Gameplay implementation status

Version 1 release and Version 2 boundary

Version 1 is ready as a local playable village → production → patrol → paid land improvement → supplied-outpost release under the revised two-day delivery instruction. See Version 1 notes for launch steps, actual controls, the first eighteen working technology applications, verification and limits, and the release checklist for its acceptance record. The wider original M0–M8 requirements remain unfinished in the separate Version 2 plan. Version 2 has not started.

A fresh native-clock woodland run has now founded once, completed and staffed a real lodge, and reopened with the same identity in 16.102 seconds from entry. Four paid reviews/ten events, all 73 exact engine transactions, whole save restoration and forty layout checks support this first-project path. All 49 earlier accepted closings and 35 portable fixtures remain byte-preserved. This is automated evidence; native full-day production and unassisted human learning remain outside this result.

The current core release regression run passes 177/177 cases across fourteen files covering production/food, shared workers and stock, storage, finite deposits, outposts, City reviews, militia, continuity, trade and persistence. Test-file hashes stayed unchanged. It overlaps earlier selected evidence; totals below retain their exact scope.

Ten release-test/helper files are now corrected without changing production behavior or original fixtures. Older waterworks expectations include the existing empty books through format 43, and governor cargo custody/spending reflects the real two-ram walking load. The perimeter missing-book case now corrupts only its perimeter ledger; removing several other ledgers had correctly triggered an earlier isolation error. The refuge test retains every shelter, architect, firewood, water and population assertion and updates its stale 47-topic count to the current 56-topic catalog. Whole-state, paid-custody and exact perimeter-error assertions remain.

The tenth correction repairs watershed historical-format test inputs. Before deleting any later book, the helper verifies its marker and complete typed empty contents, so paid custody cannot be discarded. All 22 downgraded inputs omit the eleven empty books introduced after format 31; eight migration endpoint assertions expect the current format 43. Original malformed-term errors, paid work, stock, water, title and notice assertions remain. The complete 35-case watershed file passes; production and original fixtures are unchanged.

The complete original npm test run across 593 files finished with 3321 cases: 3305 passed and 16 failed. All 16 failures are resolved by complete current-source affected-file runs (28/28, 6/6, 9/9 and 35/35). The original failing run and its seven declared changed test files are retained, with the watershed correction separately made after termination; it is not presented as a clean full-suite pass on current sources. The fourteen core files and ten affected files pass 255 distinct selected cases, with matching source hashes. Syntax covers 155 current paths; 49 older accepted closing saves and 35 portable fixtures remain byte-preserved. The perimeter run retains its explicitly normalized historical paid predecessors; exact empty stage 30→43 books and sediment 1→2 empty-removal metadata change no existing stocks, paid work, geometry, mass or timestamps.

Version 1 delivery instruction — October 7, 2026

The user has changed the delivery sequence: wrap up Version 1 within two days on the next goal continuation, then prepare Version 2 for a separate new goal. The Version 1 release plan defines the playable core, 48-hour window and release checklist. The Version 2 plan retains the wider original requirements as explicit deferred work. This supersedes earlier open-ended next-work priorities; it does not claim the deferred features complete. Do not start the Version 2 goal yet. The delivery window began October 7, 2026 at 06:17:48 UTC and ends October 9 at 06:17:48 UTC (08:17:48 Europe/Berlin); it does not restart between continuations.

Mixed-material barter and earned warehouse renewal — October 7, 2026

City v263 adds Trade & routes → One-time barter, coin sale or relief → Add materials for mixed barter → Review mixed barter proposal. The main send/receive rows plus two optional rows per side specify one to three distinct materials, 1–40 whole units each. A material cannot appear on both sides, and at most one dated material per side keeps its original expiry. Both owners separately consent to the complete bundle; payment is reserved locally, then the sender separately pays dispatch, two carriers and route provisions. All materials exchange together on arrival with sufficient storage. Collected payment becomes usable only after physical home return and unloading. Capacity includes cargo, travel meals and any separately paid animal feed. Unsupported, unavailable, over-capacity or stale orders fail atomically. Cancellation releases local payment and physically returns undelivered sender cargo; a completed exchange is final.

Version-one trade books and their logistics markers remain exact on read/restore. Only a successful explicitly reviewed mixed proposal promotes both to version two and records kind: mixed-barter / mixedBarterVersion: 1; all old agreements remain unchanged. Invalid proposals grant no promotion, goods, workers, knowledge, title or public authority. Ordinary barter, gifts, coin sales and finite recurring agreements retain their existing single-material terms. No world-coordinate, simulation-clock or other saved format changes.

The portable earned journey ../test/fixtures/earned-renewable-storage-journey.manifest.json now passes the served City controls: twelve separately reviewed orders, 157 independently settled/replayed events and 52 responsive checks at 320/390/640/1440px. Two selective cuts produce real home logs; two paid clearing passes make one footprint legal. The second home storehouse increases capacity 1800→2200 using actual timber/food. A physical camp trip collects twenty timber/twelve food. Separately consented mixed barter delivers six timber/twelve logs to the coastal home for eighteen food, and a separate ordinary trade delivers six timber to the farmer for twelve food. Whole saves, later identity and the production loader pass. All 117 people/72 workers, met meals, health 100 and active scribes persist through seventeen configured village days; seventeen uninterrupted kitchen batches extend the prior chain from 338 to 355. This uses the existing 100ms work unit and advanced QA clock; it does not certify native wait times or human usability. Home logs are again zero, farmer/coastal timber four/two and the finite ore seam 196, so further civic/fuel/material supply remains necessary.

A final read-only pass clears the duplicate-row message when the draft is corrected, dismisses a valid mixed review and adds 24 responsive checks without an order, clock advance or saved-state change. The complete 390px editor and completed agreement were visually inspected. The current selected run passes 109 distinct cases across 14 files; historical counts and duplicate runs are not added, and the full repository suite is not claimed. All 49 canonical checkpoints restore and all 34 older portable fixture bytes remain preserved; the new fixture brings the total to 35. Only the two previously accepted neutral waterworks migrations remain allowed; trade books do not promote on read. Remaining priorities are renewable civic/material supply, broader institutions and realm progression, useful permanent water operation and final integrated validation; no staging, commit, push or deployment is authorized.

Native coastal start and selected settlement context — October 7, 2026

Implemented in map script/style settlement-context-1; City remains v262. Region/Hex → Selected settlement shows the actual managed-region name and full footprint count at 12px. The geographic title stays separate; Hex shows its canonical number. Current world overviews refresh the caption. Unmanaged selection clears the previous name and Global hides the extra line. No saved field, migration, command or resource changes.

The portable native coastal journey ../test/fixtures/native-coastal-first-session-journey.manifest.json begins in an actual fresh served world with the standard package. Four reviewed orders reserve/found/build a storehouse and authorize one day of food space. Ten settled events across eight matched committed transaction states replay exactly, including native observed clock reads and whole save restoration. The actual quoted 6.8-second work completes in 6.921 seconds after funding. Its 417.536-second entry-to-building time includes QA recovery. The existing founded world is continued, with no repeated founding/construction or extra supplies, and a later same identity retains both results. All 40 people/24 workers and 6/2/2 growers/fishers/cooks remain. Storage rises 1400→1800, food-space target becomes 40, and +5/day food remains a conditional forecast; no full four-hour harvest was observed.

Forty-eight responsive geometry checks accompany the flow; the final map pass adds 24 checks with zero orders, zero gameplay events and unchanged whole saved state. Owned Region/Hex, hidden Global detail, shared development, unmanaged selection and return are checked at 320/390/640/1440px. Mobile named/unmanaged captions and the complete guide were inspected. The initial missing-selector and premature presentation-wait failures are retained; paid work remains and the final caption is independently checked. Totals become 48 canonical closings/34 fixtures, preserving all 47 older closings/33 older fixture bytes with only the two previously accepted neutral migrations. The current selected run passes 81 distinct cases across 13 files, including the new native coastal replay and map/touch regressions. Syntax/wiki evidence is recorded in the coastal goal handoff; historical counts are not added and the full repository suite is not claimed. This completes bounded native first-construction evidence for the three default-seed profiles, with human learning, native daily production, varied-seed/map/touch/art/hidden-information breadth and full M0–M8 still open. See living world design, plan, map design, interface, player guide and technical details.

Native first-session construction sites — October 7, 2026

Implemented in City v262: Construction preview → Build plot now includes Can build now, Requirement remains or Blocked and the first current server reason. Occupied sites are labeled. Stale/pending scans show Checking site…. Canonical selection, fresh review, paid materials, crew queues and all world rules retain their existing authority. Getting started now explains the visible site labels.

Two portable native-clock journeys ../test/fixtures/native-first-session-journeys.manifest.json start from fresh served worlds without a prepared opening or time/resource edits. Woodland's first lodge becomes operational about 14.025 seconds after entry/7.898 after funding; its endpoint is unstaffed. Farming's first storehouse becomes operational about 13.138 seconds after entry/7.007 after funding. A subsequent ordinary review raises one existing field 5→6 and later reopens the same village. Its 167.931-second entry-to-staffing interval includes QA recovery. Seven paid reviews/nineteen settled events across fifteen independently replayed committed transaction states, whole save restoration and sixty valid responsive checks pass across these separate worlds. The inspected mobile ready-site preview displays the actionable status. The storehouse raises capacity 1400→1800; all 40 people/24 workers remain. The farming 20.5-food daily surplus is conditional; no four-hour harvest was observed.

The initial blocked-site test exposed the selector defect. Later screenshot/absolute-staff-count QA failures preserved paid work and were independently replayed; existing construction was not repeated within either world. All 45 prior canonical closings and 32 fixture byte hashes remain preserved, with only the two accepted neutral waterworks migrations; new totals 47/33. The current selected run passes 68 distinct cases across 10 files, including the two portable native journeys. Historical run counts are not added; the full repository suite is not claimed. Syntax/wiki evidence is recorded in the native-first-session goal handoff. No staging, commit, push or deployment occurs. The full goal stays active: these automated native timings do not certify all native profiles, human first-session learning, all multi-seed/camera/touch/art/hidden-information behavior or the wider original M0–M8/fourteen scenarios. See living world design, plan, interface, player walkthrough and technical details.

Mixed detachment field ammunition — October 7, 2026

Implemented in City v261: Defense & patrol → Field resupply → Review ammunition resupply now sends actual warehouse arrows to equipped mixed detachments, using the existing two civilian carriers, paid travel food, held field rendezvous, physical return and whole-item storage rules. Only surviving archers have quivers, six arrows each; the infantry fitting gains no ammunition. Arrival preserves wages, wounds, condition, morale, fatigue and the prior military order. Escorts, garrisons and campaigns retain their separate supply restrictions. The early Getting started route is unchanged: this requires an already trained and equipped force, active Field logistics and a sound home storehouse.

The current selected run passes 269 distinct cases in40files, including seven focused cases and one complete portable transcript. The portable controlled transcript ../test/fixtures/controlled-mixed-field-ammunition-journey.manifest.json adds two actual reviewed City orders/four independently settled events, read-only dismissals, full production-loader opening/closing, whole replay/restore, later identity and28responsive checks at320/390/640/1440pixels. A separate zero-order/zero-clock pass adds four card checks and an inspected mobile image. All44earlier closings restore with only the two previously accepted neutral waterworks migrations; all31older fixture byte hashes remain unchanged. The new controlled closing and fixture bring the separate preserved totals to45/32. Paid setup uses normal100ms work timing; its single four-arrow contact is explicitly controlled. It is separate from the earned civic/mineral/soil journey below, with no merged warehouses or claim of an earned mixed campaign, complete soldier lifetime or real newcomer pacing. The full repository suite is not claimed. All129scoped syntax checks, wiki generation/check/coverage and whitespace pass; the index stays empty.

Old version-one Combined books remain unchanged on load. Only a successfully paid mixed-arrow dispatch explicitly promotes its paired markers to2 without rewriting records; its new supply journey uses version4/ammunition2. Classic archer, kit and food supply retain their old formats. Current regression and preservation evidence is recorded in the mixed-ammunition goal handoff. Full M0–M8, fourteen scenarios and the remaining institution, realm, renewable-input, water/disaster and broader map/touch/art gates stay open. See living world design, player instructions and technical details.

Target funding, charcoal renewal and paid soil recovery — October 6, 2026

Implemented in City v260: Production mandate → Estimate funding for target replaces the fixed ten-batch shortcut. A pure estimate uses current local stock and the actually staffed recipe, retains prior recipe commitments, and prepares either a capped stock-gap bill or one more batch beyond today's daily spending. It changes only local draft allowances; the existing reviewed mandate command retains all authority, accounting, timing, real-input and storage checks. Unstaffed/invalid/exhausted finite-source estimates cannot make a partial change. No saved fields, versions, migrations or resources are added. See the player walkthrough and technical explanation.

The exact worked-mineral closing continues through 18 actual reviewed orders / 64 independently settled events in two linked checkpoints over 12 configured village days. Ten existing logs produce eight charcoal; ten existing iron/five charcoal produce ten new tools. A separately consented two-tool trade physically returns, then two tools from the home’s combined stock physically reach the mineral camp. Capped spending does not renew when stock falls. Both wheat plots subsequently need and receive paid soil care from their owners' existing compost/timber; the next real harvest restores positive home food balances. All117remaining people/72workers, met meals, health100 and lawful public holders/successors persist. Twelve further consecutive kitchen batches extend the chain from326 to 338. The seam still has196finite ore; future fuel, input, storage, civic and land supply remain necessary.

The two portable ../test/fixtures/earned-charcoal-renewal-journey.manifest.json transcripts ../test/fixtures/earned-soil-after-charcoal-journey.manifest.json retain separate parent provenance and real reviewed controls, dismissals, atomic event witnesses, whole replay/save restore and later identity. Current scoped coverage is 189 distinct cases / 28 files, plus108accepted responsive checks at320/390/640/1440pixels. Forty-two earlier canonical closings and twenty-nine older fixtures remain preserved; the two previously accepted neutral migrations are the only allowances. The original paid runner's final resource-label assertion failed after all sixteen orders; its paid state was independently validated and subsequent read-only UI checks used no orders or clock advance. The full repository suite, actual newcomer waits, complete varied-seed journeys and all wider original M0–M8 / fourteen scenarios remain open; this is bounded earned progress.

Earned worked-mineral continuation — October 6, 2026

The exact accepted civic/toolmaking closing now earns 86 served reviewed orders and 934 independently settled events across 84 configured village days. The woodland owner explicitly closes migration, separately buys four existing tools by consented trade, pays for Record keeping, returns an on-site mineral report, registers its charter and sends eight existing residents/six workers. Their camp separately builds and staffs a food plot, receives real timber loads and funds a mine on the surveyed finite seam. Four miners produce 14 ore, leaving 196 of 210 in the ground. A paid home carrying team returns twelve ore; the farming owner separately consents to a physical food-for-ore exchange, smelts all twelve into twelve iron and spends the remaining charcoal to forge two additional tools. A later four-tool return shipment draws from the workshop's combined existing and new stock. Further forging is blocked by actual charcoal depletion; eleven iron remain at the farmer.

Optional farmer/coastal scribes are explicitly paused during funding, then restocked and restored through ordinary reviews without a second adoption payment. Public accounting remains active. Soil care, real forest work, finite-depot deliveries, storage room and actual camp collections still govern the route. Three existing non-ruler elders die naturally at age 85; the current office holders, succession law and nominated successors remain, while interim eligibility passes to existing living adopted kin, final population totals 117 and the original 72 workers remain conserved across homes, camps and travel. Every community has met food needs and health 100 throughout. 84 more consecutive kitchen batches extend the parent chain to 326. This is bounded earned play on the existing seed; finite seams, charcoal and later supply/land constraints remain. Actual newcomer waits, complete varied-seed regional journeys, manual map/art/hidden-information breadth and all wider original M0–M8 requirements remain open.

Every paid review is first dismissed without a command or state change. The new survey-material handoff is checked both eligible and blocked by the actual travelling team. Responsive layout checks cover 320/390/640/1440 pixels; the mobile survey card was visually inspected. Whole production-loader validation, independent full replay, exact save restore and a later same identity pass. The portable transcript ../test/fixtures/earned-integrated-mineral-journey.manifest.json pins the unchanged civic/toolmaking source. Forty-one earlier closings and twenty-eight older portable fixtures remain unchanged; the two previously accepted neutral migrations remain the only allowances. Current selected coverage is 159 distinct cases across 23 files, including one new complete served transcript; historical counts are not added and the full repository suite is not claimed. QA clock advancement uses the saved 100 ms work unit and four-hour village day; it does not certify real newcomer pacing.

Frontier survey supply handoff — October 6, 2026

Implemented in City v259: Frontier & charters → Plan survey supplies opens Supply chains → Work backward from a goal → Expansion → Survey supplies: [parcel]. The same shared route calculation supplies dispatch and the read-only bill. The handoff shows two surveyors, real travel food, timber, tool, duration and the current blocker. Material planning grants no unsurveyed resource details, report, title or funded order. No save version or migration changes. The worked-mineral continuation is now served and replayed as described above; full M0–M8 remains active.

Served civic/tool continuation accepted — October 6, 2026

The exact accepted continuous-fuel closing now continues through 128 served reviewed orders and 1,375 independently settled events over 133 configured village days. Paid Joinery selects the precision saw; both owners earn Public accounting and separately review their timber budgets. The farmer builds a Smithy and Charcoal kiln on legal free fields, imports ten finite waystation iron for twenty timber plus travel meals, consumes fifteen logs for twelve charcoal, then ten iron/five charcoal for ten actual tools. A separately accepted food-for-four-tools trade physically returns four fabricated tools to the coastal home; a mixed camp trip delivers one. Ordinary camp collections, eighteen qualifying woodland cuts, fifteen consented trades, paid soil/compost care and finite-depot relief deliveries supply the route. Scribes are explicitly paused during workshop funding, then restored with real stock and remain active on every subsequent settled check for over thirty days. Public accounting remains active. Original people/workers and met needs/health 100 persist. The kitchen completes 133 additional consecutive daily batches, extending the parent's uninterrupted chain from 109 to 242. Finite iron, future storage and material upkeep still need real work; this is bounded manual play rather than indefinite supplies or the full M0–M8 objective.

The two visible walking-team quote choices (forty relief food and ten iron) retain ordinary finite logistics checks and introduce no save field or migration. Served operating-supply plans for the paused and active scribe issue no command or state change, use seven days by default and support fourteen/thirty-day buffers. 376 responsive checks, all reviewed dismissals, every exact state witness, later identity and full production-loader/replay/restore checks pass. Current scoped selection is 96 distinct passing cases across seventeen files; historical counts and duplicate runs are not added. Forty older canonical closings and twenty-seven older portable fixtures remain preserved apart from the two previously accepted empty-waterworks migrations. The new portable fixture ../test/fixtures/earned-civic-tools-journey.manifest.json continues the parent without merging private branches. The full goal remains active.

City v258 finishes the current redraw before coalescing another redraw requested by a blur/change handler. A deterministic served nested-blur check retains the fourteen-day draft and issues no order. The earlier paid run recorded two DOM replacement errors; their evidence remains preserved. Current UI revalidation resumes its exact paid closing with no new order or clock advance and no page errors. All real receipts, replay and restored state remain unchanged.

Learned-service supply planning — October 6, 2026

Implemented: Research cards for learned programs with positive daily upkeep expose Plan operating supplies. City v258 selects a seven-day material buffer; one to thirty operating village days can be planned. The projection exposes conditional upkeep consumers for paused or active known programs, using the current named-specialist rate. Only active services contribute current recurring demand, so the planning row does not count an operating program twice. No program is enabled, goods reserved or saved field added by planning. Research, adoption, household meals, travel, workforce and institution checks remain separate.

The exact earned continuous-fuel closing verifies read/save purity for its paused scribe; an ordinary enable review and actual household day spend the real daily timber. A separately earned named appointment verifies a seven-day fractional 5.25-food buffer. The paused and active served City handoffs now pass read-only purity; the source-bound paid continuation is accepted above. The full original M0–M8 goal remains active.

Owned storage and continuous meal route (M1/M2/M3/M6 partial): City v256 makes small fractional production shortages readable while preserving the exact blocked/input/spending checks. The actual preceding material closing supports two sixty-timber/fifteen-food storehouses, three paid timber/food exchanges with the owned camp, regrown selective harvesting, working milling, separately accepted timber barter, soil repairs and compost production. Four wheat growers plus one fisher/one kitchen worker offer 34.6 conditional food against thirty-two home residents; each actual kitchen batch pays three fish/half a log for six food. The served City route proves 109 consecutive daily batches across a 150-day continuation with the original residents/workers and healthy needs. All eighty-three orders use visible City controls and ordinary reviews; the actual transcript, each settled event, later identity and whole save restore pass independently. This does not certify indefinite resources, tools, active scribes, broader seed/pacing/art coverage or full M0–M8. See primary design, player guide and technical reference.

At the preceding continuous-fuel checkpoint, scoped acceptance covered 76 distinct selected cases across thirteen files, eighty-three ordinary City orders, 1,583 independently replayed events and 240 responsive checks at 320/390/640/1440 pixels. Every review is dismissed without a command or state change before confirmation, and each settled event matches an independent replay. The kitchen completes 109 consecutive daily batches; later identity and whole save restore pass. Thirty-nine earlier canonical closings and twenty-six older fixture hashes are preserved, with only the two already accepted empty-waterworks migrations. The portable continuous meal-route manifest ../test/fixtures/earned-continuous-fuel-journey.manifest.json preserves actual browser receipts and the exact prior material closing. Current totals do not add duplicate runs or historical checkpoints. Full original M0–M8, nine milestones and fourteen scenarios remain active.

Manual material renewal and exact soil navigation (implemented, M1/M2/M3/M6 partial): Inspect food-plot soil care opens the exact owned worn prepared field when staffed blocked production and negative food balance need inspection. The normal two-compost/two-timber/four-worker/full-day repair remains separately reviewed; other production blockers remain visible. City v255 adds no saved state or migration.

The post-coastal upkeep continuation repeats the same regrown camp woodland four times, physically collects twenty logs/six food per round and separately exchanges eighteen logs for twelve real timber. The partner mills all seventy-two logs into fifty-four timber, covering forty-eight paid timber plus three for actual Seed selection while retaining 84 against opening 81. Six soil repairs use actual local materials. Original residents/workers and healthy needs are preserved across 81 configured village days. Kitchen/fishery are deliberately paused for most of the route and restored near the end; three closing fuel logs, crowded warehouses and paused scribes leave continuous fuel/civic/tool renewal open. Full M0–M8 remains active. See primary design, player guide and technical reference.

Post-coastal upkeep (earned, M2/M6 partial): The immutable coastal closing retains the farmer's real worn-soil deficit; it is not claimed food-sustainable without further work. A separate City continuation spends four of the farmer's own logs/four food for compost, then two actual compost/two timber for a full-day soil repair. Two reviewed orders, eleven independently replayed events, 24 responsive checks, read-only review dismissal, later farmer identity and whole restore pass. Seven more ordinary days then prove positive conditional food balances, health 100 and met needs in both homes and both camps, with both nine-step guides met. Closing farmer 32 logs/13 timber/6 compost and coast 4 logs/19 timber remain finite; both Record keeping services are explicitly paused. The original coastal closing/receipts stay unchanged. At the preceding coastal/upkeep checkpoint, verification was 61 distinct selected cases/nine files, not added historical runs. Full M0–M8 and recurring fuel/material/soil/civic supply remain required. See primary design, player guide and technical reference.

Coastal integrated target (earned, M0–M6 partial): The existing coastal City controls now complete the village → material bottleneck → cautious protective patrol → maintained wheat field → supplied woodland camp route from the exact farming closing. Actual neighbor consent supplies twenty logs and four eighteen-timber loads; real carriers and travel food remain paid. Longer travel limits cargo, soil wear stops wheat until paid repair, and supplies are accumulated before a fresh survey/current charter. Existing founders, separate camp field/staffing and thirty-two-food/one-tool delivery with twenty-log return preserve household/workforce custody. One home carrier shortage now offers the read-only Inspect supply-team workers link. Explicit civic pauses and home wheat growers eight → six retain actual labor for delivery and soil care.

All 56 remaining orders use visible City controls, including five separate partner payment reservations and the farmer's explicit service pause. Each review is dismissed first without a command or state change. The exact farming closing is the opening, with no intervening paid setup or joined private stocks. Whole 259-event replay/save restore, 160 layout checks at 320/390/640/1440 pixels, touch controls and a later coastal identity pass. The preceding coastal/upkeep checkpoint covers 61 distinct selected cases across nine files; prior checkpoint totals are historical, not added. Thirty-six earlier canonical closings restore and all twenty-three older portable fixture hashes remain unchanged, with only the two previously accepted empty-waterworks migrations. The accepted record is .qa-city/coastal-integrated-goal-handoff.json.

The coastal route keeps both coastal/farming homes and camps healthy with met needs through seven final ordinary days; positive conditional balances are proven for the coastal home/camp. The farmer’s older worn wheat leaves a real -3.25 daily deficit before the separate upkeep above. The coastal home retains twelve logs/nineteen timber; both Record keeping services are explicitly paused. Finite fuel, earlier founding/depot stocks and a repaired field do not prove indefinite renewal. Woodland, farming and coastal now each have an earned integrated starter example on the current seed. Full journeys on other seeds, a recurring renewable material/food economy, manual map/touch placement, real newcomer waits, art/hidden-information and the original wider six-branch/military/political/realm/major-water/resource/disaster gates remain required. Full M0–M8, all nine milestones and fourteen acceptance scenarios remain active. See primary design, plan, interface and wiki.

Farming material route and seed viability (implemented, M0–M6 partial): The guide offers Inspect timber trade when this charter has no timber-producing building or natural woodland. It explains the real mill bill/logs and separately consented barter with actual goods and paid travel. A current paid caravan still opens its own waiting/blocking advice. No foreign stock, automatic payment, resource grant, saved field or migration is added. Three additional configured seeds each earn woodland, farming and coastal first projects plus actual Scouting, using their own finite stocks. Whole independent replay and seed-bound save restore pass; no full multi-seed regional journey or newcomer pacing certification is claimed. See primary design, interface, player guide and technical reference.

The exact prior alternative-starter closing now earns the complete farming integrated target through visible City reviews. Existing barley fields keep meals available; real iron imports fund four kits, four existing residents finish two training days, and a cautious patrol disperses this village’s own surveyed camp. One wound heals at home before demobilization returns workers and three worn kits. Soil preparation on an existing surveyed field spends actual compost, timber and a tool over three full days, raises usable moisture and makes the separately chosen wheat crop possible without changing natural terrain. The farmer then reaches a real founder-kit shortage: forty-nine timber and three tools against sixty timber/four tools, plus ten extra timber for the camp food plot. Three separately accepted barters export thirty-two actual food each for twenty-four timber each, with real reservation, carrying and return. Another physical tools import completes the kit. Returned survey, separate charter and supplied founders move eight existing residents/six workers into a camp, followed by separate local food-plot construction/staffing. A paid trip delivers thirty-two food/one tool and returns twenty locally harvested logs. Home thirty-two residents/eighteen workers and camp eight/six remain healthy with met needs and positive conditional food balances for seven more ordinary days; all nine guide checks are met. Home retains fifteen timber and still needs future civic/material supply; this is not an indefinite material-renewal claim.

All forty-one remaining reviewed commands are served, including the woodland partner’s three separate payment reservations. There are no intermediate paid setup commands or joined private stocks. Whole 250-event replay/restore, 116 responsive checks at 320/390/640/1440 pixels, touch reviews, read-only dismissal of every review and a later farming identity pass. One extra command uses Workers’ actual one-person staffing buttons. The independent prototype is an expected-action list, not injected setup. The three seed fixtures remain separate from the farming world. At the preceding farming checkpoint, checked totals were 58 distinct selected cases across eight files: fifty-seven current regressions, including the new timber-advice case and three seed-bound replays, plus one new whole farming City transcript. Thirty-five earlier canonical closings restore and twenty-one older portable fixture hashes remain unchanged; only the two previously accepted empty-waterworks migrations apply. The preceding farming record is .qa-city/farming-seeds-goal-handoff.json. Earlier checkpoint counts are historical and are not added. Full M0–M8 remains active; broader full-seed journeys, manual map/touch work, pacing, art/hidden-information and all wider gates remain open.

Alternative starter guidance and first work (implemented and earned, M0–M4 partial): Inspect food plot workers focuses the existing ready basic plot only when its free grower slots and current available workers can cover a negative balance. Each one-person assignment remains reviewed. Unknown Scouting leads to Plan Scouting’s lodge, then Inspect lodge workers for an existing sound unstaffed lodge. Suitable cleared fields are legal; one real staffed practice day precedes paid research, full learning days and adoption. No stock, people, rights, practice, automatic order or saved field is introduced. City script v254. The Getting started sequence now explains alternative-profile storage, coastal fuel recovery and the lodge path.

The exact fresh-entry farming/coastal identities continue through thirty-nine ordinary days without paid setup. Coastal cooking exhausts its logs; field staffing six → eight restores a four-food daily capacity surplus. Each owner separately builds a storehouse and cleared-field lodge, staffs its institution and learns/adopts Scouting. Twelve reviewed orders/forty-three served events, twelve read-only dismissals, sixty-four layout checks at 320/390/640/1440 pixels, later own-identity sessions and exact replay/restore pass. Both retain forty residents/twenty-four civilian workers, health one hundred and met food needs through seven more days. At the preceding alternative-first-project checkpoint, checked totals were 53 distinct selected cases across six files: fifty-two current guide/supply/military/starter regressions plus one new portable alternative-owner transcript case. Thirty-four earlier canonical closings restore and twenty older portable fixture hashes stay unchanged; only the two previously accepted empty-waterworks migrations apply. The accepted record is .qa-city/alternate-starters-goal-handoff.json. Earlier checkpoint counts below are historical and are not added. This proves useful alternative first projects and Scouting on the current seed. Their full routes are earned in the newer farming/coastal sections. Broader seeds, manual map gestures, newcomer pacing, art/hidden-information and the wider M0–M8 systems remain open. The prior complete woodland transcript remains preserved separately. See primary design, interface, player guide and technical reference.

Integrated starter target earned on one seed (M1–M6 partial): The exact prior fresh-entry closing now completes the ordinary woodland home → protective patrol → useful farmland → supplied outpost journey. Its three original starting identities/grants remain independent. Paid Seed selection, Drill, Scouting, Crop rotation and Record keeping form the minimal five-topic path. Troops goals now offer two/four/six residents, shared actual kit bills including blocked quotes, whole-batch shortage planning and matching separately reviewed crafting/recruitment. The guide says Compare militia equipment and explains the two-person camp risk and larger civilian/equipment/meal commitment. City script v253; no new save field or migration.

Actual finite iron import funds four crafted kits/eight timber/four iron, two full training days and a cautious physical patrol that disperses the camp. One wound heals at home; later real trade is protected. Demobilization restores workers and three worn kits. The starter mill hits a genuine logs shortage; owned harvest restores milling. Real clearing, compost, soil work and paid field construction create staffed farmland without editing natural terrain. A returned survey, separately paid charter and provisioned founders create an eight-person titled outpost, with separately built/staffed local food production. A reviewed mixed team delivers 32 food/one tool and physically returns 20 locally harvested logs. Home 32 people/18 workers and camp eight people/six workers stay health100 without food shortfall for seven further ordinary days; all nine introductory checks are met. Only five topics are learned; no advanced branch supplies the result.

Preceding complete woodland starter City-control verification: All 43 remaining paid orders use visible City controls and current reviews, including the five research/adoption paths, crop selection, clearing/survey/compost/soil, both field projects/staffing, frontier survey/charter, founders, harvest and mixed supply. Each review is dismissed first without state changes. The exact source already served founding and the first lodge; no intermediate prepared commands are inserted. Workers needs three extra one-at-a-time staffing orders compared with the narrower predecessor. The new portable fixture independently replays all 262 events and restores the closing. Sixty-eight layout checks at 320/390/640/1440 pixels, touch reviews and later identity pass. Checked totals are 49 distinct cases/five files: the 48 unchanged-source preceding cases plus one new whole City-transcript case. Thirty-three older closings restore and nineteen older fixture hashes remain unchanged; only the two already accepted empty-waterworks migrations apply. The first missing-selector harness attempt is excluded and its server is stopped. The earlier 259-event mixed setup/served fixture remains immutable. Other starts/seeds, manual map gestures, newcomer pacing, art/hidden-information breadth, broader military/political/realm progression, useful permitted major waterworks and long resource/disaster renewal remain open. Full M0–M8, nine milestones and fourteen scenarios stay active. That preceding record: .qa-city/starter-full-controls-goal-handoff.json. See primary design, interface, player guide and technical reference.

Recorded military lives and lawful city continuity (implemented and earned, M5/M7 partial): City → Defense → Combined detachments now exposes Recorded detachment members in the current detachment and its history. Each recorded birth retains its role/slot, actual birth date and age at the latest settled village check. A fallen member keeps the age/date/cause from the real casualty or old-age receipt; a living member who leaves a detachment keeps the age at its recorded return. Earlier unnamed troops remain explicitly unrecorded. This is a read-only projection of existing custody, with no saved field, age reset, person grant or migration. Full calendar dates are shown, rather than a time of day alone. Current wages and departure readiness are separate checks.

The exact earned four-born Combined closing continues for 1,449 ordinary village days, without resource, health, population, terrain or age edits and without joining another branch. A real one-day refit spends the existing one iron/one timber. The owner names and appoints one existing civilian adult at age24. The original ruler dies naturally at85 after99 days; interim stewardship retains the appointed adult while player orders remain locked. Separate embodiment and lawful handover restore human rule. All four serving birth records then die naturally at85, first the two line slots, then the two archer slots. Each death removes one resident and mobilized soldier; it returns no civilian worker. The archer deaths lose their two fitted bows and twelve held arrows. The last death closes the detachment as lost and deletes the empty force. The previous permanent combat casualty remains unchanged. Closing population34/civilian labor19/health100, no food shortfall, twelve spare home arrows and one spare militia kit remain, communal cash11 and previously earned military wages35 remain, and the successor is living at84.

This proves the same born soldiers' qualified Combined service followed by home aging under an already expired professional term, through actual mortality. It does not prove continuously paid sixty-year service, further battles, ranged firing, title conquest or indefinite population renewal. The source already earned its real advanced infantry, mixed drill, camp dispersal and all seven-day wages; no new wage term is injected during the lifetime continuation. Whole daily and served replays/restore preserve actual birth-key mortality and equipment custody. The served branch uses five reviewed orders and eleven events, with thirty-six checks at320/390/640/1440 pixels; a separate final date-display check covers eight further read-only layouts without changing the accepted closing. That earlier checkpoint passed 71 distinct selected cases across six files, including two new lifetime/roster cases. Thirty-one earlier canonical closings restore and seventeen older portable fixtures retain their hashes; only the two previously accepted empty waterworks migrations apply. Earlier checkpoint counts are historical and are not added. That preceding lifetime continuation is pinned in .qa-city/born-lifetime-goal-handoff.json; the full original M0–M8 goal, nine milestones and fourteen scenarios remain active. Wider military/political/realm progression, useful permitted major-water delivery/maintenance/removal, resource/disaster renewal and complete fresh-entry beginner/pacing/art/hidden-information breadth remain open. See interface, player guide and technical reference.

Born professional/Combined supply and drill (implemented and earned, M3/M4/M5/M7 partial): Defense now offers Prepare Combined formations for an existing militia before the technique is known. It shows the actual five instructor states, four/six-person cohort requirement, two advanced infantry days and the separately paid two-day mixed drill bill. Plan combined drill materials opens that exact consumer in the existing backward supply tree; it spends nothing and grants no qualification. Infantry fitting, wages, research and household meals remain separate. Player trade now includes charcoal at one carrying weight per whole unit in both agreement and caravan validation, without creating depot stock or changing save versions.

The exact four-born-soldier closing now earns 546 further setup events. Retained owned woodland is actually harvested/milled; three physical ten-iron barters use existing finite waystation iron, and a timber sale earns twenty coins. The existing toolmaking neighbor physically receives iron/logs, works its kiln and forge, and delivers sixteen tools plus three charcoal. A second paid survey/registration creates a legal home smithy field, preserving the renewable woodland. The textile owner enrolls an existing civilian through council petition, separately embodies them and accepts lawful handover; existing flax is spun and four yarn physically traded. No population or worker is added by naming this steward. Paid Textile crafts, Infantry formations, Archery and Combined learning/adoption complete; idle production/forestry assignments are released to keep two actual researchers available. The supplied home smithy makes twenty-four arrows and half-staffed bowmaking uses real yarn/timber/half a tool for two whole bows.

The served UI funds a real seven-day, four-person infantry term, completes both advanced training days, separately pays the two-archer/two-line drill and completes its two full days. Those same four actual birth records patrol, disperse the surveyed camp and physically return. One soldier is wounded at contact and heals during the later ordinary home checks. Clearing this camp ends its provision raids and grants no territory. Natural dense camp cover prevents the complete volley; none of the twelve held arrows is fired and no terrain is changed to manufacture a ranged test. The prior permanent casualty remains dead and no new military death occurs. At term expiry twenty-eight coins have become new military-household wages; total earned wages are thirty-five and communal cash is eleven. Closing ages are 51, 26, 25 and 24, population thirty-nine, civilian labor twenty, health one hundred, no food shortfall, four soldiers home/unwounded, condition 84.5/morale100/fatigue0. The Combined qualification and twelve held arrows remain, but the completed professional term provides no active wage effect or free departure.

The preceding supply-and-drill checkpoint passed 84 distinct cases across ten files: eighty-one selected regressions plus three new material-plan, actual charcoal recall and portable whole-journey cases. Forty served layout checks cover 320/390/640/1440 pixels, planning and dismissed reviews are read-only, later identity and whole independent replay/restore pass. Thirty earlier canonical closings restore with only the two previously accepted empty waterworks migrations; sixteen prior portable fixtures retain their hashes. The latest closing and audit 24 are pinned in .qa-city/born-combined-goal-handoff.json. The full nine original M0–M8 milestones and fourteen scenarios remain active. At that supply-and-drill checkpoint home aging through eighty-five was still unverified; the recorded lifetime section above now proves it under expired wages. Further battles/weapons/title negotiation, wider political/realm forms, useful permitted major-water delivery/maintenance/removal, longer resources/disasters and complete beginner/pacing/art/hidden-information breadth remain open. See interface, player guide and technical reference.

Coming of age and recorded reinforcement (implemented and earned, M2/M5/M7 partial): City → People → Community family growth now shows Coming of age and recruitment: the next six resident children, their age at the latest settled village check, their actual adulthood check and village days remaining. One lifecycle year is twenty-four village days. Current recorded civilian adults and the subset remaining below eighty-five through two training days are shown separately; Defense still checks staffing, civilian floors, kits, health, roles and instructors. Open Defense only navigates. The panel reminds players to pause ongoing family growth after their intended cohort; this adds no automatic birth limit, saved field, migration or resource grant.

The exact accepted born-professional closing continues with three ordinary births, each after twenty-four consecutive eligible days. Population rises from thirty-six to thirty-nine while civilian labor stays twenty. The owner then pauses births. All three children receive their normal eighteen-year maturation checks; the youngest matures after 504 village days from the opening, and labor reaches twenty-three. Health remains one hundred with no food shortfall. The same veteran remains in service, ages from twenty-three to forty-four, and the prior second-born soldier remains permanently dead. No founding package, stocks, age edits, workforce or balances are joined from other branches.

The served UI ends the veteran’s completed professional role at home, retaining seven already earned wage coins, and reviews three recorded reinforcements. Three existing militia kits are committed; two full training days complete with four actually born soldiers. Population remains thirty-nine and civilian labor returns to twenty. The veteran crosses a real birthday during those two days, giving closing ages 45, 20, 19 and 18. Equipment condition is 99.5, all four are home and unwounded, morale is one hundred, fatigue is zero, one kit remains, communal cash is nineteen and earlier military-household earnings remain seven. This is a trained ordinary militia cohort; it has no current professional role or Combined detachment.

The preceding born-cohort checkpoint passed 57 distinct cases across six files, including two portable cohort/check-read cases; earlier counts are historical and are not added. The independent daily setup records 506 events for 504 normal village days. The served branch records ten events with four reviewed commands, dismissed reviews are read-only, thirty-six checks cover 320/390/640/1440-pixel layouts, and later identity plus whole replay/restore pass. Offline catch-up drains the existing bounded simulation transactions, preserving actual birth and maturation times. Its household/army/economy custody matches the daily path; transaction revisions are naturally different. Twenty-nine earlier canonical closings restore with only the two previously accepted empty waterworks migrations; fifteen prior portable fixtures retain their hashes. The latest continuation is pinned in .qa-city/born-cohort-goal-handoff.json and the full original nine milestones and fourteen scenarios remain active in audit 23. Full born professional/Combined lifetime through eighty-five, wider political/realm forms, useful permitted major-water operation, longer resources/disasters and complete beginner/pacing/art/hidden-information breadth remain open. See interface, player guide and technical reference.

Born survivor recovery and advanced infantry service (implemented and earned, M5/M7 partial): Defense now shows Home recovery with the actual next ready-at-home check and current blockers. Rest uses an operational commons at least 65% condition without building work, the households’ last supplied meal and at least 65 community health. At an eligible ordinary check, one wound can heal, fatigue falls by twenty and morale rises by ten within their limits. Training, refit and away duty use their own clocks. Rest never repairs equipment or revives a fallen resident; Review refit pays actual timber/iron and a separate full day.

The accepted continuation starts from the exact wounded community-born militia closing. The same nineteen-year-old rests normally, keeps 85 equipment condition, and later reaches age twenty-three through ordinary village days. Warehouse food initially blocks further log harvest; actual farmer assignments retain meals while freeing space. Owned selective harvest and milling, finite coin-paid bricks and timber-for-iron barter, an actual timber sale, and six tools physically forged/delivered by the existing toolmaking village supply the work. A returned paid survey and local registration add one adjoining field for the staffed barracks; the old cleared school records are historical and those cells are already occupied by later buildings. No school salvage, new starter package, resource grant or borrowed branch balances are used.

Two hundred sixty-nine actual setup command/time events earn the supplies, title, barracks, full Field logistics/Standing service learning, separate adoption and paid refit. The served UI then funds a real seven-day infantry term for the same single surviving birth record, completes both advanced training days, sends a cautious patrol that withdraws from the stronger observed camp and physically returns, and completes all seven wage days. Seven coins become military-household earnings; communal cash falls from twenty-six to nineteen and no wage days remain held. The earlier second born soldier stays permanently dead. The closing survivor is home, unwounded, condition 98/morale 100/fatigue 0, qualified infantry with an expired term; another professional departure needs a new funded term.

The preceding born-professional checkpoint passed 94 distinct cases across eight files, including two actual recovery/broken-commons cases and one portable complete setup/served replay. The served proof includes two ordinary recovery advances, sixteen later command/time events with two reviewed paid orders, thirty-six layout checks across 320/390/640/1440 pixels, touch controls, read-only dismissed reviews, later identity and exact independent replay/restore. A final read-only UI check verifies the same closing with correct singular troop labels at all four widths. Twenty-eight earlier canonical closings restore, with only the two previously accepted empty waterworks migrations, and all fourteen prior fixture hashes stay unchanged. The original M0–M8 remains active: full community-born professional/Combined lifetime through eighty-five, broader birth/maturation coverage, political/realm forms, useful permitted major-water operation, long-term resources/disaster and complete beginner/pacing/art/hidden-information breadth remain open. See interface, player guide and technical reference.

World entry and starter comparison (implemented, M0/M1/M2 partial): A new player sees Choose your start → Compare village starts above the shared development City overview and can use the same button in the compact map overlay. Founding compares woodland, farmland and coastal packages from the actual server package definitions, with current available location counts. Show woodland locations, Show farmland locations and Show coast locations filter the location cards without reserving land or spending a grant. An existing reservation remains visible across filters. Existing-community invitations remain available below the founding locations; a resident start or already spent grant offers no second package.

The served fresh-world branch starts with no charters and three newly created session identities. All three choose a style, inspect its actual map site, dismiss reservation/founding reviews without mutations, then explicitly reserve and found. The woodland player pays for a legal forester’s lodge, completes its actual construction stages, separately assigns one worker and reaches a normal timber and meal day. Touch actions at 390 pixels, keyboard entry, 40 layout checks across 320/390/640/1440 pixels, later session identity, exact independent replay and whole-save restore pass. Eight actual commands and five ordinary time advances are recorded. This proves entry through a first staffed building and production day on one world seed; the complete beginner bottleneck/patrol/land/outpost journey, elapsed pacing, multi-seed coverage and art/hidden-information breadth remain open.

The original M0–M8 goal stays active. This change adds a read projection and local UI filter, with no saved ledger, migration, people, goods, knowledge or rights. Twenty-seven earlier separate closings restore with only the two previously accepted empty waterworks migrations, and all thirteen previous portable fixture hashes remain unchanged. The fresh entry branch remains separate from the guide/research, born-militia, realm and reservoir branches. See interface, player guide and technical reference.

First-session guide actions (implemented, M1/M2/M3/M4/M5/M6 partial): Overview now puts the existing nine-step village-to-region guide before the return briefing. Three unfinished steps expose a concrete current control instead of a generic section link: a building material goal, exact research/adoption topic, two-person militia bill, patrol provisions, soil bill or frontier/food-delivery control. A funded construction crew opens Orders; existing founder travel and trade stay visibly outside home stock. Every link is read-only and every paid order still uses its separate current review. This extends the original guide rather than creating another quest ledger or starter grant.

Food advice distinguishes producers ready with current warehouse inputs from the engine’s conditional ordered food-chain capacity. In a fresh coastal start the kitchen waits for six fish in stock, while the earlier fishery can supply its cycle: 33 stock-ready food and 45 conditional chain food against 40 demand. The existing virtual-input allocation and progress rules stay authoritative; shared inputs, storage, needs before harvest and later changes prevent a capacity figure from being a guaranteed meal or indefinite sustainability claim. Unstaffed kitchens remain visible and negative balance returns food to the unfinished steps.

Research links distinguish unknown, funded, learned-but-not-adopted and interrupted programs. Catch-up advice waits for current needs; council stewardship points to separate embodiment and lawful handover. The guide retains all nine checks and previous recorded results, adds no persisted field/migration and grants no people, materials, learning or rights. The original M0–M8 goal remains active, including broader military lifetime, political/realm authority, useful permitted major-water operation and full onboarding/pacing/art/hidden-information validation. See interface, player guide and technical reference.

Current army application: choose recorded community-born recruits (M5/M7 partial, implemented).

Current scoped military acceptance: .qa-city/born-professional-goal-handoff.json and .qa-city/gameplay-acceptance-audit-attempt22.json retain the full active goal and its remaining requirements. The current 94-case selection is not cumulative with earlier selections and is not the full repository suite. Failed exploratory supply paths and repeated browser/test attempts are excluded.

Previous scoped entry acceptance: 59 selected regression/replay cases across six files pass (56 founding/start/guide cases and three portable cases), with no full-suite claim. The served fresh-entry evidence and immutable portable fixture record eight commands, thirteen command/time events and forty layout checks. Current catalog counts remain 44 buildings, 56 technologies, 32 recipes, 92 resources and six branches. The complete goal is still active; see .qa-city/born-professional-goal-handoff.json and .qa-city/gameplay-acceptance-audit-attempt21.json.

Previous scoped guide-action acceptance: 658 distinct selected cases across 65 files pass, including seven new guide cases and two portable first-session replay cases. This is not the full repository suite; failed development assertions and duplicate reruns are not counted. Three actual founding packages, eleven read-only guide links, 36 layouts at 320/390/640/1440 pixels, four separately reviewed paid commands and twelve served command/time events prove construction, staffed timber production and learning followed by separate adoption, with exact independent replay/restore and later-session continuity. The prepared founding orders are setup evidence; the complete beginner bottleneck/patrol/land/outpost sequence, long-term balance, broader touch interaction and art/hidden-information breadth remain open. The narrower fresh entry-to-first-building route is now verified above. Twenty-six earlier closings restore with only the two previously accepted empty waterworks migrations, and twelve earlier portable fixture hashes stay unchanged. The separate born-militia closing remains the broader military continuation; no saved branches were joined. No staging, commit, push or deployment occurred. The original goal remains active.

City → Defense → Recruit recorded community-born adults adds explicit recruitment and reinforcement of the oldest eligible local civilians with recorded births. The ordinary buttons keep selecting civilians without birth records first. New optional recruitmentSource: recorded orders choose only existing civilian birth records, never named household members, children, travellers or serving troops. Adults whose age-85 boundary falls within the two-day training window are skipped in favor of the next eligible adults. The review shows actual ages/birth dates, kit costs, the remaining civilian workforce and full training requirement. Current ownership/character/world revisions, health, unassigned labor, civilian floor, reserves, real kits, existing role/detachment restrictions and ordinary training remain binding.

The same validated birth/service records retain identity through mobilization, reinforcement cancellation, demobilization, later enlistment, physical travel and permanent casualties. No resident, worker, birthday, equipment or army is granted; there is no new persisted ledger or save-version change. The portable earned roster journey ../test/fixtures/earned-recorded-recruitment-journey.manifest.json continues the exact household successor closing through 550 ordinary events: lawful recovery of an existing toolmaking steward, actual remaining iron/charcoal forging, separately signed physical tool trade, two real 24-day community birth intervals, eighteenth-year maturation and four paid kits. The older named holder's born-to-85 history remains intact.

Twenty-three served command/time events, six commands and twenty-eight 320/390/640/1440-pixel layout checks prove explicit reinforcement, a paid day followed by cancellation returning the same adults/kits, fresh two-day reinforcement, full demobilization and a new recorded two-person militia with two full training days. An ordinary ration-funded patrol then meets the actual surveyed camp without altered enemy strength: one community-born soldier dies permanently, the wounded survivor walks home, population falls by one and civilian labor is not restored by a fatality. Review dismissal, reload, a later session, exact independent replay and whole-save restore pass. Nine roster boundaries and two portable cases cover this scope. This is militia birth-to-combat evidence; professional/Combined qualification and a complete community-born military life through old age remain open. The full original M0–M8 goal remains active.

Recorded recruitment is optional later play. Getting started still uses real existing civilians, kits, Drill, food and the first supplied patrol; it does not require waiting for a birth or eighteen-year maturation. See living-world design, implementation status, interface, player guide and technical reference.

Earlier scoped recorded-recruitment acceptance: 649 distinct selected regression cases across 63 files pass, including nine roster boundaries and two portable journey cases; this is not the whole repository suite. Twenty-five earlier closings restore with only two already accepted historical empty waterworks 42→43 migrations, and eleven previous fixture hashes are unchanged. The catalog remains 44 buildings, 56 technologies, 32 recipes, 92 resources and six branches. No new save migration, branch join, staging, commit, push or deployment occurred. The full original goal stays active.

Earlier household continuity: recorded history and an earned full lifetime (M7 partial, implemented).

City → Family & continuity → Household history displays recorded named births, arrival as an existing resident, adulthood, lawful public handovers and deaths in chronological order, with the person's age at each event. It derives these rows from existing records and adds no saved ledger, resident, worker, goods, qualification or authority. An adult adopted from a recorded community birth retains their actual age at joining. Earlier unnamed or founding births are not invented. The existing lifecycle panel still shows living ages, next birthdays and old-age boundaries; named household civilians remain separate from the military roster.

The portable earned household lifetime ../test/fixtures/earned-household-lifetime-journey.manifest.json continues the exact unchanged realm-office closing through 2,396 ordinary command/time events. Existing adult guardians, twelve eligible birth days, sustained household meals, eighteenth-year worker maturation, earlier rulers' natural deaths and separate lawful handovers let a naturally born child become the holder. No age, health, people, knowledge, stock or elapsed-time grants were used. Actual service pauses and food staffing keep reserves; finite iron imports, real smithing, separately consented physical tool/iron trades and two remaining finite waystation tools fund later work. Demolition plus salvage frees real plots; ordinary woodland recovery, harvest and milling pay for a staffed lodge, Drill, Scouting, kits and two trained existing militia.

At the born holder's natural age-85 boundary, Masonry research, a running four-person Town house crew and an already outward supplied patrol are all active. The served City journey records the natural death, retains paid research and construction, and recalls the same troops physically. Choosing the previously appointed adult keeps interregnum; Review lawful handover separately transfers authority. The funded house and research then finish and both militia return home. Twenty-four layout checks at 320/390/640/1440 pixels, cancelled reviews, reload, a later session, exact independent command replay and whole-save restore pass. This supplies ordinary lifetime evidence for required scenario 12; it does not complete every M7/M8 gate. A named civilian lifetime is not a community-born Combined formations military lifetime or casualty proof. Broader political roles, sovereignty, indefinitely renewing mineral/supply chains, useful permitted major-water operation and remaining first-session/touch/art gates remain planned. The original M0–M8 goal stays active.

This later household panel changes no founding choice or first-project requirement. Keep the Getting started food, staffing, production and supplied patrol sequence; household birth and long-term appointment are optional later decisions. The previous realm election and other earned/controlled branches retain their original bytes and independent custody. See the gameplay plan, implementation status, interface, player guide and technical reference.

Earlier scoped household acceptance: 632 distinct selected regression cases across 60 files pass, including four portable/history cases; this is not the whole repository suite. Twenty-four earlier closings restore, with only two already accepted historical empty waterworks 42→43 migrations, and ten prior fixture hashes are unchanged. The new derived history adds no save migration. Catalog remains 44 buildings, 56 technologies, 32 recipes, 92 resources and six branches. Earlier evidence remains separate; the full original goal remains active. Nothing was staged, committed, pushed or deployed.

Earlier realm application: jointly elected production governor (M4/M7/M8 partial, implemented).

City → Public offices → Joint realm production office lets a supplied federation of up to four independent founding homes nominate a named existing member owner. Every home must supply Public offices, Regional institutions, Constitutional design and the existing civic services. The proposer pays only its own twelve food and six timber; every affected lawful embodied owner separately funds their local election bill. All consents precede three existing delegates working three full local voting days in every home. Every actual local majority must approve. Ratification grants no access until the exact nominated character separately accepts within three shared days.

The accepted office lasts seven shared days, bounded by the original compact expiry. A shared day uses the slowest participating local day. The governor can inspect consenting warehouses/workforce/producers, adjust existing producer staffing and recipes, apply ordinary local production plans, and adjust an existing stock target within its owner's ceiling. Review coordinated realm production applies two to eight producers across at least two consenting homes atomically against current world, office and producer revisions. It checks every local workforce and ordinary due-work/rights gate before changing any home. Stock, residents and workers remain local; production, meals, input use and previously funded queues remain real.

Each affected home permits three realm orders per shared day and twenty-one over the term. A coordinated order consumes one action in each affected home, including the governor's own. Foreign single-home delegated production uses the same ledger. Ordinary owners retain their own local production authority. The role grants no construction, spending permissions, trade, research, military orders, title, family access or ability to delegate again. Existing input allowances, owner stock-target ceilings, pauses and spending totals remain binding.

Any consenting owner may revoke the whole office; the governor may decline or resign. Service loss suspends all shared access until local restoration, without extending the term. A changed named governor or signing owner, departed consenting member or ended source compact ends it. The source compact's safeguards survive lawful local succession; this personal production office needs fresh consent after a named holder changes. Newly admitted members gain no authority under an earlier election. Applied production and paid work continue after revocation or expiry. Cancellation of unfinished voting returns only each home's unspent recorded bill through normal congress storage/refund controls; completed election work stays spent.

This implements a bounded production role across separately owned homes. Other other realm offices, wider political forms/elections, negotiated sovereignty, broader campaigns, useful major-water operation and the remaining original acceptance gates stay open. The full M0–M8 plan remains active. See player controls, technical custody and interface.

Earlier scoped realm-office acceptance: 598 distinct selected cases across 55 files pass, including twenty-one office boundaries and two portable journey cases; this is not the whole repository suite. The exact prior congress closing continues through 988 normal setup events with finite iron/tool production, independently accepted physical trades, Public offices courses/adoption, natural founder death and lawful existing-kin handover. No stocks, people, health, knowledge, terrain or extra time were granted and earlier branches remain separate. Twelve actual served command/time events, eight commands and 96 320/390/640/1440-pixel layout checks prove three separately funded local majorities, separate acceptance, three atomic three-home mill orders, daily draft blocking/reset and member revocation. Whole independent replay/restore, read-only review dismissals, foreign privacy boundaries, reload and a later session pass.

The actual next day consumes two home logs and makes two timber; two other mills correctly produce nothing because their logs are exhausted. The manager displays those real blockers. Six timber of local civic upkeep in each home still reduces net stock, and the founder home's current food output is two below daily meals. This finite acceptance certifies authority and management, not an indefinitely sustainable economy. Twenty-three earlier closings restore, with only two already accepted historical empty waterworks 42→43 migrations; nine earlier fixture hashes are unchanged. The new portable manifest ../test/fixtures/earned-realm-offices-journey.manifest.json pins the exact preceding congress fixture and closing. Nothing was staged, committed, pushed or deployed. The full original M0–M8 goal stays active.

Earlier congress delivery: federation admissions and shared safeguard amendments (M4/M7/M8 partial, implemented).

A ratified compact now supports City → Constitution & authority → Federation congress. With supplied Regional institutions and Constitutional design in every affected home, a member can invite another independently governed founding community, up to four homes, or propose changed shared food/civilian/timber safeguards. Every affected lawful embodied owner separately consents and pays twelve food and six timber above local reserves and within their own allowance. The proposer funds only its own bill. No delegates begin until all owners accept; then each home assigns three existing workers for three complete local workdays. Every actual local majority must approve, all constituencies must be represented, final policies must conform and each original signer must still hold lawful authority. Research, offers and consent alone grant no membership or amended authority.

Admission adopts the current compact terms. Amendments support whole food floors of 3–14 days, civilian minima of 12–40, and daily public timber ceilings of 6–20; jointly paid relaxation can return to the founding minima. Each home's current policy must conform before proposing or consenting. Congress never changes local policy automatically or bypasses a civic council's required paid assembly. Existing safeguards bind throughout deliberation; the original twenty-eight-shared-day compact expiry stays fixed. Independent titles, populations, warehouses, armies, constitutions, succession and private estates remain local. Passage, taxes and production appointments retain their separate agreements.

A congress offer lasts three shared days and funded work at most ten, bounded by the original term. A shared day is the longest founding/participating local day. Missing services, changed signing authority or unavailable labor releases delegates and restarts the unfinished full day. Membership/term changes supersede unfinished proposals. Decline or cancellation releases all jobs; each warehouse receives only its own unused bill, with completed work retained as spent and a full warehouse holding its own refund. An admitted home may give seven shared days of exit notice, bounded by the original term. It stays bound until that deadline while the founding communities retain their compact. Either founding owner's original exit ends the whole group; expiry issues no free renewal or policy reset.

Current earned acceptance continues the exact separate previously served compact closing. It records 2,090 ordinary preparation events: rightful third founding, a second food plot, actual forestry/milling, a smithy and kiln, finite imported iron, forged tools, independently accepted physical food-for-timber trades, paid research/adoption and a fresh paid founding compact. Normal old age remains; existing populations are 39/39 and the new home 40. Fifteen actual served events then prove separate three-owner consent, nine delegate workdays, three actual majority ballots, a jointly paid amendment and the exact admitted-member exit. 64 responsive checks at 320/390/640/1440 pixels, cancelled read-only reviews, consecutive reloads, later guest session and exact whole replay/restore pass. The portable fixture embeds the original source closing bytes and pins the unchanged earlier compact fixture; branches and stock are never merged. The four-home bound is implemented; this earned served journey exercises three homes.

The original M0–M8 goal remains active. Other other realm offices, wider political forms/elections, sovereignty and other outstanding original acceptance gates remain open. This finite three-community congress journey certifies no indefinite economy or complete realm government. See player instructions, technical custody, interface, plan and implementation status.

Earlier scoped congress verification: 527 distinct selected cases across 48 files pass, including 21 congress boundary cases and two portable journey cases; this is not the whole repository suite and repeated runs are not counted. All 64 served layout checks pass. Twenty-two prior saved closings restore exactly apart from the two already accepted historical waterworks 42→43 empty-custody migrations; eight prior fixture hashes remain unchanged. Nothing was staged, committed, pushed or deployed. The full original M0–M8 goal remains active. Current evidence is .qa-city/federation-congress-final-verification-attempt1.json and .qa-city/gameplay-acceptance-audit-attempt16.json.

Preceding political application: founding civic federation compacts (implemented; congress above extends membership and safeguards).

Current selected verification: 504 distinct passing cases in 46 files, including eighteen federation cases and two portable earned-journey cases; this is not the full repository suite. The current two-owner served City journey passes forty-eight responsive checks at 320/390/640/1440 pixels, including the binding workforce control, cancelled reviews, exact ratification/exit, reload/later session, whole replay and restore. The portable fixture retains the first accepted eight-event served replay; later served runs use their own command IDs and remain separate. 21 earlier branch closings restore, with only the two already accepted historical waterworks 42→43 empty residue-custody migrations; all seven prior portable fixture byte hashes remain unchanged. Syntax, wiki build/check and the staged coverage command pass with an empty Git index. Current continuation is pinned in .qa-city/civic-federations-goal-handoff.json; no original milestone is marked complete.

In City → Constitution & authority → Civic federation compacts, two independently governed founding communities can jointly ratify common safeguards: at least three household food reserve days, at least twelve civilian workers before new recruitment, and at most twenty public timber per local day. Each retains its own founding charter, land, warehouse, army, local constitutional rules and succession. This is a finite shared policy arrangement; sovereignty, pooled property, compulsory taxes, transit and production appointments are not granted by the compact.

Both communities need active Constitutional design, Courts, Civic representation, Record keeping and Public accounting, a sound dry commons and staffed registry, met needs, 65 health, compliant current policies and three available existing delegates. Each owner uses separate fresh reviewed consent and pays twelve actual food and six timber from their own warehouse/public allowance. The offering owner reserves only their local bill; acceptance pays the invitee's bill and starts two local three-whole-day conventions. Existing food workers, other producers and household/civic workers each have one visible vote. Each local majority needs two votes and all three represented constituencies; actual reserves, timber and workforce determine support. Both must approve, and both communities must still satisfy the common terms and retain their signing lawful officeholders, before joint authority activates. Research, proposal and acceptance alone enact no safeguards or new residents.

The shared day is the longer of the two local village days. Offers expire after three shared days; unfinished conventions expire ten shared days after acceptance. Worker/service/commons loss releases delegates, retains actual supplies and restarts the unfinished full local day when support returns. A changed signing officeholder pauses unfinished consent for cancellation; a successor inherits no uncast vote. Either owner can close unfinished work. Each warehouse recovers only its own unused bill; a full warehouse retains that refund for later collection rather than discarding foreign supplies. Completed work remains spent.

Ratified safeguards bind both ordinary edits and paid assembly proposals for twenty-eight shared days. Stricter local policies remain possible under their existing steward/council authority. Institution loss and lawful succession do not erase the ratified obligation. Either current lawful owner can give seven shared days of exit notice; safeguards continue until that notice or the existing term ends. Expiry/exit preserves local settings and all titles and does not issue free renewal. One open or active compact per community bounds overlapping jurisdiction. Federation congress above now implements jointly funded admissions and safeguard amendments. Other realm offices, monarchy, republic, merchant councils, wider elections and negotiated sovereignty remain planned.

The ordinary earned branch continues the exact separate civic Dialogue closing. 393 normal events, using default 100 ms construction work and no stock, population, knowledge, health, terrain or timing grants, obtain timber through actual harvesting/milling, barter finite tools, research/adopt the three advanced political topics in both communities and set lawful local policies. Its actual two-owner served journey separately reviews/cancels and confirms proposal, acceptance and exit, completes both paid votes and reaches the exact exit deadline. Forty residents and twenty-four civilian workers remain in each community; closing food and timber are finite. This does not certify indefinite supply or the fully assigned regional-capital branch. Portable evidence is test/fixtures/earned-civic-federations-journey.json.gz; the full original nine M0–M8 milestones and fourteen acceptance scenarios remain active. See player guidance, technical reference, implementation status and the plan.

Current military application: supplied ram expeditions, real garrison contact and temporary occupation (M4/M5 partial).

The paid declaration stage now leads to a separately reviewed physical expedition in City → Defense → Supplied siege expeditions. After the full twenty-four real hours of notice, the founding owner needs at least four existing trained, fit soldiers at home, four additional available civilian engineers, one actual stored covered ram and sufficient real meals. Active Drill, Campaign planning and Siege engineering, met needs and at least 65 health are required. A staffed mason workshop and barracks support those services. Structural engineering is required for fabrication, not continued field duty. No second army, recruits, equipment or remote supplies are granted by deployment.

The ram and baggage walk with the existing army for up to eighteen hexes each way. Each engineer carries at most thirty weight: the ram weighs twenty-four, and all engineer meals and extra army food count. Meals cover both walking legs, a maximum twenty-four real hours of duty and one local day of return reserve. Soldiers carry their normal four-day capacity; co-located engineer baggage physically tops it up. Household demand excludes the actual travelling people and records their consumed travel food once. Existing wages and known soldier age horizons must cover the whole quoted trip. Third-party military passage must explicitly name siege expeditions; relief, trade, combined relief/trade and allied-watch permission do not authorize this purpose. Fire and recorded basin floodwater hold actual travel while carried meals continue to be eaten.

Only actual stationed soldiers defend the fort. Contact uses their real equipment, morale, wounds, formations and available volleys, with a condition-scaled fort bonus of two for a tower, four for a keep or six for a castle. Ties hold for the defender. Defeat can permanently kill actual residents and lose their kits, ammunition and carried food; existing professional refunds, cohorts and birth-linked mortality remain authoritative. Defeated survivors withdraw along their physical garrison route. An empty fort has no invented defending army. This first application is a bounded contact/ram mechanic; wider battle commands, siege weapons, civilian raids and negotiated territorial settlement remain open.

Four engineers, the real army and held ram apply supplied pressure in complete two-real-hour intervals. Each interval damages up to eight fort condition points, capped at a breached condition of twenty-five, and wears the attacking force. A sound hundred-condition fort therefore needs twenty real hours to breach. Review temporary occupation is offered only after at least twelve real hours of recorded pressure, a breached fort and no holding defender. Separate confirmation grants up to four real hours of temporary military custody within the existing twenty-four-hour duty deadline. Original warehouse, public office, tax, charter, family and legal ownership rights remain. Occupation blocks structural work while held and changes no civilian population.

Review siege recall, lost support/readiness, ended war, finite duty/occupation expiry or an exhausted force ends hostile duty and returns the army and engineers physically. Accepted truce or declaration withdrawal ceases duty immediately. Four engineers stay assigned until home even if the last soldier dies. At return, people are released; full storage retains actual cargo without workers. An unused whole ram returns whole. A used ram is dismantled into six timber and two iron, deliberately preserving only partial salvage instead of restoring worn equipment to a new pooled ram. Consumed meals, notice costs, fatalities and wear remain spent. Reuse requires normal materials and new fabrication.

This extends the previous notice-only checkpoint below. The earned continuation starts directly from its actual closing, forges tools, obtains finite iron by real barter, admits two real migrant households, crafts four kits and trains four residents, then pays a fresh declaration and serves its notice. The defender independently learns Drill/Scouting, builds/staffs its lodge, imports iron and trains two residents. Eighty-one normal setup events use no stock, population, knowledge, health, terrain or timing controls. Selected current verification passes 409 distinct cases in thirty-eight files, including twelve siege cases and two portable earned-journey cases. This is not the full repository suite. Forty-eight actual served responsive checks at 320/390/640/1440 pixels cover separate owner reviews, defender arrival/contact/death, pressure, temporary occupation, physical return, later session, exact whole replay and restore; all helper servers stopped cleanly. Twenty separate prior branch closings restore with only the two already accepted historical waterworks migrations, and all six prior fixture byte hashes remain unchanged. The portable earned-territorial-siege fixture pins eighty-one normal setup and forty-five actual served events. The longer real journey also crosses Elara’s existing old-age boundary: the attacker closes at thirty-nine residents with all four soldiers home, the defender at thirty-nine after one actual field casualty. This natural household death is preserved independently of military losses. Current acceptance and next work are pinned in .qa-city/territorial-siege-goal-handoff.json. The full original M0–M8 goal, nine milestones and fourteen acceptance scenarios remain active.

Previous notice-only checkpoint: targeted declarations, protection and truce (extended above).

After actual Siege engineering research/adoption, the founding owner can separately declare a disputed-control claim against an existing foreign watchtower, keep or castle. Active Record keeping, Campaign planning and Siege engineering, met household needs and at least 65 health are required. The reviewed single-line claim is 12–240 characters. Four food, four timber and one tool pay the complete notice immediately, above household food reserves and within the public timber ceiling. Declaration uses two existing account attention points. The claim records the owner's position; it is not a court judgment or legal entitlement.

The declaration gate derives seventy-two real hours of starting-estate protection from the actual founding charter time. A protected family cannot declare offensively. City → Defense shows the calendar deadline and a separately reviewed, irreversible early exit; no hostile order silently accepts that loss. Distant outpost fortifications and actual imported allied armies physically at a starting fortification are outside that estate protection. An invitation or outward march is not an imported army. The exemption records real unit/agreement/arrival custody; it creates no soldiers or rights. Broader NPC territorial wars and direct raids remain planned, so protection is currently enforced at this live declaration gate.

Both families see the selected fortification, recorded claim, paid bill and identical dates in City → Defense → Incoming and outgoing notices, with an actual Defense briefing. The first siege preparation notice lasts twenty-four real hours independently of the four-hour village day; the notice expires after seven real days. The label changes to “notice served” only at the exact deadline. Lost instruction does not rewrite accepted dates. One live outgoing declaration per founding community and one live notice per target prevent duplicate spending. No unit, equipment movement, damage, title or public office is granted.

The declaring owner can withdraw without a refund. Either owner can offer a truce lasting at most twenty-four real hours and ending no later than the original notice expiry. The other owner separately accepts or declines; the proposer can withdraw an unanswered offer. Acceptance requires the same proposing character to remain active, ends the declaration and transfers no property. Earlier declined, withdrawn and expired offers retain their receipts, with at most sixty-four earlier offers plus the latest one. Replies need fresh world and declaration revisions and lawful founding-community authority, but ending a notice does not require keeping its optional instructors active.

The earned continuation begins at the pinned covered-ram closing, resumes previously paid Record keeping, pays Campaign planning adoption and founds a real second community which builds/staffs its tower. Twelve normal-timing setup events and eight actual served events use no inventory, population, knowledge, health or terrain grants. The defender explicitly exits protection; the attacker pays the claim, both exact 24-hour boundary points are exercised, and separate owners decline, re-offer and accept a truce. Twenty-eight responsive checks at 320/390/640/1440 pixels, read-only review dismissal, owner reload/later session, exact independent replay and restore pass. The portable earned-war-notice fixture pins this continuation and its unchanged original earned-ram dependency.

Selected previous notice-checkpoint verification: 345 distinct cases in thirty-one files passed, plus twenty-eight served responsive checks and restoration of nineteen separate prior branch closings. Seventeen prior closings restore unchanged; two historical waterworks saves receive only the already accepted 42→43 empty residue-custody migration. All five prior portable fixture hashes remain unchanged. This is a selected run, not the full repository suite; reruns and earlier served attempts are not counted twice. The original full goal stays active. Current notice/truce evidence and the next actual deployment/pressure/occupation work are pinned in .qa-city/war-notice-goal-handoff.json.

This supersedes earlier “all declarations planned” descriptions. The physical deployment, supplied pressure, real defender contact and reviewed temporary occupation described above now extend this notice-only checkpoint. A paid notice or manufactured ram does not complete the Siege engineering military application. The full original M0–M8 goal, nine milestones and fourteen acceptance scenarios remain active. Preserve separate prior branches and continue from the recorded notice/truce branch rather than combining their stocks. See implementation status, player guide and technical reference.

Current implementation: covered-ram fabrication under Siege engineering (M4/M5 partial).

Siege engineering follows Structural engineering and Campaign planning at a staffed mason workshop: ten practice days, four research days costing twelve timber/four iron/twelve food/two tools, then six timber/one tool for first adoption. One supplied existing specialist consumes one food per village day. The topic has real equipment production and the separately reviewed declaration/protection/truce gate described above. The supplied physical deployment, pressure and temporary occupation above are now implemented; territorial ownership settlement remains planned.

In City → Defense → Covered ram fabrication, choose a sound, dry, staffed mason workshop. Keep Structural engineering and Siege engineering active, a sound staffed lumbermill and smithy available, household needs met and health at least 65. Four additional existing workers need three full village workdays. The entire bill is twelve logs, eighteen timber, six iron, three woven cloth, three tools and twelve food, protected by actual stock, household reserves and public material ceilings. Each completed day spends exactly one third. Lost services, workers or workshop availability release the crew and restart the interrupted day when restored; the original unspent bill remains held. Cancellation returns only unused supplies once, when the complete refund fits. Completed work stays spent.

Completion creates one whole covered ram, held safely without workers until home storage has room. Its actual carrying weight is twenty-four units on existing physical trade/outpost routes. Receiving or transporting equipment grants no knowledge, soldiers, attack order, occupation or title. Old saves retain absent siege custody; paid adoption creates only an empty marked ledger. Assembly inputs/output and carrying weight are checked by the live dependency catalog and shown as a separate three-day paid project in Supply chains, never as automatic daily production.

The normal-timing earned branch replays 1,993 actual setup events from the original founding package. Forestry, milling, finite barter, a physically supplied worked stone outpost, stone dressing/house salvage, charcoal/tool forging and flax/yarn/cloth production fund its institutions and supplies. Temporary industries occupy and later release actual charter plots through paid demolition/salvage. Eight existing residents move to the outpost, leaving thirty-two at home. Wheat keeps its supplied Seed selection specialist; the unused Drill instructor is released before fabrication. The ten-event served City flow cancels a read-only review, refunds one partially worked order, then funds, pauses, resumes and completes another without a second bill. It passes twenty-four layout checks at 320/390/640/1440 pixels, owner reload/later session, independent whole replay and save restoration. The closing retains one ram, 1,058 food, 44 timber, 116 logs, four cloth/four iron and 2.25 tools with the food crop and both engineers active. The earlier depleted-food harness remains a separate superseded attempt and is not this acceptance branch.

The portable test/fixtures/earned-covered-ram-journey.json.gz stores the original opening, complete setup, actual served commands and exact closing; its manifest pins both compressed and raw bytes. Unit coverage also includes actual physical delivery of the produced ram to the owned outpost, protected reserves/budgets, stale/foreign authority, partial refunds, service interruption, declared full-storage boundaries, offline catch-up and malformed custody rejection. A new indefinite material economy or a military siege is not certified by this finite equipment journey.

Prior covered-ram checkpoint verification: 312 distinct cases in twenty-seven files passed, plus twenty-four served responsive checks and restoration of eighteen separate prior branch closings. Sixteen prior closings restore unchanged; two historical waterworks saves receive only the already accepted 42→43 empty residue-custody migration. Four prior portable fixture hashes remain unchanged. The full repository suite is not claimed, and superseded harness/reruns are not counted twice. The original M0–M8 goal stays active; evidence and next siege deployment/notice/pressure work are pinned in .qa-city/siege-goal-handoff.json.

Current catalog: 44 buildings, 56 technologies across six branches, 32 workshop recipes and 92 resources, plus the separately funded covered-ram assembly project. This supersedes older absent/planned equipment descriptions and checkpoint counts below. The Siege engineering application remains partial until physical deployment, engineers and military supplies, lawful declaration/target protections, existing real 24-hour war notice and at least 12-hour visible pressure before major occupation work together. All nine M0–M8 milestones and fourteen original acceptance scenarios remain active; no broader milestone is completed here. See primary design, implementation status and player guide.

Implemented: paid Combined formations within an existing professional force (M4/M5 partial).

Combined formations follows Formations and Archery at a staffed barracks. It needs ten practice days and four research days with twelve timber/twelve food/two tools; first adoption costs six food/one tool. One existing coordinator consumes one food per local day. Adoption creates only empty marked custody and grants no people, gear, combat result or land.

Separately prepare two bow-equipped members and the remaining infantry line inside one existing four- or six-person, fully advanced, funded professional infantry. The two-day drill reserves eight food, one tool, two manufactured/imported bow kits and twelve actual arrows. The tool is spent immediately; four meals are spent after each full successful home day. All soldiers must be unwounded, at least 80 condition/morale and at most 20 fatigue, with active Drill, Standing service, Formations, Archery and the coordinator, met basic needs and at least 65 health. Pauses restart the unfinished day without another equipment bill. Existing military people, civilian labor, wages, family history and physical travel remain authoritative; no separate army is created. A prior simple formation is replaced and its earlier cost remains spent.

At actual contact, fit line members receive their existing 25% infantry role factor. Fit bow members receive 50% only with a complete volley of two real arrows each; otherwise their factor is one. These roles are weighted by the actual unwounded headcount. Two fit members of each role are required for coordination; wounds reduce bow availability first. Open fields or woodland below 45% cover add 10% to the firing formation; moderate woodland at 45–69% applies a 15% penalty. Dense cover, fire, inundation, fatigue above sixty, condition/morale below fifty, missing instructors, unpaid service or insufficient ammunition prevent coordinated fire. Patrol/relief contact spends a complete volley once. Actual guarded or escorted crossings conserve arrows if the ordinary line already deters that crossing. Quotes never fire or grant protection remotely.

Reload combined quivers only at home from real stock, up to six arrows per surviving bow member. Existing pure-archer field/depot supply is unchanged; mixed remote ammunition delivery remains outside this first application. End the detachment at home before reinforcement, professional role change or demobilization. Unfinished drill returns unused meals and both held bows; fitted bows return as whole items rounded down by actual equipment condition. Surviving arrows return in full, with an all-or-reject storage check. Fallen bow members lose actual bows and up to six arrows each. Existing dated combat/birth-linked death receipts pin the distinct equipment losses. If every member dies before fitting, unused home drill supplies remain explicitly recoverable, rather than disappearing or being credited into a full store.

The ordinary 840-event setup independently replays from original founding supplies with default 100 ms construction, actual woodland harvest/milling, finite barter, bow/arrow manufacture, barracks research/adoption, four real soldiers and twenty-eight reserved wage coins. Its twenty-event served City flow completes paid drill, instructor pause/fresh-day resume, a physical patrol and exact home return. Actual camp cover is dense, so this earned patrol correctly fires no arrows. The separate declared-open-camp branch verifies actual four-arrow firing and paid home loading; its terrain change is disclosed and its stocks are never merged with the earned branch. Each flow passes twenty layout checks at 320/390/640/1440 pixels, canceled read-only reviews, consecutive authenticated owner reloads, exact independent replay and whole-save restoration. All owned servers stopped, including the first harness title-case mismatch.

Current scoped verification is 239 distinct cases in twenty-one files: twelve combined cases, two portable earned-journey cases, 133 retained military/birth/service cases in nine files and 92 catalog/City/supply/population/knowledge/attention/preserved-branch cases in ten files. Duplicate repair/reruns are excluded; this is not the full repository suite. Controlled unit inputs cover terrain, severe readiness loss, storage and a synthetic terminal-death callback. That callback tests held stock custody, not a playable training battle or a complete new birth-to-old-age journey. The portable earned fixture preserves the original opening, all setup and served commands and exact closing without reading disposable QA data.

Combined-formations checkpoint catalog: 44 buildings, 55 technologies across six branches, 32 recipes and 90 resources. Combined formations supersedes its older planned/absent descriptions below. Siege declaration/deployment/pressure is the next unfinished part; the current equipment stage is described above. Wider mounted/political/realm scope, disasters, compulsory taxes, indefinite regional supply and useful permitted reservoir operation/maintenance/removal remain open. All nine original M0–M8 milestones and fourteen acceptance scenarios remain in the active goal. The finite earned closing has forty people, twenty civilian workers, four existing soldiers, 832 food, 49.5 timber, 29 logs, no tools, three bows and sixty-four arrows; communal coins remain fifty-two. The infantry wage term is finite and subsequent fitting/refit needs real tools/iron. No broader milestone is marked complete.

See implementation status, primary living-world design, and player guidance. Evidence is pinned in .qa-city/combined-goal-handoff.json; the preceding Dialogue, constitutional, court, regional, pressure and recovery branches remain separate and preserved.

Latest delivery: ordinary earned two-owner Interfaith and civic dialogue acceptance verified (M4 partial).

Interfaith and civic dialogue follows Scholarship and Civic representation at sound commons. It needs ten practice days, five research days with fourteen food/ten timber/one tool, then separate four-food/four-timber adoption. One existing mediator uses one food each home day. Both founding communities also need active Literacy, Scholarship, Civic representation and Record keeping, a sound dry staffed school/registry and met household needs with at least 65 health. Research and adoption alone grant no consent, remedy, visit, coin, population, policy or belief effect.

The first mediation application concerns an actual missed cultural or pilgrimage exchange visit. During that sender’s seven-day retry wait, its lawful embodied founding owner may offer one to twenty earned communal coins to the other community and reserve six food/four timber locally. A three-day offer starts no delegates and charges the invited owner nothing. That owner separately reviews acceptance, pays its own six-food/four-timber bill and chooses philosophical or faith-supported local dialogue. Both sets of two existing delegates then complete two full local discussion days. The two traditions have identical costs and effects; each owner retains their own choice.

Compensation transfers from held funds to the invited community’s communal treasury only after both sessions finish. Completion waives only the offering sender’s retry wait for that exact missed promise. The original pact stays unfulfilled and its actual visit history stays unchanged. The other sender’s wait and any later missed promise remain separate. A new exchange still requires fresh consent and paid physical visits; no guest access or successful visit is invented. This is voluntary mediation, not a court judgment, compulsory tax or removal of private disagreement.

Local service, damage, needs or labor loss releases only the affected delegates and restarts their unfinished full day. A finished local side releases its delegates while compensation waits for the other side. Both sessions must finish within ten offering-community days after acceptance. Either owner may withdraw; offer expiry, withdrawal or the work deadline returns held coins to the sender. Completed work remains spent. Each community’s unused materials return only when its own warehouse fits the full bill; otherwise they remain held safely without workers or forced loss. Only that local owner can explicitly accept its own overflow loss. A later safe storage check or reviewed collection returns the bill once.

Current scoped verification: 294 distinct cases across twenty-four files: twenty-two dialogue cases, two portable ordinary earned-journey cases and forty-six catalog/navigation/founding cases in five files; 112 retained coin/ethics/scholarship/civic/constitutional/pilgrimage/performance/continuity cases in eight files; and 112 integration/preserved-branch cases in eleven files. Duplicate reruns are excluded; the full repository suite is not claimed. The previous summary counted the integration files as twelve; the actual selected log contains eleven, and its 112 passing cases are unchanged.

Ordinary earned acceptance: An 862-event setup replays exactly from the original world opening using normal 100-millisecond construction work units and four-hour village days. Two actual founders use only their ordinary packages, paid selective harvest/precision sawing, finite tool barter, paid institutions and real research/adoption. One village grows flax, spins yarn, weaves cloth and physically trades two cloth for one tool under both owners’ consent. It then completes a paid pilgrimage trip, a real host stay and physical return; the offering village misses its reciprocal visit at the actual fourteen-day deadline. No materials, knowledge, people, coins, terrain, damage or accelerated construction are granted.

The separately served seven-event City flow from that earned opening verifies both owners’ actual local payments, independent faith-supported/philosophical traditions, held compensation, no early payment, actual mediator suspension and fresh-day resumption, exact source-promise remedy, owner reloads, a later private session, whole replay/restore and twenty responsive checks at 320/390/640/1440 pixels. The mobile paid-history screenshot was inspected and the server exited cleanly. Each community spends six food/four timber; four existing communal coins move from the sender’s twenty-four to the recipient, leaving twenty/four and NPC treasury 1176. The original recipient visit and unfulfilled pact remain unchanged. Both communities retain forty residents, twenty-four civilian workers, full needs and positive staffed wheat food balances.

Earned evidence is pinned in .qa-city/dialogue-earned-goal-handoff.json, .qa-city/dialogue-earned-opening-attempt7.json and .qa-city/dialogue-earned-browser-YviiBP/evidence.json. The portable test/fixtures/earned-civic-dialogue-journey.json.gz includes the original opening, all setup commands, the earned ready state, actual City commands and closing; its manifest pins compressed/decompressed hashes. Regression tests independently replay the entire setup and the served custody sequence without reading disposable QA files. The prior declared-material/previous-pilgrimage-adoption/one-millisecond-setup branch remains separate and preserved in .qa-city/dialogue-goal-handoff.json. No stocks or branch states are merged.

This verifies the finite optional mediation journey. The earned closing has 32.5 sender timber and 19.5 recipient timber, no stored logs or tools, with four spare recipient cloth and the existing source manuscript retained. Record keeping and Scholarship still consume two timber per community day; remaining owned woodland and actual milling/imports must be supplied before those services exhaust this buffer. Food is sustainable at the present population and active staffing, but indefinite institutional supply and every geographic starting choice are not certified. At that dialogue checkpoint Combined formations was next; it is now implemented above, and Siege engineering remains open; all nine original M0–M8 milestones and fourteen scenarios remain in the active goal.

Current focused logs: .qa-city/dialogue-earned-core-regressions-attempt1.log, .qa-city/dialogue-earned-retained-regressions-attempt1.log, and .qa-city/dialogue-earned-integration-regressions-attempt1.log. The following paragraph describes the preserved earlier controlled application: The served seven-event flow is .qa-city/dialogue-controlled-browser-lLRCYv/evidence.json; its declared opening is .qa-city/dialogue-controlled-unit-opening-attempt1.json. It transfers four original communal coins from the sender’s twenty-four to recipient custody, leaving sender twenty/recipient four and NPC treasury 1176. Both sides spend six food/four timber, retain forty residents/twenty-four civilian workers and preserve the original unfulfilled pilgrimage pact. All controls and accelerated setup construction are disclosed; no earned setup replay or additional stocks from other branches is claimed.

Ordinary setup attempts one through six are retained separately. They exposed an unstaffed research venue, carrying weight, the finite waystation outlet, insufficient food during flax production, a finite tool shortfall and an assertion that confused accepted ledger status with the expired promise’s unfulfilled display status. The accepted seventh setup and exact replay use only ordinary commands. Farm staffing was managed during wood accumulation; a real food buffer was grown before temporarily replacing food with flax, and eight field workers were restored for the final food balance. No runtime rules or stocks were changed to pass this journey.

Earlier smoke/wiring failures and initial unit assumptions are retained. The first wiring attempt failed before writing any target files. The initial unit fixture depleted food above reserves and paused the recipient mediator; declared test food was added for deliberate boundary checks. Both communities actually use the same four-hour village day. A final fractional overflow test verifies fungible refund custody without creating coins or whole work. No staging, commit, push or deployment occurred.

Preceding Dialogue catalog: 44 buildings, 54 technologies across six branches, 32 recipes and 89 resources. Dialogue now has a functional voluntary mediation application. Combined formations is now implemented above; Siege engineering remains a named gap. Wider doctrine/shared institutions, mounted/political/realm progression, compulsory taxes, disasters, indefinite regional supply and useful permitted reservoir operation/maintenance/removal remain open. The full original M0–M8 goal remains active; this finite earned mediation journey completes no broader milestone.

Latest delivery: functional Scriptural/philosophical scholarship and physical written promises.

Scriptural/philosophical scholarship follows Literacy, cultural Scholarship and Ethical teaching at a staffed scriptorium: ten practice days, four research days with twelve food/twelve timber/one tool, then separate four-food/six-timber adoption. One existing scholar consumes one food/one timber each home day. Research/adoption alone create no text, public promise, belief conversion or population. The community owner separately chooses philosophical or faith-supported discussion of Fair earnings or Civilian care. Both traditions have identical rules. Discussion holds one actual Ethical teaching manuscript, reserves nine food/six timber, and assigns two existing readers for three full home workdays. Each completed day consumes three food/two timber. Completion returns the original manuscript and stores one whole matching commentary; two whole storage units are needed for the pair. The source is preserved, not multiplied or spent. Further copying, physical trade or instruction remains separate.

A separately reviewed Ethical teaching course can optionally hold one matching commentary with its ordinary eight-food/four-timber bill and two students. Active Literacy must remain supplied while reading. At two-day completion the whole commentary is consumed and the chosen promise binds new founding-community orders for twenty-eight home days. Ordinary instruction needs no commentary and keeps its original fourteen-day cost and behavior. Cancelling unfinished reading returns the whole held commentary and unused food/timber; completed promises cannot be cancelled or replaced before expiry. The same Fair earnings levy/allowance/morale rules and Civilian care food/workforce guards apply. Prior signed wages, troops, constitutional authority and private beliefs remain unchanged; completed promises survive service loss and succession.

Preceding scholarship verification: 382 distinct cases in thirty-two files: twenty-two Scriptural/philosophical scholarship cases and ten supply-chain cases in two files, 219 retained economy/politics/continuity cases in sixteen files, 123 military/population/City/education/trade/transport cases in eleven files and eight preserved-branch cases in three files. Duplicate reruns are excluded; this is not the full repository suite. The default-timing 306-event opening is command-earned, including real school/scriptorium construction, surplus-food waystation provision trips, tool barter, research/adoption and an actually copied Ethical teaching manuscript. No stock, people, coins, knowledge or terrain controls were added. Served Fair earnings and Civilian care flows verify actual paid discussion, preserved source, whole commentary, optional instruction, independent tradition choices, full replay/restore, consecutive private owner reloads and thirty-two responsive checks at 320/390/640/1440 pixels without page errors. The source/supply tree is read-only and opens the real scholarship controls. All owned browser servers stopped. Evidence is pinned in .qa-city/scholarship-goal-handoff.json; .qa-city/gameplay-acceptance-audit-attempt8.json preserves all nine original M0–M8 milestones and fourteen required scenarios. The full goal remains active.

The 306-event earned setup retains actual initial funding and separates adoption from production. All seven home plots are occupied after the paid school and scriptorium; 38 existing logs, 117.5 timber and two tools remain at opening, so further wood collection or clerks need lawful supply and available labor. The first served branch pauses its scholar after one day, preserves the source through a paused check, resumes a fresh full day, writes one Fair earnings commentary and separately consumes it during faith-supported instruction. The second branch writes a faith-supported Civilian care commentary and separately chooses philosophical instruction. Tradition choices do not travel as forced belief. Both completed written promises bind for twenty-eight home days and retain the original forty residents/twenty-four civilian workers.

The two-player unit journey uses actual founding for the recipient, a real staffed school and two separately consented source/commentary cargo trips, followed by paid manuscript study, adoption and instruction. It grants no people, coin, stock or research. Boundary tests separately declare scarce food/labor, damage, full storage, malformed saves and consent/revision errors. Preserved older pressure/residue, regional reserve, Court/Civic/constitutional/Tax/Ethics branches are not merged. The final focused logs are .qa-city/scholarship-final-unit-and-supply-attempt1.log, .qa-city/scholarship-retained-regressions-attempt1.log, .qa-city/scholarship-integration-regressions-attempt1.log and .qa-city/scholarship-preserved-branches-attempt1.log. Earlier helper/API/storage mistakes, initial UI wiring rejection and the first screenshot’s wrong framing remain retained. No staging, commit or deployment is claimed.

Preceding scholarship catalog: 44 buildings, 53 technologies across six branches, 32 recipes and 88 resources. The new religion topic and two physical commentary goods are functional. Dialogue is now implemented above; Combined formations and Siege engineering remain two named gaps. Wider doctrine, political and mounted scope, realm progression, compulsory tax, disasters and useful permitted reservoir operation/maintenance/removal remain open.

Preceding delivery: paid Ethical teaching with actual public obligations. The new optional religion node follows Record keeping and uses a real mentor, food and timber. Separately funded secular/faith instruction spends eight food/four timber across two full days of work by two existing students. Completion binds a chosen public promise for fourteen home days; learning/adoption provide no free effect or population. Interruption releases students and repeats the unfinished day; unused supplies can be returned. Paid promises persist through service loss and succession, while existing accepted pay remains unchanged.

Fair earnings protects the first four gross coins per person in new stipend or military pay terms and caps new levies at a quarter. Seven-day quarter terms collect zero; fourteen-day terms collect two whole coins per person. Military quarter consent needs 82 morale and spends two points. Existing signed terms retain their original allowance and rate, including half levies. Newly signed protection is recorded with its paid course and stays in that finite pay term after the promise expires. Civilian care requires new recruitment or reinforcement to leave twenty existing civilian workers and requires new recruitment, reinforcement, office stipends or professional pay to begin with four household food days in actual food stock. Existing troops, signed wages and funded work retain their obligations. The promise cannot bypass stricter reserves, council policy bindings, budgets, readiness, equipment, age or lawful succession.

Preceding Ethical teaching verification: 305 distinct cases in twenty-four files: eighteen Ethical teaching cases, 201 retained economy/politics/continuity cases in fifteen files, 78 military/population/City/attention cases in five files and eight preserved-branch cases in three files. Duplicate reruns are excluded; this is not the full repository suite. Both new default-timing openings are command-earned without direct stock, coin, population, knowledge or terrain controls and replay exactly from their original opening. Served Civilian care and Fair earnings flows verify paid reviews, read-only cancellation, actual pause/resume or military pay, complete save replay/restore and consecutive private owner reloads. Thirty-two responsive checks cover 320/390/640/1440 pixels without page errors. All three owned browser servers, including the first civic harness selector failure, stopped. Evidence is pinned in .qa-city/ethical-goal-handoff.json; .qa-city/gameplay-acceptance-audit-attempt7.json retains all nine original M0–M8 milestones and fourteen required scenarios. The full goal remains active.

The independent 79-event civic opening supports six served events proving actual course costs, mentor suspension, a paused check, resumed full day, completion, read-only cancellation and the real six-person recruitment restriction. The 360-event military opening supports nineteen served events proving a paid faith-supported course, optional mentor suspension, actual 100 → 98 morale consent and fourteen-day earnings: 56 gross, eight public tax, 48 private wages and sixteen communal coins, with 1,136 market coins unchanged. Both openings use default work timing, and full independent replay/restore is exact. Military supplies finish finite, including 6.5 timber, two tools and no iron/logs; obtain lawful new supply before further work.

Unit health, damage, food scarcity, storage fullness and morale refusal are declared controlled boundary cases, separate from the earned browser branches. The first unit attempts called non-exported fixture APIs or used an incorrect shared-storage refund expectation; those failures and the no-op shell quoting error are retained. The first civic browser timed out on a nonexistent harness selector after the course had completed; the corrected runner verifies the same product flow. Final logs are .qa-city/ethical-unit-attempt4.log, .qa-city/ethical-retained-regressions-attempt1.log, .qa-city/ethical-integration-regressions-attempt1.log and .qa-city/ethical-preserved-branches-attempt1.log. All prior pinned fixtures/branches are retained without merging resources or certificates. No staging, commit or deployment is claimed.

Preceding Ethical teaching catalog: 44 buildings, 52 technologies across six branches, 32 recipes and 85 resources. Ethical teaching now has a functional local voluntary application. Scriptural/philosophical scholarship and Dialogue are now implemented above; Combined formations and Siege engineering remain named gaps. Wider religion, mounted service, politics, realm progression, compulsory taxes and permitted useful reservoir operation/maintenance/removal remain open.

Preceding delivery: consented tax terms on real stipend and military pay. Paid Tax administration research/adoption now supports optional no/quarter/half levies in new finite pay commitments. Whole earned-pay receipts protect two gross coins per person, conserve the existing 1,200 coins, record actual public collection and reconstruct net private assets. Military acceptance requires 84/88 morale and spends four/eight points. Service loss permanently waives that instalment; tax is not retroactively imposed on earlier contracts, balances or inheritance. Cancellation/death refund only unearned gross pay and retain earlier collection and private net earnings. City reviews disclose actual terms and the new Tax & public receipts section remains inspectable during service loss.

Preceding tax verification: 209 distinct cases in eighteen files: fifteen tax scenarios, 186 retained scenarios in fourteen files and eight preserved-branch scenarios in three other files. Duplicate reruns are excluded; this is not the full repository suite. Both independently command-earned default-timing openings replay exactly. The served stipend and military flows pass paid reviews, read-only cancellation, actual allowance/collection, whole-save replay/restore and consecutive owner reloads. Thirty-two responsive checks cover 320/390/640/1440 pixels, without page errors; all three owned browser servers, including the failed harness attempt, stopped. Evidence is pinned in .qa-city/tax-goal-handoff.json; .qa-city/gameplay-acceptance-audit-attempt6.json retains all nine M0–M8 milestones and fourteen original required scenarios. The full goal remains active.

The default-timing stipend opening has 73 actual commands/advances and 24 coins from timber sales; its served ten-event flow ends with six personal and eighteen communal coins, one levy waived and one collected. The military opening independently replays 352 actual events from the same earned start, including paid forester lodge, barracks, research, kit production/recruitment, finite milling and physical material/coin trades. Its served eight-event flow earns twenty-eight gross coins for four existing troops, collects eight, leaves twenty private wages and forty-four communal coins, and pays actual consent morale. Timber and tool limits remain; these branches do not replace the preserved 120-day regional reserve proof or grant its fully assigned capital another clerk.

Fifteen tax cases include both fourteen-day collection rates and offline custody. Unit scarcity, health/death boundaries and the military morale-refusal input are declared controlled cases, separate from earned browser openings. Failed/provisional unit attempts one–five, military setup attempts one–seven and the first stipend browser selector failure are retained. Successful final runs are .qa-city/tax-unit-attempt7.log, .qa-city/tax-retained-regressions-attempt1.log and .qa-city/tax-preserved-branches-attempt1.log. Historical fixture bytes, reviews and paid trial receipts remain unchanged; no commit, staging or deployment is claimed.

Preceding Tax administration catalog: 44 buildings, 51 technologies across six branches, 32 recipes and 84 resources. Tax administration delivers optional finite payroll collection, not compulsory land/trade/realm tax. Ethical teaching, Scriptural/philosophical scholarship and Dialogue are implemented above; Combined formations and Siege engineering remain named gaps. Wider mounted service/politics, realm progression and permitted useful reservoir operation/maintenance/removal remain open.

Current step: Constitutional design has functional written local authority (M4/M7 partial). Separately paid three-day conventions choose Steward or Civic council charters and an existing adult successor. Council authority permanently requires paid assemblies for reserve/recruitment-floor/timber-budget changes, and paid council approval for succession appointments; a new paid convention can amend it. Learning alone changes nothing. Existing assembly terms, court escrow/rulings, funded work, title boundaries and private inheritance remain separate. Interruption, exact unused-supply refunds, current-character review, original issuer custody, actual founder death and lawful handover are implemented. City exposes fresh quotes, conditional ballots, actual progress and history; Family explains the changed nomination rule.

Preceding constitutional scoped verification: 173 distinct cases across sixteen files: sixteen constitutional cases, 149 retained cases in twelve files, and eight preserved-branch cases in three other files. Duplicate reruns are not counted; the full repository suite and original M0–M8 completion are not claimed. The actual earned opening uses paid tools barter, research/adoption and actual forestry/milling, with default construction timing and no extra resources or population. Current catalog: 44 buildings, 50 technologies, 32 recipes and 83 resources across six branches. Six named choices remain absent: Tax administration, Ethical teaching, Scriptural/philosophical scholarship, Interfaith and civic dialogue, Combined formations and Siege engineering. Wider Cavalry service, elections, court jurisdictions and monarchy/republic/federation/realm constitutions remain partial or planned. Continue Tax administration next, followed by the remaining trees, realm and permitted useful reservoir operation/maintenance/removal. The original goal remains active.

The current served earned branch ratifies a council charter, changes the real nominated successor through a second paid session, changes food reserve through a paid assembly and retains council authority after its seven-day term. Consecutive authenticated owner clients agree after reload; the existing one-session-per-account rule remains in force. A separate declared-health branch verifies actual mortality, embodiment, a real next-day service recovery, paid appointment during interregnum and lawful handover that consumes the nomination. Both branches restore and replay exactly. Thirty-two responsive checks cover 320/390/640/1440 pixels across the two accepted flows; there are no page errors and all owned servers stopped. Evidence is pinned in .qa-city/constitution-goal-handoff.json and the original-scope .qa-city/gameplay-acceptance-audit-attempt5.json. Failed browser/setup evidence remains preserved. The assembly editor now retains its focused numeric input during fresh City replies and refreshes its quote after blur, preventing the observed lost-selection race.

Current: Courts with binding consensual lease review (M4/M7 partial). The 49-topic catalog adds a paid Contract law → Courts path, a real judge and registry service. After a paid site crew returns and unloads, the tenant can request a rent remedy. The host explicitly consents, escrows existing coins and pays six food/two timber for two full hearing days with two witnesses. Recorded unworked days produce an agreed proportional remedy or dismissal. Original lease gross rent, extraction receipt, ownership and people remain unchanged. A ruling transfers only escrow once; joint cancellation, interruptions, actual commons repair and lawful succession retain costs, consent and coins. City → Knowledge & community → Civil courts provides fresh reviews and party-only records.

Current verification: 202 distinct scoped cases across twenty files. Seventeen court cases pass, 177 retained gameplay cases pass across sixteen files, and eight map/earned-regional/current-and-older-recovery fixture cases pass across three further files. Duplicate failed/repair reruns are excluded. The 749-event command-earned opening uses default construction timing and no extra stocks, coins, people, knowledge, terrain or damage. Served host/tenant confirmations pay and escrow once, enforce a six-coin remedy from twelve held coins, return six to the host, and preserve the original lease exactly. Both accounts reload the same ruling; whole independent replay/restoration and four layout widths pass without page errors. Controlled scarcity, damage, warehouse and critical-health unit inputs are declared. Wiki build/check and syntax pass. No full repository suite or complete M0–M8 acceptance is claimed. Evidence is pinned in .qa-city/court-goal-handoff.json; all older branches remain separate and immutable.

Paid adoption promotes only an empty court version-one book. Before adoption, older saves remain unchanged. Missing custody, forged evidence, clocks, signatures, coin/material inflation and foreign or stale orders reject. .qa-city/gameplay-acceptance-audit-attempt4.json retains all nine original milestones and fourteen scenarios. Seven named later choices remain absent; wider Cavalry service and civic elections remain partial/planned. First civil court review is delivered; wider jurisdictions and appeals remain planned. Constitutional design's local authority application is now implemented above; continue Tax administration and the remaining trees, realm institutions and useful permitted water-operation/maintenance/removal. The original goal remains active.

Preceding step: functional Civic representation (M4/M7 partial). The 48-topic live catalog includes a paid research/adoption path to founding-community assemblies at the sound dry commons. Three real delegates deliberate for two full workdays with six food/two timber, then actually ratify or reject a proposed food reserve, civilian recruitment floor or public timber budget. Ratification constrains existing policy, budget and recruitment controls for seven days; another paid session can amend it. City exposes fresh server-reviewed proposals, conditional votes, actual progress, refunds, decisions and deadlines. Interruptions release delegates and restart the unfinished day; cancellation cannot refund spent work twice. Existing sessions and terms survive council stewardship and lawful handover.

Adoption performs only an empty version-one book/marker migration. Older saves remain unchanged before this new adoption. Missing custody, free resources, forged votes/clocks and foreign or stale orders reject. Evidence is pinned in .qa-city/civic-assembly-goal-handoff.json; the full M0–M8 goal remains active. Broader elections and realm constitutional arrangements remain planned; local written authority is implemented above. Tax administration, Constitutional design, Ethical teaching, Scriptural/philosophical scholarship, Interfaith and civic dialogue, Combined formations and Siege engineering remain absent; the first Courts application is now implemented above; wider Cavalry service is partial alongside the existing mounted drill/patrol/guard/escort. Continue Tax administration and the remaining tree, realm and reservoir-operation gates after the civil court application above.

Preceding Civic verification: 197 distinct cases across eighteen files. The final combined run passes 196 cases in seventeen files; the separately pinned main regional closing passes one case. Duplicate repair/reruns are excluded. Seventeen assembly cases cover payment, rejection, exact refunds, interruption/resumption, ordinary policy/recruitment constraints, amendment, expiry, privacy, current authority, whole restoration and offline outcomes. Controlled scarcity, commons exposure and founder age are declared unit inputs. A separate command-earned opening and served City confirmation pay the actual bill, advance two full workdays and retain the real three-vote decision through exact independent whole-state replay and reload. Proposal/history screens fit widths 320/390/640/1440 with no page errors; all browser servers stopped cleanly. Wiki generation/check and source syntax pass. The fresh .qa-city/gameplay-acceptance-audit-attempt3.json retains all nine original milestones and fourteen requirements, with the first Civic representation application now implemented and remaining scope explicit. No full repository suite or complete goal acceptance is claimed. The new civic branch is separate from the later earned regional closing and controlled pressure/recovery branches.

Previous verified step: original-goal audit and physical journey map correction. .qa-city/gameplay-acceptance-audit-attempt2.json records nine milestones, fourteen required scenarios and ten named later technology gaps. Fresh coverage supports the initial integrated journey and regional recovery/succession; it does not certify the full plan. The 47 live nodes span six branches, while Tax administration, Courts, Constitutional design, Ethical teaching, Scriptural/philosophical scholarship, Interfaith and civic dialogue, Combined formations and Siege engineering were absent at that audit. Civic representation is now implemented above. Mounted service preparation already supports paid rider drill, mounted patrol, corridor guards and convoy escorts; the separately proposed wider Cavalry service choice and tactics remain partial. Civic representation's first assembly application is now implemented above; continue remaining named gaps and permitted reservoir operation, maintenance/removal and realm progression. The goal remains active.

The map now follows actual route positions for every supported travelling crew. Later reservoir crews have working owner markers; Show recovery crew opens its current hex. Old/current chunks refresh together, owner transit subscriptions work between manifested parcels, and response-order/stale-reply handling preserves current positions and completed absence. Otherwise silent changed mobile-job steps emit WorldJobPositionChanged, making real position and due/meal progress durably committable. Ordinary world/chunk revisions advance; route, paid custody and saved fields are unchanged. Older fixture bytes restore exactly; a separate current command fixture records current checkpoint revisions without weakening stale-review validation.

The preceding map step passed 267 distinct cases across twenty-one files: five movement/cache/recovery cases, 71 founding/catalog/navigation/knowledge/continuity/integrated cases, 174 land/logistics/military/expansion/outpost/trade/district/governor/regional/education/well cases, three current-replay/retained-fixture cases and fourteen paid residue-recovery cases. The first regional run's sole failure retained future major ledgers inside an alleged pre-waterworks save. The corrected input omits all those books/markers, and all eighteen land cases pass; runtime validation was not relaxed. The first combined run exposed that the old recovery command script records world revisions before silent-step checkpoints. Its bytes and saved state are preserved and restore exactly; a separate newly recorded fixture replays current paid commands without rebasing historical review metadata. Duplicate reruns are excluded. Logs and served map evidence are pinned in .qa-city/gameplay-audit-map-goal-handoff.json. No full repository suite or complete M0–M8 acceptance is claimed. The three accepted economic/pressure/recovery branches remain separate.

Implemented: paid abandoned pressure-test residue recovery (M8 partial). The City → Land command flow sends four paid home workers with separate 28-day cleanup authority, exact tools/meals and fee. Two whole safe workdays contain sediment as spoil and verify clearance. Recall and a separately paid journey preserve/resume actual progress; real return/full unloading release labor. Original failed trial history is unchanged, and recovery grants no pressure result or hydraulic operation. Major-waterworks 42→43 adds empty recovery custody without grants; prior pressure/regional fixture bytes remain preserved.

The supported regression declares initial cultivated upstream soil, additional home/source timber 80/40 and unsafe original cleanup access. Actual runoff captures 21 sediment mass, the original crew returns without cleaning it, and ordinary paid recovery contains all 21 over two safe days. The original forced crew retains one-third unmet travel meal; recovery adds none. These controlled opening inputs verify finite custody rather than earned supply. Selected regression and served City verification are recorded with the recovery handoff. Indefinite mineral renewal, remaining realm/castle progression, permanent containment, useful permitted water and the full M0–M8 completion audit remain open. See primary design and off-channel specification.

Scoped recovery verification passes 110 distinct cases across 24 selected files, including the controlled opening replay, complete paid recovery/return, interrupted/resumed cleanup, finite unsafe waiting, partial unloading, current map placement, moving-clock funding/recall and predecessor migrations. Duplicate reruns and the zero-match file placeholder are excluded. Independent audit .qa-city/residue-recovery-independent-audit-attempt1.json replays all 95 command/advance events, verifies the whole closing restore and exact neutral migration of the separate earned regional closing. Served City checks cover review/cancel/confirm, persistence/reload and 320/390/640/1440 layouts. This is scoped acceptance, not the full repository suite or completion of M0–M8. The continuation record is .qa-city/residue-recovery-goal-handoff.json.

The residue-remediation gaps in the historical acceptance notes below are superseded by this recovery stage; their original verification scope remains historical.

Current earned acceptance: all tracked home/network reserves grow through 120 uninterrupted healthy capital days. Canonical closing .qa-city/earned-reserve-cycle-attempt3-closing.json, at 1894060800000, SHA 64f0b1f513ff64df4f1f1ae5e7cc72d4351098bc13d114371bc4b2283677a6c3, continues exact clay-satellite input SHA dd6d7f9c2876163d73f3bf0fb7fd8cd8ad6f834b20f8425b69cc6eb557d38590 at 1892332800000. The whole interval is measured, without a hidden preparation/tail period. Saved timing remains 100 ms, world/simulation three and major-waterworks 42. No runtime/UI command, book or migration changes in this stage.

Home changes: food +63½, logs +35, timber +56, clay +40, bricks +10, ore +26, iron +4, charcoal +8 and tools +4. Network changes: food +574½, logs +120, timber +77, clay +40, bricks +10, ore +40, iron +4, charcoal +8 and tools +4. New clay credits total 96 against 56 consumed; six returned sixteen-unit loads on each link deliver 96 home. New ore credits total 56 against sixteen consumed; three fourteen-unit loads on each link deliver 42 home. Eight repairs pay 64 timber, 32 bricks and eight tools. Seven brick/five charcoal/four mixed-metalwork/four tool-forging batches, ongoing physical food freight and natural woodland regrowth support the measured reserves. One clay/three ore sponsor unloads are partial because of actual local storage; distinct receipts total the exact load and no worker is released early.

All ten communities retain the same 142 residents, health 100 and zero hardship/food shortfall across 1,200 individual daily checks. Current capital and all input-active services persist at every observed assessment. Primary precision mill staffing remains three; borrowed fields restore three/six; every journey returns/unloads and both mineral pits close paused. Home closes at sixty residents with twenty-one labor/twenty-one assigned, 683 food, 82½ logs, 319¼ timber, 92 clay, twenty bricks, 72 ore, six iron, eight charcoal and twenty-one tools. Current food balance remains −2½, so this is a connected regional supply proof. Old titles/links, exhausted/Greywood ground, depot, grants, coins and major-waterworks books remain exact. Pressure evidence stays on its separate branch.

Independent audit .qa-city/earned-reserve-cycle-independent-audit-attempt1.json exactly replays all 3,231 events and 403 accepted results, separately recaptures/compares every warehouse/production/daily entry, closes every resource balance in all ten warehouses and verifies three distinct full snapshot restores. Eight repair observations are separate. 36 distinct cases pass across seven selected files: 35 in .qa-city/earned-reserve-cycle-tests-attempt2.log and one pinned returned-fixture case in .qa-city/earned-reserve-cycle-returned-fixture-tests-attempt1.log. This is scoped verification, not the full repository suite. The first test run's single failure assumed each returned relay needed one receipt; the corrected assertion requires unique receipt sequences totaling the load and later physical arrival. No production rule changed to make that assertion pass.

Portable test/fixtures/earned-regional-reserve-cycle-returned.json.gz pins the whole {snapshot}, compressed SHA 86db26d4f13b79078bffd52e2eb81ff2112fb59f702ff91b11a86f96bbfb9c8e, raw SHA add5eb9388a76c654ab44c8fa598709795eafc33d04a596822445079980b6240. The integrated cycle reuses the unchanged clay-satellite returned fixture. Candidate one overprioritized refining and lost capital at twelve days; candidate two preferred large distant food stores, could carry only thirty-two food on those long routes and exhausted mill logs, losing capital at seventeen days. Candidate three prioritizes urgent logs and nearer affordable food, then supplies small material batches. Every failed/provisional artifact remains preserved.

fullBoundedReserveGatePassed:true applies to this exact 120-day sample. Indefinite mineral renewal remains unproven: only 24 clay and 28 ore remain in the current seams. Review additional lawful supply before another long cycle; this closing uses no finite market purchases. Remaining realm/castle progression, permanent containment, useful permitted water, residue remediation and the complete M0–M8 completion audit remain outstanding. The goal stays active.

Preserved preceding clay-satellite acceptance: paid local water and a healthy 120-day cycle passed, with declining reserves. Preserved closing .qa-city/earned-clay-satellite-attempt14-closing.json, SHA dd6d7f9c2876163d73f3bf0fb7fd8cd8ad6f834b20f8425b69cc6eb557d38590, at 1892332800000, continues exact ore closing SHA a02130a9f142a77d70b264cfd0da94e6ca96e28b198bc53fd5c32405d784815c through 454 days plus 7,196,000 ms. Saved generic work timing remains 100 ms; world/simulation remain three and major-waterworks 42. Only two runtime policy checks change: construction allows secondary wells at sound registered village commons, and restore allows their legally retained local village custody. Raw camps, unsuitable natural ground, missing local survey/adjacency and unfinished/unstaffed pumps remain blocked. No new command, ledger, migration or City control is introduced.

The formerly exhausted mineral camp outpost-5 pays a town house, local development, Record keeping/Public accounting/Land registry/Seed selection/Crop rotation/Joinery/Irrigation researches, a lumbermill, registry and a separate groundwater well at 1456991. Central capacity stays twelve; the completed, irrigated, staffed secondary well temporarily raises delivery to twenty-four. Three physical existing-household arrivals provide enough residents/workers for five administration/water jobs alongside six founders. Its returned survey and conditional charter authorize lowland-v1:515:711; eight existing residents/six workers physically establish outpost-16, leaving twelve at the sponsor. After departure, optional administration and pump service deliberately pause; retained custody grants no future founding authority or passive water.

New clay extraction is 120 from finite 240, with five sixteen-unit collections on each of two separately paid links delivering eighty home against seventy-two actual kiln inputs. New ore extraction is seventy, 42 home receipts and 32 actual smithy inputs, leaving 84 in the existing earned satellite seam. Both bounded replacement samples pass; the earlier clay seam's final 36 are extracted to zero. Nine separately paid repairs consume 72 timber, 36 bricks and nine tools. All prior links, exhausted/Greywood deposits, depot stocks, founding grants, communal coins and major-waterworks books remain exact. No pressure branch stock or certificate is merged.

All ten communities pass 4,246 individual daily assessments with health 100, no hardship/food shortfall and valid labor, storage and water. Every journey returns/unloads. One actual named ruler resident dies through normal aging; ordinary embodiment/handover selects house-7-child-1, so network population is 142 and home sixty. Home has twenty-one labor/twenty-one assigned, primary precision mill three, food fields three/six and current food balance −2½ daily. Regional capital, care and Regional institutions are supplied; Urban sanitation/waste staffing deliberately pause once basic sanitation covers the reduced population. Extra pumps can pause only while remaining actual water covers residents. These service choices must be reversed before later growth when needed.

The separately measured cycle starts at 1890604800000 and ends at 1892332800000, exactly 120 village days. Home reserve deltas are food −27½, logs −22, timber +160, clay −40, bricks −2, ore +6, charcoal −3 and tools zero. Closing stocks include 619½ food, 47½ logs, 263¼ timber, 52 clay, ten bricks, 46 ore, two iron, zero charcoal and seventeen tools. fullReserveGatePassed:false remains explicit, despite both whole-continuation mineral replacement samples passing. This proves bounded healthy regional operation, with food freight and finite mineral custody; it does not prove a self-sufficient capital or indefinite renewal.

Independent audit .qa-city/earned-clay-satellite-independent-audit-attempt1.json replays all 12,803 command/advance events and 1,500 accepted results, separately recaptures every warehouse/production/daily entry, checks ten warehouse closures and eleven full checkpoint restores. 38 distinct cases pass across ten selected files: two local well cases, 34 retained cases plus the current integrated journey, and one returned fixture. The initial 35-case selection's older four-load journey is superseded by the current five-load integration rerun; it is not counted twice. Logs: local-village-wells-tests-attempt2.log, earned-clay-satellite-tests-attempt1.log, earned-clay-satellite-tests-attempt2.log and earned-clay-satellite-returned-fixture-tests-attempt1.log, all under .qa-city. This is scoped verification, not the full repository suite. Attempts 1–12 remain failed experiments; attempt 13 is preserved as a healthy provisional four-load closing whose 64 home receipts did not cover 72 inputs. Attempt 14 supplies eighty through five loads and is current.

Portable test/fixtures/earned-regional-clay-satellite-returned.json.gz pins the whole returned {snapshot}, compressed SHA 4ba80c1a03d405c5774043f26ab47e68c3be5b260b045c9b95bb9aa5f040a782, raw SHA b513a78ee71457fba5c779a69df480b36880917ceaa0d3d4df79dd89d3d7f0a4. The integration reuses the unchanged ore returned fixture as immutable input. The new local well fixture uses controlled construction supplies for isolated rules; only the integrated journey is command-earned economic evidence. All previous accepted snapshots and separate pressure evidence remain preserved. The newer reserve cycle above verifies actual home/network reserve growth over a separate complete 120-day sample. Indefinite mineral renewal, remaining realm/castle and permanent containment/useful-water/residue gates remain open. The full M0–M8 goal remains active.

Preserved preceding ore acceptance: lawful ore satellite complete; combined reserves incomplete. Preserved closing .qa-city/earned-ore-renewal-attempt14-closing.json, SHA a02130a9f142a77d70b264cfd0da94e6ca96e28b198bc53fd5c32405d784815c, at 1885788004000, continues the exact accepted clay closing for 521 village days plus four seconds. Generic work timing remains 100 ms, world/simulation three and major-waterworks 42. The root retains six direct titles; outpost-3 develops a locally administered mineral satellite outpost-12 at iron parcel upland-v1:509:697. Existing links, depleted seams and Greywood Stewardship deposits retain their exact custody. No grants, coin balances, pressure stocks or pressure certificates change.

The sponsor pays a local lumbermill and six separate researches (Joinery, Seed selection, Crop rotation, Irrigation, Public accounting and Land registry), twenty-four-timber/eighteen-brick/two-tool well headworks, another house and registry construction/staffing. Local administration is paused while accumulating materials and supplied again before the returned survey, charter and founders. A four-person existing household physically arrives only after destination water/housing are ready. Eight sponsor residents/six workers physically found the satellite, leaving eight sponsor residents; network population stays 143 and home falls from 77 to 73. The seventy-timber founder kit pays camp forty and food plot thirty; five later sponsor deliveries pay the separate ninety-timber mine. All goods reach the sponsor and camp through actual paid journeys.

Eight seven-ore extraction credits deplete seam 1426265 from 210 to 154. Four fourteen-ore collections on each of two direct links produce exactly 56 home incoming ore. Actual home smithy recipes use 32, so oreReplacementPassed:true applies only to this measured sample. Startup also consumes twelve previously mined ore and buys 24 finite waystation iron with 48 real timber through returned caravans. Clay camp extraction is 108, home receipt 96 and actual kiln use 176; the eighty opening home clay is used up, with twelve stored at the camp and 36 left in ground. clayReplacementPassed:false and fullReserveGatePassed:false remain explicit for this longer continuation. The prior clay stage's shorter passing sample does not supersede this deficit.

All nine communities pass 4,302 single-community daily assessments with health 100, no hardship or food shortfall and valid water/storage/labor. Twenty-seven home repairs and one sponsor repair spend 224 timber, 112 bricks and 28 tools. Every journey returns and unloads. The home closes as Regional capital with its original active programs restored, primary precision mill staffed three and borrowed food-field workers restored. It has 28 labor/26 assigned, 591½ food, 35½ logs, 97¼ timber, zero clay, ten bricks, 36 ore, four iron, one charcoal and sixteen tools. Current food balance −16½ daily still depends on actual farm freight. Local sponsor registry/extra irrigation and post-founding home Land registry/extra clerks remain paused; retained titles authorize no further departure by themselves.

Independent audit .qa-city/earned-ore-independent-audit-attempt1.json exactly replays 16,058 events/1,170 commands, compares independently captured warehouse, production and daily histories, closes all nine warehouse balances and restores nine full milestone saves. Repair observations are counted separately. 48 distinct cases pass across eight selected files, using .qa-city/earned-ore-renewal-tests-attempt1.log (47 cases in seven files) and .qa-city/earned-ore-returned-fixture-tests-attempt1.log (one new fixture case). This is scoped verification, not the full repository suite. Failed ore attempts 1–11 remain as preparation/founding experiments, attempt 12 is a provisional returned Town checkpoint, attempt 13 fails capital staffing, and accepted attempt 14 restores capital with actual temporary field-worker borrowing. No runtime fix or free labor was introduced.

Portable test/fixtures/earned-regional-ore-renewal-returned.json.gz pins the whole {snapshot} closing, compressed SHA 348ef9a38f5113a84ba57c44531024659bd52056c396e06ec15e00d53d730575, raw SHA 320098a0915fef56c18d698d9dae14efb31e17e53b498efd09c67894aa43cc4b. The ore integration reuses the preserved clay returned fixture as its immutable input. Acceptance helpers add no runtime migration, command, City control or player automation. The newer clay satellite above supersedes the pending fresh-clay work; its healthy measured cycle still leaves actual reserve deficits. Remaining realm/castle progression, permanent containment, useful permitted water and abandoned-residue remediation remain open. The full M0–M8 goal stays active. The pressure branch below remains separately accepted and is never merged into this economy.

