Wind Pass counters/Tanks0 and unchanged
training. Opponent's owned view retains wallet7 after the actual two-spice
support. The enlarged Duke component is readable at390px.
See [native scope](LEADER_SKILLS_RUNTIME.md#native-ecaz-ordinary-disc-composition--4-october-2026).
No natural-history claim for controlled positions, full assurance, calibration,
public activation or deployed acceptance.
Final native/guide19/19, types/lint/build and hydrated390px guide pass
(351px topic). The updated Duke inspector now states the implemented
revival/native-skill scope; actual visible proof and QA worker reload retain
human v18/Collection/wallet11/eight counters/living set-aside disc.
Owned temporary drivers/tabs are removed; original games and store remain.
Code **f17f4e703eb09d0870abb3233974da2f31f24bea** is pushed.
[Exact CI37110175538](https://github.com/Quintine/Dune/actions/runs/37110175538),
container job111166376104, completed/success: isolated storage/HTTP verification
and subsequent image publication pass:
`ghcr.io/quintine/dune:sha-f17f4e703eb09d0870abb3233974da2f31f24bea`.
Publication is not deployment; live **ab5c782** remains last observed.

**Native Richese Skills and contribution recipients — bounded Development Verified:**
Basic/Advanced fresh native Richese retains its required CHOAM deck, separate
ten-card cache, original setup and all fourteen skills. Canonical green
Richese Specials can supply Planetologist strength without their native effect;
marker-only force loss feeds actual capped Suk rescue. Ordinary allied
declarations and own Smuggler companions retain their separate physical rules.
Advanced Richese ally contributions now go to Emperor/bank, separately from
buyer-to-Richese credit; Basic keeps its publisher receipt. Normal Banker
uses only final bank legs and cannot spend deferred spice before native Mentat.
Final affected rule/CLI union151/151, types/lint/build and eleven controlled programs pass.
The genuine29-game batch is **not green**:28 finish11,788 accepted actions,
303 JSON continuations and130 battles; six-seat Advanced seed20261267 stops
after1,523 actions at the retained exhausted-cache count ruling guard.
The captured state/report remain intact; selected two/three-seat follow-ups
finish without rejection after native marker eligibility integration.
Original CLI **FXK6Z8BW v6** retains setup. Human390px **358WLPYA v16**
uses original admitted identities followed by a conserved zero-marker battle:
Ein5/Residual Poison/+2 wins7–7, without its native leader-kill effect or any
physical marker casualty. Original cleanup/refresh reaches Collection with
reserves20/Tanks0. Human **E2K2U5ZW v26** uses real funded cache controls:
buyer4/Richese4 buys one Ornithopter for8, Richese earns buyer4 and donor4 goes
to bank. Guild Banker earns one unspendable front-shield spice, retains it
through original Revival/movement/Collection, and collects once at Mentat
(wallet6→7); refresh keeps the empty pile. The detailed guide is readable at
390px (351px topic). See [native scope and evidence](LEADER_SKILLS_RUNTIME.md#native-richese-composition--4-october-2026)
and [Advanced recipient authority](RICHESE_AUCTION_RULES.md#authorized-advanced-contribution-recipients--4-october-2026).
Mixed own No-Field, exhausted-cache arithmetic, special-lot Technology,
positive Black Market self-bidding and other existing rulings remain gated.
No full assurance, calibration, public activation or deployed evidence.
Code **032b41aa8721fd869a1b25d0fd29213c22b9ba69** is pushed.
[Exact CI37107445770](https://github.com/Quintine/Dune/actions/runs/37107445770),
container job111158645504, completed/success: isolated storage/HTTP verification
and subsequent verified image publication both pass:
`ghcr.io/quintine/dune:sha-032b41aa8721fd869a1b25d0fd29213c22b9ba69`.
Final guide10/10/build and fresh390px visible guidance pass; the reloaded
isolated QA worker retains human payment v26/Mentat/wallet7/empty deferred pile.
Owned throwaway drivers/tabs are removed; captured games and store remain.
Publication is not deployment; live **ab5c782** remains last observed.

**Advanced Moritani Skills — bounded Development Verified:**
all fourteen skills now compose with the original native/classic non-Harkonnen
assassination preview, exact `ecaz` deck and five native assignment discs.
Winner Suk rescue and Rihani choice precede assassination; completed casualties
do not replay. Actual trained-disc death returns its card once with only printed
bounty; normal traitor revelation still forfeits assassination for the game.
Affected64/64, CLI2/2, final native/guide25/25, types/lint/build and nine
controlled runtime cases pass. Five genuine games finish1,425 accepted actions/
no rejection,37 JSON continuations and24 battles; none opens assassination.
Fresh original CLI **7JGUWMAP v6** retains setup. Human390px **TQH86DL4 v20**
uses original admitted identities followed by a conserved battle/traitor/hand/
disc position. Actual Captain Aramsham5 plus normal Warmaster1 beats Vando1,
then native Moritani reveals the different Hasimir Fenring6, gains6 and returns
Warmaster once. Actual winner Trip to Gamont disposal and native Mentat produce
one private replacement; owned enlarged inspection and refresh keep wallet18/
Tanks8 with the retired card absent from the hand. The detailed current guide
is visually readable at390px (351px topic).
See [native Moritani composition](MORITANI_LEADER_SKILLS.md#advanced-assassination-composition--4-october-2026).
Basic/Harkonnen entries, Ecaz/Duke assignment, ordinary/private-step UX and
other roster/module gates remain. No full assurance, AI calibration or deployment.
Code **d41a7e03a94bcc785e1417d26a882c5f6dc2ac4e** is pushed.
[Exact CI37100245846](https://github.com/Quintine/Dune/actions/runs/37100245846),
job111138195904, completed/success: isolated storage/HTTP verification and
subsequent verified image publication pass:
`ghcr.io/quintine/dune:sha-d41a7e03a94bcc785e1417d26a882c5f6dc2ac4e`.
No deployed claim; live **ab5c782** remains last observed.

**Advanced Tleilaxu Skills and foreign gholas — bounded Development Verified:**
native Tleilaxu, optional Ixians/CHOAM and classic seats now compose all fourteen
skills with original half-price foreign revival and no foreign skill draw.
Native trainer normal bonuses, own revival, dead-ghola negotiated return,
Harkonnen capture/revelation/use-return/execution and Face Dance retain their
original handlers. Actual captured-plan revelation exposed a new integrity
overconstraint; it now permits the original public disclosure transition.
Affected56/56, native CLI3/3, types/lint/build and nine controlled runtime cases
pass. Fourteen genuine games finish6,620 accepted actions/no rejection,
171 JSON continuations,62 battles, two foreign and five own leader revivals.
Original CLI **H485PLF5 v6** retains native setup. Human390px **VNQ5PF54 v33**
begins at an explicitly conserved Revival/Worthless/storm position after
genuine setup, then uses actual foreign revival, funded shipment and battle:
Bashar costs1, no skill offer; two real Wind Pass counters cost4; face-up Zoal's
Warmaster gives the foreign Bashar2 exactly+1 with Trip to Gamont, defeating
Caid3 on the aggressor tie3–3. Actual cleanup/opening reaches Collection with
two board counters, wallet0 and the living controlled foreign disc after refresh.
The detailed current guide is visually readable at390px. See the
[native Tleilaxu contract](TLEILAXU_LEADER_SKILLS.md#advanced-native-composition--4-october-2026).
Basic/public starts, captured replacement, Advanced Atreides Suk/KH and other
optional-module/ruling gates remain. No full assurance or deployed claim.
Final native15/15, all nine runtime cases and types/lint/build pass after
per-action public-profile validation is computed only once when foreign discs
exist. The final isolated build retains human v33/Collection and CLI v6/setup.
Code **d86d2088e6acc020e44bda0dfbba5093ec98df8f** is pushed.
[Exact CI37095454758](https://github.com/Quintine/Dune/actions/runs/37095454758),
job111124330662, completed/success: isolated storage/HTTP verification and
subsequent image publication both pass:
`ghcr.io/quintine/dune:sha-d86d2088e6acc020e44bda0dfbba5093ec98df8f`.
Publication is not deployment; live **ab5c782** remains last observed.

**Advanced native Ixian/CHOAM Leader Skills — bounded Development Verified:**
fresh two-to-six-seat native Ixian and/or CHOAM plus classic tables retain
all fourteen skills, distinct required family decks and genuine native setup.
Typed support, mixed Suk rescue and native Suboid substitution compose; CHOAM
keeps Auditor exclusion, original support payer/income and Smuggler Collection
order. Explicit private Mentat and separate normal Banker opt-ins also retain
their original boundaries. Basic/public starts and unresolved rulings are unchanged.
Affected122/122, types/lint/build, ten controlled actual native programs and
three genuine CLI games pass:511 accepted actions/no rejection/twelve JSON
continuations. The natural games contain no battles, so they do not certify
battle effects. Fresh CLI **KFW75TCB v6** and human390px **ARRHUS7Z v20**
preserve original seats; actual typed-loss/rescue/substitution controls reach
Collection after refresh with wallet9, three board counters including one
cyborg and four Tanks counters. Controlled battle positions are staged after
genuine setup, not represented as natural histories. See the
[Advanced native skill contract](LEADER_SKILLS_RUNTIME.md#advanced-native-ixian-and-choam-composition--4-october-2026).
Full assurance/deployment remains open; live **ab5c782** remains last observed.
Final CLI2/2 and native/guide18/18 pass after the contract update. The latest
isolated build preserves human v20/Collection/wallet9; its native-scope guide
is visually readable at390px (351px topic width).
Code **7ee064df14b79a06d41317f9f8eb193e078d2219** is pushed.
[Exact CI37092109758](https://github.com/Quintine/Dune/actions/runs/37092109758),
job111114441767, completed/success: isolated storage/HTTP verification and
subsequent image publication both pass:
`ghcr.io/quintine/dune:sha-7ee064df14b79a06d41317f9f8eb193e078d2219`.
No deployed claim.

**Native Richese Occupy — bounded Development Verified:**
Richese-present Advanced tables now resolve their mandatory Ecaz coalitions
instead of rejecting unrelated native factions. Ordinary or marker-only Richese
pools retain the selected plan owner, original force owners and concealed
0/3/5 reveal timing. Stone/Mirror compare actual undialed physical counters,
including the fixed Ecaz remainder; cancellation uses only the selected own pool.
The original same-owner mixed No-Field, whole-plan disclosure, Ix Stone/Tooth,
Harass/Stone and optional-module guards remain. Basic/public starts are unchanged.
Affected363/363, types/lint, build and26 actual native programs pass.
The previously failed genuine six-native Advanced sample finishes2424 accepted
actions/no rejection/65 JSON continuations. Fresh CLI **GQ4FEWNW v8** and
human390px **T78EFNZK v22** exercise original setup, private combined total5/
support2, No-Field5 materializing only two reserves, actual owner losses and
native CHOAM income/Collection. See
[native Richese composition](ECAZ_OCCUPY_RULES.md#native-richese-no-field-and-stone-composition--3-october-2026).
The final guide is readable at390px; the original human v22 state remains at
Collection after the required isolated worker reload. A stale prior-build guide
chunk required a cache-free local navigation; deployed cache-upgrade acceptance
is not claimed.
Code **113667da55647117082c0a502eded30d8d9bdb2e** is pushed.
[Exact CI37074437398](https://github.com/Quintine/Dune/actions/runs/37074437398),
job111061051259, completed/success: original isolated storage/HTTP verification
and subsequent image publication both pass:
`ghcr.io/quintine/dune:sha-113667da55647117082c0a502eded30d8d9bdb2e`.
No deployed claim; live **ab5c782** remains last observed.