Preserved prior clay acceptance: sixth direct clay producer passed its bounded sample. Closing .qa-city/earned-clay-renewal-attempt15-closing.json, SHA a039cad7d22499d830060a6b9afe12a5211f1a53706be489a506a48586554fd9, at 1878285600000, continues the retained schema-39 regional checkpoint for 193½ village days at its saved 100 ms generic work timing. Existing daily assessments earn City/Regional capital. Two separately paid registry offices occupy surveyed registered fourth-ring plots. Three sound staffed registries, active Land registry/Regional institutions, a returned frontier survey and conditional charter authorize the sixth direct home child at lowland-v1:519:709.

Eight existing residents/six workers establish outpost-10; total network population remains 143. The seventy-timber founding kit funds camp forty plus food plot thirty; three later loads deliver the clay pit's separate fifty timber. Eight twelve-clay cycles deplete seam 1450857 from 240 to 144. Six physical sixteen-clay collections return all 96 clay once to the home. Home kiln recipes consume 56 clay, so clayReplacementPassed:true applies to this bounded continuation. Zero new ore is extracted; twenty previously mined ore from exhausted outpost-5 fund metalwork/tools. oreReplacementPassed:false and fullReserveGatePassed:false remain explicit. All previously exhausted seams, Greywood Stewardship deposits, the finite waystation depot, founding grants and communal coins are unchanged.

All eight communities retain health 100, zero hardship/unmet food/last-day food shortfall and valid water, storage and labor across 1,422 completed single-community day assessments. Eleven paid returned repairs spend 88 timber, 44 bricks and eleven tools with four actual workers each. Every journey is home at closing. Home has 77 residents/thirty labor, 648½ food, 25½ logs, 30¼ timber, eighty clay, twelve bricks, no ore/iron, three charcoal and nine tools. Its −20½ daily food balance depends on real food-outpost delivery; this does not establish self-sufficiency or indefinite realm reserves. Source optional Regional institutions/registry staffing are deliberately paused to fund food/timber. Home primary precision mill remains three staff; after departure home Land registry/two added clerks pause, retaining titles but preventing further founding.

Independent audit .qa-city/earned-clay-independent-audit-attempt2.json exactly replays all 4,073 command/advance events, checks 346 accepted commands, five full restorable milestones, eleven distinct repair observations, material custody, every warehouse and unchanged people/grants/coins/depot/geology. 26 distinct tests pass across eight selected files, including the 193½-day integration, existing 120-day preparation, mineral/deposit/satellite regressions, the pinned new closing and the preserved pressure-result fixture. Logs: .qa-city/earned-clay-renewal-tests-attempt2.log (24 cases) and .qa-city/earned-clay-retained-branches-tests-attempt1.log (two). These are scoped checks, not the full repository suite. Failed attempts 1–12, the first daily-phase test assumption and the first audit's repair-marker assumption remain preserved; accepted attempt 15 and corrected independent audit define the continuation.

Portable tracked input test/fixtures/earned-regional-clay-renewal-opening.json.gz pins original schema-39 raw SHA ff3623b1642f742b51aa77297474d349efee378b97e1aea8d836f129106268fe; its loader asserts exact neutral 39→40→41→42 empty pressure books without changing any other state. Returned fixture test/fixtures/earned-regional-clay-renewal-returned.json.gz pins the whole {snapshot} closing (compressed SHA f3a65b6d303c97397f91e36473f40a02fc63d3bfcecdd5d7df0e1185a06b0421, raw SHA 10cfbf5e5c42a42c49e35f6c503088e6ba5871f8bf5f44ef049b7acccfd32951). These prior fixture bytes and the earlier 26-test selection remain preserved. The ore continuation above reuses this returned input and supersedes the old open ore gate only for its own bounded sample. Follow the current combined reserve deficit and remaining M0–M8 gates above.

The finite live pressure trial is implemented; permanent containment and useful water supply remain planned. City → Land → Live pressure trial adds Review live pressure trial and Review pressure trial stop. Entry requires the separately paid current permission, all named holders' explicit consent, four physically arrived workers, two carried cleanup tools, finite meals, active Hydraulic engineering and a freshly reviewed dry clean opening. Confirming entry costs one attention. Cancelling a review spends nothing; starting withdraws no second material fee.

The actual next canonical opening must match the reviewed geometry and hydrology. Only private interval authority can exclude the installed raised footprint from the natural curve, split actual incoming runoff, own compartment water/sediment and release through the paid closed outlet. The bounded game protocol charges to full head, holds it for one whole water interval, discharges through the head-limited 1,000-subunit outlet and uses the clear-water exterior drain. Each of at most eight intervals checks its own global water/sediment closure and a fresh natural comparison for affected holders and adverse soil, building, inventory, wetland or fish effects. A forecast flag or copied receipt authorizes no live interval.

At a successful drained boundary, restore the natural connection immediately, before two paid sediment cleanup days; this supersedes the earlier proposed cleanup-before-reconnection sequence. A stop, lost permission/engineering, unsafe route, insufficient return reserve, exhausted interval allowance or failed preflight also restores the natural connection. Remaining water is transferred exactly once into the natural basin. Sediment stays in explicit compartment custody, then moves to contained spoil on the first safe cleanup day, with no resource credit. Each of two whole safe days spends one already carried tool. Unsafe gallery access resets the work clock and continues consuming meals. Exhausted cleanup supplies return the workers with no result; any residual sediment remains durable and blocks retesting. Paid abandoned-residue recovery is implemented in the separate stage above.

Only actual charge, hold, discharge, drawdown, two paid cleanup days and natural reconnection produce the finite game pressure result. It explicitly grants no permanent containment, recurring flow or useful supply. Afterward the workers physically walk home and unload unused meals; only then is home labor released. Restore sustainable mill/woodland staffing after return. World/simulation stay version three; explicit major-waterworks 41→42 adds only an empty trial book and the two parent markers, following the separately preserved 39→40 permission and 40→41 attendance migrations. No migration grants goods, workers, water or certificates. The complete M0–M8 goal and the separate earned mineral/capital progression gates remain active.

Accepted finite trial: seven actual intervals captured 3,148 plus 25,000 direct rain subunits, balancing 15,898 spill, 1,000 head-limited outlet release, 10,000 exterior drawdown and 1,250 modeled evaporation. Closing water and sediment are zero. These are actual typed trial transfers; the retained kernel remains game arithmetic. The result is earned at 1857169200107, after natural reconnection and two paid cleanup days. Ordinary 35-step return/unload then restores the home mill to three staff. The accepted continuation is .qa-city/pressure-live-restaffed-attempt1.json, at 1857211200107, SHA 9e6816c1295c70b56c5d7c68ba69900f27ab6cff265027a132cd9e68fffb99f2. Both communities retain health 100 and +2.5 daily food; home labor is 12/14, with 58 logs and 27 timber. Source timber is 12 and remains a finite reserve. The separate exhausted-mineral branch is preserved and its stocks are not combined here.

Scoped acceptance: 137 distinct tests pass across eighteen selected files: twelve live trial cases, one pinned earned-fixture case, seventy-eight attendance/permission/native-ledger regressions, thirty-nine retained-cache predecessor/forecast cases and seven parent migrations. Full actual command/advance replay includes physical return and ordinary restaffing; every trial phase restores exactly. Independent audit: .qa-city/pressure-live-independent-audit-attempt1.json. Verification: .qa-city/pressure-live-verification-attempt1.json. The new tracked offchannel-pressure-trial-returned compressed fixture pins the earned closing; all earlier snapshots, failures and journals remain preserved. These checks establish this bounded stage, not the full repository suite or completion of M0–M8.

Served City acceptance covers review cancellation and confirmed start/stop, an actual held compartment stopped with an exact 10,000-subunit natural-basin credit, and the earned result after reload. Every scenario passes persistence and 320/390/640/1440 layouts; all three test servers stop cleanly. Evidence: .qa-city/pressure-live-city-browser-4RW6h1/evidence.json, .qa-city/pressure-live-city-browser-HXXDDo/evidence.json and .qa-city/pressure-live-city-browser-htUGvX/evidence.json. The earlier failed locale-specific browser expectation is preserved; it changed no accepted checkpoint.

See the living world design, off-channel specification, player guide and technical reference. The attendance-only notes below describe the preserved preceding checkpoint; their pending hydraulic stage is superseded by the finite live trial above.

Preserved attendance checkpoint, before live pressure implementation. From the separately paid current permission, four actual home residents carry two tools and 96 meals over the exact 35-step route. Funding costs one attention and respects real labor, inventory and operating ceilings. Tools remain carried, every elapsed travel/wait interval consumes paid meals, and the workers stay unavailable until their actual return and unloading. City → Land provides Review pressure crew journey and Recall pressure crew. Cancelling either review spends nothing. No attendance order removes a plug or changes a gate, the original natural curve, water, sediment, containment or pressure certification.

Current accepted arrival: .qa-city/pressure-attendance-ready-attempt3.json, at 1857030000107, SHA acb14a10bfdd93b98e939891c127ec769b772ab6941d24bdec35e1b27eb0abb5. Ordinary staffing reduces the basic home mill from three workers to one, preserving the five field hands and registry clerk; the four freed residents are then paid and physically walk all 35 steps. Both communities retain health 100 and food output above demand. The home has all fourteen labor committed, so standing selective harvest waits for available workers. The smaller mill produces 0.75 timber against two daily civic timber: 43.25 timber remains on arrival. This is a finite temporary assignment; restore sustainable mill/woodland staffing after the crew returns. No workers, stock, technology or time are granted.

At the floor the crew carries both tools and 84⅓ meals, with zero unmet meals, and may wait at most seven village days. Consent withdrawal, changed title/holders/proposal/reach, permission expiry, lost Hydraulic engineering, unsafe access or the finite return meal reserve send the crew home. Fire or floodwater can hold the physical journey; held travel consumes provisions. An unsafe elevated-gallery exit holds departure. Unused goods are credited only when the returning workers reach home, and insufficient warehouse room holds unloading and labor release. The full quoted journey, future eight-interval trial allowance, two cleanup days and an unload reserve must fit cargo capacity and the original permission expiry; arrival does not extend that expiry.

The fresh arrival comparison is a read-only forecast: 5,943 captured plus 27,000 rainfall subunits balance 19,943 spill, 1,000 outlet release, 10,000 exterior drawdown and 2,000 modeled evaporation, with zero closing water, conserved sediment and no modeled adverse built/ecological difference. These are hypothetical flows, not actual pressure receipts. Arrival is not a certificate. At that attendance-only checkpoint, live custody, failure recovery, cleanup, reconnection and a pressure result were unimplemented; the finite trial above supersedes those pending steps. Permanent containment and useful supply remain planned. The complete M0–M8 goal remains active; genuine replacement mineral production on the separate earned regional branch is also outstanding.

Whole-save verification: .qa-city/pressure-attendance-verification-attempt3.json replays every actual staffing/funding/arrival command and advance, then verifies the independent ordinary recall/35-step return/unload closing at 1857072000107 (SHA 7e4480aee041acf4f4e545a6790d078872471ae4c4caec1faa63527980dab8fc). The arrival remains the continuation checkpoint; the later recalled branch is return evidence. Preserve both, all older fixtures and their original journal receipts. Explicit schema 40→41 adds only an empty version-one attendance book and the two major-waterworks parent markers; world/simulation remain three. The preserved 39→40 permission step remains separate. See the primary living world design, player guide and technical wiki.

Scoped attendance acceptance: 69 distinct tests pass across ten selected files (eleven attendance cases, twelve preserved permission cases, thirty-nine retained-cache waterworks/forecast regressions and seven parent migrations). Whole ordinary arrival/return replay and independent step audit pass. Served City funding and physically arrived recall scenarios pass cancel/confirm, persistence, reload and 320/390/640/1440 layouts; both test servers stopped cleanly. Browser evidence: .qa-city/pressure-attendance-funding-browser-mHhyy4/evidence.json and .qa-city/pressure-attendance-readiness-browser-i26qyo/evidence.json. Independent audit: .qa-city/pressure-attendance-independent-audit-attempt1.json. These checks are scoped acceptance, not the full repository suite or completion of M0–M8.

The following permission-only notes describe the preserved preceding stage.

Separate pressure-test notice and paid permission are implemented; the physical trial remains planned. After the installed floor, dry inspection and all six working connections are complete and every crew returns, the current human source holder can review a finite conserved comparison. The notice binds the exact proposal, installed predecessors, dry route and current affected reach. Every named community, including the source, must explicitly consent. The permission expires twenty-eight source village days after filing; changed holders, title, proposal or reach definitions and consent withdrawal stop its currency. Filing and payment each cost one attention; consent and review cancellation are free. The home pays four timber, one tool and four food once, subject to its actual inventory, services and operating ceilings. Withdrawal or expiry refunds nothing; bounded regrant within the same current notice requires no second payment.

Preserved permission-only closing: .qa-city/pressure-permission-attempt5-closing.json, at 1856988000107, SHA c7e4219dc0b75674ef4d1776b504624f150d3e59d178d4e6d7e264af3a3e0bc5. Five ordinary commands re-enable already learned source Land registry/Public accounting, file the exact notice, explicitly consent as the source holder and pay once. No time, people, technology, water or stock is granted. Home pays four timber, one tool and four food, retaining 73 logs, 45.75 timber and eleven tools; source remains twelve residents/eight labor, with all eight workers assigned and current food output above demand. The woodland mandate and home civic services remain active.

This permission grants no pressure certificate, containment, storage, capture, release or useful supply. At this preserved permission-only checkpoint, physical trial orders were unavailable. Paid attendance is now implemented above. Guarded live water/sediment custody, finite trial failure handling, sediment cleanup and natural reconnection still need implementation and separate acceptance. The full M0–M8 goal remains active, and the earned regional branch still needs genuine mineral replacement. Existing construction stock and the thirty-two-day woodland sample remain bounded evidence. Earlier schema-39 checkpoints and their journals are preserved; their explicit 39→40 migration adds empty permission custody, then 40→41 adds empty attendance custody. Neither step rewrites predecessors or historic command receipts.

Verification: 96 distinct tests pass across seventeen selected files, including twelve permission/save cases, the exact final five-command journal, the preserved woodland/supply journals, full paid plugged controls and floor lowering, conserved model/warehouse regressions, cached predecessor operations and eight parent migrations. The served City flow passes notice/consent/payment cancellation and confirmation, withdrawal/regrant, reload and 320/390/640/1440 layouts; its test server stops cleanly. Independent audit: .qa-city/pressure-permission-independent-audit-attempt4.json, SHA 139e20bd6164f9fdaf107cc3506feaa1eaa3a3844e444cd794374ccc58b9d312. Current verification: .qa-city/pressure-permission-final-verification-attempt1.json. This is scoped acceptance, not the full repository suite or completed M8. Earlier uncached prerequisite factories were deliberately cancelled and are not counted as passing; the supported retained-cache regressions pass with all input hashes recorded.

The permission-only predecessor had two unassigned workers. The current attendance journey frees two mill hands before paying four workers, keeps all field/registry staffing and requires the standing forestry mandate to wait while home labor is fully committed. Permission alone still reserves no staff, meals or materials.

The woodland and pressure-model notes below record preserved predecessor stages.

Latest verified progress: ordinary woodland replacement and save-restoration repair. Two returned frontier surveys and registrations buy real forest titles from the exact supply-ready construction save. One adult travels 44 steps over four days from the finite waystation; home becomes 25 residents/fourteen labor, while source stays twelve/eight. Five field workers, three mill hands, one registry clerk and three civic specialists leave two actual workers for ongoing selective harvest. All three civic services remain active for 32 measured days. Five completed harvests deliver 105 logs; 32 basic mill batches use 96 logs for 72 timber; civic upkeep takes 64 timber. Logs rise from 64 to 73 and timber from 41.75 to 49.75. Both communities remain healthy with lasting food output above current demand and no new food shortfall.

The warehouse fix addresses restoration failure after fractional payments against large lifetime totals. Gross-total cancellation is bounded using actual movement count and turnover; retained receipts and current inventory keep the previous strict tolerance. No stock, totals or receipts are normalized. World/simulation versions stay 3, major-waterworks schema stays 39 and warehouse book stays version one. Regression tests reject changed stock, a material gross change, a changed receipt and overflow totals, while preserving restoration through zero tools. The 485-event woodland journal and earlier 86-event supply journal replay exactly. Verification passes 87 distinct tests across ten selected files; the final warehouse rerun passes all nine of its cases. This is scoped verification, not the full repository suite or completion of M0–M8.

Current closing: .qa-city/pressure-home-woodland-attempt5-closing.json, at 1856988000107, SHA 42bf2a75d467fb60d65d714bc24b19bd1a9fd4137d7ea1a4395195ad2e48f1de. Independent audit: .qa-city/pressure-home-woodland-independent-audit-attempt2.json. Manifest-pinned fixture: test/fixtures/offchannel-pressure-home-woodland.json.gz. Home has about 1,259 food, 73 logs, 49.75 timber and twelve tools; source has about 1,001 food, 27 timber and 7.2 tools. Waystation residents/workers decrease from 120/60 to 119/59 and eight travel-food units are paid; the arriving adult brings four unused return rations home. No second migration journey remains. All major-waterworks books and plugged controls are unchanged.

The independent audit recomputes retained warehouse and gross balances, local production/use and finite migration custody, restores the whole closing, and checks a fresh read-only pressure forecast. That four-interval forecast captures 6,250 and counts 16,000 rain, with 10,250 spill, 1,000 outlet release and 10,000 exterior drawdown, closing empty with all balances conserved. It grants no live pressure or containment; reconnection remains required.

Preserved failed attempts are not accepted: the manual three-harvest sample covered civic timber but depleted logs, and releasing the registry clerk disabled Regional institutions. The corrected continuation proves 32 days of actual log/timber replacement, not indefinite ecological stability or earned mineral supply. Source engineering still consumes inherited tools. Paid live pressure authority, containment, failure handling, reconnection, useful delivery and recurring mineral/tool replacement remain open. The earned regional branch stays separate. The full goal remains active.

The following 105-test pressure-model and supply-only evidence records the preserved earlier stage.

Pressure-model verification: 105 distinct tests pass across fourteen selected files: eleven new sequencing/sealing cases, one real ordinary supply/replay case, preserved v1/v2 kernel/transition and paired forecasts, full paid floor lowering with sixteen lined-open water intervals, and surface/basin water, routing, sediment, exposure, topsoil and wetland regressions. The independent audit also recomputes every modeled component balance and replays/restores the entire supplied closing save. This is scoped verification, not the full repository suite or completion of M0–M8. No new City control or live pressure authority was added. The primary design and both wiki audiences are synchronized; generated wiki build/check and whitespace validation pass.

The pressure-stage construction home is replenished through an ordinary returned supply trip. The exact plugged-controls checkpoint continues to 1855874400040 through twelve ordinary commands and 74 advance calls. Home temporarily suspends its three civic programs, staffs the existing forester lodge and re-enables its already learned Scouting. A two-worker carrier team pays seventeen meals and collects 21 existing source timber over the reviewed 37-step dry detour, with 59 return weight inside its 60 capacity. The source field is assigned three existing workers. After return/unload, Scouting and the lodge stand down and all three home civic services resume; known programs need no second adoption payment.

Home closes with 24 residents/thirteen labor, about 1,020.67 food, 25 timber and sixteen tools; source keeps twelve/eight, about 806 food, 27 timber and fifteen tools. Current field outputs cover household and active engineering food demand in both communities. Health stays 100 and no shortfall is added. All major-waterworks books, plugs, predecessor receipts, rights and population are unchanged; the whole 86-event continuation replays and restores exactly. This transfers finite inherited construction stock and proves no new mineral/woodland replacement. The separate earned regional branch remains separate.

Earlier supply-only continuation: .qa-city/pressure-supply-preparation-attempt2.json, SHA 8b32d844602ffcb5230eaf0bbd6d6fac338b25323f86119b47101ce767ca43eb; independent audit: .qa-city/pressure-progress-independent-audit-attempt1.json. Manifest-pinned test/fixtures/offchannel-pressure-supply-ready.json.gz retains the exact state and journal. Its fresh read-only pressure forecast closes after eight intervals, counting 5,943 capture and 27,000 rain, with 19,943 spill, 1,000 outlet release, 10,000 exterior drawdown and 2,000 modeled evaporation. All balances close, but actual pressure, containment, reconnection and useful water remain unfinished. The later woodland continuation replaces measured civic timber; replacement tools are still needed before source engineering exhausts its finite stock.

Installed-floor pressure sequencing is modeled; live testing remains planned. Conditional sealing now removes the actual paid raised footprint at height 455074 from the natural curve, retaining the original 450074 bed in design provenance and the exact twenty-lift/50,000-fill ground fingerprint. It retains that paid foundation instead of proposing a second fill. The installed lined-open floor remains connected in every live save; only a bound read-only forecast facade can compare sealed behavior.

The finite forecast protocol charges from actual predicted source flow and footprint rain, requires full head 456074 at both boundaries of the next interval, observes one separately rated 1,000-unit existing-outlet discharge, then returns clear water through the already-built 50,000-unit exterior drain to the natural basin. Upslope runoff and drawdown share that drain's rating; spill retains its own rating. A rainy seven-interval comparison captures 3,148, counts 25,000 rain, spills 15,898, releases 1,000, returns 10,000 through the drain and loses 1,250 to the declared hypothetical evaporation assumption, closing empty. Every paired water/sediment balance closes and the actual schema-39 save remains identical.

This is model verification only: no plug is removed, no gate opens and no live storage, pressure certificate, containment, water right or irrigation is granted. A hold at interval boundaries does not certify continuous intraday head or calibrated material behavior. Sediment remains in custody when clear water drains; nonzero sediment still needs paid cleanup. The model stops at its first empty boundary and explicitly requires reconnection; it does not prove the live closed-empty state. Paid temporary containment and pressure authority, current affected-holder review, loader-validated live custody, attendance/failure handling, actual reconnection, useful delivery and recurring maintenance remain implementation gates. The full M0–M8 goal remains active. See reservoir construction and implementation status.

Accepted schema-39 closing: .qa-city/working-controls-complete-attempt5.json at 1855785600040, SHA 478afdd3c904a4cf20f2f2b07c2ed69d98f402a839c9bbbb9018ed0f36bc1bf0. Independent audit: .qa-city/working-controls-independent-acceptance-attempt5.json. The exact closing home has 24 residents/thirteen labor, 999 food/four timber/sixteen tools/two iron; source has twelve/eight, about 807.5 food/48 timber/15.6 tools. Populations remain unchanged and food stays finite with no additional shortfall; later work needs real replenishment before civic timber runs out. The separate earned regional closing is preserved through .qa-city/earned-regional-source-preparation-schema39-neutral-checkpoint.json, SHA ff3623b1642f742b51aa77297474d349efee378b97e1aea8d836f129106268fe, with only empty migration.

Current verification passes 104 distinct assertions: four new lifecycle/custody cases, 42 attention/budget/household/regional/earned-journey cases, eleven predecessor migration cases and 47 water/sediment/routing/City cases. The initial migration filter additionally reported an empty perimeter file; the separate explicit perimeter migration case passed and is counted once. The paid six-tour test replays all 1,058 commands/advances exactly and pairs all 45 water intervals; the independent audit also checks eight later pairs, unchanged predecessors and actual finite population/labor. Served evidence .qa-city/working-controls-payment-browser-fPMiTo/evidence.json and .qa-city/working-controls-completed-browser-qB1S5Z/evidence.json passes review cancellation, single payment, recall marker and refund, reload, current City/map status and 320/390/640/1440-pixel layouts, with no page errors and both servers stopped with exit zero. The 390-pixel review and completed card were visually inspected. Failed first licence setup, initial test probes, the first recall-marker browser run, and the slower stopped uncached migration run remain preserved; they are not accepted checkpoints. No full repository suite was run.

Paid plugged reservoir connections are implemented; M8 remains partial. After the actual installed-floor dry inspection and every predecessor crew's physical return, four existing home builders can install six separately paid working-control connections. These reuse the paid collars, closed fittings and raised gallery: source split with a fixed minimum 25% natural bypass, capture path rated 50,000, release gate and existing-outlet junction rated 1,000, then nonreturn spill and exterior drain rated 50,000. Ratings are proposed water subunits per interval; plugged construction does not prove hydraulic performance.

Source, release and safety stages have separate 28-day licences, each four timber, one tool and four food. Licensing requires source Hydraulic engineering, Land registry, Public accounting and a sound staffed registry. Work retains current source engineering, title, frozen inspected predecessors and strict dry access. Every task carries its real material batch and finite meals, completes whole workdays, and returns/unloads before another major crew uses either community. Recall returns unfinished materials; completed connections remain installed.

Six tours complete in 45 village days on the current 35-step route. Ten paid workdays invest eight timber, eight bricks, four dressed stone, four iron and six tools. Three licences additionally spend twelve timber, three tools and twelve food. Crews carry 184 meals, consume 180 and physically return four. This continues the exact accepted inspection checkpoint with inherited controlled construction supplies; it grants no new stock, people, labor or title and does not establish earned regional supply. Both communities retain health 100, valid food/storage/labor and unchanged predecessor books. All 45 paired canonical water intervals agree.

Both source/release plugs remain fitted, every gate stays closed, and the natural basin retains its stage curve. Actual hydraulic pressure testing, containment authorization, closed-empty storage, permitted capture/release, useful irrigation and recurring maintenance remain required. The earlier dry inspection certificate remains immutable. The separate earned regional 120-day preparation still lacks replacement clay and ore sources; its reserve gate stays false. The full M0–M8 goal stays active. Current saves use explicit neutral schema 38→39 migration, adding only the empty working-controls book and marker. Reservoir construction and implementation status provide details.

Earlier construction notes below are historical where they describe working connections as unfinished; this paid plugged stage supersedes those statements, without superseding their pressure or containment requirements.

Preserved earned regional source preparation: complete, bounded at 120 days. Preceding accepted checkpoint .qa-city/earned-regional-source-preparation-attempt7-closing.json, SHA 60b4c8285d76da1c41d501454fac4de7478f13ad9c52dae3b9dfed588c1af7b3, at 1875499200000, starts from the exact earned schema-38 maturation closing. All seven communities complete 120 daily assessments each (840 total), retain health 100 and every opening active program, and meet water/storage/labor with zero hardship or food shortfall. No migration, material injection, new population, title, research or money is used. The primary three-worker mill completes 120 actual batches/360 timber. The new eighth-community closing above is the current earned continuation; this checkpoint's receipts and original replacement flags remain historical evidence.

Verified outputs: 23 home harvests/483 logs; 223 additional timber; 91½ source timber; 35 source farm batches/385 food; five brick/four charcoal/five metalwork/six forge-tools batches. Seven paid returned repairs spend 56 timber/28 bricks/seven tools. Freight: 21 source trips deliver 134 timber/803 food and return 32 clay; eight forest trips bring 168 logs/48 food; 36 food trips bring 1,872 food; one trip brings twenty stored ore. Three source-to-clay-satellite relay trips bring back 24 food and two actual twelve-clay extraction batches. All 69 trips return. Home closes at about 573 food,36½ logs,51¼ timber,forty clay,fourteen bricks,three iron,two charcoal and twelve tools.

Recurring material acceptance remains incomplete. Clay extraction is twenty-four versus forty consumed; iron extraction is zero versus twenty retained ore consumed. Clay cell 1448814 and iron cell 1452894 both have zero remaining. The result explicitly records clayReplacementPassed:false, oreReplacementPassed:false and fullReserveGatePassed:false. An elapsed 120-day preparation run is not proof that finite material sources are replaced. New surveyed titled producers, returned freight and a new separately measured reserve cycle remain required. Hydraulic pressure, containment, useful supply and the full M0–M8 objective remain open.

The manifest-verified tracked fixture is test/fixtures/earned-regional-source-preparation-opening.json.gz (compressed SHA d65850ff4d3c51c461f8696b05d0ef0f99077c4d52e74b2a6c343e1520d0b973, raw SHA 07338a64a275392b5a417da35014cfeb3733c4eeec7358b2d7690c58560dc34d). test/earned-regional-source-preparation.test.js passes real daily coverage, seven paid repairs, finite extraction and two-leg relay custody, all seven warehouse balances, unchanged grants/coins and exact fresh-engine replay of all 3,176 events. Independent audit .qa-city/earned-regional-source-preparation-independent-audit-attempt7.json separately passes source hashes, restoration, exact replay and 119 stock-accounting checks. This is acceptance tooling; no runtime engine or UI rule changes.

Attempts 1–6 remain preserved failures: an incorrect warehouse counter; excessive source field time without timber production; unnecessary timber exports and missing log deliveries; overweight forest loads in two attempts; and source food exhaustion while home carriers were busy repairing. Attempt 7 holds real source farm phases, caps timber exports to actual needs and fits the complete freight/ration quote. It preserves all original reserve and service conditions. Earlier maturation acceptance remains valid: 117½ days, the two existing children at their saved deadline, 824 assessments and seven repairs; its earlier current-checkpoint/next-unexecuted-run wording is superseded by this preparation.

Preceding next-action readiness was read-only: the root was Town, held five direct outposts and had one sound staffed registry (the older registry was cleared). Eligible City/Regional-capital rows still needed consecutive daily checks and restored Land registry; offices needed real funding/staffing/civic timber. A source household relocation rejected for four missing water places and transferred nobody. The accepted clay continuation above now executes the home capital/registry path with existing residents. The previous 81-case maturation verification and this preparation's single 840-assessment integration/replay case remain historical scoped acceptance. The complete repository suite was not run.

Paid installed-floor inspection (implemented and verified; M8 remains partial). After continuous-floor installation and every earlier crew's physical return, four existing home residents can make a separately paid inspection tour. The twenty-eight-day licence costs four timber, one tool and four food, freezes the installed-floor receipt and walking route, and requires staffed source Hydraulic engineering, Land registry and Public accounting. The tour reserves one tool and finite meals for travel, one complete observation day, at most fourteen waiting days and return. The current thirty-five-step route costs 84 food and carries 85 of 120 capacity. Source Hydraulic engineering and current title remain required throughout the inspection; earlier drain operators are no longer needed.

Inspectors must actually arrive before the observed interval opens. A fresh review first simulates the next boundary, then the entire following water interval. The live opening and closing must match that exact review: zero footprint water, zero bed sediment, no exposure, natural receiving head below floor 455074 and no rain or incoming water during the observed interval. The first boundary starts observation and earns nothing. Only completion of the following full canonical interval spends the tool, records one paid workday and issues the dry inspection certificate. Recall, changed title/holder/service/flow or exhausted waiting sends inspectors home with unspent tool and unused meals; no automatic cleanup or water intervention occurs.

Default-timing acceptance continues the exact accepted schema-37 installed-floor checkpoint without new goods, people, labor, title or hydrology grants. The tour completes in 8 11/12 village days, observes interval 2947→2948 and returns all four inspectors. Its 84 carried meals reconcile as 35⅔ consumed and 48⅓ returned, with no crew hunger, community food shortfall or hardship. Source/home retain twelve/24 residents, eight/thirteen labor capacity and health 100. All predecessor books remain immutable. The closing schema-38 checkpoint is .qa-city/installed-floor-inspection-complete-attempt2.json, SHA d2100a5964db24e9159e9538475308cbfdbfa9a2e67196f69ccae2feb08f216c, at 1855137600040. The tracked manifest-verified starting fixture is test/fixtures/offchannel-installed-floor-complete.json.gz; inherited controlled construction supplies are disclosed below. This is inspection acceptance, not earned regional supply.

City → Land & water → Inspect the installed reservoir seals offers Review dry inspection licence, Review paid inspection tour, Review inspector recall and Review full dry inspection, each with cancel/confirm. Licence and tour acceptance cost one attention each; observation and recall are free. Live gateway checks verify actual payment/refund, full opening/completion boundaries, exact independently advanced persisted state, reload, the inspected map status and layouts at 320/390/640/1440 pixels. Inspection leaves connected lined-open hydrology, natural basin custody and the retained stage curve unchanged. Eight later paired water intervals and offline/stepped simulation-and-receipt replay also agree; invocation revision counters and notification times remain separate delivery metadata.

The certificate proves one actual dry installed-floor inspection only. Hydraulic pressure testing, rated working controls, containment authorization, closed-empty storage, permitted capture/release, useful irrigation and recurring maintenance remain unfinished. Nonzero sediment still needs separately paid cleanup. The independent regional checkpoint gains only empty construction/inspection books through schema 38. Its earned maturation preparation now passes through 117½ days with seven paid returned repairs; the separate earned 120-day recurring reserve acceptance remains open. The full M0–M8 goal stays active. Reservoir construction is the companion specification; living world design remains the primary entry point.

Current inspection-stage verification passes 105 distinct focused cases: five inspection lifecycle/custody tests, five predecessor migration tests, forty attention/budget/household/regional tests and fifty-five water/sediment/routing/City tests. The full observation case was additionally rerun after integration. No full repository suite was run. Independent audit .qa-city/installed-floor-inspection-independent-acceptance-attempt2.json (SHA 07cf7ae23403c2957940eeafa9da51b75d27e46310cc5863da6be3356b9cbe84) checks exact twelve/24 populations and eight/thirteen labor bases, one paid full workday, all meals/materials, whole restoration, immutable predecessors, unchanged later hydrology, rehashed wet-certificate rejection and neutral regional migration. The earlier audit without explicit finite population-field assertions is retained as diagnostic evidence.

The following floor-construction evidence remains valid as the preceding schema-37 stage. Its references to a later qualifying inspection are fulfilled by the separate paid stage above.

Continuous floor and connected lined-open mode (implemented, M8 partial). The completed 214-mass floor/fitting kit now has separately paid joining and installation. Four existing home builders carry four bricks, two dressed stone, two iron, two tools and 88 meals on the current 35-step route. Two whole workdays invest the joining batch, add 18 mass in slot ten and create a 232-mass kit in eleven slots, within the reinforced 240-mass gantry rating. The 28-day stage licence separately costs four timber, one tool and four food. A recalled completed joining remains staged; a later one-day rigging tour pays one tool and 84 meals instead of rebuilding the parts. Each crew has fourteen days of bounded ready custody and real return/unloading.

After joining, four separately paid source drain operators may share this exact prepared worksite. A current-tick actual completed drain pulse must leave zero local water, zero bed sediment and receiving head below floor 455074. The whole next canonical interval must also have zero opening/rain/incoming/closing/discharge and no sediment. The source authorizes the exact comparison; every named current holder consents to both dry lowering and sixteen future lined-open intervals before a separate start command. Title, Hydraulic engineering, crew presence, paid meals, setup/licence expiry and the actual closing fingerprint are rechecked. Lost consent or changed conditions cancels lowering and preserves staged parts.

Successful lowering consumes all 232 staged mass, seals the continuous floor/toe joint and releases eleven slots. Earlier fabrication, fitting, wall and foundation books remain immutable; separate consumption projections show zero staged floor/hardware and all twelve gallery slots free. The original-bed drain operators stop operating and both crews return physically. Installation begins connected lined-open behavior on the following water interval. Rain and separately attributed upslope runoff cross the existing footprint-to-basin interface once; the natural basin owns persistent water. Local film, local evaporation and local infiltration are zero. The raised footprint stays in the natural stage curve. Basin retains its existing wet-bed evaporation and aggregate seepage approximation; this is no claim of reduced whole-basin seepage. Flow above the 50,000-subunit header rating remains explicit open-basin overbank export to the same natural custodian. External sediment uses the same conserved boundary; the covered floor generates no new topsoil erosion.

Default-timing acceptance completes the joining, five actual consented drain pulses, lowering and both crew returns, then sixteen post-return water intervals. One builder tour uses two workdays and 88 paid meals (60 consumed, 28 returned); one source operator tour pays two timber, one tool and 60 meals (29⅓ consumed, 30⅔ returned). No crew hunger, new community food shortfall or hardship occurs; populations/labor remain twelve/eight at source and 24/thirteen at home, health 100. The complete schema-37 checkpoint is .qa-city/floor-placement-complete-attempt3.json, SHA 58883e93ca6c7f578cfe1856fedf2ea1759499d8e0fb72cdf926f59ee021d551, at 1855009200040. Its opening construction stocks are controlled: home {food:1000,timber:200,bricks:12,dressedStone:6,iron:8,tools:30}, source {food:900,timber:50,tools:25}, with all other goods retained. No mid-journey grants, extra people, labor, title or predecessor changes occur. Closing home food/timber are about 1009½/136, source 804½/48; the historical home unmet-food total 26 remains unchanged. This acceptance does not establish earned regional supply.

The earlier proposed requirement for a qualifying inspection before floor deployment is superseded by this exact clear-bed, full-dry construction interval. A separately qualifying post-installation inspection, hydraulic pressure tests, containment authorization, storage/capture/release controls and useful permitted delivery remain required. A construction receipt grants none of those. Nonzero bed sediment blocks this route and requires separately paid cleanup; no cleanup is silently performed. The independent 32-day regional checkpoint receives only empty construction/inspection books through schema 38; its earned maturation preparation now passes through 117½ days with seven paid returned repairs. The later earned 120-day recurring reserve gate remains open. The full M0–M8 goal stays active.

City → Land & water offers Join and install the continuous floor, with reviewed licence, setup payment, recall, source authority, holder consent/withdrawal and separate lowering. Cancelled reviews spend nothing. Confirming licence or setup costs one attention; consent, review and recall are free. The served payment/installed City and map checks verify exact costs/custody, reload and 320/390/640/1440-pixel layouts. See reservoir construction and implementation status.

Current floor-stage validation covers 93 distinct focused passing cases: four floor-placement, four neutral predecessor migrations, 41 attention/water/routing/sediment and 44 budget/household/regional/City checks. The independent audit .qa-city/floor-placement-independent-acceptance.json (SHA 34246c79a41303039f7a0be96334525e15b1cccec861d409ae5a9ff97944148d) derives the paid crews, workdays, mass, meals, retained natural curve and overflow partition. Eight-interval offline/stepped replay matches all simulation and receipt data, while invocation revision counters and notification recordedAt timestamps differ; both resulting whole saves restore exactly. Those delivery metadata differences are recorded explicitly, not presented as whole-byte equality. No full repository suite was run.

Current served payment/cancel/recall/reload evidence is .qa-city/floor-placement-payment-browser-xWvwj3/evidence.json (SHA 5a384ede32afdd14921f2cf70ad5819a8be2e32ee0f0e63c917632b08780ba73). Installed City/map and four-width evidence is .qa-city/floor-placement-complete-browser-rM3MYb/evidence.json (SHA b025b307fa097b0b0d8691dcdbfa48f31811df33f7c5d62ad18a245971f77f59). Actual lowering evidence is .qa-city/floor-lowering-browser-DRHo3m/evidence.json (SHA c4610885801d3ca829b9ea5a8c93534b874dd64893730c563900ab6a49608f3e). The actual lower action also passes source consent and separate start review cancellation/confirmation, a real scheduled canonical interval, independent whole-state advance comparison and installed reload. Initial map QA found stale public fitting labels and initial lowering QA read before asynchronous review completed; the projections and wait were corrected. Failed attempts remain preserved. All successful browser servers shut down with exit zero. Mobile payment/installed cards were visually inspected.

The following predecessor-stage notes describe custody before this installation; their staged/open descriptions are historical, not the current installed state.

Paid closed fittings and reinforced gantry (implemented, bounded acceptance). Five default-timing two-day sponsored tours produce the paid reinforcement and four dry-checked closed collar assemblies. The combined 214-mass kit fits the reinforced 240-mass full-stroke gantry. Collar slots six through nine rise from nine to sixteen mass, all ten occupied slots remain below 42, two slots remain free and unused supported gallery mass is 290. The new book preserves every earlier preparation/drain/perimeter/closure/foundation/lining/wall/floor receipt. Assemblies remain staged, disconnected and uninstalled; no pressure proof, floor sealing, water/sediment movement, curve exclusion, storage or useful supply is granted.

Canonical closing .qa-city/closed-fittings-complete-attempt1.json has SHA d3c71d72e7cc0a83244449b0a56e6508ab4c988a1870995a5254d100d21f116a at 1854576000040, schema 36. Independent audit .qa-city/closed-fittings-independent-acceptance.json has SHA 7b89a2c3fbf8d0c8d92d5b29dcf141c38adea48691718c63875a313cc3f41af0. It independently derives five distinct returned crews, three licences, ten workdays, materials {timber:8, iron:12, tools:6}, licence bills {timber:12, tools:3, food:12}, and meals paid 160 / consumed 156⅔ / returned 3⅓ / carried zero / unmet zero. The 39⅙-day run covers 407 paired canonical control comparisons spanning 39 water intervals. Closing bed sediment remains zero, with no cleanup grant.

The new tracked offchannel-floor-kit-complete.json.gz input is 983668 bytes with SHA 105477eff8558d8fd1a1c2a49d09d3b44fb14a2ee5f0e2f4f38ee83725b67f77 and exact decompressed floor-closing SHA bcdd799241edf1bf6d5e4c040ed105e9110ebeec03c4ea427e5bdafb731f9852. The derived test alone opens the home at {food:900, timber:175, iron:20, tools:25} and source at {timber:50, tools:25}, retaining other stocks and all people/labor/title/water/predecessor records. There are no mid-journey grants. Home timber ends at 77 after eight kit timber, twelve licence timber and 78 ordinary civic timber bills; food ends near 996⅓. Source food ends near 809½. Population twelve/24, labor eight/thirteen, health 100, storage limits and no new hardship/food shortfall remain verified; home historical unmet food 26 remains unchanged. This is controlled construction evidence, not earned regional supply.

Current verification totals 78 distinct passing cases: four new fittings, four floor, ten lining/full-fabrication, 51 supporting attention/budget/household/regional/City and nine focused legacy migration/wall cases. New fittings/floor/full-fabrication cases use tracked portable inputs; the focused legacy selection uses disclosed previously accepted optional checkpoints. The fittings cases prove neutral schema-35 migration, private crew projection, actual exclusive home labor, source operator conflict, two paid workdays, whole-batch partial recall, immutable predecessors, exact restores and forged rating/slot/material/workday/history rejection. This is focused verification, not the entire repository suite.

Actual served City licence/task cancel/confirm, exact payments, carried custody, recall/unload and funded/returned reloads pass: .qa-city/closed-fittings-payment-browser-nm6A0w/evidence.json, SHA 3010277838f467516ca60642125d43459c16c177ca10716ef1980f7c4bf51b6c. Completed City/map checks, no further fitting payments, exact read-only reload and 320–1440px layouts pass after the last UI fix: .qa-city/closed-fittings-complete-browser-EvopgB/evidence.json, SHA 4d623685eca307beec12c41250cd442e137096c42bff04d99a371b39591aaba8. Payment/funded/completed mobile cards and the final map were visually inspected; both servers exited zero. The first unlicensed browser attempt found a missing local busy binding in the new view; it was fixed and a fresh payment/recall run passed. Its failed evidence remains preserved, and the earlier passing completed-view evidence also remains preserved.

Next required gates: consume these actual staged assemblies/modules through separately authorized floor/toe deployment, coherent continuous-floor water behavior, paid cleanup only if needed, actual qualifying inspection, installed/pressure-tested controls, containment and useful delivery. The independent 32-day regional checkpoint migrates neutrally to schema 36, but its remaining maturation/supply schedule and later earned acceptance remain unexecuted. The full M0–M8 goal stays active.

Floor-kit construction acceptance passed (bounded subsystem). Eight ordinary-command tours complete the paid staging cradle, all three floor modules and four interface collars in 72⅔ village days at default 100ms generic work timing and canonical weather. Four paid licences cover 26 actual workday receipts and eight returned crews. Material investment is {timber:16, bricks:48, dressedStone:28, iron:4, tools:16}; licensing adds {timber:16, tools:4, food:16}. Paid meals 296 = consumed 290⅔ + returned 5⅓, with carried/unmet zero. The staged kit holds 186 mass in ten 42-mass slots; gallery unused supported mass is318 and two slots remain unreserved. No floor is deployed or seam sealed.

Full closing .qa-city/floor-fabrication-complete-attempt2.json has SHA bcdd799241edf1bf6d5e4c040ed105e9110ebeec03c4ea427e5bdafb731f9852 at 1854012000040. Independent audit .qa-city/floor-fabrication-independent-acceptance.json has SHA 7b4dfda31b9d34911edb1aa525bf5a3ae1d8455d7ea6269718355312881cfea7. The tracked completed-wall fixture is hash-checked and requires no ignored cache. Four floor tests pass, including whole-state neutral migration, exact paid work/return, recall with the entire unspent module batch, forged slot/material/workday/job custody, source/origin crew conflicts and the complete eight-tour journey. Every checked advance matches its independent hydraulic control: 682 checks spanning 72 canonical intervals. Fifty-one supporting attention, civic-budget, household, regional and City projection tests pass. The first attempt exposed three test-harness assumptions (an already-prepared quote, an intervening community assessment before the work deadline and a public row without proposalId); it created no accepted closing file. Corrected attempt2 passes all four cases.

Opening home construction stocks are controlled:900 food, 250 timber, 56 bricks, 32 dressed stone, eight iron and forty tools. Source timber/tools are fifty/25; its other stocks stay from the wall checkpoint. No mid-journey grant, extra people, labor, title, water or predecessor changes occur. Home civic services and source Hydraulic engineering remain paid; home/source closing timber 72/fifty and food 1008⅙/794½ retain positive supplies. Source/home population 12/24, labor 8/13 and health 100 remain; historical home unmet food 26 is preserved with no new unmet food. Earlier receipts and the original regional checkpoint remain immutable, with the latter migrating only to empty lining/wall/floor books and schema 35. Earned regional supply and full M0–M8 remain open, along with closed component fitting, floor deployment, cleanup if needed, dry inspection, containment and useful water.

The actual served City flow passes separate licence and task reviews, cancellation with byte-identical living state, exact confirmed payments, carried crew custody, recall/unload and funded/returned reloads. Browser evidence .qa-city/floor-fabrication-payment-browser-hbDMhg/evidence.json has SHA 507ae6539ede1da3922b9089609fd48dff8ba186e1f88afd9f567d5cc89f5fb2. The completed state passes City/map counts, 318 unused supported mass, two free slots, absence of further fabrication payments and exact read-only reload: .qa-city/floor-kit-complete-browser-i2oGo7/evidence.json, SHA 0fdcd9cb71f3b7c9a8dc02e5bb5aba5e492906786aa81a17100eed09fb35d452. Both flows fit 320–1440px; mobile payment/funded/completed cards and the final map were visually inspected. Both private servers exited zero. The current selection has 74 distinct passing cases: four floor, ten lining/full-fabrication, 51 supporting and nine focused legacy migration/wall cases. The augmented cradle case separately rechecks public job privacy and household adoption protection; it is counted once. Legacy selections use disclosed existing accepted checkpoints, while floor/full-fabrication tests need no ignored cache.

All six wall faces verified (bounded construction acceptance). The default-timing, canonical-weather command journey completes the separately paid gantry and all six faces in 79½ village days. Seven licences, seven returned home crews, six separately paid returned source operator crews and eight setup workdays persist. The home invests eight timber, four dressed stone, four iron and eight tools; licence fees add 28 timber, seven tools and 28 food. Its 536 carried meals balance as 314 consumed and 222 returned, with no unmet crew meals. Twenty-one actual consented drain pulses find the six qualifying dry lowering intervals. Each successful interval matches an independent hydraulic control, consumes one staged 84-mass pair and frees the same capacity. All 504 gallery mass units are released, every crew returns/unloads and the complete save restores exactly.

No earlier foundation, fabrication, closure, preparation or title receipt is rewritten. Both communities retain their twelve/twenty-four residents, eight/thirteen worker capacities and health 100, with no new food shortfall or hardship. Closing home/source timber is 206/seven; source food remains about 246⅓ and home food 1119⅔. Opening stocks are controlled and disclosed: home 400 timber, eight dressed stone, eight iron, forty tools and 900 food; source fifty timber and twenty-five tools, with its other stocks retained from the input. No mid-journey grant, population, labor, title or water is added. This verifies construction custody and finite upkeep, while earned regional supply remains open. Floor/toe sealing, cleanup, dry inspection, containment, useful water and the full M0–M8 goal remain open.

Immutable closing evidence is .qa-city/wall-placement-six-face-acceptance-final.json (SHA 14f47ca4d401298451a560e215c4708549dd6cc5c3ff2f4c19c2fbeafb390b62); the independent audit is .qa-city/wall-placement-independent-acceptance.json (SHA 1f775d1bb4021d921491261eb479b872c8b2f45aca44c76ad0cb5215d78f0f5d). The original full-fabrication and separate regional-preparation files stay immutable; the latter migrates only to empty lining/wall books. Four wall tests pass from the tracked manifest-verified full-fabrication fixture, including stale wet openings, consent withdrawal and forged custody. Existing fabrication, paid fourteen-task replay, legacy migration, civic budget/labor and City projection checks pass. Served City/map checks verify six installed faces, zero remaining ready pairs, 504 free staging mass, private-field filtering, read-only reloads and layouts from 320 to 1440 pixels. See implementation status.

The actual City payment flow also passes: cancelling the gantry review leaves the whole save unchanged; confirming pays eight timber, four dressed stone, four iron, two tools and 32 quoted meals before an outward four-builder job appears. Carried custody and exact funding survive reload without completing the gantry. Evidence .qa-city/wall-gantry-payment-browser-5JtHGp/evidence.json has SHA 4d5f5a1a3604b3d2ce34a3d9513fa486543e675b5c77bdc88bd994ca4d22f157. The payment review and funded card were visually inspected at 390 pixels; the card fits all four tested widths. Both served browser servers shut down successfully.

Paid wall placement (implemented; floor and water use remain planned). After all fourteen fabrication tasks and their crew returns, the founding home can separately license and fund a lowering gantry. The two-day gantry costs eight timber, four dressed stone, four iron and two tools. It spans the 2,256-height-unit stroke from deck 457330 to floor 455074, is rated for 200 mass units against each 84-mass face pair, uses no cassette slots and intercepts no rain. Existing curtain gear supplies no free lowering rating.

Each face has its own paid four-builder home tour and one-day setup consuming one tool. Its crew waits at most fourteen village days on finite carried meals; the source separately pays and sends four drain operators after setup. Both actual crews, Hydraulic engineering, title, current licence and safe access must remain available. A new actual current-tick dry drain opening precedes a fresh wall-lowering comparison and every named current holder's consent. The separate lowering command commits one complete next canonical interval: opening and closing water, rain and incoming water must all be zero, the receiving head stays below floor 455074 and bed sediment remains unchanged. A changed opening, lost authority/operator or withdrawal cancels lowering without consuming the cassette.

Successful lowering consumes two already paid staged halves, installs one face and frees exactly 84 gallery mass units. The original fabrication asset, receipts and material investment remain immutable; a separate consumption ledger supplies City/map installed counts and current slot availability. The floor remains open and toe joints unsealed. Walls alone change no water, sediment, ground, natural curve, curtain position or reservoir operating authority. Paid gantry and setup receipts retain their physical crew histories; recall returns unspent carried goods and meals but retains completed work and spent setup tools. See reservoir construction.

The 28-day stage-specific licence costs four timber, one tool and four food from the home sponsor. Both licence and tour funding cost one attention; opening/cancelling a review, consent and recall do not. Applicable operating budgets cover exact separate licence, gantry and setup bills. At the current 35-step route the gantry tour carries 34 material-mass units plus 32 meals (66/120); a face tour carries one tool plus 84 meals (85/120). The source operator tour and both communities' continuing food/civic upkeep are additional bills. These bounded construction mechanics do not establish earned regional supply or close the full M0–M8 goal.

Paid lining fabrication (implemented; floor sealing and water use remain planned). A completed twenty-lift foundation with every construction/operator crew returned can now support a separately licensed gallery and wall-section workshop. The founding home pays and sends four existing builders; the source retains title and active Hydraulic engineering. Two separately funded four-day gallery assemblies precede twelve six-day wall-half tasks, two per perimeter face. Each task carries its actual materials and travel/work/return meals within capacity 120, completes atomically, then returns and unloads. The material bill is 60 timber, 126 bricks, 84 dressed stone, six iron and 28 tools across 80 workdays, before travel, licences, meals and source service upkeep. This is fabricated site custody, not installed lining or a working reservoir.

The lining book is introduced by major-waterworks schema 33 with an explicit empty migration from 32. Its licences, immutable task receipts, staged slots, job/history material custody and four-person labor are separate from the paid foundation. Recall preserves completed tasks and returns the whole unfinished batch after physical travel/unloading; elapsed incomplete labor is not banked. It adds no wall installation, floor, storage, capture, release, flow permission or free sediment conversion. A fresh licence is needed when switching from gallery construction to elevated wall fabrication. The complete fourteen-task journey now passes construction-subsystem acceptance under default timing and canonical weather. Its controlled opening stocks leave the earned material economy gate open.

Complete lining fabrication journey verified: From the immutable full-foundation checkpoint, all fourteen tasks finish in 161⅔ village days with seven paid licences, fourteen exact task payments and eighty sequential paid workday receipts. Gallery investment is twelve timber, six bricks, twelve dressed stone, six iron and four tools; the twelve wall halves add 48 timber, 120 bricks, 72 dressed stone and 24 tools. The 656 journey meals conserve as 646⅔ consumed and 9⅓ physically returned. Licence fees additionally spend 28 timber, seven tools and 28 food. All fourteen crews return and unload, leaving twelve staged halves, six ready face pairs, zero free gallery-slot capacity and no active job. No wall/floor is installed and all water-use flags remain false.

Both communities retain their actual populations and worker capacities, health 100, no new food shortfall or hardship, active source engineering, and valid labor/storage throughout. Sponsor closing stock is 883⅓ food, 28 timber and seven tools; source closes with 942.5 food, one timber and 10.5 tools after 162 actual Hydraulic upkeep days. Ordinary transient registry/accounting services authorize each payment and are suspended before elapsed work; source stocks receive no grant. The sponsor's explicitly controlled opening profile is 750 food, 116 timber, 126 bricks, 84 dressed stone, six iron and 42 tools. This isolates physical construction and custody. Actual canonical rain adds 552,000 surface subunits at the worksite, with receiving head ranging 448806.33–449369.76. Every full-trip lookahead passes at its first candidate; no paid trip waits or interrupts.

Independent validation checks all fourteen returned checkpoints and final projection. Across all 1,290 live advances, the paired no-lining control has identical water, sediment, foundation-ground and isolation books. Replay from the controlled opening applies 367 actual live commands and the same 1,290 advances, reproducing the entire final state exactly. The immutable predecessor and all ten retained preparation/drain/perimeter/closure/foundation/isolation books remain unchanged. Completed-state served City and map checks pass final counts, no further fabrication funding/licensing actions, exact read-only reload and all four widths; narrow and wide cards were visually inspected. The separate first-trip recall flow remains valid.

The durable test/paid-offchannel-lining-journey.test.js passes all fourteen command-funded journeys from the manifest-verified tracked fixture in about 102 seconds, using default timing and no ignored local checkpoint. It checks exact payments, live food/health/labor/storage bounds, all fourteen retained returns, eighty workdays, gallery-slot exhaustion, immutable foundations/grants, actual rain, inactive water-use flags and exact final reload. This adds one passing integration test to the earlier 75-test verification selection; no case is skipped. Run it with node --test test/paid-offchannel-lining-journey.test.js.

Immutable full-fabrication checkpoint .qa-city/offchannel-lining-canonical-attempt1/complete.json closes at 1851820800040, SHA 701a870668d75e3bf439af89b9e132d565d20cf009ca025957c9e2f57f0a6723. Execution audit SHA is 6fbdab0d5da95049de04ce23711cf8b3a57525d9c5885832dc1b6c8f2151ee11; independent acceptance .qa-city/offchannel-lining-canonical-attempt1/independent-acceptance.json SHA is 6a169b5e1e4c27093cdee20dac8c28cf38faea702554c539448a34cda7543b5e. Completed-state browser evidence .qa-city/lining-complete-browser-dtu11t/evidence.json SHA is 24a66f38235d6019825794d1c8c8dd4b76c399edf8d20fd008df214089aaebf8; its server exited zero. Earned regional supply, floor sealing, cleanup/inspection, containment and useful water delivery remain required by the full active M0–M8 goal.

Lining verification: All nine portable lining tests, fifteen older-save migration regressions and fifty-one supporting regressions pass. The new compressed fixture retains the exact canonical completed-foundation state with a checked hash manifest; tests require no ignored local cache. Its controlled initial construction stocks and earlier accelerated supply bootstrap remain disclosed. Tests cover daily authority/site checks, atomic payment and material custody, gallery capacity, stage-specific access, budget booking, recall, pinned history and strict restore rejection. Four independent behavioral checks additionally verify funded and first-step-recalled City projection and exact restoration, touching-versus-overlapping historical custody, and the older outlet operator's source-side conflict guard.

The served browser check passes licence and funding review/cancellation/confirmation, funded server restart, one actual outward step, crew tracking and staged map counts, recall, physical unloading, exact returned reload, private-field filtering and all twelve layout checks across 320, 390, 640 and 1440 pixels. The funded, returned and map cards were visually inspected. It completes zero fabrication tasks and returns the entire unfinished material batch; it is a bounded City-flow check. The preserved first browser attempt found the immediate recall-status mismatch, now fixed and covered by regression. Both final test servers exited successfully.

Final lining source SHA is e69a5392502ceaf37bd927fb4637cb8da20017dc84b389cf30b644ff011bd4de. Evidence: .qa-city/major-offchannel-lining-focused.txt, SHA 2ed2724b50d29e4669b6c02a45f971b69024829e0ba3cd67f820ecf258f40639; .qa-city/final-lining-behavior-audit.json, SHA c4c3296f670f17469283ef186684d111b601c9f37c375146b4ce4c170d13941d; .qa-city/lining-browser-evidence.json, SHA 9e2b6f90ecb002cdf1b8f3e9d8c83f827eabd24acce9d5d9cfeb15be2ad6d72d. Final migration evidence .qa-city/lining-legacy-checkpoint-migration-final-evidence.json, SHA 0f9c4991dc4beb6607de4bdf2c42d255cc5d3d37812baec27321a416d4017968, confirms that the full-foundation and accepted regional-preparation inputs remain immutable, migrate only their two schema markers plus the empty lining book/marker, restore exactly, and reject ten malformed states. No simulation time or commands are advanced by that migration audit.

Remaining M8 work is separately paid sediment cleanup/spoil transfer when needed, hydraulic pressure tests, containment and useful permitted water delivery. The actual paid installed-floor dry inspection is completed and recorded above. The installed connected lined-open mode gives the natural basin sole persistent water custody, exports local rain and separately attributed upslope bypass once, and avoids a duplicate local evaporation/infiltration pass. Fabrication alone does not enable it; the separately paid actual floor-lowering receipt does. A proposed high-side spoil rack additionally needs a separately paid full-stroke hoist and actual authorized cleanup intervals; existing curtain gear cannot lift sediment to the higher rack. Those later proposals and their hydrology remain unverified. The full M0–M8 objective and earned regional supply gates remain active.

Regional preparation: first 32 days verified. The corrected fifth bootstrap completes 224 full daily assessments across all seven continuously inhabited communities. Four physical forest returns deliver 96 logs, six additional mill batches produce 24 timber, three sponsor journeys deliver their paid cargo, and a normal well repair spends eight timber, four bricks and one tool. Every community retains health 100, no new food shortfall or hardship, required services and valid labor, water and storage. All seven trips return and unload; the default-timing save restores exactly. This accepts only the bounded first 32 preparation days. The remaining 112.5 days, normal maturation of the two existing dependents and the later 120-day recurring-reserve test remain unverified.

The accepted bootstrap closes at 1872079200000. Immutable closing snapshot .qa-city/satellite-child-maturation-preparation-bootstrap-attempt5-closing.json has SHA 722cba8c58be74290e83c2ee5494a7d13489339b7642227c071061e3ef1e3e5e; report SHA is ea13676da65d77dfac9f73d7f2a9f831c02efdcd7f178c2b230cbb8278294a8a; independent evidence SHA is 17d739d964e3b6c7f34622428618a09349ac4a8ef41728d44465d5ea883f821a. The runner's historical bounded-bootstrap-complete-unaccepted label predates these bounded acceptance audits. It does not mark the whole preparation accepted. The oldest forest warehouse row has aged out of the bounded receipt ring; its archived execution witness is corroborated by cumulative custody and the three retained return receipts, rather than claimed present in the final ring. The process exited successfully and no process remains.

A review-only remaining 112.5-day schedule now reconciles the accepted checkpoint. It proposes 21 additional manual home harvests on two existing owned plots, yielding 441 logs against 538 remaining log use and closing at18.5 logs. It includes 171 additional milled timber, 107 sponsor timber exports and seven further actual paid repair windows, with projected closing timber 18.25, bricks 12 and tools 2. The author separately computes ecological eligibility, four-second physical harvest completion, staffing and trip exclusions; these are static checks, not earned receipts or acceptance. The unexecuted schedule is .qa-city/satellite-child-maturation-remaining112d-readonly-schedule.json, SHA b24dcebfc3044ef03967fe8aa044db3a5f4ecdda03c91b822d07be04e395b93f. Exact source migration, live quotes, actual repair times and both maturations remain required. The bootstrap closes with 115.5 home logs:76.5 opening +96 freight +63 harvested -96 primary milling -24 additional milling.

Full twenty-lift foundation verified: The final thirteen cycles complete from the immutable returned-seven checkpoint in 104 village days using the default 100ms generic work unit. Every lift has its own paid licence, carried batch, source operator tour, actual dry drainage, current-holder consent, placement, reopening and both crew returns. The completed asset has 50,000 fill, bed455074, twenty placements and no active construction or operator job. Independent audits confirm forty distinct returned crew jobs, exact save restoration, immutable earlier work and rejection of a twenty-first lift. Temporary exclusions are removed; storage, capture, release and live-flow permissions remain false. This is construction-subsystem evidence from disclosed initial stocks, not earned regional-economy or full M0–M8 acceptance.

The final continuation pays home52 timber,26 tools,130 rough stone,65 clay and52 licence food. Builders carry1,092 meals, consume416 and return676; operators carry780, consume about86.667 and return about693.333. Source setup uses26 timber and13 tools, with another10.4 tools consumed by104 actual Hydraulic-engineering upkeep days. Home closes with24 residents/13 workers, about401 food,21 timber and13 tools; source closes with12 residents/8 workers,680.5 food, one timber and26.7 tools. Both retain health100, zero hardship/new food shortfall and valid labor/storage. Mira dies of ordinary old age during lift19; public handover to the existing nominated resident preserves funded job409, and a living successor is nominated without grants.

Accepted completed snapshot .qa-city/offchannel-foundation-complete-from-seven-attempt2.json has SHA c9e10e66447172b40046e474975700e6632e21e9f91172cfaf22c31d10844835. The execution audit is 5c79a9204c4ca955e9e644aab81435056a2e49c3ff2096a5b7c214503101247f; independent full-return audit is ab4ef9073b163c937ca5d48b6edd01fff37d9b9743c9612a4920195d0ee26900; payment/succession supplement is 4bd99b5a9f20af3f8a9aa2a54d9c1f9c84b0cfa047029d136d5ab91c6b01ee20. Session8799 exited0 after641 commands and988 advances; no process remains. Runner 315f6466b231bd87d81fa8e95b8620f6a7fd94230ca988a299a343f3f2f2b9b6 uses the fresh guarded attempt2 command sequence; the rejected collision candidate and earlier stopped branches remain preserved. The earlier supply bootstrap used accelerated generic work and retains that limitation; the final thirteen cycles use default timing.

Historical continuation recheck: command-ID collision caught before execution. The original remaining-thirteen runner was not run. Its serial starts at zero with the previous continuation's foundation-remaining18-after-bootstrap- prefix; the returned-seven input retains185 receipts using those IDs. ZoneEngine.validateEnvelope correctly returns a same-actor receipt as a duplicate before checking a new payload or revision. A reused ID therefore replays an earlier command instead of performing new work. This is a harness defect, not a change to runtime idempotency. The earlier timing/resource review remains informative but is superseded as execution approval. The successful attempt2 replacement uses a unique prefix and asserts absence of every new ID before submission. Independent evidence .qa-city/offchannel-foundation-remaining13-command-id-collision-review.json has SHA 1eb922273034a820950ddd0b6022599289504e41da9832a7644ef55de930cd11; the accepted returned-seven input remains unchanged.

Historical remaining-thirteen candidate: superseded without execution. The frozen continuation starts from returned-seven SHA 9921847041d580c1165f678864b0d2921a10d0618384be84befc628020e97cd6. Runner .qa-city/continue-foundation-remaining13-from-seven-attempt1.cjs has SHA e5aff986a3beed8556cbe119a39dfb19cc11227023aaeca0c734b5774a56fa70; read-only preflight SHA 27f707136b918f86186f863a1b72405d8c206babb690ad31b08092f5d50136e7; independent review .qa-city/offchannel-foundation-remaining13-from-seven-independent-review.json SHA 05e1daf21b8db20de5dd93541d9a0b967defd3da3d96d81972adf123c3c3cd1c. Syntax and default exact restoration pass. No simulation or command has run through this candidate.

Actual operator route/setup and station coverage are checked before dispatch/payment. Too-near openings are skipped with temporary services suspended, inside the original prepared-batch expiry. Remaining material bills are home52 timber/26 tools/130 rough stone/65 clay and source26 timber/13 tools, plus actual source Hydraulic upkeep and carried food. Expected non-food closing reserves are home21 timber/13 tools/zero stone/clay and source one timber with positive tools after upkeep; only actual receipts can establish them. The runner retains current-holder succession, changing labor, immutable seven-lift prefixes and full reload checks. This candidate's104-day estimate was unobserved at review; the distinct attempt2 execution above subsequently observes that duration. A cosmetic final assertion still says eighteen bills while its numbers correctly represent thirteen; the reviewed runner remains frozen. No lining or permanent-containment work starts at this boundary.

Foundation continuation through lift7 (returned checkpoint verified): Starting at accepted bootstrap6, lifts3–7 complete through separate paid licences, carried batches, source operator tours, fresh drainage/reopening forecasts and current holder consents. Every lift reopens, returns both crews and restores the full state exactly using the default generic work unit. Lift3 takes8.333329 village days and lifts4–7 each take eight. The five cycles consume exactly20home timber, ten home tools, fifty rough stone and25clay; source consumes ten timber, five operator tools and four tools across forty daily Hydraulic bills. Food, health, hardship, labor, storage, grant/water limits and historical custody remain valid.

Preserved returned snapshot .qa-city/offchannel-foundation-seven-lift-returned.json, SHA 9921847041d580c1165f678864b0d2921a10d0618384be84befc628020e97cd6, is an exact copy of the last returned progress checkpoint, not the failed branch. At 1847995200040, it has seven lifts/17,500fill/bed451824 and no active foundation or operator crew. Home food/timber/tools/stone/clay are about753/73/39/130/65; source food/timber/tools are921/27/50.1. Home remains25residents/14workers, source12/8, with health100, hardship0 and no new food shortfall. It is the input for the remaining thirteen cycles. Mira's later succession still lies ahead.

Later eighth-cycle timing stop (not accepted): Continuation attempt2 then pays/prepares job387 and dispatches operator job388, but stops before authority, pulse or placement because setup 1848054000040 equals the proposed opening. The required strict setup margin is absent, even though station expiry would otherwise suffice. Failed snapshot SHA 05a6aa1bf171785dc1bb11dc94e47e3bd6decabed5e96ecc9aea7f58241d6527; diagnosis SHA cec6bb4946417e96efef0f9543ce18154103fccb67cdbcc4ec76105a003d74e6. Independent default restoration/invariant evidence SHA 5b9ce478edcfaf4db28ca8d0d0ea355d31388aed95a2856fbf18ec9d70211735 confirms the seven installed lifts and unplaced paid eighth batch. A new schedule must obtain actual operator route/setup feasibility before payment and skip too-near openings within the original ready deadline. Do not continue by treating paid travel or projected setup as completed.

The first continuation attempt stopped earlier on a strict-mode runner declaration error (openingDeath), before any third-lift operator or placement; its failed SHA 256968eeba90b5dbc5d35945b096f1527dc2af02a5adc06dec7b14afc062ffb4 remains separate. Attempt2's runner SHA 9b0a29ef2450bc2ff8c79af9331ff7a79d1e80fc7ec8cb1f57d79b57e16b6fb7 changes only output/env names and that declaration from the original reviewed runner. The five returned lifts are verified subsystem evidence; no full twenty-lift, earned regional-economy, lining or reservoir-operation acceptance is claimed.

Paid foundation supply bootstrap, attempt 6 (passed): All ordinary-command steps now complete from immutable two-lift input SHA 6520a8e1409b7b567dfad79a05af8f7399f37d60bb3ad6602236baf765802170: two paid forest titles, six harvest/clearing jobs, 168 actual logs, a reviewed log-production allowance, 42 mill receipts producing 126 timber, lodge construction, Scouting research/adoption and the physical exchange. The 37-step dry detour carries seventeen meals, delivers forty tools and returns 21 timber. Both carriers unload; Scouting is suspended and the lodge unstaffed normally. No new residents, inventory, labor or water are granted.

The 55.666671-day check includes the founder's and Jonas's normal age-85 deaths. Lawful handover appoints Mira, then ordinary adoption names an existing younger civilian and nominates that person as successor. At 1847414400107/tick2414, home population is25, worker capacity14, assigned field workers8; source population12, capacity8, assigned field5+Hydraulic2+registry1. Home food/timber/tools/stone/clay are about674.667/93/49/180/90; source food/timber/tools are898/37/59.1. Storage is1086.667/1400 and1073.1/1400. Health100, hardship0 and no new food shortfall hold throughout. Two lifts/5,000fill remain unchanged and exact reload passes.

Accepted snapshot .qa-city/offchannel-foundation-remaining18-bootstrap-attempt6.json SHA 7dfe4f5eb1cc58fae62e0d0064040edd42f2f644d4b4af66d11e5fb92e7cb2fb; audit SHA 68f175d362eee45933ecf449f989e9c567b6625d480338ecaa42602a3f927b59; runner SHA 646603b6ec3ba0ab5a97841587b76439b757ddace479493062950977253679c1. Root independently verifies hashes, 42 receipt totals, exact exchange deltas and returned-job absence. The old remaining-eighteen runner remains blocked; a new continuation must use actual stocks and living workers, including Mira's later succession. This is construction-subsystem evidence from disclosed controlled initial stocks, not the seven-community earned-economy gate or full M0–M8 completion. The QA harness uses a one-millisecond generic construction/forestry work unit instead of the default100ms; village-day production, research, travel, lifecycle and hydrology retain their own clocks. Default generic-work pacing is not established by this run.

Bootstrap attempts 4–5 (failed harness assertions, preserved): Attempt4 completes milling, lodge and research, then incorrectly compares the research provenance record to true; snapshot/audit SHAs 06d083ac22e2dae987b917cb402a3bee323f66512f28b714480fe724c1bc2f91 / 47abdf12b04744a508e4fc4363c95b6c146eaa07754a59155d67c241370484bb. Attempt5 also completes adoption and the entire physical exchange but rejects the retained zero-food entry in delivered cargo before final staffing cleanup; snapshot/audit SHAs e43a8f95677a50d9f770bc68de5703b8a24dbd92468a9e2e5e1463943a931349 / 274130f4ed9707b912d07577aafc63e1fe06c8dfe1c02b5c550e1c34ef3bfd4e. Neither failed file is reused as the accepted input; attempt6 repeats the full sequence from the original two-lift checkpoint with source-checked assertions.

Historical lining specification review (superseded by the paid fabrication and wall placement above): Source review rejects the earlier35-package/93-day derivation: hydraulic areaScale=10 is not ten construction lanes, and protective cover cannot make a continuous installed floor hydraulically neutral. Review .qa-city/offchannel-lining-next-safe-increment-review.json has SHA e364a830d4e02e46deafd61fedee496228c94986a38fdae87f9465518908ffc3. The subsequent full-route proposal .qa-city/offchannel-lining-full-route-proposed-review-v2.json, SHA f8a4962dc2fc56f1def5592e20d672b9024af4e7eb97250cd93291de6f7ad1b4, distinguishes sponsored deck fabrication, durable uninstalled modules, six dry wall placements, floor deployment, paid inspection and separate containment. Its104 workdays and timber58/bricks168/dressedStone100/tools47 are unfrozen proposals, excluding licences, meals, operator tours and later controls/containment. At that historical review no lining source or schema implementation had begun. Fabrication/schema 33 and wall placement/schema 34 are now implemented as described above; floor deployment, inspection and containment remain planned.

Supplement .qa-city/offchannel-lining-full-route-supplemental-review.json, SHA a483c87b1c8bc4d5893efce59f30948d4826841448b39dd7515c3bbb29a4a93b, leaves two required design proofs open: connected-bay surface and natural-basin storage must not count footprint/backwater volume twice, and a full canonical dry inspection must actually be attainable after rainfall, authorized drainage and receiver effects. The candidate is therefore not accepted as a complete hydraulic design. The full20-lift returned checkpoint now passes; the unresolved hydraulic model still gates floor deployment, and wall-only or module-only work cannot replace the full floor, inspection, containment and useful-water goal.

A subsequent source-only single-custody proposal is preserved at .qa-city/offchannel-lined-open-single-custody-readonly-design.json, SHA 6c8342086501c3ab364bf9673bae52e48caecfe2d09550e254cd04db1591b5a5. Its corrected loss/cleanup supplement is .qa-city/offchannel-lined-open-losses-and-cleanup-supplemental-review.json, SHA dea1f1e851c789cb1639005322e532634a92f530eb5e9abf6fcfe8e23ffd29b8. The proposed connected-open mode keeps all persistent water in the natural basin, retains the raised footprint in its curve, and uses zero Surface storage/local losses. Direct rain and upslope bypass cross the existing edge once; the basin alone pays wet-bed evaporation and its existing aggregate seepage. That aggregate approximation does not measure liner yield. The earlier local250 evaporation proposal is superseded because it could duplicate the same flooded footprint loss. Nonzero sediment cleanup still needs an explicitly paid mass capacity and supported spoil location; until implemented, deployment must reject a nonzero bed. The full dry inspection requires an actual post-foundation replay. These are proposed contracts, with no lining runtime, migration or paid operation yet.

Regional preparation scheduler: bounded trials remain unaccepted. A default-timing executable now replaces the earlier average-only hypothesis. Using the sponsor's455 opening food, its revised plan uses27 sponsor trips carrying117 timber and1,143 food, plus46 shorter food6 collections and four forest3 log returns. Corrected flexible demand is488 worker-days plus0.013333 paid forestry work, against627.5 available across144.5 days including the extra worker before day49.5. This paper margin does not establish a feasible timed schedule. The full preparation, normal child maturation and subsequent unchanged120-day measurement remain required with all seven communities continuously inhabited and supplied.

Bounded attempt1 stops at zero elapsed time after pausing one mandate: child outpost8 must use its persisted sponsor outpost1 as command authority, rather than founding home village7. Attempt2 fixes that authority and adds explicit zero-hardship, cumulative-unmet-food and current-meal-shortfall checks at every event and daily assessment. It names two existing dependents and funds the first forest journey, then stops before time advances because the helper mistakes the next single walking step for the entire outward journey. Its carried24 logs and12 paid rations remain in the failed branch; they are not a returned harvest or free replacement stock. Both failures are runner defects, not regional sustainability evidence. The accepted regional input remains SHA 4746644b25d2bceca3d97ca70bc1b5f8d4cc0f975afbb009299587388de360ec; further attempts need distinct files and source-correct route/receipt checks.

Bounded attempt3 corrects first-step versus full-route timing and binds the intended arrival/return receipts. It reaches 1871622000000, about0.25 village day after opening, then fails an observer assertion during the first household assessment. knowledge.advance runs before household care and the final increment of economy.days, so observing unchanged days there does not mean the game skipped a day. The failed branch is a partial assessment, never a continuation input. Report/closing SHAs are 00df0dc4d09533a131c9a98a20b8bd6fc71737fa5c525dfa76c704072827d672 / f0909cb5ac2e0701a33c73aad3664906a1bb5d9ca1d8d8e037912f9c86857601. The replacement observer must wrap the whole founding.advanceNeeds(engine, at, 1) call, verify exactly one community completes its due day, then check all seven communities after care; the post-engine-advance guard must still cover subsequent crew scheduling. No completed bootstrap or regional economy is established by this trial.

Bounded attempt4 completes five village days and the first physical forest return before stopping at bridge-stock-1: exact idle-mill receipt missing. Its whole-Founding observer now records35 completed daily assessments, five per community with contiguous counters and exact due times. The24-log journey reaches the forest after two days and unloads at home after four. Independent read-only evidence .qa-city/satellite-child-maturation-preparation-bootstrap-attempt4-independent-evidence.json, SHA d9586c5d67c175951fa2372c67d0572db7d32a7feecc06bc4cdf311d8ca977c7, verifies those receipts, all seven communities' health100/zero hardship/zero food shortfall, current services, labor/storage/water bounds, unchanged grants/coins and exact default restoration. Report/closing SHAs are 7b127cad1b288238d5326a8711c0937ba30bf2452a675acdec3c52a34a289775 / eee4c256d0f0244d21e5619e5ab5f039cb3f347a137a3cc78ed21181c301a4bf. This is bounded five-day evidence; the bootstrap remains failed and is not the accepted continuation input. The next correction must wait for an actual mill receipt at a completed community production assessment, not merely reach a structure timer.

Attempt1 report/closing SHAs are 2ec9a7533ffce2c67070a5445dc49bcff3dfb41b0e3f1e49ea6c770f0f88e042 / 9f5a0535f4a4aa8bc6c2f31041222454d0c5dfea88aefa79d0405229fb38692a; attempt2 report/closing SHAs are 2e7516ea77168dab5135da93239d98fca523cb003ba4a2834a1a1857c30fe138 / d05a8dc5bf69b971c80e010074311cd8b13cbb4a9696c6a3e7f1221f50d8b6c2. All seven retain food, health100 and zero hardship/food shortfall at both zero-time stops. Neither failed branch replaces the accepted input. The bounded bootstrap does not yet execute the full plan's46 food collections, so a later food guard may expose a further schedule defect.

Historical regional preparation ledger (v4, superseded): .qa-city/satellite-repair-reserve-child-maturation-readonly-preflight-v4.json, SHA ef4ce09c12c5158154618d67937954bb872816d74c7261c38121860bfd3d7bc9, corrects integer batches and default4,000ms harvest timing. Its571-worker-day estimate below predates the revised two-trip sponsor cadence; preserve it as historical review evidence, not the current executable schedule.

Two ordinary adoptions select existing dependents who reach working age after144.5 village days, granting no residents, labor, meals or goods at adoption. All seven communities must remain inhabited during preparation, the later 120-day measurement and closing. The earlier evacuation/refounding proposal is rejected because it leaves an outpost empty for3.667 days; a temporary home water-capacity overflow is an additional problem, not an accepted shortcut. Home's existing worker death after49.5 days remains part of the schedule. The extra worker available before then is separate headroom, not included in the conservative four-worker average.

Corrected recurring bills are three home timber per day, including Urban sanitation's care service, and two sponsor timber per day. Sponsor staff-two milling consumes two logs for1.5 timber before forestry pauses; the prior observed average is1.2. Proposed sequential sponsor loads carry nine timber plus33 food, then51 food and21 food over each10.5-day cycle; food6's short route and four forest3 log loads reduce other carrier demand. Actual receipts, local storage, ration reserves and the single-team-per-outpost rule still govern every departure.

For the144.5-day preparation bound, integer production requires636 home timber, including204 idle-mill worker-days beyond432 primary output. Total log use is664, covered on paper by76.5 opening logs, exactly24 paid home harvest receipts of21 each and four24-log forest3 returns, leaving12.5. Nine paid repairs, six brick batches, two charcoal batches, two metalworking batches and three tool-forge batches are included. Flexible demand is571 worker-days, or3.951557 of four workers; the0.048443 average margin does not prove concurrent tasks, harvest boundaries or actual bill coverage. A missed home harvest has no receipt slack in this ceiling. Root source review then corrects v3's inherited40ms forestry assumption: default work40 ×100ms takes4,000ms per harvest. Preserved v3 SHA 3422598ca95eaf7b8972d529501dfd8961eadd510cc4df33d53b8f33edceecb9 is superseded by v4. The base571 worker-days excludes actual forestry (another0.013333 worker-days for24 two-person jobs) and boundary contention; issue and receipt within the same village day remain unproven. Source zone-engine.js SHA 255a83ccde29c0f9446f63823370704f3698d9e7ad29f59a3b07196111604d7e binds the timing correction. Whole batches cannot be borrowed from future output. A complete timed preparation must be reviewed and then observed before any120-day acceptance claim.

Regional reserve attempt 29 (not accepted): Keeping the sponsor mill staffed lets the first {timber:2, food:47} and second {timber:4, food:43} shipments complete sequentially. Actual sponsor timber reaches 7.75 before the forestry pause, covers three civic bills, receives 21 harvested logs and resumes milling. The later inherited repair helper sends a food-only load while sponsor timber is 1.75, occupying its sole supply team. The physical-stock guard stops before the next bill at 32 measured days. All seven communities retain exact daily coverage, health 100 and zero service failures. Home measured timber stays at least 16.25; closing home stock is timber 36.25, bricks six and one tool. Exact restore, founding-grant and coin checks pass; duration and empty-closing-freight gates do not.

The ten-day cadence portion records 24 idle-mill timber, but no full fifteen-day target window. Sponsor local timber averages 1.2/day and imports 0.6/day against two daily upkeep; the earlier proposed 5-per-nine-day import rate does not cover this observed forestry cadence. Further work must schedule a funded mixed shipment before the last safe departure time for repair, then reconcile actual longer-window food, log, timber and labor flows. No attempt 30 has started. Audit .qa-city/satellite-repair-reserve-attempt29-audit.json SHA 45ddb5734787ab19acaebf1df40354488a740a2b2bc8c75532477c7ac4a5f437; report SHA 72ad8648103f8107e08ce0f4945ed82cebaea964ccc6386d7c47f1bbb7155725; closing snapshot SHA c37af2945aac57efef038abd335daf5a298b90521f8171ad9b735a92d0dc57fe. The accepted input remains SHA 4746644b25d2bceca3d97ca70bc1b5f8d4cc0f975afbb009299587388de360ec.

Bootstrap trials 1–3 (historical failed trials, preserved separately): All three branches start from the immutable two-lift input and complete ordinary paid surveys, registration of 1428299 and 1430347, and selective harvest followed by clearing on those plots and 1434444. Actual yields are57,57,54 logs. Trial1 stops on a stale test-runner mill reference; trial2 exposes charter production at community boundaries rather than directly at a structure's due time. Trial3 corrects timing but has no budget log allowance, then reaches the founder's natural death after19.50000465 days and fails its fixed-population assertion. Health100, sufficient food, unchanged grants/water and exact restore hold. The accepted sixth trial above subsequently verifies the ordinary budget review, lawful succession and surviving-worker schedule.

Trial snapshot/audit identities: 1 699d74f876ded662dd6517b28fee9a56a8851ba16fe4c872aa6cda3225203ab8 / bb3af70d14a1929e051e41315800a84f73d7151ed10d5bb6b85f533a99f8aefe; 2 9f97b615167cbae5329095a4e5a2a7640f7e007305bac3bc7773413a503b9e82 / 5c3d053dc5d131707fd03208a7c0981b4b17c062ddc4207fafeb84d4e09b1812; 3 5ea1e68c4737089d9e80737981afdb03dfae5c539bdf2a1b0a955dd3a68696cc / ccdbea3caba2d05d0dea92c07cbe2495e0ab1e89e76f63a6b13c07d8c314f1a7. Paths use .qa-city/offchannel-foundation-remaining18-bootstrap-attemptN-failed.json and the matching -failed-audit.json. Root independently verifies these six hashes. These are bounded construction-subsystem trials from controlled initial stocks, not earned regional-economy acceptance.

Regional reserve attempt 28 (historical failed trial): The immediate two-timber bridge arrives, but the next four-timber shipment remains outward when the sponsor's next civic bill approaches. The physical-stock guard stops at25 measured days with sponsor timber1.25. All seven communities have exact daily coverage, health100 and zero service failures through the stop. Home timber stays at least16.25 and closing stock retains a full repair bill; nonempty freight and unfinished duration fail acceptance. Actual idle-mill output is four timber over three days, without a fifteen-day cadence window. A simultaneous second team to the same outpost is prohibited by OUTPOST_TEAM_BUSY; the initial overlap suggestion is superseded. Attempt29 above corrects the early forestry schedule but reaches a later repair-entry failure.

Attempt-28 audit .qa-city/satellite-repair-reserve-attempt28-audit.json has SHA 7f9d5990fce98985cdcb8d55ab2703e58629cfe8168402ecc9be44d0e7ec5e23; report SHA 00239351c6eba2a11e79374f03799bc0b05de66585796b25418d1f35dd17e521; closing snapshot SHA bf1f15b180dd9665fe6e9440e8822a81dbe18ebe80a4c85e554c557989997e6e. The accepted regional input remains unchanged. The reviewed plan below records the initial hypothesis, not the current proven cadence.

Original construction supply plan (now executed by bootstrap6): The transport audit SHA 3ab298fadfe23889fb34c04f9b4db84f25ff0eda561cfe6a8326e4acab8f670a finds a flooded ordinary34-step path and a dry Scouting detour37steps. Seventeen rations permit forty tools outward and at most21timber back. Plan .qa-city/offchannel-foundation-remaining18-bootstrap-plan.json, SHA 2057ce580c3c4249faeffff01dea1864902060a77fde27a2f77e781dc52b4725, and source audit SHA 0426997f2678b6788e420a6319daf5c7224bb0011037833c49118f976affd579 proposed paid forest extensions, milling, lodge/Scouting and return. Bootstrap6 supplies the actual receipts above. Its93home timber leaves21 beyond the remaining72 licence bill, while37source timber leaves only one beyond36 operator fees. Other upkeep, food, tools and each lawful dry window still require actual continuation checks.

Regional attempt28's original cadence plan SHA 9edfe184835689781ce0cc78cb8de911e88aa76f35ec461d75cf6bdd1d64dafa is historical. The corrected proposed-attempt30 read-only plan .qa-city/satellite-repair-reserve-proposed-attempt30-plan.json, SHA 1ebb4f399085bc56b9677eef62b41e3a078ba374bbb276e34ff7eeef602a3b54, advances mixed food/timber repair deliveries but also identifies a longer-window labor deficit: carrier demand3.771 plus extra-mill demand1.6 exceeds four flexible workers by1.371. The independent freight audit .qa-city/regional-freight-upgrade-readonly-audit.json, SHA 1f4d9a0b9b7f8e41bc24042393ce3ceeff146d2ea0797e7924aa3b6ad334c2ed, quotes handcarts reducing carrier demand to2.198, but cart repairs add0.453 workers plus daily timber/iron/tools. Combined labor still exceeds four before producing those inputs, and the startup bill is not currently stocked. Roads and draft options do not close the audited gap. No30trial has started; ordinary population and production alternatives must be reconciled before selecting a feasible schedule. Rates remain planning evidence, never delivered stock.

Second paid lift, reopening and return (passed): Two paid foundation lifts now complete through ordinary preparation, separate actual drainage, fresh consent, placement, reopening and both physical crew returns/unloads. The final raised bed is 450574 with 5,000 fill and exact historical custody across reload. Source and home retain twelve and 27 residents, health 100 and no new food shortfall. A raised-ground drain-review identifier defect was fixed; operator scheduling now uses a fresh safe-drain forecast and dispatches close enough to that interval to cover mandatory reopening and return. The remaining eighteen lifts still need a verified food, timber and tool supply schedule within real storage and labor limits. Controlled initial stocks remain explicit subsystem fixtures, not an earned regional economy. The immutable first-return input stays SHA 45c7d731c7b42bb7a88bb70f7bb56e54f8b84b3a5e170c2f5113f5c357a25f6e. Successful bounded attempt 4 places lift two at tick 2356 (1846570800040) and finishes returning both crews at 1846612800040. Snapshot .qa-city/offchannel-foundation-two-lift-coherent-attempt4.json has SHA 6520a8e1409b7b567dfad79a05af8f7399f37d60bb3ad6602236baf765802170; audit SHA 9d61291004c76e4095b4a9a183ae6af51a0a48af3b92ac3a90bb3c0e68b742cd. Closing storage is source 743.7/1,400 and home 643/1,400; source food/timber/tools are 582/58/24.7, home food/timber/rough stone/clay/tools about 239/38/180/90/96. No additional inventory is granted during this continuation.

The successful schedule waits for an eligible existing pure drain forecast before dispatching operators: scheduled dry opening 1846570800040, dispatch 1846563600040, setup 1846566000040, station expiry 1846767600040, reviewed reopening deadline 1846700400040. The station margin is 6,720,000 ms and carried station food is 59.3333 against 38 required through return. One normal operator payment funds the lift; the home foundation crew returns about 34 of 84 meals and the source operators return about 53.3333 of sixty. Prior failed attempts remain distinct: attempt 1 exposed the undefined raised-bed identifier; attempts 2–3 correctly rejected insufficient operator station time. No deadline or meal requirement was relaxed.

Regional reserve attempts 25–27 (not accepted): Regional repair attempts 25–27 extend the corrected food and mill staffing schedule. Attempt 25 reaches seventeen measured days before an audit helper misreads already-delivered food; attempt 26 fixes that receipt check and reaches 22 days before a helper omits restoring field staff. Attempt 27 restores the field correctly and retains health 100, zero service failures, positive food, a paid repair, replacement materials, the next repair reserve, empty freight and exact restoration through 22 days. It stops at the sponsor timber guard: 3.75 timber, a mill producing 1.5 against two daily upkeep, and home timber 18.25 below the protected export trigger. A physical milling/delivery schedule must close that rate gap; the full 120-day gate remains open. Audit hashes: attempt 25 d7006ace42250373db1ae72e219a66478551b3cf7b9da6bfbaecdf21bf58fb82, attempt 26 7bba2f0fb4bedebeb879d5d1063069cf039f8a481a7b5a98bef392fa3b44107a, attempt 27 73b416428feadb76b7aaa6b1d9930dd33d3a33dbbd5dbf75b08324c789a9e25a. Attempt 27 closes at SHA 689e25d5af1090e031e0a1d1bfff445bd3691bce90bb438d35cdfdb18402f7f4; none replaces the accepted input.

Capacity-checked first-lift return (passed): Starting from the separate coherent active fixture, ordinary staffing assigns four home field workers while the paid crews are away. Operator recall reopens the site normally; both crews then walk home and unload, preserving one raised lift and exact restoration. Source population remains twelve, sponsor population 27. At 1846382400040, source storage is 840.3/1,400 with food 674/timber 60/tools 27.3; sponsor storage is 704/1,400 with food about 279/timber 42/rough stone 190/clay 95/tools 98. The return interval consumes three source timber and six sponsor timber in real civic upkeep. Snapshot .qa-city/offchannel-foundation-returned-coherent.json SHA 45c7d731c7b42bb7a88bb70f7bb56e54f8b84b3a5e170c2f5113f5c357a25f6e; audit SHA d2dc8f485506c722012d69d8649d8694a4f0ebd10a828b68be3b88c82ee30327. The immutable input remains unchanged. This closes the first-return storage check; it does not establish the other nineteen cycles or a renewable supply economy.

Regional repair reserve, attempt 24 (not accepted): Retaining one primary-mill worker keeps Joinery active through the paid opening repair, while the four-worker field continues. The 51-food sponsor shipment physically arrives. After 32.5 preparation days, measurement is still unopened: actual home timber falls from 48.25 before repair to 36.25 afterward, below the unchanged 24-unit export plus sixteen-unit retained reserve. The repair spends eight timber, four bricks and one tool; net timber use including real upkeep and milling is twelve. No service failure is recorded; restore, grant and coin checks pass. The next schedule needs at least 52 earned physical timber before this repair, while retaining all other guards. Audit .qa-city/satellite-repair-reserve-attempt24-audit.json SHA b89e26ef11e849da76f5d1394c5d6d396156b8b01948eef38c203aab6c6eccc5; closing snapshot SHA 3de212d9d5e8d96a037ec26186ee7a8755d123f3c3cfb1884855a7bc86cabfc0. The accepted input remains unchanged.

Foundation continuation storage correction: Full-continuation attempt 1 reopened lift one normally, then stopped after 160 bounded return checks because both crews were unloading into already oversized controlled stocks: source 6,234.63/1,400 and sponsor 5,746/1,400. The failed snapshot is preserved at .qa-city/offchannel-foundation-20-failed.json, SHA 8fe59ad326e1a56eb2bb9dc6a8f69cbf8023292e2ad8b2cd819edf1bd5c105e9. No warehouse rule changed. The original one-lift and browser fixtures remain bounded placement/reopening evidence; they cannot establish normal unloading or the full construction sequence.

A separate fixture starts within actual capacity, preserving existing residents and water. Initial controlled stocks are source food 900/timber 80/tools 30, and sponsor food 700/timber 80/tools 100/rough stone 200/clay 100, retaining other pre-existing goods. It completes paid preparation, actual drainage, the first placement and exact restoration: .qa-city/offchannel-foundation-prepared-coherent.json SHA 0b8e3cc1432cf787731c6cefd99dc5c4812dbd8592043ad9570182958b7e8338; dry SHA 47f5f635abbc90470873d0ac1c6d443596a131bde339e2ed7c9f8da2bbad512c; active SHA d7165f7e57668af45c8cc0e4db6c9f10a78f3b07bfe6e0409d75c595afd0820b. This is controlled subsystem evidence, not an earned regional economy. Its finite food stocks require a verified supply schedule before a full twenty-lift trial; no subsequent trial has yet passed.

Regional repair reserve, attempt 23 (not accepted): The schedule increases the existing home field from two to four workers and physically dispatches 51 food plus nine journey meals to the sponsor. It stops after 30.5 preparation days, before any measured day or repair funding: changing the primary mill from three workers to zero immediately disables joinery, and the pre-advance service guard rejects the next step. Sponsor food is 253.5 with the shipment still outward; home food is 528, logs 32.5, timber 48.25, bricks eight and tools two. No assessed service failure occurs before the stop; restore, grants and coins checks pass. The audit is .qa-city/satellite-repair-reserve-attempt23-audit.json, SHA e36e2d5e326cdc0b3b84e958d6680933a5211f3564a18654acc752cc54d9de9c; closing snapshot SHA 2f2f2f2bce68d662d565991464ca820c906f5b7b5aa2e612fde2a6b438b1e252. The accepted input stays unchanged. The next schedule must retain the primary mill's service-supporting staff and recalculate every repair, carrier and workshop phase against the actual 34-worker limit. Food-rate improvements remain unproven over the full 120-day gate.

Regional repair reserve, attempts 19–22 (not accepted): Attempt 19 exposes a runner threshold of ten logs where the persisted forestry mandate actually targets thirty. Attempt 20 follows the real target and reaches 46.5 measured days, then a forecast guard incorrectly rejects a sponsor that still has physical logs and a staffed mill. Attempt 21 credits only scheduled mill batches backed by physical logs and lowers excess food collection, but the retained forest mandate's secondary collection makes all three measured forest trips carry 48 food and zero logs. After 32.5 preparation days and forty measured days, it stops before a sponsor daily boundary at food 3.5 against a ten-food bill. It has zero service failures, exact daily coverage for all seven communities, health 100, two paid measured repairs, home timber minimum 16.25, combined wood 157.5→187.5 and exact restore; one timber journey remains in transit in the stopped snapshot.

Attempt 22 makes the forest mandate log-only: four measured trips return 21 logs each, for 84 total and zero secondary food. Its paid sponsor export uses a live capacity quote to carry sixteen timber plus nineteen food, and its four-day local-mill proof starts from fifty physical logs with two workers, credits four scheduled batches and no cargo or future harvest, and keeps projected timber at least 16.25. After the same 32.5-day preparation and 34 measured days, the second measured repair is paid, then fundRepair pauses routes and drains jobs while sponsor food is 9.5 against the next ten-food bill. The run stops before that bill, with zero service failures, exact all-seven daily coverage, health 100, home timber minimum 15.25, combined wood 157.5→159, empty freight and exact restore. The paid repair leaves closing replacement stock at 15.25 timber, two bricks and zero tools, so the replacement-reserve gate also remains unsatisfied. Neither attempt is acceptance evidence or proof of economic impossibility.

The immutable accepted input remains SHA 4746644b25d2bceca3d97ca70bc1b5f8d4cc0f975afbb009299587388de360ec. The next schedule must physically provision sponsor food for every daily boundary through route draining, the paid repair and replacement-material production before entering fundRepair; it must retain the log-only forest mandate, food-aware timber exports and unchanged 120-day gate. See the gameplay foundations plan for the primary progression gate.

M8 paid foundation (all twenty paid lifts and crew returns verified): The raised design uses twenty paid lifts of 2,500 fill subunits and 250 height units each, from original bed 450074 to floor 455074. Each lift consumes ten rough stone, five clay and one tool, totaling 200 rough stone, 100 clay and twenty tools, before licensing and meals. These are direct investments of existing extracted goods into the frozen construction specification; no new fill resource or recipe credits free material. Four existing residents from the source's same-owner founding home carry one home-paid batch, complete at least one preparation day, then wait on finite carried meals. The home also pays the foundation licence. The four stationed drain operators remain a separate labor commitment. Preparation creates no raised ground or operating authority.

Each prepared lift needs a new actual dry drain opening, fresh affected-holder review and consent, and an explicit combined placement/closure command. The transition moves all local bed sediment into durable contained spoil with no inventory or fill credit, consumes the exact carried batch and places one lift atomically. Water must be exactly zero. The new window retains the existing eight-interval limit and every reopening-prefix review; geometry is fixed throughout that window. Reopening removes the temporary exclusion but keeps the paid raised bed in natural-basin capacity and flood exposure. A later lift repeats the paid preparation, dry-opening and authority sequence. Old isolation-only receipts remain immutable. Version 32 now supplies separate construction, ground/spoil and authority books; old saves migrate to empty books. The complete twenty-lift command journey places and reopens after every lift, returns both crews and restores exactly. Lining, permanent containment, capture/release and useful irrigation remain required. This work does not complete the M0–M8 goal.

The source and founding home now supply distinct paid crews. The existing basin-approach source has twelve residents, eight workers and a surveyed twelve-unit water supply; two local four-person crews plus Hydraulic engineering and its registry would exceed that labor capacity. The source's same-owner founding home therefore pays the foundation licence and lift cargo, and sends four existing residents over a frozen dry route. The source retains the proposal, title, staffed engineering and its separate drain operators. The verified journey uses 35 route steps, 84 meals and 31 cargo weight, totaling 115 of 120 capacity. It adds no residents, labor or water capacity. Each later licence may quote a new safe route; existing licence, cargo and travel histories retain their exact origin and route. Historical paid construction remains valid after later stewardship changes, while new work rechecks current authority. The full twenty-lift construction and return gate now passes; lining and reservoir operation remain open. Existing closure and isolation fixtures remain immutable.

Foundation evidence: the immutable sponsored prepared checkpoint has SHA a7497d0cea672705a9d47634d1a3aecda94d37fb118ee5e97dff164647d71e2b; its actual dry opening is 9ff64b6af0a80052b607e6b85ad17b4b6139a2d0c16eefe14aac3b89653addef, and one active paid lift is d0cd331f49e73eba7fc076d9ffa77bf13768ab6b0c6c242ee252d5f665eab6fe. A distinct controlled sediment case starts with 10,000 mass, carries 15 through the actual drain pulse and places the remaining 9,985 into contained spoil. Consent withdrawal reopens at tick 2341 while retaining the 2,500 fill and spoil; exact reload and eighteen assertions pass. Its reconnected SHA is 2d9906b0595be0fa9c3ef00e78143679ee33d3db54247233ec21a5f533eb2f3b. These cases use explicit controlled late-stage material/food stocks, not an earned regional economy. The sponsored journey preserves the source's twelve residents/eight workers and both communities' existing water capacity. The earlier failed source-only helper stopped at its genuine labor gate and placed nothing.

Regional evidence: .qa-city/satellite-repair-reserve-attempt19-audit.json (SHA ce1aa334520e025f1df2239e562740b948e13b7980da06730e28f4fcbc8036dd), .qa-city/satellite-repair-reserve-attempt20-audit.json (SHA 9c0f55e7b0408ea519ccaefb114f189c71b0fd7dac65ec6e45a020fac6925cb8), .qa-city/satellite-repair-reserve-attempt21-audit.json (SHA 98331c7f10ce223726c4d2c7a77b762a7807138fef9b4e84912a797cd3ffd0c8) and .qa-city/satellite-repair-reserve-attempt22-audit.json (SHA 877f5e4f9307ee5d606dd8744a933b232e9c1f5f02b0d252f31408a04cc327ea). Attempt 21's closing SHA cdfcbe97832099044cc80776cf56d23254dae5d469170a970be07aece75f3823 and attempt 22's closing SHA 58f73fc61c70feeda8ae070af7b7bbc7687f92361465ef91672aff015cef8dce are stopped branches, not replacements for the accepted input.

Regional repair reserve, attempt 18 (not accepted): The protected-export continuation completes its first measured paid well repair and 29.5 measured days after 32.5 preparation days. All seven communities retain health 100 with no service or food failure, exact daily assessment coverage, empty closing freight and exact restoration. It stops when sponsor timber reaches 4.75: opening 24.25 plus 16.5 milled plus a 24-unit delivery cannot sustain 60 consumed in upkeep. Home closes with 19.25 timber and can spare only 3.25 above the protected sixteen; another 24-unit shipment is unavailable. One 21-log sponsor harvest in the measured window does not sustain the current milling/upkeep cadence. This is a schedule/rate failure, not a proof of impossibility. The 120-day repair-reserve gate remains open; later attempts are recorded above.

Attempt 18 retains the accepted input SHA 4746644b25d2bceca3d97ca70bc1b5f8d4cc0f975afbb009299587388de360ec. Its first measured repair spends eight timber, four bricks and one tool, completes condition 100 and advances paid orders 51→52. Network food rises 66; logs rise 61 and timber falls 40.5. Evidence: .qa-city/satellite-repair-reserve-attempt18-readonly-diagnosis.json and independently checked .qa-city/satellite-repair-reserve-attempt18-audit.json (SHA 412cd458e9bec2e1812bab37a75522188f879d7e0cd21a600c94854fc012e99c). Closing SHA f7ae9f3954feee70bc987972eaa1dadd7658c05b92a75b7816b3cbce5a5e1c23 is a failed branch, not a replacement accepted input.

M8 paid temporary isolation (implemented): After the supported-open perimeter, a separate paid removable curtain has 33 tasks: 28 panel courses, a flush seat, dry operating deck and lifting/reopening gear, upslope bypass/header, nonreturn spill fitting and raised proof. Its bill is 64 timber, five bricks, eight dressed stone, 34 iron and seven tools, plus licences and carried meals. The existing outside jamb support is credited. Four-person capacity-limited trips keep the assembly raised and the full opening clear throughout construction. The immutable completed asset remains raised-ready; a separate operating ledger records its actual position.

One separately approved actual attended-drain pulse must leave exactly zero water in the current interval. Retained sediment remains in ordinary local custody and occupies twice its mass in effective volume. The same paid stationed operators may then close only after a fresh review of eight isolated intervals and every forced reopening prefix zero through eight, followed to a common seventeen-interval deadline. Every named affected holder grants current consent. CLOSE binds the exact paid assembly, perimeter, drain receipt, proposal, opening and frozen consent prefix. Station time and carried meals must cover mandatory reopening before interval nine plus physical return. Comparison and authorization never lower the curtain automatically.

Migration 30→31 introduces separate version-one physical-closure, operating-authority and hydraulic-isolation books. Startup restores a privately authorized curve exclusion before validating retained surface water. Water and bed sediment remain in their ordinary ledgers; live sediment partitions reference the exact durable isolation record and certificate. Each actual interval uses the canonical coupled kernel and is checked against its private preflight. Recall, withdrawal, changed authority or the deadline requests reopening before the next canonical interval; the crew stays at the paid station until the reopening receipt commits. Interior/exterior wall failure also runs fresh natural drainage from the same opening. Rejected commands restore the private runtime boundary, and the reviewed reach is reserved against new hydraulic changes while closed. New drain/outlet pulses cannot overlap isolation. Reopening does not automatically reclose.

Paid foundation lifts are implemented to the bounded extent described above. All twenty foundation lifts, fourteen fabrication tasks and six installed wall faces are now verified above. Floor sealing, cleanup, inspection, intake/capture, containment, finished reservoir operation and useful irrigation remain implementation or acceptance work. An eight-interval window does not silently grant enough time to complete the later fill: any extension or subsequent window needs fresh authority. The full M0–M8 goal remains active; this stage does not satisfy the earned regional supply or completed reservoir gates.

Paid temporary-isolation verification: 111 distinct tests pass: four paid-assembly cases, 7 live hydraulic-ledger cases, five authority/recall/migration cases, twenty-four predecessor cases, sixty-four shared hydrology/navigation cases and seven attention cases. Core coverage includes actual dry activation, eight isolated intervals and mandatory ninth-interval reopening, mid-window restore, direct-interval capability rejection, exact live sediment custody, separate interior/exterior wall failures against fresh canonical natural flow, a separately controlled nonzero-sediment paid pulse/activation, historical sediment validation in later forecast clones and malformed durable clocks. Operations cover consent history, pending recall through restart, same-timestamp withdrawal, protected reviewed reach, concurrent-pulse rejection and explicit version-31 migration. No whole-repository pass is claimed.

Evidence: .qa-city/offchannel-isolation-ledger-wall-final.txt, .qa-city/isolation-operations-final.txt, .qa-city/isolation-predecessor-regression.txt, .qa-city/isolation-worksite-corrected-checks.txt and .qa-city/isolation-shared-regression.txt. The predecessor run's two guard-message expectation failures and the shared run's two old-save preload failures were corrected and passed targeted rechecks; repeated tests are counted once. Initial controlled failure-fixture attempts are not counted as passes. A final 38-case surface/basin/sediment rerun also passes in .qa-city/isolation-core-shared-final.txt; those repeats do not increase the distinct count.

Served City QA completes compare, cancel without an order, source consent, explicit lowering, a live isolated interval, durable server restart, withdrawal or recall, committed reopening and physical crew return. Reload and widths 320/390/640/1440 pass without page errors or overflow. .qa-city/isolation-browser-evidence.json has SHA ab4432427598ec91b10401e184dbec768f69907d9ef64854ffbb7ba687572691; the final 390-pixel City and map images show the current lowered curtain. The paid journey's opening sediment is zero. The nonzero-sediment and flood-failure tests use separately disclosed controlled hydrology, while construction/operating fixtures use controlled stock. These establish subsystem behavior without proving an earned reservoir economy.

The immutable active fixture .qa-city/offchannel-isolation-ready.json retains SHA ada196114a183f08b3f9c9d104c749dd50dc28d794d7048d3bdfb6599bc39123; the raised-ready assembly fixture retains SHA 9feedfe5ec93627282e42fa7a1fd5f3b2df1b91bdf485f6f393e9231dfaf59b7. The full goal remains active.

Regional repair-reserve continuation, attempts 14–17 (not accepted): All four distinct branches start from the unchanged accepted renewable-food snapshot, SHA 4746644b25d2bceca3d97ca70bc1b5f8d4cc0f975afbb009299587388de360ec. Attempt 14 executes same-timestamp setup commands but advances no time: its runner expects collect in a supply quote, whose actual collection field is escrow. Attempt 15 corrects the shape and receives two twenty-four-log loads plus the sponsor bridge, but stops after 22.5 preparation days because the next primary-mill batch precedes physical receipt of the third log load. Cargo in escrow cannot be consumed at home.

Attempt 16 dispatches log freight earlier, keeps idle milling within physical log capacity, and quotes/delivers the early twenty-four-timber bridge. Four real twenty-four-log preparation trips and an ordinary paid repair open measurement after 30.5 preparation days with home logs 40.5/timber 32.25/bricks four/tools one and headworks condition 100; sponsor timber is 25.25. Both sponsor capacity boundaries preserve civic staffing and two mill workers. At 4.083 measured days a later quote is requested before releasing carrier workers, so the runner stops without a resource or service failure.

Attempt 17 audits the common quote path, releases labor before quoting and drains competing routes while protecting the three-worker primary mill. It starts from the same accepted input rather than the failed branch. The later twenty-four-timber shipment succeeds. At exactly fifteen measured days the well reaches condition 70 and home timber is 10.25, below the sixteen-unit repair-plus-retained-reserve guard; measured home timber had reached a low of 8.25 after the shipment. Home logs are 44.5/food 896, sponsor timber 38.75/food 150.5. All seven communities retain health 100 with no service or food failure; network food rises 96.5 and combined wood does not fall. Closing freight is empty, daily assessment coverage and restoration are exact. The guard stops before an unfunded repair. This is a failed repair-reserve schedule, not economic impossibility or 120-day acceptance. Attempt 18 is recorded above as the subsequent distinct continuation.

Preserved diagnoses: .qa-city/satellite-repair-reserve-attempt14-readonly-diagnosis.json, ...attempt15-readonly-diagnosis.json, ...attempt16-readonly-diagnosis.json and ...attempt17-readonly-diagnosis.json, each with exact source, runner, terminal, report and closing-snapshot identities. Root independently verified all 29 distinct referenced hashes in .qa-city/worksite-regional-14-17-hash-audit.json. Attempt 17 closes at snapshot SHA ad403499fdb68fb4ad89db68a475e6d0e01709ad3d652f738e2b9e319a02894a; it must not replace the accepted input. Next work must quote outbound timber only above the physical repair reserve; a twenty-four-unit dispatch requires at least forty home timber to retain sixteen. That is a necessary starting guard, not a proven full-cycle schedule. Continuing log freight, food routes, replacement parts and all preparation/tail days still count.

M8 temporary-worksite comparison: The new owner-requested City scenario compares actual opening custody, an explicitly reported hypothetical drain interval when needed, and eight/sixteen original-bed temporary-isolation intervals. It models direct rain, unlined losses, upslope water/sediment bypass, finite head-limited spill and conserved same-interval reconnection on failure. The immutable completed perimeter binds the calculation; no construction order, live closure, fill, consent or save migration follows. The later separate paid isolation stage is recorded above; raised fill, lining and useful delivery remain open. This increment does not complete the overall goal.

Temporary-worksite verification: 85 distinct focused tests pass: ten new core/review cases, 57 ordinary hydrology/kernel/transition/navigation cases, and eighteen existing separate-reservoir design/forecast/construction-drain cases. The ten cover actual moist opening, authoritative waiting for a safe drain interval, quantity-neutral closure, paired conservation through two weather cycles, bypass/local-bed separation, minimum sediment-aware spill, backwater surcharge, separate interior/exterior wall failures, exact fresh natural reconnection with continued tails, live-save/directive guards, atomic rollback, crew/control overlap, independent clone fingerprints and owner inventory privacy. Controlled high-water/bed inputs test failure branches; they are not earned-world construction evidence. Logs: .qa-city/worksite-final-focused.txt, .qa-city/worksite-hydrology-regression.txt and .qa-city/worksite-predecessor-regression-cached.txt. Repeated focused/shared runs are not extra distinct tests; an initially misconfigured predecessor run was stopped before completion and is not counted. No whole-repository test pass is claimed.

The real final perimeter fixture at tick 2296 cannot safely drain in its next interval: complete pre-spill receiver head is about 453032, above original grade 450074. After three ordinary intervals, the next preparation pulse at tick 2300 moves 1575 additional water subunits, reaches exact zero and stays below grade at about 448983. The full candidate then compares sixteen temporary intervals against natural flow from the same opening. Served City QA exercises the initial rejection, authoritative wait, eight/sixteen comparisons, unchanged world revision, reload and 320/390/640/1440-pixel layouts without page errors or overflow. The result screenshot was inspected. Evidence: .qa-city/worksite-browser-evidence.json, .qa-city/worksite-browser-terminal.txt, .qa-city/worksite-blocked-390.png and .qa-city/worksite-available-390.png. A frozen-clock test initially hit the ordinary two-second forecast throttle; advancing its clock before the second request corrected the harness. No production throttle was changed.

M8 supported open perimeter: After completed preparation and the connected-closed drain, four paid residents can construct the raised design’s five keyed walls and downstream open-bay supports. The exact plan contains 193 structural lifts, five keyed packages and one final check. Each lift spans at most 256 height units, with an exact final remainder; its bill is one timber, one brick and two dressed stone. Each keyed package costs two timber, two bricks, two dressed stone and one tool; the final check costs one tool. The total structural bill is 203 timber, 203 bricks, 396 dressed stone and six tools, before licence fees and journey meals. Finite tranches preserve installed work and physically return unused cargo. The downstream opening remains clear through its full height; this stage changes no water, sediment, terrain or natural basin capacity.

The supports are placed entirely inside plot 1372994 using the paid preparation frame and cribbed structural sections. Neighbor beds size the outside support face; they are not worker positions or permission to excavate adjacent plots. The access threshold stays at original grade 450074 for every task, including upper lifts: basin exposure or water reaching that grade stops further work. Ordinary retained surface moisture remains in its existing ledger. A completed support is not a closed barrier, and no downstream cross-bay key or face is installed.

A source-only 28-village-day licence costs four timber, one tool and four food. Licensing needs the exact immutable preparation/drain predecessors, current source title and route, active Hydraulic engineering, Land registry, Public accounting and a sound staffed registry office. Hydraulic engineering remains required in the field. Ordinary household reserves and any enabled founding-HOME operating budget still apply. Each four-person trip carries the largest next task prefix that fits capacity 120, meals and a physical return before licence expiry. Recall, lost authority or unsafe access retains installed supports and returns the crew with its remaining custody.

The version-30 migration creates only an empty perimeter ledger for older saves and rejects hidden or missing current custody. The preparation and drain records remain immutable predecessors. The separate temporary-isolation increment above follows this perimeter stage. Paid fill, lining and useful conserved delivery remain required to close M8; the full implementation goal remains active. Verification of this perimeter increment is recorded separately from the earlier attended-drain results below.

Open-perimeter verification: 234 distinct focused tests pass: 89 City/navigation/protocol/budget/founding/population, 79 major-waterworks/watershed migration, 23 existing design/preparation/drain cases, 37 outlet/attention/regional cases and six new perimeter cases. The six cover migration and hidden custody, exact structural geometry, affordable ordered tranches, paid recall/return, title/flood interruption, current-licence reuse, exact expiry and route binding, coordinated tamper rejection, legacy crew overlap and a paired authoritative scheduler with byte-identical ordinary hydrology. Repeating these six against the final renewal fixture does not increase the count. No repository-wide test pass is claimed.

The final tracked helper completes all 199 tasks through 23 ordinary construction tours using eight licences and restores the full save exactly. It supplies controlled construction stock before each tour; it is not an earned-economy acceptance run. Structural receipts total 203 timber, 203 bricks, 396 dressed stone and six tools. Registration adds 32 timber, eight tools and 32 food; crew travel/work meals are separately paid. The final input for the next construction stage is .qa-city/offchannel-perimeter-ready-renewal.json, SHA aa45adf0d45e051071efda25259e23544cf7da3439cb3b5faa2a3f0304813405. The earlier 22-tour/22-licence fixture remains separate and must not stand in for final renewal behavior.

The served City browser verifies licence/tranche/recall review cancellation, actual payments, clerk stand-down, travel, two installed tasks, retained investment after recall, physical return and a resume quote, plus reload and 320/390/640/1440-pixel layouts without page errors or overflow. Final screenshots were inspected. Evidence: .qa-city/perimeter-shared-regression.txt, .qa-city/perimeter-migration-regression.txt, .qa-city/perimeter-predecessor-regression.txt, .qa-city/perimeter-outlet-regression-cached.txt, .qa-city/offchannel-perimeter-renewal-focused-final.txt, .qa-city/perimeter-full-construction-final.txt and .qa-city/perimeter-browser-final-authority.txt. An initial outlet run was stopped after a wrong cache path triggered unnecessary prerequisite rebuilding; its partial output is not counted as an additional pass.

Regional repair-reserve continuation, attempts 12–13 (gate still open): Attempt 12 stopped after eight preparation days because its supposedly stable guard still switched sponsor milling twice on intermediate events. Attempt 13 verifies the correction with 352 intermediate checks and zero sponsor staffing commands; only the actual second capacity boundary changes the mill once. Its eighteen-timber bridge arrives at the quoted timestamp, raises sponsor timber 11.75→29.75 and leaves home 14.25 before the home stockpile reaches 42.25. An ordinary eight-timber/four-brick/one-tool repair restores headworks condition 0→100. Preparation then tries to accumulate 36 bricks and nine tools with only 2.5 logs left. At 34.5 days, home timber is 0.25 and Regional institutions stops, before the 120-day measurement opens. Health remains at least 95.25, food stays positive and restore is exact; this is not uninterrupted-service or repair-reserve acceptance. The accepted renewable-food input remains unchanged. Both failed branches and their diagnoses are preserved; root independently verified seventeen input/artifact hashes. Next work must budget minimum repair stock together with continuing log freight and civic timber, rather than preproduce a large repair stockpile without replenishment. Evidence: .qa-city/satellite-repair-reserve-attempt12-readonly-diagnosis.json, .qa-city/satellite-repair-reserve-attempt13-readonly-diagnosis.json and .qa-city/perimeter-regional-12-13-hash-audit.json.

The separate read-only supply budget in .qa-city/regional-repair-reserve-post-attempt13-readonly-plan.json proposes one immediate 8-timber/4-brick/1-tool repair reserve, replacement production as needed, ongoing log freight and a food-supplied sponsor mill with two workers after its second capacity loss. This is a conditional rate calculation, not a simulated acceptance result. This historical budget preceded attempts 14–17. The later runs validate actual twenty-four-timber quotes and deliveries, but the repair-reserve acceptance still fails as recorded above.

M8 attended construction-drain operation (implemented, bounded): The separate version-one operations ledger and migration 28→29 support paid four-person tours with fourteen station days, two timber, one tool, quoted travel/station/return meals and capacity 120. Funding respects stock, protected food, workers and home operating-budget authority. Each pulse binds the exact next interval, current source approval and affected-holder consent, the closed construction asset, a stationed crew and unchanged dependencies. Source Hydraulic engineering must remain active; construction rights are not operating permission.

Attended-drain verification: 293 distinct focused cases pass: 55 ordinary water/routing/soil/sediment, six existing off-channel forecasts, 79 major-waterworks/watershed migration, 109 City/navigation/protocol/attention/budget/founding/population/regional, 17 existing outlet control/connection/commissioning, 15 preparation/closed-drain, four design, four new flow and four new operating cases. The migration total combines 75 unchanged passes with four reruns after correcting the expected current version to 29. The new flow cases verify canonical preview equality and caller immutability, nonzero sediment attribution, rejection of late same-interval receiving water/sediment and inaccessible live intervention authority. Operating cases cover paid budgets and return custody, missing/withdrawn consent, changed opening, saved continuation, ownership changes, overdue interval rejection, redacted current rights and malformed action/receipt/history/closure/map-key state. Final operating suite: 4/4 in 63.024 seconds; no repository-wide pass is claimed.

The served browser pays and cancels reviews, dispatches the crew, restores travel on reload, stations it, withdraws and replaces source consent, executes interval 2084 and physically recalls/returns the crew. The live release attributes 1,575 extra water subunits and zero additional sediment, preserves the closed result and restores on reload. Widths 320/390/640/1440 have no page/card overflow or page errors; both 390-pixel screenshots were inspected. This uses controlled late-stage engineer/civic support stock, not an earned reservoir-economy acceptance. The seed remains byte-identical with SHA dd8f08a1f87c3b61ae2b0701f3f6ecf9a6bd3106acf2e26e2b7b0aa21886f720.

Evidence: .qa-city/attended-hydrology-regression.txt, .qa-city/attended-forecast-regression.txt, .qa-city/attended-migration-regression.txt with .qa-city/attended-migration-repair.txt, .qa-city/attended-shared-regression.txt, .qa-city/attended-outlet-regression.txt, .qa-city/attended-construction-regression.txt, .qa-city/attended-design-regression.txt, .qa-city/attended-drain-flow-regression.txt, .qa-city/offchannel-drain-operations-focused-final.txt and .qa-city/attended-drain-browser-evidence.json. Static gameplay validation and scoped syntax checks pass. A separate integration review confirms the final catch-up, authority, custody and persistence boundaries.

Review forecasts one pulse followed by seven closed intervals. Before live movement, the same canonical surface/basin/sediment core rehearses the complete interval on a copy and checks final conservative receiving head and conserved attribution. The natural edge owns all water and sediment; a separate receipt records the added share. Recall, changed consent, changed opening custody, lost service or station expiry closes pending authority before movement. Construction history stays unchanged. Holder withdrawal or stale evidence cancels the pulse while a sound crew can remain for a fresh review. Recall, lost source title/engineering, unsafe access or station expiry sends the crew home through physical travel and unloading. City exposes review/cancel, dispatch, incoming consent/withdrawal, results and recall. Supported containment, raised foundation, reservoir storage and useful irrigation remain open; controlled subsystem fixtures do not prove the earned reservoir economy.

M8 paid closed construction drain (implemented): A fresh eight/sixteen-interval construction-drain notice records current affected holders, their revocable consent and a twenty-eight-village-day window. A paid licence authorizes three exact construction tasks: seat the drain, fit its closed control and verify the connection. The four-person crew carries finite materials and meals, travels through the source charter, retains invested work on interruption or recall, and returns unused custody. The installed connected-closed asset references the immutable disconnected preparation; it moves no water, excludes no natural basin volume and places no foundation fill. Version 28 adds a separate validated drain ledger. Same-timestamp consent changes preserve the exact ordered authority prefix accepted by the licence. City supports review, cancellation, payment, recall and incoming holder decisions; map projections show the physical closed component without exposing private cargo.

The served City browser completes all three tasks and the return through the actual simulation, then restores the completed projection on reload. It also verifies notice and funding cancellation, licence payment, lawful clerk stand-down, recall and responsive widths 320/390/640/1440 with no page errors; both 390-pixel screenshots were inspected. The browser seed supplies controlled late-stage construction stock, so this is subsystem acceptance rather than an earned-economy reservoir journey. Attended live drainage and separate operating permission/receipts are implemented above. Supported containment, paid foundation and useful reservoir operation remain open.

Closed-drain verification: 210 distinct focused cases pass: 56 City/navigation/protocol/attention/budget/regional cases, 53 founding/population cases, 79 major-waterworks/watershed cases, 14 design/preparation cases, five new closed-drain cases and three existing drain-review cases. The preparation/design run includes an uncached prerequisite rebuild and finishes in 741.118 seconds. The new cases cover exact reviewed rights, safe public summaries, same-timestamp consent history, immediate replacement of a structurally stale notice, actual engine travel/meals/work/return paired with unchanged ordinary hydrology, recall and resumed custody, saved mid-work continuation, immutable preparation, expiry persistence, malformed receipts and explicit version-28 migration/hidden-ledger attacks. Six preparation-rights cases also pass in the separate nine-case review regression; those repeats are not counted again.

Evidence: .qa-city/closed-drain-city-regression.txt, .qa-city/closed-drain-people-regression.txt, .qa-city/closed-drain-migration-regression.txt, .qa-city/closed-drain-preparation-regression.txt, .qa-city/offchannel-drain-construction-focused-final.txt, .qa-city/offchannel-drain-projection-focused.txt, .qa-city/offchannel-drain-migration-focused.txt and .qa-city/closed-drain-browser-evidence.json. The final five-case construction suite passes in 45.542 seconds; the separate nine-case review/preparation run completed as terminal session 94541. The browser retains its unchanged controlled seed hash 0e03114416cd57a23de213e6e486bcb2cda11ee045f2cbd53dc782e8e41589f5. Scoped syntax, static gameplay validation and regenerated wiki checks pass. No repository-wide test pass or complete M8 acceptance is claimed.

Regional repair-reserve diagnosis (failed candidate): A separate continuation of the accepted food-throughput state funds an opening repair but stops after 98.5 measured days with only 6.25 home timber, below the next repair plus civic reserve. Five measured repairs were paid; combined logs/timber falls 182→135. Sponsor food reaches zero and health 20. There are 72 measured sponsor service failures and one additional home service failure during preparation. Exact restoration passes, but this branch fails regional acceptance. Its unchanged accepted input retains SHA 4746644b25d2bceca3d97ca70bc1b5f8d4cc0f975afbb009299587388de360ec.

Later preparation trials remain failures. Attempt10 again crosses a sponsor labor loss before adjusting staffing and stops at 3.583 preparation days. A read-only lifecycle timetable identifies the actual upcoming capacity boundaries. Attempt11 guards the first boundary successfully (assigned seven, capacity seven), but stops at 8.583 preparation days with sponsor timber 0.75 and Regional institutions unavailable. Its runner repeatedly changes mill staffing to zero and back, resetting production before a batch completes: sponsor logs remain 64 and no sponsor mill output is recorded. The intended early timber delivery also waits behind home stockpiling. This is a trial-scheduling defect, not evidence that the economy is impossible. No measured acceptance window or attempt12 is claimed. Both failures retain exact restoration; input/generator/runner/closing/report hashes were independently checked against their read-only diagnosis files. Attempt11's closing SHA is 0207f36865b6925ab53948d482be8946ce4200d8a75f4a7e00265e7f650a3fb9; its report SHA is a4afeade020b4536d514305380ff371ebe9f517c7e31a76da9b9b8fef6dcba85. Migration 29 adds only an empty neutral operating book in this regional branch. The accepted food-throughput input remains unchanged.

The preserved attempt6f generator, closing state and report have independently checked hashes 07ed3e730963a785a57a50196d1d3c31ef0a5987842939a336a84aadab9a713e, 6ad964992dffd59a69bbbd3634bac368a6ba62b8fb8564daf3b233e3b3ce0317 and f816cf42febc5b1db1ab7aa7fb4dfc7b9231e8a38667da8f65e711342ab55bbb. The read-only diagnosis is .qa-city/satellite-repair-reserve-attempt6f-readonly-diagnosis.json. Staffing the primary mill with four leaves only three free workers after the observed labor decline, reducing two carrier teams to one; repair and material work also pauses routes. The next candidate retains three primary mill workers, uses temporary second-mill work only while carriers are home, and sends smaller mixed sponsor loads. That schedule is a hypothesis until its own measured run passes.

That distinct attempt7 stops at its first food failure after 31.083 measured days. Services remain active at every assessed day, two measured repairs are paid, home timber stays at least 11.25, and exact restoration/material balances pass. Sponsor food nevertheless reaches zero and health falls to 97.3. Finite replacement-material journeys and repair work pause the two core routes for 17 measured days; the small sponsor food target also delays a useful food load. This branch therefore fails the requested interval and network balance. Its generator and closing hashes were independently checked as 50b3fded9a0b712a379c5f567a77311674e2f0734d0aec395bc6676d60c317e0 and be729191282a90e33a7309ddc403415d66f13da20eac5156a60ee374db8a95b8; the report is .qa-city/satellite-repair-reserve-120d-attempt7-carrier-window-candidate-report.json. The following distinct candidates prepare replacement parts before measurement, raise the sponsor food target and retain a larger timber buffer before each repair. Preparation costs and service/food minima remain part of its reported limits.

Attempts8–9 stop during preparation, before any measured acceptance window. Attempt8 reaches 26.583 days and 36 home bricks/eight tools, then an ordinary sponsor labor-capacity decline removes civic staffing before the post-boundary mill adjustment. Attempt9 anticipates that decline but reaches sponsor timber 0.25 at preparation day 29.583, stopping two civic services. Home stock reserves and paused routes have prevented the needed timber deliveries while building its repair buffer. Both preserve positive food, health 100 and exact restoration; neither has a completed material-balance or regional acceptance result. All input/generator/closing hashes were checked independently, with the accepted input unchanged. The consolidated artifact .qa-city/satellite-repair-reserve-attempt7-9-consolidated-handoff.json has SHA ff1721f67e61e8e631d058803e8226c2c647bb188cf8b3d59fb9bb6eb5ff9ced. Before another trial, reassess simultaneous civic supply and lifecycle-adjusted staffing, including whether a paid sponsor-timber priority phase can support later home stockpiling. The empty version-one drain migration is recorded separately from every gameplay failure.

M3/M6/M7 bounded food-throughput continuation (verified): The next command-only trial continues that retained closing state for exactly 120 village days, from 1869876000001 to 1871604000001, then finishes paid return journeys at 1871618400001 (121 days total). Releasing workers from idle mills lets separate food and sponsor routes travel together; current timber is milled independently of the next woodland harvest. The run records 121 unique, contiguous daily civic assessments at both home and sponsor, with no duplicate, missing or failed day. All seven communities have event-observed minimum health 100 and positive food. Population/workers stay 146/77, founding grants and coin balances remain exact, and the full closing snapshot independently restores without change. Regional capital recognition remains at close. This is bounded attended food-throughput acceptance, not full regional equilibrium.

Food closes as 4,633.333 opening + 18,485.5 production − 17,397 household meals − 242 specialist food − 269 net freight consumption = 5,210.833, an increase of 577.5. Home food rises 589→897 and sponsor food 186→455. Freight has no goods in transit at either boundary; 87 food-outpost and 34 sponsor trips contribute to the 123 recorded supply jobs. Five further headworks repairs are paid. Exact daily service evidence includes 242 timber for home specialist upkeep, 121 home care timber and 242 sponsor specialist timber. This is stronger daily service coverage than the earlier observation-only trial below; health remains an event-observed minimum.

The repair reserve remains open: timber falls 94→22 while logs rise 88.5→173.5, so combined wood rises 13 but has not all been milled. Home closes with 76.5 logs, only 4.25 timber, eight bricks and two tools; its headworks condition is zero and automatic maintenance cannot fund the next eight-timber bill. Secondary wells still cover household water. Next work must fund that repair while retaining civic timber, then prove a recurring milling and repair reserve; finite clay/iron replacement remains separate. No whole-scenario replay or autonomous equilibrium is claimed.

Evidence: .qa-city/probes/satellite-renewable-throughput-120d.js, .qa-city/satellite-renewable-throughput-120d-report.json, .qa-city/satellite-renewable-throughput-120d-closing.json, the derived flow report, and .qa-city/regional-renewable-120d-independent-audit.json. The independent audit checks source/generator hashes, complete restoration, every recorded material balance, exact assessment days and empty freight boundaries without changing the source. Closing SHA-256 is 4746644b25d2bceca3d97ca70bc1b5f8d4cc0f975afbb009299587388de360ec; its input retains attempt four's 39fa1d575bdf6170f64f8720a854c4b6b64c91a6d4d80292ecd803b74c58f7a8. Separate 51.5-day sponsor-service and 52.5-day home-timber failures remain diagnostic branches. The first 21.25-day failed generator was reconstructed to its original hash, but its overwritten closing snapshot was not recovered; it supplies no retained closing-state evidence.

Earlier M3/M6/M7 attended regional service trial (verified, bounded): Attempt four runs the sponsor mill with three workers and its field with one while timber is below a 32-unit buffer, then restores field staffing when the buffer or log limit is reached. This avoids leaving stored logs unmilled during longer capital work. Its measured loop spans 1868122800040→1869852000000, or 120.0833306 village days. Completing already-paid return journeys closes at 1869876000001, or 121.7499973 days from the measured opening. No civic-service failure is recorded at the observation points; all seven tracked communities have minimum observed health 100 and positive food. Seven actual headworks repairs are paid, Regional capital recognition remains at close, and the full repair bill is retained then. The complete save restores exactly, independently confirmed after the producing run. No whole-scenario replay is claimed.

The generator uses ordinary commands with no population, labor, founding-stock or coin grants. Network population/workers change from 147/78 to 146/77 through the ordinary lifecycle. Recorded gross material movements reconcile opening plus incoming minus outgoing to closing stock. Home food changes 610.5→589, logs 41.5→0.5 and timber 41.25→77.25; sponsor food 667.5→186, logs 13→52 and timber 6.5→16.75; child food 398→390. The home and sponsor combined log/timber total rises by 44.25, but sponsor food loses 481.5. This proves an attended service interval, not renewable food equilibrium, uninterrupted automatic repair reserves or long-term mineral supply. The next supply audit must evaluate network production and freight, not simply borrow another food reserve.

Evidence: .qa-city/probes/satellite-maintained-120d-attempt4-buffered-milling.js, .qa-city/satellite-maintained-120d-attempt4-report.json and .qa-city/satellite-maintained-120d-attempt4-closing.json. Their SHA-256 hashes are recorded in the report and were independently checked; the original accepted 48.583-day input is unchanged. Attempt three's failed but restorable 120.083-day state remains separately preserved, including its 24 service-failure observations. Earlier attempts below are historical evidence, not the closing state of attempt four.

Independent regional flow audit: The 505 observation points record no service failures, while paid upkeep receipts cover 122 community days: home and sponsor each debit 244 timber for their two daily civic services, and home sanitation debits another 122 timber. Public accounting has no paid daily receipt; its continuity is inferred from unchanged prerequisites and observations. The final return-journey tail has only a closing observation, so the evidence must not be described as direct observation of every service at every simulation boundary. The source remains unchanged through the separate .qa-city/audit-regional-attended-120d.cjs audit. Its result .qa-city/regional-attended-120d-independent-audit.json also reconciles network food: 17,546 produced, 17,692.5 household meals, 244 specialist food and 111 net freight consumption. Food falls 5,134.833→4,633.333; combined logs/timber rises 138.25→182.5. A near-full producing food outpost and idle log-starved home mills identify carrier allocation as the next throughput constraint.

M8 construction-stage correction: The exterior drain requires an open perimeter. Preparation stakes and a disconnected cutoff frame cannot exclude the footprint from natural-basin storage or prevent floodwater reaching original grade. The separate City construction-drain comparison evaluates eight/sixteen actual future water intervals with that original geometry, preserving native runoff and adding only conserved drainage when receiver head permits. It retains temporary downstream and sediment effects, current holders and private owner-stock boundaries. Paid closed connection, construction consent and the separately authorized attended opening with durable conserved interval receipts are implemented above. The supported perimeter and version-31 temporary-isolation stage above now satisfy the separate original-bed isolation requirement. A later paid-fill transition must still conserve water and sediment before solid material displaces water.

Drain-review verification: 62 distinct focused tests pass: three new drain cases, 36 existing water/sediment/outlet/forecast cases and 23 City/navigation/protocol cases. The new cases cover paired real hydrology, no live mutation, ordinary sediment transport from an explicitly controlled retained-bed fixture, a controlled late basin inflow that defeats an earlier safe head reading, and owner authority/revisions/privacy. The complete candidate revalidates its water/routing/topsoil/sediment ledgers. The served browser verifies eight/sixteen requests, separate drain and finished-reservoir results, reload and widths 320/390/640/1440 without page errors; the 390-pixel result screenshot was inspected. Logs: .qa-city/offchannel-drain-focused-final.txt, .qa-city/drain-hydrology-regression.txt, .qa-city/drain-city-protocol.txt and .qa-city/offchannel-drain-browser-final.txt. Late-stage fixtures supply controlled construction stock; no earned reservoir construction or repository-wide test result is claimed.

An additional uncached prerequisite rebuild passes the same five existing outlet-impact/off-channel forecast cases in 674.634 seconds (terminal session 68659, exit zero); these repeated cases do not increase the distinct count. Scoped syntax, static gameplay validation and regenerated wiki checks also pass.

The actual unchanged-site comparison drains 1,575 subunits across eight intervals and 3,150 across sixteen. Backwater limits it in six and twelve intervals respectively. Conservative storm receiving head reaches 455035.69655172416, above original grade 450074. Water and sediment close exactly; over sixteen intervals the additional drainage reduces ordinary losses by 734 and increases terminal export by the same amount. This yields useful drain windows but does not establish a dry construction site throughout the storm.

M8 disconnected preparation integration: The raised v2 compartment now has a separate source-only notice, paid preparation licence and a four-person construction journey for nine exact stakes/fittings/check tasks. City reviews payment and recall, exposes material and meal custody, and retains completed work after proposal changes. Version 27 introduces the required preparation ledger; deleting a current ledger or hiding preparation fields in an older version rejects restoration. The work leaves natural ground and ordinary hydrology intact, including retained surface moisture. All major-work crews now count as away while using carried meals and remain protected from household hardship departures while physically committed; unloading resumes ordinary home meals. Solid fill, walls, dewatering/drainage custody, live storage, continuing rights and useful irrigation remain required M8 work. This is a bounded construction increment, not completion of M0–M8.

Preparation verification: 186 distinct focused tests pass: 23 City/protocol, 79 major-waterworks/watershed, 17 outlet controls/connection/commissioning, 53 founding/population, four design/migration, six preparation-rights and four preparation-custody cases. Current preparation cases cover all nine tasks, partial recall and resumed investment, flood interruption, historical title loss, strict persistence, carried meals and offline versus exact-due-step gameplay custody. Transaction revisions and briefing observation metadata are checked separately rather than claimed byte-identical. An additional uncached full prerequisite rebuild passed the same four custody cases in 757.318 seconds; it preceded the last strict-state and household-meal edits, which the final focused runs cover. Repeated cases do not increase the distinct total.

The served browser passes notice/licence/funding review and cancellation, lawful clerk stand-down after licensing, crew reload, recall/unloading and 320/390/640/1440-pixel layouts with no page errors. Screenshots were inspected. The late-stage preparation fixtures explicitly supply construction stock, so these are subsystem tests rather than earned-economy acceptance. Evidence: .qa-city/preparation-rights-6-final.txt, .qa-city/offchannel-preparation-crew-final.txt, .qa-city/offchannel-preparation-uncached.txt, .qa-city/preparation-outlet-food-final.txt and .qa-city/offchannel-preparation-browser-final.txt. No repository-wide result or complete M8 acceptance is claimed.

Earlier failed regional continuation: The second command-only attempt completed its bounded 120-day loop but failed the final uninterrupted-service assertion, recording 520 outage observations for sponsor Record keeping and Regional institutions. These are observations, not unique outage days; the first occurs at timestamp 1868875200000 with operating supplies unavailable above reserves. Preparation did pay the second local woodland title, staff the additional food field, restore required services before measurement and complete a headworks repair costing eight timber, four bricks and one tool. No grants or lifecycle rebases were used. This identified sponsor civic timber and the harvest/milling cadence addressed in the later trial above. The failure occurs before a closing candidate snapshot and restore check, so this branch supplies no closing-stock, exact-duration or 120-day acceptance. The accepted 48.583-day input remains byte-for-byte unchanged.

The exact failed generator is .qa-city/probes/satellite-maintained-120d-attempt2-service-gap.js; its terminal report is .qa-city/satellite-maintained-120d-attempt2-service-gap-failed.json. The earlier attempt stopped before measurement because its helper skipped the charter settlement's actual production boundary and short food trips delayed longer timber routes. That distinct history remains in .qa-city/satellite-maintained-120d-failed-attempt.json and .qa-city/probes/satellite-maintained-120d-attempt1-overdue-boundary.js; it must not be used as the current attempt's closing state.

Forward-forecast verification: Actual unchanged-site raised-v2 comparisons pass eight and sixteen intervals. The sixteen-interval branch starts empty, captures 3,898 source-water subunits, receives 54,000 rain, spills 32,398, releases 13,000 through the paid outlet, loses 3,500 to the stated evaporation assumption and closes with 9,000. Every completed interval and the combined result conserve water and sediment. The original v1 retains its exact tick-2071 failure. Current focused checks pass 200 distinct tests: 62 City/protocol/surface/impact tests, 38 basin hook/regression tests, 14 kernel/transition tests, four design/schema tests, 44 major-waterworks tests, 35 watershed/outpost tests and three forecast/projection tests. The three final forecast/projection tests use the published paid fixture cache and include an unseeded actual-v2 branch plus separately controlled nonzero sediment. An earlier uncached tracked-helper run passed before v2 landed. A second self-building run then passed both forecast cases on raised-v2 code without a fixture cache in 631.18 seconds (terminal handle 87312, exit 0). The last loss-policy metadata and owner-projection privacy assertions are additionally covered by the fresh final cached run; these repeated executions do not increase the distinct test count.

The real isolated-server browser verifies legacy failure and clear/select/reload into raised v2, actual eight/sixteen requests, unchanged live world/proposal revisions and blocked notice filing at widths 320, 390, 640 and 1440. Both result screenshots were inspected. The fixture supplies late construction stock, so this is not earned-economy evidence. Logs: .qa-city/offchannel-forward-root-final.txt, .qa-city/offchannel-forward-forecast-final.txt and .qa-city/offchannel-forward-browser-raised.txt. No repository-wide test or complete M8 approval is claimed.

Off-channel forward comparison and geometry correction (implemented, bounded): An authenticated owner request runs eight or sixteen actual future hydrology intervals on independent natural/candidate clones. Ordinary City reads do not run it. The owner response preserves affected foreign communities and adverse-resource flags but removes their inventory quantities and deltas from every repeated effect path; exact raw evidence stays internal. The candidate applies an explicit hypothetical sealing receipt, excludes the original footprint bed only in its clone, conserves source capture/bypass and sediment, credits direct rain, routes finite spill and supplies a separately receipted outlet receiver. Opening/proposal revisions are checked; active or scheduled legacy commissioning controls reject this forecast. Completed legacy pulses remain in the opening state.

The reviewed v1 design stops at tick 2071 after three completed intervals: 2750 stored water plus 8000 storm rain encounters natural receiving head 455205.9 above spill sill 450074. Both eight- and sixteen-interval requests preserve that failure instead of shortening the horizon. A separate natural sixteen-interval probe peaks at 455035.7310344828 before spills; its much lower closing-water peak 449389.22 is not a valid spill design bound. New v2 selections therefore require floor 455074 / spill 456074 / wall 457074 and 50000 paid foundation-fill subunits over the unchanged original bed 450074. This is a reviewed candidate, not a design-flood certificate or completed foundation.

Major-waterworks ledger 26 retains v1 proposals/notices exactly, rejects prematurely inserted raised fields in v25, and validates each saved design against its own family. Pure v1 receipts remain unchanged; raised geometry and hypothetical transition/interval receipts use v2. New selection moves no material or water. Full notice integration, paid construction, durable live custody, useful irrigation, continued permission and M0–M8 completion remain open.

Longer maintained sponsor-forest interval (verified, bounded): The corrected continuation measures 1865610000000→1866309600000, or 48.583 village days. Before measurement, one paid journey relocates a household of four residents from home to sponsor (91→87 and 8→12), preserving network population/workers at 147/78. Preparation also physically collects four finite iron ore (source 82→78) and produces tools. Land registry is suspended after the fourth-ring title has been paid. Record keeping, Public accounting, Regional institutions and home sanitation remain active with zero failures across 209 observations; sampled home/sponsor/child health stays 100. The interval starts as a village, regains Town at +8.75 days, City at +11.75 and Regional capital at +14.75, and closes/restores as a Regional capital. Current recognition and freight require those retained services, while Land registry is a title-registration prerequisite; the gate change is explicit and paid title persists.

The producing simulation completed and its full save passed deep equality after restoration through a fresh ZoneEngine. The preserved generator is .qa-city/probes/satellite-second-mill-balance-relocated-maintained-buffered-48d-replay.js; a separate read-only audit confirms the receipts and recognition predicates. A second complete replay was not run for this 48.583-day artifact. The older 24-day artifact below has its own successful exact replay and must not be used to imply that stronger verification for this branch.

At day 24 the player pauses routes, waits for current teams to finish, releases four workers, funds an actual headworks repair (8 timber/4 bricks/1 tool), fires six replacement bricks from eight clay/three logs, and collects 96 food through two physical trips before restoring ordinary staffing and freight. Final home water capacity is 108 for 87 residents. Full repair stock exists at close (11.25 timber, 8 bricks, 2 tools), but it was not continuously retained: minima reach 2.25 timber and two bricks. This proves an attended maintenance window, not uninterrupted autonomous repair readiness.

Custody closes exactly: sponsor forestry yields 250 logs; opening sponsor stock two plus that harvest supplies 252 collected logs. The two mills consume 234 logs and produce 234 timber; the kiln consumes three more logs. Combined home/sponsor timber falls 57.75→43.75 after 240 civic/service timber and eight repair timber, while combined logs rise 6.5→19.5. Combined wood stock therefore falls one. The mills' staffed ceiling is six timber/day, against five retained-service timber/day after suspending Land registry; keeping that optional service active would leave no capacity margin for repair or downtime. Home food falls 1,117→652 despite the collected 96 food, sponsor food falls 808.5→760.5 (528 produced versus 576 meals), and woodland ends waiting for recovery. These remaining deficits prevent equilibrium acceptance. Evidence: .qa-city/satellite-second-mill-balance-relocated-maintained-buffered-48d.json; the earlier failed 48-day startup branch and healthy 24-day branch remain separate.

Sponsor-forest continuation (verified, healthy for 24 days only): A separate command-only replay preserves the accepted recurring checkpoint and funds ore/tool production, a pre-interval repair and startup cargo before measuring exactly 24 days. Two sponsor foresters produce 166 logs; its opening two logs let eight physical journeys collect 168. Seven completed returns deliver 153 logs and the eighth still carries fifteen homeward. Sponsor timber receipts total 58, including six already deposited by that eighth trip. The two home mills consume 129 logs and produce 129 timber, with all 43 physical batches recorded. All sampled home/sponsor/child health remains 100, home and sponsor civic services remain active, and no interval deaths or hardship are recorded. Full restore and exact replay pass.

This remains a reserve-dependent interval. Combined home/sponsor timber falls by fifteen while civic/service costs consume 144; home food falls 1,152→943 and sponsor food 757.5→565.5. Child food production is also five below its meals. Sponsor forestry ends waiting for plot recovery. No repair is funded during this interval, and headworks condition falls 40→0; secondary wells keep household capacity at 96 for 91 residents. The report's repairMaterials:true only checks bricks and tools, so it is not a complete repair-reserve proof: home timber reaches 3.25, below the eight-timber bill. The actual startup repair is earlier job-1541; an old retained job-1515 receipt is not an interval repair. Evidence: .qa-city/satellite-second-mill-balance-sponsor-forest-24d.json and its exact generator .qa-city/probes/satellite-second-mill-balance-sponsor-forest-24d-replay.js. This branch is distinct from both the earlier failed startup experiment and the permanent first-satellite regression.

Off-channel conservation and sealing review (implemented, bounded): A pure interval kernel conserves source capture/bypass and compartment rain, losses, spill, release and retained sediment. A separate pure sealing planner accounts for existing footprint water and sediment, limits sediment drainage by water support, and retains the remaining bed as planned paid excavation spoil. The City review reads current custody and computes the receiving basin's hypothetical head with the footprint removed from its natural storage curve. In the checked design fixture, it accounts for 2,000 footprint water subunits and a natural-basin credit from 32,743 to 34,743; the compartment starts empty. The screen changes no water, sediment, title, asset or permission. Full coupled forward impact forecasting, paid containment and live useful operation remain open.

Latest focused verification: 109 distinct tests pass with no skips: fifteen design/kernel/sealing cases and ninety-four adjacent major-waterworks, watershed-outpost and City cases. The three design cases use the existing connected-subsystem fixture cache for this run; the earlier uncached design run below remains separate evidence. Repeating the twelve pure-helper cases adds no tests to this total. The live-server browser also passes current-custody display, review/cancel, actual draft selection, reload/clear and 320/390/640/1440-pixel layout checks without page errors. The browser and cached design fixture contain controlled late-stage construction stock and are not a full earned-economy proof. Evidence: .qa-city/offchannel-sealing-focused.txt, .qa-city/offchannel-sealing-adjacent.txt and .qa-city/offchannel-sealing-browser.txt. These results overlap earlier groups below and do not establish a new repository-wide total.

Current focused verification: Reservoir review/design checks pass 160 distinct tests: 78 water/sediment/operating-history/commissioning/City tests, 44 major-waterworks tests, 35 watershed-outpost tests and three new off-channel cases. The off-channel cases rebuild the paid fixture without an ignored cache and have no skips. City growth separately passes its new tracked regression, 44 existing charter/development/City checks and three works-title checks; these groups overlap the reservoir City checks and must not be added into a new global total. The new title regression explicitly supplies later construction materials while earning recognition and issuing actual survey, registration and construction commands; complete saves restore exactly after construction and after three actual checks cause City decline. The browser uses the separate earned-supply survey checkpoint and verifies review/cancel/payment/reload at 320, 390, 640 and 1440 pixels without page errors. The full City integration now includes the earned satellite material cycle and passes 1/1 without skips in 94.697 seconds. These are focused results; the full M0–M8 goal remains active.

Permanent first satellite material cycle (verified, bounded): test/helpers/capital-satellite-preparation.js and test/helpers/capital-satellite-material-return.js run by default in test/city-integration.test.js. They begin from its immutable earned exact-100 day-3016 snapshot, continue through materials at day 3067, the paid sponsor mill at day 3304, founding at day 3685 and a finished repair at day 3714. The complete preparation records one Growth successor old-age death plus four physical relocations (home 100→95), minimum home health 20 with no observed hardship, and minimum sponsor health 89.5 with maximum observed hardship seven. Stage-specific reporting prevents the final stage's zero deaths from hiding the earlier loss. The material-return leg records zero hardship, extracts twelve clay, delivers eight through both physical legs, retains four at the child, fires six bricks and pays eight timber/four bricks/one tool for headworks 0→100. Final populations are home/sponsor/child 95/8/8. One offline catch-up and twenty-four due-time steps match cargo custody, and the final full save restores exactly. The original City checkpoint is unchanged for its independent 120-day and 3,600-day branches. No ignored-file dependencies, stock/population grants or lifecycle rebases enter this regression. Healthy expansion and sustainable recurring supply remain open. Evidence: .qa-city/capital-satellite-permanent-final.txt.

Earned second-sawmill construction (verified, bounded): A continuation from the accepted recurring-supply checkpoint produces and physically ships its expansion materials, regains City recognition, surveys fourth-ring hex 1467240, pays its ordinary City title and clears/builds a second lumbermill. The saved 22-cell City contains two operational mills and restores exactly. At the checked construction boundary there are 91 residents, health 100, household water capacity 96, 45.25 timber, 56.5 logs, 8 bricks and no tools. Headworks condition is zero, but the base source and three staffed secondary wells still cover current households; full 108 capacity would require repair. The new mill is not staffed at this boundary. Continuing mill staffing, log deliveries, toolmaking and maintenance must be funded separately; construction alone does not prove a balanced recurring network. Evidence: .qa-city/city-growth-second-mill-built-check.txt.

Later two-mill interval (verified, balance remains open): Both mills receive three workers and actual forestry cargo in the subsequent command-only continuation. Its measured 24.083-day interval ends at 1865362800000 with exact replay and restoration. Home timber increases 1.25→10.25 and logs decline 30.5→21.5; sponsor timber declines 41.5→0.5, leaving its Record keeping and Regional institutions inactive. All three communities finish at health 100, but home health reaches 71.7 during the interval. A reviewed home retention floor of 32 timber prevents the next sponsor delivery. Food remains available, and household water capacity 96 covers 91 home residents. The last paid headworks repair precedes this interval by 71 days; no repair occurs within it and central condition remains zero. This is distinct from the earlier 24-day reserve-backed interval below. Final capped history rows alone cannot establish complete interval production totals; count new receipts during advancement or compare complete gross counters. Evidence: .qa-city/satellite-second-mill-accepted.json.

Complete interval flow audit: Repeating the same decisions while collecting warehouse sequences at every advance produces the identical final snapshot. Four completed forest returns deliver 84 logs (24+18+21+21); the fifth dispatch still holds 21 logs in outward escrow at the saved end. The original mill runs sixteen batches and the second fifteen, producing 48+45=93 timber from exactly 93 logs. Home logs reconcile as 30.5+84−93=21.5; home timber as 1.25+93−62 research/specialist upkeep−22 resident care=10.25. Sponsor timber receives nothing and spends 41 on offices. Four physical mill batches occurred without active accounting, so the production ledger records only 27 batches/81 timber; it is not the complete physical flow. The source's measured delivered rate, about 3.49 logs per village day, remains below the combined observed home/sponsor civic draw of about 5.19 timber per day. The next bounded experiment is to fund a real startup reserve, revise the sponsor delivery's retention while protecting the repair bill, and free carriers for both routes. A longer interval must still prove adequate renewable throughput. Evidence: .qa-city/satellite-second-mill-flow-audit.json.

Satellite recurring interval (verified, reserve-backed): .qa-city/satellite-recurring-accepted.json retains a paid child field, ordinary timber/tool production, researched sponsor offices and both Governor legs. Over exactly 24 village days, upper dispatches increase from 3 to 11 and lower dispatches from 4 to 8. Two automatic repairs spend 16 timber, 8 bricks and 2 tools in total, leaving headworks condition 88. Child/sponsor/home food closes at 308/72.5/977, all health at 100 and populations at 8/8/95; network population and workers remain unchanged and replay/restore is exact. Home timber falls from 127.25 to 28.25, sponsor timber from 73.5 to 54.5 and home logs from 18.5 to 0.5. The child deposit falls from 60 to 24 during preparatory extraction, then stays at 24 while already-extracted clay travels during the measured interval. The forestry authorization produces no new dispatch because of source reserves and warehouse constraints. This verifies recurring trips and automatic repairs over the bounded interval; it does not prove indefinite production or permanent default-suite promotion.

City growth titles (implemented and verified, bounded): The existing explicitly released fourth-ring plots have an alternative City/Regional-capital registration authority with active Record keeping, Public accounting, Land registry and Regional institutions, a staffed registry, fresh returned survey and adjoining title. Payment remains sixteen timber, two tools and eight food. Ledger v4 explicitly retains radius four; its new receipts bind release version three plus frozen development/registry evidence. Older waterworks v3 entries remain unchanged and have priority when both authorities qualify. Decline does not revoke paid title. The original capital used all twenty-one available inner/outer plots; this permits a separately paid second sawmill instead of assuming renewable material balance.

Recorded outlet operations in reservoir review (implemented, bounded): major-waterworks-impact now replays positive certified water transfers after losses and before natural spills, with coupled sediment before ordinary sediment routes. The unchanged branch must exactly reproduce every retained interval; the proposed branch retains original request caps/head floors and may deliver less or no water. New tests cover closed certificates, a new receiving basin, changed sediment, head-limited zero flow, multiple ordered controls, missing history and binding/receipt corruption. The actual paid commissioning integration also verifies both its pulse interval and full retained window without changing live state. The City comparison lists these operations separately. This advances review evidence, not physical reservoir completion.

Separate reservoir geometry (implemented, bounded): A real paid survey and registry command can establish title to storage hex 1372994. City can select the exact compartment, cancel its review, restore the selected draft and clear it while preserving the old outlet geometry and notices. Its 10,000-subunit capacity, six walls/freeboard, source split, exterior drain/spill and outlet junction are fixed terms. Version25 originally added v1 validation; current ledger26 preserves that geometry and adds the distinct raised v2 candidate described above. The shared-pool replay is unavailable for this design and new notice filing waits for separate impact evidence. Construction, a conserved initially empty compartment, useful delivery, continuing rights and upkeep remain open; see the implementation checklist. The separate first satellite material cycle is now a passing default regression as described above; later recurring equilibrium is still unproven.

Renewable resource identity (implemented and verified, bounded): resource-stock-identity.js adds root stockCoordinateVersion: 1 and checked per-row coordinateVersion: 1 / cellAxial. The former restore merge could silently restore a missing depleted Tidebreak fish stock at capacity with revision zero; it is removed. Full validation requires every authored, coastal-founded and established coastal-outpost stock, including retained evacuated sites, and rejects extra identities, key/address conflicts, altered source parameters and invalid depletion/recovery data. All three creators author location metadata. Complete wholly unmarked older ledgers migrate without changing economic values; absent-ledger creation is restricted to explicit unused pre-stock state/simulation 1/1. Verification passes 54 distinct focused tests: five new identity/startup cases, twenty coastal/outpost/fish cases, nine living-world cases and twenty deposit/instance/protocol/multiplayer/City cases; overlapping coastal reruns are counted once. Gateway startup persists the additive migration before any client and the next restart adds no duplicate commit. The full City integration retains its earned exact-100 120-day material interval and separate 3,600-day/seven-community branches. The broader M0–M8 goal remains active.

Renewable-stock verification: 54 distinct focused tests pass, including real coastal founding/outpost establishment, corruption rejection, compatible legacy metadata, durable gateway startup and the existing City integration. A read-only audit covers three local worlds: the earlier connected-outlet checkpoint and current satellite-founded checkpoint preserve stock custody plus inventories/economies exactly; the older persisted capital store preserves stock custody, with a separate existing storage-policy migration outside that economy comparison. All source bytes, hashes, sizes and modification times remain unchanged. The focused evidence is .qa-city/resource-stock-coordinate-final.txt, .qa-city/resource-stock-existing-tests.txt, .qa-city/resource-stock-adjacent.txt and .qa-city/resource-stock-existing.txt. Static catalog validation and generated wiki checks pass; this is not a full-repository test result or completion of M0–M8.

Commissioning verification — 125 distinct focused tests pass: 30 core water/sediment/impact/integration/migration tests, 88 adjacent impact/budget/attention/City/regional/protocol tests, five physical-connection tests and two commissioning/reservation tests. The current commissioning suite also verifies full-corridor title loss and durable operator meal-clock events between water intervals. The paid-monitor/operator journey now authorizes a real pulse, matches all ten live water-interval fingerprints, transfers exactly 1,000 subunits (one game water unit) with a coupled zero-sediment receipt, closes observation and physically returns the operators. Scheduled and completed states restore; altered review, consent, interval, water and meal/material custody reject. An explicitly controlled affected-cell tenure branch verifies the second named community's consent and withdrawal. Relevant construction rolls back completely, unrelated production continues, pre-release drift moves no water, and post-release drift records one retained transfer plus an incident. The fixture begins after isolated late-stage construction with controlled material lots and rebased household clocks, so it proves this subsystem rather than the entire earned economy.

The live-server browser verifies closed-connection review/cancel/fund/recall with exact command payloads and physical refunds, map crew visibility, operator review/cancel/fund/recall, exact pulse authorization, reload and consent withdrawal at 320, 390, 640 and 1440 pixels without page errors. Three older local worlds preserve their prior water/sediment, stock and population and restore exactly again. Full gameplay acceptance remains open. Conservative limit: physical-work reservations are reach-scoped, but the opening fingerprint covers the wider registered hydrology network; a disconnected basin's hydrology change can invalidate a review.

Closed-gate connection and single-pulse commissioning (M8/W4, bounded): Completed receiver/source controls now unlock separately paid plug-removal work. Four builders travel receiver first, invest four whole workdays (4 timber, 2 bricks, 4 dressed stone and 4 tools in total, plus actual travel/work meals), remove both natural plugs behind closed controls and return unused custody. A separate four-person operator expedition costs 2 timber, 1 tool and finite meals for travel plus up to fourteen station days. Only operators physically at the dry source worksite may request one reviewed pulse, capped at 1,000 subunits (one game water unit). The integrated pulse journey is verified within the controlled setup described above; the complete M8 gate remains open.

Earlier kernel-only verification (historical baseline): 142 distinct focused Node tests pass: 25 core water/sediment tests, 44 impact/rainfall/exposure/operation-boundary tests, and 73 natural-water/connections/fish/proposal/City-integration tests. Three existing saved worlds retain every prior hydrological field, inventory and population through additive migration and restore exactly a second time. The controlled paid-monitoring probe moves a bound 1,000-subunit pulse, closes all basin-storage differences after four later intervals and accounts for both changed ocean crossings plus the 18-subunit infiltration difference. It injects the internal binding and has no operating permit or physical commissioning; it is not a player acceptance journey. These checks cover this dependency, not the whole repository or completed M0–M8.

First-earned capital replacement-clay acceptance (verified, bounded): The final ignored checkpoint .qa-city/satellite-material-accepted.json is at 1852876800000 / capital day 3672. The actual first-earned-100 origin continues through one old-age death and four relocations to a 95-resident capital, an eight-resident sponsor and an eight-resident satellite; complete network custody is 151 residents/82 workers. Local sponsor woodland regrowth and repeated paid harvests, milling, finite iron purchases, forging, two well services and physical supplies funded the new site without grants or balance changes.

Founder dispatch spent sixty timber/four tools; camp assembly invested forty/two, leaving twenty timber/two tools. Two later fifteen-timber deliveries funded the child's fifty-timber, fifteen-food, one-tool clay pit. Staffed extraction reduced its deposit 240→228 and produced twelve clay. Jobs job-1209 and job-1210 delivered eight clay child→sponsor→capital, retaining four at the child. The kiln spent eight clay/three logs to fire six bricks. The actual home repair spent timber 8.25→0.25, bricks 6→2 and tools 1→0, restoring headworks condition 0→100. Founding grants and coin balances remained exact. An independent script/checkpoint review found no direct inventory/population grants or lifecycle-clock rebasing.

The final current-schema snapshot restores exactly; the first clay collection from its post-dispatch state matches one offline catch-up against twenty-four due-time steps, including goods, people and journey completion. The whole adaptive sequence is command-stepped and final-restored, not separately restarted at every construction/refining boundary. Final capital/sponsor/child food is 1379/294.5/21, hardship is zero, and health is 84.32/100/100. Sponsor timber/tools are zero, so continuing deliveries and repair reserves remain necessary. This closes the first capital-origin replacement-clay/refined-repair cycle, not uninterrupted water service, permanent exact-100 population or autonomous regional sustainability. Evidence: .qa-city/probes/satellite-first-earned-audit.js, .qa-city/probes/satellite-second-bricks-tail.js, .qa-city/probes/satellite-material-return-tail.js, .qa-city/satellite-founded.json and the final accepted checkpoint. The prior exact-100 120-day interval remains separate valid evidence.

Sealed-control verification: 71 distinct focused tests pass: ten new endpoint cases plus 61 adjacent construction/channel/title, budget, attention, City/regional-projection and protocol tests. The new suite builds a paid founding/footing/interior/permit fixture, with explicit controlled late-stage material lots and coherently deferred village-day/identity windows. Final cases revalidate that saved fixture with the current engine; this proves isolated construction custody, not long-run material affordability or useful reservoir operation. Coverage includes receiver-before-source completion, the wet source component and separate dry worksite, resumed physical trips, recall/rights loss, budget spending, public privacy, live daily advancement, real-clock funding, fractional unloading, and corrupted/overlapping saved crews. Real-server browser checks verify reviewed renewal/funding/recall, map visibility, reload, both sealed cards and 320/390/640/1440-pixel layouts without page errors.

Satellite source provenance: The earlier probe used the 100-resident equilibrium-setup boundary, 59 village days after the first earned-100 checkpoint. It already consumed 56 finite clay and 20 stored ore during setup; it was not after the separately measured 120-day interval. The successful command-only material continuation above branches from the actual first earned-100 checkpoint, which retained 128 clay in the deposit and 122 stored ore. It now proves one replacement-clay and repair cycle; recurring supply and uninterrupted service remain open. Later-setup brick shortages are not by themselves evidence for changing production balance. The earlier-source audit paid for a two-brick caravan, locally forged a pit tool, repaired water and relayed logs/ore, but another repair became due before its next brick/tool bill was ready. Salvage cannot bridge this while retaining water: only the three secondary wells return bricks (three each), and removing even one takes capacity below the relevant population. No balance change follows from these bounded ordering failures.

October 2 sealed outlet controls (implemented and verified, bounded): major-outlet-controls.js adds command-funded receiver and source components after the supported dry interior. Four residents carry exact material/meal custody, pay whole support/cut/preparation/lining/frame/gate/seal units, and return unused supplies physically. Recall retains installed progress. Source crews use the first dry interior hex behind the intact plug; component and worksite have separate checked addresses and title bases. City and public maps expose safe projections. Budget restoration now accepts the four spending categories booked by footing, interior, permit and control commands.

The original controls remain immutable sealed-construction receipts. A separate connection overlay now records later plug removal, and commissioning records its one measured pulse. A separate version-one ledger initializes empty only for wholly unmarked older saves. Intake, full reservoir impacts/consents, recurring operation, maintenance and removal remain open. The capital satellite probe now verifies one material-return and repair cycle: its earned 100-resident origin is followed by a recorded old-age death to 99 and conservative relocation. The existing 120-day exact-100 test is separate evidence. See living world design and major waterworks plan.

October 2 structure coordinate checkpoint (implemented, bounded): structure-coordinates.js adds root structureCoordinateVersion: 1 across all structures, authorized district steps, selected structure-bound jobs and construction cart loans/held/history. Building and district anchors resolve to their numeric cells, each ordered footprint matches the catalog at its saved orientation, and every cell belongs to the recorded settlement. Non-cleared footprints cannot overlap; retained cleared/live replacements remain valid. District attempt history now also checks orientation and footprint, and scheduling validates the frozen site before spending.

Only an entirely unmarked family migrates. Legacy structures may recover an absent settlement reference from their actual region; current marked structures cannot silently recover missing ownership. Founding, paid building construction, outpost establishment and replacement camps create addresses immediately. The central job creator stamps only construction/rebuild/repair/demolition/salvage, village development and structure-linked land work; four foundation-maintenance types may retain a selected non-anchor footprint cell. Cart returns preserve location evidence after job deletion. This migration changes no economic or work-progress values. Broader location custody, ongoing regional supply beyond the verified first satellite cycle and the full M0–M8 goal remain open. See living world design, gameplay foundations and both wiki audiences.

Structure address verification: 292 distinct focused scenarios pass, counting overlapping runs once: core construction, founding, district and local-charter behavior; cart custody; related land, waterworks, sanitation, outposts and forks; the existing City and village-to-supplied-outpost integrations; and eight new coordinate/startup/foundation cases. The City test retains its earned exact-100 and 120-day material interval. New tests cover a multi-hex keep through ruin/rebuild/repair/demolition/salvage, paused and queued paid work, held/returned carts, a restored district that builds its frozen keep footprint, and rejection before spending when that footprint is changed. Late-game keep funding and the historical worn terrace are explicitly controlled fixture boundaries; the paused-house gateway migration and handcart production use command-earned inputs. The paid non-anchor foundation repair retains its actual cell, four workers and exact material bill through restoration and completion.

Two existing local checkpoints containing 42 and 9 structures restore with every prior gameplay field unchanged apart from the previously approved household migration version. All six cleared/live replacement pairs remain valid; source bytes and modification times remain exact. Static gameplay dependency validation also passes. These are focused checks, not the full repository suite or completion of M0–M8. The reproducible read-only comparison is .qa-city/verify-structure-existing.js, with .qa-city/structure-coordinate-existing-saves.txt; broader run evidence is in .qa-city/structure-coordinate-adjacent.txt and .qa-city/structure-coordinate-integrated.txt.

October 2 household coordinate checkpoint (implemented, partial): household-coordinates.js adds one version-nine migration boundary across the frontier source, active household journeys, retained transfer routes, route deaths, relief receipts, household-linked adult mortality and active/completed caravan relief records. A preflight rejects any new coordinate field in a legacy family before older migrations can change it. Complete numeric-only records migrate additively; current records require exact version-one address pairs and inverse axial-to-numeric lookup. Both manual recall and automatic return rebuild route addresses together. Completed relief history must belong to the exact non-frontier community and match its retained transfer receipt.

Household address verification: 137 distinct focused scenarios pass across population, community births, actual gateway migration, caravans, fork/provenance, ordinary journey startup, continuity, household aging, outposts, outpost-born families and the existing City integration. The new gateway path pays for clearing, housing and route relief, then upgrades a saved travelling household and its completed caravan receipt before any client or command. Its durable empty-event commit replays exactly and a later startup adds no duplicate migration. Route reversal, pending/delivered relief, missing/forged addresses, legacy downgrade and duplicated death/mortality corruption are covered. Controlled age-boundary fixtures retain the exact death location and survivors through restore. The City integration still completes its earned exact-100 and 120-day material interval. These are focused regressions, not the entire repository suite or completion of M0–M8.

Two existing local version-eight checkpoints restore read-only with every pre-existing gameplay field unchanged except the migration version, and with source bytes and modification times intact. Their earlier regional-budget metadata migration also remains additive. This is a save-custody change: no residents, food, resources, rights, timing or route length are granted or changed. Remaining map/entity/job coordinates, the exact-100 satellite material continuation and other M0–M8 gates stay open. See living world design, gameplay foundations and both wiki audiences.

October 2 exclusive-storage checkpoint (implemented, bounded): world-storage-lease.js acquires a sibling claim with exclusive file creation, records a random owner nonce and diagnostic process/host metadata, and verifies file identity plus nonce before writes and release. Persistence uses the resolved canonical directory throughout. Preparation, activation and close have explicit lifecycle phases; new mutations reject once closing starts. A failed partition waits for all other appends before the queue settles. Constructor/migration/setup failures abort without checkpointing; close releases ownership even when the final checkpoint fails. Gateway shutdown removes clients and captures positions before storage close, waits for WebSocket closure with a bounded termination fallback, and closes HTTP responses before process exit. Startup-time signals and bind failure also release storage. Crash claims are retained for explicit operator recovery. This local storage protection underpins the offline fork checkpoint below; distributed fencing and power-loss durability remain separate work.

Exclusive-storage verification: 45 distinct focused tests pass: thirteen ownership/lifecycle cases and the prior thirty-two persistence, identity, migration, protocol and real-gateway cases. New evidence covers actual Windows junction aliases, a separate writer process and its forced crash, idempotent close, a held append, mixed successful/failed pending partitions, corrupt preparation, failed snapshot publication, changed owner nonce, failed metadata write and repeated handle inspection failure, interrupted acquisition and post-worker gateway setup failure. A real paused WebSocket peer closes before gateway completion while its player identity remains saved. Child processes run the actual server through repeated shutdown signals during preparation and a port conflict; both release ownership. Independent review found no remaining blocker in the bounded ownership and normal shutdown paths. This is focused verification, not a full-suite result or completion of M0–M8. The exact-100 satellite material continuation remains unpromoted while its timber reserve cannot yet fund the next repair at the required boundary.

October 2 offline world-fork checkpoint (implemented, bounded): npm run world:fork -- --source <existing world-v6 directory> --destination <new world-v6 directory> operates only while the source server is stopped. It claims the canonical source and destination, rejects an existing or overlapping destination, strictly materializes a current identified source and refuses any implicit domain migration. A current complete event-only source is supported; a present snapshot must have exactly the six required version-one envelope fields. The source bytes and modification times remain exact. The child preserves gameplay/economy state, reconnect-token hashes, players, mutations, in-flight cargo and durable receipts, while receiving a new instance ID and matching version-one provenance in manifest and state: root instance, immediate parent, generation, source revision, canonical source digest and fork time. Native source state remains unmarked; each later fork retains the root, names its immediate parent and increments generation.

The destination publishes a validated canonical snapshot and empty event directory without copying raw journals. A sibling pending marker prevents a crash-created partial destination from falling back to a fresh world. Publication never overwrites a destination and uses local hard links; failure cleanup removes only its verified files and empty directories, leaving the marker when safe cleanup cannot finish. This is a local offline operation, not a concurrent backup, distributed claim, damaged-journal repair or fsync/power-loss guarantee. The authoritative combined regression at .qa-city/world-fork-regression-final.txt passes 58/58 cases: thirteen new fork cases plus all forty-five ownership, persistence, identity, migration, protocol and real-gateway prerequisites. Earned child and grandchild gateways accept the preserved reconnect token, reject a parent-instance request with WORLD_INSTANCE_MISMATCH, retain the player's state and expose that actor's preserved accepted supply receipt under the child session. See offline world forks, living world design, gameplay foundations and the technical reference. Remaining coordinate custody, the exact-100 satellite material continuation and the full M0–M8 objective remain open.

October 2 persistence checkpoint (implemented, bounded): World transactions now publish to checkpoint state only after their own append succeeds. Queued snapshots capture after preceding commits settle, preserve the founding player, and reserve a monotonic timestamp boundary before later updates arrive. Background player/chunk write failures no longer decide whether a separately appended world transaction succeeded. Strict read-only loading rejects damaged storage and player identity aliases before startup can create a replacement world. Replay preserves physical world order, the legacy root-to-partition transition across a backward clock, and explicit profile precedence for equal-time older records. Snapshot failures propagate to shutdown and exit status 1.

Persistence verification: 32 distinct focused tests pass across the sixteen new transaction/recovery scenarios, existing persistence/protocol cases, world identity, coordinate and finite-deposit startup migrations, session authority and real WebSocket integration. They include failed and successful appends racing queued snapshots, an unrelated failed player partition, founder identity retention, same-clock events, backward legacy clocks, queued profile changes, identity aliases, malformed snapshots/journals and failed snapshot publication. A separate gateway regression rejects an incompatible manifest, invalid domain-state version and failed startup migration; deferred timers and abort cleanup preserve the original save even when the embedding process remains alive. A child process runs the actual server against a corrupt save and verifies failure before listening, unchanged file bytes and modification time, and no new journal directory. The independent code review found no remaining blocker in this slice. This is focused verification, not a full-suite result or a guarantee against power loss. The subsequent ownership and offline-fork slices above close local writer exclusivity and explicit independently identified forks; damaged-tail repair remains open, along with the broader M0–M8 acceptance gates.

October 2 session authority checkpoint (implemented): Protocol 3 requires the welcome's world-instance/player/epoch binding on every subsequent JSON request. The gateway revokes replaced sockets and rechecks queued commands and private reads before they execute. Work already executing retains its atomic commit and same-world receipt recovery. City ignores obsolete socket frames, invalidates reviews and forecasts on a new epoch, resets the complete client on world/account change, and recovers only scoped pending records without resubmitting commands. A null embodied character during interregnum remains valid for lawful successor reviews. Replaced tabs stop automatic reconnect competition. Existing saved worlds and receipts are unchanged; older wire clients must reload for protocol 3. Focused verification: 13 tests pass across session scope/recovery, the actual gateway race, restart/receipt recovery, failed-append rollback before welcome, private queued-read revocation, no pre-welcome movement or missing peer names across an acknowledged movement tick, stale/missing profile authority, ordinary WebSocket integration and existing persistence/protocol migration tests. Served browser checks pass replaced-tab confirmation blocking, automatic reconnect review closure, one status query with zero command resubmissions, legacy pending removal, and a full client reset on another world reusing player ID 1. No browser errors or warnings were observed. This is focused verification, not a full-suite result. This delivers the session-binding M0 gate, and the offline-fork checkpoint above verifies its parent/child boundary; remaining coordinate custody, exact-100 capital replacement-material acceptance and the rest of M0–M8 stay open.

October 2 mineral satellite checkpoint (implemented, bounded): Developed direct villages now support one retained mineral satellite through their own active registry, paid survey and founder expedition. The physical eight-resident/six-worker cohort, twenty-four-edge route, finite released parcel, separate warehouses and two paid freight legs remain authoritative. Root budget limits cover both descendant levels; the City Regional and Supply chains views expose the immediate sponsor and correct collection controls. Further nesting is unavailable. Title survives lost services, child evacuation precedes sponsor evacuation, and reoccupation requires restored local sponsorship services. Exact additive migration and founder/route provenance reject malformed saves.

Satellite acceptance scope: A separate smaller command-earned journey starts with the ordinary local-village/headworks preparation. Real tools and bricks are bought and delivered, timber is harvested and milled, research and the registry are paid, water reaches twenty-four capacity, and a second existing household brings the sponsor to sixteen residents and ten workers. Eight founders then build the satellite and its clay pit, mine twelve finite clay and relay it home over both paid links, with exact save restoration. An in-flight clay snapshot also completes through offline catch-up and due-time stepped replay with matching inventories, population, labor, finite deposits, links and resident-transfer custody. No stock, population, labor or knowledge is injected into this path. The separate focused controlled preparation explicitly supplies a sponsor cohort, knowledge, water and material reserve for corruption, budget and recovery cases. Neither proves that the exact-100 capital can yet afford all new institutions. That earned continuation exposed a narrow root timber surplus and competition with civic/headworks upkeep; its full replacement-clay-to-bricks-to-repair proof remains open. Served browser checks pass sponsor navigation, separate local stocks, the two-leg capital view, local pickup, reload and 320/390/640/1440px widths without page errors. Final focused verification is recorded with this checkpoint; the full M0–M8 goal remains active.

Satellite verification: 162 distinct focused scenarios pass across satellite founding/custody, shared budgets, ordinary outposts and local charters, household relocation, Governor and food mandates, regional views and supply chains, itineraries, headworks and the earned satellite journey. The existing City integration also passes within this count, retaining its exact-100 population and 120-day material interval. A live advancing-clock departure test verifies equal certificate/job/transfer timestamps and restored clock behavior. Four existing local checkpoints restore with every prior gameplay field unchanged and replay exactly after additive migration. Served browser checks, static catalog validation, syntax, whitespace and regenerated wiki build/check pass. This is focused verification, not the entire repository suite or completion of M0–M8.

October 2 ordinary journey address checkpoint (implemented, partial): Regional road crews and built edges, quarry lease sites and crews, livestock collection/relocation, and watershed teams now preserve exact axial route custody in both active work and returned receipts. Each subsystem has an explicit ledger marker; only wholly unmarked numeric-only data migrates. Missing fields within a marked record, unsupported versions, malformed addresses and changed physical locations reject restoration. The upgrade changes no stock, animals, residents, deposits, route positions or invested work. Gateway startup now compares the fully validated restored snapshot with the loaded snapshot and commits any additive migration before opening the WebSocket gateway. General map/entity/job coordinates remain M0 work; the full M0–M8 goal remains active.

Journey address verification: 155 distinct focused scenarios pass across watershed migration/startup durability, road construction/maintenance, quarry leases, livestock collection/relocation/breeding/draft work, runoff and remote waterworks surveys, world identity, real multiplayer, and the ordinary village-to-supplied-outpost journey. The startup check restores an already identified world with both an active survey and returned receipt, reads the durable empty-event migration before any client/checkpoint/shutdown, replays it exactly, and confirms another restart adds no duplicate migration commit. Active/returned coordinate corruption and a changed axial-to-runtime mapping reject; migrated survey observations, inventories, meals, population and labor agree with stepped and offline completion. One older waterworks test still asserted that no construction order existed; it now verifies the current separate planning-estimate and exact funded-section rules and passes. Eight existing local snapshots load read-only with no existing gameplay fields changed; eleven older schema-version markers also upgrade through their previously implemented migrations. These checks do not constitute a full repository suite or completion of M0–M8.

October 2 supported dry-interior implementation: The first paid footing now leads into a receiver-first physical construction sequence for all seventeen surveyed interior sections. Exact natural-bed/invert differences require raised support or excavation, followed by bed preparation and lining. Four existing residents carry automatically sized finite tranches within 120 weight, stock/spending limits and the current exact construction window. Paid permit renewals preserve each fourteen-day authorization without exhausting the bounded design-revision counter or altering earlier public notices. Units remain invested at their exact numeric/axial location through recall, expiry and fresh-right resumption. Existing v1 footing saves remain intact; an additive channel ledger starts empty. A previously paid identical cut can be linked, while raised support and its new bed are paid separately. City reviews the actual next tranche and all section progress; public map footprints reveal only physical stage information. Both endpoint plugs stay intact, capacity is unverified and moved water is zero.

Ordinary first-section evidence: The extended command-only journey maintains real food workers at both villages, forges tools, imports forty rough stone from finite depot stock, dresses thirty stone, harvests exchange logs and physically delivers additional bricks, timber and tools. After the first footing it funds eight support, four bed-preparation and two lining units at hex 1346379 under repeated paid same-design construction permits. These additional units invest 12 timber, 18 bricks, 22 dressed stone and 2 tools; travel meals are separately carried per tranche. Every in-flight restart matches the complete saved world at physical return, and water matches the same-time no-construction control. The earlier footing ledger remains identical. The next receiver-first target is the genuine excavation at 1348427. This is earned evidence for one completed interior section, not an earned full-reservoir or perpetual material-supply proof. Verification scope is recorded below. Intake and endpoint commissioning, full impacts and continuing water permissions, live operation, maintenance and lawful removal remain unfinished; the full M0–M8 goal stays active.

Complete dry-corridor state-machine evidence: The actual seventeen-cell interior completes receiver-first in 164 physical trips and 148 paid fourteen-day permit renewals, without changing the design revision or original notice during that sequence. Its 1,850 invested work units consume 1,816 timber, 203 bricks, 168 dressed stone and 1,749 tools; travel meals and permit fees are additional. The fixture first clears its genuinely obstructing source lumbermill and mason workshop through ordinary unstaffing, demolition and salvage, then files a fresh exact notice and licence. The isolated long run uses real construction/permit/funding handlers, controlled finite warehouse lots and real crew routes, meals, deadlines and stage receipts. Every mutation must emit an event, and the full construction ledger validates at each completed section. Unrelated daily simulation and full transaction commits are deliberately deferred here; the earned first-section journey above separately verifies those paths and whole-world replay. All seventeen sections finish lined and dry with intact plugs, unverified capacity and unchanged basin water. The construction ledger is about 2.15 MB while its compact channel projection is about 13 KB; one measured final projection took 110 ms. The long scenario passes in about 596 seconds.

Dry-interior integration and browser verification: 98 distinct focused Node tests pass across the earned channel journey, existing footing construction, City projections/navigation, proposals, regional exceptions, briefings, council recovery, protocol and gateway integration. The served browser verifies an expired permit, review/cancel without spending, the exact paid renewal once, unchanged proposal revision and original notice deadline, retained authorization after reload, and a genuinely fundable next tranche after standing down the two registration programs through Research controls. It also verifies the partial three-of-eight support section, physical crew custody/route/recall/unloading, compact receipt counts, remaining-material plan and 320/390/640/1440px layouts with no page errors. A focused served check exposes both occupied source plots with working map links while the first remote support tranche remains fundable. Future trip meals and permit fees are explicitly additional to physical-work materials. QA server and browser are stopped. Static gameplay validation, syntax, normal repository whitespace checks and regenerated wiki build/check pass. This is focused verification, not the entire repository suite or full M0–M8 completion.

October 2 physical outlet-footing checkpoint: The first dry interior outlet component is now a paid physical order with four real carriers/builders, finite materials and meals, dry travel, staged material investment, persistent partial work and physical recall/unloading. Its separate version-1 construction ledger retains exact numeric/axial locations, notice/report/licence evidence, authorization history, accepted payments and stage receipts. Same-geometry work can be reauthorized under a fresh notice; permissions do not silently extend. City, public map footprints, labor/food custody, Regional overview and briefings are connected. The ordinary preparation helper now produces tools and dressed stone, transports supplies and registers the exact right without injecting stock or people. Validation for this checkpoint follows. This earlier footing checkpoint was followed by the supported dry-interior sequence described above. Reservoir flow, complete impact/consent, intake and endpoint commissioning, maintenance and removal remain open; the full goal stays active.

October 2 outlet-footing validation: 103 distinct focused Node tests pass: five new footing/integration scenarios, 73 City/proposal/briefing/regional scenarios, four corridor/notice regressions, nine gateway/protocol scenarios, eight world-identity/council scenarios and four City navigation scenarios. The ordinary preparation builds a charcoal kiln, smithy and mason workshop, purchases finite iron/rough stone/bricks, physically transports supplies and returns the corridor reports before paying for the licence. The funded crew completes five workdays plus real travel; a resumed in-flight checkpoint matches the full saved world, and basin water matches an otherwise identical no-construction control. Separate tests cover partial recall, notice expiry and paid reauthorization of unchanged geometry, altered proposals, corruption rejection, neutral old-save migration and command clocks that advance between reads. Explicitly controlled branches test fire, finite return meals, engineering loss and full-warehouse unloading; they are not presented as earned production. Served browser QA passes reviewed funding/cancel, reload, recall and physical return, completed receipts and the map footprint at 320/390/640/1440px. Both plugs remain intact, moved water remains zero and operation is unavailable. QA listeners are stopped. Static gameplay validation, syntax, normal repository diff checks and synchronized wiki pass. This is focused verification, not the entire repository suite or completion of M0–M8.

October 2 council-recovery validation: 135 distinct focused scenarios pass across family continuity, careers, community births, adoption, childhood, estates, City projections/navigation, briefings, Regional overview, eight new council scenarios and the full City integration. The latter still completes the earned exact-100 120-day material interval and its separate 3,600-day/seven-community branches (about 92 seconds). A new ordinary-command coastal journey runs all 57 lifecycle years until the four original adults die naturally, then petitions and hands over without edited ages, health or population. Six subsequent daily boundaries replay to the exact full snapshot. Other cases preserve a real earned sealed coin, recorded community-birth age, travelling-worker exclusion, repeated recovery, neutral legacy migration and membership/death order when timestamps coincide. The served Edge UI passes review/cancel, appointment, reload, separate embodiment/handover and 320/390/640/1440px overflow/page-error checks; its local server and browser are stopped. Static gameplay validation, synchronized wiki and syntax/diff checks pass. This is focused validation, not a full repository suite or M0–M8 completion.

M7 council-recovery implementation checkpoint: PETITION_COUNCIL_SUCCESSOR enrolls an eligible existing local civilian only when no living adult household member remains and a public handover awaits the community council. It appoints the successor while retaining the current embodied state and stewardship; ordinary embodiment and handover are still required. A separate councilRecoveryVersion: 1 marker and per-household recovery receipts preserve late membership, actual community-birth custody and the exact pending chapter. No people, workers, goods, estate claims or founding grants are issued. City adds a reviewed petition and Regional overview links the no-adult exception to Family & continuity. Validation is recorded in the following checkpoint. The full M0–M8 goal remains active.

Remaining scope audit: M7 already has multi-settlement exception management, funded work preservation, normal succession, child maturation and independent lives; the council slice closes the narrower civilian-present/no-household-adult dead end. Universal continuation without eligible residents and broader governance remain open. M8 major waterworks now has paid outlet construction, a closed connection and separately reviewed one-pulse commissioning. Full reservoir intake, storage, useful supply, continuing rights and recovery remain unfinished. Remaining M0 map/entity/job custody, and replacement mineral supply beyond bounded City proof, also remain open.

October 2 deposit validation: 106 distinct relevant scenarios pass across deposit identity and startup durability, world instances, founding, iron/clay/stone production, reclamation, quarry leases, legacy living-world migration, protocol, real multiplayer and full City integration. The startup test proves an already identified world durably receives only missing coordinate metadata, with an event after the old snapshot boundary and identical event-only replay before the first store closes. Separately, eight existing local saves were restored read-only with unchanged deposit keys and prior fields. Static gameplay validation, generated wiki build/check and syntax/diff checks pass. This is focused evidence; the full M0–M8 goal remains active.

M0 finite-deposit custody (implemented, partial): deposit-identity.js owns root depositCoordinateVersion: 1, per-row coordinateVersion: 1 and exact cellAxial: {q,r}. Both starting and newly established frontier creators author these fields. Restore checks canonical keys, cell/axial round trips, exact generated or established-site identity, name, kind, initial amount, surveyed state, finite remainder, status and safe revision. It requires every starting seam and every linked frontier seam, including evacuated sites, and rejects arbitrary extras. The default merge that recreated missing starting deposits is removed. Complete wholly unmarked ledgers migrate by adding coordinates only. Absent ledgers require original state/simulation 1/1, no marker and no extractor (even cleared), extracted stock, frontier link, reclamation or quarry evidence. The former post-mining v1 fixture now rejects; a separate pre-deposit fixture verifies supported migration. Gateway durably commits address upgrades before players can act without changing world identity.

Deposit migration evidence: All eight existing local saved worlds restore successfully, retaining identical deposit keys and all prior row fields; two include an established stone seam. The focused regression set covers actual authored/founded extraction, exhausted legacy migration, full storage, final partial output, forged addresses/provenance and missing seams. Existing founding, identity, mineral, masonry, reclamation, lease, protocol and multiplayer checks pass. Full City integration passes again in about 90 seconds, including the earned exact-100 120-day material interval and existing long regional branches. This is focused evidence, not a new full-suite run.

M0 world-instance checkpoint (verified, partial): worldInstanceIdentityVersion: 1 and a random gonz-instance-v1:<32 lowercase hex digits> distinguish fresh same-seed worlds. ZoneEngine adopts a saved identity, validates any explicit configured ID, and upgrades only a fully absent root pair. Persistence requires matching manifest/state pairs, rejects one-sided migration or manual rekeying during ordinary startup, and retains the existing geography compatibility checks. Gateway commits a new or migrated identity before accepting players; event timestamps sort after the loaded snapshot so an immediate event-only restart retains it. The welcome and health response expose world.instanceId plus the existing generator namespace. 41 focused tests pass across instance identity, protocol/persistence, founding and the real multiplayer integration, including two-client agreement and a startup commit already on disk. This historical focused count is not a full-suite result. The explicit offline workflow above now creates independently identified save forks; remaining coordinate-backed map/entity/job migration keeps M0 open, while finite deposits have the custody described above.

Earned 120-day City material interval (verified): Normal City integration calls city-material-equilibrium.prove after complete earned exact-100 growth. Ordinary setup funds source targets, physical startup collections, a forest startup route and an atomic three-route Governor plan. The measured 120 days issue no player commands. Population stays exactly 100, City capability and Regional-capital recognition never lapse, food shortfall stays zero and water remains 108. Minimum food is about 1145, timber 20.75 and protected repair labor four. Seven automatic headworks orders spend exactly 56 timber, 28 bricks and seven tools; all three refiners make new batches. Forest/clay/ore routes make 23/8/8 new dispatches, and forestry makes 27 new orders. Clay declines 72→32; the exhausted ore seam stays zero while stored ore declines 102→72. This closes the bounded material gate, not infinite mineral supply or M0–M8.

Workshop readiness and replay checks: A fulfilled target counts toward Town workshop capability only when read-only production.batchReadiness confirms the otherwise executable staffed batch. Public status remains waiting; execution and actual allowance/input spending are unchanged. Missing inputs, exhausted local or regional allowances, pause and storage have regression coverage. Bulk offline comparison checks every gameplay leaf and validates revisions against 120 online versus 12 catch-up commits; only 228 new briefing observation timestamps differ. Restoring day 60 and replaying the same 60 daily boundaries must match the full final snapshot. No generic nested-revision or simulation-timestamp normalization is allowed.

October 2 exact-100 validation: 55 distinct focused scenarios pass: 54 across City projection, production mandates, settlement development, regional production/overview and fish-source reserve coverage, plus the full City integration (1/1, about 94 seconds) including its existing 3,600-day and seven-community branches and the new 120-day material continuation. Static gameplay validation, generated wiki build/check and syntax/diff checks also pass. This is focused regression and integration evidence, not a new full-suite run or completion of the overall goal.

Earned exact-100 construction and growth (verified): city-hundred-growth.prove runs its complete default path in normal integration. It earns three secondary wells, seven plots, relocated workshops, five timber houses, care and sanitation, including the ordinary 200-timber daily Public budget needed for the 110-timber mill. Three old-age deaths, six births, three actual 432-day maturations and 33 physical arrivals yield 100 residents and 44 workers; finite source workers reach zero. Growth ends with housing 100, water 108, food 1325, logs 17.5, timber 7.75, bricks 2 and tools 1. Birth/migration policies close, no home building retains a player job, and all seven titles plus the full settlement restore. Bounded brick refill loops collect actual inputs. Subsequent maintenance uses this earned state; existing separate 3,600-day and seven-community branches remain intact.

100-resident proof provenance: test/secondary-well.test.js directly supplies expansion timber/tools after its earned initial well construction, at the housing-growth stage. Its later real-command transport/repair branch does not remove that starting subsidy. It remains a valid isolated service test and is now named accordingly. The new full acceptance work uses city-integration.test.js → regional-capital balance start → regional-capital-growth → regional-capital-next-material-loop.materialReturn: a separately earned 64-resident checkpoint with existing real mineral camps and refiners. A fresh capture reproduces that checkpoint without executing the independent 3,600-day continuation that does not feed the growth branch. The original long-run test remains intact.

M3/M7 coordinated regional Governor plans (implemented, bounded): APPLY_REGIONAL_GOVERNOR_PLAN applies two or three exact {outpostId, revision, action, payload} rows from the founding-home anchor. Destinations must be distinct established owned links; each revision and authority is rechecked. Authorization requires every ordinary setting explicitly; omitted settings cannot inherit old terms. Pause stops future checks and remains possible during service loss. Invalid later rows roll back earlier rows and events; previous spending and funded journeys remain. Copied forecasts run the exact command and expose competition for real carriers. The City authors and reviews these rows. The verified exact-100 proof now integrates three routes with forestry, refining and repeated repairs; larger networks and replacement sources remain follow-on work.

October 2 coordinated-freight validation: 70 distinct focused scenarios pass: the regional Governor plan and forecast suites, existing regional forecasts, coordinated forestry/production plans, Governor configuration/loads and real multiplayer integration. Browser checks cover route selection and inspect/remove, both forecast horizons, draft edit invalidation, cancellation, application without immediate goods/workers, durable reload and coordinated pause. All tested widths (320/390/640/1440) are free of document overflow and page errors. Full-catalog three-route messages fit 16 KiB; live WebSocket coverage accepts a message above 8 KiB and rejects one above 16 KiB with close code 1009. validate:gameplay, wiki:build, wiki:check and diff/syntax checks pass. This is focused evidence, not a new full-suite result.

Historical maintenance audit, resolved for the 120-day gate: Earlier probes lost water when freight occupied repair workers, or lost workshop capability when all supplied refiners waited at fulfilled targets. The accepted setup protects four workers, starts forest supply before competing mineral routes, caps source food storage and suspends Land registry after claims to release timber. Recognition now distinguishes a fulfilled target from missing batch capability. The seven-repair exact-100 interval supersedes those failed probes; minerals remain finite.

Historical controlled-fixture setup probe: A secondary-well copy began with supplied expansion stock and could not prove fully earned growth. It exposed genuine founder prerequisites: six workers and 70 timber after paid title. The accepted full path uses the independently earned 64-resident checkpoint with existing physical mineral camps, then earns additional construction, population and the 120-day maintenance interval above. The controlled fixture remains useful for isolated service checks.

October 2 route-recovery validation checkpoint: The waystation Scouting/household-relief and active-caravan address changes pass 186 distinct focused scenarios covering migration and corruption rejection, physical barter and player agreements, finite markets, recurring trade, animal/cart custody, roads, watch duty, escorts, City projections/navigation and durable persistence. The command-based village-to-supplied-outpost journey and the 3,600-day Regional capital scenario both pass. validate:gameplay, wiki:build and wiki:check pass. These are focused checks for the current slice, not a new full-suite result or completion of all M0–M8 acceptance gates.

M0/M3 caravan axial custody (implemented, partial): The logistics ledger has routeCoordinateVersion: 1; all active transportVersion: 1 caravans record that version and ordered routeAxial {q,r} pairs. logistics.setRoute copies the accepted numeric route and updates both fields for ordinary dispatch, trade-contracts.dispatch (including recurring scheduled trade) and Scouting's live route replacement. Initialization migrates only when the ledger marker and all active per-job address fields are absent, then uses cellIdForAxial to validate the exact numeric correspondence before accepting cargo custody. Tests cover fresh waystation and peer orders, unchanged location/inventories/escrow during old-save migration, actual finite-import completion, partial markers and altered addresses, fire detours outward and homeward, recorded-flood detours, and escort synchronization while original peer permission remains unchanged. Draft-animal loans retain their separately funded original numeric itinerary; completed history does not acquire a fabricated route. This closes active-caravan address custody, while those records and other job families keep M0 open. See living world design, gameplay foundations and both wiki audiences.

M3/M6 known-hazard waystation departure (implemented, bounded): logistics.quote now checks the required route for known fire or basin-exposure.cell and, with active Scouting, searches a dry path within 120 walking edges before any dispatch debit or reservation. It reapplies the fortification-watch route review and caps the final path at 120 edges. Targeted relief searches only to the household's actual meeting hex, preserving the original depot tail and reserving its length in the search budget; the final prefix must be clear even if the later depot approach is sealed. The complete funded route feeds provisions, load capacity, optional draft-animal feed, current-road duration, dated-fish/flour arrival and the paid caravan job. City Trade shows Scouting detour on an eligible quote and in its review. Command-level tests research and adopt Scouting, quote without mutation, fund fire and flood detours, restore the in-flight route and return one actual finite tool from the waystation. A recalled household held by fire receives a physical relief gift before a sealed depot; its receipt survives restoration and the caravan returns without depositing that gift at the depot. Existing no-Scouting quote rejection and paid in-flight detours remain. This advances material-shortage and household recovery while finite depot stock and later hazards still constrain delivery. See living world design, gameplay foundations and both wiki audiences.

M0/M5 defense and military route addresses (implemented, partial): military.survey writes routeCoordinateVersion: 1 and ordered routeAxial steps for the durable surveyed corridor. military.setUnitRoute writes the same fields for active militia jobs. Recruitment, patrol, guard, mounted duty, escort assignment and caravan-follow detours, owned or allied garrison, relief muster and relief completion refresh the unit address whenever they replace its route. military.dispatchSupply addresses the separate paid two-carrier route. trade-escorts.access addresses the original recipient-consented passage itinerary, which remains fixed when the live caravan detours. allied-garrisons and military-assistance now set routeCoordinateVersion: 1 on their ledgers and records: offers have null numeric and axial routes, and accepted agreements preserve both route forms after the unit returns. community-births snapshots the historical unit route, death hex, linked supply route and garrison-post address on each age-85 military death receipt, and retains any copied peer permission. military.initialize uses separate defense.surveyRouteCoordinateVersion: 1, defense.unitRouteCoordinateVersion: 1, defense.supplyRouteCoordinateVersion: 1, defense.oldAgeRouteCoordinateVersion: 1 and defense.peerEscortRouteCoordinateVersion: 1 markers; the two agreement ledgers carry their own markers. Older numeric-only records migrate only when the corresponding marker and every applicable address field are absent. Restore validates addresses through ZoneEngine.cellIdForAxial before accepting the surveyed camp, physical orders, supplies, accepted agreements or historical loss. Tests cover home, patrol, field-supply and garrison death addresses, paid and permitted routes, accepted watches and relief, legacy upgrades, changed-address rejection and unmarked partial-state rejection. Movement still indexes numeric routes; other military records and job families, and full world-coordinate migration remain open. See living world design, gameplay foundations and both wiki audiences.

M6/M7 held resident-party exception (implemented, bounded): regional-overview.projection recognizes a live outpost resident journey whose blockReason is a next-hex fire or basin-flood hold. It checks Scouting at the job's home, retaining the existing urgent no-provisions branch. Without service, the issue navigates to home Research & adoption and describes research, adoption and staffing; with service active, it navigates to Frontier & charters and explains that the same party can try a dry detour at its next check or wait for physical clearing. Neither projection nor navigation moves people, goods or food. Tests cover paid hazardous evacuation with and without Scouting, read purity, blocked position, route custody and affected-site identity; the established supply-team guidance remains unchanged. See living world design, gameplay foundations and both wiki audiences.

M3/M6 reviewed resident departures (implemented, bounded): reviewedResidentRoute shares the founder hazard inspection and active-Scouting dry-route choice with reoccupationQuote, settlerQuote and evacuationQuote. Reoccupation and relocation reject a sealed reviewed route before payment; their provisions, capacity, adult age window and duration use the selected route. Evacuation searches outward from the outpost and reverses the safe result into its saved home-to-outpost route, so the homeward journey still starts at the outpost. If no dry route exists, emergency evacuation keeps the ordinary route. Its food need and duration reflect the chosen path, and knownHazard flags that fallback when it crosses current fire or floodwater. City review warns of the possible hold and continued food use. Paid-command tests cover both elective detours, a sealed relocation with no mutation, evacuation detour, hazardous emergency fallback and restore. A physical evacuation test now ages an actual community-born adult to death during travel, simulates active Scouting and a later flooded next hex, then verifies the survivor detour, historical death route, restore and arrival. See living world design, gameplay foundations and both wiki audiences.

M3/M6 dry founder dispatch and resident rerouting (implemented, bounded): outposts.founderRoute checks the ordinary released path, then uses expansion.dryRoute when that path is burning or flooded and home Scouting is active. Both founderProvision and founderQuote use the alternate path when it exists; the authoritative quote rechecks administrative distance, age, carrying capacity, food reserve and payment before transferring eight actual residents. A sealed path rejects dispatch without debit or transfer. On a later fire or flood next-hex hold, active home Scouting can replan an outward or homeward founder, settler, reoccupation or evacuation party. rerouteResidents updates the job and transfer routes and axial steps together; routeHistoryVersion: 1 marks a rerouted transfer, and any preexisting death gets a routeAtDeath snapshot of its original bounded path. Restore checks that historical path, axial cells, endpoints and death position; old unmarked saves retain their existing route validation. Replanning consumes the travel check and carried food without moving or refilling the party. Tests cover paid founding, sealed no-spend dispatch, a new flooded founder detour, arrival/restore/offline equality, a real aged-adult death followed by evacuation rerouting, unmarked history rejection and altered axial history. Broader route safety remains to verify. See living world design, gameplay foundations and both wiki audiences.

M5/M6 frontier-survey dry routing (implemented, bounded): expansion.quote first examines the ordinary released walking route; active home Scouting can replace a burning or flooded path with dryRoute, and the accepted path alone determines rations, timing and the persisted numeric/axial route. A paid outward team with active Scouting replans on a newly hazardous next hex; any returning survey team can now use the existing bounded dry-return replanning for fire as well as floodwater. Replanning consumes its travel check and ordinary carried food, without position movement, provision refill or stock transfer. No path or an overlong replacement leaves the team held; a sealed route rejects quote/dispatch before payment. Tests cover real Scouting adoption, before-dispatch fire, mid-route flood, return fire, saved-route restore, report custody and failed no-spend dispatch. The release geography and sixty-edge bound remain; broader regional route recovery is open. See living world design, gameplay foundations and both wiki audiences.

M6/M7 actionable blocked-supply exception (implemented, bounded): regional-overview.projection recognizes a live paid outpost-supply job whose next hex is held by fire or basin floodwater. It checks the home settlement's current Scouting program. Without service, the owner-only issue names research, adoption and staffing and targets the home Research & adoption tab; with service but no successful dry reroute, it targets Frontier & charters and explains the next retry and physical clearing/waiting options. Both messages retain the ordinary carried-food warning and never move cargo on read. Controlled paid-journey tests cover inactive and active Scouting, actual flood holds, private read purity, unchanged destination stock and restored issue equality. This is actionable guidance, not a new travel permission or guaranteed alternate route. See living world design, gameplay foundations and both wiki audiences.

M0 bounded axial lookup (implemented, partial): world-kernel.axialCellId(q,r,cols,rows) inverts the current odd-row-to-axial encoding with strict integer and boundary checks. ZoneEngine.cellIdForAxial and naturalCellAt expose that lookup in the configured world. Frontier-survey and outpost job/transfer restore now resolve each saved routeAxial step to the paired numeric route cell, rather than comparing an address decoded from the numeric cell. Kernel tests cover round trips, negative q at the southern edge, custom dimensions and invalid coordinates; expansion/outpost suites pass. This is a bounded bridge only: the checksum, geography, state keys and movement still depend on the current grid dimensions. See living world design, gameplay foundations and both wiki audiences.

M0/M6 outpost route address custody (implemented, partial): outposts.routeCoordinateVersion: 1 marks ordered routeAxial pairs for every active outpost-journey job and every population-transfer receipt. newJob and transfer populate them from actual routes; a scouting detour replaces the job's route and axial addresses together. Restore migrates only route records lacking both the ledger marker and per-record fields, including older completed transfers with a null route, and validates exact coordinates against each current numeric step. Tests cover a physical founder and transfer, safe old-save migration, unchanged stock, forged job and transfer steps, and both directions of a paid supply detour. Movement still indexes numeric cells; route identity for other job types remains open. See living world design, gameplay foundations and both wiki audiences.

M0/M6 retained outpost link location (implemented, partial): outposts.linkCoordinateVersion: 1 marks each established or evacuated link's exact siteAxial, copied from the validated founder job on arrival. Restore requires the pair to match the released site and the outpost's already validated numeric anchor, migrating old links only when the marker and per-link fields are absent. supplyQuote and reoccupationSite recheck before new commitments. Focused tests cover physical establishment, old-link migration, partial and altered fields, unchanged stock on rejection, successful supply quoting and normal restored links. Link keys, route arrays and population-transfer history remain numeric-backed. See living world design, gameplay foundations and both wiki audiences.

M0/M6 conditional charter and founder destination (implemented, partial): expansion.claimCoordinateVersion: 1 marks each conditional charter's siteAxial; outposts.founderSiteVersion: 1 marks the founder job's founderSiteAxial after the claim is consumed. Expansion restore validates the claim against the released site, and outpost restore validates every active founder destination against that site. Missing markers migrate only records with no partial coordinate fields. Founder provision and quote recheck the claim before spending resources or moving residents; arrival rechecks the job and returns a mismatched team without activating land. Focused tests cover both migrations, malformed/changed addresses, no-spend rejection, physical establishment and in-flight mismatch. Founder route cells, outpost links and transfer history remain numeric-backed. See living world design, gameplay foundations and both wiki audiences.

M0/M6 surveyed expansion address (implemented, partial): Expansion ledger coordinateVersion: 1 marks axial site custody for active frontier survey jobs, carried on-site reports and returned reports; routeCoordinateVersion: 1 separately marks each active job's exact axial routeAxial steps. Dispatch records the full route, and a flood detour replaces both route representations. Restore compares each address with its numeric cell and the released destination. Legacy numeric-only ledgers and the intervening site-address-only ledgers migrate route addresses only when their route marker and fields are absent; partial additions and altered addresses reject. Conditional outpost registration and paid fringe quotes recheck returned site coordinates before title and stock changes. Tests cover dispatch, carried and returned evidence, detours, old-state migration, unchanged stock, forgery and both registration checks. The travel engine still uses numeric route steps, while site keys and other world records remain open for the full stable-coordinate migration. See living world design, gameplay foundations and both wiki audiences.

M0/M6 world and charter identity (implemented, partial): ZoneEngine now persists a deterministic 128-bit seed-namespace worldId and worldIdentityVersion: 1 in state and manifest. Restore upgrades an older same-seed snapshot only when both identity fields are absent, rejects partial or wrong identities, and PersistenceStore accepts only the exact otherwise-matching version-three manifest without the new fields. Founding and outpost charters bind the world ID to their original axial cell list; restore verifies the list against the seven generated origin cells and migrates missing charter identity fields alongside the existing rights checks. Command, persistence and welcome tests cover good restore, old-state migration, malformed IDs, altered axial title and changed-manifest rejection. Paid charter-extension receipts now have a marked axial q,r address checked against their numeric cell, with old receipts migrated on restore; general live jobs and map state still need a staged coordinate migration; finite-deposit address custody is now implemented above; the seed-derived namespace remains shared across same-seed hosts while the separate instance identity above now distinguishes independently created worlds. Arbitrary expansion remains open. See living world design, gameplay foundations and both wiki audiences.

M5/M7 civilian recruitment floor (implemented, bounded): SET_VILLAGE_POLICY now records a 0–200 civilian-worker floor for each charter. Owner-authorized recruitment and reinforcement both reject an order that would lower laborBase beneath it, before kit payment or resident transfer. New home and outpost charters initialize the floor at zero; a marked economy migration supplies zero only when the old field is absent and rejects an unmarked injected value. City shows the current floor and reviewed adjustments; Regional overview identifies a settlement that later falls below its retained floor. Command-level cases cover authority, rejection without resource changes, successful lower-floor orders, reinforcement, regional exceptions, restore and migration. This protects future civilian capacity but does not automate governor recruitment or guarantee a particular number of staffed farmers. See living world design, gameplay foundations and both wiki audiences.

M8/W2 selected-receiver evidence freshness (implemented, partial): FILE_MAJOR_WATERWORKS_NOTICE now saves receiverReachEvidence, a v3 SHA-256 fingerprint of exact inland reviewed cells and public charter-cell assignments alongside basin links, engineered branches, frontier reasons, known coastal exits, exact screened ocean and shore cells, coastal public charter assignments and unassigned inland-cell count for the exact selected outlet. noticeCurrency returns notice-receiver-reach-changed-amend-required if that evidence changes after filing even when parties and basis stay equal. The paid Basin test expands and transfers an already named receiver charter; a controlled coastal test exchanges screened cells between already named shore holders without changing the party list. Ledger v24 migrates v23 without inventing a historic boundary, while older v1/v2 digest kinds remain loadable but stale under the v3 check; selected legacy notices need fresh amendment. Malformed/unversioned evidence is rejected. No private stock or water level enters the fingerprint. Full W2 reach and W3/W4 authority remain open. See living world design, major works plan and both wiki audiences.

M8/W2 selected-receiver charter navigation (implemented, partial): potentialReleaseReceiverReach adds only the public region anchor or fallback charter cell to each named community; City renders Find charter on map in its bounded receiver list. The paid two-owner Basin case checks the south camp's actual anchor in the selected remote outlet review, alongside notice suspension after the new charter and fresh exact notice inclusion. The City card now names bounded natural and engineered frontier reasons, omitted channels and known ocean exits with map links, using public topology only. This does not reveal foreign stock or water, forecast wet hexes or finish W2/W3 authority. See living world design, major works plan and both wiki audiences.

M8/W2 engineered coastal exit coverage (implemented, partial): basin-connections.projection now includes known ocean links from each reviewed paid-channel recipient network in its bounded coast screen. A controlled channel-to-basin-to-ocean case names the nearby public shore charter, keeps the coast open, preserves read purity and omits foreign stock. The selected-outlet potential receiver screen inherits those public coast recipients for exact notice. This does not resolve the wider ocean or complete W2 affected-reach and rights review. See living world design, major works plan and both wiki audiences.

M8/W2 potential receiver reach (implemented, partial): major-waterworks.review now roots a second bounded connection projection at the exact selected outlet receiver. It exposes public communities, ocean and engineered frontiers, unchartered cells and reach limits even when the historical release scenario sends zero water. noticeBasis adds potential-release-receiver-reach for those communities independently of replayed wet-land claims; current notice currency rechecks the basis and requires amendment if its parties or reasons change. City shows the potential network and explicit unresolved blockers. A controlled notice-basis case keeps a receiver-only charter named when impact history is unavailable; a paid two-owner Basin case freezes the southern camp and its actual owner in an unbuilt remote outlet notice and survives restore. The remote route exposes a separate open receiver network without changing live water. This is partial W2 screening, not a future design flood or complete rights register. See living world design, major works plan and both wiki audiences.

M8/W3 common inlet section (implemented, partial): A source owner with an exact rated grade and current Hydraulic engineering may select or clear candidate lined-channel depth and lanes after the registered shared-demand review. Selection changes the proposal revision and a preliminary four-worker lining bill. Both the exact-entry upper bound and verified whole-basin replay cap possible intake at the selected four-hour section capacity; neither changes live water. Recipient notices freeze the dimensions, v23 migration preserves older unsectioned grades, and restore rejects unversioned or forged sections. The intake remains unbuilt, with head, gate capture, containment, rights, funding and W2 effects unresolved; intake-engineering-unverified stays. See living world design, major works plan and both wiki audiences.

M8/W3 shared intake demand (implemented, partial): A rated proposal with complete in-pool paths now shows, for each candidate path hex, the same-interval sum of possible post-bypass entry admission from the registered rolling flow window. Shared hex peaks give later common-channel design a demand target; one gate rating cannot certify the merged trunk. This read-only screen changes no water, stock, title or revision. It establishes no physical section or controlled link, so intake-engineering-unverified remains. See living world design, major works plan and both wiki audiences.

M8/W3 lined remote outlet section (implemented, partial): A paid exact corridor return now enables a source engineer to select a rated remote channel's proposed depth. The full-pool head and receiver-tailwater screen rejects a depth below the exact rate, and the owner sees added lining work and materials in the preliminary bill. Selection or clearing revises terms; notices and v22 save validation preserve the exact choice. The whole-basin retained-window replay now bounds release at each interval's closing source/receiver head, with section-limited units and intervals distinct from backwater. The separate exact-entry upper bound now limits release by the same section at closing source head with fixed observed receiver peak (or optimistic natural bed), conserves exact measured edge transfers and reports its own section-limited units; it still omits same-interval routed arrivals and receiver rise. The paid Basin journey verifies the rate/depth choice, unchanged live water, title and stock, a frozen notice and tamper rejection. Exact term validation now ignores property insertion order, so rating inlet controls after outlet selection can survive notice and reload; altered canonical entry cells still reject. Friction, storms, structural safety, downstream effects, consent and funding remain unresolved; release-outfall-engineering-unverified stays. See living world design, major works plan and both wiki audiences.

M8/W3 released Basin corridor right (implemented, partial): The exact marked-site-avoiding lower-receiver alignment now has one explicitly authored, feature-free scenario release. A paid returned corridor survey, current open notice, active engineering/registry/accounting programs and staffed registry precede a reviewed thirty-two-timber/sixteen-food construction wayleave for sixteen presently unchartered cells. The source gains no settlement charter or water; later charter holders require separate easements and amended revisions do not inherit the receipt. Major-waterworks v21 introduced the v20 empty-rights migration and paid-survey validation; v22 retains both and validates paid survey, notice, cells and spending. The actual Basin title/easement blockers clear after registration, but W2 reach, hydraulic safety, other consents, W3 approval and W4 construction/operation remain open. See living world design, major works plan and both wiki audiences.

M8/W3 marked-site-avoiding remote route (implemented, partial): A bounded feature-free BFS offers a third exact path when it differs from the lowest-ridge and direct traces. The Basin option keeps eighteen walking steps and sixteen unchartered plots while avoiding two dune sites at 1,725 rather than 1,702 provisional one-lane cut-work units. candidate-unmarked-outlet-v1 survives revisioned notice and restore; current title/feature review and paid receiver/corridor trips use its cells. The marked construction-feature blocker clears for this route, while the title blocker remains. Major-waterworks v20 migrates v19 neutrally and rejects changed or unversioned avoidance paths. Hydraulic section, safe receiving effects, consent and W4 works remain open. See living world design, major works plan and both wiki audiences.

M8/W3 direct-versus-ridge outlet choice (implemented, partial): The remote scout exposes a deterministic shortest route beside each lowest-ridge lead, with provisional grade-cut effort and currently unchartered construction plots for each. An owner can now select candidate-direct-outlet-v1 as exact revised terms, freeze it in a notice, and pay the existing endpoint and corridor expeditions along those cells. The Basin comparison is 18 steps, 16 unchartered cells and 1,702 one-lane cut-work units direct versus 34, 32 and 998 on the least-ridge trace. The selected direct crest feeds its own head screen. Major-waterworks v19 migrates v18 neutrally and validates direct geometry; the City remote-route buttons now reach their authoritative review. Neither path grants construction title or verifies channel section, safe receiver discharge, effects, consent or W4 operation. See living world design, major works plan and both wiki audiences.

M8/W3 paid exact corridor reconnaissance (implemented, partial): The active ridge proposal can fund a separate two-worker trip after its endpoint field report. The team follows all 35 selected Basin route hexes, including shallow-water source-basin plots, and returns an ordered natural-bed/biome/feature profile. Four timber, two tools and meals are real costs; two timber and one tool are consumed as shallow-water access gear at dispatch, and the remaining materials are consumed only after a full site day. The report clears release-corridor-unvisited without changing title, station count, proposal terms or building any outlet. Survey ledger v5 rejects forged path/profile/custody and migrates v4 neutrally. Grade section, physical rate, safe receiving effects, construction rights and W4 work remain open. See living world design, major works plan and both wiki audiences.

M8/W3 physical remote receiver observation (implemented, partial): An active selected ridge proposal permits a paid two-worker field visit to its exact unchartered endpoint, followed only after the returned report by a distinct six-timber/two-tool station trip. Both take actual own/unchartered routes, route food and a full site day; observation or installation materials are spent at the site and findings publish after return. A newly foreign charter blocks installation, while the installed narrow observation easement survives later title without granting parcel or water rights. Survey ledger v5 and surface-water ledger v3 migrate older saves without invented stations and validate the pinned field report, proposal provenance, route custody and unique gauge. The paid Basin integration sources the extra tools through a finite waystation trip and real outpost supply; its remote gauge at 1346380 enrolls receiving basin 1342280, records an observed peak and clears the missing-site and unmonitored-receiver blockers. The 35-cell construction corridor remains mostly untitled and W3 engineering, W2 effects, consents and W4 work remain open. See living world design, major works plan, player guide and technical reference.

M8/W3 remote outlet corridor selection (implemented, partial): A source owner can promote a lower-catchment terrain lead into exact, revisioned candidate-ridge-outlet-v1 proposal terms. All route cells enter current title, marked-feature, notice and easement review; existing grade and candidate release screens use the endpoint, while release-outfall-engineering-unverified remains. Ledger version eighteen migrates older proposals neutrally and rejects forged remote terms in a version-seventeen save. A paid Basin test selects a 35-cell route, freezes it in a notice, restores it and rejects changed geometry without moving live water or stock. The corridor selection itself supplies no observed peak; the separate paid station above can later record one, while site rights, hydraulic capacity, complete effects and W4 work remain open. See living world design, major works plan, player guide and technical reference.

M7 bounded Governor coin remittance (implemented, partial): Governor mandates now persist an optional one-direction coin target, retained source floor and per-trip maximum, plus gross coins in the existing capped or renewing allowance and dispatch history. The daily proposal computes a real gap and surplus, then quotes the existing owned-outpost supply route with home delivery or outpost collection coins. Goods and coins may share a funded trip, while zero material targets permit coin-only journeys. Regional material and operating spending checks continue to count the trip's actual goods, travel food and feed, not relocated money; a separate Governor coins allowance counts gross transfers even after recall. A new coinPlanVersion marker migrates older mandates to null and rejects unmarked new money fields. Focused tests cover two real collection returns, coin-only top-up, cap blocking, mixed cargo, daily renewal, pure owner projection, offline replay, malformed settings and restore. This is automatic bounded treasury movement, not general realm taxation or proof of indefinite regional balance. See living world design, interface, player guide and technical reference.

M3/M6/M7 physical two-way outpost coins (implemented, bounded): The reviewed custom supply quote and job accept up to 100 whole coins for delivery from home and up to 100 for collection from a populated, established owned outpost. Delivery debits home at dispatch, credits outpost at actual exchange or refunds home on physical return after recall. Collection reserves outpost money at dispatch, loads it only at successful exchange, credits home on physical return, or releases the reserve at the outpost if the outward trip is recalled. Active reserved and carried money participates in fixed-endowment conservation; persisted job stage validation rejects forged custody and older jobs remain valid without the new field. Command tests cover actual sale funding, both directions, invalid requests, recall, physical delivery, destination and home purchases, offline replay and restore. Coin transfers consume no material capacity or regional gross spending allowance. A reviewed standing Governor target now supports bounded automatic transfers; broader M7 finance remains open. See living world design, interface, player guide and technical reference.

M7 opt-in regional coin operating allowance (implemented, bounded): The owner may add coins to the existing regional operating budget for new prepaid professional wages, finite waystation purchases and accepted buyer payments in bilateral player coin sales. The optional cap shares the current capped-total or renewing-home-day mode and retains gross receipts by activity and community. Existing v1/v2 material budgets migrate to v3 with coin coverage off; missing or unversioned coin entries reject. Focused command tests fund a real sale and purchase, block an over-cap second purchase without mutation, build a staffed regional office and prepaid professional force, reject its 28-coin term at 27, accept it at 28 and preserve the gross debit after a cash refund. A two-player command test also checks over-limit acceptance, gross spending after cancellation and recurring-round preflight before child creation, and a pure buyer City warning with acceptance disabled while over limit. Material production and local treasury/stock checks remain independent; other cash uses and wider M7/M8 finance remain open. See living world design, interface, player guide and technical reference.

M7 consented production target adjustment (implemented, bounded): SET_PRODUCTION_TARGET_ONLY lets an accepted local production steward move an existing funded warehouse target from one unit up to the owner-set ceiling. It cannot activate target mode, change the output or enlarge the input allowance. Owner full reviews renew the ceiling; earlier mandates migrate with their current target as the ceiling. Public-office ledger v2 audits the new delegated command; mandate ledger v5 validates the ceiling. City shows a separate reviewed control and the retained owner allowance. Focused office, mandate and fish-reserve tests cover authority, invalid amendments, migration, restore and a later paid mill batch; wider M7 work remains open. See living world design, interface, player guide and technical reference.

M8/W3 alternate-outfall reconnaissance (implemented, partial): City now compares at most six lower receiving catchments found inside an eighteen-step, 1,200-cell terrain bound around a proposed basin. A deterministic least-ridge walking trace reports distance and the natural height that any hypothetical channel on that trace would need to overcome; retained receiving high water is shown only where it has actually been observed. The paid Basin case shows recorded backwater at its two nearby receivers, while the lower alternative is unmonitored and has a substantial ridge. The read cannot select, fund or operate a channel and grants no title or consent. A focused paid-world test proves adjacency, the ridge calculation, read purity and restored equivalence. W2 effects, a viable W3 design and W4 operation remain open. See living world design, major works plan, player guide and technical reference.

M7/M8 finite shared-water maintenance (implemented, bounded): Source-owned commissioned conduits now have a reviewed standing repair allowance in City Land & water. One to twenty cumulative repair orders may be authorized; at or below 60% condition, a source village daily check uses the ordinary exact paid quote, real four-person crew, active consent and engineering, safe well connections, local stock and public budget. Failed checks debit nothing and produce an owner-local Regional exception; pausing retains funded work and the gross count. An additive version-one ledger gives old saves an empty instruction and rejects missing or malformed custody. Focused tests cover source versus recipient authority, shortage, paid repair, pause, cap exhaustion, migration, restore and daily/offline equivalence. Major-reservoir W2–W4 approval and operation remain open. See living world design, gameplay foundations, player guide and technical reference.

M7/M8 shared-water regional exceptions (implemented, bounded): Regional overview now reports each owner's actionable shared-well conduit offers, source funding deadline, unfinished work, underdelivery, pre-failure source wear, and pending or ended consent. Each issue targets the owner's existing Land & water controls and discloses no other warehouse. A two-owner command test covers sign, paid build, condition thresholds, underdelivery, notice and restore. This is an account-scoped read model over the existing finite conduit; it creates no water, payment, permission or save migration. Major-reservoir W2–W4 remain open. See living world design, gameplay foundations, player guide and technical reference.

M8 inlet-grade command repair (implemented): The authoritative inlet-grade selection handler is exported to the command dispatcher, allowing the existing reviewed select/clear controls to revise the exact proposal. Watershed command and recipient-notice tests cover the path. This remains proposal language; paid intake construction and operation are still open.

M0/M1 engine cell-reference validation (implemented, bounded). After closing the encoder's southern-row gap, a footprint test exposed Number(null) === 0 in authoritative cell lookup. Terrain, deposit, renewable stock, region, vegetation, occupancy and active-site reads now share a strict in-range parser that retains canonical decimal saved-map keys. A missing southern footprint cell cannot alias cell zero or pass region checks. Focused world-kernel, City projection and living-world tests pass; valid numeric saves do not migrate or change identity. Stable world/axial IDs remain open.

M0/M1 world-edge numeric ID guard (implemented, bounded). canonicalCellId now checks both configured width and height. The last southern row remains the same, while the first out-of-world row and a smaller test world's first invalid row return no ID. Generated terrain and existing saved numeric identities are unchanged. This closes an encoder/decoder boundary mismatch; it does not satisfy the stable world/axial ID migration required for arbitrary expansion.

M3/M7/M8 proposed-works material exception (implemented, bounded). For an active exact rated reservoir intake or graded outlet, Regional overview now compares the combined preliminary one-time material bill with current source-village stock after protecting household food. A shortage creates Proposed reservoir materials are missing and opens that proposal's exact Supply chains goal. The issue follows a revised intake-only or outlet-only bill and disappears when no current gap remains. A command-funded Basin scenario verifies the exact goal, read-only regional projection and amendment behavior; regional regression tests pass. No construction, hydraulics certification, consent or water release is granted. Full M0–M8 gates remain open.

M3/M4 physical-book goal handoff (implemented, bounded). The Knowledge goal picker now includes one-book school copying and scriptorium commissioning for locally known topics. The school path opens the exact topic’s manuscript controls and current copying blocker; the scriptorium path selects a one-book draft and displays its live commission quote or blocker. School copying still shares the public learning slot, while scriptorium work remains a distinct funded commission. Goal selection and project tracing are read-only. Existing command tests now compare both book goals to current quotes and paid orders. Physical transport, study and adoption remain separate; broader M0–M8 gates stay open.

M3/M4 manuscript and academy learning goals (implemented, bounded). Supply chains now lists Study [topic] and Academy research: [topic] for unknown topics. Study traces the real book and supplies, opens that topic’s manuscript controls and displays current study blockers. Academy research traces its prepaid topic and support materials, preselects the topic in the Academy panel and displays a current quote or blocker where available. Either selected goal advances to adoption once learning completes. Planning does not issue an order, supply a school or academy, or bypass their live staff, practice, prerequisite and stock checks. A focused test compares every catalog topic’s graph costs to both project specifications and confirms pure reads. Wider M0–M8 work remains open.

M3/M4 public research and adoption goals (implemented, bounded). Supply chains now exposes the 47 catalog topics' public research bills as Knowledge goals while they are unknown, and their separate adoption bills after learning. Research completion carries a selected goal to its adoption step. An already retained program has an empty first-adoption bill because ordinary re-enabling does not charge twice. Inspect [topic] in Research opens the exact current technology card; it issues no order. A command test verifies read-only trace, paid research and adoption stock debits, free re-enable accounting and save restoration. Prerequisites, practice, institutions, staff, food reserve and current world revision remain enforced by the live reviews; manuscript and academy paths remain separate.

M3/M4/M7 named-specialist course supply goal (implemented, bounded). Supply chains now exposes one-course goals only for known local services with actual upkeep, using specialists.COST rather than a copied UI bill. Both live and forecast Regional backup warnings link to that goal; the goal opens the exact service in the current Research controls. A focused command test proves that reading the graph reserves nothing and funding a real course withdraws the traced four timber, eight food and one tool, with save restoration. The course still needs an eligible adult, staffed school, active Literacy and mentor, free labor and protected food; qualification and backup authority remain separate. No save migration or automatic procurement was added.

M4/M7 forecast-to-training handoff (implemented, bounded). A six-day Regional forecast can expose the named-service backup issue as an incumbent reaches warning age 80, before the live issue exists. Its Inspect current controls link now preselects that service in the present owned City's training panel. A focused copied-world test confirms the future issue and exact Research target without changing the live snapshot. The normal course and backup reviews remain required; this adds no training, authority, stock or save field. Forecast outcomes remain conditional on later world changes.

M4/M7 aging specialist backup warning (implemented, bounded). An older named household adult with a live specialist appointment and no designated backup now creates a service-specific Regional overview exception. It names the topic and exact old-age boundary, becomes urgent within four village days, and opens Research & adoption with that topic selected in Named specialist training. Selecting the issue pays nothing. A focused command journey verifies a pure warning, urgency, a paid three-day course for another existing adult, separate backup appointment, and actual service succession on death. A designated backup restores the ordinary family-aging warning. No mortality, service, cost or save rule changed; wider specialist mobility and fully unattended regional balance remain open.

M3/M7 renewed Regional-capital well repairs (verified, finite). A copied continuation starts after separately paid owned-outpost clay and ore returns. Over a further bounded interval, it funds three manual central-headworks repairs with eight timber, four bricks and one tool each, after deliberately pausing the ordinary automatic maintenance instruction. The first two consume ready local bricks; the home then fires returned clay and logs into replacement bricks, and uses returned ore and charcoal for a replacement tool before the third repair. Standing woodland harvest and reviewed Governor log carriage help replenish the saw input. Every checked community remains fed and the capital's household water capacity covers its people throughout. A natural named-specialist death interrupts civic programs and recognition; the player releases the dead appointments, restores supplied services and regains Regional-capital status after a temporary decline. Save restoration agrees. This proves a recoverable finite material cycle, not perpetual mineral renewal, automatic workshop coordination or uninterrupted rank.

M2/M3/M6 food-short camp provision path (implemented, bounded). A populated camp without its first field now exposes a home Food plot provisions offer when local food falls below the actual construction-food bill plus three days of meals. The offer carries the shortage plus two days of resident meals, capped at 40 real food, quoted with normal carrier, ration, home reserve, route, capacity and destination-storage checks. Arrange plot provisions from home focuses the camp's manual supply panel. A command-built shortage journey confirms no stock is reserved by reading, home food is debited only on dispatch, camp food is unchanged in transit, then a real arrival supports paid construction, separate grower staffing and a first warehouse harvest. Longer routes and larger camps can need additional trips; this is not a standing food guarantee. The initial Getting started founding path remains unchanged.

M1/M3/M6 standard founder plot-supply path (implemented, bounded). A standard camp with twenty timber sees its ten-timber plot shortage and can choose Arrange plot timber from home. The home opens the exact outpost supply panel with a dynamically capped Food plot timber load, subject to the normal quote, two carriers, route rations and household reserve. A focused command journey confirms timber remains unusable in transit, arrives once, funds the separate plot construction and staffing, and produces real repeated food batches. The isolated City walkthrough reached the ten-timber order review and confirmed the paid outward job. The optional extra-timber founder kit remains available; neither path grants a plot or food.

M1/M2/M6 outpost food readiness (implemented, bounded). A completed local food-plot card now shows the existing producer's current status, first-cycle potential output or blocker, and the camp economy's projected food balance, stored food and days of meals without production. Inspect Production opens the field's ordinary controls. The integrated command journey proves unstaffed is blocked with a negative potential balance and staffed is ready with a nonnegative balance; a live City check showed 11 potential food/cycle and +3 potential food/day with 80 stored. No harvest or food is granted by this read-only handoff.

M4/M6 pilgrimage dispatch correction (implemented). Restored the existing pilgrimage journey handler to the outposts module export so a reviewed DISPATCH_PILGRIMAGE order can fund and start its physical visit. Its 13 focused journey, consent, exchange and migration tests pass. No cost, permission or save rule changed.

M1/M6 outpost food-plot handoff (implemented, bounded). The existing outpost plot recommendation enters the normal construction preview at its suggested hex, with current footprint and funding checks. Once construction really completes, the outpost card can review assigning two local growers if they are free. The integrated journey compares the recommended hex and cost with the selected-plot construction quote, then asserts the unstaffed operational state before the normal staffing command and two staff afterward. An isolated live City check paid the reviewed 30-timber/10-food plot at the suggested hex, watched it complete, and confirmed the two-grower review and assignment. Neither shortcut grants food or bypasses local stock and crew requirements.

M3/M6 founder-kit supply goal (implemented, bounded). A registered, current charter with a feasible route now exposes standard and ten-extra-timber founder goals. Their full food, timber and tool inputs use the founder dispatch calculation, including route-specific travel rations, even when missing stock blocks the live quote. The Supply chains card shows the charter, route, cargo, payment and exact blocker, then enters the existing reviewed dispatch only when eligible. The integrated journey confirms both goal/quote cost matches, actual paid departure and removal of the used charter's goal. It does not build the camp's food plot automatically.

M3/M5 land improvement goal to actual plot (implemented, bounded). Supply chains adds soil improvement and small irrigation from the authoritative land.TYPES costs, and an Improve this plot handoff for current quoted land and woodland planting goals. The card exposes the selected hex, exact site blocker or current bill, and reuses START_LAND_PROJECT or the existing woodland order review; a different plot is selected in Land & water. The integrated gameplay journey asserts both new goal inputs equal their live eligible project quotes before real completion. Local UI checks show the unsurveyed soil and irrigation blockers, an occupied planting site, disabled order buttons and working navigation to Review land survey.

M3/M5 first patrol food handoff (implemented, bounded). A ready home militia with a surveyed corridor exposes Supply a frontier patrol in the troop goals. The server's patrolProvisions calculation provides required carried food, current carried food and additional local food; the same calculation feeds quotePatrol. City shows the live risk or rejection reason and opens the existing ordinary or cautious patrol review only with an eligible quote. A command scenario verifies projected demand equals paid quote cost, read-only planning leaves inventory unchanged, household food reserves can block departure without hiding demand, and actual departure removes the ready-at-home goal.

M3/M5 first militia kit action (implemented, bounded). With the two-resident militia goal selected, City now shows actual stored kits and defense.craft's two-kit quote or exact blocker. Review two militia kits uses the existing paid craft review when eligible. A founding-village UI check reports two missing kits and Needs 2 iron, with the craft button disabled; the integrated import journey asserts the server quote's four-timber/two-iron bill after a physical iron return, then completes crafting and recruitment. Selected hypothetical sources do not substitute for stored kits.

M4/M5 recruitment readiness in Supply chains (implemented, bounded). The first militia goal now shows defense.recruit's current two-resident quote or exact rejection reason and links to Drill and Defense. Review two recruits invokes the same existing command review as Defense only when that quote is eligible. Founding militia needs a staffed Drill instructor, operating commons, civilian labor and two crafted kits, but no barracks. The supply material path and reviewed recruitment remain separate; neither goal selection nor the shortcut reserves people or stock.

M3/M4 barracks and first militia supply link (implemented, bounded). The barracks goal card now opens the separate Train two militia residents supply goal through Trace first militia equipment and explains that building the structure supplies no kits. An integrated command journey completes the four-load brick/iron import plan, purchases the remaining brick, builds and staffs the barracks, then buys another iron, crafts two militia kits and recruits two actual residents. That final iron matters because construction leaves only one of the two kit inputs. The link does not order any resource or bypass normal construction, production or recruitment checks.

M1/M3 building goal to construction (implemented, bounded). The Supply chains goal now opens its exact building's existing footprint preview, shows the current plot's construction blocker, and offers direct Review construction when the server has an eligible current quote. The review retains all ordinary funding, rights, footprint and worker checks; the goal itself issues no order. A live local City walkthrough followed a Community food plot goal through site comparison to its reviewed building order and back to the enabled direct action. Multi-project goals still need separate plots and orders.

M3 mixed-material goal imports (implemented, bounded). The Supply chains goal can suggest one two-to-four-load waystation itinerary across different missing resources using currently eligible lots and finite depot stock. It first seeks complete coverage with minimum trips, excess and coin spending; when that is impossible within four loads, it can show a partial plan with its exact remaining shortage. The shortcut opens an editable draft and leaves payment and dispatch to the ordinary Trade & transport review. A later load may still block on a fresh quote. A command-level stone-and-bricks case confirms separate physical returns and save restoration. In a fresh founding City, a barracks goal now proposes 15 bricks and five iron across four loads and labels the remaining one-brick gap. Multi-settlement automatic procurement and long-run material balance remain open.

M3 planned-import visibility (implemented, bounded). Supply chains now shows the quantities and states of an unfinished waystation itinerary when its loads overlap the selected goal's uncovered resources. The first travelling load is distinguished from later unpaid and unreserved loads; returned or cancelled loads are omitted. The cue links back to Trade & transport without changing stock, reservation or goal math. A live local City check confirmed first-load dispatch and the still-open twelve-stone gap. It does not guarantee the next quote or delivery.

M3 player-produced mineral circulation (implemented, bounded). Coin-market sale and purchase offers now cover rough stone, clay and iron ore using the existing finite fund and ordinary caravans. Clay and iron ore begin with no depot stock; their first purchase requires an actual seller delivery. Stone can be added beyond the initial finite depot allocation through a paid quarry-to-home-to-market route. Tests cover all three surveyed, finite outpost sources, physical home collection, sale settlement, buyer reservation and return, and save restoration. No source regenerates, no stock or coin is minted, and wider long-run material balance remains open.

M3 supply-goal import handoff (implemented, bounded). Supply chains now offers Plan N linked imports from a founding-home material gap when one currently quoted waystation load is insufficient and two to four loads can cover it within current finite depot stock. The control opens an editable Trade & transport draft; it sends nothing before a separate review and acceptance. An existing unfinished itinerary is linked for inspection. The planner chooses the shortest eligible sequence and then the least excess. A twelve-stone command journey confirms ten plus five paid loads, with no goal credit for reserved or travelling stone and full coverage only after both unload. Longer-term replacement supply remains open.

M3/M6 reviewed waystation import itinerary (implemented, bounded). The founding home can authorize two to four exact material import loads through Trade & transport with cumulative food, goods and coin ceilings. The first paid caravan leaves at acceptance; a later load dispatches only after its predecessor returns and unloads. Current quote checks still govern every departure. A busy team defers the next check; another failure records a blocked leg and Regional overview warning for reviewed retry or cancellation. Recall cancels future legs, and the ledger restores without repeating a completed load. Focused tests cover real two-trip stone conservation, budget retry, recall, old-save migration and corrupt-save rejection. The finite depot and long-run material balance remain open.

M3 physical import alternative (implemented, bounded). The Supply chains goal tree now offers a direct reviewed import from a currently eligible waystation lot, preferring the smallest offered load that covers the remaining line or the largest eligible load when one trip is insufficient. It reuses the ordinary caravan review and authoritative dispatch. A paid two-trip rough-stone case consumes home timber and finite depot stock, credits stone only on return, covers an idle-quarry goal after the second return, and matches a restored in-flight arrival. This is a finite replacement path, not mineral renewal or long-run supply balance.

M3/M6 mineral source recovery (implemented, partial). A Regional overview warning for a low or exhausted staffed quarry, clay pit or iron mine now targets the founding home's exact resource in Supply chains. It selects a replacement goal of up to twelve whole units above currently stored home stock and retains the depleted outpost as the affected community. The source trace can show other owned producers and actual lease/import routes; the navigation issues no order and grants no deposit, stock or cargo. Stone, clay and iron warning projections are covered by focused tests. Broader regional supply sustainability remains open.

The paid stone-camp regression now goes through a second Governor return after its home loses civic service for lack of timber. It exports actual food to make warehouse room, assigns the mill and woodland workers, replenishes timber, and restores programs under their enabled/disabled rules. A real leader death interrupts orders during the longer rebuild; the appointed adult is embodied and lawful handover completes before work continues. The existing daily outpost target refills finite stone, the retained Governor mandate dispatches a second paid team, and home stock increases only on return. This advances M3/M6/M7 interruption recovery, not indefinite supply.

When a Governor exchange has unavailable home civic service, the live City now shows a recovery panel with current home timber and direct routes to its Supply chains trace, inactive Regional institutions/Record keeping/Public accounting cards and registry staffing. These are read-only navigation shortcuts; the player must restore real timber and staff; an enabled program can resume at a later daily check, while a disabled one needs adoption review. The paid stone-camp regression now confirms that remote quarry stock can refill while zero home timber stops another Governor dispatch. This advances M3/M6 blocker recovery without establishing indefinite regional balance.

The home Supply chains outpost production-target shortcut now seeds a new draft with a daily-only, one-batch input ceiling. A retained mandate keeps its reviewed period. Pure cases verify the former capped default's larger suggested budget is not silently reused as a daily ceiling, and the paid stone journey confirms a quarry refills its remote warehouse after the first Governor collection. Home civic timber service can still stop another dispatch; finite tools, deposit and actual carrying remain. This advances M3/M6 renewable authorization, not indefinite material balance.

A new command-built stone-camp regression proves the combined zero-stock production and Governor route. The home replenishes its service timber from harvested logs, supplies the camp's local accounting, drafts its exact quarry target and preauthorizes rough-stone collection. The first unstaffed check neither dispatches nor spends; later quarry batches consume actual tools and finite deposit, and a paid team finally unloads real stone at home. The Governor ledger restores. This strengthens M3/M6 integrated-journey evidence, while renewable tools, minerals and indefinite regional balance remain open.

The individual home resource trace now gives a zero-stock owned outpost's identified producer an outpost production-target shortcut and, when Governor prerequisites hold, a future collection shortcut. It drafts at most twelve additional units beyond current home stock for editing in the destination review. The material goal tree continues to use its exact uncovered line. These are navigation and draft changes only; the existing service, stock, route and payment checks remain authoritative. This advances the M3/M6 handoff without proving ongoing regional balance.

The home material goal can now preauthorize Governor collection from an owned outpost with zero available stock when that outpost still has an identified producer or woodland source. The pure draft helper accepts zero available goods, targets the uncovered home amount and funds one prospective load without inventing one. The ordinary mandate and later daily checks remain authoritative. A command-funded woodland test first empties camp logs with two paid trips, records a zero-stock Governor check with no dispatch or material spending, harvests new logs locally, and verifies a later real trip unloads them at home; its ledger restores. An isolated City check showed the zero-stock shortcut and opened a 33-log home target with a daily allowance. This advances M3/M6 planning and physical logistics without proving long-run regional resource balance. See living world design, plan, interface behavior, player guide and technical reference.

An unavailable Production mandate target now offers Inspect Public accounting beside its disabled review. The control selects that exact Research card in the current City and retains the unsent mandate draft; it changes no service, stock or order. This makes the newly verified home-to-outpost material handoff recoverable when its destination lacks accounting. The baseline npm test run passed all 2,507 tests before this UI edit. A separate isolated City check opened Stone camp's blocked quarry draft, focused its Public accounting card and returned to the retained target without submitting an order. M3/M6 resource, service and physical freight constraints remain. See living world design, plan, player guide and technical reference.

The home Supply chains row for Plan outpost production target now explains the Public accounting service needed to review the mandate at its destination. An isolated live City walkthrough selected a 301-unit rough-stone goal, saw 288 units remaining in Stone camp's quarry and 13 units still needing another source, then opened that quarry's Production mandate with a 288-unit draft. Review was correctly disabled until accounting was available. This verifies the player-facing cross-settlement handoff and clarifies its immediate blocker; source production, payment and delivery remain separate. See living world design, plan, player guide and technical reference.

Remote production targets in a home Supply chains goal now respect each owned outpost mineral producer's actual surveyed deposit remainder. The home read model exposes whole units left at that exact site, the button drafts at most those units beyond already collectable remote stock, and any residual home need remains explicit. An exhausted producer has no target action. The destination refresh rechecks the deposit before creating a draft, preventing a changed finite source from silently promising more. Clay and stone projections and pure partial/zero-capacity cases pass. No save schema, material ledger or extraction rule changed; broader M3/M6 replacement sourcing remains open. See living world design, plan, interface behavior, player guide and technical reference.

A paid stone-outpost continuation now verifies the home material-to-remote-target path beyond its draft. Local Record keeping and Public accounting require real research, adoption and supplied timber; the identified staffed quarry accepts the reviewed target, consumes tools and depletes the outcrop. Home rough stone remains zero until a separate carrier trip returns. After a paused exact-transfer check, a reviewed daily allowance refills outpost stock through more real batches. The mandate and inventory survive restoration. This closes the bounded integration evidence for the shortcut, while the M3/M6 long-run resource and transport gates remain open. See living world design, plan, player guide and technical reference.

The home Supply chains goal now offers Plan outpost production target for a specific owned-outpost producer when its presently collectable stock is short of the goal line. The destination City refreshes before using that producer's current recipe, local stock and mandate to form an unsent draft. The source read model carries a structure ID, with no inventory or command side effect. A zero-stock staffed clay-pit test verifies exact source identity and outpost-stock target calculation. Actual production still requires accounting, workers, any recipe inputs, finite deposit and storage; transport remains a separate paid journey. This advances M3/M6 without proving indefinite regional material balance. See living world design, plan, interface behavior, player guide and technical reference.

A selected local supply source can draft funded target production — M3 partial

Supply chains now offers Plan local production target beside a selected recipe step that has a matching built producer. The button rechecks that producer and current recipe, then opens its unsent Production mandate with a target of current local stock plus the step's uncovered amount. A pure planner estimates nominal full-staff batches, raises capped input allowances to cover those batches or a renewing daily allowance for one batch, and preserves previous mandate spending and other draft choices. Bounds or invalid input fail without changing the draft. No worker, input, output or policy changes until the owner confirms the normal server-reviewed mandate. Focused tests verify draft purity and a real staffed smithy making four planned tools from finite iron and charcoal, with the ledger restoring. Partial staffing, competing consumers, service loss, finite deposits and physical arrivals can still stop the target; broader automatic order scheduling remains open. See living world design, plan, interface behavior, player guide and technical reference.