**Mixed current-fact/shipment Truthtrance — bounded Development Verified:**
structured questions now combine supported current facts with this-turn reserve
shipments in bounded nested AND/OR trees. Current facts freeze privately at a
definite answer; later legal card/force/spice changes cannot rewrite them, and
unknown is never treated as false. One eventual shipment or skip honors every
separate promise. Default public parsers reject caller-supplied frozen answers;
only the respondent receives the compiled fixed answers.
Two bounded owners supplied the pure expression logic and nested authoring
controls; one integration owner wired the question, private projection,
promise receipt, public redaction, policies and existing continuation.
Types/lint, affected88/88, mixed/reference23/23 and build pass. Eight actual
program cases cover the four truth/skip/shipment/changed-spice paths and all four
policies; nested and joint promises have rule regressions. Human390px **4PVKRRWB v10**
authored and answered the actual OR question, then spent all20 spice as a bribe, skipped shipment and
fulfilled the promise while its public answer stayed Yes. Earlier phases, other
future actions and existing module gates remain unfinished. See
[mixed compounds](COMPOUND_SHIPMENT_PROMISES.md#mixed-current-facts-and-future-shipment--3-october-2026).
Code **cd985c7c34a05057ed98b34838effdbcddb7697d** is pushed.
[Exact CI37065338944](https://github.com/Quintine/Dune/actions/runs/37065338944),
job111031663449, completed/success. Existing isolated storage/HTTP verification
and verified-image publication pass:
`ghcr.io/quintine/dune:sha-cd985c7c34a05057ed98b34838effdbcddb7697d`.
The prior full offline run exposed a pre-existing native combined-Occupy
integration failure, not an illegal bot offer; native Richese composition now repairs it.
No deployment or new assurance campaign; live **ab5c782** remains last observed.

**Requested priority — 2 October 2026:** throughput improvements are verified
and rule content has resumed. Implement all remaining rules first; comprehensive
review and save/recovery/privacy/custody assurance follow afterward, not at each
prototype. Keep legal rule behavior, usable controls, minimal legal AI and
changed-path smoke. Existing games are not reset/deleted; secret protection,
authorization and deployment/publication safeguards remain intact. Use the
[bounded context index](DEVELOPMENT.md#context-index) and
[feedback/proof schedule](DEVELOPMENT.md#feedback-and-proof-schedule).

**Native payment rules — bounded Development Verified:** `banker-income` now
admits supported Basic Ixian/Tleilaxu/CHOAM/Moritani skill rosters with all14
skills and their original single-family decks. Tleilaxu self-revival and canceled
revival income preserve actual payer debit, not the separate free-revival award.
`ixian-replacement` adds Basic Tleilaxu/classic Ix47 with Ixians absent and Nexus
alone; only this fresh variant omits optional Sandtrout. Original payment,
actual purchased-card discard/top draw and native auction suffix stay unchanged.
Two bounded owners supplied source/fixtures; one integration owner repaired
the two real revival bank-hook gaps and the premature Ix Mentat smoke endpoint.
Types/lint, affected110/110, final native/guide26/26 and build pass.
Twenty-eight actual programs cover12 Banker cases,12 replacement cases and4
post-income policy continuations. Human390px **86WQMSZV v18** proves actual
four-spice self-auction, deferred1 with Ix wallet10, then real Mentat11;
**NMFTVV6N v8** proves Thumper→Amal, spent Ixian Nexus, unchanged buyer3
and original Emperor10→12 before phase4 opening. Genuine CLI **7B55PLA5 v8**
and **XLFRHKPF v6** preserve original native setup. No new assurance campaign,
public start, pending ruling answer or old-game retrofit. See
[native Banker](SPICE_BANKER_RUNTIME.md#basic-native-banker-integration--2-october-2026)
and [native replacement](NEXUS_IXIAN_REPLACEMENT_RULES.md#native-basic-tleilaxu-integration--2-october-2026).
Final reference10/10 and build pass; both390px Partial/Development Verified
guides show the native boundary, and eleven changed-region local links/anchors
are valid. All owned tabs/workers are closed and five smoke drivers removed;
private inputs/CLI backups remain outside the checkout.
Code **b83d75d9d313d2ff1926e11f2155ea0c78ed1757** is pushed.
[Exact CI36999767861](https://github.com/Quintine/Dune/actions/runs/36999767861),
job110814548718, completed/success. Existing isolated storage/HTTP verification
and subsequent verified-image publication pass:
`ghcr.io/quintine/dune:sha-b83d75d9d313d2ff1926e11f2155ea0c78ed1757`.
No deployment or new assurance campaign; live **ab5c782** remains last observed.


**Native Mentat preview — bounded integration:** explicit fresh
`--profile leader-skills --mentat-question` connects the existing private
question to supported Basic Ixian/Tleilaxu/CHOAM/Moritani skill starts.
Exact/default weapon roles, compulsory held-card or fallback disclosure,
posture and native battle continuation reuse the existing controls and policies.
Five new behavior cases and twelve actual runtime scenarios pass; the affected
inquiry/lifetime rule batch passes45/45. Uniform-response UX, empty hands,
Advanced native skills and other modules remain pending; public/default starts
are unchanged. See
[native scope](MENTAT_QUESTION.md#native-skill-integration--2-october-2026).
Final types/lint, build and guide/inspector12/12 pass; eighteen changed-region
local links/anchors are valid. Genuine flagged CLI room **BGK6YQCK v6** reaches
native Ixian setup. Human390px **8HTTTZMA v9** asks for Weirding Way, answers
privately, inspects the observation and conceals the native Mentat. Fresh
**6ZR8HPWD v6** verifies Reinforcements' own inspector/topic and battle-slot
hand explanation without changing its provisional outcome cost.
Code **589e1b9df245cff4577f9c1d0094eca3f6db4b29** is pushed.
[Exact CI36990728282](https://github.com/Quintine/Dune/actions/runs/36990728282),
job110786065439, completed/success. Existing isolated storage/HTTP verification
and verified-image publication both pass; image
`ghcr.io/quintine/dune:sha-589e1b9df245cff4577f9c1d0094eca3f6db4b29`.
No deployment or new assurance campaign; live **ab5c782** remains last observed.


**Authorized Advanced Moritani forfeiture:** the supplied PDF physical35 resolves
the old duration question: a normal own-Traitor-Card reveal forfeits Assassinate
Leaders for the rest of the game, across turns and opponents. The persisted
normal-call flag already enforced that scope; guidance, public history and the
log now name the sourced forfeiture. Basic, exceptional leader custody and the
private-step UX preview gates are unchanged. A permanent engine regression
exercises a genuine turn advance plus a real later loss with no opportunity and
the owner-facing forfeiture reason. See
[the cutover](MORITANI_ASSASSINATE_LEADERS.md#authority-and-advanced-duration-cutover)
and [authorized source](RULE_DECISIONS.md#authorized-source-amendment--1-october-2026).
Final types/lint, coherent assassination/guide38/38, build and390px Prototyped
guide pass; four changed-region local links/anchors are valid.
Code **934b2ee4d7c5d41905bb339a62b64fb8824d2034** is pushed.
[Exact mandatory CI36986837326](https://github.com/Quintine/Dune/actions/runs/36986837326),
job110773684551, completed/success: existing isolated storage/HTTP verification
passed before publication of
`ghcr.io/quintine/dune:sha-934b2ee4d7c5d41905bb339a62b64fb8824d2034`.
No new assurance campaign or deployment; live **ab5c782** remains last observed.

**Independent cards + Advanced Occupy — bounded Development Verified:** fresh
explicit CLI `--ecaz-treachery` adds all three physical cards36/50/38/50.
Own Ecaz Harass returns only its floor count while original mandatory ceil
stays fixed/free; allied/opposing/canceled typed pools stay owner-labelled.
Reinforcements retains provisional own3-reserve/+2-score accounting.
Native/pure67, affected284/284 and27 actual programs/four policy seals pass.
Current46 complete games:26,619 accepted/no rejects/696JSON continuations,
source unchanged and9 combined lead choices. Full counters correct earlier
compact-summary misreading: prior five/23-game batches had1/3 choices.
Original CLI/human390px **T8T3ZYWH v12** and **WW54BZGM v12** prove own
withdrawal/fixed loss and decisive +2/own reserve cost through actual Collection.
Current mandatory-discard owner/selected-commitment blockers are fixed; Basic/
unprofiled co-side guard stays. Final scoped reviews find no defect.
See [combined-card source and proof](ECAZ_OCCUPY_RULES.md#independent-cards-with-combined-armies--2-october-2026).
Final types/lint, canonical guide10/10, build,390px bounded guide and actual
explicit-variant CLI help pass; ten changed-region local links/anchors are valid.
Owned drivers/tabs/workers are removed/closed without resetting games.
Code **cd532222a5dd098dc7a4a1d3ec6383f5bdde62b2** is pushed.
[Exact mandatory CI36980970342](https://github.com/Quintine/Dune/actions/runs/36980970342),
job110755165940, completed/success: existing isolated storage/HTTP verification
passed before publication of
`ghcr.io/quintine/dune:sha-cd532222a5dd098dc7a4a1d3ec6383f5bdde62b2`.
This is existing-pipeline evidence, not a new assurance campaign or deployment;
live **ab5c782** remains the last observed marker.

**Native E1/E2 Ecaz Occupy — bounded Development Verified:** existing profile
now composes Ixians/Tleilaxu/CHOAM with Ecaz/classic/optional Moritani2..6 and
distinct selected E3/E1/E2 ordinary33/47/35 decks. Physical Ix owns native
Suboid substitution, selected lead keeps card aftermath; CHOAM original paid
support shares exclude free fixed Ecaz strength. External FaceDance returns
both winning armies with combined maximum; own-winning Tleilaxu is excluded.
Native34, affected191/191, types/lint and19 actual program cases pass;23
unstaged games complete13,004 accepted/no rejects/339JSON continuations,
source unchanged. Full `results.json` records three combined lead choices;
human390px **5B4FW8D3 v12** and **UVGT4DLN v10** exercise explicit rule edges.
Two scoped rule reviews find no defect. Richese mixed planning, optional
overlays, full factions/public starts remain gated; assurance follows all rules.
See [native force-owner integration](ECAZ_OCCUPY_RULES.md#native-e1e2-force-owner-integration--2-october-2026).
Final types/lint, canonical guide10/10, build and390px expanded guide pass;
six changed-region local links/anchors are valid. Owned drivers/tabs/workers
are removed/closed without a saved-game reset.
Code **1057eb271938a92a651feebeeef13738659ec8c0** is pushed.
[Exact mandatory CI36966120859](https://github.com/Quintine/Dune/actions/runs/36966120859),
job110710144783, completed/success: existing isolated storage/HTTP verification
passed before publication of
`ghcr.io/quintine/dune:sha-1057eb271938a92a651feebeeef13738659ec8c0`.
No new assurance campaign or deployment; live **ab5c782** remains last observed.

**Advanced Ecaz Occupy — bounded Development Verified:** the authorized
supplied PDF physical32/19 resolves ceiling-half free Ecaz contribution,
floor-half ordinary survivors and selected-lead-own forces after Karama.
Whole-army Advanced storm eligibility (physical6/11) retains canonical
co-side membership for native voluntary BG advisor conversion. Basic and the
specific Ecaz-only Duke/Ghola decision stay unchanged.
Seven actual native-program cases and named repair feedback18/18 pass, with
types/lint, all four actual legal policies and two original CLI/human390px
battles: **Q5Z2WH8X v22**, Ecaz lead total9/free Fedaykin leaves Ecaz2/Fremen0;
**LZHMY454 v14**, printed Karama, own dial1/support1 leaves Ecaz2/Guild4 and
debits exactly1. Both reach original Collection. Source/rule and integration
reviews have no remaining finding. Fresh profile remains Ecaz/classic/optional
Moritani2..6 Advanced, base33/no overlays; full Ecaz and public starts remain gated.
See [the cutover and proof](ECAZ_OCCUPY_RULES.md#authorized-advanced-cutover--2-october-2026).
Final coherent affected rule/guide **173/173** passes. Current-source five
unstaged2..6 games complete:2,123 accepted actions, zero rejections and54JSON
continuations, `sourceUnchanged:true`. Full `results.json` records one
combined lead choice; the seven native cases and human rooms cover exact branches.
Final types/lint, corrected guide10/10, build and390px Partial/Development
Verified guide pass; six changed-region local links/anchors are valid.
Code **e112df858a5a3d27992d22478c5c0d4f3dfac642** is pushed.
[Exact mandatory CI36958647494](https://github.com/Quintine/Dune/actions/runs/36958647494),
job110687174806, completed/success: the existing isolated storage/HTTP verifier
passed before image publication. Immutable image:
`ghcr.io/quintine/dune:sha-e112df858a5a3d27992d22478c5c0d4f3dfac642`.
This is observed existing-pipeline evidence, not a new assurance campaign or
deployment. Live **ab5c782** remains the last observed marker.