Governor carrier shortage opens a reviewed staffing path — M3/M6/M7 partial

When a running Governor exchange cannot dispatch because its two carriers would breach the home idle-worker floor, City shows the actual required/free counts and opens the Regional staffing comparison directly. The owner still edits at least two producers, compares current and proposed one- or six-day outcomes, and confirms the ordinary revision-checked order. No route or staffing is automatically changed. A copied Regional-capital material continuation then verifies separately paid outpost clay and ore receipts and home replenishment after the workshop labor phase. Both mandates remain active: once the clay home target is satisfied, it spends no further trip and the same home carrier pool serves the ore route. Both sources remain finite and the longer brick/tool and well-repair balance gate remains open. See living world design, plan, interface behavior, player guide and technical reference.

One-village staffing swaps unlock real repair-material batches — M3/M7 partial

The Regional staffing plan now accepts two to eight producer changes in one owned settlement and keeps its copied one/six-day forecast, stale-revision checks, labor conservation and atomic acceptance. In a copied command-built 64-resident capital with no free home workers, the player can move three saw workers to the smithy, then move them to the kiln; actual iron and charcoal become tools, and clay previously collected from an owned outpost plus logs becomes bricks. The copied continuation and its materials restore without changing the original regional checkpoint. No automatic labor policy or perpetual raw-material source is implied; the next balance gate remains repeated physical clay/ore supply, workshop staffing and funded well upkeep across longer horizons. See living world design, plan, interface behavior, player guide and technical reference.

Regional warnings open the exact repair supply goal — M3/M7 partial

Regional timber and headworks exceptions now carry a selected Supply chains goal into the affected community, with a one-project quantity. The warning remains a pure read; the player still authorizes actual production, transport and repair. In a copied 100-resident City built with controlled expansion stock, renewing a finite woodland Governor route as an ongoing, daily-funded food/log exchange supports thirty more home checks: over twenty paid departures, no household food shortfall at home or camp, home timber at least twenty, and restorable route and inventory ledgers. The well still lacks bricks and tools after earlier repairs; its capacity and City status later fall. A renewable repair-material chain remains open. See living world design, plan, interface behavior, player guide and technical reference.

Proposed reservoir pool flags active carrier routes — M8/W2 partial

Recorded-window review now flags a currently paid journey when the proposed held pool newly wets a remaining source-catchment route cell. Public results count journeys and name charter owners; each noticed carrier can inspect its own route hexes. The source sees a blocker, and the carrier receives a separate exact notice reason even without a wet land claim. The replay changes no cargo or water. Complete impact reach, rights, engineering and buildable works remain open. See living world design, major waterworks plan, player guide and technical reference.

Empty outpost woodland stays visible in the home material path — M3/M6 partial

The founding home's Supply chains goal and full log trace now retain an established owned woodland outpost even with zero logs. Its best current manual harvest plot shows the existing read-only quote's conditional yield or blocker and opens that outpost's Land & water screen; a separately retained standing forestry instruction shows its live check status and opens Orders. Neither can be collected before a harvest actually fills remote stock, and possible output does not reduce a home shortage. A command-funded case starts with an empty camp, reviews the source without mutation, finishes a real two-worker harvest, reserves eight logs on an outpost pickup, physically returns them to an unstaffed-mill home and restores the resulting stock. Another case checks standing authorization, pause and projection purity. Future growth, storage, transport and recurring repair demand still constrain regional balance. See living world design, plan, interface, player guide and technical reference.

Empty owned outpost sources reveal real producers — M3/M6 partial

The home Supply chains goal and resource trace now include an established owned outpost with no collectable stock when a built producer's currently selected recipe can make the requested good. Each source exposes that building's hex, ready output or current blocker and opens the outpost Production screen. A zero-stock source offers no manual or Governor pickup, and its prospective batch covers none of the home shortage. A command-built staffed clay camp proves the empty source appears before its first extraction; releasing its three workers changes the producer to blocked without producing clay or mutating on inspection. Existing tests still prove later clay moves only through paid dispatch and return, and another owner cannot see the source. This improves regional planning, while finite deposits and durable production/freight balance remain open. See living world design, plan, interface, player guide and technical reference.

Supply chains can prefill a reviewed Governor collection — M3/M6/M7 partial

Owner-visible owned-outpost material lines and resource traces now show Plan governor collection when the home knows Regional institutions or retains a Governor route. The shortcut rechecks the selected outpost/source against the fresh City projection and opens its existing Expansion Governor exchange card; it does not submit an order. public/governor-supply-draft.js builds a pure draft: a new route targets the uncovered home stock, leaves outpost delivery at zero, uses an ongoing daily allowance and includes travel-food room; an existing route preserves its main cargo, other collections, trip limit, period and recorded commitments, adding a free row or raising the matching target and one-load allowance. A conflicting delivery, full four-good collection, invalid source or allowance limit fails without changing the draft. The server remains authoritative on quote and acceptance. Pure cases and two command-built routes prove the draft is read-only, remote logs and added ore reserve only at physical dispatch, home stock rises only after return, previous route spending remains recorded and the ledgers reload. Current forest/mine output, finite clay/ore, staff and later repair cycles remain M3/M7 work. See living world design, plan, interface, player guide and technical reference.

Household-critical well repair takes priority over other due land work — M2/M7 partial

At each settlement's daily recurring-maintenance check, an eligible central well with at most three wear checks before loss of extra delivery is considered before other plots only when residents need that capacity. Other plots retain deterministic most-worn and cell-ID order, and same-plot candidate fallback is unchanged. The ordinary paid well quote, workers, food, specialist, budgets, owner timber floor and one-day crew still govern funding; a blocked urgent well spends nothing and another repair can proceed. Regional overview has a separate urgent headworks-timber-floor issue when all ordinary local repair materials are present but the reviewed floor would prevent a household-critical automatic repair. A controlled 16-resident case with a more-worn channel verifies crew priority, warning purity, payment and offline agreement; a 12-resident case verifies old order when extra capacity is unnecessary. No save schema or resource grant changes. Finite replacement materials and longer M3/M7 balance remain open. See living world design, plan, interface, player guide and technical reference.

Reviewed timber floor for automatic land maintenance — M3/M7 partial

SET_LAND_MAINTENANCE now accepts a whole local retainTimber floor from zero through 1,000. Its quote checks post-payment timber before assigning a crew or debiting any repair material; a blocked candidate records the exact floor and local need. The existing most-worn-first fallback can still choose another affordable improvement. City Land & water shows the field, a current two-day specialist-upkeep example and the explicit risk to well water if repair is delayed. The default is zero for new and migrated instructions; version-three saves validate the field, while version-one/two ledgers migrate without changing earlier spending or funded work. A focused command test verifies review neutrality, blocked stock, invalid choices, retained save state, unchanged ordinary bill and funding after a reviewed floor reduction. This gives the player control over civic stock, while ongoing timber production, finite bricks/tools and future well deadlines remain open. See living world design, plan, interface, player guide and technical reference.

Well-repair planning includes a civic timber buffer — M3/M7 partial

A built central well now has an optional Supply chains goal for one ordinary repair plus two village days of current active-service timber draw. The ordinary job still costs eight timber, four bricks and one tool; the added timber is advice about keeping civic service supplied while a four-person crew may interrupt sawing. Regional overview raises Well repair leaves little civic timber at 80% headworks condition or below when the local warehouse can fund the repair but would retain less than that two-day buffer. The warning clears when enough timber is stored, a service draw changes, the well is repaired or a job is funded. A focused well scenario verifies the exact dynamic goal, warning, clearing and read purity. No stock, mandate, repair rule or save schema changes. Finite material sources and indefinite M7 balance remain open. See living world design, plan, player guide and technical reference.

Two locally replenished repairs at the larger capital — M3/M6/M7 partial

The 64-resident, six-community Regional-capital integration now continues for 45 more daily checks after its previous 3,600-day growth run. Actual two-carrier trips bring 20 forest logs and eight mine ore home before local charcoal and mixed metalwork forge the next repair tool. The existing Governor exchange subsequently delivers another real log load. After the first paid headworks repair, the owner makes six bricks from local clay and logs and two more tools from retained iron and charcoal, runs the mill at four workers to protect a timber buffer, and funds a second ordinary repair under the already reviewed daily allowance. All chartered communities retain food without a shortfall; the home retains Regional-capital recognition and household water on every advance. The endpoint has 64 residents, 82% headworks condition, 10 timber, four bricks and one tool. This adds a no-grant material continuation test and no new simulation rule. Finite mineral supply and additional repair cycles leave indefinite M3/M7 regional equilibrium open. See living world design, plan, player guide and technical reference.

Outpost pickup custody in supply goals — M3/M6 partial

The owner-visible movement projection labels an outward supply team's reserved pickup separately from a successfully loaded homeward or unloading cargo. public/supply-goal-plan.plan lists those quantities on the affected material line but keeps its shortage unchanged until the goods actually enter the home warehouse. A homeward recall before pickup does not appear as inbound supply. The clay integration now checks eight reserved units, eight returning units, and eight delivered home units against the same goal; no existing job or save rule changes. See living world design, plan, interface, player guide and technical reference.

Pending quantities are allocated at most once across material lines in the selected hypothetical tree. The extra-pickup draft uses the still-unarranged amount, capped by current remote stock and the existing twelve-unit convenience limit; it remains subject to the server quote.

Each pending row now carries the active job's dueAt as a labelled next journey check and targets its exact Expansion journey card by ID. The clay integration checks that outward and homeward projections use the live job check time. It is not a delivery forecast; route hazards, meals and unloading space can delay the actual arrival.

Owned-outpost material sources in the home supply tree — M3/M6 partial

The founding home's owner-scoped Supply chains projection now exposes whole supported cargo stored at established linked outposts, after the outpost's protected food floor. These regionalSources are separate from home stock, local ready output and finite waystation imports. The goal planner carries them as unfulfilled physical options, so a missing local material remains a shortage. Both the goal branch and full resource trace name the outpost and offer Plan outpost pickup; the button opens that exact outpost's custom transport draft with at most twelve available units selected. It neither quotes nor dispatches automatically. The existing server quote and reviewed command decide whether a two-person team can carry the load, pay food, navigate the route and unload. The command-built clay camp test observes twelve clay remotely and zero at home, then four remote and zero home after reserving eight for a real journey, and eight home only after return; the advice leaves the world snapshot unchanged. This improves the regional resource-to-refinement path but does not replenish the finite deposit or guarantee a viable trip. See living world design, plan, interface, player guide and technical reference.

Multi-project building and well-repair supply goals — M3/M7 partial

The City supply tree now offers Planned projects for one to twenty copies of a building quote or an existing headworks repair. The browser scales only material inputs, not construction work, before the same read-only planner allocates local stock, protected food and selected finite batches across the complete request. Repair well headworks is presented as a conditional per-repair consumer rather than a one-time use; the actual maintenance order still needs eligible wear, service, workers and local stock. A command-built worn-well state with three timber shows one repair missing five timber, four bricks and one tool, while two repairs need thirteen timber, eight bricks and two tools; stock is counted only once and the world snapshot is unchanged. Focused supply and deep-groundwater tests pass. This does not schedule multiple jobs, guarantee source throughput or close the finite regional material loop. See living world design, plan, interface, player guide and technical reference.

Regional freight and a reviewed maintenance instruction fund the next City well repair — M3/M7 partial

Command-tested after the bounded 100-resident City and eight-person woodland camp checkpoint. SET_LAND_MAINTENANCE on the surveyed home source authorizes a 60%-condition trigger, zero idle-worker floor and daily-only eight-timber/four-brick/one-tool ceiling; inventory is byte-equivalent immediately afterward. A twelve-log caravan sale physically earns the coins for four bricks and one tool from the finite waystation. Home storage and governor trips still obey their ordinary limits. The first seven due maintenance checks wait above threshold; the eighth funds one normal maintain-headworks job, debits eight timber, four bricks and one tool and records its exact gross commitment. The four-worker project completes at 100% condition while the home remains a City with 100 people, full household water and food, and an eight-person fed outpost. Restoring the save validates the maintenance ledger and home inventory. This uses existing runtime rules and adds no resource or schema; future brick/tool supply, route funding and additional repair cycles remain open. See living world design, plan, interface, player guide and technical reference.

A paid governor route restores a bounded 100-person City with an eight-person woodland camp — M2/M3/M6/M7 partial

Command-tested from the same 100-resident home and paid camp branch. The unchanged manual return schedule first leaves home logs at zero, water at 96 and stage at Village despite source logs. With active Regional institutions and Public accounting, a reviewed SET_GOVERNOR_MANDATE targets forty home logs, retains five at the camp, caps each leg at twenty, and limits trips to six with explicit food/log allowances. The first two normal governor journeys return logs physically; the instruction reaches six paid dispatches while actual home logs feed the mill; a separate twelve-log sale buys four finite bricks and one tool. A paid central headworks repair restores 108 water places, and three Town plus three City qualification checks earn 100-person City while the eight-person camp remains fed. The owner then reviews a twenty-trip, larger-allowance plan. Four more paid departures occur during twelve passing City checks; another twelve-log market sale buys the next repair materials, and the headworks repair finishes with City service intact. Twelve further daily checks retain City, 100 residents, food, water and full sanitation. No development-stage change occurs across the bounded 31 checked City days and intervening work. At the saved endpoint, the home has 24 logs, 31 timber and a 76% headworks, the camp has 34 logs, and the governor ledger records sixteen dispatches. Population, both inventories and the mandate restore from save; no runtime schema or resource grant changed. The plan and market remain finite, and additional bricks/tools and future repair cycles are still required for unattended M3/M7 equilibrium. See living world design, plan, interface, player guide and technical reference.

Manual-only outpost freight refills the home to 100, but City service lapses — M2/M3/M6/M7 partial

The existing woodland branch now continues beyond its first three paid log returns. Home timber exhaustion leaves the precision-saw Lumbermill blocked when Joinery has lapsed; selecting its basic saw recipe lets actual stored logs restart timber output, after which Joinery and precision sawing resume. Pausing Land registry frees one daily timber, so Regional institutions can operate and the 92-resident home briefly earns City. A 1,600-food target on three fields opens home storage for more physical camp returns. Ten real logs sold at the finite waystation purchase two missing bricks and one tool; a temporary governor pause and another collected load fund an ordinary eight-timber/four-brick/one-tool central headworks repair. The repair restores 108 water places. Switching the fields to continuous production then admits eight real migrants in five days, leaving 100 home residents and eight at the camp. The extended run preserves food in both places and survives save restoration, but later home logs reach zero while the camp still holds at least twenty. The headworks wear back to 96 places and the home is a Village. The governor continuation above shows a bounded recovery from this manual-only gap; renewed route authorization and bricks/tools remain necessary for long-run M3/M7 balance. See living world design, plan, interface, player guide and technical reference.

A 100-person home pays for a locally fed woodland outpost and receives real logs — M3/M6/M7 partial

Implemented and command-tested as a separate branch from the earlier 100-resident Town checkpoint: eight capacity-limited log-sale caravans exchange 180 actual clearing logs for communal coins; three finite timber purchases bring 70 timber and one tool purchase brings five tools. The home then pays a two-worker survey of Woodland charter 2, registers the returned conditional claim with active Record keeping, and dispatches eight existing founders with the full paid kit plus ten optional timber. Home population falls from 100 to 92; the new camp has eight residents, 30 carried timber and no new founding grant. Local construction spends that timber on a Community field and two assigned workers keep camp meals covered. Two manual selective harvests support separate paid returns of 18 logs each, with 32 food sent outward per trip. An attempted camp standing-forestry instruction is rejected until the linked home gains the required accounting service. Eight further real logs sell for the coins to buy two tools; a staffed home registry, paid Regional institutions research and adoption then allow the retained camp instruction to order a third real harvest. A third paid team returns 18 of those logs. Save restoration preserves both communities, their inventories, the established link and the active forestry mandate. The branch uses earlier controlled 100-person expansion materials and finite waystation supply; restored City recognition, repeatable headworks bricks/tools and long-run material balance remain open. See living world design, plan, interface, player guide and technical reference.

One City woodlot cannot yet sustain the full service budget — M3/M7 open

Measured in a copied 100-resident City built with controlled expansion stock state after the successful standing-forestry and food-target interval: City Regional overview exposes both timber-balance and headworks-materials issues. With all current orders left unchanged, timber reaches zero and sanitation is unserved on the third additional village check. On the fourth, central headworks wear drops household water from 108 to 96 and City status to Town while all 100 people remain. The original checkpoint stays unchanged. This is a concrete supply and maintenance gap, not a population-growth or save-migration failure. A physically renewed second timber source and repeatable bricks/tools, or a validated reduction of the service bill, are still required for long-run 100-person City balance. See living world design, plan, interface, player guide and technical reference.

City food targets unblock a real standing forest harvest — M2/M3/M7 partial

Command-tested on the 100-resident City continuation: an ongoing SET_FORESTRY_MANDATE names the newly titled outer-ring forest. Its first daily check is blocked by fewer than 21 warehouse spaces; City Land & water reports the exact storage reason and the ledger records zero orders. Reviewed target-production instructions cap all three staffed fields at 1,600 local food without changing their workers. Household meals create room, the next check records an actual two-worker harvest job, and completion credits logs. Eight further checks retain 100 residents, earned City stage, food, household water and full sanitation service. This is a working coordination of existing controls, not a new renewable resource grant or proof that one woodlot covers every future repair and service cost. See living world design, interface, player guide and technical reference.

A 100-resident City retains a renewable local woodland plot — M2/M3/M7 partial

Implemented and command-tested: placing the storehouse on a field leaves one naturally mature outer-ring forest plot undeveloped. After City qualification, 32 actual logs sold at the finite waystation buy four tools for a returned survey and paid registration. The new titled plot yields a selective harvest; its cover and maturity fall, then recover. Across nine checks before the second harvest and three more afterward, the settlement keeps 100 residents, City stage, food and water service, full sanitation, and at least its starting timber while its staffed precision mill works. A brief pause of one food field frees 21 warehouse spaces, allowing a second selective harvest of that same plot before field staffing resumes. The live City Regional overview names the missing repair stock, links to Supply chains without mutating state, and clears its issue after the paid job completes. Four actual logs sold after the first cut pay for four missing bricks and a fourth central headworks repair before the nine-check run. The tested route still has controlled expansion materials, finite market funds and substantial earlier clearing logs; this does not establish indefinite timber or headworks balance. See living world design, interface, player guide and technical reference.

Secondary local wells extend a surveyed founding source — M2/M4 partial

Implemented: an Irrigation-gated, one-plot Secondary groundwater well on surveyed, adjacent, naturally moist low field or cleared woodland ground without a marked feature. Ordinary construction pays 40 timber, 18 bricks, 12 food, two tools and 110 work; surveying and unfinished work provide no water. A completed sound dry building with one worker and active Irrigation contributes twelve local daily water places while the commons is usable. Water allocation continues to prioritize households over irrigation, and damage, lost staff, wet ground or specialist service remove the added flow. City exposes both construction and each source's live status; save validation checks the title survey, natural source and adjacency. The focused command test sells actual founding timber for 78 coins, barters for tools, buys 78 bricks from finite waystation stock and pays for three wells, a damaged-well repair and the central deep lens to reach 108 local places. It restores the result and rejects a forged survey. No waterworks construction stock is injected. A separate continuation controls later expansion timber/tools but uses real returned surveys and paid titles, eight timber-framed houses, three staffed food fields, a care hall, waste yard and storehouse. Sixty physical migrants bring population from 40 to 100 without another founding grant. Central headworks initially wear below delivery condition, leaving 96 places from base and secondary wells; four paid repairs restore 108 using timber sawn from actual clearing and selective-harvest logs and bricks/tools bought with coins from actual log sales. Full food, household water and sanitation service hold for 25 consecutive checks at 100 residents. The staffed registry and learned Regional institutions then earn City recognition after three checks; a save restores the 100-person City and 108 water places. Finite clearing logs and waystation goods, controlled expansion materials and future repair cycles prevent an indefinite self-sufficiency claim. See living world design, interface, player guide and technical reference.

Urban sanitation gives later town growth a funded health service — M4/M7 partial

Implemented: a Building-branch topic, a constructible two-worker Waste collection yard and a version-three settlement sanitation ledger. Population beyond 64 creates health pressure according to unserved residents. Each sound dry staffed yard worker with active Urban sanitation can cover 24 additional residents. One actual timber is spent per started 48 covered residents per day; short stock or an owner-reviewed daily timber limit constrains coverage. The City People control offers zero, one, two, four, eight or unlimited, while the server validates any whole limit up to 32. Policy changes spend no goods and retain staff and past receipts. The City People card and Supply chains show current coverage, exact resource demand and last applied effect. City recognition at 100 or more residents now checks a fully covered latest collection and currently active staffed yard capacity, with the existing three-failing-check decline rule. Stock spent in that completed collection does not disqualify the stage before the next production cycle. Older saves receive an empty unlimited ledger without a material or worker grant; version-one receipts keep their historical cost and version-two ledgers migrate to unlimited without altering spending. Command-built research/construction and a controlled 96-resident daily simulation prove six health points of difference with one timber spent. A 160-resident, four-worker model verifies one timber partially covers 48 and two timber cover 96; save migration and invalid spending are checked. Geographic waste transport and broader M7 town balance remain open. See living world design, interface, player guide and technical reference.

Dated flour sale links milling to a finite physical market — M3 partial

Implemented: a sound Grain mill with two assigned residents unlocks a reviewed two-carrier flour sale. Flour leaves real dated village stock and travels to the finite waystation buyer; two coins per unit are reserved at dispatch and credited only after physical return. Estimated pre-arrival expiry blocks dispatch; expiry during an outward delay spoils cargo, recalls the trip and refunds the buyer reservation. Surviving recalled flour retains its original date, and delivered flour is consumed without inflating depot stock. marketFlourVersion: 1 validates active and completed custody without rewriting old fish sales or granting old saves flour or coins. City reviews and supply-chain tracing expose the path. Focused market tests cover delivery, restore, malformed receipts, staffing and delayed spoilage. Wider markets and remaining M0–M8 work remain open. See living world design, interface, player guide and technical reference.

Reviewed household grain floor protects emergency meals before milling — M2/M3 partial

Implemented: each chartered village may set a zero-to-three-day grain meal floor in City People. It scales with current residents and blocks a future automatic grain-mill batch that would cross it, while household grain fallback remains available when prepared and gathered food run short. The City production blocker and potential chain output agree with the live batch rule. storagePolicyVersion two adds a zero default for older saved villages and new outposts without moving any grain, workers or dates; malformed saved floors reject restoration. Focused tests cover blocked and resumed milling, meal consumption, City output, restore and migration. Trade, other reviewed spending and grain expiry remain separate. This is partial M2/M3; longer food-chain balance and the rest of M0–M8 remain open. See living world design, interface, player guide and technical reference.

Dated grain and flour across village production and physical delivery — M2/M3 partial

Implemented: chartered warehouses track sixty-check grain and fourteen-check flour batches, consume oldest first and expire them before daily production. Mill output starts a fresh flour date; bakery output remains ordinary prepared food. Household fallback and flood withdrawals take oldest grain/flour stock. Owned outpost supply, governor routes and bilateral trade or relief preserve original expiry through active custody and recall. Legacy fish-only ledgers migrate old grain/flour stock and active physical goods into fresh dated batches without changing quantities or backdating unknown history. City supply-chain, transport and trade panels disclose expiry, with warehouse and forecast consequences. Focused grain, outpost, trade and migration regressions cover storage, actual delivery and replay. Prepared-food aging, cold storage and full M0–M8 progression remain open. See living world design, interface, player guide and technical reference.

Monitored reservoir source comparison includes title and existing-use burden — M8/W3 partial

The read-only City comparison of paid runoff stations now lists the exact unassigned construction hexes and marked feature cells for the selected source at its current chosen capacity and other stations at their highest supported capacity, alongside outlet-head counts. The selected source agrees with its detailed construction-tenure review; alternatives are calculated from their own exact footprint. The paid Lower basin comparison identifies unchartered farm 1375043. Both supported 10- and 25-unit choices there cover that farm, so reducing capacity is not an avoidance path. No title, feature-use decision, consent, water or materials change on read; alternative site viability and full W2/W3/W4 gates remain open. See living world design, gameplay foundations, waterworks plan, interface behavior, player guide and technical reference.

Marked terrain now blocks ordinary building placement despite title — M1/M5/M8 partial

ZoneEngine.constructionFootprint checks the natural feature of each owned footprint hex. A marked site has a feature rights blocker in both City preview and authoritative START_CONSTRUCTION; the same denial does not debit stock or create a building. A resource marker can host its intended extractor on a surveyed matching deposit, or a new building after the exhausted site completes paid reclamation. A controlled titled-farm test verifies the refusal; mineral outpost and broader construction/charter tests keep iron mining and ordinary plot building working. Existing structures and save data are unchanged. A lawful feature-use grant or conversion project is still absent. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Recipients see marked sites on the exact reservoir notice — M8/W3 partial

The incoming major-reservoir projection reads the construction footprint of each saved notice revision, names its marked natural-feature hexes and identifies the subset currently in the recipient's charter. City shows the list before the easement controls. In the paid two-player Lower basin journey, the southern charter sees farm 1375043 but has no easement cell or signing authority for it; restore recomputes the same list from frozen terms. The separate construction-feature blocker remains. This adds informed review, not feature-use adjudication, access, title or W4 permission. See living world design, gameplay foundations, waterworks plan, interface behavior, player guide and technical reference.

Marked reservoir construction ground retains a protection blocker after title — M8/W3 partial

major-waterworks.constructionTenure.featureCells now scans the exact source, pool, spill, intake and outlet construction cells independently of charter ownership. Any marked cell raises candidate-construction-features-unreviewed in addition to the existing missing-title and connected-feature checks. City names those cells even if a later holder gains title. A controlled titled-farm regression confirms that the feature blocker remains after the unassigned-feature list drops the farm. No feature-use consent, NPC/customary resolution or construction right is inferred. See living world design, gameplay foundations, waterworks plan, interface behavior, player guide and technical reference.

Two-owner receiver notice has paid supply and exact signatures — M3/M6/M8 partial

After a second player's southern village pays for receiver plots 1377091 and 1375042, its founding home consents to a six-tool/eight-timber trade with the observation village's home. Physical travel moves both finite stocks once. The source home buys thirty iron, harvests logs, makes charcoal and forges enough tools for the monitoring loads; the waystation keeps its last five tools. The observation village imports real materials, learns Hydraulic engineering, publishes its paid watershed report, returns a dry early survey for fourth-ring hex 1375044 and installs a runoff station at 1375047. A 25-unit proposal selects exact natural intake and pool-entry controls; the source pays the ordinary conditional registration for that fresh works report before filing notice to the southern construction holder. That owner acknowledges, grants the exact two-cell construction easement and separately signs water consent; the source signs its own water use. Title receipts, trade, gauge, frozen notice and signature actions survive reload. Only marked farm 1375043 lacks title in the base storage/spill footprint. The selected controls add other untitled endpoints, and affected-party, W2 impact, hydraulic and W4 blockers remain. See living world design, gameplay foundations, major waterworks plan, player guide and technical reference.

Second-player southern village pays for a receiver works plot — M6/M8 partial

The fixed watershed-south-v1:499:674 offer covers seven dry fields near the lower receiving basin. A second player at site:495:703 pays for its survey, charter, eight founders, local food field, house, extra household, registry support and twelve-person village upgrade while player seven retains four receiver plots. Later ordinary supply trips, edge surveys and registrations title 1377091 and 1375042 to the southern village, with distinct ownership and receipts surviving reload. The remaining base-footprint plot 1375043 has a generated farm feature and no ordinary charter-edge release. major-waterworks.constructionTenure lists marked unassigned features and City explains the separate site-use and tenure review. Title alone supplied no reservoir permission; the subsequent notice and exact signatures are described above. Feature use, complete W2 effects, all-party rights and funded W4 engineering remain open. See living world design, gameplay foundations, major waterworks plan, interface behavior, player guide and technical reference.

Paid early survey unlocks a fifth lower-basin title — M6/M8 partial

A current returned village watershed report now exposes only three relevant fourth-ring natural pool-entry edges in City as survey-only prospects before the runoff station records water. The Lower basin journey pays two workers to survey hex 1375044 while dry, receives the report at home, then installs the station, records a 25-unit reservoir draft, selects the owned natural intake and exact entry controls, and pays the ordinary conditional works registration within fourteen village days. The saved charter receipt pins the proposal and exact edge, and restores with the gauge and report. The site was previously flooded during a later survey; moving this ordinary paid survey earlier makes real title achievable without waiving exposure. The unselected 25-unit storage/spill footprint now has only 1375042 and 1375043 unassigned. The actual selected-entry proposal still has twelve untitled construction cells after including every control endpoint, and continues to block title, engineering, affected rights and W4 work. See living world design, gameplay foundations, major waterworks plan, player guide and technical reference.

Four lower-basin receiver plots gain paid title before monitoring — M6/M8 partial

The developed Lower basin observation village has a command-funded path to four exact receiver construction plots before activating local flood observation. It physically imports timber and tools, returns and pays three second-ring edge surveys and registrations for 1375046, 1377095 and 1377096, then returns and pays an outer-ring survey and registration for 1375045 with Public accounting and Land registry active. Ordinary charter receipts, the later watershed report and runoff gauge all reload. A survey of 1375046 after the station starts recording can instead return without findings when the basin floods, making this order material. A 25-unit review removes those four plots from its unassigned list but still names 1375042–1375044; title alone does not grant water rights, full W2 impact clearance, engineered outlet design or W4 work. See living world design, gameplay foundations, major waterworks plan, player guide and technical reference.

Lower-basin village has a paid runoff station — M6/M8 partial

Frontier & charters exposes Lower basin observation parcel as a separate dry seven-field option near the Basin approach's receiving catchment. A command-only journey pays for its returned frontier survey, conditional charter and eight-founder thirty-hex trip, then builds a food field and house, grows to twelve residents and earns a local village charter. Further ordinary supply journeys bring timber, tools, logs and bricks; a staffed local mill and workers complete the building and agriculture prerequisites through Hydraulic engineering. The village pays for a returned watershed report and a separate runoff-station installation on its own source hex 1375047. The saved gauge and report survive reload. Its observed catchment ends at basin 1375046, whose center remains unchartered in this monitoring-only route; a 25-unit reservoir review still reports unresolved construction title, and observation creates no draft or works. A synthetic graded extension to the next natural spill basin released no water in the recorded wet interval. W2 impact, W3 rights and W4 construction remain open. See living world design, gameplay foundations, major waterworks plan, player guide and technical reference.

Paid reservoir source plots compare release evidence — M8/W3 partial

The Major reservoir proposal's paid monitored-source list now reports, at each site's highest supported candidate capacity, how many complete release corridors have ideal dry-bed head, how many retain head at the receiver's recorded high water, how many lose it at that peak, and how many lack receiver high-water history. Two separately returned stations draining to one basin share its release-site evidence, with no duplicate storage or new permission. This makes the previous crossing-level warning usable when choosing a source plot. The basin-to-ocean and nearby alternate sites still need lawful design and W4 construction; no present comparison proves a viable project. See living world design, gameplay foundations, major waterworks plan, player guide and technical reference.

Candidate reservoir crossings show recorded receiver high water — M8/W3 partial

The Major reservoir proposal's Proposed release outfall head card now checks the retained receiving-basin high-water mark for every complete candidate natural spill crossing before corridor selection. It shows the maximum ideal release from a full proposed pool at that observed level, separately from the older receiver-bed margin, and explicitly identifies absent receiver history. The paid Basin test forces a recorded peak above its proposed full-pool level and verifies zero historical-peak head while the optimistic bed margin remains positive. No proposal terms, stored water or rights change; the remaining W2/W3/W4 evidence and physical-construction gates remain open. See living world design, gameplay foundations, major waterworks plan, player guide and technical reference.

Reservoir notice preserves filing-time impact proof — M8/W3 partial

Major-waterworks notice ledger version seventeen added whether a verified exact natural/proposed impact replay existed at filing. A verified notice suspends new answers and land/water grants if its replay later fails, even when party names and reason codes are unchanged; restoring the exact evidence before the deadline reopens it. Preliminary notices can still be filed and are labeled without impact proof. Older saves migrate to an unknown marker, and forged values fail restore. A command-level replay-corruption case proves the suspension and unchanged geometry review. This does not certify full affected reach, ecological safety, engineering or W4 construction. See living world design, gameplay foundations, major waterworks plan, player guide and technical reference.

Complete-journey coastal sediment holders enter exact notice — M8/W2–W3 partial

The major-reservoir replay now compares natural and proposed basin-ocean sediment exports near every current surveyed coastal fish bed when the entire retained window has exact sediment journeys. Its public summary names current charter holders and counts changed beds without disclosing coordinates, load or reserves; an unchartered holder stays unresolved. A sediment change independently adds an exact-notice reason and source blocker even if the separate basin-flow reason is absent. Incomplete journeys make no sediment holder claim, and affected ecology, all-party rights, engineering and physical construction remain open. Focused impact and notice tests, City syntax, gameplay validation and wiki checks cover this slice. See living world design, gameplay foundations, major waterworks plan, player guide and technical reference.

A blocked land repair no longer stalls a different repair on the same plot — M5/M7 partial

Automatic land maintenance now tries due improvements in condition order and records each more-worn candidate's actual specialist, quote, operating-budget or material-allowance blocker before funding a later eligible repair. The shared food, labor, crew and occupied-plot gates still stop the whole check. City presents a deferred reason alongside the fundable quote and the paid decision retains it in history; no missing input is supplied. A controlled command case leaves low-condition soil unfunded for lack of compost authorization but pays the same plot's irrigation repair, checks the recorded reason and real material debit, and matches offline replay. The broader M0–M8 and indefinite regional-supply gates remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Renewing paid land maintenance — M2/M3/M7 partial

The existing automatic land-repair instruction now supports a reviewed daily-only material allowance as well as its capped total. Actual repair orders still consume stock, four workers, specialist service, food headroom and shared operating budget. Daily authorization renews on the next home check while gross spending and funded jobs remain in the ledger; switching back to capped must cover the gross total. Version-two migration retains old instructions as capped. Tests pay two real well-headworks repairs under one-repair daily ceilings, verify separate local material debits and offline replay, and cover soil repair, mode change, migration and malformed ledgers. City and Regional display the period. This removes a finite authorization stop, not material scarcity or indefinite regional balance. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Major reservoir notices retain why each community was named — M8/W3 partial

Newly filed notices save bounded, ordered reason codes for every named recipient alongside their unchanged public party IDs. The source and recipient City views show those filing-time reasons, including overlapping downstream, storage, outlet-release, building-pressure and construction claims; a later amendment does not rewrite them. A changed reason list now suspends a current notice even if the party IDs and owners remain the same; prior consent stops clearing current coverage until the source amends and re-files. Version-sixteen migration gives older notices an explicit unknown basis, and restore rejects forged reasons or mismatched party keys. Focused tests cover the multi-reason calculation, a paid construction-holder notice, amendment, migration and corruption. The comparison and reason list remain partial screening evidence; complete W2 impacts and W3 title, engineering and W4 works remain open. See living world design, major waterworks plan, gameplay foundations, player guide and technical reference.

Frozen reservoir works are visible to notice recipients — M8/W3 partial

Source notice history, the affected community's City notice, and filing, answer, easement and water-consent confirmation reviews now render the exact saved entry controls, selected throughput, shared inlet grade, release corridor, outlet rate and outlet grade, or state which pieces are absent. A paid two-charter Basin case verifies that the recipient projection carries the same frozen terms as the filed revision and retains them as inactive history after an amendment. This makes acknowledgment, easement and water-consent reviews inspectable without granting them or moving water. Incomplete W2 evidence, W3 title and engineering, and W4 construction/operation remain open. See living world design, gameplay foundations, major waterworks plan, player guide and technical reference.

Shared reservoir entry grade enters preliminary supply — M8/W3 partial

The source City's Major reservoir proposal displays a bounded downhill candidate invert across all known in-pool entry paths. It identifies natural beds above the selected capacity waterline, counts each merged path hex once, and adds the resulting abstract cut/lining allowance to the rated-intake one-time Supply chains goal. An owner with rated exact entry controls may select or clear the canonical grade as revisioned candidate-graded-entry-paths-v1 terms; version-fifteen save validation preserves frozen notices and rejects forged or unversioned profiles. The paid Basin has eight entries through three shared cells, one high approach cut by 295 height-millionths, two cut-work units and a 56-day 168/116/104/40/11/224 timber/bricks/dressed-stone/iron/tools/food envelope. Unselected grades remain a planning preview, and incomplete paths retain only the gate bill with that omission visible. No gate-to-store hydraulic connection, title, funding or operation follows; W2/W3/W4 gates remain open. See living world design, major waterworks plan, gameplay foundations, player guide and technical reference.

Main gameplay navigation reaches live City — M1 partial

Economy, Family & Tribe, Politics, Military and Explore now open Supply chains, Family & continuity, Public offices, Defense & patrol, and Frontier & charters in the live City workspace. They inherit its current settlement, restricted-role fallback, server review and durable command behavior. Chronicle and deliberately opened design previews remain local samples. A runtime navigation test exercises all five main buttons and confirms the sample Chronicle remains separate. This is a usable handoff, not a claim that every nested prototype or the full M1–M8 gates are complete. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Mineral goals charge each extraction site — M3 partial

The read-only City goal planner now carries exact remaining deposit by local stone quarry, clay pit and iron mine. It allocates a selected recipe to ready sites first, counts each full or partial workday at its actual plot, and charges full recipe inputs for every one. The material branch lists chosen hexes, batches and proposed yields; if only a blocked plot can cover the goal, it names that blocker. Across two material branches, a site cannot be used past its own finite reserve. Focused tests cover split seams, shared branch use, blocked-site selection, actual projection metadata and read purity. Live production and transport remain separate; the wider M0–M8 gates remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Material goals open physical leased extraction — M3/M6 partial

The tenant's City supply graph now creates one accepted-lease:<id> project source for a currently dispatchable accepted stone, clay or iron lease, instead of three generic workday sources available without permission. Its single hypothetical batch uses the live dispatch quote's full tool and journey-food commitment and yields no more than the accepted workdays or exact host deposit remaining. It names the host plot, reserved rent and physical-return requirement. Review lease dispatch from the chosen material branch opens the existing exact command review, while Inspect lease terms opens Expansion. Offered, blocked, travelling and completed terms produce no fresh source. Focused command tests cover offer/accept/dispatch/return, finite planning, a partial deposit, read purity and save restoration. The ordinary lease command still rechecks rights, workers, budget, route and supplies; wider automatic scheduling and M0–M8 gates remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Retained receiving-basin high-water evidence — M8/W2–W3 partial

The conserved basin-water ledger now records each active basin node's highest observed closing storage and tick beyond the rolling twenty detailed intervals. Version-five migration from earlier ledgers seeds only the first retained opening and later retained closings; restore rejects impossible peaks, dates and missing marked fields. A selected exact major-reservoir outlet grade exposes the receiving basin's retained peak at the current sediment bed and adds a source-owner blocker if that observed level reaches or exceeds the proposal's full source-pool waterline. Focused tests cover retention past window expiry, neutral migration, corrupt peak rejection, read purity and a two-basin grade comparison. This is historical evidence, not a design flood or safe discharge certificate. Comprehensive W2 coverage, W3 engineering/rights and W4 operation remain open. See living world design, major waterworks plan, gameplay foundations, player guide and technical reference.

Existing extraction deposits cap material goals — M3 partial

City Supply chains now carries the remaining deposit total for existing local stone-quarry, clay-pit and iron-mine recipe sites into the read-only goal planner. A selected source uses only that finite quantity across all branches, including a partial final workday; its normal input is still traced, and the excess stays in shortages. The source list labels the recorded local amount. An unbuilt producer remains a hypothetical catalog route without an invented deposit measurement. Focused planner and actual outpost-quarry projection tests cover partial yield, shared capacity and read purity. Leased extraction, future sites, physical return and simultaneous orders still need actual reviews; the M0–M8 goal remains active. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Ordered multi-source material goals — M3 partial

City Supply chains now supports adding and removing multiple sources for one uncovered material. The read-only planner applies each chosen source to the remaining gap, caps exact finite ruin batches globally, shares co-products once and leaves uncovered units visible. A repeatable recipe chosen first can satisfy the line without using later ruins; placing finite recovery first lets a workshop fill only the remainder. Each used step keeps its input tree and current producer warning. Focused tests cover mixed salvage/workshop planning, two finite ruins, duplicate selections, source order and existing single-source behavior. The tree remains hypothetical; automatic selection, all finite deposit ceilings and actual order scheduling are open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

One-time ruin salvage enters the material dependency tree — M3 partial

City Supply chains now lists exact idle chartered ruins with a storable salvage quote as finite one-batch sources. The backward planner caps each source, shares its co-products once and reports demand beyond the batch as uncovered. The source disappears during funded salvage and when cleared, returns on cancellation, and is absent if the current warehouse outcome would leave all material uncollected. The read neither credits inventory nor starts work. Focused tests cover source appearance, cap, co-products, full storage, cancellation and completion. Broader source-capacity planning and the full M0–M8 gates remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Ruin salvage records stored or uncollected materials — M3/M5 partial

New chartered salvage orders save a complete material quote and either reserve its warehouse space or leave the entire batch uncollected. Storage-backed work queues before clearing a ruin if capacity falls, while a later repair crew can pass the queue. City Buildings shows idle-ruin quotes and current outcome; completed events distinguish stored and discarded material. Older funded jobs retain their prior partial-credit rule. Focused tests cover both outcomes, damaged storage, repair, save restore and malformed terms. Other resource output custody and the full milestone gates remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Clearing woodland records stored or uncollected logs — M3/M5 partial

New chartered Clear woodland orders quote the full recoverable log batch and show one of two saved outcomes. When the batch fits beyond protected food space, the job holds those places and credits at most its quote after work; storage damage queues the paid crew before felling, while later repair can proceed. When the batch cannot fit at funding, the same land can be cleared with all logs left uncollected, explicitly shown in the review and completion receipt. Later free space does not award those logs. Existing saved clearing jobs keep their original output rule. Focused tests cover both outcomes, damage, repair, completion, malformed terms and restore. Salvage has its separate custody rule above; older clearing jobs remain outside this rule. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Selective harvest reserves its whole local warehouse batch — M2/M3 partial

City Land & water quotes the expected complete log yield for a mature selected woodland plot. Manual and standing orders for chartered communities require enough local warehouse room beyond the food-space policy. Funding records a job-bound hold for that quoted yield, including while the crew is queued or paused; ordinary production and physical arrivals count it as occupied space. Cancellation releases the hold, and completion releases it before crediting no more than the quoted yield. If warehouse capacity falls during work, the crew queues before felling and retains its hold until repair, added storage or outbound goods restore room. A later repair crew can pass the blocked harvest. Older saved harvests retain their former terms. Focused tests cover crowding, concurrent arrivals, cancellation, damage, completion-time capacity loss, replay and malformed reservations. The long city integration route still passes. Other output paths and unattended supply balance remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Seven-community capital dresses imported stone and lines its well — M3/M7 partial

The existing 62-person, six-title Regional-capital checkpoint now continues from its three physical rough-stone caravans through paid charter expansion, renewable woodland harvests, local sawmill and smithy production, Masonry and Structural engineering research, a staffed mason workshop, three stone-dressing batches, clay delivery and local brick firing, repeated paid well repairs, and a two-day dressed-stone lining. Twenty-four of the imported twenty-five rough stone become eighteen dressed stone; research spends four and lining spends twelve. The branch keeps all 62 people and six titles, then reloads the lined well from a save. Labor reassignment briefly lowers the stage to Village. A second saved-state branch collects renewable forest logs and owned-village food, mills civic timber, repairs the lined well before its water capacity falls, restaffs the school and three registry offices, and re-earns Regional capital over nine qualifying days with 62 residents and six-title capacity. A separate saved-state continuation keeps Regional capital recognition for 26 more village days with two physical 24-log pickups, eleven staffed sawmill days, temporary release and restoration of two registry clerks, six local food days and lined household water checked on every advance. All seven communities remain fed and the endpoint reloads from save with six-title capacity. That 26-day endpoint has two timber and 54% well condition. A separate branch starts the renewal after 24 days: two further sawmill days, an eight-clay pickup, two concurrent kiln and smithy days, and a paid well repair return the lined headworks to 100%. Every advance retains all 62 residents and their household water. Suspending two civic programs temporarily lowers recognition to City. The saved post-repair continuation returns four real forestry log loads, runs seventeen high-staffing sawmill days, reserves a final log load for the supplied workshop, re-adopts both civic programs and regains Regional capital after nine qualifying checks. It restores all three registry offices and six-title capacity with 62 residents and six local food days. During that timber rebuilding, an owned clay delivery and two kiln days overlap the staffed mill; the regained capital therefore holds ten timber, eight bricks and a tool at 51% well condition. A further saved continuation temporarily frees four field workers and pays a one-day preventive headworks repair. The lined well returns to 100% without a household water gap and all six owned titles persist. Its eight-timber payment leaves Regional institutions briefly inactive and current new-title capacity at two even while recognition still reads Regional capital. A further saved branch physically returns 48 food from the nearer forest village to free warehouse space, harvests its owned mature woodland, returns twenty logs and mills civic timber. A borrowed registry worker permits both the home field and mill to operate before office staffing returns. The route checks Regional-capital recognition, 62 residents, six food days, lined household water and six owned titles across save restoration. Longer unattended material balance remains open. See living world design, gameplay foundations, player guide and technical reference.

Seven-community capital imports finite stone — M3/M7 partial

The established city-integration journey now forks its earned 62-person Regional capital with all six outpost titles intact. seven-community-stone-import.js releases two mill workers and runs three reviewed DISPATCH_CARAVAN orders for ten, ten and five rough stone. Fifty timber leaves the home, twenty-five finite rough stone leaves the waystation and arrives physically in the capital warehouse; three receipts and restored ledgers reconcile. No outpost slot or population is added. The branch stages enough rough stone for three full mason-workshop cycles, and its following saved branch now pays for research, tools, a workshop, timely repairs and lining. See living world design, gameplay foundations, player guide and technical reference.

Finite waystation rough-stone import — M3/M7 partial

logistics.OFFERS['rough-stone'] buys one rough stone for two timber from a new world's ninety-six-unit waystation stock. The existing paid caravan, carrying weight, food reserve, budget, route hazard, one-team, recall, full-storage, duplicate-order and save rules apply. City offers one, five and ten lots, with each ten-lot quote checked against the actual route and capacity. A new test proves timber debit, depot reservation, exchange custody, physical return, receipt, recall and finite exhaustion. Loading an older save with no depot stone adds none; no schema version changes. This adds an import option to the supply graph while the following saved branch now funds dressed stone, research, staffing and the lined well in that capital. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Cross-owner leased stone to lined well — M3/M5/M7 partial

leased-stone-well-lining.test.js now joins the consented quarry lease to the actual founding-well project. A second owner pays rent on arrival, extracts twenty-four finite rough stone with four existing residents, physically returns the load, and uses earned, staffed Masonry to make eighteen dressed stone. Four dressed stone fund Structural engineering research; twelve pay for the later headworks lining after a separate groundwater survey and well extension. Physical waystation trades fund tools and bricks, and local forestry/milling replaces timber and logs. The journey checks mineral debit, receipt, money, title count, wear and restored ledgers. It is a demonstrated two-owner village route; use of a foreign lease at the seven-community capital and unattended renewable supply remain unverified. The separate waystation-funded capital route is proved above. See living world design, gameplay foundations, player guide and technical reference.

Paid lined well headworks — M3/M5/M7 partial

line-headworks uses active Structural engineering and a sound existing surveyed headworks, commits twelve dressed stone, eight bricks and one tool, and occupies four workers for two village days. On completion the current level wears one condition point per day rather than two. Lining does not repair, increase yield or protect a flooded well; ordinary repair retains it and a further extension requires new lining. City and Supply chains expose the state and bill, and Regional overview computes its warning from the actual wear rate. Land version six marks older wells unlined and rejects unversioned or forged timestamps. Controlled command and restore tests cover paid custody, staged timing, later wear and legacy migration. paid-well-lining-journey.test.js now proves a founding village can earn the tech tree, work its finite owned quarry, physically return rough stone, dress it with staffed Masonry support, acquire the other materials through paid trades, survey its commons, extend the well and line it without granted stock or workers. A bounded seven-community capital stone-to-well route now completes; renewable long-term materials remain open. See living world design, gameplay foundations, player guide and technical reference.

Outlet-wetted charter land enters reservoir notice — M8/W2–W3 partial

noticeParties now includes public current-charter claims from the graded outlet's same-interval release-versus-closed receiverReleaseExposure, alongside natural-versus-proposal land changes and building/well pressure. A recorded controlled receiver test has bare charter land newly wet only because of release, while natural-versus-proposal claims and standing-structure pressure are both empty; that holder still receives a unique exact notice party. The change reads existing evidence and needs no save migration. It does not create consent, move water or close wider W2/W3/W4 gates. See living world design, major waterworks plan, player guide and technical reference.

Flood-exposure release counterrequest — M8/W3 partial

An exact 50% reservoir notice now lets a named recipient object to flood exposure while requesting 25% release. The existing response/briefing fields preserve the request on that revision; command and restore checks reject same-rate, unsupported, upward flood-exposure and unrelated-ground requests. An amendment requires a new notice, answer and separate water consent. A paid monitored-source test verifies source/recipient history, unchanged water and stock, forged receipt rejection and no automatic consent. The request is voluntary review evidence, not a model-certified hazard or a veto. Full W2 impact, W3 rights and W4 works remain open. See living world design, major waterworks plan, player guide and technical reference.

Recipient-scoped reservoir outlet effects — M8/W2–W3 partial

The verified outlet replay now partitions its added building flood-rate points and newly wet working wells by current public charter while retaining only the viewing recipient's exact receiver hexes and counts in recipientWellExposure. Incoming City notices present that owner-only release effect separately from natural-versus-proposal flood evidence; the alternative release read compares both exact rates. Controlled cases cover a newly wet owned hex, a deeper already-wet home, a foreign zero-exposure view and read purity. No saved state or authority changes. Future flood safety, complete affected reach, consent and major construction remain open. See living world design, major waterworks plan, player guide and technical reference.

Exact major-reservoir amendment previews — M8/W3 partial

For a selected source with an active draft, City now uses the draft's exact intake and graded outlet in the amendment preview. The capacity/bypass matrix and both release choices recompute current impact evidence, blockers and notice parties; an alternate 25% release is not mislabeled with a saved 50% result. Paid Basin and recipient-objection tests cover retained design and both alternate percentages. Reads do not alter the proposal or saved state; full impact approval, engineering, rights and W4 construction remain open. See living world design, major waterworks plan, player guide and technical reference.

Receiving-basin building pressure — M8/W2 partial

The graded-outlet receiver replay now reuses the live depth-to-flood-rate rule on standing buildings in both release and closed-outlet branches. It reports positive added rate points, distinct affected buildings, newly wet working wells and present charter names. The source proposal gains a blocker and those charters join exact notice parties even if no receiver hex newly floods. A controlled four-interval case verifies one added point on an already wet home with no land wet/dry change. Future peak flow, safe outfall hydraulics, complete effects, ratification and W4 physical operation remain open. See living world design, major waterworks plan, player guide and technical reference.

Receiving-basin release flood exposure — M8/W2 partial

Verified graded-outlet history now compares each proposed receiving-basin closing waterline to a same-interval no-release candidate with the same opening sediment bed. It counts land newly wetted by the outlet, current uses and charter claims. City maps affected hexes and keeps a specific blocker on affected proposal terms, including capacity alternatives. A controlled downstream-charter case verifies the exposure and read-only state. This recorded-window screen does not certify a design flood, receiving works, water rights or W4 operation. See living world design, major waterworks plan, player guide and technical reference.

Rated-entry path exceptions — M8/W2 partial

The read-only basin replay now reports positive-flow selected gates with no recorded same-interval route to a source-basin export. The one-interval result names the first eight exact hex pairs; the retained replay counts affected intervals and entry occurrences. A controlled pair of intervals distinguishes a disconnected gate with 6,000 subunits of post-bypass opportunity from a connected gate constrained to 3,000 by a downstream edge. City presents these as engineering evidence without claiming actual water attribution or a physical gate. See living world design, major waterworks plan, player guide and technical reference.

Rated source-inflow custody — M8/W2 partial

The candidate replay now uses exact routed-entry allowance only for direct source-basin runoff. It still conserves and routes basin-to-basin arrivals, but it cannot relabel those transfers as water captured by a gate measured on source-basin surface edges. A controlled two-basin case captures 1,500 after bypass from 2,000 direct units and zero from a 118,326-unit upstream transfer; the separately defined unrated scenario remains available. This narrows a previously optimistic impact branch without establishing actual gate hydraulics or complete effects. See living world design, major waterworks plan, player guide and technical reference.

Exact routed-entry ceiling in basin replay — M8/W2 partial

The read-only reservoir replay now bounds rated intake by a maximum possible same-interval path from each named entry to the source basin's exact boundary exports. It preserves per-edge bypass and gate tiers, then respects recorded downstream transfer and export capacities. Controlled tests distinguish 6,000 available through a complete path, 3,000 through a narrower downstream edge, and zero when basin runoff comes from an unrelated cell; the paid Basin path still captures its existing ten units. Missing surface or basin-source history admits no rated intake. The screen remains a conservative scenario with unresolved mixing, stored water and physical hydraulics. See living world design, major waterworks plan, player guide and technical reference.

Regional undersized reservoir-gate warning — M7/M8 partial

Regional overview reports source-owned active reservoir proposals whose exact per-entry tier is below a retained measured edge peak. The read names affected entries and the worst excess and opens Land & water. A paid Basin command path checks owner scope, no read-side mutation, and clearing the issue after a sufficient new tier or rating removal. This makes durable rating evidence actionable across settlements; it grants no hydraulic approval or construction authority. See living world design, major waterworks plan, player guide and technical reference.

Retained observed pool-entry peaks — M8/W3 partial

The surface-routing ledger now retains each measured edge's highest four-hour transfer and its tick beyond the rolling 20-interval detail window. Exact rated-entry review uses that retained peak to keep an observed undersized-gate blocker visible. Version-one migration begins with no invented rate; version-two migration seeds peaks only from verified retained rows. City shows the start of peak history, recent peak and retained peak. This does not prove unobserved extremes, gate hydraulics, rights or major construction. See living world design, major waterworks plan, player guide and technical reference.

Exact rated-intake ceiling in basin replay — M8/W2 partial

The read-only one-interval and retained-window basin comparisons now apply exact measured pool-entry bypass and gate tiers, then recorded same-interval paths to source-basin exports, as a total capture ceiling. Missing full edge-interval evidence yields zero hypothetical intake for that interval, rather than assuming basin arrivals entered an unmeasured gate. A controlled two-interval case captures six of ten possible units in the measured interval and zero in the next, while the natural ledger and stock remain unchanged; the paid Basin path still has enough measured gate flow for its existing ten-unit example. City shows measured coverage and per-tick limits. This is a quantity constraint, not proven routing through built gates; W2 effects, W3 rights and construction remain open. See living world design, major waterworks plan, player guide and technical reference.

Rated intake work and combined reservoir supply — M3/M8 partial

Exact rated pool-entry controls now yield an unfunded staged labor/material estimate for all selected gates. The source City shows shortages beyond the household food reserve; Supply chains combines this intake estimate with an exact rated outlet as one one-time material goal, or shows the remaining component when either rating is cleared. The paid Basin test checks eight gates, real resource IDs, reserve-aware supply gaps, combined totals and read-only custody. Hydraulic connections, future load safety, complete effects, permissions and physical W3 work remain open. See living world design, major waterworks plan, player guide and technical reference.

Regional backwater exception — M7/M8 partial

An active exact graded reservoir proposal now appears in the source owner’s Regional overview when current historical replay loses release to receiving backwater. The issue names the requested, delivered and withheld amounts, affected interval count and Land & water remedy; it vanishes after the rate or proposal is cleared. The paid Basin case is covered by a no-mutation integration check. No water, stock, permission or construction state changes. See living world design, major waterworks plan, player guide and technical reference.

Graded-outlet receiving backwater — M8/W2 partial

The exact graded-outlet whole-basin replay now limits each proposed release by the receiving basin’s pre-release waterline after direct runoff and registered same-interval routed arrivals in a no-release candidate replay, and by the water level added by the proposed transfer and reports both the total units withheld by backwater and the portion caused by receiver rise. The paid Basin’s 2.5-unit tier remains an exact-entry upper bound of five units, but the receiver is too high during both release intervals and the verified full replay delivers zero. The new blocker exposes that gap. A controlled third-basin crossing also withholds a five-unit release that the receiver opening and direct runoff alone would permit. Per-interval City timing shows routed arrivals; the read moves no water and does not prove a buildable channel. See living world design, major waterworks plan, player guide and technical reference.

Proposed outlet in Supply chains — M3/M8 partial

An active rated reservoir draft or notice now appears as a one-time planned consumer in its source village’s Supply chains graph, including the exact dressed-stone estimate. The same local producer and shipment tracing can expose a quarry-to-mason or import bottleneck. Clearing an outlet rate leaves any rated intake in the one-time goal; withdrawing the proposal removes the current goal. Neither component affects recurring demand, stock, funding or rights. See living world design, player guide and technical reference.

Preliminary graded-outlet work estimate — M8/W3 partial

An exact outlet grade/rate now produces a read-only staged labor and material estimate tied to route length, cut depth and an abstract rate-dependent lining width. City compares timber, bricks, dressed stone, tools and food with spendable source stock after protecting the household food reserve, exposing a genuine quarry-to-mason or import bottleneck at the paid Basin village. Its 2.5-unit design estimates four workers for eight village days and 40 timber, 25 bricks, 16 dressed stone, three tools and 32 food. The estimate neither reserves stock nor authorizes construction; physical section, final bill, W2 impacts, W3 rights and W4 operation remain open. See living world design, major waterworks plan, player guide and technical reference.

Exact graded outlet rate — M8/W3 partial

The source owner can now revise a selected outlet corridor with an exact 1, 2.5, 5 or 10-unit four-hour rate and deterministic grade profile. Version-fourteen save migration preserves version-thirteen route choices without inventing a rating and validates frozen notices. Selected-rate historical entry and basin-wide replays obey both profile head and throughput, showing unmet requested release. The paid Basin 2.5-unit tier allows five units in the exact-entry upper bound but zero in the receiving-aware whole-basin replay; old notices remain exact, while live water, stock and title remain unchanged. This advances W3 design terms but does not verify a physical channel, complete W2 effects, permissions, construction or W4 operation. See living world design, major waterworks plan, player guide and technical reference.

Candidate outlet grade and rate sensitivity — M8/W3 partial

A selected low-level outlet corridor now receives a bounded one-millionth-fall invert profile, per-cell cut-height screen, graded-entrance held-water floor and illustrative four-hour rate sensitivity. The paid Basin ten-unit route needs a 511-height-unit spill cut and holds at least 7.41 units for the graded entrance, leaving 2.59 units of gravity head at full capacity. By itself the preflight selects no rate and does not change the optimistic replay; the separate exact-rating action above can select the profile and rate for historical comparison. Neither action validates physical capacity, determines excavation volume or materials, or builds an outlet. The remaining W2–W4 gates still apply. See living world design, major waterworks plan, player guide and technical reference.

Selected release corridor and head-limited replay — M8/W3 partial

A draft can now select or clear one exact screened low-level corridor to a distinct receiving basin. Its cells enter proposal, title, notice and easement terms; amendment and migration keep custody explicit. Selected-route entry and basin-wide historical comparisons cap requested release at the optimistic receiver-head floor, report unmet release, and route hypothetical discharge to that receiving basin. The paid Basin 50% case releases 5.24 of 10 requested units over three intervals. No outlet is physically constructed, live water is unchanged, and discharge engineering, downstream impact, permissions and W4 operation remain open. See living world design, major waterworks plan, player guide and technical reference.

Release-outfall head review — M8/W3 partial

Candidate and saved reservoir proposals now show bounded in-pool routes to natural spill receivers, the proposed waterline versus natural spill lip, and the most an ideal low-level gravity outlet could release above the receiving bed. Rated-entry historical intervals are checked against that optimistic head floor. The paid Basin ten-unit proposal has a complete route but no passive spill at that capacity; a 50% opening-water release exceeds the ideal head on recorded intervals. The read-only screen does not excavate, rate or fund an outfall and does not grant water use. It names a new evidence blocker while W2 effects, W3 rights and construction, and W4 operation remain open. See living world design, major waterworks plan, player guide and technical reference.

Pool-entry gravity paths — M8/W3 partial

A candidate or saved reservoir review now follows each known natural entry from its pool endpoint through the proposed footprint to the basin cell. The read-only screen counts complete downhill approaches and shows current drainage splits and cells above the proposed capacity waterline. The paid Basin fixture has eight complete paths; its upper approach remains dry at 10 water units but naturally drains downhill. A selected control with an incomplete path receives a specific blocker. This verifies bounded terrain connectivity only: gates, containment, release outfall, complete impacts and lawful operation remain open. See living world design, major waterworks plan, player guide and technical reference.

Exact-entry retention bound — M8/W3 partial

A rated proposal now shows a conserved, read-only retention upper bound over fully registered four-hour transfers at its exact selected pool-entry edges. Each edge keeps its selected bypass and per-edge throughput ceiling; the selected 25% or 50% release of opening held water makes room before possible admission fills one finite proposed store. The result is distinct from the older basin-wide comparison and has no effect on live water, title or stock. The paid Basin test checks the retained window against actual edge receipts and verifies per-interval conservation. Hydraulic connections, physical gates, future storm safety, complete impacts and lawful W4 operation remain open. See living world design, major waterworks plan, player guide and technical reference.

Exact rated pool-entry controls — M8/W3 partial

The owner of an active, exact eight-entry Basin proposal can now choose a reviewed throughput tier for every selected natural entry after full registered flow has been recorded. City compares the proposed per-edge four-hour rating with actual recent peaks: the paid Basin test shows a 50-unit tier below a recorded edge peak and a 1,000-unit tier above every observed peak. Each change creates a new proposal revision; the filed smaller-tier notice remains exact history and later rights must be gathered afresh. majorWaterworks ledger version twelve migrates earlier proposals without invented ratings, rejects forged capacities and retains the fourth-ring works title path for a rated proposal. The command moves no water, materials or title. A passed historical rating does not prove engineered gates, connectivity, future storm safety, full impacts or lawful construction; intake-engineering-unverified and W4 remain open. See living world design, major waterworks plan, player guide and technical reference.

Measured flow at exact reservoir pool entries — M8/W2–W3 partial

Major-reservoir candidate and saved-proposal reviews now show each bounded natural pool-entry edge's registration, cumulative actual transfer, current routing target, recent four-hour peak and latest rate, plus the combined peak reached in one interval. surfaceRouting version two stores twenty exact interval rows and a prior-transfer baseline; old version-one saves checkpoint without invented rates. The Observed water at pool entries card shows eight registered Basin edges; a freshly installed station has zero history, and four later village days produce positive receipts on all eight. Focused tests reconcile every rate and prior baseline to conserved transfer totals, verify read purity, reject forged saved rates and restore the same evidence. The rates can span drainage changes and omit unregistered exports, local pool rainfall and other basin input, so they are not a gate design or proof that the selected alignment captures all inflow. Engineering, complete impacts, permissions and physical W4 work remain open. See living world design, major waterworks plan, player guide and technical reference.

Exact reservoir title gaps now lead to live charter actions — M6/M8/W3 partial

City's candidate and current major-reservoir construction-title cards now pair each displayed unchartered hex with this village's actual released charter-edge offer, when one exists. They show the registry payment, survey report, current blockers and direct reviews of the existing physical survey and paid registration commands. Unreleased cells explicitly need another lawful title route. This connects the tested paid Basin title sequence below to player controls without granting land or water from the proposal screen. The server still rechecks every command; intake engineering, impact review, rights and W4 operation remain open. See living world design, major waterworks plan, player guide and technical reference.

Paid tools and charter extensions title the selected Basin entry footprint — M6/M8/W3 partial

An active exact pool-entry proposal now exposes only its selected fourth-ring plain edge plots to its source village. A returned two-worker frontier survey, adjacent existing title, a staffed Land registry with active Public accounting and Hydraulic engineering, and sixteen timber, two tools and eight food register one plot under extension ledger version three. The paid Basin path registers hex 1377089 and restores its title; withdrawal leaves the paid land in place. The survey's completed report returns on a bounded dry detour when the original homeward hex floods, without teleporting the team or refilling provisions. Old extension ledgers retain their prior radius, malformed v3 receipts reject, and no water or gate is granted. The five ordinary entry endpoints are now separately paid in the integrated Basin journey; hydraulic capture, rights, effects and W4 construction blockers remain. See living world design, major waterworks plan, player guide and technical reference.

Exact pool-entry controls join reservoir terms and rights review — M8/W3 partial

The Basin approach owner can now select all eight complete natural pool-entry edges as natural-entry-controls-v1 terms after selecting the exact route. The command moves the draft from revision two to three and adds every endpoint to construction title, occupied-site, notice-party and precise easement review. Seven edges remain outside the route; selection resolves the unselected control sites warning but does not clear unchartered title or unverified engineering. Notice filing preserves the edge list, a same-source bypass amendment retains it, clearing creates another revision, and old notices stay historical. Version-eleven migration leaves older proposals without invented controls; restored forged edges fail validation. A controlled second-charter endpoint gets its own notice, acknowledgment and exact-cell easement choice. All actions leave water, stock, people and existing titles unchanged. Full W2 effects, hydraulic capture design, lawful title/rights and W4 work remain open. See living world design, major waterworks plan, player guide and technical reference.

Exact intake route misses seven paid Basin pool entries — M8/W3 partial

The major-reservoir review now compares each bounded natural pool-entry edge with the directed edges of the selected exact intake alignment. In the paid Basin approach, the selected two-cell trace matches one of eight complete known entries and leaves seven outside it. City lists those missing from the route with map shortcuts; intake-entry-control-unselected applies until the exact sites are selected. An incomplete entry search has candidate-pool-entries-unresolved instead. This exposes why a selected observation-to-basin trace cannot yet capture all water assumed by the hypothetical replay. A matched natural edge is still not an engineered gate. The coverage check is read-only and replays after saved notice restoration; site selection is now implemented above, while W2 full effects, W3 hydraulic design/permissions/funding and W4 operation remain open. See living world design, major waterworks plan, player guide and technical reference.

Named charter flood exposure in verified reservoir replay — M8/W2 partial

The retained-window no-release and controlled-release comparisons now split observed versus proposed building flood intervals, depth-based rate points and wet center/camp well intervals by current named charter. A source can inspect the same breakdown on capacity candidates and saved proposal reviews; changed-building and changed-connection counts are distinct within each community. A controlled downstream center on a genuinely changed basin hex verifies its own row and reconciliation with world totals without moving water. An unattributed bucket retains pressure from any standing structure without a current named settlement. This is a present-footprint screen, not a future damage or household-delivery forecast. Unknown reach, ecological effects, NPC/customary holders, rights and construction still block approval. See living world design, major waterworks plan, player guide and technical reference.

A paid Basin village selects and notices its exact natural route — M8/W3 partial

The paid Basin approach integration now carries timber, tools, logs and bricks to its titled village, builds a local lumbermill, learns the required local building and agriculture chain through Hydraulic engineering, and returns both a watershed survey and runoff-station team from hex 1370944. Its 15.86-unit candidate basin at 1372993 has a clear two-cell chartered natural route. The village records a 10-unit draft, selects those cells at revision two, files an exact public notice and restores the saved proposal and station. A selected route enters construction-title, site-use, notice-party and easement reviews; same-source amendments retain it and new source choices clear it. Replacement tools are staged before monitoring because actual basin floodwater may close the long carrying route. This is a proposed natural alignment, not verified hydraulic design, full W2 impact, consent or W4 construction. The older remote fixture still has unchartered route and pool ground. See living world design, major waterworks plan, player guide and technical reference.

M8/W3 named intake holder review: A proposed natural route may now cross a different currently chartered public community. The route screen still blocks unchartered cells and physical/land-use conflicts, then selection adds the titled corridor to exact construction terms. Notice and party projection name the other holder; acknowledgment, its exact-cell easement, its water consent and separate source water consent are required to clear the two signature warnings. A controlled holder-allocation variant of the paid Basin fixture verifies those actions and the suspension of notice/signatures when route title is later removed, without inventing a player title-transfer route. Engineering design, complete effects, NPC/customary rights and W4 work remain open. See living world design, major waterworks plan, player guide and technical reference.

Basin approach village registers four exact pool and spill plots — M6/M8 partial

A command-only integration now follows the visible woodland start through the paid 35-hex expedition, a locally staffed food field, a built Town house and the physical transfer of four existing residents. Six timber trips backhaul surplus camp food so later loads fit its small depot. A staffed home registry, local Record keeping and 120 delivered timber fund a three-day village upgrade. The new village then learns and staffs Public accounting and Land registry, builds its own registry office, imports further materials and tools, and returns four separate surveys before paying for the three candidate pool plots and distinct spill receiver. Save restoration preserves residents, institutions and all four title receipts. Neither the settlement nor the receipts add water, people or an operational reservoir. Intake alignment, other affected rights, complete W2 impacts and W4 work remain open. The five-case watershed test and existing local-charter/extension suites cover the staged path. See living world design, major waterworks plan, player guide and technical reference.

A released watershed outpost opens a staged small-basin title path — M6/M8 partial

An existing woodland founding offer is now visible as an optional basin-approach start, and a new stable-ID Basin approach parcel appears separately in Frontier & charters. Its seven natural field hexes and twelve-unit camp well are a bounded scenario release, excluded from all older offer footprints. A tested owner surveys it with a paid physical team, registers a conditional charter, sends eight actual founders and materials over a 35-hex route, builds and staffs a local food field, and restores the save without acquiring reservoir ground. The observed basin candidate has 15.86 game water units of saddle capacity; its three pool cells and one distinct spill receiver appear as four surveyable paid charter fringes at radius two or three. The tested approach village now earns its local charter and pays for each of these four plots; the engineered intake, all affected rights, complete impacts and physical work remain open. This gives M6 expansion a new strategic route and W3 a potential lawful site for exact construction title, not an operational reservoir. See living world design, major waterworks plan, player guide and technical reference.

Exact reservoir construction title is audited — M8/W3 partial

The source City review and each saved proposal's current review now count title on every distinct candidate source, pool and spill-crossing hex. An explicit blocker identifies unchartered construction land separately from unsigned easements; a read-only geometric check shows how many unchartered cells lie beyond all published settlement sites' three-hex extension radii. The paid basin has one selected fourth-ring entry with a separate paid works-title path; other unchartered entry cells remain within ordinary edge releases. Twelve map shortcuts expose examples; current title changes and save restoration recompute the same screen without changing terrain, ownership, notices, rights, water or inventory. A nearby alternative basin has a 52-cell candidate pool spanning far beyond a single charter, so a new local outpost alone is insufficient. A lawful remote-rights route or a smaller and genuinely reachable site, all-party permissions, engineered intake, complete impact evidence and staged construction remain open. See living world design, major waterworks plan, player guide and technical reference.

Candidate-pool natural ingress and holders are visible — M8/W2-W3 partial

The major-reservoir source review now derives bounded natural flow edges entering the selected candidate pool, separate from the remote paid gauge trace. It reports their distinct endpoint cells under the source charter, another public holder or no charter, and City provides up to twelve edge-pair map shortcuts. The paid basin has eight ingress edges; its geometry is identical after save restore and a public title change updates the live holder counts without inventing intake rights. The review remains explicitly incomplete if its pool, boundary, edge or routing limit is exceeded. This is terrain evidence for a later engineered intake manifold, not a selected/funded structure, new party list or permission. Full W2 impact, W3 all-party rights and W4 construction/operation remain open. Focused major-waterworks and impact tests cover the screen. See living world design, major waterworks plan, player guide and technical reference.

Current-site rights audit: the controlled three-cell pool and ingress endpoints are unchartered, and the nearest released founding center is fifteen hexes from the terminal basin. Existing radius-three paid charter extensions cannot reach it. This fixture therefore has no playable title path to the proposed intake and pool yet; a lawful remote-rights mechanism or another reachable basin is required before funding can be offered. This observation is a W3 gate, not a grant or a reason to weaken the model blocker.

Natural gauge trace distinguishes observation from intake rights — M8/W2-W3 partial

The source's major-reservoir review reports the natural path and current title independently of any proposal. The route can now be included in an exact revised proposal only through the separate intake-selection command and only when its current preflight is clear. Older preflight-only behavior remains the baseline for unselected proposals. See the current W3 status above.

Reservoir notice actions appear in the durable return briefing — M8/W3 partial

The owner-only city briefing now records a filed major-reservoir notice for the source and named recipient charters, plus the acting recipient's answer and later construction-easement and continuing-water-consent grants or withdrawals for both sides. Each entry identifies the proposal and revision and points to Land & water for the live review window and available controls. An objection also reports its recorded concern and any requested alternative release or bypass percentage to both owners; a changed term still needs amendment and a fresh notice. The event ledger remains capped at forty, reading stays pure, and old saves gain no invented history. Focused paid two-owner command tests check receipt, both requested alternatives, privacy, restore and the separate permission messages; the full npm test run passed 2,385 tests. Regional overview and the notice screen still supply current exceptions and exact terms; a briefing entry does not approve work or move water. See living world design, player guide and technical reference.

Regional notice deadlines and consent choices for reservoir proposals — M8/W3 partial

Owner-only Regional overview now names current major-reservoir notice work at its source and at each named recipient charter. It links unanswered notices to the recipient's Land & water review, then keeps separate easement and continuing-water-consent choices visible after acknowledgment. The source sees missing answers, objections and exact land/water-signature gaps. Open windows become urgent with two village days left; stale evidence and expiry ask for amendment and a new notice, never a stale grant. A recipient's completed signatures remove its prompt, and withdrawal restores it. test/major-waterworks.test.js exercises a paid two-owner notice, read purity, both grants, withdrawal, deadline and expiry. This changes no water, inventory, notice custody or authority and does not clear W2 impact or W4 construction blockers. See living world design, major waterworks plan, player guide and technical reference.

Mounted rider drill appears in supply goals — M3/M5 partial

The Supply chains graph now lists the already playable two-person militia rider drill as a one-time four-feed Defense consumer and includes it under Work backward from a goal → Troops. Its note preserves the separate requirements for two fitted, cared horses and active specialists. Horse and riding-course descriptions now point to playable mounted patrols, corridor guards and convoy escorts; each field order still quotes its own route-dependent soldier food and horse feed in Defense. The static tree neither funds the drill nor fabricates a generic mounted expedition cost. The existing authoritative rider command and save format are unchanged. test/supply-chains.test.js checks the exposed cost.

Mixed-output supply goals count proposed co-products once — M3 partial

The read-only Work backward from a goal planner now keeps a separate pool for excess and co-products of selected hypothetical batches. In a real smithy recipe, two mixed-metalwork batches proposed for five iron also make two tools; a three-tool goal therefore shows one remaining tool requirement rather than proposing all three again. Later lines can consume each proposed unit once, while current warehouse stock, protected food and physical imports retain their previous accounting. City labels proposed coverage explicitly. No production order, inventory, save schema or authoritative spending rule changes. test/supply-goal-plan.test.js verifies both iron-first and tools-first mixed-metalwork paths; supply-chain tests and wiki freshness pass. See living world design, player guide and technical reference.

Itinerary civic-service exception targets the home remedy — M6/M7 partial

regional-overview.projection now checks the active shared-logistics budget's actual serviceReason when a saved itinerary load is blocked. A matching loss of home governor/accountant/record-keeper service targets the founding home's Research tab, retains affectedSettlementId for the intended outpost, and explains that the owner must restore service before reviewing a retry in Frontier & charters. The shared-budget service issue uses the same home Research destination. A missing source-good blocker retains the existing Frontier itinerary destination. test/outpost-itineraries.test.js verifies service loss between two paid legs, the saved/read-only projection, restoration and reviewed second-leg completion. No cargo, worker, allowance or route rule is relaxed.

Three-leg finite repair freight across two well cycles — M3/M6/M7 partial

The combined 68-resident integration route now exercises AUTHORIZE_OUTPOST_ITINERARY with clay-eight, ore-four and clay-eight collection legs from two established owned outposts. The first returns before the second departs, and the second before the third. All departures are funded while home Regional institutions, Public accounting and Record keeping are active; trying to fund a later load after those services pause correctly hits the shared regional-logistics budget gate. After all three teams physically return, the first kiln consumes eight clay and the retained eight supply the second repair without another manual outpost-supply command. Completed itinerary outcomes, actual inventories, both paid headworks jobs and save replay are checked in test/city-integration.test.js; focused itinerary tests cover authority, stale plans, limits and interruption. Finite source stock and further mineral and masonry needs still prevent an unattended equilibrium claim.

Opt-in food-field fallback through two paid capital repairs — M2/M3/M7 partial

SET_PRODUCTION_MANDATE stores a validated foodFallback choice for food-targeted Community fields. Existing version-three mandates migrate to pause; continuous lets a selected crop run through local or delegated accounting loss while retaining the stock target and excluding fallback batches from its spending ledger. Restored service reapplies that target without a command. City and regional production controls expose the choice. The combined seven-community integration route now tests the original manual-switch path and a separate opt-in path from the same 68-resident checkpoint. The opt-in path pays two ordinary headworks repairs, records real field food receipts in both home accounting outages while target batch counts remain unchanged, resumes target control, keeps seven charters fed and checks save replay. Focused tests also cover local and linked-outpost service changes, migration and malformed saves. Finite repair inputs and player-funded freight still prevent an unattended material-equilibrium claim.

Second combined repair with continuous woodland meals — M2/M3/M7 partial

test/helpers/seven-community-combined-next-repair.js continues the combined 68-resident target-and-repair endpoint from 62% home headworks. The owner changes the linked woodland wheat field to continuous production before suspending the home Public accounting/Regional institutions service on which its target depends. Two field workers and one seed keeper keep actual meals coming while two source workers remain free for harvests. After an in-flight governor team returns, a paid eight-clay supply trip, saved home timber, a staffed forge-tools batch and a brick-kiln batch provide the next ordinary four-worker headworks repair before household water fails. The home remakes civic timber, restores all three programs, reauthorizes the 1,160-food field target and renews the physical governor log route. Three further checks re-earn Regional capital with 92% headworks, 31 logs, five timber, four bricks, one tool and 1,060.5 food. The forest retains 1,163.5 food and 160.5 free warehouse units; all seven charters retain food, and save restoration agrees on inventories, target and well. The bounded result is not perpetual finite-input renewal.

Combined woodland target and replacement-input repair — M2/M3/M7 partial

test/helpers/seven-community-combined-food-and-repair.js starts at the same saved 92%-well Regional capital as the independent branches below. It authorizes a 1,160-food mandate on the owned woodland wheat field through home Public accounting and Regional institutions, temporarily switches the field to continuous production, then runs the paid clay/ore, charcoal, metalwork, brick and headworks route while home civic service is suspended. The owner reauthorizes the target when civic service returns: after the paid repair, twelve more home checks record both completed target batches and target-held waits, further standing selective-harvest orders and physical governor departures. The woodland village ends with 1,165.5 food and 188.5 free warehouse units; the home retains Regional capital, 68 fed and watered residents, 62% headworks and real repair remnants. All seven charter stocks stay fed. Replaying from a saved sixth post-repair day exactly matches home and source inventories plus production, forestry and governor ledgers at day twelve. The route is bounded by finite clay, ore, fuel and the next well cycle; it does not establish perpetual regional balance.

Finite clay-and-ore replacement repair — M3/M7 partial

test/helpers/seven-community-replenish-repair-materials.js forks the 92%-well 68-resident checkpoint for an independent repair measurement; the combined route above runs the same repair with a woodland target active. Future woodland governor departures pause; the funded team completes. Two paid DISPATCH_OUTPOST_SUPPLY jobs return eight finite clay and four iron ore. Three home saw workers reserve eight timber while civic programs are suspended; staffed charcoal, smithy and brick-kiln batches use actual logs, ore and clay to yield four charcoal, three iron, one tool and six bricks. The ordinary four-worker headworks job spends eight timber, four bricks and that tool before household water fails. Civic service and governed log transport resume and the home re-earns Regional capital. The endpoint has 86% headworks, 37 logs, four timber, two bricks, three iron, two charcoal, no tools and about 1,001 home food. Each advance checks six home food days, water for 68 and all seven charter stocks; restore preserves all inventories and the well. This proves one more finite replacement batch, not unattended resource renewal; the combined route above verifies a bounded overlap with target production.

Delegated woodland food target preserves harvest space — M2/M3/M7 partial

test/helpers/seven-community-forest-food-target.js continues the saved 68-person capital after its second paid repair. The linked woodland village uses the already implemented home Public accounting plus Regional institutions service to authorize SET_PRODUCTION_MANDATE on its two-worker wheat field, targeting 1,200 local food with no material inputs. The seed keeper remains staffed; two free residents continue selective harvest work. Over twenty checked home days the target case ends at 1,210.5 forest food and 123.5 free warehouse units, compared with 45.5 free units from the same save with continuous wheat production. The mandate orders new selective harvests, the governor dispatches physical log teams, all seven charter food stocks remain positive, and 68 capital residents retain food and water. A restored ten-day midpoint reproduces home/forest stocks and the production, forestry and governor ledgers at day twenty. The home headworks is 52% with no bricks or tools, so the next input-funded repair and indefinite source capacity remain open.

Second 68-person repair after local wheat — M3/M7 partial

test/helpers/seven-community-repair-with-local-wheat.js continues the food-positive woodland branch at 54% home headworks. Pausing future governor departures leaves its funded team in flight. Suspending three civic programs for one home saw check raises real timber from five to eight; releasing that saw and one clerk supplies four workers for the ordinary eight-timber/four-brick/one-tool headworks job before the 50% water cutoff. The saw and clerk return, three civic timber is remade, the programs resume and a renewed governor mandate dispatches again. After three more checks the 68-resident home re-earns Regional capital with 92% headworks, 46 logs, three timber, 965.5 food, no bricks and no tools. The woodland village retains a one-food local surplus and all seven charters retain food. Save restoration agrees on both inventories and the well. Replacement clay, iron, charcoal and subsequent repairs remain open.

Local wheat closes the forestry supplier's food deficit — M2/M3/M4/M7 partial

test/helpers/seven-community-forest-food-recovery.js continues the repaired 68-resident, seven-community capital. Its owned woodland village starts with twelve residents, a two-worker field producing eleven food and a one-food daily deficit. One temporarily staffed local mill consumes harvested logs and makes the three timber for local Seed selection research. After three funded study checks, the owner adopts the technique and plants wheat on the existing suitable field. Two field workers then produce thirteen food per day, yielding a positive one-food local balance while the seed keeper is staffed and two harvest workers remain available. Eight further checks observe new standing selective-harvest orders and governed log departures; all seven charters retain food, the home retains six food days, water and Regional-capital status, and restore preserves the local crop, knowledge and stock. The home well ends at 54%; its next paid repair is proved above, while later finite inputs and long-run warehouse balance remain open.

Paid headworks repair after 68-resident food recovery — M3/M7 partial

test/helpers/seven-community-repair-after-growth.js extends the integrated, command-funded seven-community journey from its saved 68-resident capital. An already funded governor team returns after future departures pause. Three civic programs pause to reserve locally milled timber, and a separate paid supply trip collects eight finite clay. Releasing the saw crew allows simultaneous smithy and kiln production from retained iron, charcoal, delivered clay and local logs; a normal four-worker headworks job then spends eight timber, four bricks and one tool before the extra-water threshold is crossed. The saw and civic programs resume, followed by a renewed physical governor log departure. Every advancement checks six home food days, water for all 68 people and food in all seven charters; restored state preserves the well and inventories. Five further days end at Regional capital with 84% headworks, 33 logs, five timber, four bricks, one tool and 913 home food. This is a bounded managed continuation, not an indefinite supply balance.

Two actual adults and positive home food balance — M3/M7 partial

The integrated seven-community journey now continues from the 66-person governed-forestry capital through another paid headworks repair and two finite-waystation adult arrivals. The owner pauses future governor trips but lets the active log team return, temporarily suspends three timber-upkeep civic programs, sends a paid team for eight clay, saws local logs, fires six bricks and funds the ordinary eight-timber/four-brick/one-tool repair before water fails. Staffing the second wheat field with three workers provides 71.5 eligible food output. Two separately travelling adult workers fill the 68 permanent home places, and a third unused party physically returns after migration closes. With the renewed two-carrier governor route, daily food demand is 67 and output exceeds it by 4.5; over eight additional days home food rises from 853.5 to 873.5. Civic suspension briefly lowers the home to City, but it requalifies as Regional capital with all three staffed offices and six current administration slots. Every advance checks six home food days, household water and seven charter food stocks; restore preserves the 68 people, active mandate, inventories and well. The bounded endpoint has 70% headworks, 35 logs, four timber, two bricks and no tool, so later repair inputs and sustained multi-community balance remain open.

Governed forestry freight with full capital offices — M3/M7 partial

The existing paused governor exchange at the balanced seven-community endpoint now has an integrated bounded continuation. One worker moves from the second home field and one from the four-worker saw into a two-person carrying team, leaving all three registry offices staffed and six current administration slots. An ongoing reviewed log target of 64, twenty units per load and daily food/log allowances funds three physical departures and two completed returns over eleven home days. The standing selective-forest mandate and its source warehouse remain authoritative. The initial two-timber stock briefly cannot pay all three civic programs; three-worker sawing restores Regional institutions before the first governed dispatch, and the capital title never regresses. All 66 residents retain household water, six home food days remain, all seven charters stay fed, and save restoration preserves the active mandate and inventories. Home food declines to 883.5, well condition to 70%, and bricks are zero, so this does not prove indefinite regional food or repair-material equilibrium.

Balanced woodland source and retained capital repair — M3/M7 partial

The integrated 66-person seven-community continuation now solves the actual forest warehouse pressure through staffing rather than repeated food dumping. Changing its field from three to two workers makes local food balance minus one per day with more than 100 household food days stored and two workers still free for the retained harvest mandate. One paid forty-food collection opens full-yield depot space; active home civic service then supports six further marked forestry orders and four separate paid twenty-log returns in total. The first three keep the home saw input-backed across Village, Town, City and Regional-capital checks. Three staffed offices restore six current administration slots. From 56% headworks the owner frees four saw workers, funds an ordinary eight-timber/four-brick/one-tool repair, restaffs a two-person saw during the fourth paid log return, then restores four saw staff without losing the capital title. Every advance checks water for 66 and food across seven charters; save restore agrees on title, stocks, mandate count and well. The endpoint has 92% headworks, 36 home logs, two timber, zero bricks and one tool, so further clay, timber conversion and tool renewal still matter. Manual log trips remain necessary; unattended regional equilibrium is unproven.

Replacement tools and next paid repair after capital return — M3/M7 partial

The integrated 66-resident, seven-community journey now funds another ordinary headworks repair from the preceding Regional-capital endpoint with no spare tool or worker. Two real outpost pickups overlap with local charcoal burning and smith work; four retained ore, five logs and three charcoal become three tools through metalwork and forge-tools. A staffed home office briefly re-enables the existing woodland mandate, which issues and completes a marked 21-log selective harvest. The home saw and kiln process local logs and delivered clay; the four-worker repair spends eight timber, four bricks and one tool before water interruption. A separate paid team brings twenty new logs home. At the saved endpoint, the well is 92%, two tools and four bricks remain, all 66 residents have water, and all seven charters have food. Civic programs and two offices remain paused, so the home is a Village with twenty logs and three timber; requalification plus recurrent depot space and workshop inputs remain open.

Paid capital return after forestry restart — M3/M7 partial

The integrated seven-community journey now continues from the restored 66-person forestry checkpoint through another normal headworks repair and all three promotion stages. Paid food and clay pickups run concurrently; the standing woodland mandate produces actual logs after home civic service resumes. The home suspends that service while sawing and firing real inputs for the eight-timber/four-brick/one-tool repair, then re-enables it and completes two further paid twenty-log returns. Four saw workers keep an input-backed workshop and three timber-upkeep programs operating through Town, City and Regional-capital qualification. Three staffed registries restore six current administration slots. Every advance checks household water and seven charters' food; snapshot restore agrees on stage, inventories and headworks. The finite endpoint has 70% well condition, eight logs, ten timber, two bricks, zero tools and zero free workers. Future toolmaking, clay supply and repair staffing remain open.

Forestry restart from the one-timber bottleneck — M3/M7 partial

The 66-resident branch now resolves the actual blocked standing harvest without granting stock. A paid forty-food collection opens enough warehouse space at the owned woodland village for a whole selective yield. Home workers staff the saw and re-enable Record keeping, Land registry and Regional institutions; the retained ongoing forestry ledger issues one paid harvest job when delegated service returns. That crew physically deposits logs at the village, and another paid outpost team collects twenty logs and four timber. One further home saw check restores active Regional institutions with local timber on hand. Seven chartered communities retain food, home households retain water, and restore preserves forestry order count, inventories and well. The endpoint remains a Village at 80% headworks; capital requalification and a sustained timber/repair balance remain open.

Forestry civic-service exception routing — M3/M7 partial

The actual 66-person seven-community endpoint has one home timber and a linked woodland village with mature trees, free workers and an enabled standing selective-harvest order. Its next check is blocked by missing Public accounting service: the local village lacks it and the founding home's Regional institutions are suspended. Regional overview now names Standing forestry needs civic service, keeps the woodland village as the affected community and opens the founding home's Research screen for this exact blocker. Local crew, storage, plot and allowance problems still open their own controls. The projection changes no mandate, job, stock or right; the player still needs real materials to restore civic upkeep before automatic harvests resume. The integrated endpoint and focused forestry tests cover the routing.

Replacement-ore tools and two more 66-person repairs — M3/M7 partial

The next-well checkpoint now continues through two parallel paid returns of eight ore from the replacement iron mine and eight finite clay from the owned clay pit. A three-worker smithy switches to Mixed metalwork for three iron and one tool, then Forge tools consumes two of that iron and one charcoal for two more tools. The two-worker kiln fires six bricks from the imported clay and local logs. These real inputs and retained timber fund two additional four-worker maintain-headworks orders. Each completes with water still serving all 66 people, and every advance checks six home food days and no food shortfall in the seven chartered communities. The restored save agrees on inventories, population and 100% headworks. One timber, zero bricks and one tool remain, so this managed material sequence is not a renewable long-run balance.

Next paid well cycle for 66 residents — M3/M7 partial

The integration test forks immediately after the larger home's 100% headworks repair, before the separate full-office capital return. A clay team and woodland log team overlap in transit; a paid mature forest harvest supplies the latter. Eight finite clay and local logs fund six fired home bricks after the home saw is paused to reserve kiln fuel. A four-worker maintain-headworks order consumes eight timber, four bricks and the retained tool before household delivery falls short, restoring 100% condition. Every advance checks six home food days, sufficient water for all 66 residents and food in seven chartered communities. A restored save matches each charter inventory and the well. This branch ends as a Village with seventeen timber, two bricks and no tools. Replenishing tools and preserving simultaneous capital services across repeated repairs remain open.

Paid Town house after charter extension — M2/M3/M7 partial

The registered outer field hosts a paid Town house after seven real woodland log collections, local milling, finite clay delivery, brick and toolmaking, and four preventive well repairs. Joinery lowers the reviewed construction quote to 63 timber plus twenty food; housing rises from 64 to 68 without granting a resident. An extra worker in the second food field opens one-adult migration. Two finite-waystation residents physically arrive, and a third unused traveler returns after migration closes, leaving 66 at home and exactly two source residents debited. A further paid well repair and three real log returns stage civic timber and mill inputs. Record keeping, Land registry and Regional institutions reactivate; with the school, one home mill worker and all three registry offices staffed, nine qualification checks regain Regional capital and six current founding slots. Two free workers then depart on a funded governor journey and return with physically collected timber. Every advance keeps household water and food in all seven chartered communities; restored state agrees on capital, administration, population, source debit, inventories and well. The bounded endpoint has 52% headworks, seven timber, no bricks and one tool, so another repair requires material production and crew reassignment. Repeated unattended balance is still open.

Paid home-charter plot for future housing — M2/M3/M7 partial

The 64-person, seven-community home has 64 permanent housing places and no unoccupied owned field or forest plot. A saved branch after its second well repair uses local smiths, two physical forestry timber returns and an eight-ore import from a finite owned mine to fund one outer charter extension. Forging consumes retained iron and charcoal; a separate metalwork batch consumes imported ore and charcoal, yielding the third tool. A paid two-worker survey returns an actual report before the Land registry spends its own twelve timber, two tools and six food to register one released field. The home charter gains one buildable cell, without receiving housing, residents or materials for free. Six outpost links remain, all seven communities are fed, household water stays available with 70% headworks, and restored land rights, stocks and well agree. The paid-house and later continuation above builds the house, admits two adults, renews water and completes one full-office two-carrier return; repeated material supply remains open.

Capital requalification after the second 64-person well repair — M3/M7 partial

The tested continuation starts from the second paid headworks repair's 64-resident Village, with the governor route paused and its last tool spent. Three staffed smiths turn the home's two retained iron and one charcoal into two real tools. Separate paid forestry teams bring sixteen timber with eight logs, then twenty timber. The home restaffs its school and lumbermill and re-enables its previously adopted Regional institutions. Three qualifying checks at each stage regain Town, City and Regional capital; another twenty-timber carrying trip during promotion keeps civic upkeep supplied. The endpoint retains at least twenty home timber, two forged tools, six local food days, more than 60% working headworks and food in all seven charters. Three staffed registry offices restore six current founding slots, and a restored save agrees on stage, administration, governor pause, well and inventories. Only one carrier is free with all three offices staffed; simultaneously running a two-carrier governor route without regressing food or development still requires additional labor, housing and production. Long-run material and transport balance remain open.

Second preventive repair from the 64-resident freight route — M3/M7 partial

A saved branch at the tenth home day of the paid adult-worker and governor route has 64 residents, 64% headworks and one forestry carrying team already returning. Pausing later governor trips leaves that paid cargo in transit until it unloads. The owner suspends Regional institutions to preserve repair timber, collects eight finite clay and 32 food from the clay village, fires bricks at the home kiln, then makes a separate paid forestry pickup of sixteen timber. A four-worker maintain-headworks project spends eight timber, four locally made bricks and one stored tool and restores 100% condition. Every checked step keeps household water for all 64 people, six local food days and food in all seven chartered communities; a restored save agrees on the well and inventories. The route temporarily suspends civic recognition; the separate continuation above re-earns capital and six current slots. Running those offices alongside renewing freight and unattended material renewal remain open.

Paid adult workforce and renewing capital return — M2/M3/M7 partial

An integrated branch from the seven-community preventive-repair save now fills two actual housing places with one-adult-worker migration from the finite frontier waystation. Both residents arrive during paid source-village supply travel; the source loses two people and the home gains two workers. Separate physical returns bring twenty timber with eight food, then 32 food with eight logs. The owner staffs the home food field, school and saw and the source field and saw, closes migration, and authorizes renewing daily governor allowances for food, timber and logs. Fifteen chronological home days produce at least three funded governor departures and two returned mixed loads. The home re-earns Regional capital with 64 residents, more than six local food days, ten timber and 54% headworks still delivering water; all seven communities remain fed and a restored save retains their inventories, the migration debit, governor ledger and well. Six charters remain legally held, while one staffed registry office gives four current founding slots so two carriers can travel. The well is only a few wear checks from another material-funded repair; simultaneous six-slot staffing, carts and long-term renewable supply remain open.

Full handcart capacity for governor exchange — M3/M6/M7 partial

The Governor exchange's reviewed per-leg unit ceiling is now 100. The underlying outpost supply validator, manual custom-load entry and saved exact-load itinerary also accept up to 100 units per good, but the existing physical carrying weight still decides each trip: a two-person carrier team holds 60 weight and a borrowed serviceable handcart holds 100, both including paid travel food and any animal feed. Command tests collect 80 food with a governor cart and fund a saved 70-food itinerary leg; they verify source debit, real cargo custody, save restoration and the worn governor cart without resetting its committed allowance. Old mandates and saves keep their existing ceilings. This makes the existing cart useful for larger mixed regional loads; renewable carts, six-day capital food reserves and repair supplies remain unresolved in the seven-community balance.

Renewing mixed forestry exchange after well repair — M3/M7 partial

The saved seven-community preventive-repair branch now proves a daily-only, ongoing governor exchange carrying food, timber and logs on real two-worker journeys. A paid first manual load establishes home workshop inputs; staffing the home school and saw and the village field and saw then permits at least three automatic departures and two mixed physical returns in ten home days. The route books travel food and collected cargo against renewed allowances, leaves usable stock in both warehouses, keeps all seven communities fed, preserves water for 62 home residents and reloads its governor and inventory records. It remains a bounded freight checkpoint. The home food field and civic staff leave only two carriers; the mixed load keeps households fed but falls below the six-day capital reserve, so Regional-capital status is not sustained. More labor or carrying capacity, repair bricks, fuel and tools remain open.

Preventive well repair and supplied capital return — M3/M7 partial

The saved seven-community route now responds to the stocked repair-ready warning at 52% condition. Two extra registry clerks, one saw worker and a school worker are temporarily released so an ordinary four-person maintain-headworks job can spend eight timber, four bricks and one forged tool before water capacity falls. The well returns to 100% without any household-water interruption. The owner then puts eight workers on the home food field and pays two forestry-village carrying teams: twenty timber with eight food, then sixteen timber with eight logs. A staffed home mill and maintained food reserve re-earn Village → Town → City → Regional capital; three restaffed offices restore six effective outpost slots. The endpoint has 62 home residents, more than six food days, 66% sound headworks, three timber and one tool. All seven communities remain fed, the saved stock and water reload exactly, and no existing charter is lost. This is a bounded preventive cycle; new bricks, charcoal, tools and timber must be funded before further wear, and unattended balance remains unproven.

Local toolmaking and second seven-community capital return — M3/M7 partial

The integrated save continuation after the second well repair now uses four real forestry-village supply journeys and one paid local selective harvest. The first two return loads each carry eight logs and sixteen timber; a staffed home charcoal kiln consumes five logs to make four charcoal, and the smithy's retained Forge tools recipe consumes two existing iron and one charcoal for two tools. Two more sixteen-timber pickups keep civic services supplied during promotion while eight then seven home field workers protect the 62-person food reserve. Three staffed registry offices restore live six-outpost capacity when the home requalifies from Village through Town and City to Regional capital. It finishes with eleven home timber, two new tools, more than six food days and working 52% headworks; all seven chartered communities remain fed, and save restoration checks stock, stage, capacity and water. The well is two ordinary wear checks from losing extra delivery, and Regional overview now raises an urgent Land & water repair-ready issue when the local warehouse holds its full repair cost. The warning starts no job; preventive repair staffing and sustained regional material balance remain open.

Second paid well repair and material lead time — M3/M7 partial

The restored seven-community capital has 54% headworks and only two bricks. Its owner-only Regional overview now escalates a repair-material shortage when three or fewer ordinary wear checks remain until extra water stops; it names the remaining checks and local missing materials. The command-funded continuation moves eight finite clay and 32 food from the clay outpost, fires one six-brick batch at the home kiln, physically collects sixteen forestry timber, and funds another four-worker maintain-headworks job. The late timber trip lets water capacity drop from 72 to 60 before repair restores the headworks to 100%; no charter is lost. The endpoint has 62 home residents, more than six food days, all seven communities fed, four bricks, two timber and no tools, with save-restored stock and water. It is Town because water and civic service lapsed. The local-toolmaking return above funds the next tool and timber cycle and recovers capital; earlier staging for uninterrupted water and longer balance remain M3/M7 work.

Paid timber return after the well repair — M3/M7 partial

The saved zero-timber repair endpoint now has an integrated command-funded recovery. Eight home field workers hold food production while a four-day physical pickup brings 40 food from the forestry village and frees room in its warehouse. A paid selective harvest adds 21 real local logs. Four local sawmill workers turn those logs into timber; two separate home carrying journeys return sixteen and nine timber. During restoration the home runs its field and mill at reviewed staffing, releases two extra registry clerks only for the second trip, and then restaffs three offices. From a temporary Village downgrade it qualifies through Town and City to Regional capital. The 62-person home finishes with eight timber, more than six food days, a 54% sound well serving its residents, active Regional institutions and effective six-outpost capacity; all six dependent villages remain fed. Save restoration verifies stage, capacity, water and inventory. The remaining timber and water buffers are short, so this proves one paid recovery cycle, not a stable unattended seven-community economy.

Local clay-to-well material renewal — M3/M7 partial

The saved seven-community capital continuation now pays for one more repair from the local supply chain. An owned clay outpost gives up eight finite clay and 32 food to a physical home collection; the staffed home kiln burns three stored logs and the clay into six bricks. A separate four-worker maintain-headworks job consumes four bricks, eight timber and one tool, restoring headworks to 100%. All seven chartered communities still have food and the 62-person home keeps six food days. Save restoration retains the material and repair ledgers. The home spends its last timber: Regional institutions pauses for missing daily upkeep, current outpost capacity falls from six to two, but the six existing charters remain. The Regional overview directs this operating-supply issue to Supply chains. Capital recognition is only within its decline grace at this endpoint; the paid timber return above restores civic capacity once; repeated funded renewals and sustainable regional balance remain open.

Regional woodland return to seven-community capital — M3/M7 partial

A continuation from the locally productive forestry-mill snapshot now re-earns Regional capital at the 62-resident home through ordinary commands. The owner pauses home Record keeping and milling to stockpile 63 logs from five physical pickups across three owned woodland villages, backed by thirteen paid selective harvests; two further supply journeys return food. Two paid well repairs consume the remaining eight bricks and two tools during collection. The home then mills real logs, forges tools from retained iron and charcoal, readopts Record keeping and Land registry, and balances a staffed mill, food field and registry office through the nine qualifying Village → Town → City → Regional capital checks. At the endpoint all seven chartered communities remain fed, the home has more than six local food days, delivered water, 27 logs and ten timber, and three staffed offices restore six-title capacity. Stage, capacity, development history and every community inventory survive save restoration. The forestry village's mill and Record keeping are paused to redirect its wood; this is an actively managed recovery rather than simultaneous unattended production, and fresh bricks, tool fuel and future well repairs remain open. See living world design, gameplay foundations, player guide and technical reference.

Local forestry-village lumbermill and return supply — M3/M7 partial

A saved-state branch after seven-community recovery now funds a real lumbermill inside the forestry village. The home temporarily suspends timber-consuming Land registry service, shifts staff to its mill and makes at least six paid physical timber deliveries toward the village's 110-timber and 30-food build cost. The village reduces field staffing so two workers can harvest local mature trees and pauses local Record keeping upkeep while building. Home return loads bring logs and food; separate clay trips, local brick firing, retained-metal tools and paid well repairs cover the longer construction interval. An open village plot receives the mill, two local workers produce timber from the village's own logs, and a final outpost supply team brings sixteen timber back to the home. The mill then pauses while a previously cut plot regrows; a second paid harvest supplies its restart, local Record keeping is readopted, and production history records another real saw batch. The integration verifies the mill and inventories after save restoration. This is a bounded second production chain; the home temporarily loses capital recognition while civic service is suspended. The regional-return continuation above re-earns it with physical inputs, while longer seven-community food, water, staffing and mineral balance remain open. See living world design, gameplay foundations, player guide and technical reference.

Land-project supply goals and headworks material warning — M3/M7 partial

The City Supply chains goal tree now offers land projects alongside buildings, items, troop steps and resources. An existing well's Repair well headworks goal uses the authoritative eight-timber, four-brick, one-tool quote, shows only stock already local and lets players trace upstream materials before separately reviewing the real Land & water job. Regional overview warns the owner at 80% or lower headworks condition if any repair material is missing locally, escalating below 54%; it names the current stock and exact deficit, with in-flight cargo excluded. A paid active repair suppresses the warning. A command-funded groundwater and headworks test verifies the goal, shortage calculation, private read-only warning and clearance on replenishment. This improves repair planning but does not replenish timber, bricks or tools. The longer seven-community material balance remains open. See living world design, gameplay foundations, player guide and technical reference.

Managed seven-community capital upkeep — M3/M7 partial

After the sixth iron outpost and the bounded recovery below, a saved-state command branch continues the earned 62-resident Regional capital for at least 24 village days. It temporarily reassigns the two extra registry clerks to carrying or four-worker repairs, retaining one working office and restoring all three after each operation. Seven home field workers and one mill worker keep the household reserve viable while the owner collects forestry food and logs, brings clay home, fires replacement bricks, forges tools from retained iron, and pays at least two further headworks repairs. The integration checks every advance for Regional capital, delivered water, six home food days and positive food without shortfall in all seven chartered communities; it also checks unchanged stage history, renewed six-title capacity and save restoration. This proves a bounded managed interval. The home uses most of its timber buffer, so longer material renewal and finite mineral replacement remain open. See living world design, gameplay foundations, player guide and technical reference.

Sixth finite iron outpost after the first seam is exhausted — M3/M7 partial

An earned Regional capital supports six retained outpost titles while three distinct registry offices are operational, at least 65% sound, staffed and free of building work, with Land registry and Regional institutions active. Lower-stage and one/two-office limits remain; losing service blocks new dispatches without erasing rights. Founder quotes use live capacity, the Regional administration card names the third-office requirement, and save validation rejects a seventh link. The isolated office branch proves staffing rollback. A second command-driven branch begins with five outposts and a physically exhausted iron seam. It returns previously mined ore, forges tools, gathers and mills real woodland logs, pays for a third plot and office, fires clay into well-repair bricks, restores Regional capital services and surveys another finite iron site. Eight existing residents carry a paid camp kit to the sixth title; a local field keeps them fed, five actual timber journeys fund a mine, and staffed miners draw down the new seam. A paid return carries its ore home for charcoal-fueled iron and tool production. The old seam remains empty and six links, inventories and the new deposit survive save restoration. A further command-driven continuation restores the depleted forestry village with a continuous food mandate, paid home food deliveries and six selective harvests exporting logs. It fires clay bricks, forges tools, mills timber, repairs home headworks and admits three physical waystation households. At 62 residents, one staffed office, school, supplied mill and two available specialist workers regain Regional institutions and earn Town, City and Regional capital; the two additional offices restore six-title capacity. All seven communities retain food at the checked endpoint. This is a bounded recovery scenario; recurring resources, finite seams and durable seven-community balance remain M3/M7 work. See living world design, gameplay foundations, player guide and technical reference.

Private near-depletion warnings for clay, iron and stone — M3/M7 partial

Regional overview now inspects only the owner's surveyed, activated deposit ledgers and their actual extractor structures. A staffed pit or mine raises an attention issue at or below the larger of 20% of the original seam or five full-output batches; its detail names the ground stock, affected hex and approximate remaining cycles at current staffing. An exhausted built extractor remains flagged if unstaffed, while an intentionally idle live seam does not receive the advance warning. The issue navigates to the affected community's Supply chains, which already lists real inventory, market imports and consented worked-site lease possibilities. No goods, rights, deposits, jobs or save fields are changed by this read. Focused clay, iron, stone and Regional overview tests pass, including privacy, immutable projection and warning-clearance checks. This warning is an early exception for finite supply and grants no material. The sixth-outpost journey above now proves one bounded replacement iron chain; clay, stone and unattended seven-community balance remain open. See living world design, gameplay foundations, player guide and technical reference.

Governed clay and further six-community masonry upkeep — M3/M7 partial

The earned capital continuation reviews a daily-only clay-collection governor mandate for its fifth outpost. Existing physical route, worker, ration, stock and shared-budget rules dispatch and return the loads; no new stock or governor shortcut is added. The player funds a due well repair, pauses competing collection, mills actual logs while temporarily suspending public services, retrieves a forestry-village log load, restores capital recognition, and fires at least two more home kiln batches from governed clay. In a subsequent 36-day managed interval, a reviewed daily-only land-maintenance instruction at 70% condition funds two ordinary four-worker headworks jobs from local bricks, timber and forged tools without any brick purchase or manual start. The owner still frees crews and retrieves forestry logs. The maintenance order count and stock balance verify both commitments and show that the repairs consumed more bricks than existed before the governed kiln batches. Each checked day retains more than 60 home residents, sound delivered water, Regional capital status and six fed communities. The end state restores the second office, maintenance ledger and well from save. The focused City integration test passes; finite seams, tools, forestry inputs and labor still prevent any claim of indefinite six-community balance. See living world design, gameplay foundations, player guide and technical reference.

Fifth charter and local clay-to-brick production — M3/M7 partial

An earned Regional capital now allows five retained outposts when Land registry and Regional institutions are active and two distinct registry offices are staffed, operational and at least 65% sound. Four remain the limit with one office. An office or stage loss blocks only new above-limit founder dispatches; existing links remain. The City founder review explains the extra office. The integrated continuation of the earned 64-resident capital pays to build and staff that office and a home brick kiln, registers a surveyed clay site, sends eight real founders and construction timber, builds and staffs a field off the deposit and a clay pit on its finite seam, returns clay physically and fires six bricks at home from eight clay and three logs. Paid well repairs and additional migration restore 64 residents, delivered water and Regional capital status; the final state has five outposts and six fed communities and survives save restoration. Existing recipes, deposits, cargo and title records supply the chain; no free inventory or save migration is introduced. The full repository suite passes 2,376/2,376 tests after this extension, alongside gameplay catalog validation and wiki checks. Finite clay, staffing, maintenance, trade dependence and long-term six-community balance remain open. See living world design, gameplay foundations, player guide and technical reference.

Chartered iron in the 64-resident capital — M3/M7 partial

The command-driven capital continuation now reserves its fourth outpost's surveyed iron hex for an actual mine rather than placing the camp food field on that deposit. After the ten-year upkeep checkpoint, physical supply trips bring the ninety timber required for construction and collect surplus camp food to make storage room. Four staffed miners consume a finite seam, an ordinary returning team transports iron ore, and the home charcoal kiln and smithy use the mixed-metalwork recipe to turn that ore into tools. Additional reviewed headworks allowance and paid brick and tool replenishment keep the larger home watered during construction; temporary registry suspension lets the mill accumulate timber. The registry is restored and the capital and all five fed communities are rechecked. This proves local ore in the existing capital, but not renewable mineral stock. The fifth-charter continuation above adds a local brick chain. The full M0–M8 goal stays active.

Ten-year managed 64-resident Regional capital — M2/M3/M7 partial

The command-funded capital growth branch continues beyond the first household. Three further one-adult journeys debit actual waystation residents and fill the home’s 64 permanent places. An authorized land-maintenance instruction starts ordinary four-worker headworks jobs as condition reaches 54%; the owner frees crews by changing real staffing and restores production afterward. The first repair uses existing stock; later materials come from repeated logs-for-bricks trade, timber-for-iron trade and locally forged tools made with charcoal. A reviewed increase in cumulative allowances preserves earlier spending. Ten jobs cumulatively spend 80 timber, 40 bricks and ten tools. For 240 village days after capital recovery, every advancement checks population above 60, usable delivered water, Regional capital status and positive food with no latest shortfall in all five communities. At least one lawful ruler handover and two later material replenishments occur; a copied final decision-free segment reproduces five community inventories, population, headworks, maintenance and governor ledgers. The focused City integration test and the full 2,376/2,376-test repository run pass with the later fifth-charter continuation above. Further operation beyond finite market inventories, renewable mineral supply, sustained replacement inputs, specialist succession and ecological balance remain open; the full M0–M8 goal stays active.

Funded growth beyond the founding 60 — M2/M7 partial

The command-funded Regional capital integration forks at an earlier earned-capital save. Without inserting goods or residents, it buys iron, makes charcoal and tools locally, uses a paid governor exchange to obtain forestry-outpost logs, mills timber, restores food reserves, researches and staffs Small irrigation, surveys the founding commons, builds the deeper well and its headworks, and constructs a town house on cleared owned land. It temporarily releases costly services and reassigns growers and millers to preserve labor and stock, then restores the services and Regional capital stage. One physical four-person waystation group arrives above the old 60-resident limit with 64 housing and 72 delivered water capacity; the test checks the source debit, admission conditions and saved replay. The managed continuation above extends that first arrival. This remains a shorter growth branch from the 3,600-day checkpoint, which still ends at 60; multi-year balance and the full M0–M8 goal remain open.

Founding-home deeper source — M2/M7 partial

A current founding home with suitable original field moisture can survey its commons, adopt active Small irrigation, fund a two-day, four-worker deeper groundwater test, then separately fund three-day headworks with actual local timber, bricks and tools. A completed test records twelve units of verified potential but no delivery; completed sound headworks raise local supply from 60 to 72. The existing two-condition-per-day headworks wear and paid repair remove and restore that extra delivery without changing the base source. Land ledger version-five migration leaves older saves at their original limit and rejects unsupported deeper-source records. Focused tests use a physical timber-for-tools and logs-for-bricks exchange, real woodland harvest, completion/replay, wear/repair, authority and forged-state checks. The growth branch above now checks the separate housing and admission path. Sustainable above-60 balance remains unverified; the existing 3,600-day journey below remains at 60.

Regional capital through day 3,600 — M2/M3/M7 partial

The five-community command-funded journey verifies 3,600 managed village days without capital regression or linked food shortfall. A third pair of Record keeping and Regional institutions backups completes paid courses after a temporary milling shift. A late labor exception sends Regional overview to People; field reassignment releases service workers when needed. A reviewed governor target ends outbound food while real log collection continues. Near the home’s 60-person housing and water limit, a reviewed one-adult migration policy replaces aging labor from the finite waystation. Each adult and outward/return rations are physically debited; departure and arrival check the smaller party’s actual housing, water, food output and reserves. Temporary field/mill staffing changes restore admission capacity and timber. Offline replay agrees across decision-free segments. This supersedes the earlier 2,600- and 3,500-day capital checkpoints; the separate four-community City route still ends at 2,600. Indefinite unattended balance and M0–M8 completion remain open.

Integrated renewable regional economy and office recovery — M2/M3/M6/M7 partial

The five-community Regional capital acceptance journey now runs its 2,600-day managed continuation with ongoing home and supplier forestry, a renewing governor allowance and daily-only shared logistics and operating budgets. The same real worker, food, timber, shipment, specialist-succession and stage checks remain; governor and both shared ledgers exceed 10,000 gross food commitments, and segmented offline replay agrees with actual inventories and budget ledgers. The daily-only operating budget retains a narrow production recovery path when regional service temporarily fails: already reviewed workshop inputs may still spend under the current day's cap, while new approvals and other covered work remain blocked. A focused command test makes two physical mill batches during office loss, checks the day reset and pause, and restores the ledger. The full repository suite passes 2,376/2,376 tests. This is a managed regional route, not proof of indefinite unattended balance or completion of M0–M8. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Renewing shared operating budget — M2/M3/M6/M7 partial

The optional home operating budget now selects capped lifetime or renewing home-day material ceilings. Gross paid commitments and bounded receipts remain, while daily mode measures each new commitment against current-day spending. Version-one budgets migrate as capped, with a conservative current-day spending value until the next day. City review and Regional overview disclose the period, today's spending, gross spending and next reset. A real mill test pays later batches across home days beyond its former shared total cap, checks offline replay and mode edits, and rejects forged period state. A separate governor test funds two physical outpost log collections on later days beyond one day's shared limit, using real renewed outpost harvests. Physical stock, local mandates, route permissions and other blockers remain independent. The full repository suite passes 2,371/2,371 tests. The full M0–M8 goal remains active. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Renewing targeted-production input allowances — M2/M3/M7 partial

Targeted producers can now use capped lifetime or renewing daily material allowances while retaining their local warehouse output target. The new production-mandate ledger version three migrates older instructions as capped, keeps gross spending and batches, and conservatively counts all prior spending as today's on migration until the next day. A live batch records its actual village check time, so a same-day mode change cannot erase inputs just consumed. City and coordinated regional production editors, forecasts and comparison show the period. A paid smithy test issues later physical batches beyond its former total input ceiling using physically imported finite iron, matches offline replay and rejects a switch back to an underfunded cap; regional tests cover copied comparison and atomic authoring. The full repository suite passes 2,369/2,369. This removes an arbitrary authorization stop for repeating refinement and cart repair, but indefinite local inputs, labor and three-community equilibrium remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Integrated ongoing-forestry recovery — M2/M3/M7 partial

The command-funded City journey now uses one reviewed switch from a near-spent 200-order forestry cap to ongoing daily checks. The 2,600-day managed replay issues real harvest jobs beyond 200 without raising its stored total, keeps four communities fed with home accounting and regional service, and matches segmented offline inventories, production, forestry and family ledgers. The unchanged capped comparison stops at 200 and eventually loses timber-funded Regional institutions. The Supply chains log-source guidance now names both authorization modes. The focused integration test passes; indefinite unattended food, labor, ecology, tools and material balance remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Ongoing selective forestry — M2/M3/M7 partial

Standing forestry now has a reviewed capped or ongoing order mode. Ongoing authorization keeps the one-check-per-local-day schedule and gross lifetime order count while allowing later orders beyond the previously retained total cap. Each ordinary two-worker harvest still depends on healthy mature owned trees, accounting, protected food, available labor, queue priority and whole-yield storage; authorization itself grants no logs. The version-two ledger migrates existing version-one instructions as capped without changing selected plots or paid crews. City and coordinated regional plan editors send the mode, copied forecasts disclose it, and Regional overview suppresses the near-lifetime-cap warning only for ongoing instructions. Focused local and coordinated command tests verify actual later harvests, forecast agreement, offline replay, restoration and invalid unmarked state. The full repository suite passes 2,368/2,368. Indefinite timber and three-community balance remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Renewing food-only supply allowances — M6/M7 partial

The founding owner may now choose a capped total or a daily food authorization for an established owned outpost's food-only supply instruction. A daily limit up to 1,000 renews on the home village day; accepted trips still book their actual cargo and travel food against real home stock, protected reserves, carriers, route, outpost storage, active institutions, shared logistics and operating budgets. The ledger keeps cumulative spending and current-day spending separately, and resets the day on every scheduled check, including blocked checks. A mode change must cover prior commitments in the chosen period. Version-four mandates migrate versions one through three as capped without changing paid journeys. City and Regional overview show the period, and focused tests cover successive physical trips beyond the former total ceiling, offline equivalence, migration, and invalid saved spending. The full repository suite passes 2,367/2,367. Long-term village and three-community food balance remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Renewing governor route allowances — M6/M7 partial

Governor exchange instructions now choose capped total allowances or daily allowances up to 1,000 per material, renewed on the home village day. Dispatch still commits an actual carrying team, provisions, optional horse feed, outward cargo and reserved collection under stock, reserve, route, worker, storage, institutional, shared logistics and operating checks. The mandate retains gross lifetime spending and a current-day ledger; switching to capped requires lifetime coverage, while switching to daily covers spending already made today. Existing mandates migrate as capped with unchanged paid jobs. City review and Regional overview disclose the period, and the old low-lifetime warning is suppressed for daily routes. Focused governor tests verify successive-day dispatch beyond a former total cap, restore validation and forged-state rejection. The full repository suite passes 2,366/2,366, including long City and coastal restore journeys. Long-term multi-community stability remains open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Daily-only shared regional logistics — M6/M7 partial

The founding home can now review either capped shared logistics or daily-only authorization. Both modes price every automatic food, governor and saved-itinerary departure against whole-material daily ceilings; capped mode additionally enforces the retained lifetime ceiling. Daily-only does not bypass separate route allowances, stock, staff, route, storage or operating budgets. Gross lifetime spending, last forty receipts and physical job links remain recorded in both modes. A later switch back to capped requires limits above prior commitments. Version-two migration preserves all version-one budgets as capped and leaves older budget-free saves unrestricted. City exposes the period choice and its exact review, Regional overview shows current-day spending against daily ceilings, and copied forecasts retain the chosen mode. A command-built three-community scenario pays one food-supply and one governor trip across village days with zero shared lifetime allowance; focused budget, cargo and regional-forecast tests pass 35/35, the wider City/regional regression passes 93/93, and the full repository suite passes 2,365/2,365. Full long-term three-community equilibrium and wider M0–M8 gates remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Chronological regional route controls — M6/M7 partial

The owner can pause an enabled food-only or governor outpost route before its next check, or cancel future itinerary loads before the next saved departure, without recalling a paid carrying team. If the check or departure is already due, that control rejects unchanged until the world processes the earlier event; an actual dispatch or blocker is recorded before the owner can stop subsequent checks or loads. This closes retroactive cancellation paths beside the existing edit and shared-budget timing guards. Three command-driven boundary tests and the direct route suites pass 32/32; expanded regional cargo, budget and forecast coverage passes 69/69. No save migration is needed. Indefinite regional equilibrium and wider M0–M8 gates remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Saved custom-load itinerary — M3/M6/M7 partial

The home City now lets the owner assemble two to four exact custom loads from linked outposts, compare one or six home days against unchanged regional orders, then review one live authorization. Confirmation pays the first physical team and saves later legs. Each next load is first checked just after the preceding team returns; a stock, route or persistent-budget blocker waits for a reviewed retry or cancellation. A configured shared regional logistics budget counts each accepted leg's cargo, travel food, selected draft feed and reserved collection against the home's daily ceilings and any capped lifetime ceilings. A failed first leg pays nothing; a later load that fits its daily limit but finds that allowance spent waits for the next home day and retries automatically. Paused, capped-total and per-load daily ceiling blockers retain the exact load until the owner edits the budget and retries. An occupied destination carrying route also waits for the next home-day check; once its physical team returns, the itinerary gets a check after daily needs and before new recurring route departures. Regional overview flags these two extended waits as owner-only budget or journey issues and clears them at dispatch, while the ordinary immediate handoff remains routine. An edit to the shared budget is rejected while an itinerary dispatch is already due but not yet processed; refreshing after the check preserves chronological authorization. Independent manual trips remain outside those ceilings. Recalling the active journey cancels future legs but keeps real cargo in custody. A version-two book migrates prior itinerary plans and older saves explicitly, retaining active jobs and inferring any prior daily-budget wait; Regional overview flags a blocked plan. The copied forecast executes the same itinerary authorization and lifecycle. Focused command tests cover two physical loads and collection, save/restart, blocked stock or persistent shared ceilings followed by retry, genuine daily-ceiling renewal and busy-team release after competing governor trips with offline replay, version-one plan migration, cancellation/recall, authority, stale reviews and corrupt state. The full repository suite passes 2,361/2,361 with this budget extension; the relevant itinerary, shared-budget and regional-forecast tests pass 38/38. Route optimization and long-term regional sustainability remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Finite governor trip plans — M3/M6/M7 partial

A regional governor exchange can now stop after a reviewed absolute total of paid trips, or remain ongoing. Each accepted dispatch of a physical two-worker supply team counts; waiting and blocked checks do not. Reaching the cap disables future checks while the last funded journey retains its goods, workers, route and ordinary recovery rules. An owner may increase the limit above trips already sent or explicitly return to ongoing authorization; neither change resets cumulative allowances. Existing mandates migrate with no cap. City shows the control, count and completed state; Regional overview flags still-unmet targets after the last team returns. A two-trip command-funded route, offline replay and corrupted-save checks verify the boundary. The gameplay catalog validates 42 buildings, 46 technologies, 32 recipes and 79 resources. The distinct-load live itinerary above is separate from governor stock targets; broader M0–M8 acceptance gates remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Large civic works hall and fourth City crew — M4/M7 partial

Large civic works is a live Building topic after Structural engineering and Construction planning. A staffed mason workshop supports its funded research and one-worker specialist; adoption and daily food/timber upkeep remain separate. Its Stone civic works hall requires sixty timber, forty-eight dressed stone, thirty-two bricks, twenty-four food, four tools and a paid construction crew. A completed hall needs one staff member. At earned City or Regional capital, active Construction planning and Regional institutions still provide three four-person crew slots; active Large civic works with one sound, dry staffed hall adds a fourth. Multiple halls do not stack. Damage, flood, staffing loss, hall work, service loss or stage decline queue the fourth crew without refunding or erasing its paid progress. City → Workers shows the current count, and the catalog and supply graph expose the real costs. A command-funded stone-source journey reaches the hall with controlled late-stage stock; focused tests verify four-slot scheduling and interruption. The full repository suite passes 2,348/2,348, and the gameplay catalog validates 42 buildings, 46 technologies, 32 recipes and 79 resources. Broader City pacing and M8 gates remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Paid topsoil recovery — M4/M8 partial

Rebuild eroded topsoil is a live Agronomy land project on surveyed prepared ground with recorded quality loss. Four workers commit eight compost, four timber and one tool for two village days, pausing an existing field while the job runs. Completion restores up to twenty quality points that are still missing; soil-work condition, prior sediment export, water and immutable terrain do not change. Further runoff can erode the rebuilt layer. Topsoil ledger version two migrates version-one records with zero paid treatments and validates their bounded receipts. City → Land quotes the quality effect and Supply chains lists its cost. A monitored, command-funded eroded field, replay and restore verify the path. The full repository suite passes 2,347/2,347, and the gameplay catalog validates 41 buildings, 45 technologies, 32 recipes and 78 resources. This closes one recovery choice while complete W2 terrain and M8 works remain open. See living world design, gameplay foundations, interface behavior, player guide, technical reference and waterworks plan.

Armored terrace runoff spillway — M4/M8 partial

The second Structural engineering application is a paid spillway on an existing sound, dressed-stone reinforced terrace. Four workers commit eight dressed stone, eight bricks and one tool for two village days. After a complete registered surface-water interval, a sound armored terrace loses half the measured retaining-work erosion condition, rounded up. Below 50% condition the armor does not protect that interval; a separately funded terrace repair can restore it. Soil, tracked topsoil, other improvements, actual water and sediment routes are unchanged. City → Land shows the new review and state, Runoff erosion receipts identify protective intervals, and Supply chains lists the material use. Land version four migrates earlier terraces with no spillway; erosion version two migrates older receipts unarmored without altering damage. This closes one local mitigation choice, while bridges, complete affected reach and M8 major works remain open. The full repository suite passes 2,345/2,345; the gameplay catalog validates 41 buildings, 45 technologies, 32 recipes and 78 resources. See living world design, gameplay foundations, interface behavior, player guide, technical reference and waterworks plan.

Structural engineering terrace reinforcement — M4/M8 partial

The Building branch unlocked Structural engineering after Masonry and Contour surveying. With a staffed mason workshop and active specialist, an owner can fund dressed-stone reinforcement of a sound existing terrace for twelve dressed stone, eight timber, one tool and four workers over two village days. Completed works lose one ordinary condition per day instead of two; reinforcement alone leaves existing wear, measured runoff erosion and critical-foundation consequences. City → Land shows the material quote and reinforced state, and Supply chains lists its one-time cost. At that checkpoint, land save version three migrated old terraces unreinforced; the current version-four and separate spillway behavior are described above. The checkpoint repository suite passed 2,342/2,342 with 41 buildings, 45 technologies, 32 recipes and 78 resources. The later Large civic works hall is implemented above; bridges remain planned. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Regional decisions for reciprocal visits — M7/M8 partial

The owner-only Regional overview now identifies a received pilgrimage or cultural exchange offer before its three-day answer deadline, then an accepted pact whose owner has not yet completed the separately paid visit. The latter becomes urgent during its final two village days. A missed owner promise shows the seven-day reoffer time; it clears at that boundary. The issue links to City → People and does not appear for the offering party merely awaiting an answer, a party that already fulfilled its visit, a withdrawn pact or a closed offer. The view reads existing ledgers without new permissions, goods, visitors or save fields. Focused pilgrimage, performer-tour and regional-overview suites pass 39/39; the broader repository and wiki checks are recorded after the current validation run. Broader diplomatic enforcement and M0–M8 remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

The preceding reciprocal-visit change passed 2,340/2,340 tests with 44 technologies and 77 resources. Current validation for Structural engineering is recorded above.

Bilateral pilgrimage exchange commitments — M4/M6/M8 partial

Two foreign founding owners with active Pilgrimage and civic hospitality may now review a reciprocal exchange in City → People → Pilgrimage and civic visits. An offer expires after three village days and grants no access until the second owner accepts. Acceptance opens bilateral guest visits for fourteen days and records one promised successful paid visit from each community. Each sender independently pays two real workers, gathering food and route rations; the host pays its own four surplus food only for a successful one-day gathering. Both held visits extend access to thirty days from acceptance. Withdrawal or expiry removes pact-only permission; an unheld team relying on that permission returns physically with unused gathering food. Public and named invitations remain independent. At an unfulfilled fourteen-day deadline, only a sender that missed its visit waits seven further days before offering that partner another pact. The new version-one global ledger initializes empty for older saves, validates ownership, terms, bounded records and recent promises against actual host receipts, and rejects missing or unmarked ledgers on newer saves. Focused tests cover authority, bilateral funding and fulfillment, interrupted hospitality, withdrawal, expiry, missed-sender retry, migration, restore and forged promise rejection. Wider spiritual institutions and longer pilgrimage routes remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

The full repository suite passes 2,340/2,340. Gameplay catalog validation and generated-wiki checks pass with 41 buildings, 44 technologies, 32 recipes and 77 resources.

Named pilgrimage invitations — M4/M6/M8 partial

A chartered host owner can now name up to four foreign founding communities in City → People → Pilgrimage and civic visits. A named owner independently decides whether to fund the same physical two-worker visit; public guest access can stay closed. Withdrawing the last applicable permission before arrival or the gathering turns an unheld team home with unused gathering food; an open public policy still permits a visit after its private grant is withdrawn. Performer permissions remain separate. The version-three host ledger migrates version-two public-consent saves with an empty invitation map, retains earlier guest receipts and rejects invalid or forged invitation partners. Focused tests cover authority, quoted consent, actual host receipts, withdrawal, public independence, restore and migration. The full repository suite passes 2,336/2,336 at this earlier checkpoint; the gameplay catalog validates 44 technologies, 32 recipes and 77 resources. Bilateral exchange commitments are implemented in the newer milestone above; longer routes remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Pilgrimage and civic hospitality with foreign guest consent — M4/M6 partial

Pilgrimage and civic hospitality is a live fifth Religion topic requiring Ritual and civic calendar and Sacred and civic architecture. Research and adoption use ordinary staffed institution, cost and specialist rules. A founding owner can review and fund a physical two-worker visit to a populated established owned outpost or an inviting foreign chartered founding city or established outpost in City → People. The foreign host owner separately opens public pilgrimage guest access; performer permission does not count. The home pays two carried gathering food and round-trip rations; the host pays four local food above its reserve only when a one-day gathering completes at a sound dry camp or commons with met basic needs and active home guidance. A held visit adds up to two host health and starts a seven-host-day interval. Foreign consent is checked at arrival and before the event. Withdrawal or interruption sends an unheld team and unused gathering food home physically, while eaten route food stays spent. Journey capacity, hazard routing, storage, revisions, recall and offline catch-up share existing travel systems. Old saves acquire an empty version-two visit ledger with guest access closed; older paid owned jobs and receipts migrate without granting foreign consent, while restore validation rejects forged foreign legacy visits or completed receipts. Focused tests cover separate material custody, service loss, host shortage, recall, foreign dispatch and consent withdrawal, migration, restore and offline agreement. The full repository suite passes 2,334/2,334 and the gameplay catalog validates 44 technologies, 32 recipes and 77 resources. Named invitations and bilateral exchange commitments are implemented above; longer pilgrimage routes remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Efficient kiln firing — M3/M4 partial

Efficient kiln firing is a live Building technology after Timber framing and Record keeping. A staffed brick kiln supports research and adoption. Its selectable alternative uses eight clay and two logs for six bricks per full two-worker batch, saving one log against the unchanged default. The kiln still needs an active one-worker specialist, one food per service day, real inputs, storage and a complete cycle after switching. Service loss pauses the selected recipe. Existing kiln saves initialize with the original recipe; saved efficient selections retain their version-one recipe ID. The City production card and supply-chain graph expose both alternatives. The finite clay-pit delivery path remains the source of local clay; this change neither creates clay nor removes other fuel demands. Focused production tests cover paid learning, selection, exact stock debit, service interruption/resumption and restore. The full repository suite passes 2,327/2,327, and the catalog validates 43 technologies, 32 recipes and 76 resources. Wider production breadth, multi-settlement balancing and remaining M8 gates stay open. See living world design, gameplay foundations, player guide and technical reference.

Finite ritual and civic gathering calendar — M4/M8 partial

The Religion tree now includes Ritual and civic calendar after Festivals. Six practice days, three funded research days and separate local adoption support a one-worker steward with one-food daily upkeep. A charter owner can review a finite plan for one to four future Community festivals in City → People. Authorization spends nothing; at each eligible village-day check, the existing festival rule pays eight actual food above household reserves and two timber within the public budget, assigns two free workers and resolves at the next household check. The normal seven-day interval, active Festivals and calendar services, sound commons and current stock remain binding. A blocked plan waits without payment; fulfilled plans never renew automatically. Stopping future funding does not undo an already paid gathering. Faith and secular calendars have the same material and health rules and change no beliefs. Version-one festival saves migrate to a disabled version-two calendar without new orders, stock or people. Focused tests cover authority, real funding, deferral, service suspension, finite exhaustion, stopping, migration, forged terms and offline replay. The full repository suite passes 2,326/2,326; the gameplay catalog validates 42 technologies and 75 resources, and wiki generation, syntax and whitespace checks pass. That calendar checkpoint preceded the pilgrimage path documented above; broader ritual institutions remain planned. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Unfulfilled cultural promises — M8 partial

An accepted bilateral performer exchange now distinguishes an unmet fourteen-day promise from an ordinary expired fulfilled pact. Each founding community that failed to send its separately paid successful visit must wait seven further village days before proposing another pact to that partner. A community that delivered may reoffer, and the other owner can initiate a new exchange; withdrawal remains a separate explicit choice. The City shows the unfulfilled record and the affected owner's next offer time, prioritizing actionable and waiting records ahead of old history. The finite ledger retains a waiting record until its delay ends. No stock, visitor, title or authority changes at the deadline. Focused tests cover one-sided fulfillment, separate owner authority, save restoration, the deadline and reoffer boundary. The full repository suite passes 2,323/2,323; gameplay catalog validation, wiki generation, syntax and whitespace checks pass. Wider diplomatic consequences remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Bilateral cultural exchange commitments — M4/M8 partial

Two foreign founding owners with active Performing arts and Shared civic identity may now review a cultural exchange offer in City → People → Touring performers. The other owner has three village days to accept or decline. Acceptance opens guest tours in both directions for fourteen days and records one promised successful paid visit from each community. Each visitor still separately funds two real workers, food, cloth and travel provisions. A successful hosted visit records that sender's fulfilled promise; a failed held event spends its supplies without fulfilling it. Completing both directions extends access to thirty days from acceptance and can activate the four-day shared civic repeat interval. Either owner can withdraw; pact-only permission then ends and an unheld team returns with unused event goods unless public access or a private invitation still allows it. Signing moves no stock, transfers no people or title, and grants no warehouse or military authority. A version-one global ledger migrates older saves empty, validates parties and time-bounded progress, and prunes expired history under a finite cap. Focused tests cover authority, unaccepted offers, bilateral dispatch and fulfillment, withdrawal during travel, expiry, migration and forged-state rejection. The full repository suite passes 2,322/2,322; catalog validation, wiki generation, syntax and whitespace checks pass. Broader diplomatic enforcement and cultural institutions remain planned. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Shared civic identity's first cooperative use — M4/M8 partial

The Culture tree now has Shared civic identity after Literacy and Regional institutions. Eight practice days, four funded school research days and a separate local adoption commit one specialist and one daily food. Between two foreign founding communities, active programs and either mutual private invitations with successful paid visits in both directions or a fulfilled signed pact establish a documented exchange. While each qualifying receipt is within thirty host days, later performer tours between them wait four host days rather than five. A latest host visit from another community keeps the five-day host-wide interval. Losing the applicable grants or pact, active programs or recent evidence restores the ordinary interval. This changes no materials, route, four-health event cap, rights or beliefs. The City host card and destination quote show the live interval. Focused tests cover prerequisites, funded learning, adoption, real reciprocal journeys, save restore, withdrawal and service loss. The catalog validates 41 technologies and 74 resources, including the physical manuscript for this topic. The full repository suite passes 2,318/2,318; wiki generation, catalog validation, syntax and whitespace checks pass. Broader civic identity institutions and diplomatic enforcement remain planned. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Named performer invitations — M4/M6 partial

A charter owner can now name up to four foreign founding communities in City → People → Touring performers. The host reviews each private grant or withdrawal; the named owner independently decides whether to pay for a physical performer tour. Public guest access remains a separate option. A destination appears for a visitor when either permission applies. Removing the last applicable permission before arrival or before the one-day performance sends an unheld team home with its unused event food and cloth; travel rations already consumed remain spent. Private grants do not provide warehouse, staffing, land or military rights. The version-six performance ledger migrates version-five saves with an empty invitation map, validates each partner and timestamp, and retains paid tour consent receipts. Focused tests cover authority, private dispatch, save restore, forged partners, withdrawal during travel and the independence of public access. The full repository suite passes 2,316/2,316; catalog validation, wiki generation and syntax checks pass. Broader reciprocal cultural obligations and civic identity institutions remain planned. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Consent-based visits to foreign chartered communities — M4/M6 partial

A founding-village, developed local-village or established outpost owner can review Review inviting guest performers or Review closing public guest access in City People. The invitation exposes that destination to other founding-home charter owners with active Performing arts; it grants no warehouse, land, staffing or military rights. A visitor pays the same two workers, two event food, two cloth and route-dependent round-trip rations as an owned tour, and travels with the actual team and cargo. The host's consent is checked again when the one-day stay resolves. If withdrawn, no event goods are spent and the team returns physically with unused cargo; travel food already eaten remains spent. A held guest event uses the same live host needs and gathering-site checks, four-health cap and five-host-day interval as owned visits. The host's version-six performance ledger migrates old tours to non-guest receipts and starts older outposts with guest visits closed. Tests cover authority, opt-in visibility, paid visits to camps, converted local commons and a foreign founding village, host withdrawal before arrival and during the stay, save replay, forged receipts and competition with ordinary supply teams. The full repository suite passes 2,314/2,314; gameplay catalog validation, generated wiki, syntax and whitespace checks pass. Named invitations and the first civic exchange effect are implemented above; broader cultural obligations and civic institutions remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Physical performer tours to owned outposts — M4/M6 partial

A founding-home charter owner with active Performing arts can now review a real two-worker tour to a populated established owned outpost. Funding spends two cloth and two food as carried event goods plus separately quoted round-trip rations above the protected home reserve. The route and carrying capacity use existing outpost logistics, including Scouting detours, fire/flood interruptions and the chosen carrier or handcart policy. The team holds its cargo, stays a full village day at the destination camp or converted commons, then returns physically. At resolution, current host household food, water and shelter needs, the gathering site's condition and flood exposure, and the home organizer determine a bounded four-point host health recovery. A failed held event still spends its event goods; recall before the event returns unused cargo and provisions. A five-host-day interval limits repeated held visits. The host's current version-six performance ledger migrates older local-event saves without changing historical caps, records paid tour results and supports save/offline replay. City People shows the destination quote, team position, blockers and host history. Focused tests cover travel, authority, exact stock and worker custody, live host benefit, early recall, cooldown, malformed saves and replay. The full repository suite passes 2,309/2,309; gameplay catalog validation, generated wiki, syntax and whitespace checks pass. Foreign charter visits and named invitations are implemented above; shared civic identity remains open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Cultural patronage and notable works — M3/M4/M8 partial

The Culture tree now has Cultural patronage after Performing arts and Scholarship. Eight village practice days, four funded research days at a staffed theater, and separate local adoption commit one patron and one food upkeep per day. A two-worker theater can complete a real production cycle using four cloth, two timber and one tool to make one whole notable work; ordinary stock, storage, technique and operating-budget rules apply. Whole works can be sent through existing owned-outpost cargo routes at four weight each. An owner can review installation of one local work at a sound, dry, two-worker theater while the patron and Performing arts organizer are active. Installation removes that work from warehouse stock. Future performances booked there can recover up to eight health after basic needs are met, rather than six; a performance funded before installation retains its original cap. A cleared theater loses its display without refunding the work. City People shows the review and venue cap, while Supply chains shows the production recipe and optional one-time display use. Completed theater production can establish a Cultural patronage economic identity under the existing three-of-seven-day evidence rule. The current version-six performance ledger migrates older events without changing their historical caps. Focused production, authority, venue, migration and offline-replay checks pass; the full repository suite passes 2,307/2,307. Catalog validation, generated wiki, syntax and whitespace checks pass. Owned-outpost performer tours are described above; broader shared civic institutions remain planned. See living world design, gameplay foundations, player guide and technical reference.

Buildable theater and booked cultural venues — M3/M4/M8 partial

Performing arts is a working Culture node after Festivals, Literacy and Textile crafts. A staffed school supports its research; separately adopted instruction then lets a charter owner build a Community theater using 80 timber, 12 bricks, four cloth, 16 food, two tools and 120 work. Two theater workers support a higher-capacity local venue. In City People, the owner chooses a specific sound, dry, staffed school or theater and reviews a performance. Funding spends two food above protected reserves and two actual cloth and commits two more residents for one village day. At the next household check, met food, water and shelter needs plus continued organizer and booked venue service give up to four school or six theater health recovery after any festival, capped at 100. Venue loss interrupts the event without moving it to another building or refunding materials; a five-day interval limits repeats. Supply chains lists both cultural-event inputs as conditional uses and theater construction as a one-time material goal. The validated performance ledger migrates version-one school events with their paid stock and four-point cap, defaults empty for older charters, and preserves pending commitments through restore. test/performances.test.js covers authority, debit, labor, venue choice and loss, caps, version-one migration, forged spending and offline replay. At this milestone the full repository suite passed 2,305/2,305; gameplay catalog validation, art metadata checks, generated wiki, syntax and whitespace checks passed. Cultural patronage was added in the next milestone above. Owned-outpost touring was added in the later milestone above; shared civic identity remains open. See living world design, gameplay foundations, player guide and technical reference.

Paid cautious relief planning — M5/M8 partial

Campaign planning is a working Army node after Standing infantry service, Scouting and Field logistics. A donor with its active barracks instructor can review cautious acceptance of an existing bilateral relief offer. Acceptance spends one actual tool on planning in addition to the normal food and depot commitments; the same existing professional force must still have a funded wage term. From the last safe approach, its projected next-step field strength is compared with the observed host camp. A weaker force reports the observation to both communities and returns physically without battle, arrow spending or clearing the threat. A force strong enough enters the camp for ordinary contact and permanent-loss rules. The accepted stance persists if instruction later lapses; normal live consent, hazard, supply and wage checks continue to govern the march. Old offers and accepted campaigns remain ordinary; marked cautious records validate the paid tool, donor knowledge and stance. Focused tests cover both contact branches, stock debit, unavailable tools, idempotent acceptance, early-service rejection, save/restore, malformed records and stepped/offline equivalence. The full repository suite passes 2,299/2,299; gameplay catalog validation, generated wiki, syntax and whitespace checks pass. Broader professional campaigns, commander roles and territorial war remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Paid terrain-dependent infantry formations — M5 partial

The Army tree now offers Infantry formations after Drill and Standing infantry service. A staffed barracks supports its research and adopted instructor. A trained, ready home unit with at least four fit, unwounded soldiers can review Shield wall or Loose files in City Defense, spending four food and one tool for each initial or changed order. Shield wall improves open-ground defense by 25% and weakens field attacks by 10%; loose files improve moderate-woodland field attacks by 20% and weaken open-ground defense by 10%. The shared combat strength path checks actual cell terrain, active instruction and live readiness at contact; it does not grant people, food, gear or universal attack strength. Reinforcement clears the unit's prior order. Older saves remain neutral; new persisted orders validate doctrine, cohort and timestamp. Focused tests cover debit, both terrain choices and tradeoffs, real patrol contact, fire, wounded threshold, authority, migration and malformed-order rejection. The full repository suite passes 2,296/2,296; gameplay catalog validation, generated wiki, syntax and whitespace checks pass. Mixed-unit formations and wider campaigns remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Scouting detours for physical owned-outpost supply — M3/M6/M7 partial

Manual and recurring owned-outpost supply quotes now use a bounded dry walking route when active Scouting can avoid known fire or basin floodwater. Real route length determines paid carrier provisions, road time, capacity and named-horse feed. Governor authorization, distance limits, cargo planning and cumulative allowances use the same route that dispatch will accept. A newly blocked hex can trigger a human or draft-assisted team's midtrip reroute from its actual current position, outward or homeward; the team waits one travel check, keeps undelivered or collected goods in custody, and consumes food while delayed. An Expansion briefing records the reroute. If Scouting lapses or no dry path exists, the existing blocked-route and recall behavior applies. Draft loans retain their original paid route and feed total while a separately validated actual route tracks a detour. Extra travel consumes the same carried feed, wears the same horse and can trigger a physical low-provision return. The nested draft detour marker migrates older loans to no alternate path without changing stock or jobs; no remote stock move is introduced. Focused outpost, governor, mandate, expansion and regional tests cover actual route pricing, physical delivery, outward and homeward detours, a blocked route with no dry exit, governor costs, conserved cargo and animal feed, neutral save migration, forged-route rejection and offline replay. The full repository suite passes 2,293/2,293; gameplay catalog validation, generated wiki, syntax and whitespace checks pass. The food-first Getting started sequence is unchanged. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Conditional wetland retention limit under reservoir terms — M8/W2 partial

An open exact-term reservoir notice now translates the recipient's conditional wetland-health sequence into an owner-only next-interval retention limit for each modelled marsh. Each branch uses its own closing habitat condition and today's local sediment bed through the same live capacity and capped sediment-loss rule; the City lists today's, natural and proposed limits in game water units. A dry branch may have less capacity even when no stored water has yet been replayed. Controlled tests cover a natural/release/no-release condition difference, per-interval capacity agreement, the sediment-cap boundary, unchanged live state and recipient privacy. The affected waterworks, wetland, sediment and City run passes 67/67; the complete repository suite passes 2,284/2,284. Gameplay catalog validation, generated wiki, syntax and whitespace checks pass. The comparison holds today's local retained water fixed and cannot determine future rainfall, local discharge, basin feedback, full ecology or construction authority. Complete affected reach, rights and operation remain open. See living world design, waterworks plan, gameplay foundations, player guide and technical reference.

Paid frontier reconnaissance — M5 partial

A fully trained, home-ready militia with active Scouting and an uncleared surveyed corridor can now choose Review reconnaissance in City Defense. The START_PATROL recon stance quotes and pays food and time for the actual walk to the last approach hex and back, including the normal delay reserve. An adjacent camp has zero walking edges and can be observed from home. At the approach the order records a dated report of current camp strength and tree cover and turns home without battle. The group remains active and can still raid caravans. Real provisions, fire, flood and soldier age continue to matter; the unit's optional stance survives restore and clears on return. The same residents and militia job are used; no separate force or hidden stock is created. Command tests cover funded dispatch, approach-only observation, camp fire without entry, an adjacent camp, unchanged threat and losses, physical return, forged-save rejection, Scouting suspension and stepped/offline agreement. The complete repository suite passes 2,283/2,283; gameplay catalog validation, generated wiki, syntax and whitespace checks pass. The wider M5 scouting, formations and campaign gates remain open. See living world design, gameplay foundations, interface behavior, player guide and technical reference.

Conditional wetland response on reservoir notices — M8/W2 partial

A current recipient's major-reservoir notice now compares its own observed, unconverted wetlands in registered basins under exact natural and proposed waterlines. Each branch starts at today's habitat condition and dry streak, holds today's separately modelled local retained water fixed, and runs the live wet/dry condition transition over the verified recorded water intervals. The City shows per-hex closing condition and dry checks, counts unobserved, unregistered and converted marshes separately, and keeps other communities' habitat private. A controlled release case and no-release case prove that a prolonged proposed dry streak can cross the live habitat-loss threshold without editing live water or habitat. The comparison neither reconstructs past wetland health nor predicts future rain, actual local storage/discharge changes, all species or downstream reach. The later retention-limit comparison above adds conditional capacity only. It does not clear ecological or rights blockers. The affected waterworks, wetland and City suites passed 52/52 at this earlier checkpoint; the complete repository suite passed 2,280/2,280 then. Gameplay catalog validation, generated wiki, syntax and whitespace checks passed. The broader M0–M8 goal remains active. See living world design, waterworks plan, player guide and technical reference.

Finite archer volleys and reviewed fire discipline — M3/M5 partial

Manufactured bow kits and carried arrows now affect actual caravan defense. A trained, paid archer guard may qualify for its reviewed post with a complete open-sightline volley; a moving archer escort gains the same conditional 50% defense bonus only at a co-located observed-camp crossing. At a protected crossing the default Conserve arrows policy fires two arrows per unwounded member only if ordinary strength cannot deter the observed group. The reviewed Covering fire policy spends that volley at every eligible protected crossing and halves condition wear and fatigue gain for that crossing. Each actual firing is recorded once in the ammunition ledger and dated defense report. Cover at least 70, fire, fatigue above 60, lost professional pay or an incomplete quiver removes the bonus and covering-fire benefit; the ordinary unit can still protect if strong enough. A guard whose base strength is insufficient stops protecting once arrows run out. Existing home reload and physically delivered field ammunition retain finite custody; no resource or protection is granted by the quote alone. Historical archer jobs migrate to version four with conserving policy and unchanged ammunition. Command-driven tests cover a real guard post, finite depletion, a real moving escort volley, both policies, dense cover, fatigue, physical field replenishment during guard duty, a completed-order preview, save restoration and stepped/offline agreement. The focused archery and community-birth suites pass 43/43, and the complete repository suite passes 2,280/2,280 after this policy change. Gameplay catalog validation, generated wiki checks, syntax and whitespace checks pass. The broader M0–M8 goal remains active. See living world design, gameplay foundations, player guide and technical reference.

Supplied mounted corridor guard — M5 partial

A rider-qualified, ready two-person militia can now review one or two days of Mounted corridor guard in City Defense. The surveyed post must be fields or woodland with less than 45 tree cover. Funding removes the ordinary guard food and a separately carried, planned-duration horse-feed allowance from the warehouse, assigns two fitted cared horses, and sends the pair along the real surveyed route. The 75% mounted defense bonus can let the pair deter an actual caravan crossing only while holding its open post with two fit, fed mounts and unwounded low-fatigue riders. It never clears the camp. Soldier food, horse feed and condition, fire, flood, readiness, recall and the duty deadline can end protection; the unit and horses return physically, with unused feed unloading when storage allows. The rider save marker now migrates to version four and validates the distinct guard order and conserved feed. A command-level test covers funding, post arrival, a real protected caravan crossing, degraded readiness, forged feed rejection, recall and horse return. The complete repository suite passes 2,276/2,276 tests; gameplay catalog validation and generated wiki checks pass. The wider M0–M8 goal remains active. See living world design, gameplay foundations, player guide and technical reference.

Separate source water-use signature for major waterworks — M8/W3 partial

A reservoir source now has its own reviewed consent and withdrawal controls on an open exact-term notice. Filing notice does not sign it, and recipient acknowledgments and signatures remain independent. The source's water-right blocker clears only while its own signature and every named recipient's current consent coexist; an empty named-recipient list still needs the source signature. Amendment, expiry or withdrawal restores the blocker. The existing version-nine action schema holds these new actions without manufacturing a signature in older saves. Command tests cover source-only and two-community consent, saved action validation, revocation, amended terms and unchanged actual water and stock. The full waterworks proposal suite passes 29/29 and the complete repository suite passes 2,275/2,275; generated wiki, gameplay catalog, syntax and whitespace checks pass. Full affected reach, ecological rights, project funding and W4 operation remain open. See living world design, waterworks plan, player guide and technical reference.

Dry construction-holder notice for major waterworks — M8/W3 partial

Major-reservoir notice filing now includes every current public charter holder of the exact source, pool and spill-crossing construction cells, even where the holder's crossing remains dry under the capacity screen and verified flow replay. A command-driven scenario assigns such a dry crossing to a second community, files an exact notice, checks that recipient's cell list, and requires acknowledgment before its separate easement grant. The full major-waterworks proposal suite passes 28/28, and the complete repository suite passes 2,274/2,274. Unassigned/NPC rights, complete affected reach and ecology, full ratification, funding and operation remain open. See living world design, major waterworks plan, player guide and technical reference.

Mounted convoy escort with physical horse feed — M5 partial

A rider-qualified two-person militia can now review Mounted convoy escort for an already dispatched caravan at home. It assigns two locally fitted, cared horses, pays the ordinary escort soldier-food quote plus duration-sized horse feed with an eight-feed delay reserve, and follows the caravan's actual steps and detours. The caravan sets speed. Horse feed and condition remain finite while held; an exhausted or unfit pair withdraws from its real route hex, leaving the caravan unprotected. At an actual shared fields or woodland trail crossing, two healthy low-fatigue riders with fit, fed horses gain 75% defensive strength and can deter the surveyed group without clearing it. Return restores surviving horses to home care and unloads unused feed when storage permits. Rider-version-two patrol saves migrate to version three with explicit patrol kind and planned duration; new escort custody records the caravan identity, feed balance and order kind, rejecting forged overlap or stock. A command-funded caravan test covers payment, protected crossings, recall, detour, shortage, restored journey and rejected forged custody; the affected military, escort, trade, family and professional suites pass 85/85 and the clean repository suite passes 2,273/2,273. The mounted guard above is now playable; formations, campaigns and wider M0–M8 gates remain open. See living world design, gameplay foundations, player guide and technical reference.

First supplied mounted patrol — M5 partial

A qualified two-person ordinary militia can assign any two available fitted horses to the existing surveyed corridor in City Defense. The reviewed order pays actual soldier food and a separate route-sized horse-feed pool, marks the horses as travelling with the unit, consumes two field feed per live horse per village day, and travels at twice walking pace while both horses are fit, fed and accompanied. Fire, flood, recall, human food and horse-feed shortages still use real route time; horse shortage turns the unit back and prolonged deprivation can kill a mount. Existing casualty rules still apply. Two unwounded low-fatigue riders on two fit, fed horses gain 75% effective strength at actual field contact on fields or woodland with under 45 tree cover; other terrain, dense cover, fatigue, wounds or poor mounts remove the advantage. A destroyed detachment loses its remaining horses and feed. Return restores surviving horses to their enclosures for fresh ordinary care and unloads unused feed only when storage is available. Rider-version-one saves migrate to version two without creating a patrol; broken mount custody or feed conservation rejects restore. Focused command tests cover paid dispatch, route travel, restored mid-trip state, feed conservation, a full-storage home hold and release, physical recall, home return, delayed feed shortage, dense-cover fatal contact and open-ground contact without fatalities. The clean repository suite passes 2,272/2,272 tests; generated wiki and gameplay catalog checks pass. The mounted guard above is now playable; campaigns, formations, wider tactics and the remaining M0–M8 gates stay open. See living world design, gameplay foundations, player guide and technical reference.

Paid two-person militia rider drill — M5 partial

After two separately saddle-qualified horses are present, a ready ordinary two-person militia can reserve them and four warehouse feed for a two-day drill in City Defense. Each successful day needs fresh paid horse care, an active husbandry and mounted specialist, and both horses at 80 condition; it spends two held feed. The soldiers stay home and the horses cannot perform draft, breeding or relocation work during the drill. Cancellation returns only unused feed when storage permits. Completion saves a qualification on the unit; casualties, old-age losses and completed reinforcement invalidate it. The drill alone is trained-rider preparation; the supplied mounted patrol and convoy escort above now add army mount custody and field feed; their conditional contact advantages apply only after deployment. The command-level test covers spending, exclusivity, cancellation, specialist interruption, legacy migration, save restoration, City projection and forged qualification rejection; the clean repository run passed 2,271/2,271 tests before the final save-overlap validation check, and the affected military, animal, age, professional and City run passes 118/118 tests after it. The full M0–M8 goal remains active. See living world design, gameplay foundations, player guide and technical reference.

Selected resilient horse line — M4 Agriculture partial

Selective breeding adds a working Agriculture topic after Animal husbandry with a staffed livestock-enclosure institution, separate research/adoption, one worker and one feed of daily upkeep. An active breeder offers a chosen resilience variant of the existing funded horse breeding project: twelve food, sixteen feed, one tool and two parents at 95 condition, versus the ordinary eight food, twelve feed, one tool and 80-condition threshold. Both need twelve successful care days, a staffed nursery place, a caretaker and spare water. Losing breeder service pauses selected progress without a refund or animal grant. The born foal and permanent birth receipt record the choice; its normal two-feed/two-water care loses eight condition when unsupported and restores eight when supplied, compared with ten and five for ordinary horses. Version-one breeding saves migrate ordinary projects and births to version two with null foal traits. Focused command tests cover paid stock, interruption/resumption, condition response, save restoration, old-save migration and forged-trait rejection. The clean repository suite passes 2,270/2,270 tests; gameplay catalog validation and generated wiki checks pass. Cavalry custody and the remaining M0–M8 gates stay open. See living world design, gameplay foundations, player guide and technical reference.

Agronomy and funded targeted soil care — M4/M5 partial

Agronomy extends the Agriculture technology path with a learned and separately adopted specialist program that consumes one food daily. When active, it unlocks a one-day, four-worker targeted repair of already prepared, worn soil for one compost and one timber, compared with two of each for ordinary soil repair. City Land & water shows condition, measured topsoil quality and both project options; the command pays actual warehouse stock, pauses a food plot and restores soil condition only at completion. Crew, save restoration, authority, survey, material and specialist checks use the existing land-work flow. Neither repair recovers topsoil eroded by runoff. The existing automatic maintenance mandate still buys the ordinary fixed recipe. The M0–M8 goal remains active. See living world design, gameplay foundations, player guide and technical reference.

Live selected-source readiness in supply-goal trees — M1/M3 partial

The read-only goal planner now ties a selected recipe branch to its current assigned producer instances. Each material line shows ready sites and an at-most output for the present cycle; a branch with no ready site reports the first projected hex and blocker rather than only a generic warning. Its map shortcut prefers a ready site. A command-funded woodland start verifies that the selected lumbermill path begins ready and, after actual log consumption, names the real missing-log bottleneck. The planner still expands hypothetical full-staff batches for materials, allocates warehouse stock only once, and never credits future output or issues an order. The focused supply tests pass; broader M0–M8 acceptance remains active. See living world design, gameplay foundations, player guide and technical reference.

Elevated storehouse against shallow recorded flooding — M2/M8/W2 partial

Active Masonry now allows construction of a 400-capacity elevated storehouse from 20 timber, 12 dressed stone, two tools, 15 food and 120 work before any active Joinery discount. The actual staged building route enforces a lawful cleared, dry site, workers and materials; a command-only test obtains quarry stone and delivered timber through physical outpost trips, dresses stone, mills timber, finishes construction and restores the structure. At each four-hour water check its raised floor reduces effective stock-exposure depth by 0.002 only while operational and at least 65% condition. Deeper water or damage restores some or all pooled vulnerable-stock loss, and the building still takes structural flood damage. The current City card shows real and effective depths. No new save ledger or flood receipt version is needed. Complete W2 impact, W3 rights and W4 major works remain open; the M0–M8 goal remains active. See living world design, waterworks plan, player guide and technical reference.

Current flooded-store exposure and next-interval comparison — M1/M2/M8/W2 partial

The owner City Land & water card now lists standing store capacity and current registered-water depth by footprint. It calculates which current pooled vulnerable goods would be withdrawn by one more identical water interval, with no claim about future rain, depth or deliveries. The calculation is shared with actual flood processing and remains read-only; a controlled dry-store case reduces a 1,000-food example from 77 to 63 potential units and the next unchanged interval withdraws exactly 63. Dry capacity dilutes pooled exposure rather than assigning goods to a specific store. No save migration is needed for this derived view. Unregistered water, complete W2 effects, W3 rights and W4 works remain open, and the full M0–M8 goal remains active. See living world design, waterworks plan, player guide and technical reference.

Flood loss of loose construction wood and fuel — M2/M8/W2 partial

Recorded water over standing storage now withdraws capacity- and depth-weighted whole logs, timber and charcoal from the real communal warehouse, with bounded flood receipts and outgoing warehouse movements. This can delay building, milling and fuel-dependent batches until stock is replenished. The IDs append to the version-one receipt order; earlier receipts remain valid and existing saves incur no retroactive loss. Stone, metal and tools remain outside this rule. The focused flood suite verifies split storage, material custody, a funded basin interval, offline restoration and dated fish compatibility; complete affected reach, ecology, rights and physical major works remain open. The M0–M8 goal stays active. See living world design, waterworks plan, player guide and technical reference.

Recipient basin-flow comparison for reservoir alternatives — M8/W2–W3 partial

The current open notice’s two read-only alternatives now include a City comparison of recipient-charter registered basins. For each basin in the bounded lists, the noticed and alternative replay show summed-arrival change, latest closing-pool change and lower-arrival interval count, each relative to the same recorded natural water. A row truncated from one list is marked outside the bound, never zero. The recipient projection continues to omit absolute balances and foreign basins; no save, consent or live water changes. Full affected reach, ecology, all-party rights and W4 operation remain open; the M0–M8 goal stays active. See living world design, waterworks plan, player guide and technical reference.

Recipient comparison of reservoir release alternatives — M8/W2–W3 partial

A named recipient of a current open exact notice can compare its noticed 25% or 50% opening-storage release with the other supported rate while capacity, environmental bypass and recorded forcing stay fixed. The read-only replay exposes only that recipient’s well, building, charter-land, marsh and coastal fish evidence; City compares the main effects and per-owned-bed flow, with no-harvest fish reserve only where the exact window supports it. A failed replay gives a reason, and closed, superseded and legacy no-release notices have no alternative preview. The request still needs a source amendment, fresh notice, acknowledgment and consent. No live water, rights or construction change. W2 complete effects, W3 all-party ratification and W4 physical operation remain open; the M0–M8 goal stays active. See living world design, waterworks plan, player guide and technical reference.

Recipient comparison of reservoir bypass alternatives — M8/W2–W3 partial

A named recipient of a current open major-reservoir notice now sees a second exact recorded-window replay at the other supported bypass rate, holding the noticed capacity and release rule fixed. The incoming projection exposes only recipient-scoped well, building, charter-land, marsh and coastal fish evidence; City compares the main consequences and per-owned-fish-bed basin discharge, with conditional fish reserve only where complete evidence supports it. A replay failure reports a reason, while expired and historical notices have no alternative preview. The focused major-waterworks suite passes 27/27, including read purity, current-term equality and own-charter land scope. The comparison changes no proposal, consent or live water; complete W2 ecology, W3 all-party rights and W4 physical operation remain open. The M0–M8 goal stays active. See living world design, waterworks plan, player guide and technical reference.

Revision-bound environmental-bypass counterrequest — M8/W3 partial

A named recipient may now request a different supported 25% or 50% bypass of new reservoir arrivals on a current downstream-flow objection, separately from a request for a release of opening storage. City offers the alternative, shows it to source and recipient, and reviews the exact requested percentage. A response can request only one rate; the request stays on the old revision when source terms are amended. New terms require a fresh notice, acknowledgment and water consent. Major-waterworks ledger version nine migrates earlier seven-field responses with a null bypass request and rejects unsupported, same-as-notice or forged fields on restore. The focused suite passes 27/27. No actual water or rights change; W2 complete effects, W3 all-party ratification and W4 construction remain open. The M0–M8 goal stays active. See living world design, waterworks plan, player guide and technical reference.

Selectable major-reservoir environmental bypass — M8/W2–W3 partial

Major-reservoir drafts can now propose 25% or 50% minimum bypass of new arrivals, independently of 25% or 50% release from opening storage. City previews exact capacity-and-bypass measured bounds and replays, and current drafts, notices and recipient evidence carry the chosen term. Command and restore validation reject unsupported rates; amendments preserve omitted terms, keep prior notices historical and require fresh notice and water consent. The focused major-waterworks suite passes 26/26. This does not change live water or the fixed local drainage-channel bypass. Full W2 ecology/reach, W3 all-party rights and W4 construction/operation remain open; the M0–M8 goal stays active. See living world design, waterworks plan, player guide and technical reference.

Screened and replayed public notice holders — M8/W3 partial

A current reservoir notice now names public charter holders from connected natural and coastal reach, candidate storage-waterline screening, and verified changed land in the exact release replay. Each capacity option recomputes the union, and the current party check rederives IDs and owners before another recipient answer or new easement/water-consent grant. A changed holder suspends the old revision until amendment and re-filing; historical signatures remain recorded but cease clearing live blockers. The source City panel shows current notice candidates. A synthetic union case verifies deduplication and fresh owners; command-level monitored cases check the filed list against review and preserve existing stale-party, restoration and consent behavior. The focused major-waterworks suite passes 26/26 and the affected water, fish, notice and City selection passes 99/99. Unassigned/customary rights, incomplete reach, full ecological impact, ratification and W4 operation remain open; the M0–M8 goal stays active. See living world design, waterworks plan, player guide and technical reference.

Proportional reservoir sediment custody — M8/W2 partial

Complete exact sediment journeys now support a candidate reservoir trap: captured runoff and incoming basin transfers retain a proportional whole-mass share, while the remainder joins candidate basin beds or downstream exits. Each interval checks mass conservation across opening bed, incoming basin sources, closing bed, exports and trapped mass. The candidate holds trapped mass through later releases, while released water can move untrapped basin sediment; natural replay still verifies saved water and sediment routes. A controlled 10,000-subunit runoff carrying 100 mass units captures 7,500 water and traps 75 mass without changing the live ledger; a reciprocal upstream-transfer case also traps carried mass. City shows total trapped mass, source-bed and ocean differences and recipient fish-bed effects only for complete journey windows. This bounded rule does not model sediment chemistry, changing future erosion, long-term capacity, decommissioning or actual reservoir operation. Focused impact tests pass 14/14 and the affected water, fish, notice and City selection passes 94/94. W2 full ecology, W3 ratification and W4 construction remain open; the M0–M8 goal stays active. See living world design, waterworks plan, player guide and technical reference.

Finite no-harvest coastal fish reserve — M8/W2 partial

The recipient reservoir comparison now shares the live capacity-capped fish recovery calculation. It starts from a read-only current stock projection and present habitat condition at the first verified nearby-flow interval; each natural and proposed interval recovers fish at its prior condition, then updates condition from exact water and sediment. City shows recovered fish, conditional closing fish in the water and next-day recovery potential. A controlled 100-of-240 bed reaches 116 naturally and 115.2 under retention after two observed intervals; a 238-of-240 bed stops at 240 in both branches. The scenario grants no fish, moves no live stock, assumes no harvest and does not predict actual future catch or weather. Focused fish/impact tests pass 18/18, and the affected coastal, water, notice and City selection passes 144/144. Complete W2 ecology, W3 ratification and W4 physical works remain open; the M0–M8 goal stays active. See living world design, waterworks plan, player guide and technical reference.

First observed coastal reach — M8/W2 partial

Recipient fish-bed impact review now labels intervals before the first complete natural nearby-flow crossing as unobserved. Low-flow and turbidity trigger counts begin at that first verified interval; the conditional replay from present habitat condition also starts there. A bed without a verified crossing in the retained window has no dry-habitat claim. The controlled dry–wet–dry case verifies that the opening zero is excluded, the later dry tick counts, a distant bed remains unknown and live state stays unchanged. A twenty-one-tick case also verifies that a cumulative connection outside the retained window cannot turn twenty later unknown zeros into dry-habitat claims. The focused impact suite passes 13/13 and the affected water, fish, notice and City selection passes 93/93. Full affected-reach ecology, W3 rights and W4 construction remain open, so the M0–M8 goal stays active. See living world design, waterworks plan, player guide and technical reference.

Conditional coastal fish habitat response — M8/W2 partial

The incoming exact reservoir notice now applies the same pure condition transition used by live coastal fish habitat to both verified water-and-sediment branches. It starts from the recipient-owned stock's present condition, carries it across the retained recorded intervals, and reports conditional closing condition and next-day recovery potential without changing fish or stock. A recorded connected ocean crossing and complete direct-water and sediment journey coverage are required; an unobserved coast or older migrated interval receives no invented dry-habitat response. A controlled wet-then-dry case makes the proposal cross the live turbidity threshold while the natural branch does not, then checks the resulting 90% versus 80% closing condition and 7.2 versus 6.4 daily recovery potential. Foreign stocks stay private. This repeats known forcing from present condition; it does not reconstruct historical fish health, forecast future weather, catches, stock renewal, actual future reservoir behavior or wider ecology. The affected water, fish, notice and City selection passes 92/92; the full regression passes 2258/2258. Gameplay validation, City syntax and wiki build/check pass. The full M0–M8 goal remains active. See living world design, waterworks plan, player guide and technical reference.

Route-coupled sediment and reservoir replay — M8/W2 partial

The basin sediment ledger now saves a bounded version-two journey with exact interval source mass and ordered nonzero water-supported transfers and exports. Version-one saves migrate to an empty journey window, retaining old balances without inventing routes. Natural reservoir replay verifies both ledgers with each interval's opening bed. Complete journey windows let proposed sediment follow proposed water routes, update the next opening bed and drive each branch's closing-bed exposure; older windows retain water comparison only. The incoming notice reports recipient-owned coastal sediment and live turbidity-trigger counts for complete intervals. Controlled deposit, reciprocal-spill and fish-bed cases verify exact routes, migration, forged-leg rejection, recipient privacy and unchanged live state. Incoming soil stays fixed and the later proportional trap scenario above supersedes this earlier no-trap stage; later source-erosion response and full habitat forecast remain open. The affected water, fish, notice and City selection passed 91/91, static gameplay validation and wiki build/check passed, and the full regression passed 2257/2257. After the final fish-bed count-label correction, the affected selection passed 91/91 again and wiki freshness and City syntax checks passed. The full M0–M8 goal remains active. See living world design, waterworks plan, player guide and technical reference.

Recipient coastal fish-bed basin discharge — M8/W2 partial

The verified reservoir-window replay matches natural and proposed basin ocean exports to a reviewing community's own surveyed coastal fish beds through the live fish-habitat ocean reach rule. Basin-water version four now records direct ocean-source arrivals in each new exact route interval, with source totals validated against conserved custody and basin runoff. A version-three save migrates older rows with sources: null; it loses no known basin route and invents no direct history. For complete rows, both branches add the unchanged direct source flow and count total-flow intervals below the live one-water-unit low-flow trigger. Recipient City distinguishes complete and older unknown-source intervals. Controlled cases cover migration, forged source rejection, lake-spill/release effects, stock privacy and unchanged fish, sediment and water. The focused water/sediment/coastal/notice suite passed 75/75; static gameplay validation passed and the full regression passed 2253/2253 after this migration. This was the earlier water-only stage; the route-coupled sediment and conditional present-condition response above supersede that limit. No future fish catch or full ecological outcome is inferred. Full affected-reach ecology, lawful ratification and physical works remain open, and the M0–M8 goal stays active. See living world design, waterworks plan, player guide and technical reference.

Recipient marsh-forage reservoir comparison — M8/W2 partial

Exact recorded-window reservoir replays now compare natural and proposed waterlines for the reviewing community's current healthy, unbuilt, undrained marsh sites in registered basins. The notice applies the existing two-site foraging cap and shows per-interval capacity and daily regrowth potential; it counts omitted unregistered sites without exposing another charter's sites. A controlled scenario verifies a drying first interval, later release re-coverage, privacy, habitat/drainage exclusion and unchanged live state. The focused waterworks/City run passes 48/48 and the full regression passes 2251/2251; static gameplay validation and wiki build/check pass. Current habitat is held fixed, so this does not establish historical harvest, later habitat response, complete ecological effects, source approval or physical works. The full M0–M8 goal stays active; see living world design, player guide and technical reference.

Current evidence and affected-party gate — M8/W3 partial

The current major-reservoir notice is now actionable only while its paid returned source report and its frozen inland/coastal public party IDs and owner snapshots match the current bounded review. New fieldwork, charter changes or holder changes suspend recipient answers and new easement/water-consent grants; existing actions remain withdrawable but cease clearing source signature blockers. Source and recipient City views explain the amendment required. Two new controlled cases cover changed charter exposure and a newer returned report followed by fresh filing; the focused waterworks suite passes 25/25. Complete affected-reach discovery, customary rights, ecology, ratification and physical works remain open.

Fourteen-day major-reservoir notice window — M8/W3 partial

New public notices carry an exact fourteen-source-village-day deadline. Recipient acknowledgment, objection and new land/water grants require an open notice. At expiry the source's live signature coverage no longer counts, although withdrawal remains possible and frozen actions stay in history. An amendment and fresh notice reopen review on a new revision. Version-eight ledger migration closes old version-seven notices without creating retroactive dates or grants; restore checks exact deadlines and rejects late answers or grants. Source and recipient City cards show the deadline or closed legacy status. Focused major-waterworks tests cover boundary timing, revocation, renewal, migration and forged timestamps. Complete affected-party discovery, ecological review, ratification and construction remain open.

Command-only riding preparation journey — M4/M5 partial

An integrated command-level case now proves the riding course is reachable without direct inventory credit or a mocked technology. It grows flax, spins yarn, weaves cloth, imports iron and tools, researches Saddlery at its real textile institution, and produces two whole saddles. It builds a storehouse, keeps the starter food plot viable, mills timber through the Joinery precision recipe, imports bricks, sells finite timber for coins and physically collects two horses into a staffed enclosure with pasture feed. It researches Drill, staffed-lodge Scouting and Field logistics, reuses those plots, then builds and staffs a barracks for funded Mounted service preparation. The course consumes one of the manufactured saddles and actual feed over three fresh cared days; the same horse retains its fitted qualification across save restoration and City projection. This covers reachability and resource contention that the earlier isolated course tests mocked. The combined riding, saddlery, husbandry, knowledge and City integration run passes 32/32 tests; City navigation adds 4/4, gameplay catalog validation passes, and the wiki build/check is fresh. Getting started was reviewed: its food-first founding sequence is unchanged; this later investment belongs in the riding guide below. Rider assignment, army horse custody and mounted field behavior remain open, so the full M0–M8 goal stays active.

Identified horse riding course — M4/M5 partial

Mounted service preparation adds a funded army topic requiring Animal husbandry, Field logistics and Saddlery, with a staffed barracks for practice and research. Its adopted, supplied specialist enables a reviewed three-day course for one mature, cared horse at its home enclosure. One saddle, six extra feed and one trainer are reserved up front. Each work day requires fresh ordinary paid care, condition of at least 80, a working enclosure and active husbandry and riding instruction. The first completed day spends the saddle and each day spends two feed. A finished course saves a fitted-saddle qualification against the identified horse. Active training excludes draft work, relocation and breeding. Cancellation or death returns only unused material when whole warehouse space allows; service loss pauses work without duplicating inputs. The versioned riding ledger migrates older saves neutrally and rejects broken custody. City People reviews the horse, course, qualification, blockers and cancellation. Focused tests cover payment, care, exclusivity, interruption, partial refund, save restoration, City projection and replay. The clean full regression passes 2,245/2,245 tests; gameplay catalog validation and generated wiki checks pass. At that earlier horse-course checkpoint there was no mounted soldier, rider assignment, army horse custody, field-feed allowance or cavalry movement/combat; the current two-person drill, supplied patrol, mounted convoy escort and conditional contact advantages are recorded above. Wider M0–M8 gates stay open.

Saddlery and physical saddle cargo — M4/M5 partial

The army research branch now includes Saddlery after Animal husbandry and Textile crafts. It requires actual practice, a staffed textile workshop, funded research, adoption and ongoing specialist upkeep. A selected workshop batch consumes eight cloth, four timber, two iron and one tool to produce two whole saddles. Saddles have warehouse and two-weight cargo identity and may cross a real player-trade route. A command-level test grows flax, spins yarn, weaves cloth, imports iron, learns the topic, proves the inactive recipe waits, records a full batch, restores it from a save, suspends instruction and physically transfers the saddles to a second charter. This advances the material side of planned cavalry. The later riding course above uses the actual saddle and fits it to an identified horse. The first mounted patrol above now assigns mounts and carries feed; wider mounted units and orders remain open, as do the other M0–M8 gates.

Hungry returnee recovery at the waystation — M2/M3 partial

New stepwise households that return with unmet travel meals now remain in a saved recovery cohort at the frontier waystation. Their first serving still draws from actual source stock; two full survivor-sized meals are required, with partial servings carried forward and further opportunities once per village day. Unfed travellers remain in the source census but cannot join another dispatch. Dispatch, named-adult selection and independent-career origins exclude them. An age-known resting adult's ordinary old-age death shrinks the cohort without leaving a phantom unavailable worker. City People shows total, available and recovering source residents and the owner receives recovery briefings. Migration ledger v8 treats older completed return receipts as recovered and validates care state. Focused population tests cover full, empty, replenished, replayed and restored care plus an age-known death; wider travel illness, rescue, cavalry and M0–M8 work remain open.

Selected supply path allocates shared stock once — M3 partial

City Supply chains now offers a selected source per uncovered material in its goal tree. The client-only planner consumes each local warehouse unit at most once across the selected branches, protects the projected food reserve and lists material requirements still uncovered. Recipe and funded-project batch counts expand their inputs without crediting future output or byproducts; imports remain physical alternatives. A separate warning names chosen producers with no local building, assignment or ready instance and projects needing funding. Saved source choices are local to the current browser session and settlement goal, with no order or save migration. A two-branch unit test proves six logs cannot satisfy two four-log inputs, and focused supply tests pass 9/9. An isolated local browser check selected a charcoal goal and a kiln source, then verified its five-log input and explicit no-building warning; the QA server was stopped. Actual workshop readiness, shared capacity, transport and funding remain authoritative elsewhere. Cavalry and wider M0–M8 gates remain open.

Military positions on the Region map — M1/M5 partial

An owner City defense review now opens a Military analytical overlay for the same current world revision. A server-side projection reads the saved militia and supply jobs, active camp and built watch posts; its paths follow only the remaining accepted outbound or return route. The client marks actual positions, carried food, phase and blockers, and lets the owner inspect their hexes. It suppresses stale, foreign and scoped City data and pauses for building placement. The command-funded patrol test checks unchanged read state, owner authority, outbound and homeward movement, supply-team position and clearing; the focused military/navigation suite passes 29/29, and the public-office access suite passes 10/10. An isolated local browser founding verified the enabled Region toggle, visible legend and Defense action; that QA server was stopped. This adds command visibility, not a unit, mount, delivery or combat rule. Cavalry and wider M0–M8 gates remain open.

Cautious frontier patrol — M5 partial

Defense & patrol now offers an optional cautious order for the existing surveyed corridor. It pays the ordinary departure food and walks to the camp approach. At the final step, a weaker effective field strength turns the unit home before contact; an equal or stronger unit fights normally. An avoided-contact report preserves the uncleared camp and its threat, while people, carried provisions and return time remain real. The stance is validated on save restore and removed at home. Focused combat tests cover refusal, safe withdrawal, ordinary combat for a capable cautious unit and replay. Cavalry, formations, larger forces and the full M0–M8 goal remain open.

Exact major-waterworks signature blockers — M8/W3 partial

The source proposal now derives two blocker labels from live exact-revision rights status: complete candidate construction-cell easement coverage clears its construction warning, and current water consent from every named recipient on a release-rule notice clears its water-right warning. Partial coverage, withdrawal and amendment do not grant completion; legacy terms cannot clear the water-right warning. Other basin, impact and customary-rights blockers persist; no water, land, funding or construction changes. A two-human-charter signature scenario exercises separate grants and withdrawals while retaining the impact blocker; the major-waterworks, impact and watershed-survey suites pass 43/43. W3 ratification and W4 physical construction remain open.

City-level third construction crew — M1/M7 partial

work-crews.buildingSlots now grants a third simultaneous four-resident building/land crew only while a charter has earned City or regional-capital stage and both Construction planning and Regional institutions are active. The existing scheduler queues excess running work on service loss or Town decline, preserving its paid inputs and remaining duration, and resumes FIFO when slots and actual labor return. A command-funded settlement-growth test learns the prerequisites, earns City, checks three slots, suspends and restores each required program, then verifies the slot falls to two with Town decline. The related knowledge, settlement development, founding and maintenance suites pass 61/61; district, regional road, road maintenance and operating-budget suites pass 39/39. No workers, materials, rights or save fields are granted. Wider M0–M8 progression remains open.

The household relief review now compares estimated caravan arrival at the saved meeting hex with the household's next movement check, and City People links directly to the Trade offer. The timing is advisory; only actual co-location transfers food. A focused population test checks the quoted hex and next-step time. The latest repository run passed 2,233/2,233; the affected population, logistics and City navigation suites then passed 35/35 after the quote and interface changes.

Paid household relief rendezvous — M2/M3 partial

Trade & transport can direct a reviewed, funded Provision the frontier waystation caravan to a currently travelling new stepwise household when its saved interior hex lies on the quoted route. At a physical shared hex before the household moves away, the remaining cargo food moves to that household's carried food; a successful handover turns the caravan home from the meeting hex; a missed rendezvous leaves the cargo bound for the waystation. A known hazard beyond the current meeting hex blocks the ordinary depot quote but not the targeted quote. The caravan's two workers, travel food, home stock, route hazards and one-team limit still apply. The caravan card, People view, completed history and owner briefing expose the result. Migration ledger v7 adds neutral v6 migration, an active travelFoodReceived total and matched job/time/hex/food receipts; restoration rejects forged active receipt mismatches. A command-funded test covers real movement, exact food conservation, briefing, restore and offline replay. The five related suites pass 67/67 after this addition, including a blocked-depot-route household mission and physical early return. No remote supply, general rescue, route detour, travel illness or travel mortality is implemented; M0–M8 remains open.

Actionable waystation travel-food shortage — M1/M2/M3 partial

For an otherwise eligible City with open migration, no active household and a passable surveyed route, People now shows the exact outward-plus-return food requirement and any shortfall at the finite waystation. Regional overview raises a private attention issue only when that shortfall actually blocks dispatch and links to Trade & transport. Provision the frontier waystation remains a normal paid two-carrier trip: source food and the warning do not change while the export is merely committed or travelling, and clear only after physical depot delivery or a changed eligibility condition. A command-funded test covers exact quoted requirement, owner scope, read purity, policy closure/reopening and physical relief arrival. The affected population, logistics, Regional overview, City projection and navigation suites pass 54/54; generated wiki, script syntax and whitespace checks pass. This strengthens the recovery loop after hungry returns without adding food, granting workers or bypassing migration admission. M0–M8 remains open.

Finite waystation recovery meal — M2/M3 partial

On physical return, a new travelVersion: 3 household with recorded unmet travel meals credits its unused rations, then consumes up to one meal per surviving resident from the frontier waystation's actual stock. A short or empty stock yields a partial or zero serving without fabricating food or preventing arrival. The completed transfer records time, unmet meals, survivors, source stock before care and food served; City People shows current waystation food, and a People briefing reports the charge. Future departures use the reduced source stock. Migration ledger v6 adds neutral recovery: null to old receipts; older active travel rules stay intact, and invalid current or forged downgrade receipts are rejected. Focused tests cover a hungry funded return, full, partial and empty source stock, daily/offline and reload agreement, neutral v5 migration and forged receipts. The full repository suite passes 2,231/2,231 tests; gameplay validation, JavaScript syntax, wiki build/check and whitespace verification pass. There is still no journey-specific illness, mortality, remote rescue or reroute. M0–M8 remains in progress.

Household route and food exceptions — M2/M7 partial

Regional overview now flags a stepwise migration party held by recorded floodwater or fire, with the actual saved hex, carried food and next movement check. It separately raises an urgent issue when that still-travelling party carries less than one complete meal for its residents. Both issues link to the owning City People route and recall controls, clear when the route or food state changes or the party completes, and reveal no foreign charter state. The exception view reads the existing ledger without new stock or save fields. New v3 journeys now walk at most six rather than twelve hexes at a check that starts with less than one full party meal, so depleted returns take longer; v1/v2 pacing stays unchanged. A real dispatched household test follows an obstructed outward leg, a ration-depleted returning leg and physical waystation arrival with pure reads, owner scope and save restoration; the expanded population, community-birth, regional overview/forecast, City integration and command-funded journey suites pass 75/75. Current return hunger is still recorded without illness or mortality, and there is no remote rescue or reroute.

Bounded standing specialist training — M7 partial

Each current named service at the founding home can retain a reviewed limit of one to twenty paid backup courses. The village-day check first assigns an existing free qualified adult; otherwise it chooses an available living household worker and funds the ordinary three-day course with four timber, eight food and one tool, subject to the active school, Literacy and mentor, one free worker, the protected reserve plus two food days, and the single training slot. Graduation designates the learner only for the incumbent recorded at funding. Pausing stops later funding but retains the current course and cumulative commitments. The optional recruitment flag allows a daily check to name an existing unclaimed local civilian when no household adult is free, but only if the same check can fund the course and a living lawful leader and household place remain. The new name consumes one existing worker without adding population or labor. Version-four plans migrate to version five with the flag off; older saves gain empty plans. Focused tests cover authority, limits, food hold/recovery, pausing, recruitment safeguards, save validation and daily/offline equivalence. The 2,600-day five-community capital integration now uses one paid standing-plan course each for Record keeping and Regional institutions before their natural incumbent deaths, with positive food and uninterrupted capital status. Isolated browser review/cancel and authorization checks verified the new recruitment choice, its safeguards and the saved plan without immediate food, timber or attention spending; an earlier browser check also verified pausing. The full repository run passes 2,229/2,229 with this recruitment extension. Wider family recruitment, service mobility and M0–M8 completion remain open.

Paid specialist successor preparation — M7 partial

A reviewed named-specialist course can now preauthorize its learner as the backup for the subject’s current incumbent. It spends the existing finite materials and learner time; graduation adds the backup only if the same living incumbent is still appointed and the graduate is free. A changed incumbent leaves the personal qualification without a backup. Version-three save migration retains older courses neutrally; focused tests cover invalid orders, exact stock, qualification, designation, changed appointments, restart and offline replay. The full repository suite passes 2,225/2,225 after this change. This removes a separate graduation-day designation step, while bounded standing funding is implemented above and wider specialist recruitment remains open.

Household location keeps its owner City — M1/M2 partial

Find household on map now uses the same owner City inspection context as the full route shortcut for a stepwise journey. It focuses the actual current hex without turning on the route layer; the City screen and map overlay continue to show the household's owner even when the hex lies inside shared development or another region. The map status calls that place a Household hex instead of presenting the region beneath it as the selected management City. Explicitly choosing a different City or moving off the route returns to ordinary map selection and turns the route layer off. This changes no journey, stock, rights or save state. Isolated browser verification used an active paid nine-hex journey and confirmed the location-only view, retained owner City, optional Region route toggle, and disabled Household route: Off after selecting another City. Versioned asset URLs load the changed client scripts and styling. M0–M8 remains open.

Household route on the Region map — M1/M2 partial

City People now offers Show household route on Region map for a new or v4 stepwise active journey. The separate Region Household route overlay draws the remaining saved walking leg, current hex and endpoint; its legend names the next check and blocker and can inspect either endpoint. It reads only a fresh owner City projection with matching world revision and owner identity. Route inspection keeps the owner City selected for its projection even when the actual party hex lies in another settlement's region; other selected regions, scoped views, disconnects and stale projections suppress it. Placement preview pauses the view, and another analytical overlay replaces it. No journey, save field, route, right or food changes. The older timed travel display stays separate because it lacks daily positions. An isolated local browser world with a founded village and active funded nine-hex journey confirmed the gold route, current marker, owner City data and endpoint navigation in both directions; the Region control remains disabled without an owner journey. The focused population/City integration run passes 18/18. M0–M8 remains open.

Reviewed incoming-household recall — M2 partial

The owner City People card now offers Recall household and close migration for one current v5 incoming journey. The reviewed RECALL_HOUSEHOLD order validates the exact journey and charter authority, closes migration through the existing policy checks, and reverses the route at the current saved hex. The party carries its people and remaining food home; earlier meal use stays spent. A source-hex recall rejoins the waystation immediately, and a later hazard can still hold the physical return. The City briefing names the actual recall reason instead of incorrectly blaming failed arrival requirements. Legacy timed and v4 stepwise journeys retain their rules and cannot use this action. A focused regression covers foreign and invalid orders leaving the world unchanged, mid-route recall, exact food/census, save and offline replay, and no automatic replacement dispatch. The related migration, community-birth, journey and City suites pass 45/45; the final full repository run passes 2,224/2,224. This improves migration control without adding a rescue or supply mechanic; M0–M8 remains open.

Stepwise waystation households — M2/M3 partial

Household migration now has a v5 ledger for newly dispatched waystation households and hardship departures. It records route index, daily step time, actual current hex, carried provisions, food consumed/unmet and a hazard blocker. Known basin floodwater or burning route cells prevent automatic dispatch. A flood or fire appearing later stops the next step without moving residents or granting a destination arrival; each held village day consumes carried food and extends the ETA. Drying or fire containment resumes the saved route. New incoming journeys keep return provisions protected; if outward provisions cannot cover another full daily meal, they reverse at their present hex, preserving the return leg's physical distance and ETA. A party still at its source rejoins the waystation immediately. City People has Find household on map tied to the actual route index, with next movement check and current-leg progress beside it. Incoming admission is rechecked on arrival, with a physical return if conditions fail. Existing v1–v3 active journeys retain legacy timed travel and v4 stepwise journeys retain their accepted provision rules. Route arrays are copied before reversal so a returning journey cannot corrupt the cached surveyed path used by a later dispatch. Focused population and community-birth suites pass 41/41; the broader journey and City integration run passes 43/43, including blocked first-step return, mid-route reversal/replay, later successful dispatch, old-save migration and age-linked death at a traveled hex. The full repository run passes 2,222/2,222 after this change. Unmet journey meals on delayed returns do not yet injure or kill travelers, and there is no rescue/reroute command. M0–M8 remains open.

Floodwater on frontier surveys and independent walking — M0/M3/M6 partial

Frontier survey quotes now reject recorded basin water on the planned route before spending food, timber, tools or two workers. Paid crews hold before a later wet next hex, continue ordinary travel-food accounting, and move again after recession. Flooding on the survey site during fieldwork turns the crew home without a report, so no conditional charter can be based on that aborted trip. A local existing adult starting an independent waystation career sees a wet-route blocker before the population transfer; after departure, a wet next hex holds the real walker while personal meals and hunger continue. Neither route teleports, reroutes or changes its save schema. Focused tests cover quote purity, held-position food use, offline replay, site abort, no land grant, personal transfer conservation and restart. The expanded survey, charter, personal life, population and City suites passed 60/60 at that milestone. New household migration now has the separate stepwise model described above. Other M0–M8 gates remain open.

Topic-specific institution navigation — M1/M4 partial

Technology paths now offers Locate [topic] institution for each of the six branches' topics. It opens the owner Region view filtered to actual matching buildings; the Region selector can choose a different topic or all sites. Each selected site's color and text use its own topic support result and blocker, so another working topic at that structure does not make the selected one look usable. If none is built, the map names the required institution and points to City Buildings. The control uses the same fresh owner-only City quote, adds no saved state or permissions, and does not learn or adopt a technique. The focused knowledge, City and scoped-office suites pass 36/36. In the isolated saved browser world, Joinery locates the real lumbermill; Hydraulic engineering reports that no matching registry is built, and returning to all restores three sites, with no browser errors. Broader service reach and M0–M8 work remain open.

Founding save continuity — M0/M1 repair

The four founder-household adults now share the exact charter issuance timestamp. A narrow load repair handles older saved villages whose four founding lifecycle timestamps all drifted by the same amount within one minute of the charter while their recorded ages remain consistent. It changes no population, goods, authority or work. A moving-clock test covers founding, reload, legacy drift and rejection of a corrupt date. The isolated Willowhaven browser QA village, which previously failed with Invalid persisted household or succession ledger, now restarts from the same saved state and can open City and the Institutions Region map. The focused founding, continuity, City, knowledge, access and browser-adjacent test suites pass 86/86; wiki generation/check, static gameplay validation and syntax checks pass. Other M0–M8 work remains open.

Institution sites in Region — M1/M4 partial

The owner City projection now includes actual research/adoption institution sites derived from the same institutionCandidates rules used by knowledge eligibility. Research & adoption → Technology paths → Show institutions on Region map and Region's Institutions toggle locate each built source, mark current usability and whether it supports an active local technique, list blockers, and offer Inspect hex. The quote is read-only and requires the same selected owner settlement and fresh world revision as the other private map layers; scoped production stewards and resident members do not receive it. Placement preview temporarily pauses the view. Institution support is settlement-wide under current simulation rules, with no claimed radius, learning, adoption, stock or new permission. The focused City, knowledge, scoped-office, integration, concept and map-touch suites pass 51/51, including current flood and active-program source checks. In an isolated local browser world, founding a woodland village showed its three actual institution sites; Inspect hex, exclusive overlay switching and the City-to-Region shortcut worked without console errors. Generated wiki and static gameplay checks pass. Complete service reach and other M0–M8 work remain open.

Basin floodwater on civilian crews and road edges — M3/M6/M8 partial

Livestock collection, livestock relocation, quarry leases and regional road work now refuse a known flooded required route before dispatch. Their already funded crews hold at their current hex when a wet interior next hex blocks them and consume the same physical travel provisions as an ordinary delayed journey. A flooded enclosure prevents admission and may turn a relocation back; a flooded leased extraction site ends unfinished work without spending tools or removing deposit; a flooded road work edge ends that crew's work with unused materials carried home. The quarry site projection reports floodwater directly. Existing improved road edges touching known floodwater temporarily cease granting a travel improvement. This reads basin-exposure.cell at quote, movement and work time, adds no saved field and does not cover every journey type. Focused route, custody and restore tests exercise refusal, hold, recovery and worksite conservation. The complete repository suite passes 2,214/2,214; generated wiki and static gameplay validation pass.

Selected resource sites in Region — M1/M3 partial

City → Supply chains → Show resource sites on Region map locates the chosen owner's material in the selected community. A matching City projection contributes current local warehouse stock, actual assigned recipe instances with readiness and input/output roles, plus physically carried or reserved exchange goods whose present hex is inside this region. For an owned carrying team at a local hex, the supply projection includes its remaining planned route; the map draws only the initial contiguous in-region segment as a dashed line. The Region selector can change among the City's actual resource keys. Colored markers and an equivalent text list lead to Inspect hex; totals retain the existing separation between ready upper-bound output, assigned recipe demand, household/service demand and stored stock. Matching settlement/revision and owner-only access are required; scoped roles and foreign charters cannot display the private layer or another origin's route. Managed land, Staffing and Resource sites are exclusive; a construction preview pauses the chosen layer. It adds no simulation, save field, stock, route order or forecast. Off-region cargo, catalog-only sources, abstract consumer totals and future delivery promises remain in the City view, not on this map. The route and recipient-privacy checks pass; the full repository suite passes 2,208/2,208, and the local browser overlay opens without console errors. The trace does not yet cover complete interregional route flow or arrivals.

Region staffed-worksite overlay — M1 partial

The Region map can show the selected owner's buildings with actual assigned-worker/capacity labels at their anchor hexes. Colors and a text list distinguish unassigned, partly staffed, fully staffed and inactive sites; Inspect hex navigates to each. city-interface.js passes only fresh owner City structure data to game.js, which also requires the same selected settlement and overview revision before enabling or drawing the overlay. Scoped roles and other charters have no staffing map. Managed land is the alternate analytical view, and placement preview temporarily hides both with Staffing: Paused before restoring the chosen view. No staff or production state is changed, and full staffing alone does not promise output or a service radius. Broader service, goods and route overlays remain open. Local browser QA constructed a field, observed its inactive then empty then 1/8 partly staffed marker, switched Managed land and Staffing, verified placement pause/restoration, and used the legend's Inspect hex to select the building. The two focused City suites passed all 12 tests; script syntax, generated wiki and diff checks passed.

Authoritative construction-site comparison — M1 partial

While previewing one building in City → Buildings, the Region map and the panel compare every owned plot for that exact definition and six-way orientation. cityProjection uses the existing constructionRequirements and final construction-plan quote to classify an anchor as fundable now, site-suitable with another blocker, or spatially blocked; the first relevant reason is shown. The comparison is read-only and owner-scoped for chartered settlements. It never discovers unknown deposits, reserves land, grants rights or pays materials. Founding-only structures and fixed charter prototypes return a global unavailable reason and no candidate anchors; a pasture waiting for Animal husbandry still retains conditional candidates. The selected footprint keeps its detailed blockers and later acceptance still rechecks revisions and costs. The ordinary Managed land shading yields while placement is open, then returns. Two clients receive identical server results; a paid building changes its occupied anchor to blocked. Browser review found a large region produced 91 flat rows, so the panel now groups ready, conditional and blocked anchors, opens the useful group first, and retains disclosure and keyboard focus during refreshes. For the selected plot it also displays the current construction inputs, accepted-work duration when quotable, capacity, baseline production and all server blocker remedies; baseline output is not promised without staff, inputs, active services and storage. Broader service reach and other analytical overlays remain open.

Reviewed named-specialist backups — M4/M7 partial

The founding household can review one already trained, living and free adult as backup for a current named specialist in City → Research → Named specialist training. At the incumbent's old-age or critical-illness death check, an eligible backup takes that same service appointment without granting a new qualification, resident, worker, supply or public office. A backup who dies first loses the plan; releasing or replacing the incumbent clears it. Version-one specialist ledgers migrate to version two with empty backup plans and bounded succession receipts. Restore rejects forged or conflicting plans. Specialist, continuity and aging checks cover authority, migration, population and labor, death, restart and offline replay. The long capital journey manually trains its first replacement cohort; its later Record keeping and Regional institutions backups are funded by the bounded standing plans above and take the posts at death checks; broader local recruitment, wider specialist mobility and the remaining M0–M8 gates are open. The full suite passes all 2,208 tests after the site comparison, prototype availability and long capital succession integration.

Earned Regional capital and fourth outpost — M7 partial

settlement-development assesses Regional capital after earned City. Three established owned outposts must each have a completed local village charter, resident housing and household water, health at least 80, no latest food shortfall, three local food days, and a recorded physical food delivery from home. The City must maintain its own requirements for three checks; three failing checks lower Regional capital to City without deleting links or work. Current capital status plus active Land registry, Regional institutions and a staffed sound registry permits a fourth retained outpost under the usual survey, route, labor and cargo checks. It also raises a coordinated production plan from four to five producers. The owner City card and Regional exceptions disclose exact unmet requirements. Version-two development ledgers migrate to version three without invented capital history. The command-funded City journey develops all three local villages with paid houses, real households, local research, staffed fields, physical timber/food/tool deliveries and home iron-to-tool production. It restores City population from the finite waystation, earns Regional capital, compares and applies five producers on a copy, raises the reviewed forestry allowance, funds and establishes the fourth camp, and rejects a fifth without mutation even after capital is re-earned. After the founder departure lowers home population below 56, capital lawfully regresses to City; the loader validates that downward transition without incorrectly requiring a new 56-person City promotion. The four-link save restores and home migration re-earns capital. Active Seed selection and two wheat fields cover household food; three paid courses for newly adopted young adults reduce administrative timber upkeep to the output of the staffed three-worker mill. The third local village authorizes selective harvest from its own mature forest and a funded governor route exchanges home food for physically returned logs. Its field pauses at a 500-food stock target, while the governor aims for 600 food there and retains at least 600 at home; both home wheat plots remain continuous, supporting further real migration. Over 2,600 further player-managed village days, all five communities keep positive food without shortfall and home remains Regional capital with no stage transition. A source harvest, outbound food, returned logs and home migrant arrivals are evidenced; home retains six food days. Twice the player pauses the governor, waits for its real carriers, imports iron, makes charcoal and tools, adopts existing adults and pays for their courses. The first replacement cohort is manually appointed; the second is designated before the incumbents die and takes office at their death checks. Later suspension of unused Land registry and reduction to two mill workers release labor while matching the lower timber upkeep. The governor spends more than 10,000 food including travel provisions under a reviewed 30,000 ceiling; separate offline segments match inventories, development, source forestry and governor ledgers between decisions. Route and optional shared-logistics total ceilings now allow reviewed values up to 100,000 while retaining spending and the 1,000 daily shared limit, with no save-field migration. Reviewed standing training and optional local-civilian recruitment are now available; acceptable pacing, political legitimacy and wider M0–M8 gates remain open. The preceding capital checkpoint passed all 2,200 tests; the current full-suite result is recorded above.

Authorized header treasury and stock — M1 partial

The World header now reports current spendable communal coins only for the matching fresh owner City revision. It labels shared development as unmodelled, hides coins for scoped roles, resident continuation or no selected city, and withholds a number while refreshing or offline. game.js no longer writes stock figures from the map-selected hex over City-authored header values; restricted and no-city City branches clear old amounts. Food and population labels name the City behind the figures when the map is looking at another player's charter. The inspected-hex inventory remains scoped separately. No money, authority or persistence rule changed. Realm-wide budgets and transaction-level finance remain open.

Region managed-land analytical overlay — M1 partial

The Region map adds a reversible Managed land toggle with a text-and-color legend. It shades visible recorded mutable-region hexes as the connected player's manageable charter, another community's charter or shared development, using only public overview geometry and canManage. Unshaded cells are not assigned a managed-region claim by this view. Existing selected-footprint outlines and live map objects remain legible above it. The overlay is presentation state only; it does not grant construction rights or expose private City data. Definition-specific construction comparison is available during placement preview; broader service reach and other analytical overlays remain open.

Food timing and waystation count — M1 partial

A negative potential daily food balance now produces a priority note with its current deficit, approximate needs-check number when food stock alone could be below a full day's demand, and the next actual check. It respects meals occurring before new production but remains conditional on staffing, production readiness, foraging, grain and later deliveries; it is not a promise of a shortage date. The Waystation caravans pulse excludes peer-trade transport jobs, which remain visible in Trade and the inbound-cargo disclosure. Both changes use the current authorized City projection and add no persisted state.

Recurring cargo and unique journey count — M1 partial

The owner City disclosure now includes carried materials on active recurring trade rounds when their route is approaching this community. Waystation rows exclude peer trade jobs already represented by bilateral or recurring agreements, preventing one physical caravan from inflating the inbound count. Governor- and mandate-funded outpost supply uses the existing supply-role journey and is included when carrying goods toward the viewed city. The disclosure still omits carried coin payments and other journey types; it is not a complete destination inventory or arrival forecast.

Scale-aware City card and Region footprint — M1 partial

The Global map now starts with a compact selected-accessible-city card: identity, workers, food and Open City, Locate on map, Show city details. The player can expand it without leaving Global; Region and Hex automatically show the full fresh City overlay. A map-view change updates presentation without requesting or inventing new game state. Region draws a labeled dashed boundary around exactly the currently map-selected mutable settlement region, including charter extensions, using the server overview's cell IDs. The card's Locate on map action uses the region anchor to select and center that community in Region. A fallback card no longer relies on an unrelated map cell for its footprint. This improves the M1 spatial handoff; land-rights analysis, connected-site emphasis and full map overlays remain open.

Dated communal treasury and storage pulse — M1 partial

coin-market records up to eight completed village-day spendable communal balances per charter, retaining the preceding balance as its bounded checkpoint. Founding and new outposts establish their own opening; older version-one coin ledgers migrate with the current balance and no invented earlier change. Restore validates the dated records. The owner City overlay shows current coin balance and the latest completed balance-check delta, or a pending label before the first check, plus live used/capacity storage. Trade names the compared dates and explains that reserved and physically carried money is separate. This is a past comparison, not a future income forecast or full transaction log. The M1 overlay still lacks complete spatial views and comprehensive incoming delivery coverage.

Actionable City pulse and current physical work — M1 partial

The owner map overlay makes each current pulse metric a direct link to its live City explanation. A bounded disclosure shows current local building and land jobs plus outpost supply toward this outpost, returning cargo from an owned outpost or waystation, and in-flight bilateral or recurring trade cargo toward this community. It lists carried goods, route blockers and next checks without implying delivery or warehouse availability. Only fresh, authorized City detail can populate it; up to four rows appear and the full live sections remain the source of control. Complete destination inventory and arrival forecasts remain open.

City-scoped overlay and job badge — M1 partial

The map Orders badge now comes from the selected City detail's actual jobs.length, not the overview's world-wide active-job total. No city, restricted access, a stale revision or disconnect shows an unknown badge and a truthful status. The owner overlay adds current City-derived housing, food runway, potential daily food balance, local jobs, active waystation caravans and the three priority explanations already used by City Overview, with direct links to the relevant live tabs. The player sees basic settlement and stock data while detail refreshes, but no stale priority or job claim. Shared development does not invent unmodelled household figures. The M1 overlay still lacks full spatial/delivery views.

Live map shell and City handoff — M1 partial

The map header reads the connected player, actual continuity mode and selected accessible city from GonzWorld.snapshot(). Initial overview and Orders markup has neutral loading content instead of sample events, values and jobs. A connected account without an accessible selected city sees a clear City entry state; resident continuation and restricted production views clear previously displayed job rows. The separate concept destinations still identify their own sample data. This is a UI truthfulness pass, not completion of all live management screens or the broader M0–M8 plan.

Revision-bound downstream release counterrequest — M8/W3 partial

RESPOND_MAJOR_WATERWORKS_NOTICE accepts an optional requestedReleasePercent on a downstream-flow objection for the other supported 25% or 50% rule, or on a flood-exposure objection requesting 25% against an exact current 50% notice. The response persists on its frozen revision and is visible to both source and recipient; an amendment never silently applies it or carries the answer forward. The version-seven ledger migrates older six-field responses to a null request without inventing a negotiation, while existing earlier migrations remain sequential. Restore checks response shape, party identity, exact notice rate and request scope. Tests cover invalid and forged requests, source/recipient visibility, amendment, fresh consent and old-save migration. The request does not grant rights, set a notice deadline or clear W2/W3/W4 blockers.

Alternative controlled-release terms — M8/W2–W3 partial

The exact major-reservoir draft accepts 25% or 50% release of opening held water per recorded interval, with a separately selectable 25% or 50% new-arrival bypass. Source City projects a verified comparison for each release choice at every listed capacity; the chosen rule enters draft terms, later notice and exact communal water consent. A change after a downstream objection raises the revision and requires new notice and consent; earlier objections and 25% terms stay historical. The existing version-five term field accepts both values, so old 25% saves need no migration. Restore rejects an unsupported rate or altered historical notice. Controlled and paid tests cover stronger release, immutable world state, revision custody, recipient terms, consent and restore. This remains a bounded scenario, not complete W2 impact or W3/W4 approval.

Stated major-reservoir objection grounds — M8/W3 partial

RESPOND_MAJOR_WATERWORKS_NOTICE now requires one of four fixed grounds for an object answer: downstream flow, flood exposure, existing land use or evidence gap. Acknowledgment stores no ground. The source and recipient City views display the selected reason on the exact notice revision, including superseded history. Version-six ledger migration adds a null ground to older answers without inventing a reason; restore rejects malformed or unknown grounds. Tests cover command rejection, visibility, migration, supersession and restore. Objections remain review evidence, not a veto, rights grant, complete negotiation or W4 authorization.

Recipient basin-flow deltas on exact notices — M8/W2–W3 partial

The current-notice verified major-waterworks-impact.history replay now identifies registered basin catchments intersecting the viewing recipient's present charter. For each, it accumulates modelled natural and proposed runoff-plus-incoming arrivals across the recorded window and compares last-tick closing storage. Only signed basin deltas, the count of reduced-arrival ticks and the largest reduction/increase with tick numbers leave the recipient projection; absolute balances stay internal. Changed rows sort first and display at most sixteen with an explicit omitted count. A controlled basin test checks an early reduction followed by partial release increases; the paid two-community test verifies charter scope, redacted shape and read purity. This remains modelled impact evidence, not a complete unregistered reach, household water allocation or W3/W4 authority.

Current-building condition scenario for major waterworks — M8/W2 partial

major-waterworks-impact.history now carries separate natural and proposed condition maps for each current operational or damaged building belonging to the viewing community across its verified recorded window. The same live depth rate used by flood-damage is capped at each branch's remaining condition; zero-condition buildings stop accruing loss. The result reports capped points spent and distinct ruins for the full window plus per-tick amounts. City distinguishes this conditional no-repair scenario from the existing uncapped flood-rate pressure. A controlled three-tick basin test checks ruin after two one-point hits, no third hit, proposal-side preservation and read purity. This does not mutate structure, staffing, stock or jobs and does not prove historical/future damage or complete W2 effects.

Recipient-scoped land, well and building exposure on exact notices — M8/W2–W3 partial

Current named major-waterworks notices now run the verified recorded-window replay against their frozen capacity, bypass and optional release terms, and project only the viewing recipient's changed current-charter land, operational well-connection counts and conditional building loss. major-waterworks-impact.history accepts a recipient settlement ID and accumulates natural/proposed wet intervals, distinct changed connections, distinct own changed land cells and per-tick values without disclosing other communities' structure IDs or water accounts. The incoming City notice shows that evidence with bounded map links to own changed cells or an explicit no-replay reason; superseded notices retain terms and actions without current impact claims. A paid two-community notice test checks recipient scope and read purity, and a controlled basin test checks the per-tick counts. Full W2 effects, all-party W3 rights, funding and W4 operation remain open.

Current well-connection waterline comparison — M8/W2 partial

major-waterworks-impact.history now applies each verified natural and proposed closing basin level to the current footprints of operational village centers and outpost camps at condition 50 or better. Its existing flood-rate pass counts wet well connection-intervals for both branches and distinct connections whose wet status changes, for both no-release and controlled-release scenarios. City displays window and tick counts next to the standing-building pressure review. A controlled three-tick test verifies natural flooding, dry retention, re-wetting under release and read purity. This checks physical exposure under recorded forcing, not household water capacity, historical centers, alternate conduit supply, future operation or a completed W2/W3 gate.

Exact-term recipient water consent — M8/W3 partial

Version four added waterConsentActions to each exact notice without fabricating old signatures. Version five adds a release rule to new draft and notice terms: release the selected 25% or 50% of opening stored water each interval, rounded up, alongside the selected capacity and selected 25% or 50% minimum source-arrival bypass. GRANT_MAJOR_WATERWORKS_WATER_CONSENT requires a listed human recipient, its current lawful public character, prior notice acknowledgment, current proposal revision and no active grant; new grants require the version-five terms. The distinct withdrawal permits a later regrant; at most eight dated actions per party are retained and checked on restore. City exposes recipient grant/withdrawal review and source-side named-party coverage. Migrated version-four notices and signatures preserve their original narrower scope and require amendment and fresh notice for release-inclusive consent. Paid two-community tests verify wrong-party rejection, water/inventory purity, save/restore, amendment invalidation, legacy scope and malformed-ledger refusal. A partial signature does not settle NPC/unassigned/coastal rights, full W2 effects or W4 construction. The full water-use and impact blockers remain active.

Reservoir scenario land exposure — M8/W2 partial

major-waterworks-impact.history now compares end-of-tick land inundation from the verified natural and proposed basin balances using the same generated-bed threshold as live basin-exposure. It returns per-tick newly wet/dry counts and the distinct changed-cell counts across the retained window, with up to 64 exact map cells in each direction. Both the no-release and 25%-release branches expose the result in City for selected capacities and active proposals. A controlled enclosed-basin test proves finite retention can leave two plots dry and a later release can change that result without mutating real water or exposure; paid-projection tests continue to verify read purity and restore. This is a historical waterline comparison, not simulated crop loss, building damage, refuge, habitat or future flood protection. W2 complete effects and W3/W4 remain open.

The result now screens all changed cells against current charter regions and returns named public-holder cell counts plus explicit unassigned counts. Aggregate counts identify current uncleared structure footprints, improved land plots and active non-compost land projects intersecting changed cells; individual foreign inventories and jobs are not exposed. The replay also applies flood-damage.rate to the deepest wet cell of each current standing footprint in both branches, returning per-tick and summed structure-interval/rate-point pressure without condition changes. The controlled test verifies one named holder, one unassigned cell, three different paid uses and a release-sensitive building rate without changing live state. This advances affected-use evidence but is not a damage forecast or signed right.

Recorded-window controlled release — M8/W2 partial

major-waterworks-impact.history replays 25% or 50% opening-held-water release requests at each recorded tick. An unselected outlet retains the older source-basin hypothetical discharge; a selected exact corridor caps the request at receiver head and sends only achievable release to its distinct receiving basin before natural losses and routing. Current runoff can refill remaining capacity subject to the selected source-arrival bypass. City compares that rule with natural service and the no-release store, including per-tick requested, released and unmet water, new capture, closing storage, source exits and net changed crossings. Controlled wet/dry tests verify dry-tick route changes, conservation and unchanged live state; a paid monitored-station test verifies selected-corridor replay and restoration. The rule is illustrative and read-only. It grants no water use or construction and does not clear the full W2 effects, W3 permissions or W4 operation gates.

Verified retained-window reservoir comparison — M8/W2 partial

major-waterworks-impact.history now replays each retained exact basin route interval, up to twenty, and compares every registered natural node balance and crossing before advancing. Its no-release branch carries an initially empty capacity-limited store forward with the 25% minimum bypass recalculated on each interval's source arrivals. City reports per-tick capture, held water, natural versus proposed source exits, crossing-change counts, affected basin IDs and net changed routes, or a specific tick and reason when the natural branch cannot be reproduced. Controlled lake, reciprocal, dry/wet, twenty-tick retention and version-two migration tests plus a paid monitored-basin test verify conservation, finite carryover, read purity and restore equality. No live water or goods move, and W2 full effects, W3 rights and W4 operation remain open.

Verified one-interval retention replay — M8/W2 partial

The current owner-only major-waterworks review now branches the latest recorded basin interval in memory. Its unchanged replay must match every registered node's opening, runoff, incoming, outgoing, losses, ocean/unresolved exit and closing balance, plus the exact directed route row. Only then does a selected-capacity branch capture source-basin arrivals under a cumulative 25% bypass and rerun the bounded basin physics. City shows changed crossing receipts and affected basin IDs, or a reason why comparison cannot be verified. A paid station, controlled ocean/lake and reciprocal-basin tests cover finite capture, changed real destinations, conservation, refusal on inconsistent evidence, read purity and restoration. The one-interval branch has no release rule, delivery, complete rain/reach coverage or ecological outcome and keeps the impact-model and legal blockers active.

Recorded source-boundary destinations — M8/W2 partial

Major-reservoir reviews now read the conserved basin ledger's cumulative outgoing transfers and exact export crossings for the selected source basin. City lists receiving basin IDs and ocean/unresolved crossing hexes, with legacy unlocated exports clearly separate. The source's current draft review refreshes with later water ticks. A paid station test proves an actual receiving-basin transfer, balance against the source node, read purity and restoration; a synthetic legacy test proves incoming flows are excluded and historical exports do not acquire invented locations. These cumulative receipts have a different time window from the last-twenty-interval retention bound; the separate verified one-interval and retained-window branches above compare changed crossings under recorded forcing. They do not resolve a complete downstream impact envelope, rights or W4 operation.

The version-three basin-water ledger now retains up to twenty exact interval route rows, separately from cumulative transfers and exports. Directed transfer and boundary-crossing sums must equal each tick's basin samples on restore. Version-one/two saves start the detailed route window at their current tick with no invented past routes. City shows the source's recent per-tick destinations, including ticks without an exit. Controlled reciprocal, ocean and paid-station tests cover conservation, migration, corruption, replay and read purity. The rows provide timing evidence but do not run a project counterfactual or grant W3/W4 rights.

Paid source-plot comparison before a major-reservoir draft — M8/W2 and W3 partial

The owner-only major-waterworks projection now compares at most sixteen installed runoff stations in the charter, selected plot first. Each site requires its own current returned survey evidence to yield a candidate and reports its basin, largest allowed capacity, local storage-screen land count, existing built/land conflicts and unresolved approval blockers; an unpublished return or unsuitable geometry reports a reason. City provides Compare paid monitored source plots with Inspect source plot map links, even when the currently selected plot cannot support a draft. Two actually paid stations in the same basin retain distinct report IDs and source-cell terms while reading the same conserved pool, with no extra water or proposal. A paid test checks both reports, selection order, read purity and restoration. This advances the plan's other-plot comparison but does not survey unmonitored sites, compare complete downstream outcomes, grant land or water rights, fund work or deliver W4 operation.

Paid land improvements in major-reservoir construction cells — M8/W2 and W3 partial

major-waterworks.storageScreen now intersects exact candidate construction cells with the existing land ledger's soil, irrigation, headworks, terrace, drainage and road improvements and with active non-compost land jobs at either site or outlet. The current holder, plot, kinds and pending job are exposed as read-only site evidence; a plain survey is ignored. Any such use adds candidate-land-works-unresolved independently of structure occupancy and construction easements. A paid monitored scenario funds small irrigation on an actual candidate spill crossing, verifies the live job and completed channels, restores the completed record, then retires the channels; the land blocker clears while the standing food-plot blocker remains. City shows both source and affected-recipient uses. No material refund, demolition, grant or water movement is implied. Full project design, displacement/compensation, W2 impact and W3/W4 authority remain open.

Measured major-reservoir retention bound — M8/W2 and W3 preparation

major-waterworks.retentionBound now reads up to twenty conserved basin sample rows for the selected proposal capacity. It treats each row's actual runoff plus basin receipts as known arrival, rounds a minimum 25% bypass up to whole water subunits, retains only what fits in an initially empty store and passes the remainder. The pure result reconciles every hypothetical row and cumulative totals without writing a reservoir or altering basin water. It also validates and returns the observed natural-basin balance over those same intervals, separating registered downstream transfers, ocean/unresolved exits, evaporation, infiltration and closing storage. City shows both accounts and an explicit no-evidence state before the first recorded water boundary. Focused synthetic and paid-station tests cover saturation, bypass, both balances, read purity, current projection and restoration. This is an optimistic retention bound with no release, evaporation or operating loss, beside a measured current-service reference. It is not a causal downstream counterfactual. Unregistered inflow, engineered-versus-natural pool behavior, ecology, project release duties, rights and W4 operation remain open.

Exact candidate-cell construction easements — M8/W3 partial

The earlier version-three major-waterworks stage separated acknowledged public notice from a recipient's explicit construction easement; version four retains those actions and adds the distinct water-term consent above. A named current human holder can grant every candidate construction cell in its charter for the exact noticed revision; another holder, the source and an NPC cannot sign its share. Current coverage recomputes public charter intersections and names missing holders and unassigned cells. A holder can withdraw and regrant before funding; amendment invalidates the old grant while preserving a bounded chronological action record. Existing version-one drafts and version-two notices migrate with no invented easements. Focused tests cover authority, exact-cell custody, withdrawal/regrant, revision invalidation, no water/material movement, restoration and malformed saves. This is land permission over listed candidate cells only; continuing water use, future intake corridor, complete impacts, all-party ratification, staged construction and operation remain open.

Selected-capacity basin screen — M8/W2 and W3 preparation

major-waterworks evaluates each allowed reservoir capacity against the same immutable dry-bed storage curve as the conserved basin ledger. Its read-only screen returns the land cells below that capacity's waterline, feature cells and cells outside the candidate footprint; the latter adds candidate-storage-footprint-unresolved to approval blockers. The screen reads basin-exposure.forBasin to distinguish screened cells dry at the current water boundary from currently exposed land above the selected capacity line. It also intersects exact construction cells with uncleared structure footprints, naming current built uses and holders and adding candidate-construction-site-occupied where a site conflicts. A real paid candidate crosses an operational food plot; the focused test proves the blocker remains for a ruin and clears only when the footprint is actually cleared. Current public charter intersections and unassigned screened land are shown separately from the wider possible downstream parties. City changes the screen with the capacity selector and current recorded exposure; source and recipient notice views recompute it from each frozen revision's terms against present water and structures. Paid-station tests cover exact storage-curve agreement, live exposure, built-use conflict, read purity, restore agreement, footprint gaps, recipient intersections and notice visibility. These present-state checks do not forecast a construction-induced flood or reduction, resolve displaced uses, or verify connected downstream impacts, releases, ecology or water rights. W2 completeness and binding W3/W4 remain open.

Exact major-project notices and nonbinding replies — M8/W3 partial

major-waterworks now files one public notice per active proposal revision, freezing its exact terms, paid survey and currently identified inland/coastal communities. A named human recipient can acknowledge or object with a stated ground under its own lawful authority once for that revision; an unlisted community, NPC holder or source owner cannot fabricate a response. Amending terms raises the revision and returns the proposal to draft, so previous notices and replies remain visible as superseded history and cannot count for the new terms. The version-nine ledger still migrates version-one drafts with an empty notice list and version-two notices with no easements; it validates revision order, terms, parties, response identity and dates. It retains the twenty most recent withdrawn proposals, never reuses IDs and pins referenced reports while retained. City Land & water shows outgoing and incoming notices without exposing foreign private water or inventories. Controlled paid-basin tests cover notice, amendment, recipient authority, neutral migration, save restoration and malformed notices. A notice reply alone is not easement or water-use consent; open W2 impacts still block W3 ratification, construction and W4 operation.

Paid evidence now supports an exact major-reservoir draft — M8/W3 preparation

major-waterworks adds an empty, versioned proposal ledger to old saves. A lawful owner with staffed Hydraulic engineering, a returned field report and a monitored candidate basin can record its exact source, terminal, candidate footprint, spill crossings, capacity within the natural saddle volume and selected 25% or 50% proposed environmental bypass. One active draft per community can be revised or withdrawn; source reports remain pinned after later surveys. City Land & water shows the current possible public parties, unassigned ground, features and unresolved reach/rights blockers. A real paid-station test covers command authority, zero inventory/water movement, current evidence, restoration, amendment, withdrawal and forged-save rejection. Drafting alone is not notice, consent, funded construction or a functioning reservoir; the separate public notice above remains nonbinding. W2 affected reach and ecology, W3 all-party rights/funding and W4 operation remain open.

Conserved coastal sediment changes finite fish recovery — M2/M8/W2 partial

fish-habitat now reads new ocean sediment crossings from basin-sediment alongside its existing conserved water discharge. A nearby fish stock treats a load of at least ten abstract mass units and at least one mass per 2,000 water subunits as turbid: condition loses ten points instead of gaining five from a wet interval. A dry interval retains its prior ten-point loss. The elapsed interval pays at the previous recovery rate; later finite stock recovery and forecast use the changed condition. The habitat record upgrades from version one to two with a neutral zero historic sediment reading, validates its observed mass, and exposes the last load in City Production. A conserved lake-spill test verifies the actual water/sediment crossing, future recovery effect and restored ledger. This is one bounded coastal stock, not complete aquatic ecology, source coverage, W3 consent or W4 major operation.

Accounted sediment now reaches and affects basin pools — M2/M8/W2 partial

basin-sediment checkpoints older surface exports and routes only later sediment mass by the basin-water ledger's actual source, transfer and spill events. Deposits persist through evaporation, remobilize under later flow, and displace up to 50,000 subunits in a pool's level model without granting water. Controlled tests verify conserved basin-to-basin and ocean mass, reciprocal routing, neutral migration and forged-save rejection; a matched clean-basin comparison yields more real saddle transfer from the same water volume. Paid prepared-field forecasts and offline replay retain identical ledgers. City Land & water displays owned basin sediment balances. Complete unregistered/coastal ecology, W3 consent and W4 major construction and operation remain open.

Registered runoff now carries conserved topsoil sediment — M2/M8/W2 partial

sediment converts only newly measured topsoil-quality loss to abstract mass, routes it by the actual recorded surface-water allocations, retains bed load, and records surface boundary exports without recovering them on later registration. Wetlands carry less suspended mass; deposits reduce their next-interval retention capacity, changing later water routing. The version-one ledger checkpoints older saves neutrally and validates mass balance, clocks, routes and receipts. City Land & water and private forecasts show owned records. Controlled conservation/migration tests, a real monitored wetland interval and paid-field offline/forecast replay pass. Basin-spill continuation and one finite coastal fish response are described above; unregistered sources, larger habitat effects, complete W2 reaches and W3/W4 remain open.

Cultivated topsoil now responds to measured runoff — M2/M8/W2 partial

topsoil records quality loss on surveyed, prepared plots only after actual registered discharge crosses an 8,000-subunit and 0.002-fall threshold. A sound terrace or fallow halves the one-to-four-point interval loss; low-flow fallow recovers one point per village day. Each missing point subtracts 0.2 percentage points from actual food-plot yield, forecast and project previews, even after paid work repair. City Land & water shows private quality and receipts. The version-one ledger migrates old saves at their current processed tick with neutral quality, and validation rejects forged clocks, route/fall, flow and arithmetic. Controlled tests cover protection, recovery and migration; the paid prepared-field test verifies offline and forecast custody. Registered sediment transport and its bounded coastal response are described above; broader terrain/aquatic effects, complete W2 coverage and W3/W4 remain open.

Recorded flooded housing causes direct community health loss — M2/M8/W2 partial

flood-health counts usable housing footprints covered by actual basin exposure, then caps at-risk residents by the shelter still missing after dry homes and paid temporary refuge. The deepest flooded home gives one to five hazard steps per 0.001 normalized depth, capped at five. On the next household check, an exposed fraction of residents takes a separate health debit after normal needs, care and festival effects, respecting the existing 20-health floor. City People shows the exposed residents, step and actual loss. The village people ledger moves from version one to two, adding an empty versioned last-injury record to old saves without retroactive loss; malformed version-two records reject. Controlled flooded-center, ordinary damaged-center, dry recovery and offline replay tests pass. This is pooled injury, not named-person wounds or death. Complete flood reach, sediment, W3 rights and W4 operation remain open.

Accounted coastal discharge changes finite fish recovery — M2/M8/W2 partial

fish-habitat reads new conserved basin-to-ocean export receipts and direct-source ocean receipts at each surface-water interval. A fish stock within four connected ocean hexes of the descending ocean endpoint receives a bounded shoal condition: at least 1,000 water subunits of discharge raises it five points unless a heavy accounted sediment load lowers it ten; an observed dry interval also lowers it ten. The two receipt classes partition water and sediment rather than double-counting either. Stock recovery through that interval settles at the prior condition, then future resourceStock recovery uses the new percentage of its original daily rate. A full stock still advances its recovery clock before the condition changes. The stock retains a validated condition, last interval flow, sediment and observation time; version-one habitat saves migrate with zero historic sediment, while unobserved/distant stocks retain baseline recovery. City Production and forecast sources show current rate and evidence. Unit tests, a conserved water-and-sediment lake spill and a direct ocean source with neutral old-water migration and restored replay pass. This is one bounded coastal fish effect; farther habitats, complete W2 reach and W3/W4 remain open.

Living marsh now supports finite emergency foraging — M2/M8 partial

founding.forageSummary adds up to two current charter wetlands only when they are unoccupied, unconverted, observed wet at condition 50 or higher and free of recorded basin inundation. Each contributes forty finite wild-food capacity and eight food of daily regrowth to the existing shared foraging pool; up to two usable woodland hexes retain their sixty/twelve contribution. Existing assigned workers and the five-food-per-worker daily limit still govern actual gathering, household use and any surplus warehouse credit. This is a derived rule with no new save field or retroactive food. The paid marsh-station test observes two living plots while a completed drained plot contributes nothing, assigns a worker through the real village command, records later gathering and verifies offline replay. City Overview, Supply chains and the wetland card explain the dependency. W2 aquatic species, complete flows and W3/W4 remain open.

Nearby coastal parties appear in the open-ocean review — M8/W2 partial

basin-connections.projection now collects known ocean exits from natural basin connections, candidate spill routes, paid-channel recipients and an ocean-terminal report. A read-only screen visits connected ocean hexes up to four steps away, bounded to 256 cells, and names public communities whose charter reaches those cells or their adjacent shoreline. The separate coastalReview stays complete: false even when no nearby claimant appears; farther users, transport, ecology and exact water rights remain unresolved. It neither expands the inland affected-cell count nor discloses foreign stocks or reports. City Land & water shows the crossings and candidate parties. Controlled tests verify near/far screening, dynamic names, unchanged state and privacy. This is claimant evidence for W2, not W3 consent or W4 operation.

Recorded floodwater damages pooled vulnerable stock — M2/M8 partial

flood-storage migrates old saves to an empty version-one ledger at their current surface-water tick. Each later water boundary checks standing storage footprints through basin-exposure.structure, allocates the community’s pooled vulnerable stock by its share of total standing storage capacity, and removes whole units of prepared food, grain, flour, feed, fresh fish, preserved fish, flax, yarn, cloth, garments, saplings, logs, timber and charcoal at five percent per 0.001 normalized depth, capped at 25% of the exposed share. The deepest wet store sets the interval rate. Food is receipted as spoiled and textile/nursery/loose wood/fuel stock as damaged. Each withdrawal goes through warehouse history and a bounded per-community flood receipt with cumulative losses; dated fish also loses its earliest expiry batches without refreshing the remaining stock. The perishable used total includes that non-expiry withdrawal. The material IDs append to the version-one receipt order, keeping old receipts valid; existing saves first lose these goods at a future interval, never retroactively. Repeated ticks are inert and forged dates, amounts or capacity ratios fail validation. City Land & water and owner forecasts expose the result. Controlled and paid-station tests cover split capacity, dry recovery, migration, receipt rejection, oldest-batch fish loss, material warehouse movement and offline replay. Stone, metal and tools remain outside this stock rule; named-person wounds and complete W2/W3/W4 remain open.

Connected channel recipients reveal bounded wider networks — M8/W2 partial

basin-connections.projection follows up to sixteen installed paid drainage channels from a returned report’s affected terrain. A complete non-ocean recipient catchment omitted from the root eight-basin natural review is added to the possible-community/feature scan; the projection now also runs a bounded natural-network review from that recipient and includes its higher-outlet and reciprocal-backwater catchments and crossing endpoints. Across recipients it permits 8,192 supplemental catchment/network cells, sixteen new basins and 128 new directed links, deduplicated against the root and earlier recipients. Incomplete or over-budget reaches and ocean users keep explicit frontiers, and a second installed channel on newly included terrain is followed. City displays supplemental links and unresolved boundaries without exposing foreign live water, stock or reports. No water or consent moves. The registered source’s fixed 25% natural bypass remains visible before pending receiver admission. Controlled tests cover upstream and wider-connected claimants, chained channels, oversized catchments, bounded channel count and pure reads; the focused connection and receiver suites pass 18/18. Complete global affected reach, project-specific impacts and W3/W4 still remain open.

Flooded well connections lose local household water — M2/M8 partial

land.sourceCapacity now requires an operational, sound, dry village center or outpost camp footprint. Inundation sets its local well and headworks delivery to zero without changing surveyed capacity or persisted state; the existing water balance also suspends bilateral imports/exports at a flooded endpoint. The same land.water allocation serves residents, livestock and irrigation, and City → Land & water reports a flooded well connection when local delivery is zero. The next household check records water need and health consequences, and a dry usable connection resumes delivery. Controlled founding-center and conduit tests verify zero and restored local capacity, both transfer endpoints, daily need and snapshot replay. No stored water or stock is deleted. Full affected basin coverage, direct contamination and W3/W4 major works remain open.

Flooded homes and refuges lose usable shelter — M2/M8 partial

refuge.permanentHousing now excludes otherwise sound operational housing buildings while any footprint cell has recorded basin floodwater. founding.economySummary uses the same calculation as the resident needs and migration paths, so City and Regional figures agree. refuge.plan also excludes flooded staffed halls and reports the flood reason; the ordinary daily check spends no refuge logs while the hall is unusable. A flooded founding center loses forty places, produces a real shelter need and health loss on the next household day, then recovers on dry ground. Two controlled funded tests cover center and refuge, City values, stock custody and restore; the focused refuge suite passes 9/9. No save field, resident or stored good is granted or deleted. Full basin exposure, broader stored-material damage, direct resident injury and major flood-control works remain open.

Existing drainage channels appear in the wider affected-reach review — M8/W2 partial

basin-connections.projection now reads installed drainage routes after its immutable natural-network analysis. It traces a channel when its outlet differs from the source's natural downhill neighbor, adds bounded receiving-path cells to the public possible-party scan, and reports whether the receiving basin was among the eight naturally reviewed basins. An omitted basin, incomplete path or omitted channel remains an explicit frontier; at most sixteen channel routes are expanded, with further routes counted. No live foreign condition, station, stock or report is exposed, and neither water nor consent changes. New tests cover an active paid channel to an omitted basin, dynamic public claimant visibility, read purity, privacy and the expansion bound; basin connection and topology suites pass 19/19. This does not establish present channel discharge or a complete major-project impact envelope. Full engineered reach, all-party rights and W3/W4 work remain open.

Recorded floodwater interrupts paid watershed fieldwork — M8/W2 partial

watershed-surveys.quote now rejects a selected inundated charter route before any dispatch payment for observation or monitoring installation. Outbound and returning surveyors check their next hex, retaining their position, timber, tools and unpublished findings while carried meals run down. At an observation check, a flooded site sends the team home without findings or station installation; unused materials return through the normal storage-limited unload. Four controlled-exposure scenarios across the watershed and surface-water suites cover atomic refusal, held outbound and homeward travel, meal use, physical recovery, failed observation, prevented station installation, refunds and restored custody. The focused watershed suite passes 15/15 and surface-water passes 10/10. Exposure is evaluated at travel and observation checks; a short flood between checks is not separately recorded. Full affected reaches, all-party rights and major construction remain open.

Recorded flooding affects bilateral well conduits — M8/W2 partial

The existing accepted woodland conduit now checks recorded exposure across its complete route before funding construction, repair or removal. A flooded corridor rejects the review without payment; a paid four-person crew queues at a water boundary with earned time and material custody intact and resumes after recession. Operational flow stops only when a well connection is flooded; an otherwise sound buried interior can remain flooded without losing delivery. City waterworks quote and balance reasons report the interruption. Two controlled-exposure tests cover atomic rejection, retained paid work, dry resumption, both endpoints, interior continuity and conserved water; the separate paid-station basin test verifies a generated flood source. The focused waterworks suite passes 14/14. No save field, extra source yield or major-project right is introduced. Complete affected reaches, engineered project consequences and all-party consent remain open.

Recorded flooding interrupts knowledge institutions — M4/M8 partial

An inundated footprint now disqualifies an otherwise staffed and sound supporting institution from service, research and adoption. Ordinary flood damage reconciles adopted programs at the water boundary; their regional issue names floodwater, and daily service can return after recession if other requirements still hold. Funded academy research, scriptorium copying and named specialist training block before another stage, keep their invested progress and reserved inputs, and use their existing reviewed resume after drying. The common exposure helper still chooses the deepest footprint cell for structural damage. Controlled paid tests cover a village center, academy, scriptorium and school, including blocked quotes, material custody, restoration and recovery. The six directly affected suites pass 62/62; the broader City, Regional, forecast and production selection passes 101/101. This adds no save field or water transfer. Full affected reaches, aquatic ecology, broader stored-material damage, direct resident injury and major-waterworks consent remain open.

Recorded flooding pauses industrial production — M8/W2 partial

Any inundated footprint cell now blocks a production building's selected recipe, including lumbermills, workshops and extraction, in addition to fields and nurseries. Its due cycle advances without consuming inputs, producing goods or banking missed cycles; City Production and Supply chains expose the floodwater reason. Recession resumes one normal future batch. The funded lumbermill test checks logs, timber, UI reason and restore; the seven basin-exposure scenarios pass 7/7, including the earlier actual paid-station flow and farm/nursery recovery. No save field or water balance changes. Broader stored-material damage, direct resident injury, unresolved reaches and major-waterworks authorization remain open.

Local environmental bypass on recorded drainage — M8/W2 partial

Sound local drainage now sends at least 25% of each recorded four-hour discharge interval down the natural edge when its reserved channel outlet differs; the remaining flow reaches the reserved wetland. Integer rounding favors the natural route. Both absent receivers enter empty at the next boundary, with paid outlets admitted first and local rainfall only after separate monitoring. Edge receipts and fixed-station crossing imports/exports conserve both legs, while legacy receipts, restored saves and later channel failure retain their original history. City Land & water displays the bypass percentage, natural hex and cumulative transfers beside the channel route. Focused routing, natural/paid receiver and erosion tests pass 27/27; the wider hydrology and city-projection selection passes 87/87. Unregistered sources, species-specific environmental flow needs, full affected reaches, rights and major-project construction remain open.

Recorded floodwater on fortification duty, campaigns and escorts — M5/M8 partial

Local, retained-outpost and consented allied watch quotes now reject known wet routes before food or consent is committed; long and standing watches reuse the same route check. Paid watch forces retain their position and rations before a flooded next hex. A flooded occupied post immediately loses warning service and causes withdrawal at the next military check, while tower lookout detours exclude known wet hexes. Professional relief acceptance rejects a flooded route; paid campaign movement waits at a flooded next step with food still consumed, and a flooded camp prevents contact and sends the force home. A moving escort cannot join a known wet caravan route and offers no protection while standing in recorded water. New controlled-exposure scenarios verify rejection without spending, watch and campaign custody, host refill exclusion, restored and offline-equivalent campaign holds, camp withdrawal, tower detours, escort protection and physical returns. The affected military, City, regional and trade run passes 149/149; wiki build/check also pass. The real paid-station basin-to-trade-route test remains the integrated exposure source check; unknown reaches, other travel modes and engineered-water consequences remain open.

Current wetland-holder notice evidence — M8/W2–W3 partial

The retained natural-versus-proposal screen now aggregates distinct changed wet/dry exposure at currently observed, unconverted wetlands in registered basins. Public output names current charter holders with site counts, keeps precise habitat condition private, and counts changes without a named holder. The exact notice basis gains a wetland-exposure reason; source review gains changed-wetland and unattributed-holder blockers. A controlled held-pool marsh enters the holder's basis, while removing the charter reports an unresolved site rather than inventing consent. Reads are pure. This is a bounded current-interest screen, not full ecology, customary-right discovery, W3 ratification or W4 operation.

Held-pool marsh forage and wetland response — M2/M8/W2 partial

The retained natural-versus-proposal replay now includes candidate source-held water in recipient-scoped current healthy marsh forage and wetland inundation checks. A controlled newly wet source marsh changes conditional dry-site capacity from 40 to zero and daily regrowth from eight to zero, while the live response from today's habitat state records a wet recovery instead of a dry streak and a different next-interval retention limit. An existing wet-marsh case now avoids a false drying conclusion when held water replaces routed node storage. Tests also cover private recipient scoping and read purity. No food, habitat or water moves; later feedback, broad ecology, all-party rights and W4 operation remain open.

Proposed-pool stored-supply flood pressure — M3/M8/W2 partial

The retained natural-versus-proposal comparison now evaluates all current standing stores with candidate held source water, per-store flood rate, pooled capacity and sound raised-floor lift. Public review names affected store owners and rate pressure without inventory; an owner privately sees its worst one-interval additional whole-unit loss on present vulnerable goods. A separate blocker and exact notice reason cover added pressure even on already wet land. Controlled tests prove held-pool loss, privacy, basis inclusion, a raised-store shallow-water exception and read purity. The shared owner stock-loss helper still serves the prior outlet-open/closed comparison. No goods or water move; full W2/W3/W4 gates remain open.

Proposed-pool household flood-injury pressure — M2/M8/W2 partial

The retained-window natural-versus-proposal screen now includes candidate held water at the source basin, alongside routed closing water and each branch's sediment bed. Current dry homes, staffed supplied refuge and the live flood-health rule yield public affected-community names and an owner-only worst one-interval exposure/pressure comparison. A depth increase on an already wet center adds a distinct blocker and exact notice reason even with no newly wet land. Controlled tests cover source-pool depth, separate dry housing, private scoping, basis inclusion and read purity. The same source-pool level now enters retained-window land, standing-building, working-well and condition-loss exposure. A controlled charter home becomes newly wet across all of those screens, with its holder in exact notice basis; a second paid-source test prevents a false dried-land claim when held water replaces routed water. The branch remains conditional W2 evidence, not a health debit, future design flood, W3 permission or W4 operation.

Proposed outlet household flood-injury pressure — M2/M8/W2 partial

The verified recorded-window comparison now calculates direct resident injury pressure from an outlet release using the live housing, refuge and flood-health rules against each branch's current modeled waterline. Public source review names affected communities without population or health; an owner-scoped notice shows the worst one-interval added exposure and pressure. A separate dry housing base and a ready, staffed refuge with actual logs each remove the added risk in controlled tests. The comparison is read-only and adds a distinct proposal blocker and exact notice reason. It does not replay past daily health or establish future flood safety, full W2 reach, W3 authority or W4 works.

Proposed outlet exposure of current paid journeys — M6/M8/W2 partial

The exact retained-window comparison now intersects outlet-open-only newly wet receiving-basin cells with each current paid job's untraversed outward or homeward route. Public source review reports affected journey owners and counts without cargo or job IDs; owner-scoped notice gives affected remaining route hexes. A distinct blocker and frozen notice reason prevent a currently affected owner from being silently omitted. Controlled tests cover outward, already-passed and return legs, privacy, basis inclusion and read purity. This does not move goods, change live travel, cover future routes or satisfy full W2/W3/W4 approval.

Controlled outlet impact on downstream stored supplies — M8/W2 partial

The verified retained-window outlet replay now compares current standing storage under release versus the same proposed reservoir with its outlet closed. It applies the actual depth-weighted flood-stock rule and raised-floor lift without editing water or goods. Public source review names affected store pressure and charter holders, while a recipient-only result uses its own current inventory for the largest one-interval additional whole-unit loss. A separate exact-notice reason and source blocker record the impact. Controlled deeper-but-already-wet receiver tests verify stock loss, notice inclusion, read purity and no foreign inventory disclosure; the waterworks suite passes. This remains historical-condition review rather than complete future flood or W3/W4 authority.

Depth-weighted flooded storage — M2/M8/W2 partial

Actual recorded inundation now weights each standing store's vulnerable-stock exposure by its own effective depth and capacity. City displays local rates and an identical-interval pooled-stock estimate from the same helper used for actual withdrawals. The version-two ledger preserves earlier deepest-store receipts and begins weighted receipts only on a later tick; validation rejects mixed-era or altered receipts. Focused tests cover unequal depths, migration, actual paid basin water, warehouse custody, forecast and offline replay. Complete W2 reach, W3 authority and W4 operation remain open.

Recorded basin floodwater on local militia and field supply — M5/M8 partial

A newly funded patrol rejects a known wet cell on its surveyed route; a corridor guard checks only its actual walk to the post, and a field-supply order rejects a known wet rendezvous prefix before spending food, kits or arrows. A paid militia or supply team holds before a flooded next hex without moving people or delivering goods; ordinary travel provisions still run down, and the existing recall brings them home physically. A flooded guard post immediately stops providing corridor protection and triggers withdrawal at its next needs check. Four controlled-exposure military scenarios cover atomic rejection, actual paid holds, provision use, restored and offline-equivalent patrol jobs, carrier recall, guard withdrawal and a dry guard approach past a flooded camp beyond the post. The focused military suite passes 24/24, and the affected garrison, escort, assistance, City and regional run passes 133/133. The real basin-to-trade-route integration is covered below; flood behaviour for the remaining travel modes and wider waterworks effects remains open.