**Development-throughput improvements implemented and verified:** default
test output preserves failures/details/stdout/stderr/counts while omitting
passing rows; `--verbose` retains full spec. Empty/bad file or name selections
and zero executed cases fail, including source-bound `verify focused --name`.
Cancellation remains non-success even when a driver exits zero. Actual tooling
contracts15/15, six negative CLI cases, positive/negative source-bound runs,
`check:quick` and206 local doc links pass. Final scoped review has no finding.
Identical15-case native rule runs emitted278 bytes/12 lines concise versus
2,455 bytes/27 lines verbose (2.35s versus2.36s: no computation-speed claim).
Named Carthag feedback took0.90s; discovery-only list0.18s. The earlier162-case
union took100.22s with different coverage; use narrow failing-case feedback
before one coherent affected batch. Canonical context index/handoff avoids
mass file moves or duplicate ruling registries. Preserved Stronghold work is
verified and Advanced Ecaz rule work has resumed; no new assurance campaigns.
Code checkpoint **e9830b6ced80c95253cfa112bb8ed2eb6e50b74c** is pushed.
[Exact mandatory CI36941218637](https://github.com/Quintine/Dune/actions/runs/36941218637),
job110632894258, completed/success: existing isolated storage/HTTP verification
passed before image publication. This is observed pipeline evidence, not a
new per-feature assurance campaign or deployment claim. Immutable image:
`ghcr.io/quintine/dune:sha-e9830b6ced80c95253cfa112bb8ed2eb6e50b74c`.


**Expanded Stronghold rules — bounded Development Verified:** selected E1/E2
native pairs/mixed Ixians/Tleilaxu/CHOAM/Richese plus classic2..6 Advanced,
ordinary decks35/47 and separate Richese cache10. Types/lint, targeted16/16
and11 actual rule-program cases pass. Eighteen unstaged games complete with
11,066 accepted actions, no rejections and290JSON restores. Human390px
original CLI rooms **G7VDY6KB v12** and **736HJUD3 v8** exercise real Stone
kill/Habbanya outcome and partial Face Dance replacement. A stale report
descriptor was fixed and exercised on all three two-seat families.
Mixed No-Field/full-plan, Stone/Poison Tooth and Ecaz questions remain guarded;
new save/privacy/custody/seat/full-suite assurance stays deferred.
Code **288870c84289bb1172bd8e21dac046fbab3b5704** is pushed.
[Exact mandatory CI36949291343](https://github.com/Quintine/Dune/actions/runs/36949291343),
job110658387235, completed/success: the existing isolated storage/HTTP verifier
passed before image publication. Immutable image:
`ghcr.io/quintine/dune:sha-288870c84289bb1172bd8e21dac046fbab3b5704`.
This is observed existing-pipeline evidence, not a new assurance campaign or
deployment claim; the last observed live revision remains **ab5c782**.

**Stronghold rule integration — bounded Development Verified:** fresh
`stronghold-factions` connects Advanced native Ixians/CHOAM plus classic2..6,
canonical combined47 Treachery Cards and six Stronghold Cards alone.
Eighteen native battle/copy cases, all four legal policy paths and five
unstaged complete games pass (3,129 accepted actions, no rejection,82JSON
restores). Earlier162 affected cases and6,513 full checks/type/lint/build
were recorded before the new assurance deferral, not rerun as a prototype gate.
Human390px original CLI room **LAUDR2WN v14** chose HMS Arrakeen copy,
sealed dial6/support3 with bank2/personal1 and completed the real battle
(personal1→0, three cyborg losses, CHOAM income1). Existing classic preview,
public expansion and pending Ecaz rounding boundaries stay unchanged.
New save/privacy/custody/seat campaigns remain deferred until all rules.
See [the bounded integration](STRONGHOLD_CARDS.md#native-ixian-and-choam-integration--2-october-2026).

The checkpoint counts, room/seat observations and live markers below are
historical evidence recorded by **2 October 2026**, tied to their named
revisions/reports. They do not describe a fresh result or require repeating
those assurance loops under the new priority.

Normal Spice Banker income now connects every reachable actual final-bank
auction, shipment, paid revival and resolved support source in fresh local
`banker-income`: unique classic2..6-seat Basic/Advanced, base33/all14-skills only.
One physical-card turn/phase stamp gains1 unavailable front-shield spice;
real native Mentat collects once before optional work/victory. No public
start, existing-game retrofit or combined overlay is activated. Original
earned-faction retention after trainer death/capture/reassignment and separate
payer/source nonaggregation remain explicit LOCAL provisional boundaries,
not an answer to the existing custody question or a publisher split FAQ.

Three implementation owners and two final independent reviews covered runtime,
canonical history and private authenticated entry/recovery; both final reviews
have no finding. Types/lint, **6,487 offline tests**, **140 focused cases** and
build pass. Eighteen native source-to-Mentat cases conserve all33 Treachery
Cards/14 skills; all four legal policies exclude deferred money from budgets.
Original private-backed-up six-seat setups **6VZ8G5BY Basic v38** and
**8TN8BTLT Advanced v31** exercised native Emperor self-auction and Guild
own-bank shipment/allow, human390px controls, refresh and final Collection
readiness to actual Mentat (original Banker wallets10→11 and3→4).
The initial26px notice squeeze was reproduced and repaired in the main column;
fresh notice width is354px. Cards/skills/normal and elite forces are conserved;
the23 prior isolated QA rooms' states/versions are unchanged. After final
guide-worker reload, all82 original seats across25 targeted QA rooms restore;
Basicv38/Advancedv31 remain at native Mentat without double collection.
Local HTTP remains **49/55 with six upstream503 rejection failures**, not green.
Guide coverage is Partial / Development Verified; final guide10/10,
types/lint/build and expanded390px guide pass. Final frozen check after the
phone repair again passes all6,487 offline cases. Code checkpoint
**6785e622a7bc8b850aa5e3d338c63be5a33a9403** is pushed.
[Exact CI run36923901367](https://github.com/Quintine/Dune/actions/runs/36923901367),
container job110576362446, is completed/success: mandatory isolated storage/
HTTP verification passes before verified-image publication. Image:
`ghcr.io/quintine/dune:sha-6785e622a7bc8b850aa5e3d338c63be5a33a9403`.
This does not turn local49/55 green or prove deployment. No deployed/full-module
claim; protected NAS rollout/restoration prerequisites remain unavailable.

Harkonnen Nexus Betrayal now connects actual personal and allied native traitor
calls, exact immediate physical retirement, the surviving original battle once
and one private actual Mentat replacement. Fresh local `harkonnen-betrayal`
retains classic/base33/Nexus-only bounds, natural card rights and original
allied counter preemption. Uniform acknowledgements are provisional; the
previously asked universal reaction-policy question remains open.
Independent review repaired an orphanable native allowance, added the public
declared-Traitor inspector and corrected wrong-face bot fixture assumptions.
Genuine sand battles/native declines replace an invalid Polar Sink fixture;
real counter-free normalization is retained, not forced into a fictitious pause.
Both final scoped reviews have no finding. Types/lint, **6,401 offline tests**,
the **138-case affected union**, final guide **10/10** and build pass.
Ten actual native cases and printed/BG preemption prove original stock and
current Mentat continuation. Four privately backed-up same-setup CLI/390px
rooms exercise human Use/Pass, actual public/own inspectors, partial refresh,
administrator owner and original native HTTP battle/Collection/Mentat once.
Saved proof retains all33 Treachery/all12 Nexus/Traitors, identity/circles,
one actual private reserve-top draw and nineteen earlier QA games.
The bounded path is **Partial development verified**, not full modes or
deployment. Final local HTTP integration is **49/55**, not green: six requests
returned the known Wrangler proxy 503. No automatic POST retry or weaker
authorization is introduced. After the final isolated worker reload, all
**70 original seats in twenty-three QA rooms** reauthenticate; saved proof
preserves all four outcomes and nineteen earlier rooms. The actual expanded
390px guide shows **Partial / Development: Verified** without page overflow.
Code **1cf8ff72c721691f1924e2f27db5936ce79dd4d2** is pushed.
Its [exact workflow](https://github.com/Quintine/Dune/actions/runs/36890229643)
and container job **110463692950** completed successfully: mandatory isolated
storage/HTTP verification and verified image publication both pass. Immutable
image: `ghcr.io/quintine/dune:sha-1cf8ff72c721691f1924e2f27db5936ce79dd4d2`.
Publication does not deploy or turn local 49/55 into green. Protected NAS
snapshot, human safe point and exact interactive deployment approval remain
unavailable; the last observed live marker remains **ab5c782**.

The authorized Advanced **leaderless Battle Plan announcement** is now
connected. Physical PDF page 11 requires disclosure before reveal when no
leader or Cheap Hero can be used; existing leader/card legality was already
enforced. Sealing that legal plan now records one public announcement and
shows a shared table notice while dial, support and other choices remain sealed.
No extra decision, cost, confirmation or serialized duplicate state is added;
Basic behavior is intentionally unchanged by this Advanced cutover.
Failing-before/passing-after privacy/refresh/duplicate regression passes.
Types/lint, **6,316 offline tests**, the **1,025-case selected union**, final
guide **10/10** and build pass. Actual native Advanced preview setup followed
by a conserved staged exhausted-leader battle proves public-before-reveal,
private other choices, JSON continuation and unchanged physical stock.
Backed-up real room `3Y5U53RW` v9 exercised human phone sealing, opponent
refresh, original reveal and native Collection continuation once. Saved proof
retains all thirty-three cards, typed forces, original identities and one
native stronghold income, with no announcement cost. The actual 390px notice
is 354px wide; all **57 original seats in nineteen QA rooms** reauthenticate.
This source-bound behavior is not a complete Advanced-game or deployed claim.
Code checkpoint **44d90bb9aea4032fb8ffda51daa64cc53d11d7f8** is pushed.
Its [exact workflow](https://github.com/Quintine/Dune/actions/runs/36862512991)
and container job **110369907670** completed successfully: mandatory isolated
storage/HTTP verification and verified image publication both pass. Immutable
image: `ghcr.io/quintine/dune:sha-44d90bb9aea4032fb8ffda51daa64cc53d11d7f8`.
This is publication, not deployment; protected NAS snapshot, human safe point
and exact interactive approval remain unavailable.
Subsequent source-frozen genuine continuation completes all ten classic
Basic/Advanced 2..6-seat samples. Combined Homeworld/Nexus samples complete
six-seat Advanced and five-seat Basic; six-seat Basic and five-seat Advanced
stop at turn-six CHOAM Charity on the existing unresolved low-Tupile income
guard. Those stops are not new crashes or permission to remove that ruling
boundary, and do not certify complete combined games.