Recorded basin floodwater on physical cargo routes — M3/M6/M8 partial

The basin-exposure view blocks new caravan, bilateral-trade, founder, household-relocation and reoccupation quotes whose selected walking route contains recorded floodwater; a manual outpost-supply quote with active Scouting may now use a paid dry detour. An already paid caravan or outpost journey checks its next hex at each travel step; a flooded hex holds its cargo and consumes normal provisions unless an active scout finds an eligible dry detour. A staffed Scouting program can find a bounded dry caravan detour or reroute an outpost-supply team from its actual hex; a draft-assisted team now preserves its paid feed contract on a separately recorded actual detour, and an inundated founder camp aborts assembly and returns its party. The existing City journey and Regional issue views show the block reason. Focused controlled-exposure tests verify rejected quotes leave stock and consent unchanged, held food/cargo, outpost issue reporting, dry recovery, scout movement, flooded-camp withdrawal, restore and offline agreement. A separate integrated test pays for a runoff station, records real basin rainfall on a low woodland corridor, then verifies a paid bilateral delivery stops at the wet hex, survives restore, returns its cargo after physical recall and rejects a new flooded offer. The full repository suite passes 2,117/2,117. Other travel types, full watershed coverage and major project effects remain open.

Stored-food reserve for recurring nonfood production — M2/M3 partial

Recurring batches now check whether their net prepared-food cost would cross the settlement's existing household reserve floor. The tree nursery waits before using food or compost when that floor would be crossed; its skipped cycle is not banked. City Production and Supply chains expose the current reason. Household meals and food-producing harvests keep their normal path. A reviewed lower reserve or newly produced food can unblock a later batch. This is an execution and projection rule with no new save field. A command-funded nursery test verifies the block, no input loss, continued field food, later recovery, offline agreement and restore; the focused eight-suite run passes 67/67, and the full repository suite passes 2,111/2,111. Broader M0–M8 and long-run resource-balance gates remain open.

Food warehouse-space policy — M2/M3 partial

Each chartered community can now review and set a zero-to-three-day food-space target in City; zero is the default for both new settlements and migrated saves. The target is ceil(current foodDemand × selected days). Positive-net nonfood producer batches and new standing selective-harvest orders wait when their expected goods would cross that free-space target. Legume compost remains whole and uncollected rather than taking space protected for food. Food harvests may use the room. City Production and Regional overview explain current blockers. The policy does not reserve actual capacity against already accepted construction, manual cargo, returns or other stock changes; those can still fill the warehouse. Focused coastal food/industry, forestry, offline-replay and restore tests pass; the full repository suite passes 2,110/2,110. Long-run and remaining M0–M8 acceptance gates remain open.

Whole-unit warehouse credits — M2/M3 partial

The shared warehouse-credit path now admits compost, militia kits, physical cargo equipment and manuscripts only when each whole unit fits. Fractional headroom cannot create fractional compost or gear after a version-two save migration, and an overfull warehouse cannot make a credit subtract stock. It preflights every whole-unit amount in a mixed credit: an invalid later item rejects before an earlier divisible good enters stock. A founded-village fractional-capacity test checks exact accepted/discarded amounts, whole stock, atomic rejection and restored warehouse history. The full repository suite passed 2,108/2,108 tests before the preflight addition; the affected land, livestock, military and warehouse suites pass 73/73 afterward. Broader storage, return-cargo and M0–M8 acceptance gates remain open.

Version-two land migration for fractional legacy compost — M0/M2/M3 partial

Restoration now upgrades version-one land ledgers and floors only a fractional compost remainder that the earlier partial-staff legume harvest could leave. A marked warehouse-history save receives a dated outgoing adjustment for the exact fraction, including bounded receipt/checkpoint handling; older saves without warehouse history start from the normalized opening. Whole stock, land plots and paid jobs remain intact. Version-two fractional stock and unreconciled or forged warehouse history still reject. A command-funded fixture verifies marked and pre-history migration, one-time debit, idempotent restoration and both rejection paths. The full repository suite passes 2,107/2,107 tests, including wiki freshness. The broader M0–M8 save and continuity gates remain open.

Food-first legume collection and 1,000-day first-outpost journey — M2/M3/M4/M5/M6 partial

The legume field now stores whole compost only after its prepared-food harvest fits and one next household meal cycle's warehouse room remains. Excess green manure stays uncollected on that plot, with no free inventory or soil bonus; other full-warehouse blockers still apply. Production, Supply chains and crop review distinguish potential output from current-space collection. Focused tests verify partial-staff whole compost, a nearly full warehouse's food-first harvest, exact stock, a food-only batch receipt, forged-byproduct rejection and restored saves. The command-built founding village plus its first supplied, self-fed outpost now remain fed for 1,000 additional village days after the initial patrol, bottleneck recovery, soil/irrigation work and physical exchange; bounded offline catch-up matches each warehouse. The affected production, land, City and regional run passes 145/145 tests; an adjacent coastal, fish, mineral, forestry and warehouse run passes 84/84. Gameplay catalog validation, JavaScript syntax, wiki build/check and diff whitespace checks pass. This extends the previous thirty-day gate but does not prove indefinite regional balance or all M0–M8 acceptance scenarios.

Crop planting versus harvest requirements in Supply chains — M3/M4 partial

Each field recipe now carries explicit selection and continuing-operation technology lists in the local read-only supply graph. City Supply chains labels both phases on source cards, including alternatives not yet planted. Seed selection is required for both phases for named crops; flax and milling grain add only a planting-time textile/millwright gate, while legumes add a Crop rotation gate at both phases. The actual crop command and harvest code remain authoritative, and this projection changes no saves or materials. The broader crop, supply, City, production-plan, regional-forecast, land-maintenance and textile run passes 112/112 tests, including direct assertions for the crop dependency lists and paid compost repairs; JavaScript syntax checks pass. Wider M0–M8 gates remain open.

Legume field food and compost chain — M3/M4/M5 partial

The adopted Seed selection and Crop rotation programs now allow an owned completed food plot to plant Legumes and green manure for the normal two-food seed cost. A full staffed village-day harvest produces 32 prepared food and up to four whole local compost in place of the basic 44 food, with normal moisture, storage, condition, worker, mandate, reserve and cycle limits. The selected crop requires an active Crop rotation soil steward for each harvest; other previously selectable crops keep their existing operating rules. Real compost can pay an existing surveyed soil conversion or be consumed by other established uses, without granting materials at selection. One integrated scenario verifies harvest, specialist suspension and resumption, actual eight-compost soil-project funding, restore and offline replay. A second command-funded scenario verifies that the same field's later compost pays an authorized automatic soil repair on that plot, with matching day-by-day and offline outcomes and no further commons compost batch; the land-maintenance suite passes 7/7. Full M0–M8 completion remains open.

Current outpost unloading crew in City and Region — M1/M2/M6 partial

City and Regional overview now expose the live assigned worker count for an outpost resident party that has returned but is waiting for warehouse space. The regional journey marks zero people still travelling once the residents are credited at home, while its returned-worker field and the City card show the current crew after any linked local age-85 death. Historical job and transfer counts remain available without posing as current labor. The relocation review now describes goods waiting at the home hex. Focused outpost, birth and regional scenarios pass 30/30 tests, including a full-storage evacuation, post-return death and both read models. The M0–M8 objective remains active.

Returned outpost unloading crew mortality — M2/M6/M7 partial

An outpost resident party can return to a full home warehouse, credit its surviving residents and labor once, and hold the remaining cargo at the home hex. A birth-linked civilian who reaches 85 during that wait now dies through the existing local mortality receipt and stops counting as an assigned unloading worker. outposts.workers derives this live count from the returned transfer's birth keys and post-arrival local death receipts; its original job and transfer worker counts remain historical, avoiding another debit for in-transit losses. The held goods and equipment continue to wait for space, including if the effective crew reaches zero. A focused evacuation scenario covers return, full storage, local old-age death, assigned-labor release and restored save validation. The full repository suite passes 2,101/2,101 tests; gameplay catalog validation and wiki build/check pass. Age-unknown cohort aging and the remaining M0–M8 work are still open.

Age-known death on delayed outpost resident journeys — M2/M6/M7 partial

The birth community's age-85 check now closes an exact adult aboard an active founder, reoccupation, household-relocation or evacuation job at its current hex. The party loses one resident and worker, and only survivors receive destination population and labor. Original paid provisions and goods remain on the job. When the final traveler dies, the job closes and its remaining cargo is recorded as lost at the hex, without a new charter or home credit. If dependents remain but the last worker dies on a founder or reoccupation trip, the survivors return home without assembling a camp. Outpost-transfer version two keeps original departure totals, route and dated deaths; community-birth version eleven closes the linked move and mortality. Older versions migrate without inventing a death. A long-horizon evacuation test checks a delayed loss, forged-hex rejection, exact survivor arrival, a last-traveler loss, restored saves and neutral migration. The full repository suite passed 2,101/2,101 tests before the final workerless-founder return rule; the eight affected suites then passed 80/80. Gameplay validation, syntax, whitespace and wiki build/check pass. Age-unknown legacy adults and long-term demographic balance remain open.

Age window for new outpost resident journeys — M2/M6/M7 partial

Founder, reoccupation, household-relocation and evacuation quotes now use the exact workers who would be selected for transfer, after age-unknown civilians. They refuse a new journey if a selected community-born adult reaches 85 before the planned walk and possible return can finish, including two camp-assembly days for founders or reoccupiers. The transfer rechecks before any population debit. A long-horizon outpost birth, maturation and evacuation branch verifies that the visible quote blocks the crossing while an earlier funded evacuation still works; the affected outpost and community suites pass 46/46 tests, and the broader eight-suite check passes 80/80. Gameplay catalog validation, JavaScript syntax, whitespace and wiki build/check pass. Delayed birthday crossings now follow the outpost-journey death transition above; age-unknown legacy adults remain open.

Age-known death on finite waystation household journeys — M2/M7 partial

A community-born adult who reaches 85 on a leaving, arriving or turned-back household route dies at the modelled travel hex at their birth community's village check. The active party loses one resident and worker; its prepaid provisions remain committed, and only survivors enter the destination. Arrival checks housing, water, eligible food output and protected reserves against the surviving count, while a new household still needs four places. Migration-transfer version three preserves the original departure count and a chronological death receipt, while birth-ledger version ten closes the exact adult identity and transit move. Versions two and nine migrate with no invented deaths. Focused command-funded birth and migration scenarios cover leaving, arriving and reversed return legs, three-survivor admission, blocked admission, exact survivor arrivals, offline replay, restore, neutral migration and forged receipt rejection. The full repository suite passed 2,101/2,101 tests before the survivor-sized arrival adjustment; its eight affected suites then passed 80/80. Gameplay validation, JavaScript syntax and wiki build/check pass. Outpost resident-transfer journeys and age-unknown legacy adults remain open.

Age-known deaths during a linked field-supply rendezvous — M2/M5/M7 partial

A birth-linked soldier now dies at the age-85 village check while a paid military supply team is on its outward journey to the held field hex. The version-eight military receipt snapshots the linked carrier and actual unit position; version-seven saves migrate with null supply history. The rendezvous ends, surviving soldiers resume their earlier order and an understrength guard can withdraw. A last death removes the unit without inventing a return. The carrier team keeps undelivered paid cargo, consumes its own travel food and walks home; full storage retains the cargo until it can be unloaded. Focused tests use a paid dispatch and birth-linked delayed death, forged receipt rejection, restored saves, blocked storage with later unload, a last-soldier loss and an understrength guard's physical withdrawal. The full repository suite passes 2,099/2,099 tests; gameplay catalog validation and wiki build/check pass. Age-unknown legacy residents still lack a retrospective death clock.

Age-known deaths during consented relief campaigns — M2/M5/M7 partial

A birth-linked professional soldier now dies at the donor's age-85 village check during home muster, outward march, contact preparation or return, with the campaign ID and exact route cell in a version-seven military death receipt. Active wages close and refund only unstarted days. Survivors withdraw from the same hex, while accepted troop count and any delivered host food remain historical. A final death closes the agreement with lostAt and no physical return; unused depot escrow is released. Focused birth-linked tests cover all four phases, paid-service closure, forged campaign rejection, restored saves, three-person physical withdrawal, a last-soldier loss, actual hosted-depot delivery, later host refund and immediate unused-depot release on a final loss. The full repository suite passes 2,096/2,096 tests; gameplay catalog validation and wiki build/check pass. Linked field-supply hold mortality is implemented in the section above.

Age-known deaths on consented allied tower watches — M2/M5/M7 partial

A birth-linked donor soldier can now die at 85 on the outward march, at a consented host tower or on the return walk. The version-six death receipt retains the host and post; the agreement keeps its original accepted strength and expiry while live custody reconciles actual losses. Host food already taken for the arrival refill or daily support remains paid; later meals use survivors. A survivor returns physically, while the last death closes the agreement as lost without a return receipt. A birth-linked delayed-watch test covers the host loss, paid meal, restored agreement and three-soldier physical return. The full repository suite passes 2,092/2,092 tests; gameplay catalog validation and wiki build/check pass. At that earlier milestone, linked field-supply deaths remained open.

Age-known deaths during owned local and outpost fortification watches — M2/M5/M7 partial

A birth-linked soldier reaching 85 on the outward march, at the post or during the return from a one-, two-, seven- or fourteen-day or standing watch at an owned local or retained-outpost tower, keep or castle now dies at the actual route cell. Population and mobilized strength each fall by one; civilian labor remains unchanged. The version-six death receipt retains the watch state and a self-contained post snapshot, including the outpost host, so later structural removal does not erase historical location; versions one through five migrate with null garrison history. A funded finite watch keeps its approved food allowance and actual dated meals. A standing watch keeps its cumulative authorization, lifetime collection count and spending, and the thirty most recent meals; death receipts identify which earlier meals used the original troop count. Outpost duty keeps its original four-day arrival-refill ceiling. A pre-arrival death reduces actual host food taken; a later death preserves the payment already made. Later collections charge one food per surviving soldier at the host. Lookout, scout, accounting, reserve and carrying-capacity checks still determine whether survivors remain at the post. Focused tests cover birth-linked deaths in all three route phases, actual outpost food custody, smaller later meals, forged host/refill receipts, over-thirty-meal reconciliation, offline replay, physical return and post removal. The full repository suite passes 2,091/2,091 tests; gameplay catalog validation, JavaScript syntax, whitespace and wiki build/check pass. At that earlier milestone, linked field-supply mortality remained open.

Age-known deaths during convoy escort duty — M2/M5/M7 partial

At the age-85 village check, an age-known soldier on an active NPC or peer convoy escort, or on its detached return, dies at the actual route cell. One resident, mobilized soldier, kit and proportional carried food are lost; civilian labor and caravan cargo remain unchanged. The version-five death receipt snapshots the escort assignment, route and cell; versions one through four migrate with null escort history. Surviving escorts remain co-located, but later protection uses their reduced strength. Peer trade permission retains the original accepted troop count and reconciles recorded deaths when loading. Focused tests cover a delayed actual caravan, cargo conservation, forged receipt rejection, offline replay and peer consent reconciliation. The full repository suite passes 2,085/2,085 tests; gameplay catalog validation, JavaScript syntax, whitespace and wiki build/check pass. At that earlier milestone, garrison, relief and linked field-supply deaths remained open.

Age-known deaths during local corridor guard duty — M2/M5/M7 partial

The age-85 home village check now closes a birth-linked soldier assigned to the local corridor guard while outward, at the post or returning, provided no military supply rendezvous is linked. The version-four death receipt snapshots the guard assignment and actual route position; versions one through three migrate without invented guard history. A surviving guard retains its protected-crossing count and paid provisions. If the reduced force can no longer deter the surveyed camp, it stops protecting traffic immediately and walks home from its current hex; a still-strong guard keeps its original duty deadline. A returned guard record remains historical and is not treated as an active assignment on a later birthday. Long-horizon scenarios cover both strength outcomes, physical return, forged guard receipts, restoration and offline replay. The full repository suite passes 2,083/2,083 tests; gameplay catalog validation, JavaScript syntax, whitespace and wiki build/check pass. At that earlier milestone, escort, hosted, relief and linked field-supply mortality remained open.

Age-known deaths during unaccompanied patrols — M2/M5/M7 partial

The age-85 home village check now also closes a birth-linked soldier on an ordinary outward or returning patrol without a guard, escort, garrison, relief campaign or supply rendezvous. The version-three military death receipt retains the actual route, index and cell; versions one and two migrate without invented travel. The survivor keeps the same physical location and paid provisions, with one soldier's proportional share lost, and continues the physical route. The birth service, cohort, roster and any active wage or fitted ammunition records close consistently. A delayed legacy return test checks both travel phases, route forgery, save restoration and offline replay; the paid archer scenario also closes its term and quiver at the actual route cell. The full repository suite passes 2,082/2,082 tests; gameplay catalog validation, JavaScript syntax, whitespace and wiki build/check pass. At that earlier milestone, guard, escort, hosted, relief and linked field-supply mortality remained open.

Home militia old-age transitions during training and paid service — M2/M5/M7 partial

The recorded age-85 village check now handles home militia in ready, stalled basic training, reinforcement, refitting and professional-training states, including an active fitted role at home. A death closes one birth service and cohort, loses one resident and mobilized soldier but no civilian worker, and records lost basic/fitted kits, proportional food and up to six carried arrows. Stalled reinforcement reduces its veteran or recruit side and continues surviving training without refunding the dead member's kit. An active professional term cancels, retains earned wages and refunds only unused escrow; a fitted survivor keeps its historical contract and quiver custody. Version-one ready-only military death receipts migrate to version two without invented roles or refunds. Focused long-horizon scenarios cover delayed training, both sides of reinforcement, an accepted pre-age-gate archer term, forged ammunition and offline replay. The full repository suite passes 2,081/2,081 tests; gameplay catalog validation, JavaScript syntax, whitespace and wiki build/check pass. Field, hosted and delayed-return mortality remains open.

Earlier ready militia old-age milestone — M2/M5/M7 partial

A community-born soldier who reaches 85 in a ready, unfitted militia at home now dies on that village's daily check. The same birth service and defense cohort close with a dated military old-age receipt; the village loses one resident and one mobilized soldier, with no civilian-worker gain or replacement kit. The person's proportional carried food is lost. Roster arithmetic includes the death without calling it a combat casualty. Defense reports old-age deaths separately and public briefings omit birth keys. Long-horizon command-funded scenarios check the actual village boundary, one-time debit, complete unit retirement after a second birthday, restore, offline replay, neutral old-save migration and forged food, cohort and worker receipts. The full repository suite passes 2,077/2,077 tests; gameplay catalog validation, JavaScript syntax, whitespace and wiki build/check pass. Paid or fitted roles, training, reinforcement, travel, hosted duty, delayed returns and age-unknown legacy soldiers still need coordinated mortality behavior.

Earlier recorded soldier age-window milestone — M2/M5/M7 partial

Defense now shows the earliest age-85 date among a unit's community-born soldiers. New recruitment and reinforcement reviews check the two-day training finish for selected known recruits; reinforcement also checks the active roster. Planned patrols, guards, escorts, owned and allied watches, relief campaigns and paid professional terms reject a finish at or beyond that date. Standing-watch food approvals check their funded horizon and return walk. Tests cover the selected-recruit training boundary, owner projection and the shared soldier deadline. The affected military suites pass 104/104 tests and the full repository suite passes 2,075/2,075; gameplay catalog validation, syntax, whitespace and wiki build/check pass. This does not yet kill an already serving soldier at 85 or resolve an unforeseen delay; that transition still needs coordinated unit, equipment, payroll and hosted-duty accounting.

Age-known adult old age at the finite waystation — M2/M7 partial

An adult born under Community family growth who physically reaches the finite waystation now dies at 85 on their birth community’s daily check. The shared source loses one resident and one worker exactly once; the origin birth receipt records frontier-waystation as the death location and the source totals before the debit. City → People shows how many residents born there later died at the waystation without exposing birth keys to public events. A command-funded hardship departure scenario verifies waystation arrival, old-age death, offline replay, restoration, finite source conservation, a repeated check and rejection of forged location or age. The affected birth, outpost, population, military, reinforcement, combat and City suites pass 77/77 tests; the full repository suite passes 2,075/2,075. Gameplay catalog validation, JavaScript syntax, whitespace and wiki build/check pass. Serving-soldier and in-transit mortality, age-unknown legacy adults and regional demographic balance remain open.

Community-born civilian old-age death — M2/M7 partial

A present civilian with a recorded community birth now dies at the first local village check at age 85, including when family growth is paused. The simulation removes exactly one resident and civilian worker, reconciles assigned work, and keeps a version-nine birth-ledger mortality receipt with the death community and pre-debit totals. City → People counts these recorded deaths where they occurred, even when the person was born at another charter. Version-eight saves gain a null death field without retrospective loss. Command-funded long-horizon tests cover a home death, a birth at an outpost followed by evacuation and death at home, one-time debit, restore, offline replay and forged-receipt rejection. The affected birth, outpost, militia, reinforcement, combat and City suites pass 66/66 tests; the full repository suite passes 2,075/2,075. Gameplay catalog validation, JavaScript syntax, whitespace and wiki build/check pass. At this snapshot, waystation old age remained open; the newer section above closes that age-known source path. Serving-soldier, in-transit and age-unknown legacy mortality and sustained regional demographic balance remain open in the adult cohort ledger plan.

Recorded militia ages and age-aware recruitment — M2/M5/M7 partial

The militia owner now sees each age-known soldier's actual age from their community birth, advanced at the last completed village check, plus a warning count from age 80. Recruitment and reinforcement previews count selected birth-known adults, show the oldest selected age, and reject a known candidate who has reached 85. Age-unknown legacy recruits retain no invented age. The live unit's birth keys remain absent from public events, map chunks and City Orders; the owner-facing age summary reveals ages without keys. A focused scenario verifies age 18 at enlistment, age 19 after one actual village year, the age-85 preview boundary, save restoration and the existing custody transitions. The full repository suite passes 2,074/2,074 tests; gameplay catalog validation, JavaScript syntax, whitespace and wiki build/check pass. Natural old-age death for already serving soldiers is not implemented yet; completing that path must reconcile troop roster, travel duty, fitted equipment and any active wage or host agreement. At this snapshot, civilian age-known mortality and demographic balance remained open; the newer section above supersedes the civilian mortality item.

Earlier sections below are milestone snapshots; the newest status above supersedes their old open-item lists and version numbers.

Community-born identity through militia service — M2/M5/M7 partial

Militia recruitment and reinforcement now select age-unknown civilians first, then retain an exact birth key for each selected community-born adult. A version-eight birth receipt and the military cohort ledger preserve each enlistment, including a cancel-and-reenlist sequence at the same world time. Reinforcement cancellation and demobilization return only surviving linked adults to civilian custody; fatal contact closes the selected birth identities when the existing population debit records their deaths. Old birth ledgers gain empty service histories, and old militia units gain empty known-adult rosters rather than invented soldiers. Restore checks both sides of live and historical service, casualty receipts, unit size and physical chronology. Military projections and public events show the known-soldier count without exposing birth keys. Focused tests cover recruitment, demobilization, repeat enlistment, reinforcement cancellation, fatal contact, migration and forged receipts. The repository suite passes 2,074/2,074 tests; gameplay catalog validation, JavaScript syntax and wiki build/check pass. Soldier birthdays, natural old-age death of unnamed adults and long-term demographic balance remain open in the adult cohort ledger plan.

Community-born identity through repeatable resident membership — M2/M7 partial

An age-known civilian accepting a newcomer invitation now keeps their birth age and life clock as a resident player. The version-seven birth receipt retains each membership period. Leaving returns the same birth key to local civilian custody, where a later invitation or physical worker journey may select that person again; death closes the current link and removes the resident once. The version-three membership ledger links each new age-known acceptance to its birth key. Existing version-two memberships migrate to null links, and version-six birth receipts gain empty membership histories rather than invented identities. Invitation choices show the next adult's age; an already 85-year-old age-known candidate cannot join. Focused scenarios cover join–leave–rejoin, later waystation departure and return, critical death, save restoration and forged chronology. The full repository suite passes 2,072/2,072 tests; gameplay catalog validation, JavaScript syntax and wiki build/check pass. Military identity, unnamed-adult mortality and long-term demographic balance remain open in the adult cohort ledger plan.

Community-born identity in independent careers — M2/M7 partial

An age-known civilian selected for landless continuation from an owned community or the finite waystation now keeps their original birth age and life clock in the personal career. The birth receipt links to that exact wayfarer while they live and closes on natural death; population and worker counts still leave the source only at the original career claim, with no second debit at death. Available-origin choices show the selected adult's age and block a cohort that has already reached 85. Age-unknown adults and older career saves retain the age-24 model. Version-two personal careers migrate to version three with a null birth link rather than fabricated history, and restore checks both ends of every new link. Focused scenarios cover local and waystation claims, save migration, forged links and old-age closure. The full repository suite passes 2,071/2,071 tests; gameplay catalog validation, JavaScript syntax and wiki build/check pass. Resident membership, military identity and unnamed-adult mortality remain open in the adult cohort ledger plan.

Community-born adult identity on founding-household adoption — M2/M7 partial

When the next eligible unnamed civilian has a recorded community birth, Adopt an existing adult now names that specific person. The adoption review shows the age derived from the original birth; the new household character keeps that birthday and its 24-village-day life clock. The birth receipt moves from civilian to named custody and closes as dead when the household member dies. Neither naming nor death performs an extra population or worker change beyond the existing household transition. Anonymous legacy adults and existing adoption receipts keep their age-24 model; version-five birth ledgers migrate to version six with no invented named links. Restore checks both sides of the birth-key/character link and their chronology. The focused scenario checks age eighteen, forged-link rejection and old-age closure. The full repository suite passes 2,068/2,068 tests; gameplay catalog validation, JavaScript syntax and wiki build/check pass. Military, membership and career identity links, unnamed adult mortality and broader demographic balance remain open in the adult cohort ledger plan.

Community-born adult custody through the finite waystation — M2/M7 partial

The version-five birth ledger and version-two migration ledger now retain exact adult birth keys on physical hardship departures, waystation arrival, later household immigration, and a turned-back trip. Each leg selects age-unknown workers first, then present age-known civilians; the existing population and worker debits and credits still occur only at physical departure and arrival. Completed household transfer receipts remain available to validate adult histories after active journeys are removed. Old version-four birth records keep their known outpost journeys, while old version-one migration saves gain empty age-known transfer lists instead of invented histories or people. A community-born adult who begins an independent career from the waystation closes known generic custody until career identity and age are linked.

The focused scenario covers birth, maturation, depleted-anonymous-pool hardship departure, transit save/restore, waystation arrival, deterministic offline replay, later immigration, turnback, completed receipt validation, and forged-list or worker-count rejection. The recovered host and finite source counts are staged in that test to force the otherwise rare age-known selection; the underlying birth, maturation and journeys use the real simulation. Exact identity through military, naming and independent careers and natural adult death remain open in the adult cohort ledger plan. The full repository suite passes 2,068/2,068 tests; gameplay catalog validation, JavaScript syntax and wiki build/check pass.

Community-born adult custody on resident journeys — M2/M6/M7 partial

Newly matured community-born adults now receive a version-four adult receipt, now migrated to version five at their actual maturation settlement. When a founder, relocation, evacuation, reoccupation or recalled resident journey needs age-known workers beyond its available age-unknown civilians, the ordinary transfer records exact adult birth keys. Departure and physical arrival or return move those receipts with the existing worker places; the journey still makes the only population and labor debits and credits. A version-three save migrates already matured adults to unresolved custody because their later movements cannot be reconstructed, without granting or removing anyone. Recruitment, reinforcement, adult adoption, resident membership and independent careers close known civilian custody when they exhaust anonymous adults, avoiding a false claim that the person remains at home. Identity and actual age through those conversions and natural adult death are still open in the adult cohort ledger plan.

Command-funded tests cover an outpost birth, maturation, owner succession, paid full evacuation, transit restore, arrival conservation and forged adult transfer rejection. A home birth test covers version-three migration and adoption of the final generic adult. The full repository suite passes 2,066/2,066 tests; gameplay catalog validation, JavaScript syntax and wiki build/check pass.

Present-adult requirement for community family growth — M2/M7 partial

Family-growth readiness and each daily eligibility check now require two unnamed civilian adults actually present in the community. Workers committed to outpost, military-supply and other traveling crews no longer satisfy that requirement while away; the count uses the same current availability rule as adult adoption. The owner can still enable the policy while blocked, but preparation cannot advance until the adults return. A focused birth test verifies that one away worker reduces two available adults to one and blocks readiness. The community-birth suite passes 7/7. The version-five journey receipts above now track a matured adult through resident transfers and the waystation; adult cohort ledger design retains the army, naming, career and death links needed before age-known adult mortality can be enabled.

Community-born children on founder, relocation and reoccupation journeys — M2/M6/M7 partial

Community-born dependent children can now use the two existing dependent places on a paid founder expedition, reoccupation or household relocation. A complete outpost evacuation still takes all present children; a recalled journey returns its selected children with the same residents. The origin birth receipt keeps every transfer and final location, including repeated moves, while the existing transfer ledger names the children in each physical trip. Population, civilian labor and stock still change only under the ordinary journey rules, and an eighteenth birthday in transit grants no worker until the destination's household check. Hardship departure and named-child adoption continue to protect these dependents.

The version-three birth ledger migrates version-one local and version-two local/transferred children into exact histories without another population grant. Restore rejects mismatched transfer lists, locations and chronology. Command-funded scenarios exercise a home-born child founding a camp, home-to-outpost household relocation, outpost evacuation and paid reoccupation, recalled reoccupation, save restoration and forged custody. The full repository suite passes 2,064/2,064 tests; gameplay catalog validation, JavaScript syntax and wiki build/check pass. Initial unnamed adults and matured generic adults still lack a complete age/death and movement ledger; broader demographic balance and the full M0–M8 goal remain open.

City-scale regional production coordination — M3/M7 partial

The existing reviewed Regional overview production plan now accepts four distinct producers while the founding home currently has earned City status. Village and Town homes retain the three-producer limit; a later downgrade restores that limit without cancelling local mandates already authorized. The owner can compare all four instructions over one or six home days and then submit them atomically. Each producer still uses its own stock, staff, recipe, service, revision, source reserve and cumulative input allowance. Neither comparison nor authorization grants goods or workers. This is a bounded City management improvement, not a regional capital or a shared warehouse.

The focused regional-production suite covers the lower-stage rejection and unchanged world; the command-funded City integration covers an earned City, a four-row copied-world comparison, actual four-row command and restored save, plus rejection of a fifth row. The UI uses the same current home stage as the server. No save migration is needed. The full repository suite passes 2,061/2,061 tests; gameplay validation, JavaScript syntax, whitespace and wiki build/check pass. Wider regional operating coordination, durable material balance and the full M0–M8 objective remain open.

Opt-in community births and civilian maturation — M2/M7 partial

SET_COMMUNITY_BIRTH_POLICY is a reviewed order for the founding home or an established, populated outpost, off in migrated saves. It grants nothing immediately. Every daily check requires two existing unnamed civilian adults, health at least 80, three stable needs days, a spare permanent housing and water place, eligible local food output for the larger population plus services, and its protected food reserve. Twenty-four consecutive eligible checks create one unnamed dependent; a blocked day resets the streak and pausing clears it. Birth increments population once without labor or stock. Immature born residents are protected from generic hardship departure; founder, reoccupation and household-relocation journeys can select them within their existing dependent places, while complete outpost evacuation carries all resident children. Birth receipts retain origin and every physical transfer or return. Maturation at eighteen adds one worker in the child's current community without another person or office, after arrival if the birthday passed in transit. The private People card shows local births, present dependents, arrivals/departures and the next maturity check. Version-three per-settlement receipts migrate disabled older saves and version-one/two births, then validate physical transfer lists, repeated moves and age chronology. Focused tests cover paid home housing, paid outpost headworks, reviewed authority, birth timing, physical evacuation, arrival, maturation, pause/restart, private reads, forged custody and direct/offline equivalence. The original unnamed population still lacks a retrospective age/death clock; long-term regional demographic balance remains open.

Verification: the repository run with evacuation custody passed 2,060/2,060 tests. A final guard requiring a caught-up outpost household clock was then checked in the affected outpost suites (17/17). The broader community-birth, outpost, continuity and long-horizon City checks pass 30/30; npm run validate:gameplay, wiki build/check, JavaScript syntax and whitespace checks pass. The original unnamed population still needs a natural age/death ledger and long-term regional demographic balance.

Named household birth and dependent maturation — M2/M7 partial

The founding household can review a two-guardian birth plan after building real spare housing and sustaining health, basic needs, water, local food output and reserves. Twelve consecutive eligible village-day checks create one named dependent; a failed check resets progress and guardian death or review cancellation ends it. Planning creates no person or supplies. A birth increments population once without granting a worker, office or goods; at age eighteen the same dependent becomes one civilian worker under the existing household clock. The Family & continuity card exposes capacity, progress and receipt history. Versioned save migration starts old households with no births and validates later receipts. Focused tests cover a paid house, delayed birth, no labor grant, adult maturation, mixed adoption history, direct/offline equivalence, restore and forged-ledger rejection. The full repository suite passes 2,054 tests; gameplay catalog validation and wiki build/check pass. Pre-existing unnamed cohort aging and stable regional demography remain M7 work.

Festivals — wider M4 Culture partial

Festivals extends the Culture branch beyond the audited first eighteen nodes. The live City → People card shows whether a charter owner can fund a gathering, its eight-food/two-timber cost, two-worker commitment, next household-check time and last outcome. Two village practice days and ordinary research precede separate one-worker adoption. Funding spends real stock above the food reserve and within the public timber budget; at the next check, met food/water/shelter needs plus an active organizer and sound commons add up to three health recovery. Failure records zero bonus and does not refund spent supplies. A seven-day interval prevents immediate repeat. Existing saves migrate to an empty validated ledger; pending payments survive reload and offline replay. School and theater performances now follow this first cultural event; the wider cultural calendar, touring performers, patronage and civic-identity systems remain open.

Verification: test/festivals.test.js covers paid stock and labor, recovery, service loss, the health cap, old-save defaults, malformed ledgers and offline replay. The affected research, population, catalog, refuge and City checks pass 44/44. The final full repository suite passes 2,052/2,052; npm run validate:gameplay reports 32 technologies. Wiki build/check and whitespace validation pass.

Initial eighteen-node M4 content gate — verified

The planned first three topics in each of the six branches exist in the authoritative knowledge graph, have valid prerequisites and enable an application separate from learning. This closes the initial eighteen-node content and working-choice gate, not the wider M4 program of specialist mobility, larger institutions, wider diffusion/licensing and more advanced policy choices. The audited applications are:

Learning does not itself adopt a program or enact a care/refuge policy; test/knowledge.test.js, test/care.test.js and test/refuge.test.js check these boundaries. A focused run of the eleven cited application suites passes 113/113 tests. The previous source-complete full repository run passed 2,048/2,048; this audit changes documentation only. The other M0–M8 acceptance gates remain in scope.

Regional forestry workforce exception — M7 partial

When a standing selective harvest is blocked because fewer than two workers are actually free, owner-only Regional overview now names the workforce shortage, shows the free count and next-household eligible food threshold, and opens the affected community's People controls. The player can review migration and then producer staffing from that screen. A higher idle-worker floor with enough free crew remains targeted to Land & water for mandate review. No automatic harvest, migration, resource, rights or save rule changed. The City integration replay covers both real worker-loss boundaries and the retained policy-floor test keeps its Land target.

Validation: focused City, forestry and regional-overview scenarios pass 21/21; the full repository suite passes 2,048/2,048. Gameplay validation, regenerated wiki checks and whitespace validation pass.

Exact migration food-capacity guidance — M2/M7 partial

The owner-only City People → Household migration card now shows the resident count after the next four-person household, currently eligible food output against the exact admission requirement, and stored food against the actual reserve requirement. Its Inspect food production link opens the producer controls. The server uses the same live population.conditions quantities for admission and for this read-only projection, so a target-held field cannot appear sufficient merely because the warehouse holds food. The long City journey confirms a real labor shortage, an insufficient food-output check, reviewed target and staffing changes, one finite waystation household and restored two-worker forestry. No migration policy, stock, population or save-schema rule changed.

Validation: focused City, population and navigation scenarios pass 15/15; the full repository suite passes 2,048/2,048. Client syntax, gameplay validation, regenerated wiki checks and whitespace validation pass.

Multi-generation City stewardship and recovery through day 2,600 — M2/M3/M7 partial

The command-funded City-to-three-outposts scenario runs for 1,000 unattended village days after establishing three locally fed camps. All four communities stay inhabited and fed; the home retains Public accounting, Regional institutions and timber service while standing forestry reaches 198 of 200 orders. An adopted existing adult, appointed before the absence, survives the ruler's natural death. On return the player embodies that successor and accepts lawful public handover without a founding or labor grant. Raising the starter food target permits one real four-person household from the finite waystation, adding two workers. A running automatic harvest now reports waiting for its own crew rather than a fresh labor shortage; Regional overview reveals the near-spent allowance. A reviewed switch to ongoing daily checks retains the 200-order stored cap and all 198 earlier orders; it creates no materials. The player adopts and appoints a further successor. At day 1,462, the current ruler dies and two-person harvests stop with only one free worker. After another handover, the player adopts and appoints a third successor, raises both food-plot targets to 1,200, assigns one more starter-field worker and temporarily reopens migration. A second finite household arrives and restores harvest labor. Later real harvest orders pass the retained 200 total while all four communities remain fed, with home services active, through day 2,600; after another natural death the third successor completes lawful handover. An unchanged branch loses Regional institutions when timber runs out. Offline replay matches all four inventories and economies, production and forestry ledgers, and continuity between every intervention. This remains finite evidence; long-term equilibrium and acceptable real-time pacing are open.

Validation: the extended City, continuity, forestry and regional-overview scenarios pass 28/28; the full repository suite passes 2,048/2,048. Gameplay validation, regenerated wiki checks and whitespace validation pass.

Renewable forestry authorization and early warning — M3/M7 partial

The standing selective-harvest total can now be reviewed upward beyond the former 200-order ceiling, to at most 10,000 cumulative orders. The same owner-authorized local and coordinated regional commands retain every earlier order and still create no job or material immediately; food, labor, tree recovery, log target, storage and completed physical work remain binding. Regional overview warns privately when an enabled instruction has one to five orders left and no immediate blocker and links to its Land & water control. A reviewed higher cap or pause clears the warning. At the 10,000-order capped ceiling, the owner can switch to ongoing daily checks or use manual reviewed harvests after exhaustion. Existing version-one mandate saves keep their meaning and restore unchanged. Focused tests verify cap increases, invalid-limit rollback, preserved inventories and ledgers, regional authoring, private warning and save equivalence. This extends a managed timber source; it does not establish perpetual regional balance.

Validation: the affected City, forestry, regional-plan and regional-overview scenarios pass 24/24; the full repository suite passes 2,047/2,047. npm run validate:gameplay, client syntax, npm run wiki:build, npm run wiki:check and whitespace validation pass.

270-day four-community staffing and forestry — M2/M3/M7 partial

The command-funded City route now tests its founding home and three locally fed camps for 270 unattended village days after the last charter. An earlier staffing choice of six starter growers, five second-field growers and three mill workers passed 90 days but left only one free home worker; a longer replay stopped two-worker standing harvests and lost the regional timber service after 39 more days. Reassigning to five starter growers, four second-field growers and four mill workers leaves enough free workers for two-person harvests while preserving home food and saw output. All four communities remain populated and fed with zero household shortfall, home Public accounting and Regional institutions remain active, and home timber stays positive. Forestry orders reach 85 of 200 after 90 days and 116 after 270; the additional 180 days retain at least 108 home timber. Direct offline replay agrees on all four inventories and economies and on both production and forestry ledgers. This is a bounded configuration under a finite authorization cap, not proof of perpetual balance, renewable equipment or acceptable real-time pacing.

Validation for this City extension: the focused City integration passes and the later full 2,047/2,047 suite includes it.

City timber balance and registrar pause — M1/M3/M7 partial

City → Supply chains now shows the conditional current timber balance from ready workshop output, assigned recipe inputs and active service upkeep. When Land registry is active, the timber note identifies its actual daily cost and the temporary suspension choice. The same source graph lists the new coin log/timber import offers with live waystation stock and owner-only communal coins, alongside barter sources. A command-funded City test pauses the registrar after early land registration and re-enables the already installed program before later claims. The main 550-timber reserve takes 158 village days, versus 237 when the registrar stayed active. An unchanged-snapshot continuation with the registrar active has not reached that stock at the same date, and both branches issue the same number of real standing harvests. The route still depends on actual logs, workers, food and a staffed precision sawmill; no stock or title is granted by suspension. Solo material pacing, durable regional supply and the wider M0–M8 gates remain open.

Validation at the preceding rule change: the affected City journey, coin market, supply-chain and navigation tests passed 19/19; the full repository suite passed 2,045/2,045. npm run validate:gameplay, client JavaScript syntax, wiki generation/check and whitespace validation passed. The extended deterministic City route now uses 116 of 200 authorized harvests after 270 four-community days.

Two-sided finite log and timber market — M3/M8 partial

The waystation now posts paid Buy logs with coins and Buy timber with coins offers at one and two coins per unit. A buyer needs its own earned communal balance and can reserve only logs or timber actually delivered to the shared depot. The existing physical caravan reserves stock and money at dispatch, moves goods home through a real return, and uses the existing refund, conservation, receipt and restore rules. The depot starts with neither material. This creates a funded path between productive settlements; it does not by itself shorten the isolated City timber buildup without another real seller. Focused coverage checks zero-stock rejection without mutation, two real seller deliveries, buyer earnings, separate purchases, custody, restored underway jobs and conserved coins. Broader market supply and solo pacing remain open.

Validation: focused catalog, coin-market and logistics tests pass 31/31; the full repository suite passes 2,045/2,045. Static gameplay validation reports eight coin offers, and the authored plus generated wiki check passes.

Outpost food-plot City guidance — M1/M2/M6 partial

The outpost's Frontier & charters screen now points to a currently suitable owned Community food plot and its exact live construction cost, missing local stock and first blocking requirement. It links to the existing map and Buildings review; no goods, plot or workers are reserved. After construction, the same card shows an existing field's stage and staffing. The server derives the candidate from constructionRequirements and rejects land, rights and occupied plots; evacuated sites receive no active-field suggestion. Focused tests cover standard and optional founder loads, read-only costs and the built field transition. This is player guidance for local feeding, not an automated construction order or guaranteed future yield.

The affected City navigation/projection, integrated journey, outpost and multiplayer suite passes 33/33. The full repository suite passes 2,044/2,044 after this projection/UI addition. npm run validate:gameplay, client JavaScript syntax, npm run wiki:build, npm run wiki:check and the focused whitespace check pass.

Self-feeding first-outpost integrated journey — M2/M3/M5/M6 partial

test/gameplay-journey.test.js now funds an additional real home woodland harvest and mills enough timber to select the optional food-plot founder cargo from the ordinary 40-person start. The founder journey still transfers eight actual residents and assembles its paid camp; the extra timber leaves thirty on site. Four local workers build a Community food plot on a legal moist field with local food and one of the camp's tools, then two residents staff it. The journey retains its real crop choice, scout patrol and trade protection, forestry bottleneck, soil improvement and irrigation, finite tool imports, outpost harvest, food/tool delivery and returned logs. A following thirty-home-day no-order interval checks both settlements for zero household food shortfall and positive final food. Direct offline catch-up matches both inventories, and the save restores exactly. This strengthens the first integrated M0–M6 target without claiming indefinite economic balance or completing later milestones.

The focused integrated journey, outpost, production-recipe and multiplayer suite passes 25/25; static gameplay validation passes. The full 2,044-test suite predates this test-only journey extension; source rules remain as validated in that run.

Optional food-plot timber with founders — M2/M6 partial

City → Frontier & charters offers a second reviewed founder expedition carrying ten additional timber from the home village. The normal 60-timber cargo spends forty on camp assembly and leaves twenty; the paid 70-timber cargo leaves thirty for a Community food plot after the same physical trip. The server quotes each choice separately under current stock, food reserve, budget, route and 300-weight limits. The actual command accepts only zero or ten additional timber, preserving the standard default and old save shape. A focused outpost test verifies read-only quotes, invalid-load rejection without mutation, home payment, carried cargo, camp arrival stock and restore. Founders still grant no food production, and the City guide's supplied-outpost step still needs a separately arrived food delivery. The City integration run exercises both valid routes: standard founders plus a paid timber trip at the first camp, then the optional load at the second and third.

Validation for this increment: npm test passes 2,044/2,044 tests. npm run validate:gameplay, npm run wiki:build, npm run wiki:check and the focused diff whitespace check pass.

Three locally fed outposts — M2/M3/M6/M7 partial

Extending the command-funded City journey exposed a practical failure: founder cargo alone left the first two camps at zero food with eight missed meals each by the time the third was founded. The scenario funds a separate ten-timber carrier delivery for the first camp and selects the paid extra-timber founder load for the second and third. Each camp spends thirty local timber and food on a Community food plot, uses its own four-person construction crew and staffs two residents there. The third retains its separately receipted 16-food home delivery. After the last charter, all three camp fields receive a 160-food target through the founding home's active Public accounting and Regional institutions. The owner suspends Land registry after the final title and resumes bounded home selective forestry. The current staffing is five starter growers, four second-field growers and four mill workers. This keeps enough home workers free for standing harvests while the mill supplies the two remaining timber-consuming services. The earlier six/five/three staffing passed 90 days but blocked harvests 39 days into a longer replay. The revised route keeps all four communities populated and fed without household shortfall for 270 checked days, with active home services and actual new forestry orders. Direct offline catch-up agrees on every warehouse, economy and both mandate ledgers. City status later falls as founders leave, while all three titles and fourth-dispatch over-capacity rejection persist. This is a finite managed path, not proof of perpetual wood, food, tool or route balance.

The earlier 90-day extension passed a focused 40/40 City, outpost, registry, settlement-development, recipe and three-settlement suite. The newer 270-day test-only extension passes its focused City integration test; source rules are unchanged from the full 2,045/2,045 suite.

Joinery timber yield — M3/M7 partial

The existing Joinery program unlocks Precision saw timber at a lumbermill. At full four-worker staffing it consumes four actual logs for four timber on the normal village-day cycle; the existing default remains four logs for three timber, including in older saves. Selection resets a full cycle and grants nothing immediately. An inactive woodwright blocks the selected alternative until Joinery is restored or the owner selects the default recipe. The command-funded City journey learns Joinery after paid tool imports and before its main timber accumulation, then selects default sawing before suspending that service for migration. Precision sawing alone reduced the measured main reserve from 454 to 237 village days; later registrar suspension brought the updated route to 158. The current 270-day four-community continuation issues 116 of 200 authorized standing harvests, funds three camps and retains the previously verified custody and City-decline behavior. The additional early tool shipment is deducted from finite waystation stock; later local smithing supplies the remaining need. Focused recipe and City tests check material deltas, service loss, restore and the paid route.

Validation after the final rule change: npm test passes 2,043/2,043 tests, including the previously sensitive archery supply path. npm run validate:gameplay reports 39 buildings, 31 technologies, 29 recipes and 62 resources. The generated wiki rebuilds and passes freshness verification.

Earned City stage and conditional third outpost — M1/M2/M7 partial

A chartered Town earns City after three consecutive daily checks with 56 actual residents, six local household food days, all operating Town capabilities and active Regional institutions. Three failing checks lower City to Town, with independent City and Town streaks and intact people, goods, paid work and retained titles. A City with active Land registry, Regional institutions and a staffed sound registry office can found a third surveyed outpost under the existing paid route and expedition checks. Losing those conditions immediately reduces capacity for new dispatches; existing links remain. The marked development ledger moves from version one to two with neutral Town-save migration and earned-stage validation. City Overview and regional exceptions expose the criteria.

The command-funded test/city-integration.test.js follows a woodland start: it builds the registry before filling the inner charter, surveys and pays for forest and field edges, uses bounded standing selective harvest and mills completed real log jobs, holds food near a reviewed warehouse target, builds a school and framed housing, then admits finite travelling households. It earns City, sends two paid founder teams, accounts for a named elder's ordinary death by building more permanent housing, and re-earns City before founding and physically supplying a third camp. The finite waystation tool stock runs out; a staffed charcoal kiln and smithy turn actual logs and imported iron into the final tools. Population across the home and three camps is conserved, only one founding grant exists, the third food delivery has its own physical arrival briefing, and the three links restore intact after City decline; a fourth dispatch rejects without mutation. The earlier seeded-material stage test still isolates promotion and service recovery. Pacing remains open: the main timber reserve took 158 village days under a 200-order standing forestry cap; the 270-day four-community continuation reaches 116 ordinary harvest orders. This does not establish a sustainable long-term three-outpost material balance. Regional capital and wider M0–M8 gates remain open.

Coordinated regional production limits — M3/M7 partial

APPLY_REGIONAL_PRODUCTION_PLAN applies exact target, pause or continuous rows for two or three distinct producers across at least two established owned linked communities from the founding home. Each row uses the existing local production mandate, current recipe, Public accounting service, stock/source reserve and cumulative input allowance; changed producers restart a full local cycle without granting food, materials or workers. Validation checks local revisions and catch-up. The world command rolls back all rows and events if one later configuration fails. Regional overview exposes owner-scoped local producer settings and a one/six-day copied-world comparison; the City review requires the same draft and world revision. Focused tests cover two actual fields, retained local stock, rights, stale/duplicate/single-community rejection, second-row rollback, restored ledgers, retained batches on pause and six-day forecast-to-live equivalence. No save schema is added. This does not yet plan cargo, staffing and targets in one combined transaction or prove long-term regional balance.

An isolated local Edge check showed the home and camp producer cards, target and pause drafts, six-day comparison result, final review and cancellation, and review invalidation after editing a compared target. That browser seed had future fixture deadlines relative to the local server clock, so its unchanged warehouse horizon is not evidence for elapsed production; the command-built six-day forecast-to-live test supplies that evidence.

Coordinated regional selective forestry — M3/M7 partial

APPLY_REGIONAL_FORESTRY_PLAN accepts exact authorization or pause rows for two or three distinct owned linked communities from the founding home. The existing forestry configuration remains authoritative for each local plot, service, worker floor and retained lifetime cap; the world command rolls every row and event back if any fails. Regional overview exposes each owner's forest options and provides one/six-day copied-world comparison before a separate reviewed live order. Forecast results show per-community warehouses, workers, storage and new local harvest checks. Focused tests cover actual home/camp mandates, no immediate logs, stale/foreign/duplicate/invalid rejection, a failure during the second configuration, restore and forecast-to-live equivalence including a real harvest order. No save schema is added. Indefinite regional balance remains unproven.

Quantity targets for crafted supply chains — M3 partial

City → Supply chains derives item goals from the positive outputs of actual recipe and funded-project projections. Players can trace 1–1,000 units of a crafted good or any listed resource; the existing source branches scale their whole-batch input estimates against the selected quantity and current local stock. Building and troop quotes remain fixed. This is a read-only interface calculation with no new order, reservation or save field. The feed and horse resource notes now describe implemented draft routes. Source alternatives can share inputs, workshops and workers; actual production, transport and purchase still require their ordinary controls.

Advance governor allowance exception — M7 partial

Regional overview now checks each enabled governor route's most recent paid dispatch against its remaining cumulative allowance. If another identical committed load cannot fit, the home receives an attention-level issue naming the linked outpost, limiting resources, remaining units and last load's spending. It appears before a later demand is necessarily blocked, links to the existing Frontier & charters governor controls, and disappears when the player raises the allowance or pauses the route. The private read moves no goods, workers, jobs, deadlines or budgets and does not assert that future cargo will match the last trip. A focused test checks an exactly funded real dispatch, read purity, restored projection and warning clearance after a reviewed budget increase. This improves M7 exception management; it does not renew allowance or settle long-term supply.

Finite unattended three-community governor exchange — M2/M6/M7 partial

The command-built three-settlement fixture now has a second, no-further-order interval. The player temporarily fully staffs the home field and opens migration; two actual households arrive from the finite frontier source, adding eight home residents and four workers. After closing migration, a six-day food reserve policy and five-field/three-mill staffing leave room for the home forestry crew and real governor carriers. Both camps stop excess foraging while two existing 250-food field targets protect local meals. The home authorizes a separate log-collection governor route to the first camp and a food-collection route to the second, with retained outpost stock, finite cumulative material budgets and the normal physical travel checks. In sixty further home days without player commands, the routes dispatch at least twice each, multiple log returns reach the home warehouse, all three local forestry ledgers issue jobs, every checked community has food without household shortfall, home timber remains above zero, and Public accounting plus Regional institutions remain active. A matched no-route world has less home food. Direct offline advancement matches all three inventories, governor and forestry ledgers, and home program state. This closes a finite unattended multi-camp integration example, not indefinite equilibrium, infinite equipment/food sources or autonomous policy authoring.

Linked-home production accounting and repeated three-community exchange — M3/M7 partial

regional-accounting.service now provides the same owner- and established-link-checked local-or-home Public accounting decision to standing forestry, target production and raised production priority. The home path also requires active Regional institutions. production-mandates rechecks the service at authorization and every target batch; priority falls back to normal order on service loss while retaining its selected level. Old mandate/priority saves need no structural migration. A focused owned-outpost test covers owner authority, no local accountant, target/priority authorization, home-service loss, rejected new spending, fallback and restoration. The City producer projection reports its accounting source and missing-service reason.

The command-built three-settlement regression uses only paid founding, physical timber deliveries, construction, staffing, home harvest/milling, technique suspension/restoration, camp food targets and three standing forestry instructions. It catches a full camp's Regional overview storage exception and resolves it by ending continuing foraging while the field target retains meal production. Extending the run exposed home timber upkeep overtaking a one-worker mill by day fifty; staffing a three-worker mill exposed the competing need for field food and idle harvest/carrier labor. A player-managed allocation starts a home forestry job with four field workers, then raises the field to five and temporarily drops it to two for each of six carrier trips. Three return rounds from the two camps escrow and physically bring home eighteen logs and twelve food per trip. Sixty checked home days have no household food shortfall, keep Public accounting and Regional institutions active, issue ordinary harvests in all three communities, and clear the first camp's storage issue. The trips finish and segmented offline replay matches all three warehouses, home program state and forestry ledgers at each intervention. Carrier travel advances the world between those sampled days. This is bounded M7 evidence, not proof of unattended balance, renewable tools/carts or autonomous regional logistics.

Delegated home accounting for outpost forestry — M2/M7 partial

An established owner-linked outpost now qualifies for its local SET_FORESTRY_MANDATE when either its own Public accounting is active or both Public accounting and Regional institutions are active at its founding home. The home maintains those existing paid services; local outpost food, workers, forest plots, warehouse and harvest job rules do not change. A later service lapse blocks new daily delegated orders, while an already issued crew continues and all counted orders remain counted. The City projection identifies the accounting source. Tests cover authority, service interruption and resumption, local inventory custody, six-day copied regional forecast and stepped versus direct offline replay. This removes a separate outpost-office prerequisite for bounded forestry, while long-term fuel/cart balance remains open.

Regional comparison of one forestry instruction — M3/M7 partial

economy-forecast.project accepts a revision- and character-bound regional-forestry proposal for one linked owned charter. It applies the exact SET_FORESTRY_MANDATE payload to a copied world and compares one or six home days with current orders across all linked warehouses and regional issues. The City order review shows per-community food, logs, timber and free workers, each daily check and the number of new normal harvest jobs. A pause can be compared while an issued job continues. No live stock, jobs or events change during comparison; authorization remains separate. Focused tests compare the six-day forecast with actual simulation and reject stale, foreign and invalid drafts. Multi-policy regional optimization and indefinite forestry throughput remain open.

Bounded standing selective forestry — M2/M3/M7 partial

SET_FORESTRY_MANDATE now authorizes an owner-selected list of one to eight natural forest plots in one charter, a local log target, an idle-worker floor and a cumulative cap of at most 200 ordinary harvest orders. City → Land & water displays eligible plots, the current check reason, cap usage and recent decisions; Regional overview lists the instruction and flags a blocked check. Each household-day check can issue one normal two-worker harvest job only after Public accounting, food, labor, existing queue, forest maturity/health/floodwater and complete expected-yield storage checks. Logs arrive only on job completion; the selected trees must recover before reuse. The authorization does not stockpile labor or grant goods, and pausing leaves an existing paid job to Orders. Old saves migrate neutrally, while forged marked jobs and invalid ledgers reject. Focused tests cover the real command/job/log lifecycle, rights, worker/plot/storage blocks, lifetime cap, migration, restore and stepped/offline equivalence. This removes repeated manual harvest commands from an optional bounded local workflow; the ninety-day coastal regression now uses this standing instruction without manual harvest commands, and continuous multi-settlement forestry, cart inputs and full M7 sustainability remain open.

An isolated live City session verified both owned-plot controls, a reviewed 30-log/two-order authorization, no immediate job, the pause review and persisted settings after reload. The simulation check remains the command-built ninety-day journey below.

Managed extended coastal recovery — M2/M3/M6/M7 integrated slice verified

The command-built coastal regression now extends the earlier three governor dispatches through two thirty-village-day periods followed, after additional preparation, by a ninety-day period. It uses existing commands only: suspend optional timber-drawing services while four real selective harvests and a staffed mill rebuild the home reserve; keep the camp's two-worker field operating while pausing fish catch and preservation; then operate Record keeping, Regional institutions and Field logistics for thirty days. That second period retains all three services but draws timber down from 72.5 to 15.5, exposing insufficient original forestry throughput. The player imports finite tools by a carrier trip, shifts two mill workers to free a physical survey team, registers another surveyed forest edge at real cost, and suspends Land registry after the claim. The home then sets an existing Public-accounting food-production mandate to a 1,200-unit warehouse target, leaving room for logs. The bounded standing selective-harvest instruction chooses the three owned natural forest plots and issues ordinary two-worker jobs without further manual harvest commands during the following ninety days. The three needed services remain active, with timber and at least 100 free warehouse units remaining. The camp continues to hold food above its local reserve.

After the seasonal checks, the camp pauses its field to make depot space. The home imports finite iron, repairs the worn cart at the staffed cartwright with real timber and its last tool, harvests and mills a new service reserve, and reduces home field staffing to free two carriers. A fourth governor dispatch reserves renewable logs, physically delivers them, and returns a worn cart. The camp restores field, fishery and smokehouse staff; delivered logs support a new preserved-fish batch. The entire ninety-day interval matches direct offline advancement for home and camp inventory, active services, the forestry mandate and physical jobs. At its boundary, six further unattended days match stepped inventories, service state and both retained mandates. The fourth delivery also agrees with offline replay, and the later complete save restores exactly. This is a player-configured finite route, not proof of perpetual fuel, iron, tools, fish exports, depot headroom or equilibrium. Full M0–M8 gates remain open.

Timber-service continuity warning — M3/M7 planning slice implemented

Regional overview now raises Timber services risk interruption while an active community service is drawing timber, its warehouse holds less than six current days of that demand, and either ready staffed mill output falls below demand or stored logs cover fewer than three assigned saw cycles. The account-scoped read reports current timber, active service demand, ready mill output, logs and nominal saw coverage; it makes no order or save-state change. A focused regression checks the early alert, its Supply chains link, stock recovery and read purity. Future harvest, imports, competing consumers and changed schedules are excluded. The later managed path verifies ninety more days and a fourth trip; perpetual home-and-camp balance remains unproven.

Long-range governor exchanges — M6/M7 logistics slice implemented

Governor exchange now authorizes an owned outpost route of twenty-five to thirty-six walking hexes when the founding home has active Field logistics and a required-handcart transport policy. The ordinary twenty-four-hex range remains for a home without them; more than thirty-six remains outside governor range. No cart or goods are reserved by authorization. Each later check applies the existing physical quote, which needs a serviceable home cart, actual two-person workforce, travel food, stock, return cargo room and finite budgets. Travel wears the borrowed cart; another trip waits for repair or another real cart. Losing Field logistics or the cart policy blocks later checks and leaves funded trips intact. City reports route length and the missing prerequisite before review. A focused twenty-eight-hex test covers authorization rejection, unlocked policy, cart shortage, paid dispatch, worn return, blocked repeat, capability loss, replay and restore. An isolated live Edge check shows the twenty-eight-hex card, its missing Field logistics blocker and a disabled review at 320, 390, 640 and 1440 pixels.

The command-built coastal test now continues past the manual return. The home researches and adopts Joinery, Public accounting, Land registry, Regional institutions, Scouting and Field logistics; staffs the required registry and lodge, imports real iron and tools, builds a cartwright, makes a cart and selects handcart transport. A governor sends a first fuel load over twenty-eight hexes, and its cart returns worn. The village reduces camp-field staffing to release depot space, pays for cart repair and then sends a second physical load containing both food and logs; the staffed smokehouse produces another preserved-fish batch from the delivered fuel. The home also sends a paid survey and registers a neighboring forest edge, harvests its actual logs, mills the timber, temporarily switches to carrier transport to import repair tools, repairs the second worn cart and restores the required handcart policy. A third governor dispatch reserves fresh dated preserved fish, travels home and credits it to the warehouse; offline replay matches the fish receipt and home inventory. Because fish close to expiry can spoil on the return, the verified path releases smokehouse staff to conserve delivered fuel, lets older fish expire and makes a fresh batch before the collection order.

This exposes actual constraints: institutional timber upkeep can outpace one mill's output, and a full 400-unit camp depot can block resupply even while fuel is missing. The test uses ordinary suspension, worker, charter, transport-policy and target orders to handle them. A separate full-depot regression confirms the governor's blocked reason names Destination storage for each affected material without spending. The sequence proves a finite three-trip exchange using an additional renewable woodland plot; it does not yet prove a stable multi-season balance of home timber, cart repair, camp meals and fish output.

Custom reviewed outpost cargo — M3/M6 transport slice implemented

The home City → Frontier & charters card now has Plan a custom supply trip beside the existing quick offers. A player can choose up to three different goods on each leg and enter whole quantities, then Quote custom trip. A new owner-scoped WebSocket read asks the authoritative outposts.supplyQuote for actual route food, stock, collection reservation, carrying weight, storage, equipment, draft feed and dated fish constraints at the current world revision. Review custom trip uses that exact quoted cargo in the existing DISPATCH_OUTPOST_SUPPLY review and live command; changing the draft or world invalidates the quote. Command-built coastal tests check a read-only combined food/log quote, unauthorized and stale rejection, a physically completed fuel trip, and a separate food-for-preserved-fish collection that returns dated goods home. Isolated live Edge verification checks selecting a custom load, server quote, review/cancel/confirm, accepted physical dispatch, no page errors and 320/390/640/1440-pixel widths. This creates no automatic refill or new save state. The coastal route later qualifies for the extended governor rule described above; larger multi-trip logistics planning remains open.

Outpost input coverage at home — M3/M6 planning slice implemented

City → Frontier & charters now shows stock-only production-input coverage on each linked outpost's home card. It derives demand from staffed operational structures and their selected recipe at the current staff ratio, then reports local stock, per-cycle demand and nominal cycles covered. A coastal smokehouse with no logs shows zero coverage even if its fuel is travelling; after real delivery the row updates from the destination warehouse. The command-built fire interruption tests both states. This read-only aid neither dispatches cargo nor predicts competing consumption or future local output. The released coastal route is twenty-eight walking hexes: manual deliveries work immediately, and the advanced governor path above can later maintain finite targets. Full regional sustainability remains open.

First outpost return completes a two-way exchange — M6 onboarding slice implemented

After the home guide's real food-delivery objective, Bring a resource home from the outpost now completes when a non-food good collected on a physical supply trip is actually credited to the home warehouse. The return briefing names the outpost and credited goods. Reserving collection stock, carrying it home, an outward recall and storage-blocked units do not earn a receipt; a later partial unload can earn one for the amount actually stored. The command-built integrated village journey now verifies twenty locally harvested outpost logs arrive home, with the home mill deliberately released from staffing for an exact balance check. Focused tests cover dispatch, exchange, return, recall, save restoration and durable guide progress. The receipt does not prove all future collected stock was locally produced; broader outpost specialization and the full M0–M8 gates remain open.

Goal-focused supply chain trees — M1/M3/M5 City planning slice implemented

City → Supply chains now lets the player work backward from a specific building, item project, troop step or material. The tree starts with that action's current catalog cost, follows up to three levels of actual recipe/project outputs and their input materials, and shows local stock, protected food, apparent gaps, local workshop assignment and finite physical import options. Separate source branches are alternatives; one displayed batch estimate applies only to that branch, not to a combined funded plan. Recipe branches link to current worker, producer-map, recipe and building controls; project and import branches link to their existing reviews. Source-free material lines open land inspection. The existing resource trace exposes additional sources and actual producer blockers. This remains a navigation layer with no new order, automatic purchase, stock, save field or production rule. Earlier live Edge checks covered bricks → kiln → clay/logs, militia training → crafted kits, barracks materials, unchanged world revision, no page errors and 320/390/640/1440-pixel layouts; the added source links still need their own browser check. The complete balanced supply chain and full M0–M8 gates remain open.

Six navigable technology paths — M4 City presentation implemented

City → Research & adoption now presents the existing 31 authoritative topics as six expandable Building, Culture, Politics, Religion, Army and Agriculture paths. Each path orders topics by prerequisite tier and shows learned and operating counts; each topic shows its live research/adoption state and names requirements from other branches. Selecting a topic moves focus to its existing live cost, institution, blocker, manuscript and action card. No technology, effect, stock, research timer or save field changes. Cross-branch prerequisites remain visible rather than implying that each path is independent. A live Edge check verifies all branches, a Building topic linked to Politics, focus navigation, unchanged world revision, no page errors and 320/390/640/1440-pixel layouts. The full M4 content and M0–M8 gates still require their wider acceptance audit.

First supplied-outpost objective requires delivered food — M6 onboarding correction

The home village's Establish a supplied outpost objective now waits for food to reach an occupied established outpost on a separate physical supply trip. Food in the founding kit, cargo still travelling, material-only trips and delivery to an evacuated empty charter do not count. At exchange, the normal outpost journey emits a durable OutpostFoodDelivered briefing with the amount and destination; the home objective then completes, and this earned step survives acknowledgment, bounded briefing history, reload and later evacuation. No stock or people are granted. Older saves receive no invented delivery history, so their guide may ask for one new food delivery. Command-built founder, food-and-tools, sapling-only and evacuated-charter cases verify the boundary. The 2,015-test full suite passed before the final occupied-site guard; all 28 related tests pass afterward. The full M0–M8 gates remain open.

Interrupted outpost food delivery — M3/M6 acceptance evidence

A command-built home and occupied outpost now have a regression for a supply team stopped by a fire hazard on an owned route hex. The team holds paid cargo outside both warehouses while the outpost eats through its own food and records a real shortfall. Regional overview names the waiting outpost in the blocked-supply alert and shows its separate destination shortage. After a paid Fight fire order, the same team completes one delivery and returns its two workers; replay from a snapshot taken during the blockage agrees on both warehouses. This validates a disrupted physical delivery and recovery using existing rules; the hazard is staged by the test, and broader naturally occurring corridor interruptions, trade closures and the full M0–M8 gates remain open.

The coastal resource-outpost journey also verifies a production consequence: a stocked fish bed and staffed fishery keep catching, while a staffed smokehouse produces no preserved fish because its paid logs remain behind a staged route fire. A home Fight fire order allows the same provisioned team to deliver; later ordinary cycles preserve fish, and the existing collection trip returns it home. Regional overview shows the affected outpost journey, and blocked-snapshot offline replay matches both warehouse inventories after recovery. An initial trip without extra carried food returned early under the real low-provisions rule; the verified case funds enough food for the delay. This strengthens M3's blocked-route acceptance gate without inventing a new hazard or bypassing physical transport.

The City manual transport offers expose Food and log fuel (twenty food and ten logs), Log fuel (ten logs), and Collect four preserved fish as soon as one real smokehouse batch exists. Every row uses the existing server quote, review and physical dispatch. The coastal acceptance test checks these offers, then dispatches the same fuel load from a custom owner quote and later combines a separate food delivery with four preserved fish collected on the return leg. Food cargo can be consumed by a delayed team after separate travel rations run low. This is M3/M6 player-accessible physical logistics; custom cargo is delivered above, while automatic long-route supply remains open.

Governor mandate impact across the linked region — M6/M7 planning slice implemented

The City → Frontier & charters governor review now compares one exact authorization or pause with current orders for one or six home days. A copied world submits the ordinary mandate command, then runs actual daily governor checks, finite budgets and physical outpost journeys; another keeps current instructions. Authorization and pause move no goods immediately. The result shows new dispatch count, incremental gross spending, check outcomes and per-community food, health, free workers and warehouse differences. Live Confirm order remains separate, and paid teams continue after a pause. A command-built three-settlement case matches a six-day forecast with the accepted live order, including real dispatches and local inventories; pause and stale, impossible, foreign and unlinked proposals are checked without source mutation. Live Edge verifies comparison, cancellation, live authorization, reload and 320/390/640/1440-pixel widths. The complete repository suite passes 2,014/2,014 tests; wiki generation/check and gameplay catalog validation pass. Combined mandate plans and the full M0–M8 gates remain open.

One district plan compared across linked communities — M3/M6/M7 planning slice implemented

The existing City → District plans authorization review now compares its exact two-to-six-step local plan with unchanged current orders for one or six home days. One copied world submits AUTHORIZE_DISTRICT_PLAN; its ordinary scheduler later pays eligible steps through local stock, service, dependencies, resource ceilings and finite crews. Authorization itself reserves nothing. The result discloses each step's horizon status/reason and actual district commitments, alongside every linked community's food, health, free workers and changed warehouse goods. Live Confirm order remains separate. A command-built home and supplied outpost case has both dependent buildings receive real orders and matches the six-day copied forecast with an accepted live plan and restored world; stale, malformed, foreign and unlinked proposals do not alter the source. Live Edge verifies comparison, cancellation, live authorization, reload and 320/390/640/1440-pixel widths. The complete repository suite passes 2,012/2,012 tests; wiki generation/check and gameplay catalog validation pass. Cross-settlement district plans and the full M0–M8 gates remain open.

One reviewed crop across the linked region — M3/M4/M6/M7 planning slice implemented

The existing City → Research crop review now offers a one- or six-home-day comparison of its exact operational food plot and chosen crop. A copied world executes the ordinary CHOOSE_CROP order, spending two local food seeds and restarting the growing day; a second keeps current orders. The review shows the local payment and next crop deadline, then per-community prepared food, health, free workers and changed warehouse goods under the same chronological harvest, meal, processing, journey and budget rules. Confirm order remains separate. A command-built three-settlement case matches the six-day forecast with the later accepted order and restored world; stale, impossible and foreign proposals leave the source unchanged. Live Edge verifies comparison, cancellation, paid planting, reload and 320/390/640/1440-pixel widths. The complete repository suite passes 2,010/2,010 tests; wiki generation/check and gameplay catalog validation pass. Multi-crop/route planning and the full M0–M8 gates remain open.

One regional building comparison — M3/M6/M7 planning slice implemented

The existing City → Buildings review now offers a one- or six-home-day regional comparison of its exact building, plot and orientation. One copied world funds the ordinary START_CONSTRUCTION command; a second keeps current orders. The result discloses immediate materials withdrawn locally, the building's horizon stage and completion or blocking, and per-community food, health, free workers and warehouse differences. The live Confirm order remains separate and rechecks site, resources, attention, authority and revisions. A command-built three-settlement scenario supplies a dependent outpost with real timber, compares a new food field, and matches the later accepted construction and six-day regional outcome; stale, impossible, unlinked and foreign proposals leave the source unchanged. Live Edge verifies comparison, review cancellation, the Regional overview result, paid construction, reload and 320/390/640/1440-pixel widths. The complete repository suite passed 2,008/2,008 tests at this slice; wiki generation/check and gameplay catalog validation passed. Multi-building plans, multi-crop plans, routes and the remaining M0–M8 gates remain open.

Manual supply impact in the regional review — M3/M6/M7 planning slice implemented

The DISPATCH_OUTPOST_SUPPLY review now offers a one- or six-home-day comparison of that exact proposed trip against unchanged current orders. One copied world submits the ordinary supply command with the reviewed cargo, collection and optional draft animal; the other remains baseline. Regional cards compare home and destination food, health, free workers and changed warehouse goods, and disclose cargo carried and collection reserved immediately after dispatch. The estimate does not dispatch live goods or guarantee arrival. The server rejects stale, foreign, empty or impossible proposals without source mutation. A command-built three-settlement scenario matches the six-day forecast against one accepted physical order, including each local warehouse and labor total; a second scenario checks a trained horse, separate feed and reserved collection. Live Edge checks pass review, comparison, cancellation, accepted dispatch, reload and 320/390/640/1440-pixel widths. The complete repository suite passes 2,006/2,006 tests; wiki generation/check and gameplay catalog validation pass. Broader multi-order logistics and the M7/M8 gates remain open.

Reviewed cross-settlement staffing — M3/M7 planning and order slice implemented

City → Regional overview accepts two to eight proposed producer staffing changes spanning at least two owned linked communities. A one- or six-home-day comparison runs one atomic regional staffing command in a copied world and compares it with unchanged current orders. Review coordinated staffing order exposes the exact rows and horizon, then submits the same command. Each community retains its own warehouse, workers and production deadlines. Worker releases precede new assignments, so a local swap can succeed without exceeding finite labor. The engine checks every linked charter, owner, producer and revision plus destination catch-up, then commits all rows in one receipt or rolls them all back. A three-settlement test matches forecast to the accepted command; rejection, replay and worker-swap tests pass. Live Edge verification passes comparison, review cancellation, confirmed atomic order, reload and 320/390/640/1440-pixel layouts. The complete repository suite passes 2,003/2,003 tests; wiki generation/check and gameplay catalog validation pass. This advances multi-settlement planning and execution, not automated staffing or the full M7 sustainability gate.

Regional governor food aim at the destination — M7 visibility slice implemented

City → Regional overview now places a governed outpost's current household-day food aim on its own card, including desired food, local warehouse food, shortfall, funded tower-meal inclusion and current governor state. The instruction at home carries the same read-only figures. An outpost filter therefore still shows its delegated food policy and a direct link to home controls. Carried shipments stay separate until arrival; paused and blocked policies retain their honest status. A command-built outpost case verifies the private projection, pure read, restore, pause and food in transit. Live Edge City verification passes authorization, reload, outpost filtering and 320/390/640/1440-pixel layouts. The complete repository suite passes 2,000/2,000, with wiki and gameplay catalog checks passing. This improves M7 exception review without changing production, funding, jobs or saves. Full three-settlement sustainability and broader regional powers remain open.

Governor food-days targets — M6/M7 slice implemented

An authorized regional governor can now aim its main food delivery at one to twelve days of current outpost household demand, optionally adding already funded tower-duty meals. The target is recalculated at every daily check, so a changed resident count or duty schedule changes the shortage without resetting prior spending. Fixed quantity targets and nonfood cargo remain available. A due check still needs a real surplus at home, protected reserves, two carriers, route, storage, weight, shared budgets and remaining cumulative allowances; authorization itself moves nothing. Old governor mandates migrate to fixed targets with null food days and unchanged jobs or inventories; missing or forged marked food-day state rejects. A paid outpost scenario verifies waiting, then physical food dispatch and exact offline replay. Related governor, outpost, garrison and regional tests pass 66/66; the complete repository suite passes 1,999/1,999. Live Edge City verification passes reviewed approval, cancellation, reload and 320/390/640/1440-pixel layouts. Broader governor authority and the full M0–M8 goal remain open.

Natural fish-source forecasts — M3/M6/M7 slice implemented

Local and regional City forecasts now report each owned coastal source's starting, daily and final fish remaining, capacity, natural recovery rate, status and effective target-mandate floor. The numbers come from the existing copied-world simulation, so actual catches, recovery, staffing and shipments remain chronological; fish in the water stays separate from warehouse stock. Regional cards keep each linked community's source separate. A paid coastal reserve scenario verifies six daily source balances and local/regional final agreement with live and offline simulation, without changing the original world. The related coastal, City, supply and forecast suite passes 48/48 tests. Live Edge City verification passes the mandate review, local and regional source timelines, reload and 320/390/640/1440-pixel layouts. No save migration, resource grant or new production path is involved. The full M0–M8 goal remains active.

Reviewed fish-source conservation — M3/M6/M7 slice implemented

An active public accountant can now authorize a warehouse-target fishery to leave a chosen whole-fish reserve in its actual coastal bed. Each due catch is capped by fish above that floor; a partial catch is valid, and ordinary finite recovery continues. City Production and Supply chains show the effective next output separately from warehouse fish. The existing target, worker, storage, age, food and operating checks still apply. Continuous mode explicitly releases the source floor for future batches. Version-one production mandates migrate to version two with a zero reserve and no stock change; malformed or non-fishery reserves reject restoration. A paid coastal scenario verifies six controlled catches, no fish or people grant, private read purity, offline equivalence, corrupted-save rejection and explicit continuous-mode recovery. A live Edge City check passes the review, acceptance, reload and 320/390/640/1440-pixel widths. The complete repository suite passes 1,997/1,997 tests; gameplay catalog validation and generated wiki checks pass. Wider regional ecology and M0–M8 gates remain open.

Coastal fish-producing outpost — M6/M3 slice implemented

A separate deterministic released coastal worksite preserves earlier start and frontier geometry. The returning physical survey identifies one ocean fish bed, but creates no stock or title. A recorded charter and paid founder expedition move eight existing residents; only actual camp establishment activates 240 finite fish in that ocean cell, recovering at most eight per village day. Its shallow freshwater well supports twelve daily units; seawater does not. The camp receives no fish in storage and has no local forest in the current site. The player can deliver real timber and logs, construct and staff a food field, ocean fishery and smokehouse, then bring dated preserved fish home by a two-carrier journey. Restored saves reject a missing, oversized or falsely attributed outpost fish stock. The related founding/coast/frontier regression passes 58/58; gameplay catalog validation and generated wiki checks pass. The complete repository suite passes 1,995/1,995 tests. A live Edge City check passes the surveyed fish-bed map action and 320/390/640/1440-pixel widths without page errors. This is a bounded first coastal outpost, not general maritime rights or arbitrary coastal settlement; the remaining M0–M8 gates remain active.

Physical preserved-fish sales — M3/M8 supply-chain slice implemented

A staffed fish market now authorizes a reviewed sale of actual dated preserved fish to the finite waystation buyer. Two carriers and real provisions take the oldest eligible batches; the buyer reserves three coins per fish, consumes the delivered fish, and credits the local communal treasury only after the carriers return. Outward spoilage recalls the sale and releases reserved coins; original dates survive recall and blocked unloading. A versioned retirement archives older fish-market production timers, priorities and mandates without changing stored legacy tradeGoods, stock or other work. The supply view and City trade review expose the physical sale instead of another automatic material recipe. Focused market, coastal, logistics, mandate and migration tests pass 58/58; the wider fish/trade run passes 76/76. A live Edge City check passes the dated sale review, active cargo, reload, and 320/390/640/1440-pixel widths without page errors. Gameplay catalog validation passes, and the full repository suite passes 1,993/1,993 tests. Other M0–M8 gates remain open.

Worked clay and iron leases — M6 resource-expansion slice implemented

The previously stone-only paid site lease now covers actual idle clay pits and iron mines. The host selects the exact owned building; the tenant accepts and funds a four-resident expedition. Each full workday consumes 0.25 tools and extracts no more than 12 finite clay or 7 finite iron ore; rent is still paid only at arrival, and output enters the tenant warehouse only after physical return. The quote weighs the maximum load with meals and tools before dispatch. Existing stone terms, cancellation, notice, exclusivity, service and coin conservation continue. Marked version-one lease saves migrate to version two with stone material only; mismatched site/deposit/cargo is rejected. City Expansion and supply graphs now identify all three materials. Both clay and iron tests build real second outposts, bring finite timber by another player's relief caravans, execute the paid lease and restore the world; the stone compatibility suite passes. Other land/resource rights, purchases and the remaining M0–M8 work stay open.

The 43-test City, logistics, trade and lease compatibility run passes. Both new journeys also trade a portion of their physically returned clay or iron ore to the other player and reconcile the two warehouses. Clay now uses the established two-unit cargo weight in leases, outpost hauling, player trade and depot transport; an overloaded four-workday offer rejects without spending. The focused 32-test lease, trade and logistics run passes after this correction. A live Edge City check passes the exact site-material review, cancellation without an order, no page exceptions and 320/390/640/1440-pixel widths; its isolated server stops after verification. Gameplay catalog validation and generated wiki checks pass. The repository suite passes 1,990/1,990 tests; counts below are historical and not additive.

Finite recurring coin sales — M8 advanced-trade slice implemented

The bilateral schedule now accepts a fixed whole-coin price per physical round. Both parties consent before checks begin, but no money moves until a whole trip can be funded. Each successful check creates the existing sale contract, reserves only that round's buyer coins, moves exact goods by caravan and credits payment only after the seller's team returns. Buyer shortages wait without partial spending; stopping recalls unexchanged goods and refunds held coins once. Version-three schedules migrate neutrally to version four, while child prices and custody are checked against the parent agreement. The City editor and read-only projections show maximum, committed, credited, refunded and currently reserved/carried coins. Focused recurring sale, ordinary sale, fish, relief, barter and draft-route tests pass; wider advanced trade and all other M0–M8 gates remain open.

Supplier-depleted founders can renew the herd — H4 recovery path verified

A new command-driven scenario buys all 24 finite supplier animals through paid physical collection. It records mortality for 22 while preserving a cared-for founding pair, funds later purchases with actual planted and harvested woodland, sells timber for conserved coins, and trades for the needed breeding tool. With supplier stock at zero and no collection available, the founders complete the paid twelve-care-day project and produce a named juvenile that receives ordinary feed care. Restore preserves supplier depletion, dead identities and the permanent birth receipt. This verifies one complete supplier-loss survival path. Wider herd operations, animal disaster rescue and the full M0–M8 plan remain open.

A paid horse pair produces a cared-for juvenile — bounded H4 slice implemented

The first renewable husbandry path now pairs a real purchased mare and stallion with a staffed nursery, spare water, an additional caretaker and paid food, feed and tool stock. Twelve successful full-day care checks produce a named juvenile with a permanent parent/birth receipt. A matured born mare can parent a second recorded foal. Training or moving a parent pauses progress; cancellation refunds no spent inputs and preserves a 24-day mare interval. The child consumes ordinary care and matures for 30 village days before draft work. Existing version-three saves migrate to an empty version-four breeding book without new horses. Four command scenarios cover a paid purchase-to-two-birth path, exact nursery and stock custody, parent-busy pause, cancellation, authority/revision, migration, birth tampering and copied offline advancement. A related 13-file run passed 110 tests after updating two older migration fixtures to remove the new marker when constructing old saves; a subsequent breeding and regional-overview run passed 11 tests after tightening malformed-ID rejection and blocked-project wording. Headless Edge verified the People review, cancellation with unchanged stock, paid authorization, server restart, reload, the clean funded card and 320–1440px layouts. wiki:check, gameplay catalog validation and diff whitespace checks passed. The later depletion scenario above verifies one supplier-loss survival path. Broader herd operations, mounted use and the full M0–M8 goal remain open.

Explicit horse on a governor outpost exchange — implemented

A staffed regional governor can now authorize an established owned-outpost exchange with a named trained home horse and separate cumulative feed allowance. Each daily check revalidates the real animal, handcart, care, rest, feed stock, load weight and governor/shared regional budgets. A blocked check spends nothing and never falls back to human carrying. A funded check creates the existing physical two-handler outpost caravan with a version-five draft loan, feed custody and a linked governor receipt; horse and cart return for care and repair. Older governor mandates migrate to explicit human transport. Five focused paid-fixture scenarios cover real outpost acquisition and dispatch, a shared regional feed ceiling, delivered feed separated from horse feed in a mixed load, authority/revision, neutral human migration and tampered-save rejection. A 92-test related-system run passed before the added migration and mixed-load assertions; the focused file passed all five afterward. wiki:check, catalog validation and diff whitespace checks passed. Headless Edge confirmed the City horse choice, review and cancellation without spending, saved authorization, reload and 320–1440px layouts. Broader H3 recovery, breeding and the overall M0–M8 goal remain open.

Named horses on finite recurring player-trade schedules — implemented

A sender can choose a qualified home horse in the finite recurring barter or relief editor. The recipient accepts the fixed draft commitment but sees no private animal ID. The agreement binds per-round feed and a maximum; each actual round independently checks the same horse, paid care/rest, cart, feed stock, both carried loads and operating budget. Blocked rounds wait without spending or silently becoming human caravans. Funded trips retain physical exchange, return, care and cart-wear rules with separate feed custody. Version-two schedules migrate to no-horse commitments, and draft custody upgrades to version four while existing manual loans keep their meanings. Six new command scenarios cover two-player consent, a paid round, feed shortage, a later blocked round, recipient stop/return, privacy, private forecast against live simulation, migration, restore and tamper rejection. The 20-file related-system run passed 183 tests with the first three new scenarios; the remaining three also passed their focused run. wiki:check and catalog validation passed. Headless Edge confirmed the sender's reviewed horse choice, separate recipient acceptance and redaction, no consent-time spending, reload, four widths and isolated server-restart persistence; the 390px card was inspected. The separately implemented governor draft route is recorded above; breeding and broader recovery remain open, and the M0–M8 goal is still active.

Trained horses carry accepted bilateral player trades — implemented

A one-time barter, coin sale or relief contract that another player accepted can now dispatch with the sender's explicitly chosen trained home horse and serviceable handcart. The quote includes separate animal feed, human provisions, both carried loads and road-adjusted time. Real stock and livestock operating allowances fund the feed; the horse adds speed, not capacity. The physical exchange, recipient payment reservation, cancellation, cargo return, care/rest and cart-wear rules remain intact. This one-time command grants no automatic-route authorization; the separate recurring option above does. Its manual jobs retain draft version three within the now version-four nested custody book, with neutral older-save migration and contract-linked validation.

Six paid two-player tests cover manual dispatch, exact stock/feed/cart custody, arrival exchange and return, separately consented relief, invalid authority/stale/insufficient orders, recipient cancellation, old-save migration/tampering, forecast and offline replay. At that checkpoint the 52-test draft/trade suite and 103-test logistics/roads/economy/City suite passed, covering 155 distinct related scenarios. Headless Edge confirmed the accepted sender's City review, actual funded dispatch, private recipient view, reload, four responsive widths and server-restart persistence; the 390px card was visually inspected. Getting started remains food first. Governor draft routes, breeding, broad rescue and the remaining M0–M8 gates stay open.

Natural downhill receivers extend monitored flow — implemented

A registered source now admits its absent natural downhill neighbor empty at the next four-hour water boundary; further cells join one hop per later boundary. Sound paid drainage channels select their reserved outlet first. The 64-new-cell interval cap leaves excess discharge as a boundary export, never a later water grant. Admitted cells receive true transfers without local rainfall until separately enrolled. Version-one channel receipts upgrade to version two without changing water. The selected owned plot's Downhill flow coverage card shows route, receiver admission, rainfall status, source-edge total, past boundary exports and a map link without revealing foreign live storage.

The fourteen-file related hydrology regression passes 113 tests, including five new natural-receiver scenarios. Tests cover exact conservation, one-hop timing, later rain enrollment, legacy migration and corruption rejection, paid-channel priority at the limit, and a paid coastal survey/station with matching forecast and offline replay. A saved paid-world browser session passes exact City projection, rainless transfer, map navigation, foreign-access denial, reload, four widths and an isolated server restart; the 390px card screenshot was inspected. Getting started remains food first. This improves W2 flow evidence but leaves unregistered sources, coastal users, complete engineered effects, affected-party consent, major works and operation open; the full M0–M8 goal remains active.

Recorded runoff wears paid earthworks — implemented

Completed prepared soil, terraces, irrigation channels, local drainage and roads now lose condition from real registered four-hour discharge and the actual downhill outlet. Sound terraces or fallow reduce soil erosion; other works retain their normal exposure. The existing fertility, crop-water, drainage-route, road-travel and terrace-foundation consequences apply when condition crosses their thresholds. Ordinary paid maintenance restores only funded work. Water transfers, elevation, well yield and inventory remain conserved. Older saves checkpoint the processed water tick and add no historical erosion.

The thirteen-file related-system regression passes 104 tests, including the initial six erosion scenarios. A subsequent seven-test erosion run includes an added boundary-registration case, for 105 distinct tests across the two runs. Tests cover actual edge timing through a channel failure, dry/shallow thresholds, fallow and terrace protection, repairable benefit loss, bounded receipts, neutral migration, tamper rejection, forecast and offline/restart equality. The paid village journey harvests logs, composts them, improves an actual community food plot, installs a returned station, loses its real soil fertility benefit through recorded discharge and pays compost and timber to restore it.

Headless Edge verifies that paid saved world after eight water intervals: sixteen condition points lost across three damaging intervals. Exact City projection, stock, repair review cancellation, outlet map link, privacy, reload and four viewport widths pass, including after isolated server restart. The 390px card screenshot was inspected. The listener on port 34306 is stopped with an empty error log. Changed JavaScript syntax, whitespace, generated wiki freshness and working-tree documentation coverage pass.

This is erosion wear of completed works. Soil mass, sediment transport, aquatic species, complete engineered water effects, permissions and major project operation remain open. Getting started stays food first and the full M0–M8 goal remains active.

Wider natural basin connections and affected-community evidence — implemented

Returned watershed reports now include higher storage outlets, reciprocal receiving catchments and current public communities across a bounded natural network. The review reuses authoritative storage geometry, including routes that have not yet carried water. Eight basin examinations, 8,192 complete-catchment cells and 128 directed links bound the work; omitted basins, incomplete routes and coastal users remain explicit. Public identities update independently of immutable caches. No water, stocks, rainfall coverage, field observations or foreign live balances are changed or disclosed.

The eight-file hydrology regression passes 70 tests, including 7 new connection-review scenarios. These cover higher outlets and backwater, natural closed-network results, basin/cell/link/lake/ocean limits, deterministic enumeration, bounded immutable caching, wider community discovery, ownership/name changes and private-stock exclusion. Existing paid survey tests verify access, unchanged snapshots and exact restored projections. The seven new scenarios also pass after grouping duplicate frontier reasons; this is overlapping verification, not seven additional cases.

Headless Edge verifies the actual paid marsh report: eight catchments, 2,667 reviewed cells, 125 connections and three public communities, with further basins/coastal users unresolved. Exact authoritative projection, report identity, unchanged inventory, map navigation, private access, reload and 320/390/640/1440 layouts pass, including after server restart. The narrow card screenshot was visually inspected. The isolated listener on port 34305 is stopped. Syntax, whitespace, generated wiki freshness and working-tree documentation coverage pass.

Getting started stays food first. This is wider natural evidence, not full engineered impact closure or a consent register. Comprehensive inflow, remaining ecology, project-specific effects, ratification, major construction and useful operation remain required; the full M0–M8 goal stays active.

Empty drainage receivers and a paid marsh monitoring journey — implemented

Sound channels now admit an absent reserved outlet at the next water boundary when source runoff is already recorded. Receivers begin empty, accept conserved transfers and contribute no local rainfall until separately enrolled by a station/basin. Later enrollment is prorated and preserves retained water, original admission and past exports. Removal/failure never deletes receiving water. Low storage with unknown local rain stays ecologically unobserved; adequate retained water supports recovery. Existing saves checkpoint without adding cells or water.

The thirteen-file regression passes 106 tests, including six new receiver cases. The subsequent seven-test receiver suite also passes its added paid marsh integration scenario: 107 distinct scenarios across those runs. Tests cover boundary admission, zero local rain, no recursive enrollment, full water identities, failure/repair/removal, partial-interval rain promotion, immutable old ecological observations, neutral migration, provenance corruption and repeated restores.

The new command-only marsh preparation physically transports materials, manages food, completes lawful household succession, produces local timber practice, researches framing/masonry/registry, constructs and staffs a registry on paid drained land, learns/adopts hydraulic engineering, returns a watershed survey and separately installs a station. Actual outlet transfers and wetland habitat loss then match forecast, incremental, offline and restored state with exact inventory agreement. This generated basin already covers its reserved outlet; controlled flow scenarios separately prove receipt-only enrollment. There are no late stock/research grants or synthetic station receipts in the paid journey.

Headless Edge verifies the actual paid marsh world after four water intervals: 60% habitat on the converted source, 10.425 cumulative transferred game water units on the reserved edge, and retained water in its healthy outlet. Exact City projections, station readings, inventory, private access, reload and 320/390/640/1440 layouts pass. The same checks pass after server restart; source and destination screenshots were visually inspected. The isolated QA listener on port 34304 is stopped with an empty error log.

Getting started remains food first. Full affected reaches, broader engineered works, aquatic species/erosion, affected-party permissions and major construction/service remain open. The full M0–M8 goal stays active.

Drainage routes conserved water to registered reserved outlets — implemented

Sound completed drainage now selects its reserved downhill wetland in the surface solver when both endpoints have registered water coverage. Failed upkeep falls back to the natural route; paid repair and removal preserve all earlier transfers. Receiving wetlands retain only their habitat-based capacity and spill excess onward. Missing coverage is explicitly unresolved, without new rainfall or storage grants. This provides real local-channel behavior but does not complete affected-reach modelling or authorize a major diversion.

A separate versioned edge ledger migrates natural transfers without moving water. New station readings retain the original natural catchment while balancing crossing imports/exports; older readings stay intact. The twelve-file regression passes 100 tests, including 7 routing scenarios. New tests exercise a reserved outlet different from the natural edge, importing and bypassing station footprints, full receiver overflow, failure/repair/removal history, later monitoring coverage, old-save migration and mixed samples, repeated restore equality, corrupt edges/markers/balances, and actual paid drainage/forecast/offline projections.

Headless Edge verifies two isolated real saved worlds: paid marsh drainage explicitly lacking runoff coverage, and a paid station migrated without changing its old readings before producing a new crossing-balance reading. Exact projections, inventory, privacy, review cancellation, reload and 320/390/640/1440 layouts pass; narrow screenshots were inspected. Both worlds pass again after server restart. No simulated channel record was injected into a browser world; diversion onto a different edge is proved in the controlled solver scenarios above. The focused routing/runoff suite passes 16 tests after the bounded catchment calculation and sample validation refinements; counts overlap with the regression.

Both QA listeners (34302/34303) are stopped with empty server error logs. Getting started stays food first. The full M0–M8 goal remains active; complete affected reaches, unregistered engineered recipients, broader ecology/erosion, consent and physical major waterworks remain open.

Wetland habitat and conserved retention — implemented and verified

Tracked natural wetlands now lose habitat during drought/conversion and recover gradually when adequately wet. Condition controls retention between two and twelve game water units; a completed drainage conversion stays capped at two even after maintenance failure, until paid decommissioning. Recorded condition survives removal. Excess water routes through the existing surface/basin ledger at the next interval without deletion, new warehouse supply or altered well yield. Protected drainage neighbors gain no artificial capacity or guaranteed diversion route.

The fourteen-file regression passes 123 tests, including 7 new wetland scenarios. A subsequent focused run passes 16 drainage/wetland tests after adding reviewed capacity estimates and tighter observation validation; counts overlap. Coverage includes drought thresholds, wet recovery, exhausted habitat, failed upkeep, decommissioning, unregistered receivers, actual inundation, boundary registration, duplicate ticks, corrupt receipts, neutral migration, conserved release across restore, actual paid staged drainage/removal and forecast/offline equality.

Headless Edge checks a physically founded, supplied and developed marsh village after actual paid drainage. It verifies the converted plot's two-unit limit, the protected natural neighbor's twelve-unit estimate, explicit unobserved condition, unchanged stocks, privacy, reload and 320/390/640/1440 layouts. This browser world has no local monitoring station, so observed ecological effects and conserved release are verified by controlled simulation tests rather than fabricated live records. The city also reviews retention consequences before a paid drainage/removal commitment.

Restart preserves the actual paid plot and neighboring retention estimates. The removal review shows its current capacity estimate; cancelling spends nothing. Narrow habitat/review screenshots were visually inspected. Syntax, whitespace, generated-wiki freshness and working-tree documentation coverage pass. The isolated QA server/listener on port 34301 is stopped with an empty error log.

Primary design, waterworks gates, gameplay plan, screen specification and both wiki audiences now distinguish partial wetland ecology from remaining aquatic species, erosion, complete affected reaches, engineered flow, consent and major works. Getting started stays food first. The full M0–M8 goal remains active.

Woodland water stress affects forage and nursery seed — implemented and verified

Tracked woodland now loses health after sustained flooding/dry retained soil; prolonged inundation also removes cover and maturity. Ordinary regrowth pauses while stressed, balanced water supports health recovery and surviving flood-damaged trees use existing regrowth afterward. Foraging and nursery seed require at least 50% health and no floodwater, preserving their existing cover/maturity, finite supply and staffing rules. Receiving woodland without recorded local rain is unobserved, not automatically dry. This adds a real water-dependent habitat consequence without creating logs, food, saplings or water.

The thirteen-file regression passes 123 tests, including 6 new woodland-water scenarios; counts overlap. Tests cover wet/dry thresholds, suppression of concurrent regrowth, recovery, unknown rainfall, fire/cultivated/cleared exclusions, read purity, old-save neutrality, exact-boundary registration, duplicate ticks, corrupt ledgers, actual village foraging/seed loss under explicitly controlled exposure, and paid-station forecast/incremental/offline/restart equality. Actual ecological losses are tested separately from generated-site luck; the existing genuinely funded QA world has five tracked woodland cells in balanced conditions.

Headless Edge verifies neutral migration in a separate copy of the older saved world, the live balanced response after a real water interval, and restart. It checks selected health/stress data, seed guidance, unchanged inventory, private access, reload and 320/390/640/1440 layouts. The narrow stress view is visually inspected. Woodland can mature between reads, so browser comparisons reconstruct the authoritative projection at each returned vegetation timestamp; they do not hide growth differences behind a broad tolerance. No late stock grants or artificial ecology records were added to browser worlds.

Final focused validation passes all six ecology tests. Restart preserves ecological counters/responses, water counters, transfers and inventory. Syntax, whitespace, generated-wiki freshness and working-tree documentation coverage pass. Both isolated QA servers/listeners (34299 and 34300) are stopped, with empty error logs.

The primary design, waterworks gates, gameplay plan, screen specification and both wiki audiences describe the new consequences. Getting started remains food first, with foraging dependent on healthy unflooded habitat. Full affected-flow coverage, species-specific aquatic ecology, erosion, affected-party consent and physical major works remain open. The full M0–M8 goal remains active.

Standing buildings take flood damage with paid recovery — implemented and verified

Each processed water interval now applies one condition hit per inundated operational/damaged building using its deepest footprint cell: one point per 0.001 normalized depth rounded up, capped at ten and remaining condition. Existing damage/ruin rules stop services, release staffing and interrupt attached work. Paid repair/rebuild resumes after recession. The new version-one ledger checkpoints old saves, prevents duplicate intervals and retains per-building cumulative losses/counts plus twenty recent depth/before/after receipts. Water balances are unchanged; normal construction-cart recovery stays in warehouse accounting. Unfinished, ruined and cleared sites are excluded.

The thirteen-file regression passes 134 tests, and the dedicated damage suite passes 6 tests: 140 distinct scenarios. New coverage verifies deepest-cell selection, shallow/capped loss, repeat-call idempotence, ruin and stage exclusions, neutral migration, bounded receipts, corruption rejection, real funded repair held through controlled flooding, recovery without erased history, forecast/incremental/bounded-offline agreement and ruin interrupting an already funded repair. Damage/repair scenarios explicitly control the exposure input; generated water/exposure conservation remains covered independently by the basin suites.

Headless Edge checks the preceding genuinely funded saved QA world before damage activation, after the next real water interval and across restart, preserving exact water/stock and private access. The live community has no building in the current flooded cells, so its empty damage history is verified without fabricating an incident. A separate browser-only presentation fixture checks populated damage receipts, building labels, expanded details, map-link presence and 320/390/640/1440 layouts; it changes no server state and its screenshot is labelled. The narrow history view is visually inspected. Port 34298 and its isolated server are stopped, with an empty error log.

The primary design, waterworks gates, gameplay plan, screen specification and both wiki audiences describe standing-building damage and ordinary paid recovery. Getting started remains food first. Full affected-flow coverage, habitat/erosion, direct goods/resident/travel effects, unfinished-earthwork effects, permissions and physical major works remain open. The full M0–M8 goal remains active.

Basin inundation interrupts production and site work — implemented and verified

Recorded pool levels now inundate land below the same generated bed used by conserved storage. Natural water cells are excluded. Community fields and tree nurseries skip flooded production without consuming a batch or banking missed harvests. New construction footprints reject flooded cells; ordinary land quotes require a dry worksite. Paid crews suspend at water boundaries, retaining remaining time/materials, and resume after recession. Current land warnings, production/order reasons and private basin cell/map lists explain the effect. Earlier saves apply consequences only after their next water interval; current exposures are derived, not another saved water inventory.

The eleven-file regression passes 113 tests. The final focused crop/land/exposure run passes 28 tests, followed by 6 exposure tests after adding an actual funded nursery recovery case. Counts overlap: 119 distinct scenarios passed. New cases cover conserved wet/dry levels, natural lake exclusion, read purity, migration and corrupt markers, crop and nursery interruption/recovery, boundary crew suspension/resumption, flooded construction rejection, actual paid station flow, private access, forecast/offline equivalence and restore. Economic/crew interruption tests use explicitly controlled flood footprints over real funded structures/orders; the generated-world flow test separately verifies actual modelled inundation. Nursery recovery respects its actual staffing and consumes only one ordinary batch.

Headless Edge verifies the preceding genuinely funded saved world before activation, after one real water interval and after another server restart. All water and stock survive migration; the source basin then reports 18 actually inundated land cells. Pending notices, retained details, exact projected balances, private access, inventory, reload and 320/390/640/1440 layouts pass. An inundation map link selects its exact cell. The narrow list is visually inspected. No late stock, water or structures were injected into browser QA. Port 34297 and its isolated server are stopped, with an empty error log.

Final restart checks preserve exact exposed cells/depths, every surface-water counter, basin transfers and inventory. Syntax, whitespace, generated-wiki freshness and working-tree documentation coverage pass.

The full M0–M8 goal remains active. This delivers cultivation and work consequences within recorded pools. Full affected-reach coverage, habitat/erosion, flood damage, permissions, physical major works and useful operation remain open. Existing stocks/buildings/residents and travel receive no new damage or interruption; older unversioned crew orders retain their accepted timers. The primary design, waterworks gates, gameplay plan, screen specification and both wiki audiences are synchronized; Getting started remains food first.

Complete station-basin rainfall — implemented and verified

Installed runoff stations now enroll complete traced terminal catchments in surface ledger version two. Overlaps reuse cells; new cells start empty with prorated rainfall. Old version-one stations preserve prior balances and samples, enroll missing cells after their next processed water interval, and first receive rain in the following interval. Rain from connected lake cells enters basin storage without duplicate surface losses. Terminal exports resolve into their basin. Spill recipients do not recursively activate rain. Local gauge samples retain their accepted upstream scope. City shows complete versus partial/pending rainfall coverage and enrollment time.

The nine-file regression passes 92 tests; a subsequent focused run passes 7 rainfall tests, adding one same-basin installation-during-migration case to the prior six. Counts overlap: 93 distinct scenarios passed. Coverage includes complete/partial extents, overlap, mid-interval enrollment, explicit old-save migration, no historical recovery, lake accounting, corrupt provenance, global conservation, actual paid installation and six-day forecast/live/offline/restart agreement without well or inventory grants.

Headless Edge verifies a copy of the preceding genuinely funded QA save, initially retaining its three surface cells, six interval samples and identical basin receipts. The migration interval adds 260 empty cells; the following interval gives the full 263-cell basin its first additional rain. Pending/enrolled/raining states preserve exact projected data, expanded balance details, private access, inventory, reload behavior and 320/390/640/1440 layouts through actual server restarts. Narrow coverage and balance layout is inspected. No new station or late supplies were fabricated for this migration. Historical test figures in preceding entries describe their earlier release.

The final restart preserves every surface counter, directional transfer total, inventory and basin storage. Syntax, whitespace, generated-wiki freshness and working-tree documentation coverage checks pass. The isolated QA server and port 34296 listener are stopped; its error log is empty.

This completes rainfall extent only for explicitly enrolled station basins. Full affected-flow coverage, flood/ecology effects, permissions, major construction and useful operation remain open in W2–W4/M8. Getting started remains food first; the design, screen specification, delivery plan and both wiki audiences describe this distinction. The full M0–M8 goal stays active.

Conserved basin storage and reciprocal transfers — implemented and verified

New cell-boundary runoff now feeds a separate version-three basin ledger with historical migration offsets, empty natural pools, explicit game storage/level curves, connected lake bed abstraction, evaporation/infiltration, reciprocal shared-saddle transfers, higher outlets, separate ocean/unresolved exports and the recent exact route window described above. Version two introduced the exact export receipts; older saves migrate without recovering their earlier water. No stock or well capacity is granted. Sixteen deterministic routing passes and 32 new nodes per interval bound work; retained residual water and external exports remain accounted. Private live balances require an owned station's returned installation report, while shared physics can continue during a blocked return.

The final eight-file regression passes 86 tests, including one export-receipt migration scenario added after the initial 85-test run. Counts overlap. Eleven new basin-water scenarios cover: under-saddle retention; actual sharing and reverse backwater; higher outlets after paired basins fill; empty lake storage and ocean discharge; incomplete routes; discovery/routing bounds; historical checkpoint migration; corrupted sources/transfers/clocks/storage/samples; exact external crossing receipts and neutral migration of old unlocated export totals; 45-interval bounded receipts and restoration; actual paid preparation with forecast/offline equality and no well/stock grant; and a fire-held installation team's delayed publication. Isolated hydraulic cases use declared synthetic geometry and controlled runoff inputs. A first stress fixture did not actually reach the discovery limit because its water equilibrated earlier; forty independently fed basins now exercise that limit directly without changing the runtime rule.

Headless Edge passes empty initial custody, six actual wet/dry intervals, exact displayed balance data, retained details, no intake claim, owner/other-community/stranger privacy, unchanged inventory, reload and 320/390/640/1440 layouts. The same genuinely funded survey/station world crosses two server restarts without reseeding or late stock grants, including a version-one to version-two export-receipt migration that preserves identical retained volume and directional transfer totals. After six intervals its source basin retains 19.052 units and records 3.071 sent to a neighbor and 0.044 returned, proving reciprocal flow on generated terrain as well as synthetic graphs. Narrow live-balance layout is inspected. Design, delivery gates, screen specification and both wiki audiences are synchronized; Getting started remains food first. Final restart, syntax, generated-wiki freshness, working-tree coverage and whitespace checks pass. The isolated QA process and port 34295 listener are confirmed stopped; its server error log is empty.

This advances W2 with actual conserved basin flow. It does not complete M8: comprehensive source and affected-reach coverage, ecological/flood consequences, affected-party permissions, major construction, useful intake/service and maintenance/recovery remain open. Existing shared-well obligations and accepted runoff-cell accounting stay intact. The full M0–M8 goal remains active.

Basin extent and candidate spill review — implemented and verified

Returned watershed reports now expose generated basin topology for the selected plot: connected equal-height land with deterministic lower-outlet routing, connected lake outlines, reverse catchment enumeration, every lowest saddle crossing and receiving route, and a connected potential retention footprint inside land basins. It lists current public intersecting communities and unknown region coverage separately from historic field observations and live runoff coverage. Explicit component, catchment, path, terrain-read and spill-branch limits prevent omitted territory from becoming a claimed safe outlet. Lake level, backwater/merged storage, ecological impacts and rights remain unresolved.

The focused basin/runoff/survey/forecast/City regression passes 53 tests, including ten new basin scenarios: exact catchment/saddle/retention geometry, connected flat routes and enclosed plateaus, connected lakes and coastal uncertainty, tied receiving branches, all search limits, deterministic neighbor/ID ties, bounded immutable caching, actual paid-return privacy, restart/read purity and current community identities. Geometry stress cases use synthetic graphs; the live scenario performs actual Hydraulic engineering preparation and paid fieldwork without late stock grants. The real generated QA catchment contains 263 cells and one candidate spill crossing; its initial analysis inspected 421 unique cells in about 7 ms on this host.

Headless Edge verifies the returned review, receiving-basin warning, no implicit runoff activation, current rights caveats, expanded route details preserved through refresh, map links, owner/other-community/stranger privacy, unchanged inventory, reload and 320/390/640/1440 layouts. Narrow summary and route views are inspected. A real server restart preserves identical generated evidence and existing stock/water state. The terminal map button selects the exact basin cell. The map-click harness initially looked for the Land panel after reload had returned to Overview; explicitly reopening Land completed that check without changing runtime code. The review derives from a funded returned survey and does not reseed or award supplies during browser work. Design, waterworks gates, screen specification and both wiki audiences are synchronized; Getting started remains food first. The final ten-case basin rerun passes after deterministic read-budget ordering and explicit lake-level reporting; it overlaps the 53-test regression. Syntax, generated-wiki freshness, working-tree coverage and whitespace checks pass. The isolated QA process and port 34294 listener are confirmed stopped, with an empty server error log.

W2 gained basin evidence; the subsequent basin-water release above adds bounded coupled storage and actual reciprocal spill. Complete source/affected-reach coverage and ecological/flood effects remain open. Existing runoff saves retain their accepted graph and accounting. W3/W4 permissions, physical major construction and useful operation/recovery remain open. The full M0–M8 goal stays active.

Conserved runoff and paid passive stations — implemented and verified

W2 now has a shared integer surface-water ledger across installed stations' complete upstream catchments, independent four-hour deadlines, deterministic wet/dry rain, finite temporary retention, explicit evaporation/infiltration, transfers and boundary export. New cells start empty and receive no historical rain or returned boundary water. Overlapping stations reuse the same cells; partial installation intervals are not presented as complete readings. A prior returned survey unlocks a separate six-timber/two-tool physical installation trip with two residents and paid route meals. Reports stay private until actual return, and installation receipts survive later survey/history replacement.

The focused regression passes 67 tests, including nine new runoff scenarios: forty conserved wet/dry intervals, nested catchments, partial downstream registration and historical boundary separation, actual paid survey/installation/publication, recall and engineer loss, corrupted source/transfer/sample/provenance saves, closed/incomplete geometry, malformed variants, original active-job migration, forecast/offline/restart equality and pinned-receipt privacy. Synthetic terrain is used for exact hydrology examples; live journey scenarios use actual Hydraulic engineering preparation without late stock grants. Existing land, knowledge, forecast, shared-well and survey checks pass. The final runoff/survey rerun passes all 21 tests after rejecting null installation options and orphaned installation markers; these overlap the 67-test regression.

Headless Edge verified review cancellation, exact accepted funding, two surveyors, no remote station publication, returned wet/dry readings, expansion retention, reload, owner/other-community/stranger privacy and 320/390/640/1440 layouts. The paid world crossed installation and five water intervals with three actual server restarts, including the final validator, and no reseeding or post-seed grants. The initial browser harness requested the first community's plot in a second-community privacy read; correcting that query completed privacy checks on the same accepted trip. Visual inspection corrected water formatting to all three stored decimal places and added full timestamps so readings balance visibly and distinguish days.

Primary design, major-waterworks gates, screen plan, Hydraulic engineering effect, supply-chain consumers and both hand-authored wiki audiences are synchronized. Getting started remains unchanged because this work follows later engineering investment. Wiki generation/freshness, working-tree coverage, syntax and whitespace checks pass. The isolated QA server and port 34293 listener are confirmed stopped; its error log is empty. W2 remains partial; complete affected basins, water bodies/spill paths, actual ecology/flood effects, all-party rights, major construction and useful operation/recovery remain open. The full M0–M8 goal stays active.

Watershed geometry and physical field surveys — implemented and verified

Hydraulic engineering now supports an actual two-person survey journey: owned-route travel, paid materials/meals, one full day of observation, physical report return, recall and storage recovery. Versioned immutable drainage geometry records bounded upstream/downstream extents, strict descent, complete/incomplete flags and closed-basin/lake/ocean endpoints. Reports retain observed wetlands, tree cover and feature cells, with current intersecting public community names shown separately. They grant no water, river yield, vacant-land claim or project consent. The new major-waterworks plan preserves the full remaining M8 water, ecology, authority, construction and recovery requirements.

Twelve new scenarios cover deterministic geometry, explicit traversal limits, actual paid preparation through Hydraulic engineering, exact labor/material/meal custody, full observation duration, publication only after return, immediate/partial recall, lost engineering, route fire, storage-held returns, private reads/public job redaction, stale/foreign/replayed commands, malformed state, neutral migration, bounded receipts and replacement reports, offline/forecast equality, real ruler death/lawful recall and an observation at the home plot. Main survey preparation uses actual research, institutions and supply journeys without late inventory grants. Isolated graph tests use synthetic terrain; fire, storage and illness tests deliberately introduce their stated failure conditions.

The twelve-file regression passed 104 of 105 tests. The sole failure was an old land-migration fixture retaining the newly introduced survey ledger after deleting all land state; correcting that fixture preserves strict runtime migration checks. The final survey/land/catalog selection passes 36 tests, including all twelve new survey cases. The first focused run also corrected a stale fixed population assumption to compare the actual prepared village. Counts overlap; no failure remains unresolved.

Headless Edge verifies exact funding and review cancellation, recall review cancellation, two surveyors, no report before physical return, completed report expansion, retained private data, reload and 320/390/640/1440 layouts. The same paid world crosses observation and actual return with two server restarts and no reseeding or post-seed grants. Narrow survey/report layouts are inspected before handoff. Documentation, catalog effects and supply-chain guidance are synchronized, and wiki generation/freshness, coverage, syntax and whitespace checks run before handoff. The isolated QA server is stopped afterward.

This delivered W0/W1 prerequisites; the subsequent runoff release above adds partial W2 conserved flow. Major reservoirs/diversions, complete downstream impacts, ecology/flood effects, all-party consent and the rest of M0–M8 remain unfinished. The full implementation goal remains active.

Manual owned-outpost draft supply — implemented and verified

Owned-outpost supply can now explicitly borrow an already trained home horse and real handcart. The quotation checks both loads, human food and separate carried animal feed, including delivered-feed versus provision-feed competition. It preserves two home workers, finite origin/collection stocks, animal identity, road timing, elapsed feed, physical recall and original home admission. Low provisions/condition returns the original exports at human pace; fire, mortality, keeper loss and full storage retain accountable custody. A full receiving depot no longer counts repeated arrival attempts as actual edges. Nested draft version two migrates prior manual books neutrally; global husbandry remains version three. That earlier release did not authorize player-trade orders; the newer manual bilateral route above now does. Automatic orders still gain no animal authorization.

Thirteen new scenarios cover actual paid home/outpost preparation, training and remote harvesting; exact cargo/feed/cart deductions; delivery, immediate recall, load and combined-feed limits; current authority/replay/privacy; migration and malformed routes/markers; receiver/home storage; failed keeper admission; fire/starvation; foreground/offline/forecast equivalence; ordinary route compatibility; paused operating authorization; road timing; and real ruler death/kin handover. The road case uses surveyed plots with previously completed roads as an explicit compatibility fixture; paid road construction has separate regression coverage. A paused-budget fixture creates no goods or services. Shortage/storage/fire scenarios deliberately alter their tested conditions.

The eighteen-file regression passed 172 of 173 tests. Its one failure showed that actual illness had released the home keeper: the successor scenario now uses an authorized staff assignment before returning the animal. The final draft/outpost-draft/continuity selection passes 35 tests, including all thirteen new cases. Earlier setup fixes added real remote harvesting for collected logs, preserved warehouse-history changes when testing stock shortages, and supplied the required embodied-character identity after succession. Runtime authority, labor, care and storage validation remain intact. Counts overlap; no failure remains unresolved.

Headless Edge verifies explicit animal selection, dispatch review cancellation/acceptance, exact feed/cart deductions, recall review cancellation, retained choice, private home/outpost reads, delivery and return across two actual server restarts, reload and 320/390/640/1440 layouts without exceptions or overflow. The same paid world continues through its physical journey under the QA clock, with no reseeding or post-seed material grants. The isolated server is stopped at handoff. Current design, guide, technical reference, screen plan and animal-services milestone boundaries are synchronized; Getting started retains its existing food-first sequence. Wiki generation, freshness, coverage, syntax and whitespace checks run before handoff.

This advances H3 and the M3/M6 regional supply requirements. The newer manual bilateral player-trade route above closes that earlier gap. Recurring/governor draft use, breeding, broader rescue, major waterworks and all other remaining M0–M8 gates stay open. The full implementation goal remains active.

Paid draft training and manual waystation assistance — implemented and verified

City People now funds three actual training work days for the same purchased horse, with a separate trainer, four timber, one tool, six training feed and additional ordinary care. It supports unused-input cancellation/storage recovery and permanent qualifications. A reviewed manual waystation trip explicitly borrows that horse and a real serviceable handcart, carries paid feed within the existing 100-weight limit and shortens supported travel steps by 25%. Actual wear, low-provision/condition return, road/scout escort timing, fire, starvation, home admission, unused feed recovery, paid rest and cart repair retain physical custody. Global husbandry version three migrates old state neutrally; other regional/automatic routes keep their existing terms.

Fifteen dedicated scenarios cover exact funding/progress/refunds, paid care/rest, cart wear and actual repair, immediate recall, failed keeper/home admission, fire/starvation, storage recovery, malformed/foreign/stale state, bounded receipts, foreground/offline/forecast equality, load limits, roads, actual militia scout-detour co-location and real ruler death/kin handover. Preparation uses actual purchased identities, construction, research and supplies without late inventory grants. The road-compatibility scenario installs previously completed road conditions as a fixture; it does not claim to build those roads through paid commands. A twenty-file regression passes 192 tests. After three additional draft cases and correcting an older City catalog-count expectation and the new succession test's explicit handover target, the final draft/City selection passes 26 tests, including all fifteen draft scenarios. Counts overlap; no failure remains unresolved.

Browser QA verifies training funding/review cancellation, cancellation review, graduation, retained supply choices, draft dispatch/cancel review, exact stock/cart/feed custody, completed return/rest, receipts, owner privacy, reload and 320/390/640/1440 layouts without overflow or exceptions. The same paid world advances from funded course to qualification and a completed trip under the QA clock with two actual server restarts, no reseeding and no post-seed material grants. Narrow training, travelling and returned screens were inspected. The isolated server is stopped at handoff.

Primary design, animal-services specification, screen plan, gameplay-plan introduction and both wiki audiences are reconciled. Getting started retains its food-first founding sequence. Catalog counts remain 39 buildings, 31 technologies, 62 resources and 29 recipes. Generated wiki freshness, documentation coverage, syntax and whitespace are checked before handoff. This completes the bounded H2 manual draft service; H3/H4, wider rescue, major watershed works and other outstanding M0–M8 gates remain open. The full implementation goal stays active.

Physical livestock relocation and evacuation recovery — implemented and verified

City People now offers paid local and owned-outpost enclosure relocation, retaining the same animal identities, condition, purchases and per-settlement care spending. Two origin handlers carry actual food/feed, reserve destination space/water, admit animals physically and walk home afterward. Recall, automatic return on lost destination care or insufficient return provisions, fire delays, mortality, damaged-origin recovery and storage-held supplies persist. Existing outpost cargo now delivers/collects actual feed. After livestock relocation and handler return, ordinary resident evacuation becomes available when its other requirements are met. New global ledger version two migrates old purchase/care state without altering stocks, money or accepted purchase journeys.

Ten new scenarios pass, covering local/remote movement, destination and origin reservations, no doubled local water, retained care provenance, exact provisions, public redaction/private views, malformed custody, stale/foreign/replayed orders, full storage, actual paid repair recovery, bounded receipts, fire/shortage mortality and foreground/offline/forecast equivalence. The owned-outpost scenario develops its fields, sawmill and husbandry through actual construction, research, harvested timber and physical supply; it relocates the purchased pair in both directions and then evacuates residents. No late inventory or animal grant is used. Preparation fixes provided real construction/repair inputs, maintained care allowances, released workers and recovered warehouse room; none weakened runtime validation. The sixteen-file regression passes 142 tests. A final six-file recovery/compatibility selection passes 60 tests, including added regional offline equality and public job-redaction checks. Counts overlap; no failure remains unresolved.

Browser QA passes relocation review cancellation/acceptance, exact food/feed deductions, recall cancellation, retained destination/receipt controls, source and destination views, reverse-trip review, owner privacy, reload and 320/390/640/1440 layouts without exceptions or overflow. The same paid world progresses from dispatch through remote admission and handler return under an explicit QA clock, with two actual server restarts, no reseeding and no post-seed grants. Narrow source, travelling and destination cards were inspected. The isolated server/listener is stopped after verification.

Primary design, animal-services plan, screen specification, both wiki audiences and the gameplay-plan introduction are reconciled. Getting started was reviewed; its founding/food sequence is unchanged because relocation follows later husbandry investment. Catalog counts remain 39 buildings, 31 technologies, 62 resources and 29 recipes. Syntax, whitespace, generated wiki freshness and working-tree documentation coverage are checked before handoff. Paid training/manual draft assistance is now delivered above. Wider animal rescue, regional draft routes, breeding, cavalry, resale and all other outstanding M0–M8 gates remain open. The implementation goal stays active.

Located livestock and daily husbandry — implemented and verified

Animal husbandry now enables actual pastures, paid two-place enclosures, finite horse-pair purchases and local feed/water care. Two real handlers physically collect reserved supplier identities for 24 earned coins with separate travel food/feed; payment, admission, fire delays, recall and unused supplies retain durable custody. Daily care consumes real feed under a reviewed cumulative limit, requires keeper/water capacity, restores condition and yields stored-or-discarded compost. Shortages reduce condition and prolonged neglect records death. Animals remain outside warehouse goods. Existing pasture production and legacy stable assets retain their prior meanings; the former unconditional new-pasture block is superseded by the active Animal husbandry prerequisite.

Ten new scenarios cover paid preparation with no late material grants, finite reservations, actual pickup/arrival, local care timing, allowance recovery, recall/refunds, blocked admission, fire, full storage, occupied-enclosure protection, mortality, water loss, neutral migration, malformed custody, authority/replay, private views and foreground/offline/forecast equality. The first focused run caught a misplaced demolition guard in repair preview and stale catalog counts; these were corrected. The eleven-file regression then passed 94 of 95 tests, with its one failure an old pre-logistics fixture retaining the newly added livestock ledger. Correcting that fixture to represent its actual old version preserves strict runtime validation. The recovery selection passes all 51 tests. The final expanded run passes 178 tests across nineteen files, including the integrated first journey, waterworks, shared operating budgets, population, continuity, academies and existing construction/cart recovery. Counts overlap; no failure remains unresolved.

Browser QA passes care-limit and purchase review cancellation/acceptance, exact 24-coin payment terms, actual food/feed withdrawal, reserved versus travelling versus admitted animals, recall review cancellation, retained draft/receipt expansion, owner privacy, reload and 320/390/640/1440 layouts. The same persisted world progresses through actual supplier pickup, physical return and its first full paid care check under an explicit QA clock, with two actual server restarts and no reseeding or post-seed grants. Narrow funded/completed cards were inspected. Both animals retain their identities, each records two consumed home feed and one compost, and warehouse horses remain zero. The isolated server and listener are stopped.

The primary design, companion animal plan, screen specification, player and technical wiki and Getting started are reconciled. Catalog counts are 39 buildings, 31 technologies, 62 resources and 29 recipes. Syntax, catalog, whitespace, generated wiki freshness and working-tree coverage are checked before handoff.

This delivers acquisition and care within H1/M3/M4. At the acquisition release, local relocation and evacuation recovery were unfinished; the September 23 relocation release above supersedes that boundary. Paid training and manual draft assistance are now delivered above; wider livestock disaster recovery, remaining regional recovery, wider breeding recovery, cavalry and resale remain unimplemented. Occupied or reserved enclosures reject demolition/salvage; repair/rebuild can restore care. Outposts with live/arriving livestock must now relocate them first and wait for handlers before resident evacuation. Those recovery gaps and the remaining M0–M8 requirements stay explicit in the animal-services plan. The full goal remains active.

Academies and simultaneous research — implemented and verified

A paid Community academy now supports one additional funded research project beside the unchanged public research/copy/study slot. Two academy staff and two separate researchers, Literacy, Scholarship, Public accounting and the topic’s actual institution/practice are required. Topic supplies plus one timber/two food per work day are prepaid and consumed through real daily work. Duplicate topics, insufficient workers, reserves, budgets, stale/foreign orders and malformed selections reject. Pause, explicit recovery, atomic unused refunds, actual knowledge completion and twenty retained receipts are connected to City, supply chains, private forecasts, Region, continuity and briefings. Old saves migrate to an empty academy slot without altering their paid public work or stocks.

The first preparation attempt lacked enough real harvested logs for brick imports. The fixture now performs the necessary harvests and imports tools, then aligns to the normal full-day research boundary. The seven initial academy scenarios pass. The twelve-file regression selection passes 117 of 118 tests; its sole failure was the new test reading city.supply instead of the authoritative city.supplyChains. Correcting that assertion gives 26 passing tests across academy/supply/City. The fourteen-file compatibility run passes all 111 tests, including the integrated first journey and regional recovery. Two added institution/history scenarios bring academy coverage to eleven; the final academy/attention selection passes all 18 tests. A later academy/continuity selection also passes all 18 tests, including explicit malformed array rejection and replay after restoration. Counts overlap, and the full twelve-file selection was not repeated after those narrow changes. No failure remains unresolved.

Tests cover actual paid academy construction, parallel progress without duplicate people, exact original/support investment, normal topic-institution loss, teacher/accountant interruption, worker loss, full-storage refund rejection, old saves, forged ledgers, bounded history, unchanged stock after cancellation, retained gross spending and attention, authority/idempotency, offline/forecast equality and actual ruler death with lawful recovery. The fixture obtains building and project inputs through the existing initial economy, physical harvests, processing and paid imports; no late material grant is used.

Live browser checks pass exact funding review/cancel/accept, seven timber/fourteen food reserved for Crop rotation, simultaneous public Drill, duplicate-topic disabling, independent academy pause/resume, cancellation review, progress and completion, retained selectors/receipts, privacy, continuity inspection and reload. Two actual server restarts preserve both projects’ first completed day and their final knowledge/custody. The same persisted world is advanced throughout without reseeding or post-seed grants. Layouts pass at 320/390/640/1440px without browser exceptions or overflow; funded and completed narrow cards were visually inspected. The isolated server and listener are stopped.

The catalog now validates 38 buildings, 30 technologies, 61 resources and 29 recipes. Primary design, interface, player/technical wiki and the M4 ledger are synchronized; Getting started remains unchanged because academies follow school and Scholarship investment. Syntax, whitespace, generated wiki and working-tree coverage are verified before handoff. This delivers advanced institutional parallel research, while wider institutions, major watershed works, fort combat and all other outstanding M0–M8 requirements remain open. The full goal stays active.

Learning-center cultural specialization — implemented and verified

Chartered communities now earn Learning center recognition from completed institutional work on three distinct daily checks within fourteen. Actual research, manuscript study, stored school copies and stored scriptorium copies contribute only with active Literacy and a sound staffed school. Imported or storage-held books, partial work and idle buildings do not. Separate public cultural labels, private exact completion evidence, current school blockers, City/Regional navigation, factual return briefings and forecast copies are connected. Recognition grants no assets, modifiers or authority.

The initial three-file selection passes all 24 tests. The broader twelve-file selection passes all 117 tests, including ten new learning scenarios. An additional eleven-file compatibility selection passes all 109 tests across founding variants, population, regional forecasts, continuity, standing garrisons and map behavior. These counts overlap. Coverage includes exact real completions, concurrent projects sharing one day, actual inter-player book delivery/study, storage-held cancellation and duplicate receipts, loss and recovery, missing services, neutral old-save migration, malformed evidence, private immutable reads, offline/forecast equality, outpost reoccupation and ruler death with lawful recovery. No test failure remains unresolved.

Live browser checks pass evidence expansion/retention, linked Research controls, commission review cancellation/acceptance, exact twelve-timber funding, paused custody, fourteen real daily checks aging out recognition, resumption and three actual stored books restoring it. The same persisted world is used throughout, without reseeding or post-seed resource grants. Two actual server restarts retain paused/resumed work and resulting evidence. Owner privacy, public labels, Region, reload and 320/390/640/1440px layouts pass without overflow or browser exceptions. Narrow initial and recovered cards were visually inspected; the evidence now displays full completion dates. The isolated QA server and listener are stopped.

Primary living-world decisions, interface, both wiki audiences and the M7 ledger are updated. Getting started remains unchanged because this is later school-based progression. Catalog validation remains 37 buildings, 30 technologies, 61 resources and 29 recipes; syntax, whitespace, generated wiki freshness and working-tree coverage are checked before handoff. Wider civic/military/trade-service specializations, larger settlement stages, fort combat and all other outstanding M0–M8 gates remain open. The full implementation goal stays active.

Standing owned garrisons — implemented and verified

Owned local/outpost troops can now hold without a fixed duty deadline under explicit cumulative daily-food authorization. Initial 30/90/180-day food choices, reviewed increases, actual host collections, separate arrival supplies, protected reserves, operating ceilings and professional wage expiry are connected. New custody versions 6/7 and support version 2 preserve older finite watches unchanged. Total collection/spending counters retain only thirty recent receipts. Regional warnings, briefings, forecasts, demand and Defense reviews are connected.

The thirteen-file regression selection passes all 86 tests. After adding regional/briefing checks, the corrected three-file selection passes all 19 tests. The final four-file selection passes all 23 tests, including eight standing scenarios and finite/standing professional-expiry cases. These counts overlap; the broad run preceded the final notice/succession/idempotency additions. Coverage includes thirty-five daily collections and receipt trimming, remote arrival custody, unchanged population and stock on authorization, safe withdrawal on actual reserve/ceiling/service failure, offline equality, invalid saves, foreign/stale commands, unchanged old terms, durable duplicate receipts, exact wage expiry and council stewardship. Fixture corrections place the stock boundary immediately before collection, account for settlement-prefixed regional issue IDs, and expect illness-driven lookout loss to end duty after the original order survives succession. No failure remains unresolved.

Live browser checks pass standing review cancellation/acceptance, a sixteen-day actual watch, exact 96-food spending, a 180→360 ceiling increase without warehouse/ration changes, privacy, reload, expanded receipts, recall and 320/390/640/1440px layouts without overflow or browser exceptions. Narrow controls were visually inspected. Two actual server restarts retain standing position, receipts and increased authorization. The returned state restores after physical recall. The isolated QA process/listener is stopped. Primary design, interface, player/technical wiki and Getting started assessment are synchronized; generated wiki, catalog, syntax, whitespace and working-tree coverage are verified before handoff.

Standing owned stationing is delivered. Fort combat still requires moving threats/casualty integration; larger multi-unit and permanent allied forces, automatic refit/rotation and the rest of M0–M8 remain open. The goal remains active.

Outer charter plots and castle construction — implemented and verified

A separate radius-three release now supports paid connected local expansion without changing original offers or granting a whole region. Outer registration requires actual survey evidence, current registry services and Public accounting, and costs 12 timber/2 tools/6 food. Version-two ledgers retain old receipts; unchanged version-one saves, precise region/chunk membership, acquisition order, reserves, budgets and private controls are verified. City Expansion shows ring and cost before the exact review.

The corrected twelve-file regression run passes all 112 tests, including five new outer-charter cases. Coverage includes old extension/founding saves, all released exclusions, live registration and blockers, a full paid castle footprint through registry relocation/demolition/salvage, real six-person supplied duty, offline replay, construction forecasts, regional forecasts, outposts, local charters and military passage. Implementation testing corrected a kernel helper import; scenario fixes explicitly released crew labor and salvaged demolished ruins. The legacy competition fixture remains restricted to its original release so it continues testing the unchanged rules. No failure remains unresolved from these runs. The castle fixture uses controlled late-game material stock, so the checks do not claim production of every construction input.

Live browser checks pass cancellation and acceptance of a further outer plot, exact payment/accounting text, authoritative added plots, real seven-hex castle state, six-soldier deployment, owner privacy, reload and 320/390/640/1440px layouts without overflow or browser exceptions. The narrow land summary was visually inspected. An actual server restart retains the new title, castle, stationed force and first six-food daily receipt. The isolated QA process is stopped after verification. Primary design, both wiki audiences and interface descriptions reconcile the previous castle-placement gap. Catalog, syntax, whitespace, generated wiki and working-tree coverage are checked before handoff.

This resolves the bounded castle-placement dependency through released outer land and normal redevelopment. Fort combat, permanent allied/multi-unit garrisons, a developed-outpost keep journey, arbitrary land expansion and the full M0–M8 scope remain open; the goal remains active.

Finite watches at larger fortifications — implemented with placement limits

Operational keep/castle watch gates now support six existing soldiers with two/three separate civilian lookouts; towers retain four soldiers/one lookout. Local routes remain inside registered charter cells and use actual round-trip food, physical intermediate positions, finite host receipts and recall. City reviews expose the post and staffing requirements. Existing command/event identifiers, garrison versions and allied tower-only consent remain compatible.

The first four-file run passes all 28 tests. The expanded twelve-file run passes all 81 tests, including seven new cases, old tower/outpost/allied watches, budgets, professional service, logistics planning, passage, construction and charter extensions. New cases cover paid keep construction on actual extensions, six-person recruitment, daily receipts, readiness/staffing, mid-route recall, structural custody, malformed saves, offline equality and post-capacity gates. Preparation initially overfilled the fixture warehouse and blocked survey returns; the controlled starting materials were reduced to fit actual capacity. An attempted starter outpost keep correctly had no legal footprint, even after removing its unused lodge. That scenario now explicitly checks the layout limitation rather than inventing land. The full developed-outpost keep construction/deployment journey remains unverified. The fixture supplies controlled late-game construction stock, so no complete late-game production chain is claimed.

Live browser checks pass exact keep reviews, cancellation/acceptance, outward deployment, six-food daily receipt after arrival, physical recall, privacy, reload and 320/390/640/1440px layouts without overflow or browser exceptions. Narrow layout was visually inspected. Two actual server restarts retain stationed duty/receipts and later return. The isolated QA process is stopped after verification. The then-open castle-placement issue is resolved by the outer-charter release above. Fort combat, permanent allied/multi-unit garrisons and the rest of M0–M8 remain open.

Primary design, interface, player/technical wiki and map labels are synchronized. Getting started remains unchanged because this is later fortification work. Catalog validation, syntax, whitespace, generated wiki freshness and working-tree documentation coverage are checked separately below in the task results.

Economic specialization evidence — implemented and verified

Nine economic sectors now derive labels from three qualifying production days within a seven-day window. Actual completed batches, assigned workers and gross input/output quantities are recorded; imports, blocked work and planned production earn no credit. Neutral migration, save validation, private evidence, public labels, City/Regional views, briefings and copied forecasts are connected.

The initial four-file run passes 31 of 32 tests; its sole failure was a coastal expectation assuming eighteen fish produced instead of the actual twenty, while cooking consumed eighteen. That assertion is corrected. The expanded three-file run passes 20 of 21; the quarry fixture needs its startup wait plus three completed production days, so its observation window is corrected from three checks to four. The corrected three-file run passes all 21 tests; a later three-file development/protocol run passes all 22. A startup-boundary extension passes all 28 tests across three files. The broad selection covers 121 gameplay/map files and passes 1,010 of 1,012 tests. Its two failures expose a real reoccupation incompatibility: returning residents restart the household calendar, so the previous production period no longer matched the next check. Reoccupation now starts a fresh evidence window and records that reset while preserving assets and prior briefings. The corrected four-file outpost/local-charter/forecast run passes all 37 tests. The final ten specialization scenarios pass, including restore and the next full daily check after actual reoccupation. Focused counts overlap broad coverage; the full broad selection was not repeated after the targeted reoccupation correction and final two scenarios. No failure remains unresolved from that run.

The scenarios verify actual starter farming/timber production, coastal catch versus cooking inputs, paused/blocked/full-storage work, real textile recipe changes, quarry output belonging to its outpost, physical imports earning no producer credit, independent regional labels, neutral migration, malformed counters/dates/sectors/resources, private immutable reads, original startup waits, chronological/offline/forecast equality and the reoccupation calendar. Recognition grants no resources, people, workers or authority.

Live browser checks pass empty and established evidence, exact quantities, expanded-detail retention through refresh, staffing review cancellation/acceptance, four paused checks retaining recent labels, expiry on the following check, resumed physical production and recovered identity. Privacy checks verify owner-only detailed records and public labels without the ledger. Reload and 320/390/640/1440px layouts pass without overflow or browser exceptions; narrow sector evidence was visually inspected. Four actual server restarts retain establishment, paused history, expiry and recovery. The live resumption occurred between daily checks, so its fixture was corrected to wait through the real startup interval before three completed batches. It continued from the same persisted world without reseeding or grants. The isolated process and port 34281 listener are confirmed stopped.

Catalog validation remains 37 buildings, 30 technologies, 61 resources and 29 recipes. Runtime/browser syntax, whitespace, wiki freshness and working-tree documentation coverage are checked. Primary design, interface and both wiki audiences are synchronized; Getting started remains applicable because current starter producers accumulate evidence during ordinary daily work. Broader civic/cultural/military/trade-service specializations, larger settlement stages and the remaining M0–M8 requirements stay open. The full goal remains active.

Sustained charter-town progression — implemented and verified

Three consecutive capability checks now earn Town status for founded or locally registered villages with 48 actual residents. Housing, household water, health, meals, reserves, accounting, school/care, workshop inputs and completed physical exchange are checked. Three failing days downgrade without destroying assets or authority. The first real command-based fixture builds housing and institutions, learns and adopts techniques, completes actual trade and admits two finite migrant households before promotion. It passes. Its initial fixture-only failures were a too-short command key and trying to fund two houses inside one daily timber ceiling; the fixture now uses a valid key and waits through normal budget days.

The first expanded four-file run passes 34 of 35 tests; the failing new forecast test called a private helper instead of the exported forecast API. After that fixture correction, the three-file forecast/regional run passes all 23 tests. A later boundary test incorrectly changed serialized food without updating its warehouse history; it now changes the tracked live inventory. The corrected four-file compatibility run passes all 37 tests. The broad regression selection covers 117 gameplay files and passes all 982 tests, including seven development cases. The final three-file run passes all 18 tests after explicitly exercising camp evacuation and including charcoal processing among qualifying workshops. A separate three-file map/concept run passes all 22 tests. A final seven-case development run also verifies that restored services explain the pending daily check instead of asking for already-met requirements. Focused counts overlap broad coverage; the broad run was not repeated for those final narrow additions.

The scenarios verify paid housing, finite physical migration, local learning/adoption and trade, actual promotion without asset grants, interrupted qualification, delayed downgrade, recovery, institution loss, depleted workshop inputs, separate housing/water/health/food requirements, camp and evacuated-site exclusion, malformed saves, neutral old-save migration, immutable private City/overview reads, forecasts and chronological/offline equality. A foreign world overview retains the public stage but hides the development ledger.

Live browser checks pass exact requirement values, expandable detail retention through refresh, privacy, reload and 320/390/640/1440px layouts without overflow or browser exceptions. Real school staffing reviews are canceled without changing work, then accepted to cause a one-day warning and later three-day downgrade. Regional warning links return to the live overview. Restoring the worker and processing three real daily checks regains Town. Four actual server restarts retain promotion, warning, downgrade and recovery. The QA setup uses the command-based migrant/housing/service journey; time advances existing daily deadlines without population or resource grants. The narrow requirements were visually inspected. One attempt preceded server readiness and was rerun against the same process. The isolated process and port 34280 listener are confirmed stopped.

Catalog validation, runtime/browser syntax, whitespace, wiki freshness and working-tree documentation coverage are checked. Primary design, interface and both wiki audiences are synchronized. Getting started is reviewed and remains unchanged; this is later service-led growth. The original larger-city, specialization and remaining M0–M8 scope stays open; the goal remains active.

Mixed governor cargo plans — implemented and verified

Governor routes now support up to four distinct goods each way, sharing finite carrying weight, unit limits, reserve floors and cumulative allowances. Legacy instructions remain unchanged until explicitly edited. Additional target controls, exact reviews, allocation blockers, marked migration and physical custody are connected.

The initial three-file run passes 21 of 22 tests; the sole mismatch was an old neutral-migration assertion omitting the new capability marker. It is corrected. The four-file run passes all 30 tests, including eight mixed-load scenarios. The expanded two-file run passes all 23 tests, adding two-outpost competition, full-catalog message size and real prepared-fish/tool transport. The broad regression covers 118 gameplay files and passes all 995 tests. A final three-file run passes all 21 tests. Focused counts overlap broad coverage.

The ten mixed-load scenarios cover actual deliveries and returns, combined unit/weight limits, food priority, retained reserves, storage pressure, finite local and shared spending, recall without restoring allowances, competing outpost instructions, dated fish custody, stale/foreign/replayed/malformed orders, migration without gifts, invalid save rejection, private forecasts and offline equality. Full-catalog instructions remain within the existing wire-size limit.

Live browser checks pass exact reviews, cancellation without spending, consecutive edits, authorization without immediate dispatch, one actual mixed journey, pause while preserving its paid team and gross commitment, physical completion, stranger denial, reload and 320/390/640/1440px layouts without overflow or browser exceptions. Browser testing found that an acknowledgment cleared the accepted draft before refreshed city data arrived, so a subsequent edit could lose additional targets. The acknowledgment now retains the authoritative accepted mandate; consecutive edits pass on the same world without reseeding. Narrow forms and the review were visually inspected. Three actual server restarts retain instructions, funded cargo, completed delivery and cumulative spending. The QA fixture obtains its extra tools through actual imports and advances normal job deadlines. The isolated process and port 34279 listener are confirmed stopped.

Catalog validation remains 37 buildings, 30 technologies, 61 resources and 29 recipes. Runtime/browser syntax, repository whitespace, wiki freshness and working-tree documentation coverage are checked. Primary design, interface and both wiki audiences are synchronized. Getting started remains applicable because these instructions follow actual outpost development and Regional institutions. Further transport modes, broader governor duties and the remaining M0–M8 acceptance gates stay open; the full implementation goal remains active.

Funded regional road upkeep — implemented and verified

Explicit corridor mandates now fund actual repair expeditions at daily checks, with condition thresholds, worker/food safeguards, gross material ceilings, shared budget accounting, retained paid crews, migration and reviewed City controls. Regional decisions, briefings and private forecasts expose the same outcomes. Instructions repair existing sections only and never acquire land or build new roads.

The initial four-file run passes all 36 tests, including eight new mandate scenarios. Four additional cases cover manual-crew priority, fire, full storage and actual ruler death. The expanded four-file run initially passes 36 of 37: its succession assertion incorrectly expected completion after critical illness removed the required service staffing. Inspection confirms lawful service-loss withdrawal with every unused building material returned and the public mandate/gross spending retained; the corrected assertion now verifies that behavior. The corrected expanded run passes all 37 tests. The broad regression covers 117 gameplay files and passes all 984 tests, including the final twelve upkeep cases. Focused counts overlap this coverage.

Tests verify real paid travel/repair/return, threshold-only selection, pause without cancelling paid work, immutable gross allowances after recall, no second road crew, food/worker/service/public/shared-budget protections, stale/foreign/invalid/replayed orders, neutral migration, malformed policy/crew/returned-history rejection, private immutable projections, factual briefings, regional exceptions, forecast/offline equality, fire interruption, storage-held cargo/workers and council continuity after actual death. Missing engineering still prevents safe repair after succession; no workers or service are recreated automatically.

Live browser checks pass reviewed authorization/cancellation with no stock changes, consecutive draft edits with exact accepted values, pause/resume, one actual daily repair departure, pausing while preserving the travelling crew, completed work, stranger denial, reload and 320/390/640/1440px layouts without overflow or browser exceptions. Narrow forms, the review and completed policy were visually inspected. Three actual server restarts retain instructions, physical crews, completion and gross spending. The QA fixture builds actual road sections and advances the normal clock; no direct stock or road-condition grants are used. The isolated process and port 34278 listener are confirmed stopped.

Catalog validation remains 37 buildings, 30 technologies, 61 resources and 29 recipes. Runtime/browser syntax, repository whitespace, wiki freshness and working-tree documentation coverage are checked. Primary design, interface and both wiki audiences are synchronized; Getting started remains applicable because automatic corridor upkeep follows actual outpost and road development. Bridges, broader route throughput, more governor duties and the remaining M0–M8 scope stay open. The full goal remains active.

Nursery stock and woodland planting — implemented and verified

A staffed tree nursery now turns actual compost and food into whole planting stock with a local mature seed source, suitable moisture and active Crop rotation. New chartered planting uses four saplings, four timber, one tool and a two-person crew; existing paid jobs keep their original terms. The finite 64-unit waystation supplier provides a physical first-stock import for treeless starts, and normal player/outpost cargo supports saplings. Land & water has explicit forestry quotes/reviews, production and supply graphs show the chain, and versioned migration preserves existing player assets.

The corrected six-file compatibility run passes all 61 tests. Earlier failures were missing tools in the new fixture, outdated catalog counts and an old-land save fixture retaining newer nursery metadata; these are corrected. The expanded eleven-scenario nursery run passes. The broad regression covers 116 gameplay files and passes all 971 tests. A later two-file run passes all 24 tests, including one additional actual outpost delivery/collection scenario; this overlaps broad coverage and the broad suite was not repeated for that test-only addition.

The scenarios cover actual propagation, imported first woodland, finite supplier reservation/recall/exhaustion, required soil stewardship and mature local seed sources, fire and input interruptions, young growth followed by actual mature harvesting, paid crews, whole unused refunds and explicit overflow, replay/private immutable reads, old-save migration without player gifts, malformed ledgers, physical player and outpost delivery, forecasts and offline equality. Stored planting-stock mortality, seasonal seed collection and species-specific care remain unimplemented.

Live browser checks cover planting review cancellation without spending, exact funding, queued crews, unused cancellation refunds, completed young woodland with immediate harvest blocked, stranger denial, reload and 320/390/640/1440px layouts without overflow or browser exceptions. Narrow review and forestry cards were visually inspected. Three actual server restarts preserve queued work and completed planting. The QA setup grows its planting stock through an actual staffed nursery; its clock completes paid work without adding plants or mature trees. One browser selector initially matched the obscured background sidebar and was narrowed to the active City panel; accepted work continued without reseeding. One browser attempt preceded server readiness and was retried on the same process. The isolated process and port 34277 listener are confirmed stopped.

Catalog validation passes with 37 buildings, 30 technologies, 61 resources and 29 recipes. Runtime/browser syntax, repository whitespace, generated wiki freshness and working-tree documentation coverage are verified. Primary design, interface and both wiki audiences are synchronized; Getting started now explains importing first planting stock for treeless villages. The full M0–M8 implementation goal remains active.

Physical construction handcarts — implemented and verified

Chartered structural orders can explicitly borrow one existing serviceable cart for a 20% base-work reduction. Manual hauling remains the migrated default. Equipment is separate from spent materials and four-person staffing, competes with cargo trips, persists through queues/pauses and returns worn after actual work. Completion, cancellation and ruin interruption recover it; full warehouses retain whole carts for reviewed collection without holding workers. District and automatic-repair funding use the same policy. Existing paid jobs keep their terms; legacy stock is preserved, new chartered work ignores haulage and chartered stable output is inactive.

The initial eight custody scenarios pass. The first ten-file compatibility run passes 87 of 88 tests; its repeated repair fixture exhausted real tools and then iron, so the corrected fixture imports those materials through actual caravans. The twelve-scenario run passes. The broad regression covers 115 gameplay files and passes 957 of 958 tests; the sole failure is a pre-logistics save fixture retaining the new construction-equipment ledger after removing its parent logistics marker. That fixture now removes both as appropriate for the older save. Two later scenarios cover actual district funding and migrated stable inactivity. Their setup was corrected to fund specialist tools, authorize the required two district steps, and preserve warehouse history through its live inventory wrapper. The six-file corrected run passes all 54 tests; the six-file visibility/forecast run passes all 53 tests. The final fourteen-scenario custody run passes after strengthening persisted job and building identity checks. These runs overlap; the broad suite was not repeated after the fixture correction, two added scenarios and final validation/visibility additions. No unresolved failure remains from that run.

The scenarios verify physical competition with caravans, timing and four-person crews, unused versus worn returns, queued and paused custody, building completion/demolition/rebuild/salvage, actual paid cartwright repairs, full and fractional storage, destruction, overflow cancellation, collection replay, migration without gifts, malformed custody/history, private immutable reads, forecasts, regional collection alerts, factual briefings, offline equality, automatic repair ceilings, district funding and legacy stable asset preservation. Shared-development haulage tests remain passing.

Live browser checks pass policy and construction review/cancellation without stock changes, actual queued borrowing, unused cancellation recovery, later completed work, a storage-held worn cart, disabled collection while full, reviewed collection after a real cargo departure frees space, stranger denial, reload and 320/390/640/1440px layouts without overflow or browser exceptions. Narrow policy, custody and collection screens were visually inspected. Four actual server restarts preserve held/collectible equipment and completed collection, including the final save validator. The QA clock completes actual funded work; the explicit full-storage boundary adds stock only to exercise warehouse pressure, and collection space is then freed by a real dispatch. The first browser attempt preceded server readiness; the same process was reused. A duplicate sidebar/main cancellation selector was narrowed, and the already accepted order was continued without reseeding. The isolated process and port 34276 listener are confirmed stopped.

Catalog validation passes with 36 buildings, 30 technologies, 60 resources and 28 recipes. Runtime/browser syntax, repository whitespace, generated wiki freshness and working-tree documentation coverage are verified. Primary design, interface and both wiki audiences are synchronized; Getting started explicitly retains manual construction without a cart prerequisite. Horse breeding, draft-animal transport, cart hazard damage, maritime routes and the remaining M0–M8 work stay open. The full implementation goal remains active.

Child household membership and maturation — implemented and verified

An explicit adoption names an existing twelve-year-old dependent without changing population, labor, food needs, stock or authority. Children share the eight-member household cap, retain normal daily needs and mature through the existing clock. At eighteen, one existing dependent becomes exactly one civilian worker. Adult-only embodiment, council office, specialist training and personal inheritance checks, marked migration, mixed-adoption history validation, City reviews, projections and briefings are implemented.

The initial four-file run passes 32 tests; the follow-up three-file run passes 25 after correcting the specialist test to use the actual command. The five-file expanded run passes all 42 tests. The broad regression covers 114 gameplay files and passes 944 of 945 tests; its sole failure is an old exact forecast expectation that omitted the added worker and maturity-date fields. That expectation is corrected. The six-file corrected run passes all 53 tests. The final three-file verification passes all 29 tests, including ten childhood scenarios and the corrected forecast test. Focused counts overlap broad coverage; the tenth childhood scenario was added afterward. The entire broad suite was not repeated after the expectation correction and final will-validation strengthening; no unresolved failure remains from that run.

The childhood scenarios verify unchanged adoption-time population/labor/stock/needs, six real lifecycle years before a one-worker conversion, mixed adult/child membership ordering, shared household limits, adult-only command and saved-history checks, guardian death, all-adult loss and council care, explicit handover, actual earned-coin inheritance only after adulthood, exhausted dependent availability, immutable private forecasts, malformed migration/receipts, revisions/replay and offline equality. A comparison with an unadopted world proves identical meal consumption and output through maturation; a full later-life scenario reaches age 85 and removes that same worker and resident exactly once.

Live browser checks pass adoption review/cancellation without changes, retained name drafts, unchanged population/labor/stock/coins on acceptance, age-seventeen restrictions, age-eighteen worker availability, separate reviewed council nomination and continued incumbent office. Stranger access is denied; reload and 320/390/640/1440px layouts pass without overflow or browser exceptions. Narrow review and child/adult cards were visually inspected; the name field now has a full touch target and the receipt shows its recorded guardian. Three actual server restarts preserve the pre-birthday child, adult conversion and nominated successor. The explicit QA clock advances actual village checks without adding people, labor, age or supplies directly. The isolated process and port 34275 listener are confirmed stopped.

Catalog validation passes with 36 buildings, 30 technologies, 60 resources and 28 recipes. Runtime/browser syntax, repository whitespace, generated wiki freshness and working-tree documentation coverage are verified with this change. Primary design, interface and both wiki audiences are synchronized; Getting started was reviewed and a later-game child-household guide added. Unnamed births, unnamed-cohort aging, childhood illness/mortality, wider goods/land estates and remaining M0–M8 work stay open. The full implementation goal remains active.

Worked quarry leases — implemented and verified

Contract law now enables explicit finite leases of an owned idle stone quarry. The tenant reserves real rent, separately dispatches four actual residents with tools and food, pays on arrival, extracts finite stone through full workdays and returns goods physically. Exit notice, recall, expiry, storage holds, paid-rent finality, service boundaries, exclusive site use, marked migration, conservation, private projections and City/Region controls are implemented.

The first four-file compatibility run passed 41 of 43 tests; two test expectations were corrected: the malformed-extraction error's wording and the use of a paused regional operating budget instead of the timber-only public budget. Its corrected run passes all 43 tests. The expanded regression covers 113 gameplay files and passes 933 of 935 tests; the two failures were outdated technology-count assertions in education and refuge after adding Contract law. Both are corrected. The final five-file verification passes all 44 tests, including both corrected suites and twelve quarry scenarios. These focused counts overlap the broader run; the twelfth quarry scenario was added afterward. No unresolved failure remains from that run, but the entire broad suite was not repeated after the count-only corrections.

The quarry scenarios cover command-built travel and extraction, cancellation/expiry, unpaid physical refunds, full storage, exit notice, site exclusivity, service loss, fire interruption, malformed saves, private immutable reads, revision/replay protection, operating-budget suspension, forecasts/offline equivalence, actual tenant death, depleted deposit remainder, unaffordable rent and party authority. Supply graphs describe the one-time tools-to-stone workday separately from rent, travel provisions and actual warehouse stock.

Two-player browser checks pass offer/reservation/dispatch reviews, cancellation without spending, retained drafts, actual rent reservation, arrival payment without premature stone, completed twelve-stone return, accepted cancellation/refund, Region crew markers and reviewed physical recall. Both parties pass reload, stranger-access denial and 320/390/640/1440px layouts without overflow or browser exceptions. Narrow reviews, receipts and the Region marker were visually inspected. Four actual server restarts preserve funded travel, arrival, completed return/cancelled permission, and recalled-crew refunds. The explicit QA clock advances real expedition deadlines without adding rent, deposits, output or workers. The isolated process and port 34274 are stopped after verification.

Catalog validation passes with 36 buildings, 30 technologies, 60 resources and 28 recipes. Runtime/browser syntax, repository whitespace, generated wiki freshness and working-tree documentation coverage are checked with this change. Primary design, interface and both wiki audiences are synchronized. Getting started was reviewed; its founding/staffing sequence remains applicable, with a separate later-game quarry lease walkthrough. Other resource leases, land purchases, courts and the remaining M0–M8 scope remain open. The full goal stays active.

Agreed player coin sales — implemented and verified

One-time player sales now reserve a buyer's real communal coins, deliver actual goods with an ordinary funded caravan and return payment physically. Reviewed prices, service requirements, cancellation/refunds, storage holds, fish expiry, succession, finite monetary conservation, save migration and private UI/projections are implemented. No credit, automatic renewal or new money is granted.

The first four-file compatibility run passes all 38 tests, including eight new monetary scenarios. The expanded ten-scenario monetary run passes, adding actual public death and pre-exchange fish expiry/refund. Initial fixture corrections account for ordinary timber upkeep while travelling, an absent manuscript inventory key meaning zero, and waiting for the fishery's actual next production deadline before offering fresh stock. The expanded regression passes all 923 tests across 112 gameplay files. The final three-file monetary/forecast/supply run passes all 28 tests, including eleven monetary scenarios. The additional competing-reservation case proves that accepted prices cannot overdraw a buyer, and the service-loss scenario now checks both pre-dispatch blocking and continued funded travel. These focused counts overlap the broader suite; the eleventh monetary scenario was added afterward. Delivered sale proceeds also fund an actual subsequent NPC tool purchase.

Two-player browser checks pass proposal, acceptance and dispatch reviews, cancellation without spending, retained total-price drafts, exact buyer reservation, delivery of a physical manuscript, returning unspendable money, home credit and a separate accepted-sale cancellation/refund. Both parties pass reload, private stranger-access checks and 320/390/640/1440px layouts without overflow or browser exceptions. Narrow proposal and completed-receipt views were visually inspected. Three actual server restarts preserve travelling money, completed delivery/credit and cancelled-sale refunds. The explicit QA clock advances actual caravan deadlines without injecting goods or coins. The isolated QA process and port 34273 listener are confirmed stopped.

Catalog validation passes with 36 buildings, 29 technologies, 59 resources and 28 recipes. Runtime/browser syntax and the repository-configured whitespace check pass. The primary design, interface and both wiki audiences are synchronized; Getting started was reviewed and a separate player-sale walkthrough follows it. Generated wiki freshness and working-tree documentation coverage pass for 24 source documents. Auctions, recurring monetary contracts, credit, broader resource leases and broader trade institutions remain open alongside the full M0–M8 goal.

Regional service-road expeditions — implemented and verified

Paid four-resident expeditions now build or repair up to four eligible sections of an owned outpost route, carry finite materials and food, spend actual working days and return physically. Completed sections integrate with real cargo timing and wear. Corridor rights grant no land or whole-plot clearing. Recall, interrupted work, service loss, storage-held unloading, operating ceilings, private projections, City reviews, map markers, supply graphs and marked save migration are implemented.

The initial eight-scenario road suite passes. A four-file intermediate run passed 35 of 36 tests; its remaining fire test modified a read-only vegetation projection instead of the explicit hazard boundary. The corrected eight-scenario suite passes. The six-day forecast fixture was corrected to expect a homeward crew on a six-and-a-half-day journey, and service loss near home correctly permits arrival in the same return step. The expanded regression passes all 912 tests across 111 gameplay files. A later seven-file compatibility run passes all 55 tests after protecting travelling road workers from adoption/migration, excluding travelling jobs from home-plot occupation, omitting private road supplies from public chunk markers and adding the normal simulation-catch-up command guard. The final nine-scenario road run passes after strengthening the home-plot assertion. These focused counts overlap the broader suite; the ninth road scenario was added afterward.

Browser checks pass exact construction funding, review cancellation without spending, partial work, completed sections and real Region markers, paid repair funding, reviewed recall and physical unused-supply return. Reload and 320/390/640/1440px layouts pass without overflow or browser errors. Narrow funding, receipt and map views were visually inspected. Three actual server restarts preserve paid work, completed construction and returned repair supplies. The isolated QA process and port 34272 listener are confirmed stopped. The explicit QA clock advances actual walking and work deadlines without adding road sections, inputs or output. Private City access rejects unrelated accounts; public chunk assertions show only movement fields for road crews, with material and meal ledgers omitted.

Catalog validation passes with 36 buildings, 29 technologies, 59 resources and 28 recipes. Runtime/browser syntax and whitespace checks pass. Primary design, interface and both wiki audiences describe the delivered corridor rights and custody. Getting started was reviewed; its initial founding/staffing sequence remains applicable, and a separate service-road guide follows it. The generated wiki contains 24 source documents and passes freshness verification. Arbitrary road networks, bridges, cross-owner construction agreements and the remaining M0–M8 scope remain open. The full goal remains active.

Scriptorium commissions — implemented and verified

A paid staffed Community scriptorium enables finite one-to-four-book commissions alongside public learning. Actual materials, one attention and two additional scribes fund two working days per book. Storage holds finished output without duplicating or discarding it; explicit pause/resume, institution and worker loss, cancellation/refunds and public spending checks preserve exact custody. Physical books use existing player exchange and recipient study/adoption. Neutral marked migration, retained receipts, supply graphs, private forecasts, regional warnings and City reviews are implemented.

The initial eight-file regression passes all 67 tests. The scriptorium/supply-chain subset passes all 15 tests, including the first nine new scriptorium scenarios. Ten scriptorium scenarios now also cover actual public death, lawful handover, restaffing and reviewed resumption with preserved progress. The focused scriptorium/city/multiplayer suite passes all 22 tests after the overview privacy correction. The final ten-scenario scriptorium run also passes strict malformed-input checks, rejecting inherited-property topic names and array identifiers without spending. These focused counts overlap broader coverage.

The first 110-file regression passes 901 of 904 tests. Two failures were outdated 35-building assertions after the new building raised the catalog to 36. The third ran an earlier succession fixture that tried to resume before restoring the school and Scholarship after illness; the corrected test restores the actual staff and allows the service's normal daily check. The final expanded regression passes all 904 tests across 110 gameplay files. The initial private-City test was corrected to expect the existing forbidden response. An additional read-model audit caught shared-overview exposure of scriptorium and specialist records; foreign overview responses now omit both ledgers, with explicit owner/stranger assertions.

Browser checks pass funding review/cancellation without spending, exact 12-timber/six-food funding for three books, one attention, partial work, reviewed pause/resume, cancellation review, three-book completion and actual cancellation/refund of a new unstarted commission. Reload and 320/390/640/1440px layouts pass without overflow or browser errors; narrow review, work and receipt cards were visually inspected. Five actual server restarts preserve accepted funding, partial work, completed output and cancelled-order receipts. Final owner/stranger browser checks verify both private City access and shared-overview redaction after the privacy correction. The isolated QA process and port 34271 listener are confirmed stopped. The explicit QA clock advances real village checks without inserting output or progress. Catalog validation passes with 36 buildings, 29 technologies, 59 resources and 28 recipes. Runtime/browser syntax and whitespace checks pass; the generated wiki includes 24 source documents and passes freshness verification. Design, interface and both wiki audiences are updated. Getting started was reviewed; its founding, staffing and first research/trade advice remains applicable. The full M0–M8 goal remains active.

Allied tower watches — implemented and verified

Two lawful leaders can now agree a finite defensive tower watch using the donor's actual trained force and the host's staffed tower and food. Seven/fourteen-day permission includes outward travel; donor acceptance funds carried food and two attention, with explicit garrison-purpose third-party passage. Actual arrival refill and daily support obey host reserves and operating budgets. Prepared tower service changes real new-caravan routes. Three-day host exit notice, immediate donor recall, lost signing authority/services/readiness and supply failure preserve physical return. Completed receipts retain exact spending and briefings. A marked ledger/version-five garrison migration leaves old worlds and paid owned watches unchanged. Party-only reviews, forecasts, regional attention and briefings are implemented.

The final expanded regression passes all 894 tests across 109 gameplay files. The final allied/professional subset passes all 11 tests, including ten allied scenarios. These cover actual travel and host food, permission expiry and notice, immediate recall, failed arrival, lost services/authority, fire delays, paused operating budgets, real caravan detours, migration and malformed saves, private immutable forecasts, offline equivalence, revision/replay protection and advancing-clock restoration. The transit scenario confirms separately ratified garrison permission and rejects legacy combined relief/escort permission. Focused counts overlap the full suite.

Actual browser restart testing exposed a one-millisecond difference between acceptance and expiry from repeated live-clock reads. Invitation/control commands now use one authoritative timestamp; the regression reproduces that advancing-clock boundary without weakening restore validation. The invalid pre-fix QA world is retained separately; the complete browser journey then passed from a fresh command-built fixture. Earlier test corrections accounted for travel consuming permission time, the existing quote field and actual critical-illness succession instead of an unavailable observer action.

Browser checks pass host invitation and donor acceptance reviews, cancellation without spending, exact departure food and two attention, real arrival/preparation, host exit-notice review/cancellation/acceptance, physical return and completed receipts. The checked journey records 5⅓ arrival food and 12 daily food for four soldiers before returning after notice. Three actual server restarts preserve accepted travel, active tower service and completed return. Both parties retain their private views; unrelated accounts cannot access them. Reload and 320/390/640/1440px layouts pass without overflow or browser errors, and narrow reviews/watch/receipt cards were visually inspected. The isolated QA process and port 34270 listener are confirmed stopped.

Catalog validation passes with 35 buildings, 29 technologies, 59 resources and 28 recipes. Runtime/browser syntax, whitespace and generated-wiki freshness checks pass. The primary design, interface and both wiki audiences describe the delivered rules. Getting started was reviewed; its existing founding, staffing and early-trade steps remain applicable. The full M0–M8 goal remains active.

Player fish trade — implemented and verified

Fresh and preserved fish now participate in exact one-time barter, relief and both finite recurring agreement types. Dated custody survives acceptance, dispatch, cancellation, travel and partial unloading. Pre-exchange spoilage closes an accepted agreement or physically recalls a travelling one, releases surviving payment and stops future recurring rounds. Post-exchange spoilage records a return-payment loss without undoing final delivery. Existing nonfish saves migrate neutrally; per-batch conservation, dates, phase and physical custody are validated. Reserved payment dates retain capacity slots; production and incoming goods wait when dates cannot fit. Reviews, batch receipts, recurring history, briefings, regional attention and forecasts expose the rules within current permissions.

The five-file focused run passes 56 tests. The strengthened 15-scenario fish-trade run passes, including real recurring barter/relief, reserved-payment expiry, fire recall, payment loss after exchange, manual cancellation, full destination storage, partial unloading, 256-date production blocking/recovery, offline equivalence, migration/corruption, private immutable forecasts and revision/replay protection. These focused counts overlap broader regression coverage. The three-file fish/briefing/regional run passes 28 tests, and additional assertions verify both parties receive expiry briefings and regional warnings without exposing them to unrelated accounts. The expanded regression passes all 883 tests across 108 gameplay files. A subsequent save-validation audit adds rejection of an impossible combined local/reserved date capacity; the final 15-scenario fish suite passes after that addition. These focused counts overlap the full suite.

Browser checks pass two-player acceptance and dispatch reviews, cancellation without stock changes, original source/payment dates, exact travelling custody, completed deliveries, spoilage cancellation, private stranger access, reload and 320/390/640/1440px layouts. Narrow dated receipts and the expiry review were visually inspected. Five actual server restarts preserve accepted travel, completed delivery and spoiled-cargo history, including the final save validator. Visual review also corrected recalled agreements that still said returning after unloading; completed recalls now explicitly say return complete. The explicit QA clock advances actual caravan checks; expiry is processed at the first eligible caravan check on or after its deadline. Initial browser attempts preceded server readiness; the same process was reused once listening. The spoilage QA boundary was corrected to include that next caravan check. Catalog validation passes with 35 buildings, 29 technologies, 59 resources and 28 recipes. Runtime/browser/test syntax, whitespace and generated-wiki freshness checks pass; the wiki includes 24 source documents. The primary design, interface and both wiki audiences are updated, including early trading advice in Getting started. The isolated QA process and port 34269 listener are confirmed stopped. The full M0–M8 goal remains active.

Independent adult aging and later lives — implemented and verified

Landless adults now age during work, travel, pauses and alternate embodiment, with one year per 24 village days, warning age 80 and natural death at 85. Death stops future personal activity, seals existing goods and unused work inputs, ends travel at the real location and clears only the deceased adult's embodiment. The public ruler and already reduced origin cohort remain unchanged. A later reviewed life draws a different actual civilian with a new identity, age 24 and no goods/office grant, retaining the old career and sealed estate. Versioned migration preserves ages without retroactive deaths and gives already elderly adults one full year. Private forecasts, regional attention, lifecycle dates and ended-life screens are live.

The first three-file compatibility run passes 21 tests. The four-file focused run passes 30 tests, including the first nine new aging scenarios. The expanded aging/forecast/regional suite passes 28 tests, including ten new lifecycle scenarios. These cover a healthy 61-year life, actual finite-source continuation, work and role switches, public handover, death before same-check paid output, unused inputs, paused journey location, grace migration, already elderly adults, malformed current/archived ledgers, offline equivalence, private immutable projections, revision/replay protection and unavailable replacement civilians. Later assertions additionally check the first full birthday, the age-80 warning and resumption without rerolling the adult. The final ten-scenario lifecycle run passes after adding those assertions and reconciling the explicit no-available-civilian fixture through ordinary labor rules before restore.

Browser checks pass current age and later-life dates, retained paid work, death with exactly the unused hewing inputs sealed, absence of dead-life work/travel/barter controls, a reviewed new life with cancellation and retained name, distinct age-24 identity and empty personal stock, old sealed-life history, unchanged community goods/people/workforce/office, stranger privacy, reload and 320/390/640/1440px layouts. Narrow living, ended-estate and new-life cards were visually inspected. Three actual server restarts preserve funded personal work, the authoritative death boundary and the accepted second life. The QA fixture explicitly sets a recorded age of 84 before advancing real checks; the separate healthy lifespan scenario exercises all 61 years. The isolated process and port 34268 listener are confirmed stopped. The expanded regression passes all 868 tests across 107 gameplay files, including ten new lifecycle scenarios. Focused runs overlap this suite and are not additional test counts. Catalog validation passes with 35 buildings, 29 technologies, 59 resources and 28 recipes. Runtime/browser/test syntax, whitespace and generated-wiki freshness checks pass; the wiki includes 24 source documents. The primary design, interface and both wiki audiences are updated; the Getting started founding sequence was reviewed and remains valid. The full M0–M8 goal remains active.

Invited resident aging — implemented and verified

Invited adults now age on actual community checks at one year per 24 village days, warn from 80 and die naturally at 85. A newly accepted 24-year-old has about 244 real days to that boundary. Role expiry, renewal, revocation and host succession retain the same clock. Death removes one real person and worker, preserves the host's office and funded work under ordinary labor limits, and retains the ended life for fresh invitation-based continuation. Versioned migration preserves recorded ages without retroactive deaths; already elderly migrants get a full year's grace. Leaving freezes the last recorded age without killing the civilian. Host/resident cards, life history, regional attention, briefings and copied-world forecasts expose the new state within existing permissions.

The six-file focused suite passes 46 tests, including eleven new aging scenarios. A healthy resident actually advances through 61 lifecycle years, while lawful founder succession and adoption preserve a host for later consented continuation. Other tests cover birthday rounding, work changes, one-person/worker loss, live host office, migration, malformed ledgers/death evidence, critical-health precedence, immutable/private forecasts, offline equivalence, stale identities and replay. The initial run's only failure was an empty migrated ledger expectation missing the new additive marker; the expectation is updated. A subsequent two-file run passes all 18 tests after invitation creation and acceptance timestamps were made internally consistent. Browser verification confirms the host and resident age cards, old-age death, revoked private/work access after death, review/cancellation/acceptance of a fresh invitation, retained name draft, distinct 24-year-old identity, old life at 85, no added people/workers/stock, private stranger access and reload. All four responsive widths pass. Visual review caught time-only lifecycle dates; they now include the full calendar date, and both ended/new-life narrow cards were inspected. The browser harness was corrected to select the resident home and restore the host tab after reload; the real continuation transaction had already passed its state assertions.

Three actual server restarts preserve the living resident, authoritative natural-death boundary and newly accepted life. The explicit QA boundary sets the initial resident age to 84, then advances real community checks; the separate full-lifespan test covers all 61 years. Exact host stocks, people, workforce and lifecycle records survive reload/restart. The isolated QA process and port 34267 listener are confirmed stopped. The full regression passes all 858 tests across 106 gameplay files, including the eleven new resident-aging scenarios. The focused runs overlap this suite and are not additional test counts. Catalog validation passes with 35 buildings, 29 technologies, 59 resources and 28 recipes. Runtime/browser syntax, whitespace and generated-wiki freshness checks pass; the wiki contains 24 source documents. Both wiki audiences, the interface and primary design are updated; the Getting started founding/staffing sequence was reviewed and remains valid. The full M0–M8 goal remains active.

Permanent field casualties — implemented and verified

Newly ordered patrols and accepted relief campaigns now resolve permanent deaths, reduced real population, lost fitted gear/quivers/food, surviving wounded troops, cancelled future payroll and complete force destruction. Odd surviving cohorts can recruit the real shortfall to two/four/six. Legacy accepted orders migrate without retroactive deaths. Destroyed relief ends at the battlefield and releases unused host depot reserves with storage-aware overflow. City reviews, loss history and briefings distinguish death, injury and physical return. Current rules and remaining scope are in the living-world design.

Initial checks exposed old tests expecting every two-person patrol member to survive and a test fixture that replaced inventory accessors with plain data. Legacy reinforcement tests now verify actual legacy-policy migration while retaining the existing bound inventories; new scenarios cover current-policy survivors. The archer boundary explicitly opens the sightline to exercise a real paid volley. The corrected five-file focused run passes 45 tests; the expanded ten-file military run passes 105. The first full regression passes all 846 tests across 105 files. A subsequent audit found that pre-death travel food could subtract meals from living residents; the daily calculation now retains each fallen resident's elapsed pre-contact demand. The five-file check covering casualties, military, population, founding and forecasts passes 79 tests, including the new death-day/next-day food scenario. The final expanded regression passes all 847 tests across 105 gameplay files, including eleven new casualty scenarios. The focused runs overlap that full suite and are not additional scenario counts.

Browser checks pass explicit permanent-risk review/cancel/accept, exact departure food, actual casualty reports, physical homeward position, home recovery, reviewed one-person reinforcement/cancel/accept, unchanged total surviving population, exact civilian/kit transfer, reload, private access and 320/390/640/1440px layouts. Narrow risk-review and casualty cards were visually inspected. Four actual server restarts preserve departure, post-contact survivors, return and funded replacement training. An explicit QA clock advances six actual walking steps to contact and six back, then a full recovery check. A QA comparison was corrected to use the public casualty projection instead of an intentionally omitted raw defense object. The isolated server process and port 34265 listener are confirmed stopped. A separately command-prepared two-person professional relief force also reaches actual contact and is destroyed at an explicit severe-readiness boundary. Both consenting players’ browser screens show the battlefield end date, zero surviving force, no return in progress and unused host depot food returned; four viewport widths pass. The narrow destroyed-campaign card was visually inspected, and this second isolated server and port 34266 are confirmed stopped.

Catalog validation passes with 35 buildings, 29 technologies, 59 resources and 28 recipes. Both wiki audiences and the interface/design references are updated; the founding walkthrough was reviewed and its existing initial steps remain valid. Runtime/browser/test syntax, whitespace and final generated-wiki freshness checks pass; the wiki includes 24 source documents. This delivery does not complete named personal field combat, sieges, territorial war or the full M0–M8 goal.

Named specialist training and service appointments — implemented and verified

Added funded school courses for existing named household workers: three full village days, one real learner, four timber/eight food/one tool, an active subject mentor, Literacy and a staffed school. Separate appointments reduce recurring program supplies by 25% while preserving ordinary service workers, household meals and local capability. Adults can hold several qualifications but only one appointment; studying and appointment cannot overlap. Pause or missing capacity releases the learner and retains paid progress. Cancellation refunds only unused materials with storage checked. Trainee death prevents graduation, and specialist death leaves a vacancy until explicit replacement or release. Old saves receive empty ledgers without new skills, labor or goods.

The nine-file focused suite passes 77 tests, including ten new scenarios covering actual paid training and lower daily consumption, pause/resume/full-day timing, school/mentor loss, refunds/full stores, labor release, public succession, multiple personal qualifications with single-role exclusivity, malformed state, neutral migration, private immutable views, replay/revision protection, death, forecasts and offline equivalence. A later focused assertion also verifies that a genuinely twice-qualified adult cannot occupy two services. Initial tests were corrected to align school preparation with a daily boundary, distinguish simulation batching revisions from economic state, and retain funded work while allowing illness to release unavailable workers. Runtime requirements were kept intact.

The full regression passes all 836 tests across 104 gameplay files. Browser checks pass retained adult/subject selections, funding review/cancel, exact materials and one real learner, pause/resume, graduation, reviewed appointment/release cancellation and acceptance, reload, private access and 320/390/640/1440px layouts. Narrow course, review and qualification cards were visually inspected. An explicit QA clock advances four real village checks to complete three full stages from a mid-day start; no population or automatic appointment is granted. Three actual server restarts preserve the funded course, completed qualification and named appointment, with exact inventories, population and effective upkeep. The isolated QA process and port 34264 listener are confirmed stopped.

Catalog validation passes with 35 buildings, 29 technologies, 59 resources and 28 recipes. Runtime/browser syntax, whitespace and generated-wiki checks pass; both player guidance and the technical wiki explain the new behavior. The broader M0–M8 goal remains active; this household training path does not complete wider specialist recruitment, mobility, licensing or larger institutions. Current rules are in the living-world design.

Slow household aging and natural succession — implemented and verified

All living named founder-household adults now age once per 24 village days (four real days), with warnings from 80 and old-age death at 85. The age clock persists through offline play, embodiment, appointment and reload. Versioned migration preserves recorded ages and starts tracking at migration without retroactive deaths. Adopted adults age from their actual accepted date. Death removes the real resident/worker; a relative's death preserves a living ruler and existing work, while the ruler's death starts council stewardship. Delayed handover attaches to the pending public chapter even after later relative deaths. Same-check coin inheritance follows death-chapter order and uses historical ages; unearned stipend escrow returns before further pay.

City lifecycle cards and decision reviews show exact ages and dates. Death chapters, regional attention, return briefings and forecasts distinguish aging, natural death and public succession. The final six-file focused suite passes 50 tests, including ten new lifecycle scenarios: a healthy 51-year simulation, grace migration, real civilian adoption, exact stipend/estate ordering, retained research/building work, malformed saves, immutable private forecasts, offline equivalence, identity/replay protection, an already-elderly migration boundary and natural ruler-versus-relative patrol recall. The added replay check initially compared delivery envelopes rather than the durable result; the assertion now checks the duplicate flag, same result and unchanged state.

Browser checks pass age warnings, reviewed/cancelled/accepted appointment, embodiment without authority, cancelled/accepted lawful handover, reload, private access and 320/390/640/1440px layouts. Narrow lifecycle and review cards were inspected. Two actual server restarts preserve family clocks, appointments, death chapters, exact stocks and population. A command-prepared self-sustaining village advances 1,200 actual daily checks, loses its founder at 85 and transfers office lawfully without a new grant. QA comparisons exclude the unrelated live waystation projection timestamp and absent optional properties. The isolated QA process and port 34263 listener are confirmed stopped.

The initial broad run passes 797 of 824 scenarios; its 27 failures expose long development fixtures that assumed immortal named adults or omitted post-death character identity. Their preparation now makes explicit adoption, council appointment and lawful handover commands, releases real mill workers for carrying after worker deaths, and reviews a smaller home reserve before a recovery expedition. Normal succession-boundary tests keep interregnum observable. The corrected advanced-waterworks and charter suite passes all 19 tests. Runtime authority, labor and reserve validation is unchanged. The final expanded broad regression passes all 826 tests across 103 gameplay files. Catalog validation passes with 35 buildings, 29 technologies, 59 resources and 28 recipes. Script syntax, whitespace and the generated wiki with 23 source documents pass verification. Children, births, wider NPC lifecycles, named personal field mortality, broader estates and all remaining M0–M8 acceptance work remain open. Invited-resident aging and anonymous military field casualties are delivered in the newer entries above. See the living-world design for current rules.

Dated fish on outpost supply routes — implemented and verified

Manual and finite governor routes now carry fresh/preserved fish with the source batches' original dates. Loading withdraws oldest stock; collection is reserved at the outpost with the same age. Actual route checks and recall remove expired portions before transfer. Surviving delivery, local release, return and partial unloading preserve dates; neither delays nor full stores pause aging. Fish is separate from carrier provisions. A per-bucket ledger conserves remaining, spoiled, delivered and returned/released quantities and retains up to twenty completed receipts per home. Local age ledger version two migrates version-one stock without changing dates; old nonfish routes receive empty transport custody, while missing markers, impossible quantities and unmatched phases reject.

The final focused suite passes 80 tests across nine files, including twelve new fish-cargo scenarios. These cover actual caught/preserved stock, round-trip age retention, physical recall, foreign/stale/replayed orders, private immutable projections, reserved stock expiry, fire, storage delays, partial unloading, migrations, malformed saves, transit-loss forecasts and regional warnings, offline equivalence, finite governor funding through a command-built regional office, and delivered fish cooked at a command-built and staffed outpost smokehouse. A short route delivers seven of twelve raw fish after five expire; the seven retain their source deadline and later spoil locally. Storage ballast and fire are explicit isolated boundary setups; production, construction and delivery journeys do not receive injected fish or buildings. All 816 tests across 102 gameplay files pass. Focused runs overlap this broad suite and are not additional scenarios.

Browser checks pass dated review/cancel, exact dispatch deductions, unchanged destination stock before arrival, retained age custody, reload and 320/390/640/1440px layouts. Narrow review, travelling and completed receipt cards were visually inspected. Two actual server restarts preserve both warehouses, ages and live/completed records, and another account cannot inspect either endpoint. An explicit QA clock advances fifty authoritative route steps, delivers twelve preserved fish with the original three dates and returns its carriers with a complete receipt. A later collection review uses those retained dates and cancellation preserves them. Catalog validation remains 35 buildings, 29 technologies, 59 resources and 28 recipes; script syntax, whitespace and generated wiki checks pass. The QA process and port 34262 listener are confirmed stopped.

Initial development checks caught a syntax error and test assumptions about immediate recipe completion, capacity changes during return, a route outside the governor's range, and meals already cooked at the arrival-time daily check. The corrected scenarios exercise the actual full-cycle, route and day-ordering rules. Legacy test fixtures now remove the transport marker when simulating worlds that predate outposts/logistics. Production validation was retained. Player-to-player fish agreements and later grain/flour aging are implemented by the extensions above. NPC fish trade, prepared-food aging and the broader M0–M8 plan remain open; the goal stays active. See the living-world design for current rules.

Local fish freshness and preserved meals — implemented and verified

Chartered communities now retain bounded age buckets: fresh fish expires at the second following daily check, preserved fish at the fourteenth. Oldest stock is consumed first; expiry precedes meals/production and records real warehouse withdrawals without creating compost. The smokehouse adds a third recipe using four preserved fish and one log for twelve prepared food, with actual staffing, fuel, capacity, budgets and full-cycle timing. Recipe changes do not refresh ages or spend stock immediately. Local supply views show full expiry dates, losses and remaining buckets; forecasts simulate spoilage and regional attention highlights next-check losses. Static coverage explicitly excludes aging.

The version-one ledger migrates unaged saves with existing stock and a disclosed grace boundary, including historical catch-up, without inventing losses or goods. Restoration validates markers, settlement custody, finite/sorted buckets, shelf-life bounds and opening/incoming/used/spoiled conservation against warehouse stock. Eight new tests cover actual catches and FIFO processing, expiry before production, finite preservation, meal output versus an unstaffed baseline, full stores, neutral migration, malformed ledgers, foreign/stale/replayed orders, immutable projections, exact forecast checkpoints and offline equivalence. All 804 tests across 101 gameplay files pass; the overlapping focused suite passes 73 tests across eight files. The old pre-logistics fixture now also removes the age ledger when simulating a world predating its marker. An initial new recipe receipt assertion was corrected to the actual building label; no runtime validation was weakened.

Browser checks pass recipe review/cancel, unchanged approval-time stock and ages, reload, private access and 320/390/640/1440px layouts. Narrow dated and completed-loss cards were visually inspected. Two actual server restarts preserve inventories, buckets and selected recipe. An explicit QA clock advances two actual village days: fifteen raw fish spoil with exact withdrawals, and four preserved fish plus one log make twelve additional meals versus the same world with an unstaffed smokehouse. No inventory is injected. The restart browser script was corrected to open the collapsed navigation before selecting Supply chains. Catalog validation passes with 35 buildings, 29 technologies, 59 resources and 28 recipes; script syntax, whitespace and generated wiki checks pass. The isolated QA process and port 34261 listener are confirmed stopped.

Only local chartered fish is aged. Legacy non-chartered coastal stocks remain prototypes. The later dated outpost-route extension above implements age custody for manual and governor fish transport; the later player-agreement extension also retains dated fish custody; other routes remain open work. Prepared food, grain, flour, other perishables, larger food systems and the broader M0–M8 goal remain open. Current rules are in the living-world design.

Finite recurring relief deliveries — implemented and verified

Added separately consented series of two to six gifts through real caravans. Donors authorize exact goods, finite rounds, a return interval and a dispatch cutoff; recipients owe no payment and need no accounting service. Donor accounting, actual stock, protected reserves, carriers, routes and capacity are rechecked for each round. Full destination stores hold cargo; either party may stop future rounds and recall undelivered aid. Delivered gifts remain final and gross commitments never reset. Regional exceptions and City reviews distinguish relief from barter. The recurring editor also retains its review button on numeric blur, fixing a swallowed first click.

Schedule ledger version two migrates existing barter terms and receipts without new permissions. Tagged relief requires empty payment and matching parent/child kinds. Missing markers, downgraded relief records, fabricated recipient spending and unmatched links reject. The initial broad run passes 795 of 796 scenarios across 100 files. Its one failure was a pre-logistics test fixture retaining the new recurring ledger after deleting the logistics marker; the fixture now also omits recurring agreements. No production validation was weakened. The final affected suite passes 79 tests across ten files, including that migration case and all nine new relief scenarios. These cover actual shortage/recovery without injected goods, finite deliveries, donor services/reserves, explicitly isolated poverty/storage boundaries, consent/authority/replay, physical recall and delivery finality, deadlines, competing teams, neutral barter migration, malformed saves, succession and offline equivalence. The earlier 70-test affected run also passed; reruns are not additive.

Two-account browser checks pass reviewed/cancelled proposals and acceptance, retained drafts, a 58-food maximum for two twenty-food gifts with nine provisions each, recipient consent without accounting services, unchanged approval-time warehouses, reload and 320–1440px layouts. Narrow proposal, active and completed cards were inspected. Two actual server restarts preserve exact terms, both warehouses and receipts; a third identity is denied private access. An explicit QA clock advances 62 scheduled dispatch/movement steps, completing both physical trips and delivering forty food for 58 donor food committed and zero recipient payment. The final screen has two completed receipts and no new-dispatch controls. Catalog validation, script syntax, whitespace and generated-wiki freshness pass. The isolated QA process and port 34260 listener are confirmed stopped. Institutional charity budgets, broader trade institutions and the full M0–M8 goal remain open.

Food planning for stationed tower troops — implemented and verified

Food-only mandates can explicitly include the finite meals scheduled for currently stationed funded watches, retaining the household reserve while those meals remain. Travelling troops, arrival refills and renewals are excluded; duty/wage expiry truncates the target. Old orders migrate to resident-only without resetting commitments or extending permission. The same read-only schedule supplies host food demand and the supply graph without charging home or resident meals twice. Regional balances inherit that demand, and actual forecast simulation retains physical deliveries and meal collection. Fixed governor quantities, carrier capacity and all existing spending ceilings remain unchanged.

All 787 tests across 99 gameplay files pass, including 41 focused tests across six files and seven new planning scenarios. These verify real replenishment without injected stock, finite duty/wage endpoints, host-only demand, immutable/private reads, neutral version-two migration, malformed/downgraded records, stale/replayed commands, retained spending, offline equivalence and six-day regional forecasts against actual deliveries and inventories. Catalog validation passes with 35 buildings, 29 technologies, 59 resources and 27 recipes. Script syntax, whitespace and generated-wiki freshness are checked for this delivery.

Browser checks pass the exact 84-food target review (56 resident food plus 28 scheduled troop meals), cancellation/draft retention, unchanged approval-time inventories, actual opt-in authorization, reload and 320/390/640/1440px layouts. Narrow controls/review screenshots were inspected. Two actual server restarts preserve orders, troop records and both warehouses; another identity is denied both private communities. An explicit QA clock advances six village days with two real carrying teams, 40 committed food including provisions, 22 cargo and 24 actual troop meals; the watch remains stationed with host food above its reserve. The first QA privacy attempt reused an initialization script that restored the original login; a separate identity page correctly verifies denial. The isolated process and port 34259 listener are confirmed stopped. Wider fort combat, allied garrisons and regional coordination remain open. The full M0–M8 goal remains active.

Funded seven- and fourteen-day tower watches — implemented and verified

Long local/owned-outpost tower assignments now authorize bounded daily host food, require the home record keeper and retain physical march, four-day capacity, reserve, service, warning and return rules. Arrival and daily receipts remain separate. Actual daily payments obey and book the shared regional operating ceiling. Recall, failed supply or expiry stops new payments without resetting spending or restoring nonexistent reserved stock. Local/remote garrison versions three/four validate the attached support record; original short assignments keep their terms. Lawful stewardship preserves the funded defensive order.

Eleven new scenarios across test/garrison-support.test.js, test/garrison-support-budget.test.js and test/garrison-support-professional.test.js exercise real preparation, a 24-real-hour absence, full fourteen-day return, actual outpost collections, explicit reserve/paused-budget boundaries, recall/service loss, malformed custody, revisions/replay, legacy short records, leader death and a command-built regional office that funds exactly one daily meal before its shared food ceiling blocks the next. The final affected suite passes 88 tests across eleven files, including a real professional wage term expiring at the exact daily-food collection boundary without an extra charge. The earlier broad run passed 777 of 778 scenarios across 96 files; its sole failure was the new succession test incorrectly expecting service to survive the induced community illness. The corrected case verifies retained authorization followed by lawful withdrawal after actual scout loss and passes in the final suite. The two further budget/professional scenarios also pass there; these reruns are not additive. Browser review/cancellation, exact dispatch food, unspent host stock, new allowance display, reload and 320–1440px widths pass. Two actual server restarts preserve outward and stationed state; an explicit QA clock advances fifteen march steps and the first full duty day, preserving the five-food arrival refill and separate four-food daily receipt. Both warehouse snapshots and private host access agree. Narrow review/host views were inspected. The final browser/server check also verifies that only the host supply graph includes the scheduled four-food demand. The initial professional test preparation exhausted the forestry surplus; pausing the unused record keeper allowed actual timber production for the tower, without injected goods. Catalog validation, script syntax, diff whitespace and generated-wiki freshness pass. The isolated QA process and port 34258 listener are confirmed stopped. Larger forts, allied and indefinite garrisons, broader force roles and wider regional security remain open. The full M0–M8 goal remains active.

Dedicated resident continuation screen — implemented and verified

Ended resident lives now receive a minimal, read-only City projection instead of shared development management. The screen and overlay show invitations/history, hide unrelated settlement controls and stocks, and disable map mutations. Name drafts and history survive refreshes. Invitation withdrawal invalidates open reviews; acceptance automatically opens the new home. A view-mode check prevents an acceptance-time race between the new identity and cached continuation data. No membership schema or gameplay grant changes.

Three new projection scenarios verify departure and village-day death, immutable reads, withheld management records, query validation, old/foreign privacy and restored scoped access after fresh consent. All 52 focused tests across eight files pass. Browser checks pass cancelled departure/acceptance, absent management controls, “Not held” stock labels, disabled map building, stale withdrawal, no-invitation waiting/history, preserved names, automatic navigation, second-life staffing, unchanged stock/population, reload and 320–1440px layouts without page exceptions. Narrow waiting/review/history screenshots were inspected. An actual final server restart preserves both resident lives, distinct current identity, staffing, both warehouses/populations and private boundaries. Syntax, diff whitespace and generated-wiki freshness checks pass. The isolated QA process and port 34257 listener are confirmed stopped. The earlier 766-test broad run below predates these three added scenarios. The M0–M8 goal remains active.

Resident lives after death or departure — implemented and verified

Ended resident accounts can accept another separately offered existing civilian in the same or another founding community. Each life receives a distinct character ID, account life index and predecessor link. Active residents and founding accounts cannot take a second embodied life. Populations, labor, stock and property never transfer or grow through acceptance; former work proposals and housing rights do not follow. The free-founding choice remains spent, and no available civilian or invitation means a preserved-history waiting state.

Membership version two migrates version-one identities neutrally, retains renewed work records, and validates sequential non-overlapping lives, end times and complete record counters. Missing individual membership/work records reject instead of restoring earlier authority. An empty old development ledger can recover its continuity marker without inferring rights. Later-life commands require the current resident character ID. City and overlay controls present continuation, review/name drafts, no restored starter grant and prior-life history.

Seven new scenarios verify cross-community continuation, village-day death from an explicit critical-health boundary, three-life ordering, legacy migration with work renewal, malformed/overlapping/missing records, finite civilian scarcity, replay, offline equivalence and old-work rejection. The corrected related run passes 54 tests across seven files; the final broad regression passes 766 tests across 94 gameplay files. Catalog validation passes with 35 buildings, 29 technologies, 59 resources and 27 recipes, and generated-wiki freshness passes. Browser checks pass cancelled departure and acceptance, retained names, no free-village controls, former/foreign privacy, actual second-life staffing, history, reload and 320–1440px widths. Narrow screenshots were inspected. Two server restarts preserve ended and active continuation states, distinct identity, both communities' stock and population and the new staffing assignment. The isolated QA process and port 34256 listener are stopped. Resident kin inheritance, aging, personal wages and wider tenure remain open. The full M0–M8 goal remains active.

Consented resident work renewal — implemented and verified

Hosts can offer an existing resident a new fourteen-day term at the same or another operational producer. A three-day proposal grants nothing until this resident separately accepts. Acceptance replaces the prior role and unused time, retaining original membership, revocations, applied staffing, person/labor/stock accounting, housing and the permanently consumed starting choice. Expired/revoked work, lawful host succession and damaged workplaces can recover through fresh consent. Decline, withdrawal, expiry, stale/foreign/replayed requests and ended lives retain their boundaries.

A version-one resident-work ledger records each proposal, issuer, workplace, consent, duration, revocation and staffing audit. Existing saves receive an empty ledger without new permissions; restore validates chronology, scope, identities and superseded actions. Owner and resident controls show effective terms, pending offers and history. Actual production changes still require a separate staffing order. Resident continuation is now delivered above; broader resident kin inheritance, wages, purchased land and transferable housing remain open. The full M0–M8 goal remains active.

All 759 tests across 93 gameplay files pass, including 47 focused tests across six files and eight new resident-work scenarios. Tests cover actual food output after renewal, pending versus accepted scopes, preserved historical actions, proposal responses, expired/revoked renewal, lawful host succession, malformed saves, foreign/stale/replayed orders, ended membership, neutral migration, offline equivalence and actual storm-damage recovery through a new workplace. The succession case uses an explicit critical-illness boundary. Two-account browser checks pass proposal and acceptance cancellation, retained drafts, no early scope, unchanged stock/population, actual scoped mill staffing, privacy, reload and four widths from 320 to 1440px. Two actual server restarts preserve the pending proposal and accepted replacement term, exact membership, warehouse, population, staffing and audit. Narrow screenshots were inspected. Catalog validation passes with 35 buildings, 29 technologies, 59 resources and 27 recipes; generated-wiki freshness passes. The isolated QA server and port 34255 listener are confirmed stopped.

Invited resident starts — implemented and verified

Founding leaders can open a public invitation for an existing civilian and one operational producer. A new identity separately accepts a zero-rent shared-housing agreement and fourteen-village-day staffing role; no people, goods, wages or title are created. Offers expire after three days, acceptance rechecks availability, and each community supports at most four resident players. The first acceptance closes the offer. Joining releases an unused site reservation and permanently consumes the starting-life choice, preventing a later free village even after leaving or death.

Scoped City and overlay views expose the agreed workplace, labor, population and food. Commands cannot change other producers, recipes, plans, budgets, construction, trade, military or family records. Revocation/expiry preserves housing and applied settings; a changed leader or unavailable producer suspends work. Leaving returns the named claim to ordinary civilian accounting without changing population. Prolonged critical illness removes exactly one resident/worker while retaining the start record. Empty-ledger migration adds no rights or stock; marker, identity, chronology, scope, death and population validation protect restoration.

All 73 focused tests across seven files pass, including seven new resident scenarios. They cover consent, conserved starts, scoped production, foreign/stale/replayed orders, revocation/expiry/leave, reserved-site release, four-resident limits, malformed saves, neutral migration and offline equivalence. Critical illness and civilian scarcity use explicit boundary fixtures. Browser QA covers two-player offer/accept reviews and cancellation, retained names, unchanged people/stock, an actual scoped staffing change, foreign privacy, reload and four widths from 320 to 1440px. Narrow screenshots were inspected. Two actual server restarts preserve the active and revoked memberships, exact warehouse, population and staffing; revocation removes controls without eviction. Catalog validation passes with 35 buildings, 29 technologies, 59 resources and 27 recipes. The final broad regression passes 751 tests across 92 gameplay files after correcting a null-actor guard in the invitation projection. The generated wiki passes its freshness check. The isolated QA server and port 34254 listener are confirmed stopped. Consented work renewal is now delivered above; resident kin inheritance, wages, transferable leases and purchased plots remain open. The complete M0–M8 goal remains active.

Supplied outpost watchtower duty — implemented and verified

Home troops can march physically to a retained outpost tower within eighteen walking hexes. Existing readiness, scout/lookout, four-day carried food and one/two-day duty limits apply. Dispatch pays home provisions and authorizes one bounded outpost refill only upon arrival; current local stock, household reserves and public budgets are rechecked. No food is reserved remotely. A failed refill, lost service, foreign charter, invalid destination, duty expiry or recall causes physical withdrawal. Actual route warnings benefit new caravans departing from the tower community. Host screens show visiting troops without transferring population or labor; structural work waits for their return.

Version-two attached records validate destination, route, phase, timing and exact refill custody; older local records remain unchanged. All 51 focused tests across five files pass, including six new outpost scenarios. The fixture obtains actual wood/materials, founding, construction, local survey, equipment and trained troops through commands. Tests verify paid local detours, recall without remote spending, explicit reserve failure, lost staff, invalid authority/duration/duplicates/custody and offline equivalence through return. Browser checks pass cost review/cancellation, exact home dispatch food, unchanged outpost inventory, visiting-unit visibility, reload and four widths from 320 to 1440px. Narrow screenshots were inspected. The full regression passes 744 tests across 91 gameplay files. Two actual server restarts preserve the paid outward march and stationed state, exact warehouses and refill receipt. Arrival QA advances fifteen actual march steps and quarter-day preparation under an explicit authoritative clock; the unit takes five food from the outpost only on arrival. The host warning becomes active, and another account is denied private access. Catalog validation passes with 35 buildings, 29 technologies, 59 resources and 27 recipes. The isolated QA process and port 34253 listener are confirmed stopped. The complete M0–M8 goal remains active.

Linked regional economy forecasts — implemented and verified

Added read-only one/six-home-day forecasts across the founding village and retained outposts on one copied authoritative timeline. Local stock, population, production, institutions, physical cargo, reservations and shared budgets remain separate and binding. The UI shows per-community outcomes, daily checkpoints, cumulative spending, remaining journeys and named constraints with current-control links. Urgent deterioration supersedes an earlier weaker warning. Already funded founder arrivals appear as predicted new communities. Foreign and delegated requests cannot inspect private regional state; existing local scenario comparisons retain their scope. No save-format change or new gameplay grant is introduced.

All 35 focused tests across five files pass, including six new regional scenarios. Tests compare every daily checkpoint with actual simulation for three command-built communities, exercise real reserved quarry stone and founder travel, predict actual food depletion after service loss, preserve live snapshots/events, and verify restore repeatability, accepted-order revisions, ownership, delegated access, scope/horizon validation and bounded failure. Browser checks cover live outputs, unchanged warehouses/route terms/budgets, stale estimates, reload and 320–1440px layouts; narrow screenshots were inspected. The full regression passes 738 tests across 90 gameplay files. An actual server restart preserves the live inventories, instructions and budgets; a fresh estimate remains read-only, and a second account receives no private forecast. Catalog validation passes with 35 buildings, 29 technologies, 59 resources and 27 recipes. The isolated QA process and port 34252 listener are confirmed stopped. The overall M0–M8 goal remains active.

Complete governor cargo catalog — implemented and verified

Governor routes and shared regional logistics ceilings now use the manual outpost cargo catalog. Stone, textile stages, compost and all actual manuscripts can be delegated under existing physical transport rules; shared ceilings also include spear kits, bow kits and arrows. Old allowances remain unchanged, missing goods have zero authorization, and gross commitments survive recall. UI selectors group named books and collapse their budget fields. Sparse zero-free payloads and a bounded message envelope support complete cargo budgets without changing authoritative validation. The current envelope is 16 KiB so a coordinated three-route plan can carry all three complete allowances.

The focused governor/shared-budget run passes 22 tests, including six new cargo scenarios. The command-driven chain physically extracts quarry stone, reserves and carries it through the governor route, then consumes it with tools in a staffed mason workshop. Additional cases verify omitted ceilings, old-save neutrality, recall accounting, every supported collection resource, a fully funded catalog and daily/offline equivalence. The all-resource loop deliberately injects existing-stock boundaries to isolate custody and accounting; it does not claim manufacturing or copying every item.

Browser QA passes named manuscripts, zero new allowances, cancelled review/draft preservation, unchanged approval-time stock, stone/book authorization, a full-catalog live message, reload and four widths from 320 to 1440px. Narrow screenshots were inspected. An actual server restart preserves exact inventories, governor terms and shared ceilings. The broad regression passes 732 tests across 89 gameplay files. Catalog validation passes with 35 buildings, 29 technologies, 59 resources and 27 recipes. The isolated QA server and port 34251 listener are confirmed stopped. The overall M0–M8 goal remains active.

Player relief deliveries — implemented and verified

Added explicitly consented, one-time gifts through existing physical caravans. The donor offers one supported good, the recipient accepts without payment, and the donor separately funds cargo, provisions and two carriers. Donor reserves/budgets, recipient storage, travel delays, recall and actual return remain binding. Delivery grants no debt, title, management or military permission. A delivered gift is final. Tagged relief records permit an empty payment only for this agreement type; ordinary barter remains unchanged and old saves gain no gifts or permissions. Finite recurring gifts are now delivered above; institutional charity funding remains open.

The full regression passes 726 tests across 88 gameplay files. The focused six-file regression passes 45 tests, including seven new relief scenarios. Verification covers funding/consent, exact delivered goods, no recipient spending or title transfer, decline/recall, storage delay, invalid authority/terms/replay, malformed custody, legacy barter, offline equivalence and donor-death stewardship. Explicit zero-stock, reserve, storage and illness boundaries are distinguished from the command-driven recovery scenario: stop food production, consume real stores into shortage, receive physically delivered food, and restore farming/gathering without erased hunger history.

Two-account browser QA verifies a recipient with actually exhausted food, cancelled gift review, acceptance without payment, exact donor costs, privacy, reload and four widths from 320 to 1440px. Narrow form/review screenshots were visually inspected. Two actual server restarts preserve outbound and completed states and exact warehouse stock. Completion advances thirty authoritative route steps with an explicit QA clock, including normal household consumption: forty donated food supplies an actual meal, with empty collected payment and retained unmet-food history. Catalog validation passes with 35 buildings, 29 technologies, 59 resources and 27 recipes. The isolated QA server and port 34250 listener are stopped. The overall M0–M8 goal remains active.

Competing production priorities — implemented and verified

Added reviewed First/High/Normal priorities for chartered producers. An active accountant maintains the order at local village-day checks; equal ranks preserve existing order and service loss falls back to Normal without erasing choices. Real input/storage competition, due times, staffing, targets and all spending ceilings remain binding. Priority changes cost nothing and preserve cycle deadlines. The city food-capacity estimate and authoritative forecasts follow the same order. Optional version-one structure records migrate old producers neutrally and validate ownership, type, levels and chronology. Production-office permissions are unchanged.

The broad run passes 718 tests across 87 files. The final related seven-file run passes 58 tests, including all eight new priority scenarios and the added food-capacity case: 719 distinct passing scenarios overall. Actual commands found the test village, build a kiln, research accounting and consume finite starting logs to create a real bottleneck. Verification covers changed output under competition, blocked/paused producers, accountant loss/restoration, stable ties, supplier timing, unchanged stock/workers/attention/deadlines on authorization, ownership/revisions/replay, old-save neutrality, malformed records and six-day forecast/offline equivalence. The grain-chain case proves that a bakery considered before flour exists must wait.

Browser QA verifies cancellation, unchanged funding/deadlines, invalidated stale review after another accepted order, account privacy, reload and four widths from 320 to 1440px; narrow controls/reviews were visually inspected. Two actual server restarts preserve priority and exact inventories before and after one village-day simulation with an explicit authoritative QA clock. That day's actual kiln output, blocked mill, meals and scribe upkeep persist. Catalog validation passes with 35 buildings, 29 technologies, 59 resources and 27 recipes. The isolated QA server and port 34249 listener are stopped. The overall M0–M8 goal remains active; wider automated coordination and regional allocation remain unfinished.

Player food, grain and flour trade — implemented and verified

Added these three goods to bilateral and finite recurring player agreements. Food exports charge cargo and separate travel provisions together; reserved food payments leave usable household stock and respect the protected reserve. Contracted food remains exact cargo during delays, with separately funded rations, real shortage history and regional warnings. Grain/flour retain their existing household and processing rules. Recurring maxima, spent totals and save validation now account for food exports additively. Existing agreement formats, rights and NPC offers remain unchanged; freshness and spoilage remain open M3 work.

711 tests across 86 gameplay files pass, including five new food-trade tests; the focused food/bilateral/recurring subset passes 23. Cases cover actual deliveries versus normal production/consumption, local reservations, explicit reserve and prolonged-fire boundaries, intact cargo with exhausted rations, recall, recurring funding, malformed saves, offline equivalence and a command-driven harvested-grain → traded grain → milled flour → traded flour → fueled baking chain. Catalog validation passes with 35 buildings, 29 technologies, 59 resources and 27 recipes.

Two-account browser QA passes food/grain/flour selection, cancelled reviews/drafts, separate consent, exact payment reservation, additive food/provision charging, privacy, reload and four widths from 320 to 1440px. The recurring review verifies a fifty-eight-food ceiling for two twenty-food exports with nine provisions each. Two actual server restarts preserve the paid outbound caravan and completed exchange with exact warehouses. Completion advances thirty actual route steps using an explicit authoritative QA clock; normal daily production and consumption continue. Narrow form/review screenshots were inspected. The isolated process and port 34248 listener are confirmed stopped. The overall M0–M8 goal remains active.

Player manuscript trade — implemented and verified

Connected all catalog manuscripts to one-time and finite recurring player agreements. Books use real copied stock, reciprocal consent, whole-unit recipient reservations, paid carriers/provisions and physical delivery/return. Added whole-book caravan validation and unloading; partial free storage retains the complete book with the team. Recurring rounds wait for a newly copied volume rather than manufacturing knowledge or reserving an unfunded payment. Receiving a book does not learn or adopt its topic. Existing school, Literacy, prerequisite, labor, consumption, cancellation and adoption rules remain authoritative. NPC books and licensing contracts are not introduced. Old records retain their existing format and terms, with no inventory or knowledge grant.

706 tests across 85 gameplay files pass, including six new manuscript-trade tests. The focused education/trade/logistics/equipment subset passes 47 tests. Scenarios cover actual schools and copying, outbound and payment books, double-reservation rejection, cancellation/recall, explicit fractional-storage boundaries, malformed custody/topics, private projections, recurring stock shortages and newly copied replacement, offline equivalence, school interruption/refunds, and delivered knowledge enabling an actual crop choice. Catalog validation passes: 35 buildings, 29 technologies, 59 resources and 27 recipes.

Two-account browser QA verifies grouped named choices, review cancellation/draft retention, actual reciprocal consent, exact payment reservation, funded whole-book cargo, absent early knowledge, cross-account denial, reload and 320–1440px layouts. Two actual server restarts preserve outbound and completed agreement states and exact warehouses. The arrival scenario advances thirty actual route steps with an explicit authoritative QA clock, then restarts. Recipient study is reviewed/cancelled/funded separately in the browser and reserves one book, two timber and four food at zero progress; reload retains those values. Narrow form/study screens were visually inspected. The isolated process and port 34247 listener are confirmed stopped. The overall M0–M8 goal remains active.

Three-settlement recovery and succession — integrated acceptance verification

Added four command-driven scenarios in test/regional-journey.test.js, sharing test/helpers/regional-journey.js. The checks combine real founding, surveys, institutions, harvested/refined supplies, two outposts, finite governor instructions and the private regional exception projection:

• A normal 24-real-hour / six-village-day absence, with forty residents, no missed meals or health loss, repeated physical delivery to the dependent camp, bounded spending and identical offline simulation contents.
• Loss of registry staffing, continued delivery of already paid cargo, an eventual actual camp food shortage, linked recovery controls, physical manual relief and restored delegation after transporting real timber and restoring staff.
• A leader's death with paid learning, outpost construction and cargo simultaneously committed; no erased stock or work; temporary research interruption after losing a worker; later resumption after carriers return; explicit lawful handover and productive use of the completed field.
• Loss of the principal home food producer, real reserve depletion and warnings, followed by restaffing and local gathering without invented supplies or reset budgets.

All 87 tests across twelve related files pass, including the four new scenarios and the earlier prepared 24-world-day regional absence scenario. The death/health boundary is explicitly injected; construction alone uses the existing isolated accelerated test timing. Neither stock, territory, workers nor completed research is granted by the test. No runtime behavior or save format changed, and no new browser or server-restart verification is claimed in this slice. Broader M7/M8 requirements and the overall goal remain open.

Consented player-trade escorts — implemented and verified

Extended moving escorts to actual player-trade caravans, with a separate recipient grant, troop cap, expiry and exit notice; exact existing troop/kit/ration custody; independent military recall and trade cancellation; recurring-round permissions; and third-party passage purposes that preserve relief-only legacy rights. Added authoritative title receipts for same-clock later founding, dynamic rights checks during detours, and retention of referenced closed contracts while a detached force returns. The UI exposes grants, funding, safe-route risk and explicitly scoped passage negotiations.

The focused five-file run passes 41 tests across trade escorts, existing escorts, bilateral trade, recurring trade and military passage. The final title-receipt run passes all nine new tests. Actual commands found both parties, research/adopt Drill and Scouting, craft kits, train four residents, reserve barter payment, dispatch goods and fund the escort. Another actual farming charter builds a registry, researches Land registry and signs a separately scoped treaty. Coverage includes forbidden/stale actors, missing permission, insufficient troop cap, immutable terms, duplicate funding, exact barter/return, independent recalls, expiry before another step, notice boundaries, third-charter founding at the same timestamp, migration, malformed saves, offline equivalence and succession. Critical illness is an explicitly injected boundary; no new player-trade camp encounter is invented to claim a protection bonus on the safe default route.

Two-account browser QA passes recipient permission review/cancellation, actual four-soldier consent, private-source rejection, sender dispatch, exact separate fourteen-food escort payment, explicit safe-route disclosure, 320/390/640/1440px layouts, assigned exit notice, scope-selector persistence and paid-state reload. Narrow permission/funding screens are visually inspected. The full regression passes 696 tests across 83 files, with no failures, and catalog validation passes.

Two actual server restarts preserve the funded journey and completed exchange respectively, including exact source/recipient warehouse stocks, permit notice, troop custody and receipts. Completion QA advances the authoritative simulation through thirty remaining walking steps with an explicit test clock, then restarts the server; it does not directly grant completion or materials. The completed browser state confirms one exchange, four soldiers home, no remaining caravan/escort job and twenty civilian workers while those four soldiers remain mobilized. The isolated QA process and port 34246 listener are both confirmed stopped. The complete M0–M8 goal remains active.

Shared village waterworks — implemented and verified

Added an authoritative two-party water ledger, released woodland utility corridors, real Hydraulic engineering, paid staged construction, shared household/irrigation accounting, finite source priority, wear, repair, cancellation recovery and exit/decommissioning. Land & water offers reviewed consent and source-only paid actions; Orders uses existing crew controls. Persistence adds an empty neutral migration and validates agreement/job invariants. The code does not claim general river engineering or independently traveling construction convoys.

Focused tests: 12 passing. The final targeted run passes 39 tests across waterworks, city projection, refuge and drainage. The fixture establishes two villages through actual commands, researches prerequisites, staffs institutions, harvests/regrows timber and physically imports bricks/tools from the finite depot. Coverage includes exact funding and labor, no precompletion flow, source/recipient conservation, a real third irrigated recipient plot losing its benefit after notice, privacy, stale/duplicate commands, expiry/withdrawal, cancelled-work removal, source needs, well/fire/service interruptions, paid repair, exact wear/notice boundaries, service suspension/resumption, succession, neutral/corrupt saves and online/offline agreement. A dedicated consent-deadline event releases unfinished crews at the exact deadline, preserves earned work for cancellation refunds and permits paid decommissioning; it does not wait for the next stage or household day. Explicit injected boundary fixtures isolate source population, well damage, corridor fire, repair stock and critical illness; they are not presented as earned gameplay rewards.

Browser QA uses distinct accounts 7 and 8 and an actual-command seed. Completed checks: cancelling/altering an offer, bilateral signing, private-source rejection, exact 58 timber/25 bricks/four tools/24 food funding for the nine-step route, one-attention review, 320/390/640/1440px widths, paid pause/resume and reload. Initial browser execution needed a more specific pause-button locator because the same job also appears in the sidebar. No gameplay authorization failed. The funded eleven-stage project was then advanced through the authoritative simulation with an explicit QA clock, not a free completion mutation, before restart validation.

Two server restarts passed: completed state and exact source/recipient inventories survived; the browser showed source capacity 52 and recipient capacity 68, no remaining construction job, private source quotes withheld from the recipient, and recipient-issued three-day notice retained across reload and the next actual server restart. Narrow completed/notice screens were visually inspected. The final QA server is stopped.

The first broad run passed 685/686 tests; its sole failure was the refuge test’s old building-branch count of seven. Updating that expectation to eight reflects Hydraulic engineering. The final broad run passes 687 tests across 82 files, including the exact consent-deadline case and the corrected branch count. Syntax, catalogue and whitespace checks pass. Catalogue validation passes: 35 buildings, 29 technologies, 59 resources, 27 recipes, five market offers. The M0–M8 goal remains active; this completes only the bounded shared-well conduit slice. Major waterworks, wider tenure/diplomacy and other foundation-plan gates remain open.

Latest delivery: construction scenario forecasts

Owners can compare one reviewed building against unchanged current orders before funding it. The proposed copy executes the actual construction command for the exact local plot/orientation, retaining materials, crew support, rights, terrain, research, food reserves, public budgets, attention, character authority and queue rules. Both branches start from the same source time and state and share bounded simulation work. Immediate withdrawals, occupied/free workers, completion/stages, housing, residents, storage and material differences are projected. New producers remain unstaffed; existing standing orders and scheduled needs/deliveries keep their actual behavior.

No live stock, labor, attention, plot, building, command receipt or warehouse record changes during a forecast. Owner-only requests remain serialized behind durable writes. World changes invalidate the comparison and open review; construction still requires separate confirmation. Session estimates clear on reload. Existing accepted construction keeps normal persistence. Crop/transport, combined multi-building and multi-settlement scenario editing remain open.

Seven new scenarios cover complete paid construction and an independently simulated baseline, real multi-day stages and completion timing, insufficient-worker queues, producers remaining unstaffed, housing without free residents, invalid terrain/knowledge/stock/orientation, stale and foreign requests, another owned community outside the selected scope, delegated access, interregnum, exhausted attention, existing receipt-ID collisions, saved-state repeatability and bounded computation. Exhausted attention and missing timber are explicitly labeled boundary fixtures; construction and comparison outcomes execute ordinary commands. Two initial test assumptions used a nonexistent generic construction stage and exceeded the twelve-forager policy cap; the tests were corrected to actual foundation stages and a real two-worker shortage.

The focused forecast run passes 25 tests. The complete gameplay run passes 675 tests across 81 files, including the preceding masonry release and its corrected catalogue expectations. Catalogue totals remain 35 buildings, 28 technologies, 58 resources, 27 recipes and five market offers. Syntax/catalogue/whitespace checks pass.

Headless Edge verifies one/six-day results, exact hypothetical withdrawals and capacity, unchanged live inventory/warehouse/attention, owner privacy, four widths, another player's reservation invalidating an open review, cancellation, separate paid acceptance, actual completed storehouse and reload clearing estimates. Narrow review/outcome cards were visually inspected. The first browser fixture incorrectly opened the same account twice, which triggers the existing session-takeover rule; the corrected test uses distinct players. An actual process restart preserves the accepted building, exact inventory, warehouse records, storage and next needs deadline. A fresh forecast uses that saved state without mutating its ledger. The isolated QA server is stopped after verification.

This advances the M1 building workflow and M3 planning tools. The full M0–M8 implementation goal remains active. See the primary living-world design for current rules.

Latest delivery: finite stone, masonry workshops and stone housing

Two expansion-only parcels preserve earlier released sites and their charter fringes. Each contains 288 units of authored shallow building stone on natural upland ground. Actual surveys, charter registration, transferred founders and supplied construction establish a quarry camp. Three quarry workers consume 0.25 tools for at most six rough stone per standard cycle. Physical cargo carries the material home, where an active masonry specialist and two workshop workers consume eight rough stone and half a tool for six dressed stone. A paid stone house consumes thirty-six dressed stone plus timber, food, tools and work, provides eight housing places and takes half normal fire damage. No residents or stock are granted. Existing buildings keep their costs.

Seven new scenarios cover earlier offer/fringe preservation, a complete command-only paid journey with replacement timber and market tools, transported-material and warehouse conservation, tool-shortage recovery, full storage/final partial extraction, exhausted-deposit persistence, suspended masonry and resumed output, retained housing, fire/non-fire damage, offline equivalence, denied foreign commands, corrupt deposit provenance and neutral old-world restoration. Storage and near-depletion tests explicitly use boundary fixtures; the integrated journey uses actual harvesting, research, founding, trade, supply, production and construction without stock/population/terrain grants.

The broad 80-file run executed 668 tests: 663 passed and five failed because their catalogue expectations still described the earlier buildings, topic counts or deposit kinds. All five expectations were updated. The final masonry/city/education/integration/living-world run passes 32 tests, and the refuge run passes 7 tests. A subsequent final cargo-menu regression passes 37 tests across masonry, outposts, textiles and grain. These are overlapping verification runs, not additive totals or a claim of a second clean 668-test run. Catalogue validation passes with 35 buildings, 28 technologies, 58 resources, 27 recipes and five market offers.

Two-player headless Edge checks pass local supply traces, actual stone-house housing, quarry output/shortages, reviewed mason staffing cancellation/acceptance, owner-only home/outpost reads, reload and 320/390/640/1440px layouts. Narrow supply, staffing review and quarry detail were visually inspected. An actual process restart preserves home/outpost inventory, warehouse receipts, the completed house, accepted worker assignment and next needs deadline. The final UI audit also added missing rough/dressed stone cargo presets: browser review/cancel/dispatch reserves twelve actual rough stone at the quarry with no early home grant, and reload retains the physical shipment. Initial browser checks used the wrong page container/background canvas; correcting those selectors confirmed the actual City UI and loaded masonry manifest. Syntax/catalogue/whitespace checks pass. The isolated QA server is stopped after verification.

This advances M1/M3/M4/M6. Map art remains semantic prototype fallback. Mortar/lime/sand, bridges, larger masonry fortifications and wider quarry geography remain open; the current house abstracts binding materials. Full M0–M8 implementation remains active. Detailed rules are in the primary living-world design.

Latest delivery: production-plan scenario forecasts

Owners can forecast an existing two-to-eight-producer staffing/recipe draft for one or six village days before separately applying it. Current orders and the proposed plan begin from the same authoritative stock, time and revision. The proposed branch executes the actual coordinated-plan command in a copied world, preserving lawful character authority, producer revisions, recipe/labor checks, full startup waits, retained mandates and paid queues. Releasing workers can restart already funded work under its existing authorization. Both branches include other producers, household needs, physical deliveries, research, storage and budgets. The returned comparison separates final material differences, daily checkpoints and constraints for each branch.

The source world, inventory, workers, command receipts, warehouse ledger and events remain unchanged. Both branches share bounded computation time and event work; invalid or incomplete scenarios return errors. Owner-only requests wait behind pending durable changes and retain the two-second rate limit. Delegated producers cannot inspect the wider commitments exposed by a forecast. Draft/world/character changes invalidate estimates immediately, including edits while a result is arriving. Restoring the original draft restores its matching label only while the world is unchanged. Reload clears estimates and drafts; actual application still requires the separate current review. No persisted scenario or new save migration is introduced.

661 tests pass across 79 files, including seven new scenario tests. They compare forecast branches against independently executed worlds, full-cycle versus retained timers, stale/foreign/invalid/over-capacity input, retained pauses and incompatible targets, paid repair resumption from released workers, physical grain-to-food production, bounded failure, restoration and interregnum/delegated authority. The earlier baseline forecast/production-plan run also passes. Catalogue validation remains 32 buildings, 27 technologies, 55 resources and 25 recipes; syntax and whitespace checks pass.

Two-player browser verification passes one/six-day comparisons, material differences and checkpoints, no live spending or warehouse receipts, denied foreign access, immediate draft staleness, restored-draft freshness, review cancellation, separate actual application, four widths from 320 to 1440px and reload clearing drafts/estimates. The initial browser check exposed a one-way freshness label when editing and restoring the original value without a change event; this was fixed and verified in the same world. After accepting the plan, the next real scheduled day matches its one-day warehouse outcome exactly, while changed producers retain the required full production wait. A real process restart preserves applied staffing, recipe, exact stock/history and next needs deadline; a fresh comparison uses that persisted state without mutation. Narrow summary, final-balance and resource-difference views were visually inspected. The isolated QA server is stopped.

This advances M3 planning with concrete staffing/recipe scenarios. Hypothetical construction/crop/transport-policy editing and multi-settlement scenario plans remain outside this editor. Wider markets, perishables, transport networks, advanced realm systems and other M0–M8 requirements remain open. The full implementation goal stays active.

Latest delivery: reconciled warehouse movements

City Supply chains now explains opening stock, cumulative incoming goods, cumulative outgoing goods and current stock for every local warehouse resource. Actual meals, workshop inputs/output, stored gathering, paid construction/research, refunds, institutional services, automatic work and physical cargo dispatch/arrival retain separate movements. Dispatch is a withdrawal rather than a claim that goods were consumed; coins, project escrow, travellers and directly eaten gathering remain outside local inventory. Existing scribe-produced workshop receipts remain separate and retain their institution requirement.

The latest 240 resource movements retain cause, effective time, sequence, originating reference and before/after stock. A rolling checkpoint and lifetime totals preserve reconciliation after detail is trimmed. Version-one capability migration opens old saves at their existing inventory with no invented earlier activity. New villages record the actual starter package; new outposts record arriving cargo. Runtime accessors preserve plain JSON/structured-clone semantics and rebind after rollback. Detached prior inventories cannot append phantom movements. Failed/duplicate commands and forecast copies leave the real ledger unchanged. Restore validates resource names, receipt arithmetic/order, retained checkpoints, gross totals and actual stock.

Eight new scenarios pass: founding plus gross daily meals/production without a scribe; failed/duplicate orders and rollback bindings; real construction/research payments and unused refunds; physically delivered imports and outpost founding; fractional processing and full-storage blocking; 160-day retention plus offline equivalence; neutral migration and corrupt ledgers; and owner privacy/read-only forecasts/reload. The broad 78-file run passed 653 of 654 tests. Its only failure was the pre-logistics fixture retaining a later warehouse ledger after removing its capability marker; correcting that historical fixture was followed by 17 passing logistics/warehouse tests, including the failed case and all eight new cases. Thus 654 distinct scenarios have passing evidence across those runs, not a claim that the initial broad run was entirely green. Catalogue validation remains 32 buildings, 27 technologies, 55 resources and 25 recipes; syntax and whitespace checks pass.

Two-player browser checks pass private read-only history, distinct food deposits/withdrawals, reviewed caravan dispatch/cancellation, actual twenty-timber payment, reload and 320/390/640/1440px layouts. The real scheduled day records a forty-food meal and forty-four-food harvest, with all resource balances reconciled. The first browser assertion incorrectly substituted the current thirty-eight-food demand estimate for that actual meal; travel-food credits post on walking ticks. Verification continued against the same world and actual receipts without reseeding or altering simulation. A real process restart preserves exact inventory, opening balances, cumulative totals, checkpoint, sequence and causes. Narrow movement, dispatch and restarted views were visually inspected. The isolated QA server is stopped.

This delivers complete local warehouse flow accounting from the explicit tracking boundary, with bounded receipt detail. Historical activity before migration is unknown; shared legacy development scenarios do not acquire charter ledgers. Editable forecast scenarios, wider goods and markets, perishables, larger transport networks, advanced realm systems and remaining M0–M8 requirements stay open. The full implementation goal remains active.

Latest delivery: household adoption of existing adults

A lawful living founding-household leader can add an existing local civilian as named adult kin, up to eight living notable adults. The modeled adult is 24, remains in the same civilian cohort and receives no stock, coins, attention, worker capacity, founding grant or office. The eligibility calculation is shared with local career continuation and excludes named residents and travelling crews. Dead members and receipts stay in history; later adoption can fill a living place. Wills, council appointment, embodiment and public handover remain separate reviewed choices.

Version-two household records migrate earlier households with an empty adoption history. Membership timestamps and succession generations preserve estate eligibility, even when adoption follows death/handover at the same wall-clock time. Existing coin estates now validate that paid service, wills and inheritance do not predate membership. Save restoration rejects inconsistent adoption identities, cohort attributes, receipts and historical chapters.

636 tests pass across 76 files, including seven new adoption cases. The separately executed management-concepts suite passes 10 tests; these are separate runs. The scenarios cover conserved population/labor/assets, living-capacity limits and replacement after death, actual inheritance and independent succession, same-time historical records, foreign/stale/duplicate/invalid commands, private projections, physical caravan exclusion/return, neutral migration, corrupt saves and daily/offline equivalence. The carrier boundary explicitly reduces the civilian cohort after pausing work to exercise exhaustion; it does not change gameplay rules. Catalogue validation remains 32 buildings, 27 technologies, 55 resources and 25 recipes.

Two-player browser verification passes review/cancel with retained draft name, accepted adoption with exact conservation, denied foreign household access, reload, independently reviewed will/council appointment and layouts at 320/390/640/1440px. The prepared illness fixture reaches the real scheduled death boundary: the adopted adult inherits two earned coins and becomes ruler only through reviewed embodiment and lawful handover. Narrow review, member and successor views were visually inspected. Save restore/offline replay and browser reload are verified; this feature's real process restart was not tested. Syntax, catalogue and whitespace checks pass; the isolated QA server is stopped.

This delivers bounded household adoption, not human-account invitations or a universal exhausted-population fallback. Aging, fuller lifecycle/career systems, goods/land estates, sealed-estate claims and wider M0–M8 requirements remain open. The full implementation goal stays active.

Latest delivery: personal stipends, wills and coin inheritance

Founding-household officeholders can explicitly reserve seven actual communal coins for a seven-day stipend, using active Public accounting and Record keeping. Each complete village day earns one personal coin; compensation creates no labor or production. Terms cannot overlap or renew automatically. Cancellation or death returns only unearned escrow, while loss of office/accounting support cancels at the next scheduled payment. Earned balances are separate from communal assets and remain within the finite market conservation invariant.

An embodied living household adult can record one adult-kin beneficiary, restore the default rule or donate earned coins back to the community, including during interregnum without gaining public office. At death, personal coins follow the will, fall back to the oldest surviving adult kin when necessary, or remain in a sealed estate when no eligible adult survives. Death chapters retain the amount, recipient, rule and will. Council appointments and paid communal projects remain separate. New version-one records migrate old saves neutrally; payment arithmetic, total currency, inherited balances and will histories are validated. Succession-generation donation receipts fix replay of an heir's donation at the same timestamp as death. Coin funding uses one accepted timestamp. Needs/death precedes coincident stipend payments, and forecast copies include the scheduler.

Nine new scenarios cover real market sales, full-day earnings, cancellation/refunds, separate personal heir and public successor, donations without public office, sequential deaths/sealed estates, service loss, foreign/stale/duplicate/invalid commands, neutral migration and corrupt saves, offline payroll/death equivalence, death at a payment deadline, a predeceased beneficiary, and combined funded research/construction/patrol continuity. The integrated test funds a real storehouse after gathering enough timber and freeing existing staff. Death can block research for lack of workers while retaining its inputs/progress; construction retains its paid materials and the millisecond of work already performed. No gameplay labor, price or preservation rules were weakened to make the fixture pass.

The broad gameplay run passes 639 tests across 76 files. After the final account-identity/chapter-shape validation checks, the estate/continuity/coin-market/forecast run passes 34 tests, including all nine new estate scenarios. These are separate runs, not additive totals. Catalogue totals remain 32 buildings, 27 technologies, 55 resources and 25 recipes. Syntax, catalogue and whitespace checks pass.

Two-player browser checks pass will/stipend/donation reviews and cancellation, exact seven-coin reservation with no early earnings, recorded beneficiary, personal/communal separation, denied foreign household access, reload and 320–1440px layouts. The world then reaches its actual scheduled needs/death boundary: two earned coins transfer to the chosen heir, seven unearned coins return to communal funds, and the council appointment remains unchanged. The heir donates one coin during interregnum while public handover stays unavailable to that character. Narrow review, funded and inherited-state cards were visually inspected. Automatic approval review rejected the subsequent server restart and verification-script action with only “blocked by policy”; it was not retried and real process-restart verification is incomplete. Automated save restore/offline replay and browser reload passed. The isolated QA server is stopped.

This advances M7 and the explicit death-with-funded-work acceptance scenario. Goods/land estates, inheritance disputes, sealed-estate claims, fuller personal careers/lifecycles, invited starts, major waterworks and other M0–M8 requirements remain open. The full implementation goal stays active.

Latest delivery: hosted campaign ammunition

Relief hosts can explicitly authorize actual arrows at a food depot, reserving exactly 12/24/36/48/72 on acceptance by a fitted archer force, capped at two full quivers per soldier. Host stock, an operational storehouse and an active quartermaster are checked alongside the existing food, route, wages and bilateral authority. Held arrows occupy host storage. Each actual outward/homeward visit fills only empty space within six arrows per soldier; full quivers collect zero. Contact retains finite volleys. Undelivered stock stays at the depot, withdrawal preserves the funded return entitlement, and unused arrows return to host stock after the force reaches home. Full/fractional storage retains whole arrows for later reclamation. No repair, healing, pay, people or authority are granted by ammunition.

Version-four relief agreements retain a separate conservation ledger and original fitting contract, cross-linked to unique quiver delivery receipts. Old food/rest agreements retain their versions and receive no new stock or permission. Nine new scenarios cover actual manufacture and player trade, bilateral funding, both physical visits, limited replenishment, combined rest, withdrawal before departure and after battle, lost quartermaster, fire, whole-item storage, authority/stale/duplicate rejection, insufficient/oversized terms, incompatible infantry, malformed ledgers, legacy agreements, role termination and exact offline replay. Clear sightlines, fire and over-capacity storage use explicit boundary fixtures; production, trade, institutions, paid service and travel use ordinary commands. Initial test mistakes used an unsupported patrol command name and assumed all held food fit an intentionally overfull warehouse; these were corrected without weakening gameplay rules.

The broad gameplay run passes 629 tests across 75 files, before the final combined fire/incompatible-infantry scenario. The final campaign-ammunition/rest/depot/archery/field-ammunition run passes 47 tests, including all nine new scenarios; these counts are separate and not additive. Catalogue totals remain 32 buildings, 27 technologies, 55 resources and 25 recipes. Syntax, catalogue and whitespace checks pass.

Two-player browser checks pass proposal/acceptance review and cancellation, retained arrow terms, exact twenty-four-arrow host reservation, no early quiver transfer, private warehouse access, reload and 320–1440px layouts. The narrow review and custody card were visually inspected. An actual process restart preserves both exact inventories, the accepted ammunition reservation, unit quiver/position and muster deadline. Automatic approval review rejected launching an additional timed-arrival QA server and its browser script with only “blocked by policy”; that optional check was not retried and is not claimed. Actual outward/homeward collection is verified by simulation tests. QA servers are stopped.

This advances M3/M5 supplied armies and consented regional cooperation. Mobile camps, chained depots, mixed formations, cavalry, engineers, larger-force/fort combat and all remaining M0–M8 gates remain open. The full implementation goal stays active.

Latest delivery: physical field ammunition resupply

Fitted archers travelling or guarding away from home can now receive warehouse arrows through the existing Field logistics rendezvous. An operational home storehouse, active quartermaster, two actual carriers, available arrows and paid travel food are required. Dispatch commits cargo and holds the unit on its current hex. Carriers walk the accepted route; arrival fills only available space within six arrows per soldier, records the delivery once and resumes the prior order. Extra arrows return physically. Ammunition delivery grants no condition, healing, morale, fatigue recovery, pay, population or extra duty time. A combined team may carry food, replacement militia kits and arrows under the existing sixty-weight ceiling.

Version-three supply jobs record paid/carried/delivered/returned whole arrows and the recipient's original fitting contract. The quiver retains the matching delivery receipt, with live cross-checks while the carrier job exists. Historical food-only and kit-only journeys keep their own versions and receive no ammunition. Receipt history remains valid after carriers return or the unit ends its role at home. Recall, fire, low provisions, wage expiry and withdrawal return undelivered cargo without teleportation. Full or fractional storage retains whole arrows with carriers and their labor assignment until unloading becomes possible. Moving escorts, tower watches and relief campaigns retain their existing separate supply restrictions.

Nine new scenarios cover actual manufactured bows/arrows and a constructed depot, read-only quotes, exact dispatch/labor, real rendezvous and bounded quivers, surplus return, separate food/equipment/ammunition custody, recall, whole-item storage, lost service after funding, long fire interruption, expired pay, authority/stale reviews/replay, malformed cargo and receipts, legacy versions, offline equivalence and a returned unit ending its role before storage-blocked carriers finish unloading. Clear-sightline setup is an explicit terrain boundary for the preceding volley; resources, institutions, construction, staffing, training and travel use ordinary commands. The fixture replenishes real timber before activating the quartermaster, and the storage case explicitly frees enough space after its over-capacity boundary. Gameplay rules were not weakened to accommodate those tests.

The broad gameplay run passes 621 tests across 74 files. The prior focused field-ammunition/equipment/archery run passes 26 tests; these counts are not additive. Catalogue totals remain 32 buildings, 27 technologies, 55 resources and 25 recipes. Syntax, catalogue and whitespace checks pass.

Two-player browser verification passes ammunition review/cancel, exact eight-arrow and carrier-food commitment, two assigned carriers, no early quiver refill or troop movement, cargo visibility in Supply chains, private stock, reload and 320–1440px layouts. A separate valid paid journey was observed immediately before and after its scheduled arrival: twelve carried arrows became eight delivered plus four retained surplus, the quiver reached twenty-four, and the original military order resumed. Equipment, people, wounds, morale and fatigue stayed unchanged. Actual server restarts preserve both the outbound and delivered states, including warehouse stock, matching receipt, physical positions, remaining cargo and next return deadlines. Narrow review, carried-cargo and arrival cards were visually inspected. Isolated QA servers are stopped.

This advances M3/M5 supplied armies. Hosted campaign ammunition is delivered above; mixed formations, cavalry, engineers, larger-force/fort combat and remaining M0–M8 requirements stay open. The full implementation goal remains active.

Latest delivery: manufactured archery and finite ammunition

Archery and bowmaking now connects Standing service to Textile crafts through funded research, a staffed barracks and a supplied instructor. Lumbermills can make four bow kits from twelve timber, eight yarn and one tool at full staffing; smithies can make twenty-four arrows from six timber, three iron and three charcoal. Staffing scales these outputs to whole equipment. Yarn comes from actual flax and spinning. Default lumbermill timber production is recorded for newly founded structures and explicitly added to historical mills on restore, without changing output, deadlines or stock. Bow kits and arrows are whole cargo with respective carrying weights of two and one tenth.

Existing militia fit one bow kit and six arrows per member, reserve actual seven/fourteen-day wages and finish two additional training days. Qualified funded archers gain 50% field strength only by firing a complete two-arrow-per-unwounded-member volley at actual patrol or consented relief contact. Dense woodland (at least seventy cover), fire, fatigue above sixty, incomplete training, expired pay or insufficient ammunition prevents the volley. Ordinary militia strength then remains; the later defensive-volley delivery above lets a held guard or co-located moving escort spend finite arrows at an actual protected crossing. There is no ammunition regeneration. New version-three professions retain fitting and chronological loading/firing custody. Home reloads move actual warehouse goods within quiver limits. Stand-down/demobilization returns unused arrows and whole bows rounded down by condition, atomically rejecting insufficient storage. Renewal preserves equipment and ammunition without refilling either.

Twelve new archer scenarios exercise actual forestry/imports/charcoal/flax/yarn/bow/arrow production, fitting/training/payroll, actual patrol and bilateral relief contact, no-spend previews, poor conditions, incomplete volleys, home reload rights/capacity/replay, storage rollback, wear/refunds, lost instruction, renewal, ordinary moving escorts, whole-item player trade, offline movement and malformed/legacy saves. Clear-sightline cases use an explicit terrain boundary rather than claiming a player can clear an unowned camp; the naturally dense woodland encounter is separately verified without ranged fire. The broad gameplay run passes 610 tests across 73 files before the later clock fix. Catalogue validation passes with 32 buildings, 27 technologies, 55 resources and 25 recipes.

Live browser restart exposed an existing professional-service timing race: quote and acceptance used separate wall-clock reads, producing a one-millisecond expiry discrepancy. New version-two timing records share a single accepted timestamp across payroll, expiry, fitting and initial training. A bounded version-one timing migration recognizes earlier forward drift of at most one second and retains every original date, wage balance and equipment record; wider, reverse or contradictory drift rejects. Two additional regression cases cover an advancing clock and exact legacy preservation. The final professional/archery/spearmen run passes 34 tests; the subsequent relief/protocol run passes 18 tests. These are separate recorded runs, not a new 612-test broad run.

Two-player browser checks pass funding/cancellation, exact four-bow/24-arrow/28-coin fitting, first-day wages, absent early qualification, private stock, end-role disclosure/cancel, reload and 320–1440px layouts. A normal server deadline fired eight arrows exactly once at an actual clear-sightline encounter and left sixteen with the physically returning unit. A returned-unit scenario passes home loading review/cancel and an exact eight-arrow transfer while retaining wear, wages and firing history. Actual process restarts preserve fired and reloaded custody and the physical return deadline. The originally failed QA world restarts through the explicit timing migration without reseeding or modifying its paid inventory/dates. Narrow controls were visually inspected. An optional additional live end-and-refit check was rejected by automatic approval review with only “blocked by policy”; it was not retried. The advancing-clock regression covers new acceptance timing.

Syntax, catalogue and whitespace checks pass. Isolated QA servers are stopped. Archery advances M3/M4/M5; field ammunition deliveries, mixed formations, cavalry, engineers, larger-force/fort combat and remaining M0–M8 gates stay open. The full gameplay goal remains active.

Latest delivery: manufactured spear kits and professional spearmen

A new army technique connects Standing service and Joinery to an instructor-gated smithy recipe. Three smiths consume six timber, three iron and three charcoal for three whole spear-and-shield kits per village day; each assigned smith produces one kit. Kits are physical two-weight cargo in material trade and owned-outpost routes. Existing trained militia can fit one kit per member, reserve seven/fourteen days of real wages, and complete two further training days as professional spearmen. Qualified funded spearmen gain 50% effective strength on corridor guard and moving waystation convoy escort duty, with no professional attack bonus on patrols or relief attacks. Ordinary professional infantry keeps its existing 25% general bonus. All roles retain provisions, wear, wounds, finite contracts, physical movement and home-only role changes.

Spearman fitting receipts remain linked across wage renewals. Ending the role or demobilizing returns whole kits rounded down by condition, with an atomic warehouse-capacity check. Re-entry costs equipment and training again. Lost instruction blocks production, training and new departures; field commitments retain their existing physical return rules. Version-one infantry saves remain unchanged, new spearmen use a version-two profession record, and neither old worlds nor book imports gain equipment or soldiers. Static recipe reachability now respects per-recipe technology gates and rejects a technique whose research depends on its own gated output.

Ten new spearman scenarios cover real forestry/imports/charcoal/smithing, exact fitting and payroll, no early bonus, actual guard and moving-escort crossings, ordinary patrol combat, wear/return custody, interrupted training, storage rejection, renewal/demobilization, physical player trade, authority/replay, forged fitting histories, offline equivalence and legacy infantry. The 598-test, 72-file broad run passed 596 tests, with only two outdated catalogue-count assertions failing in education and refuge. Those expectations were updated for the new technique; the subsequent education/refuge run passes all 12 tests. The focused spearmen/refuge/catalogue/professional-service run passes all 41 tests. These are separate recorded runs; no fresh all-green 598-test broad run is claimed. Catalogue validation passes with 32 buildings, 26 technologies, 52 resources and 23 recipes.

Two-player browser checks pass funding review/cancel, exact four-kit/28-coin payment, first started-day wages, absent early qualification, end-role return review/cancel, private stock, reload and 320–1440px layouts. A separate valid funded village was observed before and after its actual scheduled second training deadline: training reached two days, payroll reached twelve earned and sixteen held coins, and guard duty became available without an attack bonus. Actual process restarts preserve both unfinished and completed training, fitting custody, exact inventories, wage contracts and next deadlines. Narrow reviews and role cards were visually inspected. Syntax and whitespace checks pass; isolated QA servers are stopped.

This delivers another M3/M4/M5 integration step. Archers/ammunition, cavalry, engineers, formations, larger-force warfare, fort combat and remaining M0–M8 gates are still open. The full implementation goal remains active.

Latest delivery: forecasts of current village orders

Supply chains can now estimate one or six village days (four or twenty-four real hours) by running the existing simulation in a restored, isolated world copy. Household meals, shared recipe inputs, finite stock, storage, specialist upkeep, accepted cargo journeys, paid construction/research, military training/payroll and existing standing orders retain their normal rules. Results contain only the requesting owner's selected village: before/after stock, coins, population, daily checkpoints, projected workshop inputs/outputs and first observed constraints. A forecast neither spends resources/attention nor changes live jobs, events, receipts, research or history. Completed simulated batches are collected separately from actual scribe records. Existing saves receive no forecast ledger or migration.

Eleven scenarios verify actual six-day food balance, competing log use, physical tool arrival, ownership/horizon/work limits with no partial results, food and storage shortages, loss of registrar upkeep, paid grain/bakery work, construction completion/storage, paused producers, cumulative production ceilings, deterministic restore and changed-order estimates, funded infantry training/payroll and limited-office privacy. The broad gameplay run passed 585 tests across 71 files before the final payroll and production-steward scenarios. The final forecast run passed 11 tests. These are separate recorded runs; no 587-test broad rerun is claimed. Catalogue totals remain 32 buildings, 25 technologies, 50 resources and 22 recipes.

Two-player browser verification passes one/six-day requests, no-spend reads, private access, checkpoints, projected batches, stale-result marking after an actual reviewed staffing change, recalculation, reload and 320–1440px layouts. The initial browser launch reached the server before it was listening; verification resumed after its confirmed startup against the same world. The next actual scheduled needs/production cycle exactly matched forecast warehouse quantities, including the reassigned smithy retaining its full wait before consuming iron. A real process restart preserved stock, worker assignments and deadlines; a new forecast began from that committed state. The narrow forecast was visually inspected. Syntax, catalogue and whitespace checks pass; isolated QA servers are stopped.

Results carry exact source/end times and a world revision, become visibly outdated after changes, and are discarded on reload. Requests wait behind pending durable commits. Work/horizon limits reject incomplete estimates rather than exposing partial totals. Future player actions, new trade acceptances and new external disruptions are outside the estimate. Scenario editing, complete warehouse flow history, broader institutions and the remaining M0–M8 gates remain open. The full implementation goal stays active.