Ixian Nexus Betrayal now connects both actual native attempts: Bidding's
extra-card inspection and Advanced Technology. Fresh local `ixian-betrayal`
uses native Ix/allowed classic or Tleilaxu, the physical Ix deck and Nexus only.
Native Karama counters resolve first; uniform public possible holders then
acknowledge before the draw/exchange. Denial/allow uses the original transition
once with exact Nexus cost, private controls, legal bots and saved continuation.
This bounded ordering/privacy is an inference, not universal publisher priority.
Original BG conversion and Harkonnen exchange suspensions retain native source
ownership; legitimate pre-offer loss of a declared Technology card retains its
spent attempt without a swap or fabricated Nexus gate. Public administrator
progress follows the same unfinished acknowledgements as the player table.
Final scoped native and privacy/administrator reviews have no finding.
Types, lint, **6,315 offline tests**, **167 affected cases**, final guide
**10/10** and build pass. Eight actual native scenarios plus both BG
Worthless-Karama interruptions retain original stock and continuation.
Four privately backed-up exact-version CLI/390px rooms prove Basic Bidding
Use, Advanced Technology Use, wrong-face Bidding Pass and two-receiver
Technology all-pass with partial refresh. Read-only proof retains all
forty-seven Treachery/twelve Nexus cards and fourteen earlier QA games.
The bounded path is **Partial development verified**, not full Ixian/Nexus
completion, a public start or deployed acceptance.
After the final isolated worker reload, all **55 original seats in eighteen
rooms** reauthenticate; exact saved proof preserves all four outcomes and
fourteen earlier games. The actual phone guide shows **Partial / Development:
Verified** at 390px without horizontal overflow. Current HTTP integration is
**52/55**, not green: three requests returned the known Wrangler proxy 503.
No authorization weakening, automatic write retry, reset or deployment follows.
Code checkpoint **cdfe0e5370d6fd9f6844f064bafd8198ce897252** is pushed.
Its [exact container workflow](https://github.com/Quintine/Dune/actions/runs/36858699841)
and container job **110357305474** completed successfully: mandatory isolated
storage/HTTP verification and verified image publication both pass.
Published immutable image:
`ghcr.io/quintine/dune:sha-cdfe0e5370d6fd9f6844f064bafd8198ce897252`.
This proxy-free CI evidence does not turn local 52/55 into green or deploy
the checkpoint. Protected NAS snapshot, human safe point and exact interactive
deployment approval remain unavailable; the last observed live marker is
**ab5c782**.

Five implementation lanes connected the missing Ixian Nexus Secret Ally
purchased-card replacement through fresh local `ixian-replacement`: exact
normal paid/printed-Karama source, own private controls, native discard/draw
and original fee/income/auction suffix once. Full hands and genuinely
depleted-pool same-card redraw are supported. Native Nexus still requires
a settled alliance and has no initial deal; actual effects need three seats.
Richese origins, Harkonnen buyers, wider modules and public starts stay gated.
Independent review repaired recursive saved-history growth and silently
dropped seat-control actions. Nine Pass records now serialize to 134,145
bytes rather than 7,030,825; nonrecursive links retain source/replay checks.
Actual pending-choice Take back control now sends one 200 and preserves
the same source. Both final scoped rules/privacy reviews have no finding.
Types, lint, **6,227 offline tests**, **73 selected cases** and build pass.
Fourteen standalone native scenarios retain exact original ledger/custody,
including captured legal six-seat depletion with four reserved lots.
Three privately backed-up same-setup CLI/390-pixel QA rooms prove Basic
paid Use, Advanced printed free Use, irrelevant-face Keep, inspection,
takeback and refresh. Saved proof preserves Treachery/Nexus/forces/elites
and eleven prior QA rooms; all **42 original seats in fourteen rooms**
reauthenticate after isolated build reload. Actual expanded guide shows
Partial / Development Verified. Local HTTP is **51/55**, four POST 503s,
not green. Full families, modes, strategy and live acceptance remain open.
Code `a2b04dbfba13eeb913c93de87981a58cb6b7d99d` is pushed.
[Workflow 36829040552](https://github.com/Quintine/Dune/actions/runs/36829040552)
and its exact-source container job report completed/success. Mandatory
isolated storage/full HTTP verification and verified-image publication
both succeeded. Immutable image:
`ghcr.io/quintine/dune:sha-a2b04dbfba13eeb913c93de87981a58cb6b7d99d`.
Publication is not deployment; the last observed live revision is unchanged.


Five implementation lanes reconciled two source-clear Advanced defaults
from the authorized revised rulebook: all new post-first Storm openings
draw the Storm Deck, even without Fremen; each player's own combined-turn
end applies allied separation without waiting for the ally. Advisor
coexistence in either direction, native Ecaz and Polar Sink remain exempt.
Basic is unchanged; a genuine prior-revision recorded Advanced dial save
finishes its original sum, then uses the Deck on its next new turn.
Canonical engine quotes supply own public loss-territory names only,
with unchanged native ending, force/elite/No-Field custody and pending locks.
Four existing minimal bot policies use native availability, not a second
separation calculator. Independent rules and storage reviews have no finding.
Consumer fixture repairs retain original Storm bindings and native progress;
they do not weaken source validation or remove the allied-entry guard.
Types, lint, **6,169 offline tests**, **339 selected cases** and build pass.
Standalone native continuation covers exact owned normal/elite losses,
advisor/Ecaz/Polar exceptions, unchanged Basic and captured old Storm.
Three backed-up fresh authenticated Advanced preview rooms exercise actual
390-pixel public Storm inspection/confirmation, first/later human ending
and refresh. Read-only proof conserves physical forces/elites/Treachery,
retains the eight prior Guild rooms, and all **33 seats in 11 QA rooms**
reauthenticate after necessary isolated-worker build reloads.
The actual expanded source guide retains Partial gates and exercised evidence.
Local built-worker HTTP is **51/55**, four POST 503s, not green.
Full Advanced, wider source differences, strategic AI and live acceptance
remain open; container publication is not deployment.
Code `e1056a4db0a546400fd9a4461507f93ae6ca57d2` is pushed.
[Workflow 36814701820](https://github.com/Quintine/Dune/actions/runs/36814701820)
and its exact-source container job report completed/success. The mandatory
isolated storage/full HTTP verifier and verified-image publication steps
both succeeded. Immutable image:
`ghcr.io/quintine/dune:sha-e1056a4db0a546400fd9a4461507f93ae6ca57d2`.
This is publication evidence, not a change to the last observed live revision.


Five implementation lanes connected [Guild Nexus Betrayal](NEXUS_GUILD_RULES.md#nexus-guild-betrayal):
full funded shipment-payment replacement, including own upfront payment
and the explicit occupied-Junction override. Fresh `guild-betrayal` admits
classic/native-Guild plus base decks/Nexus, optionally genuine lobby-enabled
Homeworlds; no in-play retrofit or public start. Four typed native source
adapters retain exact payer/escrow, force custody and one shipment suffix.
Neutral public acknowledgements reveal no otherwise private fee/routes;
only own canonical eligibility exposes Use. Both scoped final reviews have
no finding after fixing precommitted Richese parents and independently
revalidating the native transport grant. Unsupported Cunning/Richese producer
overlays block before spending; outside-profile behavior stays unchanged.
Current-quote fixture progression, durable SQL rejection and same-source
private-face comparisons replace random-route/SQL-text/independent-seed pins.
Types, lint, **6,114 offline tests**, build and **147 selected cases** pass.
Eighteen standalone Basic/Advanced paid/free scenarios, eight exact-version
backed-up real CLI entries, 390-pixel Use/Pass/inspector/context-link/refresh
and read-only saved-state checks prove exact native forces, whole-fee ledger,
single donor escrow consumption and physical cards. Original authenticated
seats and all unrelated games remain preserved.
Local built-worker HTTP is **48/55**, five POST 503s plus two timeouts,
not green. Code `8a56299155d0f12c8c4678bfbe5913be71fea5bb` is pushed;
[workflow 36798718410](https://github.com/Quintine/Dune/actions/runs/36798718410)
reports completed/success for that exact source. Its mandatory isolated
full HTTP/storage verifier precedes immutable-image publication.
Full modes, strategic AI, public starts and live deployment stay gated;
container publication does not update the last observed live revision.

Five implementation lanes connect [CHOAM Nexus Cunning Kull](NEXUS_CHOAM_RUNTIME.md#bounded-nexus-kull-profile)
through the new fresh `nexus-kull` profile. Actual canonical Treachery fuel
and physical Nexus are distinct costs: Nexus spends at accepted declaration,
fuel remains held pending response, and only success disposes fuel and bans
the original actor for the phase. Distinct prevention retains fuel, leaves
Nexus spent and resumes the reserved original once; BG is still preconversion.
Review repaired counterfeit descriptor trust, native suspended-parent
ownership, nested reserved counters and CHOAM winning-payment coverage.
Verified old printed counter saves migrate their binding immutably without
enabling new choices or accepting source-omitting Use; new corrupt Nexus
selections remain rejected. The fresh Spice Deck excludes Sandtrout.
Types, lint, **6,022 offline tests**, build and actual Basic/Advanced
CLI/runtime/phone success/prevention/refresh pass with conserved physical
cards and unchanged spice. Local HTTP is **49/55**, four POST 503s plus two
timeouts, not green. Code `0d9d0a72d63b29d93161857cee2d1a2cd6acd7e3`
is pushed and [workflow 36770260638](https://github.com/Quintine/Dune/actions/runs/36770260638)
reports completed/success for that immutable source; the mandatory
isolated storage/HTTP verifier precedes image publication. Live deployment
and full-mode acceptance remain separate; no public/deployed claim.

Five implementation lanes now connect the bounded
[Richese Nexus Betrayal](NEXUS_RICHESE_RULES.md#bounded-betrayal-auction-contract--30-september-2026)
preview: original public self-cache purchase veto without payment,
and another buyer's cache/Black Market sale diversion to bank with
unchanged price, contributions, physical delivery and earned Harkonnen
bonus. Fresh `richese-betrayal` CLI entry requires paired CHOAM/Richese,
classic remaining seats, the CHOAM deck and Nexus alone. Public possible
responders acknowledge uniformly; only own canonical eligibility shows Use.
Independent review repaired escrow double-counting and post-bonus
exhausted-cache preflight. Types, lint, 5,953 offline tests, build and
80 focused cases pass. Genuine local CLI/runtime and phone controls prove
Basic veto, Advanced all-pass and Basic cache/Advanced Black Market
diversion, exact custody and refresh. Local Wrangler HTTP is **51/55**:
three POST 503s and one Advanced timeout, not green HTTP acceptance.
Code checkpoint `9c0000e469935d9f0fae1605358d5e6a2617be56` is pushed.
The [container workflow](https://github.com/Quintine/Dune/actions/runs/36720704874)
reports completed/success for that exact revision; its mandatory isolated
storage/HTTP verifier and immutable-image publication are separate from
local Wrangler and live deployment. Normal hidden self-buys, private special
acquisition, wider compositions and full-family completion remain open;
no public start or live NAS deployment is claimed.

The explicit `kull` development profile now connects printed Kull
Wahad interception in Basic/Advanced CHOAM-plus-classic rosters
with the physical CHOAM/Ix deck. Five implementation lanes delivered
the typed engine, pure policy, human controls/legal bots, authenticated
SQLite scenarios and internal guide. An original Karama stays
reserved; only a distinct eligible card can counter Kull before the
phase ban. BG is intercepted before conversion. Unpayable winning
overbid remedies remain deferred: non-CHOAM unfunded bids are
privately fenced before commitment to avoid an unfinishable payment.
Numeric UI limits and non-preview rules are unchanged. Original,
counter and Kull costs honor live promises; unproven suffixes reject
before disposal. Review exposed Auditor-parent, orphan-frame and
promise defects, which are repaired with regressions. Focused rules,
controls, legal AI and SQLite checks pass; direct smoke kept the
original card, spent one Kull and applied a phase ban without a rate.
`npm run check` passed types, lint and 5,907 offline tests; build
passed. Phone-width Basic/Advanced QA exercised Use, a distinct
counter and Decline after refresh: Basic retained the original
and phase ban; Advanced resumed BG conversion and its saved
cancellation once. Independent repair reviews found no remaining
scoped defect. Isolated Wrangler-dev HTTP passed 49/55 with five
proxy 503s and one timeout, not a green local HTTP suite.
Proxy-free workflow `36706704939` passed the full isolated
HTTP suite for `aeae152` and published its image.
Nexus Cunning Kull, wider modules and full expansion acceptance
remain separate; no public starts or live NAS deployment are claimed.