Latest delivery: paid village charter extensions

Villages can acquire explicitly released single plots within two hexes of their original center. The bounded release excludes every original founding/frontier parcel, base development areas, natural homes, landmarks, resource features, water and incompatible land. Two residents physically survey each plot and return evidence. A current report, local registrar and staffed registry authorize an eight-timber, one-tool, four-food payment under food reserves and spending limits. Registration adds actual managed land to the existing village without new residents, stores, well capacity, buildings or founding grants. Competing surveys do not reserve title; only one charter can register a shared plot. Raw camps cannot register, while developed local villages use their own researched services, workers and imported materials.

Ten new scenarios cover returned evidence, paid construction on the added cell, multiple acquired plots and larger footprint boundaries, unchanged institutional/material prerequisites, duplicate acceptance, read-only/private projections, failed and recalled surveys, static release exclusions, foreign/stale authority, service/food limits, report expiry and resurvey, competing village claims, fire and offline return, actual developed-outpost registration, legacy saves and malformed geometry/payment/evidence. The broad gameplay run passed 575 tests across 70 files before the final developed-outpost case and technology-description clarification. The final extension/knowledge run passed 23 tests. These are separate recorded runs; no 576-test broad rerun is claimed. Catalogue totals remain 32 buildings, 25 technologies, 50 resources and 22 recipes.

Two-player browser checks pass registration review/cancel without spending, exact payment, eight owned/selectable City plots, private warehouses, reload and 320–1440px layouts. Normal paid work completes a real storehouse on the registered edge. Live Region selects that hex as part of the expanded village. Actual process restart preserves the exact paid receipt, eight-cell region, completed storehouse, warehouse and next needs tick. Narrow review and Region were visually inspected. The local-village fixture was corrected to retain its food supply, pause unused scribal upkeep, free a construction worker temporarily and import replacement tools; production rules were not weakened. Syntax, catalogue and whitespace checks pass; isolated QA servers are stopped. Purchases, leases, distant tenure, larger-fort combat and the remaining M0–M8 gates stay open. The full goal remains active.

Latest delivery: a working farming start

A third founding choice now offers actual surveyed farmland, excluding earlier parcels and retaining their identities. Its one-time version-three grant establishes forty residents, twenty-four workers, a commons and two independent five-worker food plots. The plots produce 55 basic food per village day against forty household demand. Starting stock, housing and storage stay finite. There is no starter mill, mature woodland, free crop knowledge, mineral seam or river service. Real planting, growth, harvest and a paid lumbermill provide replacement construction materials; every displayed parcel can import finite tools along its verified walking route. Initial forage is zero and displayed reserves cannot exceed actual habitat capacity.

Nine new simulation scenarios cover actual geography and all three displayed choices, separate plot staffing, a normal 24-real-hour absence and offline equivalence, paid woodlot-to-timber development, recovery after a ruined food plot, physical tool imports, reservation competition and one-time grants, privacy/read-only state, malformed saves and habitat-limited forage. A catalogue test checks per-building staffing and sustainable food with two instances of the same building definition. The broad gameplay run passed 565 tests across 69 files before the final forage correction; the final farming/founding/population/coastal/catalogue run passed 69 tests. These are separate recorded runs, not a 566-test broad rerun. Catalogue totals remain 32 buildings, 25 technologies, 50 resources and 22 recipes.

Two-player browser checks pass reservation/founding review cancellation, competing-player exclusion, the actual package, independently reviewed plot staffing, private stock, reload and 320–1440px layouts. QA resumed against the same village after correcting outdated assumptions about automatic City opening and the Workers tab. The actual first daily cycle consumes forty food and adds both harvests, moving stock from 720 to 735 without consuming industrial materials. A real server restart preserves the one grant, both plot identities/assignments/deadlines, exact inventory and next needs tick. Narrow founding review and live City were visually inspected. The lumbermill scenario now waits for the actual village production tick after the full cycle; no acceleration was added to gameplay. Syntax, catalogue and whitespace checks pass, and isolated QA servers are stopped. River/flood mechanics, invited starts and the remaining M0–M8 gates remain open. The full goal stays active.

Latest delivery: consented rest at hosted military depots

Hosts can authorize one village day of rest on each campaign leg. The donor reviews the additional food and time before accepting. Version-three agreements reserve ten food per soldier; older supply-only agreements retain their terms. Troops stay at the actual depot, consume carried food and receive fatigue/morale recovery only after the full day. Food replenishment comes from held stock; equipment, wounds and manpower do not improve. Either party can interrupt rest, including on the return leg. Loss of a signatory, paid service or depot support ends recovery while preserving physical return and already resolved combat.

Ten new scenarios cover actual trained/funded infantry, bilateral acceptance, no early recovery, exact food custody, longer fatigue-limited marches, insufficient authorization and wages, legacy terms, forged acceptance fields, withdrawal on both legs, fire/service loss, host succession, malformed saves and offline equivalence. The broad run passed 555 tests across 68 files before the final signatory and receipt safeguards. The final consent/military/continuity run passed 28 tests, and the final rest/depot custody run passed 17 tests. These are separate recorded runs; no 556-test broad rerun is claimed. Catalogue totals remain 32 buildings, 25 technologies, 50 resources and 22 recipes.

Two-player browser checks pass proposal/acceptance reviews, cancellation without spending, actual 40-food reservation for four soldiers, private warehouses, retained drafts/reload and 320–1440px layouts. An actual scheduled rest completed with unchanged position, exactly twenty fatigue recovered and food replenished from the funded depot. Actual process restart retained exact receipts, stocks, fatigue, position and next walking deadline. The initial browser wait used a wrongly capitalized label; it was corrected and verification resumed against the same completed world, without reseeding or restarting its timer. Narrow review and completed-rest cards were visually inspected. Syntax and whitespace checks pass; isolated QA servers are stopped. Hosted rest is delivered; mobile camps, chained depots, territorial warfare and the remaining M0–M8 gates remain open. The full goal remains active.

Latest delivery: local roads and physical cargo timing

Paid local roads, repair/removal, explicit automatic maintenance and a prerequisite-based Road engineering program are implemented. Connected sound plots shorten new caravan and outpost-supply edges by one third; player trades and existing automatic dispatchers share this path. Escorts follow the actual cargo movement and still consume rations and wear equipment. Full walking-route provisions remain reserved. Earlier jobs retain walking time, accepted deadlines remain fixed, and fire detours cannot borrow an abandoned road's speed. City reviews, conditional route estimates, road condition, regional issues and connected map markers are implemented. Eleven new scenarios exercise uninterrupted irrigation and harvest during road work, actual research/imports/road crews, delayed benefits, connected geometry, physical NPC and player exchange, founded outpost supplies, unchanged founder walking time, paid maintenance, authority/cancellation, worn-road recovery, malformed saves, legacy walking jobs, exact offline replay, trained escort movement and fire detours. 545 tests across 67 files pass in the broad gameplay run before the final irrigation fix. After the land/forestry safeguards, all 31 road/terrace/map checks pass; strengthened road-save checks also pass separately. The final road/land/maintenance run passes all 27 checks, including the new regression proving a road crew preserves existing irrigation and the harvest clock. These are recorded separate runs, not a new 546-test broad run. Catalogue totals are 32 buildings, 25 technologies, 50 resources and 22 recipes; the new resource is the road technique's manuscript.

Browser checks pass authoritative road review/cancel, paid funding, the separate four-person crew, pause/cancel/refund without early benefits, connected-condition display, 320–1440px layouts and Region markers. An actual timed cargo step traverses one road edge without crediting carried imports. Actual server restart retains exact stocks, connected roads, cancelled construction, physical cargo position and its next-step deadline. Narrow road review and map were visually inspected. The initial QA seed was corrected to import bricks before its lumbermill consumed the available logs; the live test used a separate valid world. Syntax, catalogue and whitespace checks pass; QA servers were stopped. Local roads are delivered, while unowned corridors, bridges, regional road rights and the remaining M0–M8 requirements remain open. The full goal remains active.

Latest delivery: wetland drainage and retained basins

Implemented actual marsh outpost opportunities, a prerequisite-based drainage technique with staffed adoption, four-stage paid construction, exclusive surveyed basin reservations, effective field use, finite upkeep, foundation failure, separate repairs, paid wetland restoration and authorized recurring maintenance. The normal founding/survey/charter/supply path reaches these sites without changing generated terrain or granting minerals, water yield or workers. City reviews name the basin and consequences; building, forestry and other land commands enforce its reservation. Save validation and offline replay retain both plots' custody.

Nine new scenarios exercise an actual researched and supplied marsh village, exact paid stages and recorded harvest, basin exclusivity, rights/stale reviews, missing surveys, specialist loss/cancellation, critical failure/shoring/building repair, decommissioning, cumulative maintenance budgets, replay and malformed saves. The final broad gameplay run passes 535 tests across 66 files; two previous catalogue-count assertions were updated for the added technology. Catalogue totals are 32 buildings, 24 technologies, 49 resources and 22 recipes; the extra resource is the new technique's physical manuscript.

Browser checks pass review/cancellation, real funding and crew assignment, exact material payment, no early field benefit, protected basin controls, reload and 320–1440px layouts. Actual server restart retains the paid job, both plots' custody and exact inventory. Reviewed pause retains the reservation; cancellation releases it and refunds the authoritative unused materials. QA selector/refund expectations were corrected and the checks continued against the same world. The cancellation review now distinguishes prorated project materials, including material tools, from separately recorded crew support. Completed-work browser checks confirm effective fields, 100% condition, the exact retained outlet and Region's drained-plot/channel/basin markers without script errors. The final narrow review, completed card and map were visually inspected. All twelve map interaction tests pass after the marker addition; syntax, catalogue and whitespace checks pass. QA servers were stopped. The full M0–M8 goal remains active.

Latest delivery: regional equipment trade and repair specialization

Serviceable and worn carts can now travel as whole, weighted cargo in player agreements, recurring trade and owned-outpost routes. Separate equipment custody prevents a cart from serving as both cargo and team capacity. Governor/shared allowances include actual exported and collected carts; available export stock excludes the team loan. Fractional free storage cannot split equipment. An integrated scenario manufactures, sells, uses, collects, repairs and resells the same cart between two player communities, with no customer workshop or equipment grant.

Nine new scenarios cover that full loop, weight and double-use rejection, consent/cancellation, fractional storage, outpost delivery/collection, governor/shared ceilings, malformed cargo, offline replay and finite recurring rounds. Recurring validation now uses the same catalogue as the live trade screen; an actual textile agreement also restores correctly. The final broad gameplay run passes 526 tests across 65 files. Catalogue totals remain 32 buildings, 23 technologies, 48 resources and 22 recipes.

Two-account browser checks pass equipment selectors, proposal review/cancellation and acceptance, recipient reservation/cancellation, recurring equipment choices, outpost delivery review/cancellation without dispatch, private stock, reload and 320–1440px layouts. A seeded real-time arrival delivers an intact manufactured cart once while its payment travels home physically; no carried cart becomes team equipment. An initial case-sensitive QA selector was corrected and remaining checks resumed against the same world. Actual server restart preserves both exact warehouses, the exchanged agreement and homeward payment custody. Narrow review and arrival cards were inspected; client syntax, catalogue and whitespace checks pass. The full M0–M8 goal remains active.

Latest delivery: handcart maintenance and finite reuse

New cargo trips return used equipment as worn handcarts. Staffed cartwright repair consumes the actual worn cart, timber, iron, tools and a full cycle before reuse. Unused recalls, full-storage custody, paid journey capacity and older underway return terms are preserved. Automatic cargo agreements wait for serviceable equipment instead of reusing worn carts. Existing production allowances apply to repairs; recipe changes cannot erase spending. This is partial M3/M6/M7 delivery, with roads, animal transport, equipment markets and the full M0–M8 objective still open.

Seven new maintenance scenarios pass actual repair/reuse, exact inputs and delayed output, missing equipment/materials/services, unused and used recalls, storage custody, legacy migration, authority/replay, corruption rejection, production allowances and offline equivalence. Existing handcart scenarios now verify automatic repair blockers and carrier recovery. The 64-file gameplay run passed 516 of 517 scenarios; its only failure was a pre-logistics migration fixture retaining the newer equipment ledger after deleting logistics. Correcting that historically impossible fixture yields 9/9 passing logistics tests. The final seven maintenance cases also pass after the defensive malformed-ledger check: 517 distinct passing gameplay scenarios, not a second full-suite run.

Browser checks pass worn/serviceable counts, repair terms, review cancellation without spending, the worn-cart source in Supply chains, 320–1440px layouts and a real timed repair with exact iron/tool deductions. Reviewed recipe changes spend nothing and survive reload. A second account cannot read the warehouse. Actual process restart preserves the repaired cart, zero worn stock, exact materials and selected repair process. Narrow equipment and supply-source cards were inspected. Catalogue validation reports 32 buildings, 23 technologies, 48 resources and 22 recipes; script syntax and whitespace checks pass. Earlier run counts below are historical.

Latest delivery: progressive City navigation

The City now prioritizes five everyday destinations, groups the other thirteen behind one expandable menu, explains prerequisites and marks retained activity. All eighteen sections remain inspectable. Shared development prioritizes founding; delegated production stewardship receives only its authorized section. The guide displays three incomplete suggestions while preserving the complete eight-step evidence list. This is partial M1 onboarding delivery; the original M0–M8 objective remains active.

Four new navigation scenarios cover complete destination partition, read-only fresh/coastal and shared-development projections, retained activity despite lost services, and an actual consented production appointment with restricted navigation. The focused navigation/City/briefings/public-offices run passes 31 tests. Browser checks pass all eighteen destinations, five initial buttons, three visible objectives, keyboard disclosure, current-section visibility, closed-menu guide links, per-settlement disclosure state, real server refresh with retained focus and founding drafts, recipe-review cancellation without spending, reload, consented owner/steward accounts, unfounded entry and 320–1440px layouts. Narrow menu and overview screenshots were inspected. Client/server syntax, catalogue validation and whitespace checks pass. Earlier full-suite counts below describe their recorded runs, not a new full-suite run for this interface change.

Latest delivery: a working coastal start

Players can now reserve and found a surveyed coastal village using their existing one-time founding right. It has real farming, shore fishing and cooking, a finite fish bed on the four-hour village clock, freshwater capacity and walking access to the existing waystation. The package grants no lumbermill; fuel and construction materials create different development choices from woodland. Existing smokehouses retain preservation, while reviewed cooking transforms actual fish/firewood into prepared food.

Ten new integrated coastal scenarios and one catalogue scenario cover three viable offers, paid imports, a normal 24-real-hour absence, fuel exhaustion/farmer recovery, planted woodland harvest, resource timing, historical migration replay, private rights, reservation competition, package continuity and corrupted-save rejection. The latest focused coastal/catalogue/population run passed 32 cases; the strengthened historical-recovery scenario also passes separately. The full gameplay suite passes 506 tests across 62 files. The final coastal/founding subset passes all 37 cases after keeping all three woodland choices visible during coastal reservation. Browser checks verify coastal offer/reservation/founding cancellation, exclusion of a competing player, actual package acceptance, four live buildings, recipe cancellation, food forecast, private inventory, reload and 320–1440px layouts. A separate real timed cycle catches/cooks fish, spends one log and leaves 725 food after household meals. Actual process restart preserves the one grant, stock, buildings, staffing and cooking selection. Narrow review and kitchen panels were inspected. Catalog, client/server syntax and whitespace checks pass: 32 buildings, 23 technologies, 47 resources and 21 recipes. Previous counts below are historical; the full M0–M8 goal remains active.

Latest delivery: shared regional operating budgets

An optional home-and-outpost ledger now coordinates cumulative materials across automatic production, district construction, building/land maintenance and automatic food/governor deliveries. It preserves existing local ceilings, records actual paid commitments by community/activity, supports reviewed pause/resume, and never restores authorization from refunds. Material-free production, meals, manual recovery, institutional/community services and player trade agreements remain outside its explicitly displayed scope. This is partial M7 delivery, not completion of general regional governance.

Eight new integrated operating-budget tests pass. They cover actual producer/shipment competition, district/support payment, damaged-building repair and cancellation, improved-soil maintenance, private authority, service loss, council continuity, migration/corruption and offline replay. An exposed fractional district wake-up save-validation bug was corrected. The full 61-file run passed 494/495 scenarios; the only failure was the newly added outpost fixture checking before its independently phased production day. Waiting for its actual due cycle corrected the test, and all eight operating-budget scenarios then passed: 495 distinct passing scenarios. Browser checks pass review/cancel, draft persistence, actual timed production consumption, pause/resume, foreign-owner denial, reload and 320–1440px layouts. A real process restart preserves exact commitments, receipts and warehouse stock. Narrow panel and review were visually inspected. Catalog validation (32 buildings, 23 technologies, 47 resources, 20 recipes), script syntax and whitespace checks pass. Earlier results below are historical.

Updated 22 September 2026. Full objective: implement Gameplay foundations and progression, M0–M8. This tracker records partial delivery and outstanding gates; it does not reduce the objective to the currently working slice.

Latest delivery: textiles and communal clothing

Textile crafts connects flax crop choice, a paid textile workshop and selectable spinning/weaving/tailoring into actual yarn, cloth and garment production. Flax replaces food harvest, one workshop runs one process at a time, and staff, materials, storage and operating specialists remain authoritative. Manufactured goods can be carried to owned outposts or exchanged with another player. The supply graph and actual production receipts expose the chain and its competing uses.

A reviewed communal wardrobe consumes whole garments under a daily limit, retained-stock floor and cumulative allowance. Seven-day clothing places remain local, exclude travelling residents and wear out without refund. Existing issues survive a pause; new ones require service, a sound commons and actual funded stock. Coverage supports up to one extra health recovery only when food, water and shelter are met. No personal estate, food grant, free population or compulsory starting penalty is introduced.

Nine new scenarios pass actual crop/refinement conservation, delayed and bounded issues, controlled health recovery, service/basic-needs interruption, wear, real two-player garment trade, away-carrier exclusion/return, authority/replay, preservation through council stewardship and lawful handover, offline equivalence and migration/corruption. The preliminary grain/population/catalog run passed 30 cases. Catalog and client syntax validation pass: 32 buildings, 23 technologies, 47 resources and 20 recipes. The focused knowledge/textiles/recipe/trade run passes 35 cases; the seven-case refuge regression passes after updating the culture-branch content count. The final full gameplay regression passes 487 tests across 60 files, including the added succession case.

Two-account browser checks pass review cancellation/funding, no premature garment reservation, actual timed issue of eight manufactured garments, coverage/recovery display, supply tracing, privacy, reload and 320–1440px layouts. Real process restart preserves clothing cohorts, expiry, spending and inventory. Reviewed pause retains consumed coverage with no refund. The post-acknowledgment allowance draft now refreshes from the authoritative response; that correction was verified. Narrow views and the full attention counter were inspected.

The full M0–M8 objective remains active. Individual ownership/household shopping, wage recirculation, clothing-specific weather effects, broader materials and services, territorial warfare and major waterworks remain outstanding. Current decisions and earlier scope reconciliation are in living-world design.

Earlier delivery: authoritative account attention

The live account now has twelve attention at capacity and regenerates one point per two real hours, across all communities and characters. New projects and campaigns use the explicit cost schedule in the primary design; accepted transactions charge once, failed/duplicate commands do not charge, and cancellation or succession cannot refill the balance. Initial founding, staffing, routine recovery and funded automation remain free. District approval pays once rather than charging again for its scheduled buildings.

A durable validated ledger and explicit older-save migration preserve goods and ongoing work. Private read-only projections and server refill events keep the live header and reviewed City controls current, including when no map chunk changes. The main counter replaces the former sample value; sample screens remain separate. Seven new scenarios cover actual construction exhaustion/rollback, exact regeneration and no banking, private authority/replay, succession, shared home/outpost balance, actual professional relief costs, offline equivalence and malformed saves. The focused attention/district/land run passes 29 tests. The final full gameplay regression passes 478 tests across 59 files. Catalog totals remain 31 buildings, 22 technologies, 42 resources and 17 recipes.

Two-account browser checks pass cost disclosure, review cancellation, real surveys spending the last points, disabled confirmation at zero, private independent balances, timed server refill without reload, reload and 320–1440px layouts. Actual process restart retains points, total spending, credited refill, next deadline and inventory. Spending the remaining point then reconnecting grants nothing extra. Narrow layouts were inspected. Client syntax and catalog validation pass.

This delivers the account attention rule in the M0–M8 plan, without shrinking the full goal. Broader progression, diplomacy, territorial war, major waterworks and other recorded acceptance work remain open. See living-world design and gameplay interface for reconciled current rules.

Earlier delivery: military passage and selectable relief routes

A staffed Land registry can now negotiate fixed military passage for another founding community's relief campaigns. Exact clause revisions, counteroffers and two-party ratification govern the permission. Troop caps apply to actual routes through third-party charters. Accepted public terms survive succession and registry interruptions; exit notice immediately prevents new campaigns and gives existing forces at most three days before they stop further combat and return physically. No foreign warehouse, ownership, hostile attack or civilian transit rights are granted.

The donor can select a waypoint through a third founding community and review actual route provisions, duration, passage deadlines and hosted depot funding. Accepted campaigns persist their selected path and treaty references. Seven new scenarios cover an actual third-community march and camp victory, clause negotiation, troop caps, authority/replay, physical withdrawal, succession, expiry, offline replay and old-save migration/forged-right rejection. The focused military integration run passed 35 tests; the final transit-only regression passed all seven after additional unsigned-right validation. The full gameplay regression passes 471 tests across 58 files; the seven transit cases also pass after the final save-validation tightening.

Three-player browser checks pass offer/counteroffer/ratification and review cancellation, blocked passage, selected-route acceptance, unchanged inventory on signing, retained wages, privacy, reload and 320–1440px layouts. Actual process restart preserves the accepted clauses, paid route, money, supplies and muster deadline. Exit notice review/cancellation/acceptance preserves the existing funded preparation; host withdrawal then refunds only committed food once while the wage contract remains. Narrow views were inspected. Catalog validation and client syntax pass; catalog totals remain 31 buildings, 22 technologies, 42 resources and 17 recipes.

The full M0–M8 goal stays active. This is fixed passage for consensual relief; broader diplomacy, tolls, civilian transit, territorial warfare, siege/occupation, chained depots, mobile field-rest camps, advanced equipment and major waterworks remain open. Current mechanics and reconciled earlier limits are in living-world design.

Earlier delivery: hosted campaign supply depots

A relief host can now authorize provisions at an actual local Storehouse with an active Field logistics quartermaster. The invited force owner accepts the combined commitment. Donor food is carried from home; reserved host food occupies host storage and can be collected only when the troops reach that building on each leg. A verified thirty-six-hex route reaches a camp outside unaided food range. Actual rations, wages, readiness, fire, character consent and return travel remain authoritative. Revoking combat permission preserves the already funded homeward refill.

Unused host reservations release after troops return home. Storage loss retains food for reviewed, capacity-limited host reclamation. Versioned supply custody and actual directional receipts reject missing/contradictory records; old unaided agreements gain no depot permission or goods. 464 tests pass in the final full focused gameplay suite across 57 files, including seven new depot scenarios. The preceding military/economy/founding run passed 52 cases. Catalog and client syntax checks pass; totals remain 31 buildings, 22 technologies, 42 resources and 17 workshop recipes.

Two-player browser checks pass host authorization, review cancellation/acceptance, exact payments in both villages, held-versus-collected stock, retained wages, foreign inventory privacy, reload and 320–1440px layouts. A real server restart preserves depot/carrying reservations and the original muster deadline. Host withdrawal before departure returns uncollected provisions exactly once while retaining the paid wage term. The narrow layout was inspected. Backend tests also cover both physical pickups, longer-range combat, changed consent, depot destruction, storage reclamation and offline equivalence.

The complete M0–M8 goal remains active. This delivers a single hosted food depot; chained depots, mobile resupply, mobile field-rest camps, advanced equipment/ammunition, broader diplomacy, territorial warfare and major waterworks remain open. Exact mechanics and reconciled earlier limits are recorded in the primary living-world design.

Earlier delivery: consented professional relief campaigns

Two lawful founding communities can now request and accept a professional expedition against the host's actual surveyed bandit camp. Existing funded infantry and real donor provisions support a full home muster, walking journey, quarter-day contact and physical return. Success removes real future caravan raids. Both parties can withdraw before contact; changed character authority, service/readiness loss, return-food limits, fire and wage expiry can abort the operation without remote refunds or troop teleportation. Consent shares only the agreement and committed force status, preserving private warehouses and public authority.

457 tests pass in the final full focused gameplay suite across 56 files. Eleven new campaign scenarios cover actual post-campaign caravan benefit, both leader-death boundaries, hostile/stale/duplicate commands, physical recall, fire-trapped wage expiry, offline equivalence and save validation/migration. The preceding military/continuity integration run passed 46 cases before the final two campaign cases were added. Catalog and client syntax validation pass; catalog totals remain 31 buildings, 22 technologies, 42 resources and 17 workshop recipes.

Two-client browser checks pass request/acceptance/withdrawal cancellation, actual provision commitment, retained wages and population, shared muster status, denied foreign warehouse access, reload and 320–1440px layouts. Actual process restart preserves consent, paid food, troops and preparation deadline. Host withdrawal releases the still-home force and returns only carried provisions once; wages and the uncleared camp persist. The narrow layout was visually inspected.

This advances M5/M8 through a real consensual nonterritorial campaign. Broader diplomacy, territorial war/notice/siege/occupation, chained depots, longer-range resupply, military contracts, broader formations, major waterworks and all other outstanding gates remain open. The full M0–M8 goal stays active. See the primary living-world design for the current rules and interface specification for player controls.

Earlier delivery: paid professional infantry service

A staffed Infantry barracks and the twenty-second working technology, Standing infantry service, now support fitting existing trained militia, two additional training days and fixed seven-/fourteen-day wage contracts. Actual communal money reserves the whole term; started days become conserved military-household earnings. Qualified funded units gain 25% effective strength on existing patrol, guard and escort tasks, retaining supply, wear, wounds and fire constraints. Expiry orders a physical return. Home stand-down and demobilization refund only unstarted wages. Existing people and civilian mobilization remain unchanged.

446 tests pass in the final full focused gameplay suite across 55 files. Ten new scenarios cover earned money and materials, actual training/patrol outcomes, refunds, guard expiry, institutional interruption, authority/revisions/replay, offline equivalence, save migration/validation, succession and guard protection/fire. The preliminary focused run passed 85 cases before the final guard regression was added. The new regression caught and corrected ordinary-strength evaluation at an occupied guard post; quoted and actual protection now use the same paid infantry effect. Catalog and client syntax validation pass: 31 buildings, 22 technologies, 42 resources and 17 workshop recipes.

Browser checks pass reviewed cancellation/funding, exact material and monetary effects, training status, treasury separation, reload and 320–1440px layouts. Actual server restart preserves paid contract, wage custody, unit and stock. Reviewed stand-down refunds twenty-four held coins while preserving four earned coins and the existing militia; re-fitting correctly blocks on insufficient iron. The narrow layout was inspected. Earned money remains an aggregate household balance with no shopping/recirculation yet.

This is the local paid infantry foundation for M5/M8; regional campaigns, diplomacy, major waterworks and all other outstanding M0–M8 acceptance gates remain open. The full goal stays active. Exact mechanics and reconciled scope are in the primary living-world design.

Earlier delivery: consensual production stewardship

A researched, staffed Public offices service now supports fixed-term production appointments between two lawful players. Explicit acceptance grants a separate local production view and producer staffing/recipe controls, including coordinated plans. The charter holder retains title and all wider powers. Existing production budgets, owner target ceilings, pauses and spending persist; a steward may now move a current target within its retained ceiling. Expiry, revocation, resignation, service loss or changed character authority stop further access while applied production and funded work continue. A validated consent/audit ledger survives restart; old saves receive no permission.

436 tests pass in the final full focused gameplay suite across 54 files. Ten new scenarios use actual paid registry/research, separate founders, producer changes and continued harvests, with controlled succession boundaries. They cover privacy, forbidden commands, cross-community plans, retained mandates, stale reviews, exact deadlines, receipt replay, institution recovery, neutral migration and malformed saves. The earlier targeted regression run passed 53 cases. Catalog expectations now include the additional politics technology; the existing unauthorized-player error contract remains intact.

Two-player browser checks pass offer/acceptance cancellation, no pre-consent inspection, restricted City controls, real worker changes visible to the owner, unchanged stock, audit, reload and 320–1440px layouts. The narrow view was inspected. Actual restart preserves accepted consent, identities, term, inventory and workers. Revocation invalidates the other client's open review immediately, denies subsequent reads and persists without undoing applied settings. Catalog and client syntax validation pass: 30 buildings, 21 technologies, 41 resources and 17 workshop recipes.

The full M0–M8 goal stays active. This is a scoped public production office, not complete realm diplomacy or shared ownership. Broader memberships/offices, professional campaigns and major waterworks remain outstanding. Exact authority, consent, privacy and succession rules are in the primary living-world design.

Earlier delivery: surveyed terraces and foundation recovery

Contour surveying connects learned Joinery/Crop rotation to actual paid terraces on suitable surveyed moderate relief. Four-stage work spends timber, imported or manufactured bricks, compost and tools before changing effective terrain. Healthy terraces and soil support 55-food basic harvests at eight workers without creating water or minerals. Retaining works wear while fallow; unstable ground stops production/construction/rebuilding, and critical foundations damage standing structures. Paid retaining repair, separate building recovery and empty-site decommissioning complete the recovery path. Optional automatic maintenance preserves explicit material ceilings and cumulative spending.

426 tests pass in the final full focused gameplay suite across 53 files. This includes nine new terrace scenarios for an actual paid technology/material/harvest chain, rights, stale review, service loss, cancellation, wear, shoring, ruins/rebuilding, decommissioning, automatic permissions and offline/save validation. The preceding focused land/settlement regression run passed 42 cases after immediate specialist suspension was reconciled with older land-work tests. Catalog validation and client syntax checks also pass.

Browser checks pass reviewed cancellation/funding, unchanged terrain before completion, paid pause/reload, completed terrace risks and maintenance, prohibited free removal, decommission review cancellation, funded repair and 320–1440px layouts. An actual process restart preserves the paused paid job and exact stock; reviewed resumption makes no second payment. Narrow screenshots are inspected. Catalog totals are 30 buildings, 20 technologies, 40 resources and 17 workshop recipes. Full M0–M8 work remains active; major drainage/rivers, steep engineering and other outstanding gates are not claimed complete. See living-world design for the authoritative mechanics and scope.

Earlier delivery: physical handcart transport

A staffed Cartwright workshop under active Joinery manufactures whole handcarts from actual timber, iron and tools. A reviewed settlement choice can require one available cart for each future two-person cargo trip, increasing capacity from sixty to one hundred weight. Actual carts leave warehouse stock on dispatch and return only physically with whole storage space. A versioned loan book validates custody, prevents reuse while away and preserves gear through recall, fire, policy changes and restart. Old saves gain no equipment or automatic borrowing permission.

Waystation trade, player barter, recurring agreements, manual outpost delivery, food mandates and governors share the capacity and loan rules. Existing material ceilings remain; borrowing equipment is a separately disclosed permission, not material consumption. Larger manual offers make the capacity available in City. Supply chains traces manufactured carts and borrowed gear with correct conditional units. Horse services, roads, cart wear and the legacy haulage migration remain open.

417 tests pass in the final full focused gameplay suite, including twelve new handcart scenarios; the preceding transport integration run passed 75 cases. Browser checks pass reviewed policy/cancellation, ten-lot dispatch, actual stock/custody, future-mode changes retaining paid equipment, reload and 320–1440px layouts. The narrow view was inspected. Actual process restart preserves the paid cart/cargo and policy exactly; reviewed recall returns the same cart once and survives reload. Catalog validation passes for 30 buildings, 19 technologies, 39 resources and 17 workshop recipes; client syntax passes.

This advances M3/M6/M7/M8. The full M0–M8 goal remains active. See the primary living-world design for exact production, permission, storage, migration and scope rules.

Earlier delivery: coordinated production plans

City Production can review and apply worker/recipe changes across two to eight completed local producers atomically. Current city/structure revisions, ownership, total labor, valid recipes and building work are checked before changes. Releases precede assignments and queued crews start only after the complete plan. Changed buildings wait a full cycle; untouched timers persist. Existing pauses, stock targets, input ceilings and cumulative spending remain intact. Nominal material totals are explicitly separate from actual production and household/cargo consumption. Crop planting stays a separate paid order.

405 tests pass in the final full focused gameplay suite, including ten new scenarios for real balanced grain production, occupied-worker transfers, rollback, authority/revisions/replay, preserved spending/pauses, building work, queued repair crews and offline equivalence. Browser checks cover drafts, material totals, cancellation, actual worker/recipe changes, consecutive edits, unchanged goods, reload, no-op prevention, reset and 320–1440px layouts. Actual process restart preserves staff, recipes, timers, policies, exact stocks and history; the narrow view was visually inspected. Catalog and client syntax validation pass.

This advances M3/M7. Automatic production instructions, priorities, full competing-consumer forecasts, warehouse accounting, transport extensions and the remaining M0–M8 gates stay open. The full goal remains active. See the primary living-world design for the transaction, forecasts and limits.

Earlier delivery: grain milling and baking

The nineteenth technology unlocks a paid Grain mill, Community bakery and a seeded grain crop. Actual field grain becomes flour, then prepared food using firewood and assigned workers. Millwright loss and input shortages block processing; existing grain can feed household shortfalls without becoming prepared reserves or travel rations. Crop reviews disclose lost direct-food output and the startup buffer. Supply chains traces crop variants, intermediate goods and conditional grain meals; exact production receipts preserve actual refinement. One-cycle food capacity follows available inputs through dependent workshops without spending real inventory. Owned-outpost and governor cargo supports grain/flour, with zero default permission in existing shared budgets.

395 tests pass in the final full focused gameplay suite, including nine new grain scenarios covering actual paid progression and carriage, seed delay, failures, fractional batches, full storage, target changes, old saves and daily/offline equivalence. Browser and actual process restart checks pass for both planted and processed villages, preserving stock, seed, timers, receipts, staffing and suspended adoption. Narrow views were inspected at 320/390px; tested layouts span 320–1440px without browser exceptions or panel overflow. Catalog validation passes for 29 buildings, 19 technologies, 38 resources and 16 workshop recipes; client syntax validation passes. The initial broader run exposed three obsolete catalog-count assertions; these were corrected before the successful final run.

This advances M2/M3/M4. Broader goods, coordinated planning, complete warehouse accounting, markets, transport extensions and other M0–M8 gates remain open. The full goal stays active. See the primary living-world design for quantities, dependencies, forecasts, migration and limits.

Earlier delivery: actual production batch history

An active local record keeper now records the latest 120 completed workshop/crop batches with exact inputs, outputs, staffing, selected recipe and soil yield. Supply chains filters these receipts by resource and totals their actual consumption/output separately from current stock and potential rates. Older omissions and production without a scribe are disclosed. Paused/blocked work creates no receipt; resuming the scribe never invents the gap. Older saves gain an empty book without changing resources or production.

386 tests pass in the full focused gameplay suite, including seven new history scenarios. Browser checks verify fractional actual tool production, incomplete-history disclosure, resource/plan selection, retained disclosures, pure reads/reload, reviewed scribe resumption and 320–1440px layouts. Actual server restart preserves inventory, receipts, exact quantities/counters, the scribe program and workshop staffing/timing. The narrow view was visually inspected; no browser errors or overflow occurred; catalog validation passes. This advances M3 measured production history. Complete warehouse accounting, coordinated planning and other M0–M8 gates remain open; the full goal remains active. See the primary living-world design.

Earlier delivery: funded automatic building repairs

Standing buildings can receive reviewed condition thresholds, material ceilings and an idle-worker floor. Daily checks prioritize damaged buildings while respecting prior crews, food buffers, accounting, fire, garrisons and current supplies. Each accepted repair pays the ordinary damage-based bill and actual tool/haulage support, uses four residents, pauses production and restores condition only at completion. Gross commitments survive pause, edits, refunds and destruction; ruins need a separate rebuild decision. Regional issues and saved briefings expose blocked and funded work. Older saves gain no instructions.

379 tests pass in the full focused gameplay suite, including eight new repair scenarios. Browser checks cover review/cancel/authorize, no premature spending or repair, consecutive edits and exact acknowledged drafts, regional blockers, pause with retained funded work/spending, reload and 320–1440px layouts. Actual server restarts preserve inventories, terms, spending, damaged structures and paid repair materials/crew/progress exactly. Reviewed resume completes the same saved repair without additional stock movement or spending reset. The narrow view was visually inspected; no browser exceptions or overflow occurred; catalog validation passes. This advances M5/M7 recovery and funded operations. The full M0–M8 goal remains active, with general operating budgets, road upkeep, broader crises and other milestone gates still open. See the primary living-world design.

Earlier delivery: finite recurring player trade

Two differently owned chartered villages can consent to fixed goods, two to six rounds, a return-to-next-dispatch interval and a finite dispatch window. Acceptance reserves nothing. Each new round rechecks local services, goods, public budgets, food reserves, actual workers and the shared caravan slot before funding the existing physical bilateral exchange. Either party can stop; local uncollected payment releases immediately while carried exports or exchanged payment must return. Expiry stops new rounds and lets already funded travel finish. Gross spending remains spent through recall/refunds. Old saves receive no recurring authority.

371 tests pass in the full focused gameplay suite, including ten new recurring-trade scenarios. Two-account browser checks verify review/cancel/propose/accept/stop, retained drafts, no consent-time spending, real payment release/returning exports, retained counters and 320–1440px layouts. Actual server restarts preserve both inventories, consent, terms, round receipts and cargo exactly. The narrow screen was visually inspected; cancellation wording was corrected and reverified. No browser errors or overflow occurred; catalog validation passes. This advances M3 and the advanced-trade part of M8. The full M0–M8 goal remains active; broader markets, diplomacy, campaigns, authority and other gates remain open. See the primary living-world design.

Earlier delivery: shared regional logistics budgets

One reviewed daily/total material allowance can now cover every automatic food-supply and governor-exchange route from a founding home. Actual exports, travel food and reserved collections consume both route and shared allowances once. Local warehouses, workers and physical journeys remain separate. Daily limits renew on the home clock without accumulating; total spending survives pause/resume, edits, recall and refunds. Pausing holds new automation while manual relief and paid travel remain available. New commitments require staffed regional accounting; authority, succession, historical catch-up and save-marker checks preserve accepted obligations.

361 focused tests pass, including seven new regional-budget scenarios and an actual three-community competition between food and governor routes. The final fourteen budget/overview checks pass. Browser checks verify reviewed authorization/cancel, consecutive draft edits, exact blockers, no approval-time spending, pause/resume with retained cargo and counters, reload and 320–1440px layouts without browser exceptions or overflow. Actual server restarts preserve exact shared budgets, daily/total spending, receipts, both warehouses and physical cargo. Immediate acknowledgment drafts retain zero ceilings. The narrow layout was visually inspected and catalog validation passes. The full M0–M8 goal remains active; this is shared logistics control, while general operating budgets, offices, rights and realm systems remain open. See the primary living-world design.

Earlier delivery: surveyed well headworks

Registered local villages can extend access to their existing surveyed source by twelve units per paid three-day/four-person project. Woodland parcels retain their sixty-unit source limit; mineral parcels remain at twelve. Work spends 24 local timber, 18 bricks and two tools and adds delivery only on completion. Actual relocation then supports a sixteen-person village without creating people. Household priority, crop consumption and health/admission checks use the same effective capacity. Worn works lose extra delivery; paid repairs and bounded daily maintenance require local materials, crews and specialist services. Maintenance now accounts for cumulative brick spending while preserving earlier soil/channel instructions.

354 focused tests pass, including nine new headworks scenarios. Browser checks verify paid work, delayed benefit, pause/resume, reload, effective water display and reviewed automatic-maintenance budgets at 320–1440px. Actual server restarts preserve exact inventories, residents, source limits, paid levels/condition, land survey, crew stage/payment/timing and maintenance authorization. The narrow layout was visually inspected; catalog validation passes. The full M0–M8 goal remains active; major water engineering and the other milestone gates remain open. See the primary living-world design for rules and recovery.

Earlier delivery: developed local villages

An outpost with twelve actual residents, eight workers, built housing, adequate water/health/local food production, a local record keeper and home registry support can fund a three-day commons upgrade. The project spends local timber, food and tools, uses four actual workers and preserves existing camp facilities until completion. Its registered village gains built commons capacity and access to bilateral trade, while population, water, original title, home supply links and administration remain unchanged. Pause/refund, interrupted services, fire and succession retain paid work. Destruction and paid reoccupation preserve the legal charter but restore only a basic camp, requiring a new paid project for larger facilities.

345 focused tests pass, including nine new local-charter scenarios; the final nine-case run also passes. Tests execute actual housing/field construction, household relocation, local research, registry staffing, timber production and transported supplies. Browser checks verify reviewed funding, no early benefit, Orders pause/resume, reload, completed capacities/trading access and 320–1440px layouts. Actual server restarts preserve both funded work and a completed village, including exact inventories, people, water and legal history. Catalog validation passes. See the primary living-world design for requirements and recovery rules.

This advances M6 local village development. Larger water systems, local officeholders/membership, wider tenure, geographic/resource releases and remaining M0–M8 gates stay open. The full goal remains active.

Earlier delivery: two-player material agreements

Two differently owned home villages can propose fixed material terms, reserve the recipient's payment, and separately review/fund the sender's physical caravan. Exact goods exchange only on arrival; collected payment must travel home. Either party can cancel before exchange, releasing only locally held payment while travelling exports return physically. Reserved goods continue occupying recipient storage. Existing reserves, spending rules, workers, fire, provisions, full warehouses, receipts, ownership and succession apply. City, briefings, regional issues and supply traces expose the agreement without sharing private inventories or authority.

336 focused tests pass, including eight bilateral scenarios. A subsequent twenty-four-case trade/logistics/coin run verifies final custody checks. Separate-account browser checks cover reviewed consent/dispatch/cancellation, no early delivery, reload, private City denial and 320–1440px layouts. An actual server restart preserves both inventories, payment reservation, fixed terms and travelling cargo/crew/timing. Catalog validation passes. See the primary living-world design for custody rules and limitations.

This delivers the first M3 player barter agreement for five materials and home villages. Wider goods, standing orders, deadlines, transport upgrades, contract-law institutions and all remaining M0–M8 gates stay open. The full goal remains active.

Earlier delivery: regional overview and linked recovery decisions

A private Regional overview now compares the home village and its retained outposts using actual City food, workforce, water, housing, health, storage and instruction rules. It separates carried/reserved cargo from usable stock, counts travelling founder/household cohorts without duplication, and links issues to the correct settlement, plot and management tab. Home-controlled supply issues remain discoverable through the affected outpost filter. Routine pauses/waits are distinguished from actual blockers; historical hunger does not become a permanent current starvation warning.

The final full focused suite passes 328 tests, including seven regional scenarios and added assertions in clay collection, military equipment supply and district funding. The preceding eighteen-case regional/district/military run also passes. Browser checks verify real three-settlement navigation, filters, physical journey focus, unchanged inventories/unread counts through reload, cross-account denial and 320–1440px layouts. An actual server restart preserves all community ledgers, issues and the travelling supply team exactly. Catalog validation passes. See the primary living-world design for the read model, issue limits and evidence scope.

This advances M7 exception management. Coordinated regional budgets, broader crisis recovery, offices and the remaining M0–M8 systems are still required. The full goal remains active.

Earlier delivery: funded recurring land maintenance

Owned soil and irrigation improvements can receive reviewed maintenance instructions with condition thresholds, worker floors and cumulative timber/compost/tool ceilings. Daily checks use actual accounting/land specialists, food buffers, available crews and materials. Repairs are ordinary paid staged projects that pause harvest and restore condition only at completion. Pause and cancellation preserve spending history; old saves receive no orders. Authorized instructions and paid work survive council succession.

321 focused tests pass, including six new maintenance scenarios; the final six-case run also verifies continued instruction funding after death. Browser checks cover review/cancel/drafts, no premature spending or land benefit, real funded work, pause/reload and 320–1440px layouts. Actual server restart preserves the instruction, cumulative costs, paid crew/stage/timing, land and inventory exactly. Catalog validation passes. See the primary living-world design for the upkeep contract and evidence limits.

This advances M5 stewardship and M7 funded operations. Replacement-material production/imports, building/road upkeep, coordinated regional budgets, wider crisis recovery and all remaining M0–M8 work remain open. The full goal stays active.

Earlier delivery: finite regional clay and carried brickmaking inputs

Four default-world lowland survey parcels add bounded shallow clay beds without changing prior woodland/iron offers or saves. Returned physical surveys reveal their contents; paid founder arrival and camp completion activate 240-unit deposits. Real clay pits, workers and carriers now feed a separately constructed home brick kiln. City presents clay-specific supply orders, and depleted beds remain depleted through save/restore and reoccupation. See the primary living-world design for geometry, geology and custody rules.

315 focused tests pass, including five new clay scenarios covering the complete paid clay-to-bricks chain, finite storage and partial extraction, provenance/authority, full depletion/offline equivalence, evacuation and paid reoccupation. Browser checks cover survey/map details, reviewed collection/cancellation, actual escrow, reload and 320–1440px layouts. Actual server restart preserves the clay journey and both inventories exactly; catalog validation passes.

This advances M3 regional production. These shallow beds are authored scenario geology; stone/mortar, wider producers, economic planning and all remaining M0–M8 work remain open. The full goal stays active.

Earlier delivery: existing households develop an outpost

Four actual home residents, including two available workers, can now move into an owned established outpost with built permanent housing, adequate water, health, food reserves and storage. Paid food travels with them. No destination people or resources appear before arrival, and changed admission conditions cause physical return. Recall, fire, reserve withdrawal and full-store unloading retain the same people and food. A pending relocation blocks competing waystation admission. Named kin stay home; funded travel survives succession. Old saves gain no people or goods.

City exposes reviewed relocation under each outpost and uses the existing journey/map/recall controls and saved briefings. 310 focused tests pass, with six relocation scenarios covering actual construction/supply/travel, real worker production, interruption/recovery, migration competition, custody/authority/receipt validation, offline equivalence and succession. A final six-case run passes after return-state validation was tightened. Browser checks verify real paid transfers, no early destination grant, physical recall/reload and 320–1440px layouts. An actual server restart preserves the cohort, route, complete food custody and both community ledgers exactly. See the primary living-world design for the contract and evidence limits.

This advances outpost growth without a new founding grant. Developed local charters, larger water/housing systems, other inter-community moves and all remaining M0–M8 work stay open. The full goal remains active.

Earlier delivery: first-session guide and saved return briefing

City Overview now links eight state-backed steps from keeping the village fed through construction, imports, knowledge, military protection, land improvement and a supplied outpost. Actual completion/readiness is distinguished from funding or intent; recalled imports do not count and food readiness can regress. The guide grants no resources and uses existing live controls.

A private forty-entry settlement briefing records selected committed events with management links and explicit overflow disclosure. Reading never marks it seen; a saved, revision-checked acknowledgment preserves later changes and keeps recent history. Home/outpost read positions are independent. Owning-account observers can acknowledge during succession without acquiring public authority. Older saves start without fabricated history; malformed or partially missing existing ledgers reject restoration. See the primary living-world design for the contract.

304 focused tests pass, including six new briefing scenarios and additional assertions in the actual outpost journey. The final 29-test persistence/city/outpost run also passes. Browser checks verify guide navigation, pure reads/reload, explicit markers, history gaps and 320–1440px layouts. Actual server restart preserves cursor/history/guide evidence, stock and troops exactly; catalog validation passes.

The initial guide and bounded factual return report are delivered. Broader regional aggregation, economic flow history, onboarding playtesting and all remaining M0–M8 work stay open. The full goal remains active.

Earlier delivery: staffed watchtower garrisons

A built, staffed adjacent village tower can receive two/four actual trained militia for one/two paid days. Soldiers walk there, eat carried food and prepare a quarter-day watch. A ready tower/lookout/scout then briefs newly dispatched caravans onto actual funded walking detours around the known camp. Existing caravans retain risk; no remote immunity, camp clearing, healing or territory is granted. Recall, service loss, fire, readiness, return reserves and a fixed deadline end duty, with physical return and storage-limited food recovery. Structural work waits for the unit to return. Old saves retain staff and acquire no troops; paid defense survives succession.

The full focused suite passed 297 tests; a final seven-case garrison run adds one additional passing scenario, for 298 distinct verified tests. Actual command flows and explicit interruption boundaries cover two/four-member duty, six-member rejection, real detours and impossible approaches, older caravans, recall/storage, service loss, authority/receipts, migration/corruption, offline equivalence and succession. Browser checks cover reviewed spending, real food/route/position, preparation, map focus, recall/reload and 320–1440px layouts. Actual server restart preserves the garrison ledger, provisions, returning position and accepted caravan detour/cargo. Catalog validation also passes. See the primary living-world design for the contract and evidence limits.

This delivers the first village watchtower garrison and warning role. Fort combat, larger/outpost/allied garrisons, professional forces and all remaining M0–M8 work stay open. The full goal remains active.

Earlier delivery: moving convoy escort

A ready supplied militia can join its own paid frontier caravan before departure, then physically accompany both legs. Protection applies only at an actual shared camp crossing with sufficient force, readiness and return food; it does not clear the camp. Walking/crossings wear gear and add fatigue. Fire detours preserve paired position, and depot congestion holds both groups. Militia recall detaches it while trade continues; caravan recall returns both. Low supplies/readiness cause independent withdrawal. Old saves remain unchanged and paid defensive escort survives council succession.

City reviews food, route, risk and withdrawal terms, reports linked caravan/crossings and labels the map unit. Seven new scenarios bring the full focused suite to 291 passing tests. Browser checks cover review/cancellation/assignment, real food, paired position/reload, map focus and physical recall at narrow/desktop widths. Actual server restart preserves link, routes, provisions and cargo exactly. See the primary living-world design for scope and persistence rules.

The first moving escort role is delivered. Fort garrisons, broader/allied/outpost escorts, field reinforcement, forward depots and the remaining M0–M8 work stay open. The full goal remains active.

Earlier delivery: recruit into an existing militia

A trained home militia can add two/four real civilian residents up to six total, paying one crafted kit each and training for two full days with commons, Drill and household food. The same unit retains veteran wounds/readiness and worn equipment; new paid gear contributes its actual weighted condition. Recruitment removes civilian workers immediately without changing population. Interrupted training and cancellation preserve paid kits/people; cancellation requires full refund storage and restores only the veteran cohort. Funded training survives succession.

City now reviews reinforcement and its workforce/gear effects, shows training progress and offers reviewed cancellation. Six new scenarios bring the full focused suite to 284 passing tests, including real wounded veterans, growth to six, cancellation/storage, service/food interruption, offline recovery, migration/corruption and council continuity. Browser checks cover paid transfers, no early healing/completion, reload/cancellation and responsive layouts. Actual server restart preserves recruits, timing, veteran state and population/kit ledgers exactly. See the primary living-world design for the contract.

Home reinforcement is delivered; field reinforcement, fort garrisons/broader escort contracts, professional forces and the remaining M0–M8 systems stay open. The full goal remains active.

Earlier delivery: carried militia equipment replacement

Field supply teams can carry crafted militia kits with food under real sixty-weight capacity, stock, worker, route and reserve limits. Gear condition improves only at the actual waiting-unit rendezvous. Whole kits replace worn sets; excess returns physically, with no healing, recruits, morale/fatigue recovery or guard-deadline extension. Full/fractional home storage retains whole kits and carriers. Version-two kit custody validates paid/carried/fitted/returned quantities while preserving old food-only journeys.

City adds a reviewed equipment supply action, active kit/condition reporting and kit cargo in the supply network. Five new scenarios execute actual crafting, worn patrol/guard delivery, surplus/recall/storage, authority/receipts/save validation and fire/offline recovery. 278 focused tests pass. Browser checks verify real reservation, no early fitting, review cancellation, reload, actual delivered gear and responsive layouts. Real server restart preserves kits, route, unit condition and guard deadline exactly. See the primary living-world design for the whole-kit replacement contract.

Basic field equipment replacement is delivered. Advanced equipment/ammunition, forward depots, field reinforcement, fort garrisons/broader escort contracts, wages/mortality and the remaining M0–M8 work stay open; the full goal remains active.

Earlier delivery: exhausted-site reclamation

Worked mineral ground now blocks new non-extraction construction until paid reclamation. Exhausted, surveyed, cleared shallow sites can be regraded/stabilized and supplied with maintained soil using eight compost, twelve timber, eight bricks, one tool and a four-person crew over four village days. Minerals stay exhausted; buildings/food still require actual later construction and staffing. Existing accepted structures remain usable. Outpost carriers accept compost, and mineral outpost cards expose an exact reclamation-material delivery.

Five new scenarios execute full mining depletion, physically delivered supplies, demolition/salvage, research, staged restoration and productive farming, plus interruption/cancellation, offline equivalence, authority, corrupted records and soil upkeep. 273 focused tests pass. Browser checks cover reviewed spending, no premature benefit, reload and narrow/desktop layouts; real server restart retains paid stage, crew, inventory and depleted seam exactly. See the primary living-world design for scope and migration rules.

This advances M5 and the regional resource lifecycle. Deep/steep-site engineering, terraces, drainage, broader ecological effects and all remaining M0–M8 gates stay open. The full goal remains active.

Earlier delivery: funded market and communal treasury

The finite frontier depot now buys carried logs/timber and sells tools/iron/bricks for coins at posted prices. One recorded 1,200-coin NPC fund finances sales; settlements start with zero cash and earn it through actual delivered exports. Purchases reserve existing coins and goods. Proceeds/refunds return with carriers; full material storage cannot duplicate coin credits. Public balances and funded trade persist through succession. Migration preserves earlier barter saves, and active payment/goods contracts plus world-wide monetary conservation validate restoration.

City shows treasuries, prices, reviewed funding/recall terms and held/credited payments. 268 focused tests pass, including seven new market scenarios and one malformed-market catalog case. Browser checks verify actual earned purchasing power, cancellation, escrow/reload and responsive layouts; an actual server restart preserves payment and goods exactly. See the primary living-world design for quantities and evidence limits.

This delivers the bounded M3 funded-market gate. Player contracts, autonomous producers/restocking, dynamic prices, wages/taxes, personal money/inheritance, transport upgrades and the remaining M0–M8 work stay open. The full goal remains active.

Earlier delivery: surveyed mineral outposts and carried ore

The released frontier now includes resource-survey parcels derived from existing generated mineral features, without changing woodland starts. A returned physical survey reveals the finite seam; actual founder arrival and camp completion activate it without granting ore stock. Paid mines and food plots use transported construction supplies and existing residents. Iron ore, clay and charcoal can travel through the normal outpost cargo system, and governors can fund recurring exchanges of those materials.

City exposes returned seam details/map focus, reviewed ore collection and remaining deposit quantities. Final partial extraction uses only actual available storage; depleted seams persist through restore and reoccupation. Six new mineral scenarios execute mine-to-tools production and complete depletion, while an additional governor scenario verifies ore escrow/allowances. The full focused suite passes 260 tests. Browser checks cover reviewed cancellation/dispatch, physical collection reservations/reload, map focus and narrow/desktop layouts. See the primary living-world design for exact release rules and evidence limits.

The full M0–M8 goal stays active. Broader resource releases, tenure/charter development, broader markets, vehicles, regional administration and other outstanding gates remain required.

Earlier delivery: startup validation of gameplay dependencies

The engine now rejects invalid authored catalogs before creating/restoring a world; npm run validate:gameplay runs the same read-only check. At this checkpoint validation covered 27 buildings, 18 technologies, 35 resource types including manuscripts, and 14 workshop recipes, plus land-project/barter costs, crops, construction stages and presentation contracts. Direct prerequisite cycles and cross-institution deadlocks are rejected with named diagnostics; real alternative institutions remain valid.

Founding now reads its unchanged eight-field-worker/two-sawyer assignments from the package declaration. The check verifies actual workers, input-free starting food, housing, storage and reserve quantities. Catalog version metadata and the resource registry do not alter existing saves, goods or balances. The full focused gameplay suite passes 253 tests, including ten new adversarial catalog scenarios; npm run validate:gameplay also passes. See the primary living-world design for the exact reachability model and its limits.

The full M0–M8 goal stays active. Catalog reachability establishes possible dependency paths; live geography, finite supplies, rights, staffed services, broader recovery and the remaining gameplay gates still require implementation and simulation evidence.

Earlier delivery: local adult recruitment and physical landless journeys

When the waystation roster is exhausted, continuation can select an existing unclaimed civilian from the account's village or outposts. Named kin, militia and travelling crews are protected. One real resident/worker departs, paid commitments persist through workforce reconciliation, and no communal stock or title transfers. The adult walks to the waystation before work or trade unlocks; fire delays movement and hunger slows it. Personal pause/resume and role switching preserve actual position and the single population transfer.

City now reviews origins/workforce/travel, exposes journey progress and map focus, and blocks distant market actions. Version-two career migration preserves stationary characters and validates route/timing/meal continuity. The full focused suite passes 243 tests; browser checks include an exact paused-journey recovery after restarting the server. See the primary living-world design for the contract and scope of evidence.

The full M0–M8 goal stays active. A universal fallback when no eligible adult remains anywhere accessible, newcomer routes beyond the bounded resident starts delivered above, broader travel/employment, total land-loss integration and other offices remain open. Later deliveries above implement bounded household adoption, personal coin inheritance and mortality.

Earlier delivery: an independent landless career

After council stewardship begins, including after all named kin die, the account can embody an existing waystation adult and continue gathering, hewing and bartering personal goods. The source cohort loses that real person; former communal stock/rights stay intact. Personal food, finite shared woodland, tool wear, escrow and storage constrain one timed job. Older waiting work receives the next shared harvest before new orders. Local barter transfers existing depot/relief goods, and role switching resumes the same identity and inventory.

The City family panel exposes reviewed entry/resumption, personal work, meals, exchanges and history. Personal orders address the account independently of former settlement authority. Versioned neutral migration, conservation checks and chronological replay preserve saves. See the primary living-world design for quantities and evidence.

M7 remains partial. Local recruitment and the first physical journey are now delivered above; invitations, fuller lifecycle/travel/employment, total land-loss integration and other human offices remain open. Later deliveries above implement bounded adoption and personal coin inheritance. The full M0–M8 goal stays active.

Earlier delivery: initial family continuity and lawful handover

Four named adults annotate the existing founding population. Prolonged critical illness now records a death and enters council stewardship atomically, with no new goods or duplicated people. Funded work and existing mandates retain their limits, offensive patrols return physically and defensive orders continue. Choosing an adult grants embodiment; a separately reviewed council mandate is required for public office. Stale deceased-character commands remain invalid after handover.

City and its map overlay expose illness risk, household appointments, death chapters, observer continuation and lawful handover with current commitments/reserves/budgets. Older saves migrate without grants; the old sample Family/Succession screens link to live controls. The seven new continuity scenarios and browser checks are recorded below and in the primary living-world design.

M7 remains partial. The waystation career above now extends continuation beyond observation; wills/estates, fuller lifecycles, other human offices and broader fallback when all accessible civilian sources are exhausted remain required. Full M0–M8 implementation remains active.

Earlier delivery: temporary refuge and the eighteenth technology

Sacred and civic architecture brings the initial catalog to eighteen working topics, three per branch. It unlocks a paid Community refuge, the twenty-seventh building. A separate architect and hall staff support explicit public or faith-supported shelter under identical rules. Temporary places require a full preparation day and real firewood, cover existing residents' housing shortfall, and never count toward migration housing. A staffed refuge can host the architect after commons loss, but cannot replace the well, food or permanent homes.

People exposes limits, readiness and paid shelter history; Supply chains traces firewood. Old saves gain disabled ledgers. A command-only household journey demonstrates actual arrival, house loss, funded refuge and rebuilt permanent shelter with conserved people. M4's initial eighteen-topic content count is met; wider institutional/training requirements and all remaining M0–M8 work remain active. See the primary living-world design for exact costs and rules.

Earlier delivery: staffed governors and recurring exchanges

Regional institutions is the seventeenth topic and third initial politics topic. A real resident governor operates from the existing staffed registry office with daily writing supplies. With an accountant and scribe, it can maintain a destination stock target and collect a different surplus toward a home target through ordinary two-person supply journeys. Per-material cumulative ceilings include both directions and travel food; retained stocks, idle-worker floors, distance, storage, rights and existing teams constrain every dispatch. Pause, recall and edited targets preserve commitments.

City exposes per-outpost instructions, current quotes, reviewed funding, exceptions and recent decisions. Old saves gain an empty ledger; earlier food-only mandates retain their separate history and cannot run alongside a governor instruction on the same route. Actual three-settlement preparation verifies independent instructions, urgency and shared workers. This delivers regional exchange delegation; broader officeholder/governor duties, operating budgets, family continuity and wider religion/civic systems stay open. The primary living-world design records exact rules.

Earlier delivery: production-aware household admission

Migration departure and arrival now share the economy overview's policy-aware food-capacity calculation. Paused or target-held fields and inactive target-production services no longer attract households using nominal output. Travellers turn back with their prepaid rations when admission fails. Resuming production restores capacity while retaining all other checks. No new state or migration is needed; wider governance and the full M0–M8 objective remain open.

Earlier delivery: bounded production mandates

Each charter producer can retain a reviewed stock target and cumulative input allowances under active Public accounting. Actual batches stop at the target or before exceeding their allowance, and resume after real consumption when funding and services permit. Pause retains staff; explicit Continuous production removes future limits while preserving the old target ledger. Recipe changes, target edits and mode changes cannot reset prior spending. Every configuration starts a full cycle, without immediately reserving stock or workers.

City exposes editable targets, full-batch estimates, past spending and reviewed mode changes. Held food production is removed from food forecasts, and satisfied targets/explicit pauses are not urgent production exceptions. Versioned neutral migration, authority, bounded spending and offline equivalence are verified. This delivers local production targets and ceilings; wider coordination, operating budgets, broader governor duties and all remaining M0–M8 gates stay open. See the primary living-world design for the exact contract.

Earlier delivery: selectable smithy recipes

Smithies retain Mixed metalwork and can separately Smelt iron or Forge tools. Real imported/refined iron and locally made charcoal now support tool production without a local ore deposit. Reviewed recipe selection preserves staff/stock, restarts a full production cycle and uses the existing finite input/storage and catch-up rules. A version-one choice migrates older smithies neutrally, while invalid versions or incompatible recipes reject restoration.

Production shows current and alternative batches. Supply chains attach each workshop only to its chosen path, preventing duplicated capacity, and link unassigned alternatives back to recipe controls. Cancelled and stale reviews, reload and keyboard focus are verified. This is the first industrial recipe-choice system; broader alternatives, production planning, broader markets/contracts and remaining M0–M8 gates stay open. See the primary living-world design for exact quantities and behavior.

Earlier delivery: timed corridor defense

A trained militia can fund one or two village days guarding the observed frontier corridor. It walks to a real post, consumes paid provisions and deters actual caravan theft only while present, supplied and sufficiently ready. Each protected crossing wears equipment and adds fatigue. The camp remains, and earlier protection never immunizes an unguarded return. Expiry, reserve limits, fire or low readiness trigger physical withdrawal; recall and field resupply preserve real people, supplies and the original duty deadline.

Optional versioned guard records and bounded caravan crossing markers preserve older jobs and validate restoration. Historical protection checks match stepped/offline travel. City reviews/cards expose costs, timing, limits and active protection; map inspection retains the unit's home management context. This delivers the first working defensive assignment. Garrison, broader escort arrangements and defense roles, advanced military/economy systems, family continuity and all remaining M0–M8 gates stay open. The primary living-world design records the exact contract.

Earlier delivery: live supply-chain tracing

City Supply chains traces resources through sources/refinement, warehouse stock and consumers using current catalog recipes, staff assignments and production blockers. Stock, bounded ready output, assigned recipe demand, resident/service demand and coverage without production/arrivals are separate. Proposed full-staff batches expose potential recipes and co-products without spending or creating capacity. Construction, research, physical books, kits and militia recruitment are one-time uses. Resource links, a balance list and navigation to the relevant controls make bottlenecks inspectable.

Real route cargo, reserved exchanges and rations remain outside local stock and production rates. Private settlement projection and neutral shared-development behavior are preserved; no save migration is needed. Refresh retains selections/disclosures/focus, and the same graph becomes ordered lists on narrow screens. The initial inspectable M3 network is delivered; multi-recipe planning, measured flow history, alternative industrial recipes, broader markets, contracts, transport capacity and remaining M0–M8 gates stay open. See the primary living-world design for the exact contract.

Earlier delivery: funded district building plans

City District plans supplies three editable templates for two to six local building orders, with exact plots/orientations, earlier dependencies and reviewed resource ceilings. Active Construction planning and Public accounting schedule eligible orders through authoritative construction checks, actual payment/support and finite crews. Independent steps can use both crews; dependent or blocked steps wait for real prerequisites. Authorization reserves no stock or land. Local work and daily checks retry eligibility at historical simulation times.

Plan pause/cancel affects future orders while paid jobs retain their ordinary controls. Failed construction requires a reviewed retry; refunds do not reset the plan's committed spending. Reviewed remaining funding preserves prior costs. A version-one ledger migrates older saves neutrally and validates rights, dependencies, attempts, actual jobs/structures and totals. UI drafts survive rejection; the editor/card expose blockers, costs, status and recovery without automatically staffing buildings or granting residents.

Initial local district templates, construction ceilings and dependency scheduling now operate. Broader district specialization/operations, cross-settlement budgets, wider governor powers, fuller family continuity and remaining M0–M8 gates stay open. The full goal remains active; the primary living-world design records the contract.

Earlier delivery: build eligibility filters and actionable requirements

City Buildings now filters by the five requested eligibility categories, with counts, family intersection and an empty-result reset. Structured requirements come from the same authoritative checks as construction acceptance. Each unavailable building exposes all current blockers and remedies, separating missing stock from food reserves/budgets, technology, local institutions, terrain, footprint conflicts and rights. No-plot reads still explain local prerequisites; outside land and unknown resources remain private. Ready means the order can be accepted, with finite crew queues still applying.

Keyboard filters, expanded details and focus survive refreshes. Blocked map previews remain available without spending; only a fresh valid quote enables confirmation. This completes the explicit M1 catalog-filter requirement. Broader services, wider district operations, remaining recovery controls and all other M0–M8 gates remain open. No save migration or new gameplay resources were added; living-world design records the contract.

Earlier delivery: independent regional supplies and parallel carrying teams

Each retained outpost now has its own funded food mandate, schedule, target, spending ceiling, history and targeted pause. One real two-worker carrying team per destination permits simultaneous journeys when home workers and stock suffice. Due checks prioritize fewer food days, then the least recent retained dispatch. Routine travel is waiting; actionable blockers appear in City priorities by camp. Destination-scoped inputs, reviews and focus survive refreshes without editing the other instruction. Version-one ledgers migrate to destination-keyed version two with all prior commitments, pause state and live journeys intact.

A command-only preparation and absence scenario keeps three settlements and forty original residents healthy for 24 village days (96 real hours), with multiple paid deliveries to both camps, conserved food and equivalent bounded offline replay. This advances M7's exception-management requirement; it does not establish indefinite self-sufficiency or finish broader district operations, governor powers, specialization, broader crisis recovery or family continuity. Full M0–M8 scope remains active; living-world design records the precise contract.

Earlier delivery: Land registry and a second owned outpost

Land registry, the sixteenth working topic, enables a paid registry office and separate registrar/clerk staffing. Active services permit a second retained outpost within twenty-four walking hexes. Current surveys, charters, real founders, supplies and all existing ownership/reserve/health checks still apply. Losing services prevents further expansion while preserving existing titles and funded journeys. Evacuated sites count; outposts cannot sponsor nested expansion. City reviews and administration cards expose capacity, blockers and costs, and both outposts have separate live management screens.

The command-only journey creates and supplies three owned settlements with the original forty residents and one starting grant. The catalog now has twenty-seven definitions; the refuge delivery above completes the initial eighteen-topic count. The regional-supply extension above now gives each camp one actual team and one independently funded mandate. Wider transport/delegation and M7's sustainable three-settlement management gate remain open. The full M0–M8 goal is active; living-world design records the current contract.

Earlier delivery: Care institutions and community treatment

The fifteenth working topic enables paid care halls and an explicitly chosen secular or faith-supported treatment policy. Both choices use the same welfare rules. Actual hall staff, a coordinator, meals above food reserves, firewood and spare water limit daily treatment of workers unavailable through illness. Healthy-day recovery improves in proportion to treated patients; unmet basic needs block treatment. Full-day readiness, no stored-up treatments, separate staffing controls and a versioned consumption ledger preserve resources and people.

People reviews policy and patient limits and shows readiness, blockers, capacity, previous treatment and cumulative consumption. Forecasts include estimated extra meals. This checkpoint introduced the twenty-fifth building; Land registry raised the catalog to twenty-six; the refuge above now brings it to twenty-seven and completes the initial eighteen-topic count. Broader M0–M8 gates remain open. This is a first working care institution, not complete medicine, dependent care, religion or civic policy.

Earlier delivery: funded recurring outpost food supply

An owner can authorize active Public accounting and Record keeping to check an established owned outpost daily and dispatch real two-person food deliveries within reviewed stock targets, shipment limits and a cumulative cargo-plus-provisions ceiling. Existing workers, storage, safe routes, food reserves and manual trips constrain every dispatch. Pausing stops new commitments while preserving travelling people and goods. Returns do not refill authorization. City exposes blockers, exact past spending, next check, decision history and reviewed pause/resume/limit changes.

The new versioned ledger migrates older saves neutrally; chronological checks produce the same paid journeys offline and day by day. This is the first bounded delegation rule supporting M6/M7. It does not grant governor office, arbitrary remote authority, taxes or the remaining initial research topics. Broader recurring cargo/exchanges, district administration, three-settlement management and family continuity remain required by the full M0–M8 objective.

Earlier delivery: live construction footprint preview

City Buildings now previews rotated canonical footprints directly on the regional map, including rejected choices. The panel supports map taps or keyboard plot selection, six orientations, individual blocked-cell explanations and no-spend cancellation. It pins the selected settlement, prevents outside-region review, and uses the same spatial checks as paid construction. Ready, blocked and otherwise unavailable footprints have distinct outlines and textual explanations. Existing world/target revisions protect confirmation; accepted construction clears the temporary ghost and survives reload.

Touch selection, retained disclosures and narrow layouts are verified, with the complete footprint above the controls at 320px. This closes the M1 map-preview gap; inner-hex plots, broader services, wider district operations and remaining recovery controls are still open. No save migration or simulation resource grant was introduced. The full M0–M8 goal remains active; see living-world design for the current contract.

Earlier delivery: field logistics and physical patrol resupply

Field logistics adds the third initial army topic and raises the total to fourteen of eighteen. A supplied quartermaster and operational storehouse can dispatch two civilian carriers with actual food to the militia's current field hex. The militia holds for the rendezvous, accepts food within its four-day capacity and resumes its previous order; excess cargo returns physically. Either group's recall releases the rendezvous, and fire, low food and full home storage preserve recoverable state. Daily food accounting covers soldiers/carriers once, with a validated custody ledger across save/reload.

Defense reviews, worker counts, Orders and a separate map marker expose the journey. Forward depots, advanced equipment delivery, field reinforcements, fort garrisons/broader escort contracts, wages and broader campaigns remain open. The initial eighteen-topic count is now complete; broader politics/religion systems and remaining M0–M8 gates stay open. See the primary living-world design for exact rules and boundaries.

Earlier delivery: schools and physical manuscript diffusion

Literacy and Scholarship complete three initial culture choices, raising research to thirteen of eighteen topics. Literacy enables a paid staffed school and study of actual manuscripts. Scholarship permits paid two-day copying into physical stock. Books travel through existing outpost supply routes; a recipient studies them with teachers, supplies, time and prerequisites before learning, and must adopt separately with the relevant local institution. Copying, study and research share one public project slot. Full storage, recall, interruption, whole-item quantities, unused-input refunds and versioned restoration preserve materials and people.

The command-only acceptance path copies Joinery at home, founds and supplies a school at an outpost, delivers the book physically, teaches it there without local production practice, and rejects adoption while no lumbermill exists. City reviews expose costs, stock, prerequisites, institutions, blockers and project type. Named specialist training, larger institutions, outside-owner exchanges/licensing and later administration/realm systems remain open. The full M0–M8 goal stays active; the primary living-world design records exact current rules.

Earlier delivery: timber framing and construction planning

Two new functional building topics bring research to eleven of eighteen. Timber framing enables eight-place houses with real material/worker costs, higher fire exposure and paid recovery. Construction planning assigns a supplied foreman to permit a second four-person building/land crew. Losing capability returns affected work to the queue without losing paid progress or charging idle time. Completed shelter remains; no free residents, workers or knowledge are granted. City reviews, worker slots, construction requirements and specific queue reasons expose the choices. Full rules are in the primary living-world design.

The building and agriculture branches have three initial nodes each. The later education delivery also brings culture to three; Field logistics brings army to three, and politics and religion now also have three. Specialist training, broader institutions and later administration/realm progression remain in scope. The full M0–M8 goal is active.

Earlier delivery: integrated journey and outpost reoccupation

The complete first village → production bottleneck → patrol → reclaimed/irrigated land → supplied outpost journey passes in one deterministic world using actual player commands, with no direct stock, terrain or population edits. Intermediate restoration and finite labor/material checks cover interactions between the systems. See the walkthrough and verification limits.

Home City now reviews and dispatches eight existing residents/six workers to reoccupy its evacuated outpost. Actual cargo supports immediate reuse of an intact camp or two-day repair/rebuilding by the returning settlers, with no pre-existing outpost labor required. Original rights, buildings and retained goods persist. Physical recall, changed-storage return, local-order exclusion, save validation and a fresh household day prevent duplicate grants, races and retroactive consumption. Supply carriers can collect retained timber/logs from an evacuated site before reoccupation. The full M0–M8 goal remains active.

Earlier delivery: founders, supplied outposts and evacuation

City Frontier & charters dispatches eight existing residents/six workers with paid cargo, consumes the conditional charter and holds its parcel through actual walking and two-day camp assembly. Completion activates a validated owned region and paid camp with eight shelter places, twelve water capacity and 400 storage; no new founding grant or population appears. Its real woodland can be harvested, and a two-worker carrying team can repeatedly deliver food/tools/materials and collect reserved logs. Both legs move physically; fire, low provisions, recall and full storage retain recoverable state. Separate City views expose home and outpost stocks/needs. Evacuation transfers all residents home once and preserves site investments and remaining goods.

The first supplied-outpost loop is playable. M6 remains partial: up to two woodland outposts per home through Land registry, including evacuated sites; broader tenure/resources, recurring cargo exchanges beyond the food mandate delivered above, region administration and later charter development remain open. Reoccupation and the integrated one-world command-level acceptance journey are delivered above. Detailed rules and limits are in the primary living-world design.

Earlier delivery: physical frontier surveys and conditional charters

City Frontier & charters sends two actual village workers on a provisioned walking survey of an explicitly released frontier parcel. Reports return physically; fire, recall, food shortages and full home storage preserve recoverable travel state. A returned current report and operating record keeper can register one exclusive conditional charter for fourteen village days. Competing founding and charters respect it; release/expiry free the parcel. No settlers, buildings, resources or mutable territory are granted. Workers, Orders and the owner's map marker expose the trip. Existing saves gain neutral versioned expansion state.

This checkpoint introduced survey travel, returned suitability/tenure evidence and conditional rights. The later delivery above adds founder expeditions, zone activation, woodland camps, repeated goods exchange and evacuation. Wider NPC rights, mineral opportunities and administration remain open. Detailed rules are in the primary living-world design.

Earlier delivery: staged soil improvement and finite irrigation

City Land & water adds surveys, crafted compost, three-stage soil preparation and irrigation, fallow, wear/maintenance and retirement. Work shares finite crews, reserves actual materials and supports pause/resume/cancellation. Completed patches change effective building/crop suitability without modifying generated terrain; existing food plots suspend harvest during work. Irrigation reserves eight units per plot from the existing well, gives households priority and stops when source/service/condition fails. Garden vegetables provide a concrete moisture-dependent crop benefit. Completed soil and channel state appears on the regional map.

Crop rotation and Irrigation raise research to nine of eighteen topics. M5 remains partial: broad terrain/water systems and later military roles remain open. The separate Terraforming planner remains a sample. The later supplied-outpost delivery above adds the remaining initial journey component; combined command-level acceptance is now verified above. Exact costs, eligibility, upkeep, persistence and boundaries are in the primary living-world design.

Earlier delivery: militia equipment, residents and supplied patrols

City Defense & patrol connects physical iron imports and timber to crafted kits, researched/adopted Drill, two-day training and one two/four/six-person force. Recruitment transfers actual residents out of civilian capacity. Provisions, adjacent-hex movement, fire interruption, exhaustion and recall are real. A reviewed scouting survey opens a finite PvE camp that raids caravan rations; successful patrol clearance prevents its subsequent raids. Wounds require home recovery, refitting uses supplies/time, and demobilization restores people plus disclosed usable equipment, subject to storage. The regional map marks the owner's unit at its current cell.

Versioned mobilization, funded batches and units preserve old saves and validate restoration. This checkpoint introduced the seventh research topic; later land/building/education additions bring the current count to eighteen with Regional institutions and Sacred and civic architecture. Food rendezvous are delivered above; M5 is partial, with advanced units, fort garrisons, broader escort/defend, wages, mortality, advanced equipment/ammunition and field reinforcement still open. The older standalone Military destination remains a labeled rehearsal. See the primary living-world design for exact rules and boundaries.

Earlier delivery: community research and local adoption

City Research & adoption supports six first topics, one per branch: joinery, seed selection, record keeping, public accounting, organized charity and scouting. One public experiment reserves supplies and two workers, requires practice and an operating institution, advances on full village days, pauses safely and refunds unused supplies on cancellation when storage permits. Knowledge persists separately from paid local adoption and operating specialists. Real effects are discounted timber construction, moisture-sensitive crop choices, daily records, enforced timber budgets, supplied mutual aid and physical caravan detours around fire.

The versioned knowledge ledger is additive for existing charters; no past practice is invented. Research, specialists, workplaces, crews, foragers and carriers share finite residents. Institution loss/illness interrupts research and services without forgetting learned knowledge. Selected crops stop while their seed service is unavailable and cannot bank missed harvests. Reviews use the existing durable owner/revision-checked command path.

This earlier delivery introduced six topics; subsequent army, agriculture, building and education additions raise the current total to eighteen with Regional institutions and Sacred and civic architecture. M4 remains partial, with specialist training, larger institutions, wider diffusion/licensing and more advanced adoption choices open. Schools and physical copying/shipment/study are delivered above. Detailed current rules are in the primary living-world design.

Earlier delivery: frontier transport and finite barter

Chartered villages can dispatch one two-worker caravan, carrying at most 60 weight including rations, over a surveyed walking route. Live Trade & transport reviews timber/log exports for tools/iron/bricks or food delivery to the actual migration waystation. Exports leave stock once, imports are reserved from a finite depot, exchange occurs on arrival and imports reach village stock only on return. Carrier assignments reduce the available workforce and actual travel consumption is reconciled with household food demand.

Fire delays movement; ration shortages affect daily needs. Outward recall releases the market reservation but returns exports physically. Full storage retains goods with the team until room exists. Versioned cargo/route state survives restart; bounded chronological replay handles offline delivery without duplicated stock. The depot began as a finite barter bootstrap; the bounded funded coin market is now delivered above, while automatic regional production remains open. Road/vehicle upgrades, arbitrary settlement contracts, perishable cargo and legacy haulage/trade-goods migration remain outstanding.

Earlier delivery: needs, illness and household migration

City People exposes worker/dependent totals, food/water/shelter coverage, health, illness, admission blockers, real household journeys and forced labor changes. Daily unmet needs reduce health and available workers; recovery restores capacity. Work crews queue and staffing is released in a defined order so shrinking capacity cannot duplicate labor. Persistent explanations identify released assignments.

Spare housing now supports migration after sustained needs, water, lasting food output, health and reserves qualify. A finite frontier waystation supplies actual households and outward/return rations; surveyed walkable routes take at least two village days. Arrivals recheck admission; rejected households return. Prolonged hardship can cause provisioned emigration. Residents/workers transfer exactly once between source, journey and village, including offline/reload. Versioned ledgers migrate older charter saves additively and validate persisted populations/routes. Legacy shared scenarios retain their population shortcuts. Named household aging and natural/illness deaths are now delivered above. Births, children, unnamed resident/NPC lifecycles, security/advanced services and transition of legacy populations remain open. Caravan relief now replenishes source provisions.

Earlier delivery: cancellation, reserves and first-food recovery

City can cancel queued/paused charter crew work using a durable payment ledger. Unused material refunds scale with recorded active work; support returns only before the first start. The review discloses lost inputs and storage overflow, which needs explicit acceptance. Construction cancellation clears the footprint without extra salvage; rebuilding returns to its original ruin; repair cancellation preserves current damage. Older crew jobs without payment records disclose zero verified refund. Repeated commands/reloads cannot duplicate refunds.

Overview/Workers manage 0–30 food-reserve days and up to 12 resident foragers. The reserve protects new optional project spending; residents, fire response and food-building recovery are exempt. Foragers need no food payment, share finite labor and require a full village day after assignment changes. Eligible woodland provides finite wild-food capacity and daily regrowth; gathering feeds unmet household demand before storing surplus. Clearing/building reduces habitat. The zero-food/ruined-field test now recovers through gathering, rebuilding and restored staffing. Loss of all infrastructure/materials still needs work; basic health effects and migration were added above.

State v3 migrates older villages additively with survivalVersion: 1, no initial forage assignment, and unchanged inventory/day cursor. New orders record payment version 1; historical payments are not inferred.

Earlier delivery: finite crews, queues and pause/resume

New charter orders use the same pool as staffed buildings: one building crew of four residents, and two residents per forestry crew. A per-village FIFO queue waits for the full crew and building slot; pausing the head permits later work. Materials/support are spent on acceptance. Pausing retains footprints, spending and remaining phases; resuming returns work to the queue. City Orders and the overlay expose controls/status, construction review explains waiting time, and Workers separates workplace/crew/free labor.

Crew allocation survives reload, respects ownership/job revisions and replays chronologically offline. Production in a building undergoing work is suspended until work ends. Existing v3 jobs without crewVersion: 1 retain their previously accepted timers without a retroactive labor charge. Shared development scenarios retain existing behavior. A researched second building crew, cancellation and foraging labor are delivered above; broader services and wider district operations remain unfinished; map footprint previews are delivered above.

Earlier delivery: founding, charter authority and village food/storage

City → Founding & charter offers three available woodland-edge sites from a bounded, deterministically surveyed frontier. Each site has seven adjacent usable hexes, at least three field hexes and two woodland hexes, no pre-existing generated feature, and a moist central field suitable for a surveyed shallow well. The current seed supplies seven nonoverlapping candidate charters in this first frontier. This is a bounded first founding area, not unlimited world settlement or a navigable trade network.

Reservation is durable and excludes other players for ten real minutes. Founding consumes one permanent, versioned grant per persistent player identity; receipt eviction, reload and losing assets cannot repeat it. The grant establishes 40 residents, 24 workers, 720 food, 260 timber, 40 logs, 8 tools, and three operational buildings: village commons, community food plot and lumbermill. The commons supplies 40 housing places and 1,400 aggregate stock units. The food plot starts with eight workers and the mill with two; 14 workers remain available.

Founded villages have owner-checked land and structure commands. Other players receive public village identity but no private inventory/economy, cannot open its management projection, and cannot mutate it. Existing Greywood and Tidebreak remain shared development scenarios so old investments and behavior are preserved. Rights attach to the persisted player identity used by the current session-token system; external account authentication remains later work. Consented public production offices and bounded invited resident starts are now delivered above with separately scoped authority.

Village production and resident food consumption use four-real-hour world days. Every resident consumes one food per day; a fully staffed community plot can produce 44 food against the starting 40 demand. Recipe inputs and outputs scale with staffing. New houses increase housing capacity but do not grant workers in chartered villages. Storage is finite: processing waits for sufficient net space; new selective harvests reserve their quoted output, and new woodland clearing reserves its logs only when the complete batch fits. Capacity loss queues those storage-backed jobs before felling; a clearing order reviewed without room records uncollected logs instead. Salvage and older forestry jobs can still discard and record overflow. The commons and new storehouses provide capacity only while operational. UI shows food demand, potential harvest, reserves without future production, storage, housing and shortage causes.

Offline days and scheduled lifecycle work are ordered chronologically, with at most 64 village days per advancement pass and a resumable catch-up cursor. The same time cannot consume twice. Orders wait while their village catches up. Owned woodland uses the village's slower day length for regrowth, and a forester helps only its own settlement.

State/manifest version 3 migrates v1/v2 development saves additively and validates the unchanged seed, generator, checksum and baseline regions. Dynamic charter footprints are durable state validated against canonical geography and stable axial charter IDs; they are not a modification to the base world manifest. New living-world commits retain the acting player's identity in the same durable record so event-log recovery cannot orphan a newly founded village.

Remaining boundaries: population age/lifecycle and broader advanced services remain incomplete; legacy shared populations need an explicit transition; loss of all infrastructure/materials needs broader recovery rules; well suitability is surveyed data, not a hydrology simulation. Crews, reserves, first-food recovery, illness and migration are delivered above. The goal and M0–M2 gates remain incomplete.

Earlier delivery: authoritative City management

• The main City navigation and /?screen=city open live management for Greywood or Tidebreak. The map-side settlement overlay and overview show actual population, available labor, stocks, projects and production blockers.
• City tabs cover Overview, Buildings, Workers, Production and Orders. Select a canonical plot and orientation, inspect all 18 current server definitions, review terrain/footprint/prerequisite/material eligibility, and confirm construction through the existing durable command path.
• Construction previews and acceptance share ZoneEngine.constructionPlan; a preview never changes vegetation, renewable stocks, inventory, jobs or receipts. Confirmation checks both target and quoted world revisions, then revalidates current eligibility. The review shows input spending, automatic tools/haulage support and estimated work duration.
• Workers can be assigned and released from the same settlement pool. Production displays actual recipes, staffing, condition and missing inputs. Current prototype rates are disclosed: at least one worker enables a recipe; extra assigned staff do not yet multiply its throughput.
• Jobs distinguish the next stage time from estimated completion. Accepted construction persists through reload and appears in other connected clients. There is no new cancellation promise: active construction still cannot be cancelled; existing completed-building demolition/salvage remains in the map controls.
• A bounded, read-only world-city-request returns one development settlement and its regional build options, serialized after pending commits. Other clients' uncommitted state cannot leak through this read. Command-status requests return only the submitting actor's retained receipt.
• Lost command acknowledgments are kept in session storage with their world/player/session binding and checked only after reconnect to that same world/player; they are not automatically resubmitted. Unavailable/expired receipts remain explicitly unknown, with a path to inspect the city. Existing receipt retention is bounded at 256 and is not a permanent command-history ledger.
• Sample management screens no longer overwrite live resource counters. Sample orders are labeled, static fictional dates are replaced by the configured development clock, and missing food-runway/treasury/migration systems are identified as unavailable.

No geography, art, inventory or population migration is applied by this slice. Existing saves retain their economy behavior. New command receipts gain an optional actor ID; legacy receipts continue to load but cannot be represented as verified actor-scoped status results.

Milestone ledger

Evidence

Latest household-relocation verification: 310 passing focused tests, followed by six passing relocation cases after return-state validation. Actual transported materials, house building, cohort travel and subsequent work precede the assertions. Explicit interruption boundaries cover changed housing/storage, fire and succession. Browser and real restart checks preserve actual movement, food and both community populations; no broader local-charter upgrade is claimed.

Latest guide/briefing verification: 304 passing tests in the full focused run, plus a final 29-test briefing/outpost/city run. Edge verifies real navigation, unchanged read state until explicit marking, gap disclosure, reload and 320–1440px layouts. An actual restart preserves cursor, retained events, guide evidence, stock and troops. The ledger is selected and bounded, not a complete transaction archive.

Latest watchtower verification is recorded above: full 297-test run plus a seven-case focused rerun with one additional scenario, 298 distinct passing checks; real browser and server-restart checks include paid detours and the returning garrison ledger. Larger-fort combat is not claimed.

Latest moving-escort verification: 291 tests pass. Seven cases in test/escorts.test.js cover actual both-leg protection and camp persistence, physical independent/joint recall, weak-force vulnerability, fire and reserve withdrawal, actual scout detours/co-location, full-depot/full-home-store retention, authority/home-departure/receipts and invalid persistence, offline equivalence and a declared illness-death boundary preserving defensive work. Edge verifies review/cancel/assignment, actual food, paired position/reload, map focus and independent recall at 320–1440px without exceptions/overflow; narrow views were inspected. Actual server restart preserves paired routes, escort link, both food stocks and trade cargo/escrow exactly. Protection for other routes/players, fort garrisons and broader campaign logistics is not claimed.

Latest reinforcement verification: 284 tests pass. Six cases in test/reinforcement.test.js execute actual kit-funded wounded-veteran recruitment, two training days and later deployment; six-member growth and conserved demobilization; cancellation with an explicit full-store atomic-rejection boundary; instructor/commons interruption and paid repair, explicit food shortage and offline equivalence; authority/health/quantity/stock/receipts, old units and corrupted cohorts; an explicitly prepared critical-illness succession boundary with retained paid training. Edge checks reviewed cancellation/funding, actual worker/kit transfers, no premature healing or completion, reload and partial-training cancellation at 320–1440px without exceptions/overflow. Narrow views were inspected. An actual server restart preserves pending recruits, progress/time, veteran readiness, kits and population ledgers exactly. Field reinforcement is not claimed.

Latest field-equipment verification: 278 tests pass. Five actual crafting/delivery scenarios in test/field-equipment.test.js cover physical repair and surplus return, recalls, fractional/full storage, unchanged troop readiness and guard deadlines, authority/stock/quantity/receipts, version-one food journey preservation and corrupt version-two custody, fire and offline equivalence. Isolated Edge verifies reviewed/cancelled spending, paid gear without remote repair, reload, actual delivered/returning kits and 320–1440px layouts without exceptions/overflow; narrow views were inspected. Real server restart preserves cargo/food/route, unit condition/rendezvous, home stock and guard deadline exactly. Advanced equipment/ammunition, reinforcements and wider campaigns are not claimed.

Latest reclamation verification: 273 tests pass. Five scenarios in test/reclamation.test.js cover an actual mine-to-reclamation-to-food transition without stock/terrain grants; physical supplies, paid demolition/salvage and research; partial-work refunds, fire/service interruption and offline equivalence; authority/receipts, malformed provenance and explicit live-seam rejection; soil wear/fallow/retirement, unchanged depleted ore and preservation of an older accepted building. Isolated Edge checks reviewed cost/cancellation, actual funded work/reload, exhausted/completed status and 320–1440px layouts with no exceptions/overflow. Narrow views were inspected. Actual server restart preserves paid job/stage/crew/time, spent supplies, survey and mineral exhaustion exactly. Deep/steep reclamation and broader ecology are not claimed.

Latest funded-market verification: 268 tests pass. Seven market tests cover actual sale-to-purchase progression, real returns/refunds, full-storage payment, finite funding competition, private authority, old-save migration and corrupt contracts, receipt replay/fire/offline equivalence, and actual illness death with continued communal trade. The added catalog case checks price, goods, carrying weight and excluded food-sale contracts. Headless Edge verifies earned treasury/reviews/cancellation/purchase reservations/reload and 320–1440px layouts; narrow views were inspected. Actual server restart preserves communal/NPC funds, held coins, import escrow, route and goods exactly. No claim of automatic restocking, wider financial systems or long-term balance is made.

Latest mineral-outpost verification: 260 tests pass in the full focused suite. Six test/mineral-outposts.test.js cases cover deterministic non-overlapping releases without changed founding parcels, no exact resource report before the survey returns, paid resident/cargo transfers, actual mining and home charcoal/smithy refinement, complete 210-unit exhaustion and daily/offline equivalence, explicit final-batch/storage boundaries, corrupted/missing provenance, and recall/reoccupation without replenishment. One added governor case verifies ore weight, escrow, physical return and cumulative allowances from a declared stock fixture. Isolated headless Edge checks returned report/map focus, charter cancellation, ore review cancellation, accepted collection reservation, no remote receipt, reload, deposit status and responsive 320–1440px layouts with no exceptions/overflow. Narrow views were visually inspected. An actual server restart preserves the paid ore journey, collection escrow, both inventories and seam depletion exactly. This does not claim other mineral types, universal terrain release or full regional logistics.

Latest catalog verification: 253 tests pass in the full focused suite below, with no failures or skips. The ten new test/catalog-validation.test.js scenarios cover catalog immutability and unchanged save restoration; unknown stock/capacity references; invalid work, workers, quantities and extraction; missing references; direct/indirect/cross-institution cycles and valid alternatives; unreachable recipe inputs and capped practice; starting food/workforce/housing/storage; footprints, stages, presentation and salvage; malformed content; and actual child-process startup rejection plus successful CLI reporting. The earlier 56-test focused run also passed. The executed npm run validate:gameplay reports all 27 current buildings, 18 technologies and 14 workshop recipes. Existing protocol/integration/save tests pass with startup validation enabled. No UI changed in this delivery, so no new browser/layout claim is made.

Latest personal-journey verification: 243 tests pass in the full focused suite. Six new test/personal-journeys.test.js cases cover exhausted-roster local choice, a real four-adult death history, population/stock conservation, contiguous walking, arrival gating, hunger/pause/resume/fire, offline equivalence, preserved funded work, protected named adults/travelling crews, authority/revisions, malformed routes and version-one career migration. Roster/workforce exhaustion is explicitly a boundary fixture, not a claim to have simulated the entire world's demographic history. Isolated headless Edge checks review/cancellation/name retention, resident loss without stock transfer, disabled distant work/trade, progress/pause/resume/reload/map focus and 320–1440px layouts without exceptions or overflow. Restarting the actual test server restores a paused record exactly, including route, location, stock and history; narrow views/reviews were inspected.

Latest career verification: 237 tests pass in the full focused suite. Eight test/careers.test.js scenarios cover actual four-adult death → playable personal work, no population/property grant, finite gathering/barter/tool wear, timed hunger/work, retained roles/escrow/refunds, authority/revisions/privacy, neutral migration and corrupt ledgers, oldest-waiting shared harvests, actual storage saturation/recovery, exhausted market stock and offline/idempotent replay. The final career/continuity/City/concept/map subset passes 48 tests after moving personal orders to account scope; these are reruns, not additional scenarios. Headless Edge against isolated career saves passes entry/name/review/cancel, actual earned stock, personal work/reload/cancel, local exchanges, paid craft refunds and 320–1440px layouts without exceptions/overflow. A final server restart checks work and resumption while viewing shared Greywood; narrow views/reviews were inspected. Broader no-roster fallback and inheritance remain unproven/open.

Latest continuity verification: 229 tests pass in the full focused gameplay suite. Seven new test/continuity.test.js cases cover existing-cohort annotation and migration, private projection, actual prolonged illness/death, distinct embodiment and council authority, stale/deceased identities, unchanged stock/rights/budgets, funded construction and research finishing during interregnum, offensive patrol withdrawal/defensive order preservation, accepted receipt replay, corruption rejection and offline equivalence. The final continuity/City/concept/map subset passes forty tests; a subsequent seven-case continuity rerun also verifies historical death event timestamps during offline replay. These are reruns, not additional scenario counts. Headless Edge in isolated continuity/death saves verifies appointment/cancel/reload, death chapters, unappointed adults, observer mode, lawful handover/cancel/reload, unchanged inventories and 320–1440px layouts with no exceptions or overflow. Final sidebar navigation and readable budget review also pass; narrow view/review were inspected. Broader no-heir/landless and inheritance gates remain open; these tests do not claim otherwise.

Latest refuge verification: 222 distinct passing scenarios. The full focused suite passed 221/222; its only failure was an expected 26-building count. Correcting that assertion to 27 and rerunning all eleven City projection cases passed. Seven new test/refuge.test.js cases cover paid research/building/staffing, readiness and consumables, equal public/faith effects, partial capacity, permanent-only migration, damaged/service failures, old-save and ledger checks, offline equivalence, commons-loss fallback and an actual arriving household's house-loss/refuge/rebuild journey. Headless Edge in isolated refuge saves passes reviewed policy/cancel, focus/drafts, no immediate stock/labor changes, preparation wait, closure/reload, paid history and supply tracing at 320–1440px without exceptions or overflow. Narrow controls and review were visually inspected. These counts are not additive with earlier evidence.

Latest governor verification: 215 tests passed in the full focused command below. Eight new test/governors.test.js scenarios verify actual institutions/research, physical paid delivery and collection, retained spending through recall/resource changes, worker floors, office loss, conflicts with food/manual orders, rights/revisions, save validation/migration, distance limits, routine target waiting, daily/offline equivalence and three-settlement competition. Headless Edge against isolated governor-v2 saves passes editing/rejection, review/cancel, focus/draft retention, unchanged immediate stock/labor, pause/reload and a paid team's physical recall at 320–1440px without exceptions or overflow. Narrow editor/review were inspected. Earlier counts below are historical.

Latest household-admission verification: 207 tests passed in the full focused command below. Three added regressions cover departure blocking/recovery, actual arrival rejection and conserved return provisions with restored/offline equivalence, and matching migration/economy food capacity across target/service/staffing changes. Headless Edge in .data-harvest-migration-qa verifies reviewed field pause/resume, visible People blockers, reload and unchanged immediate stock/labor at 320/390/640/1440px without exceptions or overflow. The narrow view was visually inspected.

Latest production-mandate verification: 204 tests passed in the full focused command below. Six new test/production-mandates.test.js cases exercise real tool consumption/resumed output, cumulative input ceilings, service failure, pause/continuous operation, recipe changes without spending reset, actual food forecasts, private authority/stale reviews, restoration/migration and stepped/offline equivalence. Headless Edge against .data-production-mandates-qa verifies rejected draft retention with unchanged stock, review/cancel/authorize, refresh/focus, routine target waiting, pause/reload/continuous and ten-batch estimates. All 320/390/640/1440px layouts pass without page exceptions or overflow; narrow controls/review were visually inspected. The six mandate cases also pass after tightening restoration checks for non-object allowances and batch maps. Earlier counts below are historical.

Latest recipe verification: 198 tests passed in the full focused command below. Six new test/production-recipes.test.js scenarios verify physical imported iron/local charcoal becoming tools, mined ore becoming iron without tools, partial staffing, missing inputs, refining at full storage, no instant spending/output or duplicated capacity, full-cycle switching, receipts, ownership/stale reviews, old-save defaults, corrupt choices and offline equivalence. Headless Edge against .data-recipes-qa verifies compare/review/cancel, keyboard confirmation, unchanged immediate stock/staff, timing, reload, refresh focus, single-assignment supply paths, navigation and stale confirmation, plus 320–1440px layouts with no exceptions/overflow. Narrow controls/review were inspected. Earlier counts below are historical.

Latest guard verification: 192 tests passed in the full focused command below. Six new military scenarios exercise actual research/import/crafting/recruitment, paid arrival/duty/return, guarded outward and unguarded return crossings, unchanged camp and population, exact food accounting, private authority, malformed guard/passage saves, resupply interruption at expiry, fire/reserve withdrawal and stepped/offline equivalence. The twenty military cases also pass after extending the guard scenario to verify successful resupply, conserved delivered/returned food and a second delivery interrupted at expiry. Isolated .data-guard-qa and .data-guard-post-qa browser checks cover reviewed/cancelled orders, keyboard confirmation, exact food spending, departure/reload/physical recall, active post/deadline, real resupply and linked recall, map markers and 320–1440px layouts. A real map-to-City context failure was corrected and the holding-post flow rerun successfully without page exceptions; narrow review, guard and map screenshots were inspected. Earlier counts below are historical.

Latest supply-network verification: 185 tests passed in the full focused suite, then an additional actual log-depletion scenario joined a passing six-test supply suite (186 distinct scenarios). A final node --test --test-concurrency=2 test/supply-chains.test.js test/city-projection.test.js run passed all 17 tests after the final demand calculation change. New cases cover staffing and household/carrier demand, finite logs becoming a real bottleneck through actual production, physical barter escrow/return, restoration, no-mutation/private rights, co-products/building/equipment/book dependencies and neutral legacy rules. Headless Edge in .data-supply-chain-qa, repeated against the final server, verifies live tracing, proposed recipes, kits/manuscripts, stock-versus-cargo, service demand, refresh selection/focus/disclosures, navigation, reload/no spending and 320–1440px layouts without exceptions/overflow. Desktop and narrow plan views were visually inspected. Earlier counts below are historical.

Latest district verification: 180 passing tests in the full focused gameplay suite; six new test/districts.test.js scenarios join the full focused gameplay suite. Command-only paths research/adopt the actual services, construct dependent buildings, allocate independent crews and clear real woodland before a blocked order can begin. Tests cover exact paid stock/support, no grant or automatic staffing, service/budget failure, job refund/retry, plan versus job pause/cancel, ownership/revisions, save validation/migration and historical offline equivalence. Headless Edge in .data-district-qa-v3 verifies template/step editing, overlap rejection preserving draft/stock, reviewed authorization/cancel, stale review/reopen, pause while paid work completes, reload/funding/resume, completion and 320–1440px layouts without exceptions/overflow. Final narrow editor, plan and review were inspected, with the name input verified at 44px.

Current full focused command:

node --test --test-concurrency=2 test/escorts.test.js test/reinforcement.test.js test/field-equipment.test.js test/reclamation.test.js test/coin-market.test.js test/mineral-outposts.test.js test/catalog-validation.test.js test/personal-journeys.test.js test/careers.test.js test/continuity.test.js test/refuge.test.js test/governors.test.js test/production-mandates.test.js test/production-recipes.test.js test/supply-chains.test.js test/districts.test.js test/registry.test.js test/care.test.js test/mandates.test.js test/education.test.js test/gameplay-journey.test.js test/outposts.test.js test/expansion.test.js test/land.test.js test/military.test.js test/population.test.js test/knowledge.test.js test/founding.test.js test/logistics.test.js test/city-projection.test.js test/living-world.test.js test/protocol.test.js test/integration.test.js test/gameplay-concepts.test.js test/three-scale-map.test.js test/map-touch.test.js

Latest catalog verification: 174 passing tests in the full focused gameplay suite. Three new test/city-projection.test.js cases verify simultaneous categorized requirements, no-plot reads, actual shortfalls versus protected reserves, essential-food exemption, prerequisite structures, rotated boundary rights and shared acceptance checks without mutation. Headless Edge in .data-catalog-filter-qa verifies all filter counts against server data, family intersection/empty reset, keyboard and refresh focus/detail retention, blocked preview/cancellation without spending and 320–1440px layouts. The narrow requirement card was inspected. Earlier counts below are historical.

Latest regional-supply verification: 171 passing tests in the full focused gameplay suite. test/registry.test.js adds a prepared 24-world-day three-settlement absence with actual woodland/mill preparation, both funded routes, four finite carriers, food conservation, unchanged population, no new hardship and bounded offline equivalence. Scarcity/priority/manual competition and targeted pause/authority are checked separately; test/mandates.test.js verifies version-one migration without resetting live commitments or paused state. Headless Edge in .data-regional-supply-qa verifies separate drafts/reviews, targeted ceiling changes and pause, two actual journeys, reload, server-refresh focus retention, routine-wait filtering and 320–1440px layouts. The narrow panel and review were inspected. Counts below are historical.

Latest registry verification: 168 passing tests in the full focused gameplay suite, adding test/registry.test.js to the care/mandate command below. Three command-based cases cover actual research, trade, office construction/staffing, second-site survey/founding and deliveries to both camps, conservation, lost administration, retained title, distance bounds, authority and restoration. Headless Edge against .data-registry-qa verifies sixteen topics, two outpost screens, staffing loss/recovery, preserved rights, reload and 320–1440px layouts without page exceptions/overflow; the narrow administration panel was inspected. Sustainable regional management remains an outstanding acceptance gate.

Latest care verification: 165 passing tests in the full focused gameplay suite, including test/care.test.js and test/mandates.test.js alongside the command below. Six care scenarios cover real illness/recovery, finite meals/firewood/water and workers, equivalent secular/faith policies, full-day readiness, service loss, no duplicate treatment, authority/revisions, neutral migration, ledger validation and daily/offline equivalence. The command-only hardship/recovery case changes no stock, health or population directly. Headless Edge against .data-care-qa verifies actual treatment records, reviewed choices/limits, cancellation, no immediate spending, stop preserving assignments, reload and 320–1440px layouts; narrow panel/review and the hall's map location were inspected. That checkpoint reached fifteen of eighteen topics and twenty-five definitions; Land registry above supersedes those counts.

Latest supply-mandate verification: 159 passing tests, adding test/mandates.test.js to the full focused gameplay command below. Five cases cover actual funding/travel, finite authorization, pause/recall and manual competition, service loss, owner/revision checks, validation/migration, offline equivalence and no-spend reserve/storage/fire exceptions. Headless Edge against .data-mandates-qa verifies reviewed changes and cancellation, pause/resume with an actual team in flight, no immediate spending, draft retention, reload/history and 320–1440px layouts. The narrow panel and review were visually inspected. Research has since reached sixteen topics; earlier test counts below are historical.

Latest placement verification: 154 passing tests with the focused command below. Three new projection cases cover six rotations, immutable rejected previews, individual blockers, boundary privacy, matching accepted footprints and steward authority. Headless Edge against .data-building-placement-qa verifies real map ghosts, no-spend preview/review cancellation, exact paid house construction, reload, genuine touch selection, pinned outside-region blocking, open-disclosure retention and disabled stale confirmation after a separate policy command. Final desktop/640/390/320px checks have visible controls and no exceptions or overflow; the 320px full-footprint view was visually inspected. Earlier counts below are historical.

Latest field-logistics verification: 151 passing tests in the full focused command: node --test --test-concurrency=2 test/education.test.js test/gameplay-journey.test.js test/outposts.test.js test/expansion.test.js test/land.test.js test/military.test.js test/population.test.js test/knowledge.test.js test/founding.test.js test/logistics.test.js test/city-projection.test.js test/living-world.test.js test/protocol.test.js test/integration.test.js test/gameplay-concepts.test.js test/three-scale-map.test.js test/map-touch.test.js. Five new military cases cover actual depot/research/labor, rendezvous/delivery and capacity, recall, rights/reserves, custody/route/link validation, continued funded work, fire/ration exhaustion, full-storage carriers, restoration and offline equivalence. Headless Edge against .data-field-logistics-qa verifies reviewed resupply/cancel, food commitment, workers, hold/reload, map marker, recall and 320–1440px without exceptions/overflow. A case-insensitive final recall-state recheck corrected a QA assertion about lowercase phase labels. Mobile and map screenshots were inspected. Earlier evidence is historical.

Latest education verification: 146 passing tests in the full focused gameplay command below with test/education.test.js added. Five education cases verify real institutions and copied output, funded slots/labor, study prerequisites and separate adoption, book consumption/refunds, full-storage retention, indivisible items, malformed ledgers, neutral migration, interruption/reload and daily/offline equivalence. The command-only home/outpost scenario proves physical copying, delivery and recall/escrow conservation before actual study; no test stock/terrain/population edits are used in that scenario. The catalog now has 24 definitions with semantic recipes. Headless Edge against .data-education-qa verifies copy/study reviews, cancellation and exact refunds, pause/reload/resume, stock and delivery options, with no exceptions or overflow at 320/390/640/1440px. Mobile study review and manuscript panel were inspected. Earlier counts below are historical.

Latest building-branch verification: 141 passing tests with node --test --test-concurrency=2 test/gameplay-journey.test.js test/outposts.test.js test/expansion.test.js test/land.test.js test/military.test.js test/population.test.js test/knowledge.test.js test/founding.test.js test/logistics.test.js test/city-projection.test.js test/living-world.test.js test/protocol.test.js test/integration.test.js test/gameplay-concepts.test.js test/three-scale-map.test.js test/map-touch.test.js. Three added cases exercise learned-versus-adopted framing, interrupted work/refund timing, actual housing without population creation, fire damage/repair/rebuild, two crews, cross-branch prerequisites, foreman/institution/supply loss, slot recovery, restoration and daily/offline equivalence. The 23-definition catalog has matching semantic recipes. Headless Edge against .data-framing-qa-2 verifies reviews/cancel, adoption, two concurrent building jobs, suspension/queue/reload/resumption and completed housing 52 with population 40. No page exceptions or overflow at 320/390/640/1440px; narrow research presentation was visually inspected. Previous evidence below is historical.

Latest integrated/reoccupation verification: 137 passing tests in the full focused run, using the previous outpost command below with test/gameplay-journey.test.js added. A subsequent node --test test/outposts.test.js run passed all twelve cases, including one additional changed-storage case: 138 distinct passing scenarios. The integrated scenario uses player commands and controlled time only; construction is accelerated while the four-hour village day remains unchanged. Reoccupation cases cover intact and dismantled camps, actual empty-site delivery/collection, conserved people/materials/property, recall, rights, local mutation exclusion, household timing, changed-storage return and offline/save equivalence. Headless Edge against isolated .data-reoccupation-qa verifies review/cancel/confirm, reload, map markers, recall and retained-stock collection at 320/390/640/1440px without exceptions/overflow. Mobile and map captures were visually inspected. Script syntax and git diff --check pass. Results below are historical, not additional scenarios.

Latest outpost verification: 133 tests pass with node --test --test-concurrency=2 test/outposts.test.js test/expansion.test.js test/land.test.js test/military.test.js test/population.test.js test/knowledge.test.js test/founding.test.js test/logistics.test.js test/city-projection.test.js test/living-world.test.js test/protocol.test.js test/integration.test.js test/gameplay-concepts.test.js test/three-scale-map.test.js test/map-touch.test.js. Eight outpost scenarios exercise resident/worker and material conservation, phased activation, private authority, actual harvest/exchange, recall and spent kits, full-storage escrow, evacuation, offline and mid-exchange restart, duplicate receipts and invalid-save rejection. The building catalog now has 22 definitions including the paid expedition camp; catalog and gateway expectations are updated. Headless Edge on .data-outposts-qa, seeded through actual commands, verifies founder dispatch/reload/recall, supply reviews/recall, separate City management, evacuation, journey markers and 320–1440px without page exceptions or horizontal overflow. Mobile and regional map views were inspected. Counts below are historical.

Latest expansion verification: 125 passing tests with node --test --test-concurrency=2 test/expansion.test.js test/land.test.js test/military.test.js test/population.test.js test/knowledge.test.js test/founding.test.js test/logistics.test.js test/city-projection.test.js test/living-world.test.js test/protocol.test.js test/integration.test.js test/gameplay-concepts.test.js test/three-scale-map.test.js test/map-touch.test.js. Nine new expansion scenarios cover physical movement, finite labor/food, delayed report delivery, charter prerequisites/exclusivity/expiry, founding competition, recall/fire/full storage, private rights/stale reviews, replay/idempotency and old-save migration. Twelve map/navigation tests pass again after the marker addition; counts are not additive. Headless Edge in .data-expansion-qa verifies reviewed charter registration/release, survey dispatch, stock/population effects, reload, recall, marker display and 320–1440px layouts without exceptions/overflow. Mobile and map screenshots were visually inspected. Earlier results below are historical.

Latest land verification: 116 passing tests with node --test --test-concurrency=2 test/land.test.js test/military.test.js test/population.test.js test/knowledge.test.js test/founding.test.js test/logistics.test.js test/city-projection.test.js test/living-world.test.js test/protocol.test.js test/integration.test.js test/gameplay-concepts.test.js test/three-scale-map.test.js test/map-touch.test.js. Ten land cases cover the full compost/soil/building chain, phased benefits, existing-field interruption, crew/pause/refund conservation, finite water, crop choices, fallow, wear/repair, ownership, migration/restore, retirement and offline equivalence. Twelve map/navigation cases pass again after the renderer correction; these reruns do not increase the scenario count. Headless Edge against isolated .data-land-qa verifies surveys, reviewed maintenance/pause/reload/resume/cancel, water/fallow controls, no page exceptions and no overflow at 320/390/640/1440px. Mobile and completed-soil/channel map screenshots were visually inspected. Counts below are historical.

Latest military verification: 104 passing tests in the full focused run plus two additional passing military cases, 106 distinct scenarios. Full command: node --test --test-concurrency=2 test/military.test.js test/population.test.js test/knowledge.test.js test/founding.test.js test/logistics.test.js test/city-projection.test.js test/living-world.test.js test/protocol.test.js test/integration.test.js test/gameplay-concepts.test.js test/three-scale-map.test.js test/map-touch.test.js. Nine military scenarios cover imports/equipment, civilian transfer, training, actual routes/rations, raids/camp clearance, wounds/refit/demobilization, fire/recall/exhaustion, rights/storage, interrupted work, emigration conservation, offline equivalence and save validation. Twelve map/navigation tests pass after the marker addition. Headless Edge in isolated .data-military-qa verifies dispatch, reload, recall, demobilization/recruitment, 320–1440px layouts and the map marker without exceptions. Mobile/map screenshots were visually inspected. Counts below are historical.

Latest research run: 97 passing tests with node --test --test-concurrency=2 test/knowledge.test.js test/logistics.test.js test/population.test.js test/founding.test.js test/protocol.test.js test/integration.test.js test/living-world.test.js test/city-projection.test.js test/gameplay-concepts.test.js test/three-scale-map.test.js test/map-touch.test.js. Ten new scenarios cover all six research effects, finite supplies/workers, separate adoption, refund conservation/storage rollback, rights, malformed saves, additive migration, interrupted institutions, crop harvest timing, physical outward/homeward scout detours and offline equivalence. Headless Edge in isolated .data-knowledge-qa verifies fund/pause/reload/resume/cancel, exact refunds, adoption/crop selection, released specialists and 320–1440px layouts without exceptions. The mobile view was visually inspected. Counts below are historical.

Latest logistics run: 86 tests passed in the full focused suite; the added prolonged blockage test also passed (87 distinct scenarios). Command: node --test --test-concurrency=2 test/logistics.test.js test/population.test.js test/founding.test.js test/protocol.test.js test/integration.test.js test/living-world.test.js test/city-projection.test.js test/gameplay-concepts.test.js test/three-scale-map.test.js test/map-touch.test.js. The final logistics-only run has 9 passing scenarios, including bounded 30-day fire blockage with starvation accounting. Coverage includes stock conservation, depot competition, carrier/weight/reserve limits, authorization, recall, retained overflow, migration-source replenishment, travel/household food accounting, mid-exchange restore and idempotency. Headless Edge against .data-logistics-qa verifies reviewed dispatch, worker use, no instant imports, reload and recall at 320–1440px without page exceptions. The 390px cargo panel was visually inspected.

Current run: 78 passing tests with node --test --test-concurrency=2 test/population.test.js test/founding.test.js test/protocol.test.js test/integration.test.js test/living-world.test.js test/city-projection.test.js test/gameplay-concepts.test.js test/three-scale-map.test.js test/map-touch.test.js. Eight newest scenarios prove delayed arrival, finite source/rations, conservation through dispatch/return, route/save validation, migration blockers, illness and labor reduction, emigration, restored services and daily/offline equivalence. Headless Edge against .data-population-qa verifies People, reviewed close/open admission, reload and 320–1440px layouts without page exceptions. The 390px needs panel was visually inspected. Prior counts below are historical.

Current run: 70 passing tests, using the focused command below. Eleven newest scenarios cover cancellation/refunds across reload, no salvage duplication, active-time accounting, authority/revisions, explicit overflow handling, preserved repair damage/ruins, historical payments, reserve enforcement/exceptions, zero-food recovery, forage labor/delay/depletion/habitat, offline equivalence and additive migration. Headless Edge against .data-recovery-qa verifies reviewed policy changes, shared labor, construction pause/cancel and exact quoted refunds, footprint release, reload persistence and 320–1440px layouts without page exceptions. The 320px cancellation dialog was visually inspected. Counts in the dated evidence below are historical.

Crew continuation: 59 tests pass in the focused command below, including seven additional scenarios for queue contention, one building crew, pause/reload/resume, retained spending, job rights/revisions, historical release ordering, staff competition and pre-crew save compatibility. Headless Edge against .data-crews-qa passed clearing → reviewed pause → reload → reviewed resume → completion, retained spending and returned labor. No page exceptions or overflow at 320/390/640/1440 pixels; the paused-orders mobile screenshot was visually inspected. Earlier counts below are historical, not additive results.

Current focused run: node --test --test-concurrency=2 test/founding.test.js test/protocol.test.js test/integration.test.js test/living-world.test.js test/city-projection.test.js test/gameplay-concepts.test.js test/three-scale-map.test.js test/map-touch.test.js — 52 passing tests. Added coverage includes seven-hex survey viability, reservation competition/expiry, grant continuity after receipt eviction, private authority and inventory, 24-hour food accounting, staff-dependent harvest, bounded storage, blocked full-warehouse selective harvests and discarded salvage, 70-day resumable catch-up, chronological lifecycle work, v2 migration, and event-log recovery of both charter and player identity.

Local headless Edge against a separate .data-founding-qa world passed reserve → review → found → live village, working starter staffing, grant continuity after reload, another player's denied command and hidden inventory, plus 320/390/640/1440-pixel city layouts. Screenshots were visually inspected; no page exceptions occurred. The older tests below describe the earlier City delivery and are included where applicable in the current total, not additional new passing counts.

node --test --test-concurrency=2 test/city-projection.test.js test/living-world.test.js test/integration.test.js test/gameplay-concepts.test.js: 24 passing tests. New scenarios verify non-mutating previews, displayed versus actual material/support spending, restore/idempotency, cross-actor receipt isolation, stale-world reviews, competing worker assignments, production blockers, terrain/deposit/occupancy requirements, and live WebSocket city/status responses. Existing construction, production, fishing, horses, forts and sample-screen behavior remain covered.

Local headless Edge verification against a separate .data-city-qa world passed: open City; preview/cancel without spending; build and complete a lumbermill; assign a worker; inspect missing logs; switch to a sample screen without changing live stock; reload; switch settlements; and inspect layouts at 320, 390, 640, 900 and 1440 pixels. Screenshots were visually inspected. A second browser scenario changed staffing from another client while construction review was open, verified stale confirmation was disabled, then deliberately dropped an accepted order's acknowledgment and verified receipt recovery without duplicate construction. No page exceptions occurred.

An additional 18 protocol, persistence, map-touch and three-scale-map tests pass, covering durable append failure/rollback, existing manifest migration and map navigation. Total focused automated checks: 42 passing tests.

Next implementation work

The lifecycle plan .qa-city/foundation-bootstrap-lifecycle-readonly-plan.json (SHA ec6f2022b51132a5a03515e743be24cb27f3398264485493945ad8cf454d241a) now has executed bootstrap evidence for the founder's death, embodiment/handover to Mira, ordinary adoption of an existing civilian and nomination, plus Jonas's later death. These actions grant no population, workers or goods. Mira reaches old age at 1849312800107, reducing home labor fourteen→thirteen; the continuation must derive public-holder status at that later death rather than reuse the bootstrap's founder-only predicate. During a four-worker booking, field staffing must be current capacity - 8 alongside four civic/registry assignments; ordinary travel uses at most eight field workers plus four crew. Source has no further scheduled named lifecycle loss in its present ledger; that reflects the current unnamed-cohort model, not a general immortality guarantee.

The earlier thirteen-lift and seven-community repair sequence is superseded by the accepted construction, finite pressure, controlled paid residue-recovery and ten-community reserve checkpoints at the top of this document. The latest accepted continuation is .qa-city/born-professional-goal-handoff.json: its separate first-session branch preserves standard founding, reviewed construction/staffing, actual production and paid learning/adoption, without joining later saved branches. The .qa-city/recorded-recruitment-goal-handoff.json remains the exact military/family continuation: its exact closing preserves two actual community births, maturation, recorded reinforcement/cancellation/demobilization, new recruitment, a permanent birth-linked patrol casualty and the physically returned wounded survivor. The earlier .qa-city/household-lifetime-goal-handoff.json retains the named born-to-85 successor history and completed paid work. The earlier .qa-city/residue-recovery-goal-handoff.json retains the separate waterworks/economy branches and their exact inputs. Do not repeat the completed 120-day reserve proof or merge pressure/recovery stocks or certificates into the earned regional economy. Audit outstanding M0–M8 gates against live code, City controls and current evidence; then implement the next material gap. Remaining work includes lawful supply beyond the current finite mineral seams, remaining realm/fortification progression and permanent containment with conserved useful permitted delivery. The broader milestone gaps below remain part of the full goal.

1. Continue service/security assignments and establish an explicit transition path for legacy development populations. Charter households, migration, illness and emigration now work.
2. Add broader disaster recovery; preserve the sustainable starter loop, reserves/foraging and delivered caravan relief for the migration source.
3. Continue M1 broader service controls and district operations. Initial local templates, dependencies and construction ceilings are delivered. Catalog eligibility filters and actionable requirements are delivered. Rotated map previews, finite crews, ordered queues, pause/resume and safe cancellation/refunds are delivered.
4. Extend bilateral one-time and finite recurring player agreements and delivered outpost logistics into broader goods, trade institutions and wider regional production. Finite dispatch deadlines and recurring material exchanges are now delivered above. The finite communal coin market is now delivered. A bounded daily outpost food mandate is now delivered. Expand settlement rights through explicit membership/office rules rather than weakening owner checks.
5. Extend later research with its actual actions/institutions, broader land/militia roles and remaining recovery controls. The combined first journey, reoccupation, two-crew building progression and physical manuscript diffusion now pass; initial first-session guidance and a bounded factual return briefing are now delivered above; continue broader seed/timing/playtesting coverage.
6. Continue all remaining milestone gates through M8. Do not present two predefined development areas as player-founded expansion, towers as armies, or UI catalogs as implemented research.