The explicit [Semuta development preview](SEMUTA_SOURCE_UPDATE_20260907.md#30-september-2026--bounded-clean-discard-runtime)
accepts a fresh Richese roster with CHOAM & Richese and optionally
the physical Ix deck. Clean public ordinary-card, paid Box, retired
Ornithopter, used Distrans, final Truthtrance, four bounded Sapho,
pre-leader Residual Poison, printed Karama canceling clean CHOAM
Charity, Inflation or Bene Gesserit Charity or settling a clean
normal-auction lot, a completed CHOAM sale or clean
Kulon/La La La/Baliset/ordinary Trip to Gamont, accepted
Jubba Cloak Worthless, battle-card and Ix-deck
Thumper/Amal discards open the same neutral offer regardless
of hidden Semuta custody.
A clean **private** normal-auction Ixian ally replacement discard
also pauses before its draw; no unknown face is shown before a
holder commits. A completed CHOAM sale pays its quoted bank spice
before the offer and resumes the same market afterward. Karama waits
after its public cost but before cancellation or the reserved lot settles.
Kulon's public card is spent before this offer; its single movement
range bonus and same turn resume only after claim or all-seat decline.
Proactive La La La likewise spends its public card before the
selected target loses remaining free revival; paid revival remains
available. Proactive Baliset spends its public card before the
selected player is barred from movement into CHOAM's occupied
territory; shipment stays legal.
Clean ordinary Trip to Gamont spends its public card before
one opponent force returns to reserves; elite and concealed
No-Field returns retain their earlier automatic path.
Accepted Jubba Cloak spends its public card before protecting
one CHOAM territory; the moving storm resolves only after a
claim or all-seat decline.
Residual Poison commits one random death before the offer; only an
uninspected battle with nobody ready qualifies. Once Around commits
bidder order and frees a slot; other Sapho scopes commit chooser or
aggressor priority. Claim or decline resumes the saved effect once.
A Black Market Semuta reserved as the offered card cannot Commit.
Thumper waits before worm/spice draw; Amal waits after halving spice
and clearing opening passes. Mixed-owner battle cards require
committed owner-only selection; mandatory and optional winner cleanup
remain separate. Minimal legal AI, JSON/SQLite continuation and
competing-room CAS are connected. Mixed arrivals, queued or
promise-bound Truthtrance, other Karama uses, pending rewards,
normal Richese starts and deployed acceptance remain unfinished.
Neutral passes are application policy. The user approved Semuta's
atomic exchange at the faction hand limit; completed hand counts
and reserved incoming capacity remain protected.

Full-hand Semuta exchange passes normal/faction-limit and
incoming-reservation regressions, authenticated SQLite and
independent review. `npm run check` passed types, lint and
5,854 offline tests; build passed. Direct smoke and an actual
phone-width full-hand QA seat acquired Hajr, spent Semuta,
kept four cards and preserved that result across refresh.
Isolated Wrangler-dev HTTP passed 49/55 with five proxy 503s
and one timeout; this is not a green local HTTP suite.
Proxy-free workflow `36684960601` passed the full isolated
HTTP suite for `3285172` and published its image. No NAS
deployment is claimed.
Kull's approved distinct counter/BG-before-conversion timing
is recorded but runtime remains unfinished; unpayable
winning-overbid recovery is deliberately not chosen.

Accepted printed Jubba Cloak passes focused engine and
authenticated SQLite, a direct one-storm claim smoke and
independent review without findings. `npm run check` passed
types, lint and 5,853 offline tests; the production build
and phone-width in-app guide passed. Isolated built-worker
HTTP passed 50/55 with four Wrangler-dev proxy 503s and
one timeout. The local suite is not green. Proxy-free workflow
`36676105785` passed the full isolated HTTP suite for `98d556a`
and published its image. No NAS deployment or complete faction
claim follows.

Clean ordinary Trip to Gamont passes focused engine and
authenticated SQLite checks, a direct physical claim/force
return smoke and independent review without findings.
`npm run check` passed types, lint and 5,851 offline tests;
typecheck, lint and 18 guide/Semuta tests passed after the
in-app text update, and the production build passed. The
built phone-width rules guide displayed both new CHOAM
discard scopes. Isolated built-worker HTTP passed 50/55:
four Wrangler-dev proxy 503s and one timeout. It is not a
green local HTTP suite or a live deployment. Proxy-free
workflow `36674543364` passed the full isolated HTTP suite
for `953be21` and published its image; this is not NAS
deployment.

Clean proactive Baliset passes focused engine and authenticated
SQLite checks, a direct engine claim/restriction smoke and
independent review without findings. `npm run check` passed
types, lint and 5,849 offline tests; the production build
passed. Isolated built-worker HTTP passed 49/55: four POSTs
returned the Wrangler-dev proxy's 503 rather than app statuses,
and two requests timed out. This is **not** a green local HTTP
suite or production deployment. Proxy-free workflow
`36673190056` passed the full isolated HTTP suite for
`756af19` and published its image; this is not NAS deployment.

Clean proactive La La La passes engine, authenticated SQLite,
direct engine smoke and phone-width guide checks. `npm run check`
passed types, lint and 5,847 offline tests; the build passed.
In an isolated QA room, the actual Richese seat showed Continue
and Commit, acquired the physical card, then retained zero free
revivals and a two-spice paid quote across refresh. Direct
Wrangler-dev HTTP passed 50/55 with four 503s and one timeout;
proxy-free workflow `36671450678` passed the **full** HTTP suite
for `b130cff` and published its image. This is not NAS deployment.

Clean Kulon-before-bonus continuation passed engine, authenticated
SQLite and genuine-setup targeted smoke checks. `npm run check`
passed types, lint and 5,845 offline tests; build and phone-width
guide inspection passed. Direct Wrangler-dev HTTP passed 48/55;
six tests saw HTTP 503 instead of their expected status, and one
Advanced-lobby request timed out at 15 seconds. The proxy-free
container workflow `36670493579` for `88bcb33` passed the full
HTTP suite and published its image; this is not a NAS deployment.

The completed CHOAM card-sale reaction passed two- and three-spice
engine cases, canceled-sale exclusion, authenticated SQLite recovery,
direct engine smoke and rendered phone-width guide inspection.
`npm run check` passed types, lint and 5,843 offline tests; the build
passed. A direct Wrangler-dev HTTP suite passed 50/55; four
origin/validation requests returned 503 and one Advanced-lobby
request timed out after 15 seconds. This local proxy run is not
a green suite; the proxy-free container run below passed.

One diagnostic POST returned Wrangler's literal "Your worker restarted
mid-request" 503 body; 100 subsequent identical requests returned the
application's expected 400. [Cloudflare workers-sdk issue #14641](https://github.com/cloudflare/workers-sdk/issues/14641)
documents a local dev-proxy disconnect with this misleading status.
This points to the proxy for those transient failures, not to a
verified application fix. The existing [container verifier](../tools/verify-container.mjs)
runs the **full** HTTP suite against isolated Docker without that
Wrangler dev proxy. Revision `4c07e1b` passed workflow
`36668822954`, including this full HTTP suite, and published its
image. Live NAS deployment and acceptance remain open.

The private normal-auction Ixian ally reaction passed genuine-setup
engine, authenticated SQLite and direct engine smoke checks. The full
`npm run check` passed types, lint and 5,839 offline tests; build and
phone-width guide inspection passed. The isolated built-worker HTTP
suite passed 49/55 tests: five returned 503 instead of expected
authorization/validation/success statuses, and one Advanced-lobby
request exceeded its 15-second limit. Full HTTP acceptance remains open.

The previous printed Karama purchase/payment checkpoints passed
engine and authenticated SQLite checks; their local HTTP caveats
are recorded in the implementation log.

The previous purchase revision `eede77a` passed container workflow
`36664985601`, including its isolated storage/HTTP gate, and published
an image. This does not deploy it to the live NAS.

The following paid Karama revision `8f6b1c8` also passed container
workflow `36665999972` through isolated storage/HTTP verification
and published its image. Neither checkpoint has been deployed to the NAS.

The subsequent private Ixian ally revision `9bfc3ec` passed workflow
`36667534804` and published after isolated storage/HTTP verification.
It too is not a live NAS deployment.

Container workflow `36656043783` built `32d9ef4` but failed
isolated storage/HTTP verification; that image was not published and
the public job exposes no assertion log. The next checkpoint
`d9c67ca` passed the same verification and published its image in
workflow `36657454120`. The live homepage footer now displays
`ab5c782`, confirmed in an independent browser view and screenshot.
This marker is not a complete production gameplay or administrator
check, nor evidence that the later pushed revisions are deployed.

One [natural Advanced Moritani assassination](MORITANI_ASSASSINATE_LEADERS.md#29-september-2026--natural-revealed-card-game)
now proceeds from genuine battle loss to a dead-target Traitor reveal,
face-up retirement and private Mentat replacement. The six-seat game
completed 1,666 accepted actions, zero rejected candidates and 45 JSON
restores; a separate replay checked every private view across reveal and
replacement. A natural living-target kill, exceptional combinations and
the unresolved duration/UX rulings remain open. Public expansion starts
and deployed acceptance remain gated.

Another natural six-seat Moritani game exposed two illegal Fremen worm
rides into a placed Terror with a pending BG fighter intrusion. The
[worm-arrival bot preflight](BOT_ARRIVAL_PREFLIGHT.md#29-september-worm-ride-into-terror-with-bg-intrusion)
now omits only that public reaction conflict. Same-seed replay completes
1,541 accepted actions, zero rejects and 41 JSON restores. This does not
implement the simultaneous reaction or demonstrate a natural assassination
reveal; expansion starts and deployment remain gated.

A six-seat Advanced Moritani sample exposed six illegal bot Guild
cross-planet transport candidates into a placed Terror while Guild income
was pending. [Arrival preflight](BOT_ARRIVAL_PREFLIGHT.md#29-september-guild-cross-planet-transport-and-terror)
now quotes the submitted single-source transport and payment using public
arrival triggers. The same genuine game completes 1,262 accepted actions,
zero rejected candidates and 34 JSON restores; both assassination choices
were declined. This repairs AI candidate legality, not the unsupported
arrival composition, natural assassination reveal coverage, normal
expansion starts or deployed acceptance.

The owner-only [administrator accounts](ADMIN_ACCOUNTS.md) prototype now
lists, provisions, changes roles, disables and rotates another account’s
personal key. Rotation can re-enable a disabled target only with a fresh
key; old credentials and sessions remain revoked, including attempted
A→B→A reuse. Live owner/target fences, durable exact retries and safe
actor-attributed history preserve rooms and seats. A disposable owner
and target completed authenticated local **network** rotation and
re-enable on an isolated built-worker D1 store, and mobile browser review
showed exact impact and a superseded-replay warning. The supported dev
HTTP suite passes 55/55; the built-worker full suite hit intermittent
local workerd 503 restarts and is not a green production-bundle suite.
Failed-attempt history, the rest of administration, deployment and
production acceptance remain unfinished. This code is not in the last
verified live image.

The bounded [Advanced Moritani Assassinate Leaders preview](MORITANI_ASSASSINATE_LEADERS.md)
now has repeatable genuine games across two through six supported seats.
Five samples completed 2,511 accepted actions, no rejected candidates
and 65 JSON continuations. The six-seat game reached two private
assassination offers, both declined. The separate natural reveal sample
above adds one dead-target use, not a complete Moritani rules claim. The
unresolved duration/UX questions and public expansion gate remain
unchanged. This source is not in the last verified live image.

The independent Ecaz three-card variant now has a repeatable
[genuine-game sample profile](VERIFICATION_WORKFLOW.md#reusable-base-and-faction-sample-games)
for paired Ecaz/Moritani rosters from two to six seats. Ten Basic/Advanced
games at base seed `20260929` completed with 3,768 accepted actions, zero
rejected candidates and 95 JSON continuations; the six-seat Advanced game
actually played Recruits, Reinforcements and Harass & Withdraw. That run
exposed and confirmed a saved-view drift from unlocked Bene Gesserit advisor
stances, now corrected at four arrival/movement writers. These samples do
not certify all card interactions, full expansion modes or deployment.

The separate [Reinforcements card prototype](REINFORCEMENTS_RUNTIME.md)
now works in clean Ecaz/Moritani expansion battles as well as classic-faction
tables in Basic and Advanced. Genuine setup, owner-only two-slot controls,
legal AI offers, typed reserve-to-Tanks payment and saved D1 continuation
follow the existing card contract. Co-present Ecaz allied armies, Richese,
Ixians/Tleilaxu and other optional modules remain gated; the printed cost
timing is still a documented product interpretation, not a publisher ruling.
This does not open public expansion or card-variant starts, and this source is
not in the last verified live image.

A five-seat Advanced combined Homeworld/Nexus/expansion sample exposed two
known-unsupported Ecaz Ambassador/Moritani Terror shipment candidates from
Tleilaxu's own Homeworld. [AI arrival preflight](BOT_ARRIVAL_PREFLIGHT.md#29-september-homeworld-sourced-shipment-overlap)
now excludes them using only public entry reactions. The same genuine game
completed with 786/786 legal attempts and 21 JSON continuations; this is a
candidate-legality repair, not support for the combined arrival or a public
expansion start. The source is not in the last verified live image.

Six fixed paired-expansion Basic/Advanced [game samples](IMPLEMENTATION_STATUS.md#29-september-2026--paired-expansion-game-samples)
at `b9c8b74` completed with 4,641 legal actions and 122 JSON continuations.
They do not establish complete faction effects, module combinations or
release readiness.

Five Basic Moritani and five Basic Tleilaxu plus Leader Skills
[game samples](IMPLEMENTATION_STATUS.md#29-september-2026--moritani-and-tleilaxu-leader-skills-samples)
across two through six seats completed with 4,736 legal actions and 123 JSON
continuations. This is sampled playable coverage, not complete skills,
Advanced or optional-module acceptance.

A bounded [Ecaz Ambassador/Moritani Terror same-entry continuation](MORITANI_ENTRY_TIMING.md#selected-bounded-overlap-order--29-september-2026)
now snapshots both original optional triggers and offers their owners sequential
choices in current storm order on classic plus Ecaz/Moritani Basic/Advanced
tables. This order is a conservative provisional table interpretation, not
a publisher ruling. The original shipment, move or Fremen worm ride transfers
forces only once; JSON/SQLite recovery keeps token custody private and proceeds
to the second owner even after the first declines or resolves a supported effect.
A summoned worm during the overlap retains its Nexus before the queued ride;
Robbery overflow and Sabotage discards preserve physical custody. The table
shows public owner order without disclosing the hidden Terror face; existing
owned controls and minimal legal AI remain usable. Competing BG Intrusion,
Fremen/Guild Ambassador child arrivals and optional-module combinations remain
gated, as do normal public expansion starts. The bounded Atomics path below
does not open these overlap combinations. This source is not in the last
verified live image.

A bounded [Guild native rate Karama path](GUILD_RATE_KARAMA_RULES.md#native-transport-extension--29-september-2026)
now interrupts classic Guild/reciprocal-ally ordinary reserve shipments and
eligible cross-planet transport before payment, including Guild's own return
to abstract reserves and allied Fremen southern-reserve transport. Canceling
the rate charges normal destination price for the **exact saved force group**
and original approved funding split; return costs one spice per force under
the documented conservative doubled-tariff interpretation. If the group or
split cannot complete, Karama is spent but the declaration returns unused and
a replacement uses full price this turn. Saved typed custody, a legal AI path,
SQLite CAS recovery and local read-only browser previews of the cancel control
and replacement quote are connected. Guild income, transport permission and
independently purchased Karama rates remain separate. Optional-module and
Homeworld rate cancellation remain gated; this code is not in the verified
live image below.

Moritani Extortion now has a bounded local reveal-to-Mentat continuation:
five bank spice stays reserved until Moritani finishes normal Terror placement
and any Karama response; then non-Moritani seats in storm order may pay three
once or decline. Payment removes the revealed token; all declines rotate it
back into hidden supply. The [placement-first order](MORITANI_EXTORTION_RULES.md)
was selected by the user, not sourced as a publisher priority ruling. Public
notices hide the current payer's affordability from other seats. Owner controls,
legal AI, JSON/SQLite CAS, nested Box/gift interruptions and a genuine late
Mentat Ambassador entry have focused coverage; each still settles before the
turn ends. A separate bounded classic-plus-Moritani Atomics path now records
public Aftermath with permanent shipment prohibition and a one-card hand-limit
reduction for Moritani and its ally at activation; later alliance changes are
gated pending a ruling. Complete expansion starts stay gated. These local
changes are not in the last verified live image below.

The live NAS Apps `dune` image is the immutable
`ghcr.io/quintine/dune:sha-c9a3625ff2a9ddafdbc08e64de809eca6029db85`
from successful container workflow `36358270534`. The public footer's title and
accessibility name show that full revision; visible text shows `c9a3625`.
After the update, owner sign-in succeeded and nine existing rooms remained,
including a playing room at version 54. A fresh 0600 online SQLite backup in
the persistent app volume passed `PRAGMA quick_check` before the update. The
earlier temporary remote plaintext owner key and provisioning SQL were removed.
Private saved-seat reconnection, complete historical-data comparison and live
Diplomat retreat gameplay were not exercised; its local behavior is verified,
not production gameplay-proven.

The bounded Discovery Orgiz Collection transfer is connected in current local
source for Basic/Advanced, with an automatic public log and saved continuation.
It treats each positive collected board deposit as one observable blow, a source
inference pending a publisher clarification. A focused engine/browser/SQLite
checkpoint is in [Discovery prototype](DISCOVERY_PROTOTYPE.md); this code is
not yet in the live `c9a3625` image. Contested/shared transfers and full
Discovery release acceptance remain gated.

Checkpoint `209fb18` was pushed and its matching container workflow
`36359970371` completed successfully. The dedicated deployment agent could not
enter TrueNAS Apps because the host desktop was OS-locked; it made no NAS change,
backup or post-rollout claim. Production remains at the last verified `c9a3625`
image until the Apps session is unlocked and this exact image is deployed.

An owner-only [room-backup prototype](ADMIN_BACKUPS.md) now captures, lists and
downloads immutable private snapshots with live authorization, unchanged room
versions and append-only capture/export receipts. The per-room size/storage
limits, missing import/restore and absent unified action-history entries keep
the saved-game operations gate open. Local isolated capture/export and a
signed-out browser denial passed; this is not deployed evidence.

The owner-only [operations page](ADMIN_PANEL.md) samples build revision,
room/seat and lifecycle counts, invalid JSON, latest write and backup usage.
It now also offers a separate **manual** SQLite quick/foreign-key check.
Only owner requests can run it; the result contains pass/fail and time, never
private rows or raw diagnostics. In-memory SQLite tests and an authenticated
owner request against an isolated built Wrangler worker passed. The same worker
reported a deliberately orphaned foreign key as failed without exposing its row;
the phone-width owner UI showed both outcomes and the no-auto-repair warning.
Live NAS checks remain unverified. This is not a disk-capacity, restore-safety
or game-rule validation tool. No game or seat changes during a check.

Current work adds [action history](ADMIN_ACTION_HISTORY.md): a searchable,
paginated view of nine durable admin receipt sources with public before/after
settings. Owners/operators receive operational reasons; viewers do not. Queries
preserve live authority and reject private or malformed metadata from search.
Failed-attempt coverage, operational health and the remaining full admin scope
are still unfinished.

Discussion checkpoint `160fdc1` is pushed. Types/lint, 5,431 offline tests,
52 HTTP tests, build, twenty-four administrator HTTP groups and desktop/mobile
browser checks passed; all 2,230 baseline games and 4,746 seats were preserved.
Its container workflow `36218058095` succeeded; the later NAS Apps deployment
and current live revision are recorded above.

The bounded [Fremen Nexus Cunning](NEXUS_FREMEN_RULES.md#connected-native-cunning-path)
prototype connects an initially empty worm's public offer, one spent private
card, a Karama response, a typed remote ride after the Nexus, human controls
and minimal legal AI in classic-faction Nexus-only games. Basic/Advanced
natural continuation, an additional-worm placement and an actual Advanced
special-Karama summon retain their physical parent, response and native-then-
remote ride order across JSON/isolated SQLite recovery and duplicate CAS.
Natural and summoned offer/ride browser surfaces were exercised. Review found
and fixed an inherited-key force-custody bypass. A second Cunning offer
inside an interrupted control, Great Maker, combined modules, Secret Ally
protection and complete Nexus games remain gated. The bounded Atomics reveal
is a separate classic-plus-Moritani path, not a playable Nexus Terror effect;
its later-alliance hand-limit policy is unresolved.

The bounded [Fremen Nexus Betrayal alternatives](NEXUS_FREMEN_RULES.md#bounded-betrayal-movement-and-worm-riding)
let an unallied holder spend the physical card either before the first Spice
Blow to prevent Fremen worm rides for that turn, or before Fremen move in
Shipment and Movement to suppress their native two-territory advantage.
Worm destruction/protection and Nexus still resolve; independent movement
bonuses remain available. One saved card cannot use both modes, even if
recycled later that turn. Owner controls, prioritized legal bot play,
Basic/Advanced JSON and authenticated concurrent SQLite continuation are
connected. Post-appearance Betrayal timing and combined modules remain gated;
no public Nexus gate changes.

The bounded [Ecaz Nexus Betrayal](NEXUS_ECAZ_RULES.md#bounded-betrayal-runtime)
path lets a card holder select one public territory shared by Ecaz and its
ally before the first Shipment and Movement turn advances. One spent card,
a provisional Karama response and exact typed ally-force return are wired
through human controls, legal bot action, JSON and in-memory SQL continuation,
and focused gameplay, race and restart tests. A local browser fixture rendered
the holder-only offer and rival Karama notice without writing a room. The
Secret Ally inquiry has a bounded private prototype; its native-leader
scope/answer audience and combined modes remain release gates.

The bounded [native Ecaz Nexus Cunning](NEXUS_ECAZ_RULES.md#bounded-native-cunning-duke-vidal)
prototype spends the one card to take the existing living Duke from Moritani
at a quiet Battle boundary in paired Ecaz/Moritani Nexus games. Owner controls,
legal AI, ordinary battle selection, temporary end-turn custody and signed
saved continuation are connected in Basic/Advanced outside Advanced Harkonnen
tables, where the battle path cannot select Duke. Captured, dead and Ghola
destinations and all combined modules remain gated. The Battle-only timing
is a documented product boundary rather than printed phase text. This code
is not yet in the live image.

The bounded [Ecaz-only Duke revival](ECAZ_REVIVAL_RULES.md#selected-product-interpretation-28-september-2026)
returns the existing dead shared disc alive and set aside after ordinary paid
revival or a Ghola card. The user selected this custody interpretation; it is
not a publisher clarification. Five spice (three with the existing Tleilaxu
alliance discount), stop/cancellation windows, first five-in-Tanks cohort,
owner choices, legal AI and JSON/SQLite continuation are connected. Further
six-disc native cycles, exceptional custody and Advanced Harkonnen remain
guarded; no complete Ecaz start is certified.

The bounded [Mirror Weapon battle path](MIRROR_WEAPON_ENGINE_AUDIT.md#user-selected-cleanup-interpretation-28-september-2026)
admits the canonical physical card in CHOAM/Richese-deck Basic/Advanced
classic/CHOAM/Richese battles and source-clear Advanced Ecaz/Moritani
composition without optional overlays. Effective copied attacks, copy-first
Tooth/Stone choices, public Stone feasibility,
saved custody, human controls and legal AI are connected. A victorious
physical Mirror can be kept even after a copied activated Tooth or Artillery
attack under the user's interpretation, not a GF9 clarification. Combined
modes and full Richese starts remain gated. Neither new path is in the
verified live `c9a3625` image.

The bounded [Bureaucrat/Tleilaxu revival payment](BUREAUCRAT_PAYMENTS.md)
path adds the Basic Tleilaxu/Leader Skills profile's actual single-payer
revival prices to the skill's post-Karama redirection. Paid custody, separate
free-revival income, private negotiated amounts, owner controls, four legal
AI policies and concurrent SQLite continuation are connected. Other expansion
payment families, gifts and combined modules remain gated; this is not a
complete Leader Skills or Tleilaxu certification.

Earlier [complete-game integration samples](IMPLEMENTATION_STATUS.md)
finished 62 genuine games: Basic Leader Skills with Tleilaxu, Moritani,
Ixians or CHOAM; Basic/Advanced classic Homeworld + Nexus; all three paired
faction-expansion + Nexus profiles across two through six seats; and two
six-seat all-expansion games. All 29,333 actions were accepted, with 765
JSON/private-view restorations and unchanged source fingerprints. Rare effects
not encountered naturally and all public release gates remain unverified.

Four further [all-expansion Nexus samples](IMPLEMENTATION_STATUS.md)
completed genuine five/six-seat Basic and Advanced games: 4,098 accepted
actions, 109 JSON/private-view restorations, unchanged source fingerprints
and five Nexus Card draw/keep decisions in the five-seat games. No Nexus
effect was played in those samples; card-specific combinations and public
expansion/Nexus starts remain gated.

Four more [all-expansion Homeworld/Nexus samples](IMPLEMENTATION_STATUS.md)
completed five/six-seat Basic and Advanced games with 2,800 accepted
actions, 74 JSON/private-view restores and unchanged source fingerprints.
Five-seat tables drew/kept three Nexus Cards and used real Homeworld
deployment decisions. Eight proposed entries were rejected by the existing
Ecaz Ambassador/Moritani Terror overlap gate; bots found alternate actions
and completed. Their unresolved priority and all public mode gates remain.

The bounded [native Richese Nexus Cunning shipment](NEXUS_RICHESE_RULES.md#bounded-native-cunning-prototype-27-september-2026) now uses two distinct physical No-Field tokens in one priced shipment in genuine Richese/CHOAM paired Nexus games. One token immediately reveals a reserve-capped public force group; the other remains concealed. Owner-only controls, four legal AI profiles, Karama/Guild responses, signed saved receipts and concurrent in-memory SQLite settlement are connected in Basic/Advanced. A read-only local browser fixture displayed the owner selector and no rival private panel. Same-shipment nonrepeat is a documented product interpretation; faceup-component artwork, combined modules, Betrayal and full Nexus acceptance remain gated. This code is local and not in the last verified production image.

The independent [Reinforcements Battle Plan prototype](REINFORCEMENTS_RUNTIME.md)
connects its physical card in either slot for Basic/Advanced classic-faction
games without other optional modules. Three own reserve counters enter the
Tanks, +2 affects normal battle score only, and the card is discarded on all
revealed outcomes. Owner-only availability, controls, legal AI, private
inspection and saved continuation are connected. Traitor/explosion payment,
normal-first elite selection and battle-loss accounting remain explicitly
provisional interpretations, not a publisher or user ruling; full variant and
public mode gates remain closed. This source is not in the live image.

The bounded [Emperor Nexus Secret Ally bank-auction purchase](NEXUS_EMPEROR_SECRET_ALLY_RUNTIME.md#bank-auction-purchase-alternative)
connects the separate retained-price alternative in Basic/Advanced
classic-faction Nexus-only games. An unallied winner proves the final bid from
their own spice, keeps it, takes the physical Treachery lot and spends the
Nexus; owner controls, legal AI, signed history and saved SQLite continuation
are wired. Every eligible winner receives the same payment confirmation
regardless of hidden card custody; this privacy-preserving timing is
**provisional**, with the prior user question still pending. Seller payments,
allied splits, non-Bidding sources, Betrayal and complete Nexus remain gated.
This source is not in the live image.

The main page
labels its build's Git commit in the lobby and active-table masthead; local
Git HEAD does not represent uncommitted work. The main-branch container
workflow publishes an image but does not deploy the live site automatically.

[Discussion moderation](ADMIN_DISCUSSION.md): owners/operators
can mute or unmute new public/private messages from a human seat. History,
incoming messages, game state and credentials remain saved; the setting follows
recovery/handover. Atomic authority/version fences, durable audit and exact
admin/message retries are connected. This is partial participant support;
access revocation, participant removal, assisted recovery, permanent deletion,
bulk actions and backup/operations tools remain unfinished.

[Participant AI](ADMIN_PARTICIPANT_AI.md) checkpoint `2cddf03` is pushed. Types/lint,
5,408 offline tests, 52 HTTP tests, build, twenty-two administrator HTTP groups
and desktop/mobile browser acceptance passed. Deployment delivery was
unconfirmed at that checkpoint; the current production revision is recorded
above. No strategic AI refinement was added.

Readable-notice checkpoint `137f922` is pushed. Types/lint, 5,381 offline tests,
52 HTTP tests, build and delayed-response desktop/mobile browser QA passed.
Its new-revision deployment handoff is pending confirmation.

The [readable-notice follow-up](READABLE_NOTICES.md) extends first-request progress
to admin operations, AI permissions and seat handovers, preventing recovery
instructions from flashing before a successful response. Seat recovery/handover
confirmations remain above the table until Continue. Existing retry proofs and
rules/AI pacing are unchanged. New-revision deployed acceptance remains separate
from local checks; positive production admin testing still needs authorized access.

The connected [administrative archive/unarchive](ADMIN_ROOM_ARCHIVE.md) prototype lets
closed rooms leave the default directory without changing saved games,
credentials, discussion or AI deadlines. Unarchiving leaves play closed;
reopening requires unarchiving first. Exact saved retries and combined archive /
removal filters preserve recovery. Permanent deletion, bulk actions and full
participant/backup support remain unfinished.

Checkpoint `98b1b32` added [close/reopen](ADMIN_ROOM_CLOSURE.md) and passed types/lint,
5,356 offline tests, 52 HTTP tests and build, with seventeen administrator HTTP
groups and lost-response desktop/mobile browser QA. It is deployed on the NAS:
container verification passed, migration 0013 applied, all eight prior rooms and
ten seats were preserved, and public HTTPS/browser saved-seat restoration passed.
Anonymous admin routes remain denied. Positive production administrator acceptance
still awaits authorized QA access. Archive checkpoint `e918e2e` is also deployed:
migration 0014, integrity and public HTTPS/browser saved-seat restoration passed;
all eight prior rooms and ten seats were preserved. Its positive production
administrator acceptance remains pending the same authorization.

Checkpoint `238de38` added [recoverable removal/restoration](ADMIN_ROOM_REMOVAL.md)
and passed types/lint, 5,314 offline tests, 52 HTTP tests and build, with fourteen
administrator HTTP groups and lost-response desktop/mobile browser QA. It is
deployed on the NAS: container verification passed, migration 0012 applied,
all eight prior rooms and ten seats were preserved, and public HTTPS/browser
saved-seat restoration passed. Anonymous removal and other admin routes remain
denied. Positive production administrator acceptance remains pending authorized
QA operator access.

Checkpoint `c0cc4de` added [neutral administrator lobby configuration](ADMIN_LOBBY_CONFIGURATION.md)
and passed types/lint, 5,260 offline tests, 52 HTTP tests and build, with eleven
dedicated administrator HTTP groups and lost-response desktop/mobile browser QA.
It is deployed on the NAS: container verification passed, migration 0011 applied,
all eight prior rooms and ten seats were preserved, and public HTTPS/browser
saved-seat restoration passed. Anonymous creation, control and configuration
requests remain denied. Positive production administrator acceptance remains
pending authorized QA operator access.

Checkpoint `e7d4efc` added [administrator room creation](ADMIN_ROOM_CREATION.md)
and passed types/lint, 5,240 offline tests, 52 HTTP tests and build, with independent
review and eight dedicated administrator HTTP groups. It is deployed on the NAS:
container verification passed, migration 0010 applied, all eight prior rooms and
ten seats were preserved, and a saved seat restored through public HTTPS and the
browser. Anonymous administrator creation remains denied. Positive production
administrator acceptance still requires explicitly authorized QA operator access.

Checkpoint `8c922b4` added [pause/resume and joining locks](ADMIN_ROOM_CONTROLS.md)
and passed types/lint, 5,223 offline tests, 52 HTTP tests and build, with independent
review and dedicated local administrator/browser checks. It is deployed on the
NAS: container verification passed, migration 0009 applied, all eight prior rooms
and ten seats were preserved, and a saved seat restored through public HTTPS.
Anonymous administrator requests remain denied. Authenticated production admin
acceptance still requires the pending QA-access confirmation.

Checkpoint `f29d056` was pushed and deployed to the NAS instance. Readable
create/join progress and Continue notices passed actual HTTPS browser acceptance,
including mobile and saved-seat refresh; existing production records survived
the update. Administrator sign-in renders closed by default. Authenticated admin
production checks remain pending provisioning approval.

The [readable-notice fix](READABLE_NOTICES.md) replaces the flashing recovery
screen during ordinary room creation/join with concise progress. Actual recovery
instructions stay until resolved, and completed-action text waits for a local
Continue control. It does not add confirmation steps to game rules or AI turns.

Administrator access/directory checkpoint `c2d392e` passed types, lint, 5,196
offline tests, 52 HTTP tests and build, plus focused authenticated/browser checks.
Its authenticated production acceptance remains pending; the current deployment
preserves saved games and full administration gates.

The user added a complete [administration panel](ADMIN_PANEL.md) to the goal on
22 September: secure admin access, room creation/removal and lifecycle controls,
participant support, backup/restore, operational views and audited actions.
The first prototype now connects separate administrator sign-in, persistent
sessions/revocation and a searchable, filtered, paginated room directory at
`/admin`. Private game contents remain excluded. Operator provisioning and
recovery instructions are in the admin guide. Room creation, lifecycle/removal,
participant support, backups and operational controls remain unfinished; these
belong before full AI refinement/calibration. Existing rules, Git, subagent and
preservation requirements remain in force.

The goal also requires testing the deployed application at
**https://dune.procrastination.games**. Match the running revision, exercise
relevant real player/admin flows in dedicated QA rooms, and record deployed
results separately from local checks. See [production verification](VERIFICATION_WORKFLOW.md#verify-the-deployed-application).
This requirements update does not claim a new deployed test result.

Earlier completed rules checkpoint: `0f79f28`, [forced Harkonnen exchange return](HARKONNEN_EXCHANGE.md).
Types, lint, **5,150 offline tests**, **49 HTTP tests** and the production build
passed. One complete Advanced sample had no rejected actions across 158 actions
and four JSON restores. Browser inspection and exact refresh were checked;
full visual acceptance remains open. All 1,586 prior rooms and 3,354 human seats
were preserved; new QA/HTTP rooms brought the baseline to 1,626 rooms and 3,442 seats.

Current work exposes [Advanced preview](ADVANCED_PREVIEW.md) through normal room
creation and host lobby controls. It uses genuine setup, explicit unfinished-mode
start, renewed human readiness after mode changes, private seat restoration and
saved continuation. Six classic factions, existing Tech Tokens (3+ players) and
Stronghold Cards are admitted; expansion/module gates and pending rulings remain.
Focused engine, controls, retry and concurrent recovery checks are connected;
final independent review, browser, sample-game and required checks accompany the
Git checkpoint. Preview access does not certify complete rules compliance.

The [Sandmaster/HMS source comparison](SANDMASTER_MOVEMENT.md#21-september-native-hms-relocation-eligibility)
found no official clarification that passengers remaining in the interior
trigger collection from outside territories during native relocation. A ruling
question was sent; ordinary HMS relocation and force entry/exit remain working.
No extra collection is silently applied. The Bureaucrat/Emperor gift question
and the other recorded skill boundaries remain pending.

Remaining native Ecaz/Moritani effects, repeated six-disc Duke cycles and Richese
empty-cache auction arithmetic still cross recorded source questions. Native
Tleilaxu revival now creates its skill offer at successful commitment, including
automatic response chains; the former dependency is resolved in its Basic profile.
The `8f7a62c` policy checkpoint removed usage checks/cutoffs and deferred full AI
work until feature completion, followed by three adjacent 75% targets.

The [platform audit](AUTOPILOT.md#platform-audit-20-september-2026) found no supported
Sites scheduler or Durable Object provisioning contract. Durable unattended bot
resumption remains blocked on that capability; request/reconnect continuation
does not establish it. Preserve pending rules questions and mode gates.

The connected [Harass & Withdraw prototype](HARASS_WITHDRAW_RUNTIME.md) supports either
battle-card slot, private category inspections, exact undialed normal/elite
returns, opponent-Traitor cancellation, mandatory disposal, controls and all
four AI profiles. New battles also have [revealed physical allocation](HARASS_ALLOCATION.md) for
ordinary/elite mixtures and multi-sector returns. Richese card combinations
and additional optional modules stay gated. Withdrawal before explosion and
card-specific discard precedence are explicitly labeled inferences. The Stone
Burner timing question is pending; no user answer is assumed. The separate
Reinforcements prototype has its own provisional timing and cost boundary.
Neither prototype opens variant, mode or publication gates.

The preceding [early Sapho aggressor](SAPHO_AGGRESSOR.md) connects the
printed battle-priority effect during the existing shared pre-plan opportunity.
Physical attacker/defender/chooser stay stable; Habbanya takes precedence in either
slot. Shared priority feeds Stone admission, ordinary/Stone resolution, public
controls and all four AI profiles. Battle-bound history survives private saved
continuation. Later intervention remains unfinished; no new ruling is assumed.
Final checks, samples, browser evidence and delivery belong to the source-bound
private report and Git message.

The earlier [Mirror admission review](MIRROR_WEAPON_ENGINE_AUDIT.md) flagged
copied-attack choice and physical-card cleanup gaps in genuine Richese decks.
The user subsequently chose ordinary winner retention for the physical Mirror,
and the bounded Basic/Advanced battle path above now handles copy-first choices.
Full Richese starts and combined-module play remain gated; the former blanket
admission block does not apply to the connected profile.

The Smuggler follow-up review supports a saved reveal-time receipt with settlement
only on leader survival, but located no official ruling on modified leader
strength. The user has been asked about Kwisatz/trainer/Stunner composition; no
answer is assumed. See the [source follow-up](LEADER_SKILLS_RULES.md#20-september-smuggler-follow-up).

## Authoritative navigation

- [Rules checklist](../game/reference.ts), topic `implementation-checklist` and
  each feature's entries: track implementation, controls, AI, documentation and
  verification, plus Missing, Prototyped, Integrated, Verified and Polished stages.
- [Rule decision index](RULE_DECISIONS.md): settled contracts, source precedence
  and pending material interpretations. Consult it before reopening research.
- [Development context index](DEVELOPMENT.md#context-index), [canonical lookup](DEVELOPMENT.md#canonical-feature-lookup)
  and [verification tools](VERIFICATION_WORKFLOW.md): bounded paths, narrow
  feedback, frozen-batch proof and deferred final assurance.
- [Implementation history](IMPLEMENTATION_STATUS.md): newest first. Historical
  evidence and outage records stay there and in feature documents; read bounded
  relevant sections and verify old absence claims against current code/tests.
- [Efficiency pilot](EFFICIENCY_PILOT.md): the first three milestones are pushed;
  measurement limits remain explicit. Reuse tools and checks, without promising
  an unmeasured savings percentage.

## Connected development capabilities

These links define bounded working behavior, not complete module certification.

| Area | Current connected work and evidence |
| --- | --- |
| Base/Advanced setup | [Normal Advanced preview](ADVANCED_PREVIEW.md), [genuine setup](ADVANCED_SETUP_TEST_SEAM.md), [Advanced study](AI_ADVANCED_SETUP_CALIBRATION_20260907.md), [Fremen cancellation](FREMEN_MOVEMENT_KARAMA_RULES.md), [Atreides full-plan audit](ATREIDES_FULL_PLAN_TIMING.md). Earlier Basic-then-flip fixtures do not establish current setup coverage. |
| Expansion factions | [Ixians/Tleilaxu](IX_PROTOTYPE.md) and [all seven faction selections](EXPANSION_FACTIONS_PROTOTYPE.md): genuine setup, Ecaz six-force placement and [Advanced Loyalty](ECAZ_LOYALTY.md), separate optional card variants, private controls and saved per-lot Ixian/Richese decline. Actual special-lot exchange remains pending. |
| Leader Skills | [Common lifecycle](LEADER_SKILLS_RUNTIME.md), [known skilled capture](LEADER_SKILLS_CAPTURE.md), [Mentat question preview](MENTAT_QUESTION.md), [Bureaucrat payments](BUREAUCRAT_PAYMENTS.md), five battle disciplines, [Planetologist](PLANETOLOGIST_RULES.md), [Suk Graduate](SUK_GRADUATE_RULES.md), [Rihani and other battle effects](LEADER_BATTLE_EFFECTS.md), [Smuggler shipment](SMUGGLER_SHIPMENT.md), [No-Field](SMUGGLER_NO_FIELD.md) and [battle collection](SMUGGLER_BATTLE.md), [Sandmaster routes](SANDMASTER_MOVEMENT.md) and [worm rides](SANDMASTER_WORM.md), [Banker spending](SPICE_BANKER_RUNTIME.md), [Diplomat defense](DIPLOMAT_DEFENSE.md) and [bounded retreat](LEADER_SKILLS_RULES.md#bounded-diplomat-retreat-interpretation). Remaining bands and combinations are explicit in those contracts. |
| Discoveries | [Prototype](DISCOVERY_PROTOTYPE.md): genuine setup, Great Maker, seven cards/eight tokens, inspection and stash rewards, nested sites, signed later free entry, carried Ornithopter, sole Cistern, bounded Orgiz transfers, Jacurutu income, Testing Station and Shrine. Orgiz's per-deposit interpretation, contested/shared benefits and mixed physical allocation remain provisional or pending. The Orgiz path in current source is not yet deployed. |
| Nexus/Homeworlds | [Decision index](RULE_DECISIONS.md) links each integrated faction family, native/borrowed effects, physical custody, private choices, payments and transport. [CHOAM Secret Ally trade and bounded after-victory inspection](NEXUS_CHOAM_SECRET_ALLY.md), [Moritani Secret Ally losing-card retention](NEXUS_MORITANI_RULES.md#secret-ally-losing-card-retention-prototype), [Ecaz private yes/no inquiry and bounded native Duke Cunning](NEXUS_ECAZ_RULES.md#bounded-native-cunning-duke-vidal), [Emperor extra revival and bounded bank-auction purchase](NEXUS_EMPEROR_SECRET_ALLY_RUNTIME.md) are connected. Uniform CHOAM winner/Moritani loser windows, Ecaz inquiry scope/audience and Ecaz Cunning's Battle-only window are product inferences, not publisher rulings. Source audits or helpers alone do not certify full module games. |
| Truthtrance | [Spice facts](TRUTHTRANCE_SPICE_FACTS.md), [card counts](TRUTHTRANCE_CARD_COUNT.md), [hand inventory](TRUTHTRANCE_HAND_INVENTORY.md), [recorded knowledge](TRUTHTRANCE_KNOWLEDGE.md), and [Basic/no-Guild Advanced reserve-shipment promises](TRUTHTRANCE_SHIPMENT_PROMISES.md) use authoritative private state. Earlier readiness audits do not supersede these follow-ups. |
| Other cards | [Sapho runtime](JUICE_OF_SAPHO_RUNTIME.md) includes first among remaining unstarted movement turns after Advanced Guild has finished. [Recruits](RECRUITS_RUNTIME.md) connects clean Revival play; [Harass & Withdraw](HARASS_WITHDRAW_RUNTIME.md) and [Reinforcements](REINFORCEMENTS_RUNTIME.md) connect bounded battle effects in the same independent three-card preview. Richese card contracts and the checklist identify other connected effects and explicit gaps. |
| Multiplayer | [Public and private discussion](TABLE_DISCUSSION.md), saved rooms/seats, [recovery](../README.md#saved-seats-and-reconnecting), uncertain-request retry, [own-seat AI](AUTOPILOT.md), [named-player AI permission](SEAT_AI_PERMISSION.md) and [voluntary seat handover](SEAT_HANDOVER.md) have connected controls and recovery evidence. |

## Remaining readiness

| Area | Remaining gate |
| --- | --- |
| Basic core | Ordinary Guild repricing/transport settlement, broader truthful commitments, unresolved special timing and integrated rules/human/AI acceptance. |
| Six-faction Advanced | Base gaps, provisional special-Karama outcomes, remaining timing audits and authentic multiplayer/browser acceptance. The user-authorized unfinished preview is available; setup matrices and complete samples do not certify full compliance. |
| Twelve factions and all optional modules | Every missing effect, remaining skill bands, Ecaz card variant, Kull Wahad, unfinished Richese cards, Terror effects, occupation entitlement, Nexus interactions, contested Discoveries and complete games across valid combinations. Detailed boundaries remain in the checklist/decision index. |
| AI | Maintain minimal legal participation and critical correctness fixes while game features are unfinished. Full implementation, strategy refinement and calibration wait until all non-AI features are complete; then target approximately 75% higher-tier wins for Medium/Easy, Hard/Medium and Brutal/Hard. See the [AI development plan](AI_DEVELOPMENT_PLAN.md). These targets remain unverified. |
| Multiplayer | Broader disconnected/abandoned-seat recovery, unattended continuation and network-failure acceptance, while preserving authoritative versioning, custody, privacy and saves. |
| Administration | Complete the [admin panel](ADMIN_PANEL.md): permissions, room directory and creation/removal, lifecycle controls, participant support, backup/restore and operational audit tools. Required before full AI refinement. |
| Components and experience | Full component inventory/text verification, all readable inspectors, original artwork, animation/sound/accessibility/mobile polish, complete internal guidance and end-to-end human play. |

[AI calibration](AI_CALIBRATION.md), [multiplayer audit](MULTIPLAYER_AUDIT.md),
[component inventory](COMPONENT_INVENTORY.md) and [visual playtest](VISUAL_PLAYTEST.md)
record their measured scope. [README](../README.md) retains publication gates.

## Working sequence and preservation

Prototype all remaining rules in dependency-related batches using existing
controls and minimal legal AI. Continue independent functions while material
rulings are pending. The integration owner freezes each batch, repairs the
smallest failing case first, then runs affected tests/types/lint and changed-path
smoke once. Do not run the full offline suite or repeat HTTP/seat/save/privacy/
custody audits at every tiny prototype.

After all rules are implemented, run full proof, comprehensive independent
review, integration games and save/recovery/privacy/custody assurance; repair
failures and finish all non-AI scope, including complete administration. Only
then fully implement/refine AI and calibrate adjacent difficulty pairs. Final
components, human journeys, browser/deployed and publication acceptance remain
required. The [proof schedule](DEVELOPMENT.md#feedback-and-proof-schedule) records
the checkpoints without duplicating the rules checklist.
Commit and push verified checkpoints under **“Push all from now on”**, verify push
success. The user removed the usage cutoff and routine account-usage checks;
efficient work, Git delivery and selective subagents remain required.

The user-authorized 13 September reset happened once; preserve all games created
since it. Keep `.wrangler/state`, credentials and private backup artifacts out of
Git. Reuse a healthy server; restart only for a relevant change or observed
problem, warn before interrupting human play and use a safe point. Observe health;
comprehensive restoration assurance follows all rules, while actual production
deployments retain their existing safeguards. No hourly restart or recurring
maintenance automation is installed; do not recreate one.