> Current ground style/detail — 18 October 2026: following the grass/desert/wetland correction, meadow, woodland, upland, tundra and snow now use native materials derived from the original regional art direction. All nine land profiles have explicit Region and Hex context coverage. Geography, source scale and world simulation are unchanged. Earlier galleries retain their dated runtime context. Current material-family review regional-review/vision-ground-detail.json.

Art Atlas original files — October 18, 2026

Blue atlas interface — November 1, 2026

Implemented in the blue-layout release: the game interface now uses the requested Civilization VI-inspired blue menu direction. Deep navy surfaces, lighter blue title bars, layered blue button gradients, white primary text, pale blue secondary text, fine blue borders and slightly rounded corners replace the former green/parchment menu treatment. This is the current interface direction; earlier green/gold interface descriptions below describe the previous presentation. Terrain artwork, resource icon colors and semantic warning/success indicators retain their meanings.

The desktop layout has a wider, framed navigation rail, a bordered resource header, a large map/City workspace and a separate settlement sidebar. The existing mobile flow keeps horizontally scrollable navigation and places the settlement sidebar below the map; City opens beneath the navigation. Map controls, City cards and inputs, Settings and order reviews share the same treatment. Selected controls use brighter blue fills and borders; keyboard focus remains visible, disabled controls remain distinct, and high contrast, reading size and reduced motion preferences still apply. Dialog launchers without a page identifier cannot accidentally receive the current-page highlight.

Implementation lives in public/atlas-theme.css, loaded after the existing component styles by public/index.html. This presentation change does not alter founding packages, prerequisites, quotes, resource costs, staffing, simulation timing or confirmation rules. See the player interface guidance, technical theme notes and tutorial review. This release is based on the existing live game and preserves its world and simulation.

The Art Atlas indexes all maintained artwork folders, including classic production PNGs, connector source PNGs, composition SVGs, references, named exports and runtime derivatives. Classic cards link to their production sources without substituting compressed WebP copies. Everything is the default filter; runtime copies and prototypes remain separately identified and gain no production approval. Previews preserve the full image extent, and opening a preview serves the stored file at its native resolution and format without map effects. A production PNG can already contain alpha extraction. Project receipts identified 1,273 generator source records: 1,228 match existing installed artwork, including one recovered by its receipt checksum; 45 distinct unchanged outputs are preserved in source-originals. Their portable manifest omits private host paths. A verified generator-original badge and search expose exact source evidence without claiming that every historical generation ever made is recoverable. Missing classic originals produce an explicit availability notice.

The release inventory contains 8,303 files with permanent metadata IDs after integration with current main. The live service was separately observed with 3,583 indexed files on October 18; local implementation and live publication are distinct. An art release must install and verify the additional source directories on its versioned volume before it can expose those files online. The release preparation script uses the expanded inventory; the new catalog-assets.json freezes all 8,303 files, and upload verification must match it before switching roots. This changes catalog inspection only, not game routing, simulation or saves. See the player guide, technical reference and asset metadata specification. Getting started remains unchanged because founding and early gameplay are unaffected.

The October 18 storage audit art-direction/art-storage-audit-20261018.json found 1,245 distinct images (2,570,125,090 bytes) absent by exact content from GitHub main 42168fd4 and absent from the checked live locations: 1,200 classic production PNGs and 45 preserved generator originals. The 1,200 named exports duplicate the classic PNGs, yielding 2,445 missing remote file paths in total. All 1,031 Atlas v2 runtime derivatives are served online and passed fresh SHA-256 comparison, although the old live inventory omits them. Other hosts, private backups, old Git revisions and unpublished volume directories were not inspected. That initial audit made no remote changes. The subsequent authorized release was integrated in a separate checkout on current main, preserving regional art, sorting and exact-file approval controls. Its new art directory is /data/art-atlas-20261018-originals/tile-library; the preceding directory remains intact for rollback. The release keeps world saves and game manifests unchanged.

> Current Region ground correction — 18 October 2026: user feedback reopened background-detail acceptance after runtime b4a39c6. Grass, desert and wetland floors now use sharper exact native materials at the existing four-hex scale. All current cameras, geometry and biome blending remain in place. Earlier whole-goal completion and screenshot galleries describe their historical runtime, rather than acceptance of the reported ground blur. Ground-detail review regional-review/ground-detail-regression.json.

> Current regional art-direction acceptance — 18 October 2026: production runtime 43ea180 is visually accepted in132 actual connected native panels, with274 scoped checks per workspace. This current decision supersedes older pending regional review entries below. The final evidence publication is verified separately. Production acceptance regional-review/region-vision-production-acceptance.json.

World of Gonz — Living World Design

Personal settings menu — October 7, 2026 (implemented)

The top-bar Settings gear opens a responsive native modal with Display & comfort, Map & controls, Performance, and Traveler & session categories. Thirteen personal preferences apply immediately and persist independently of player identity: panel reading size, interface contrast, device-aware reduced motion, notification duration, vignette, regional hex grid, globe names, minimap, navigation hints, scroll speed/inversion, keyboard shortcuts and canvas resolution. Fullscreen follows browser support. The menu suspends gameplay shortcuts and releases held traveler movement while preserving native keyboard navigation and returning focus on close. A second click confirms restoring preferences without resetting the player or world.

Grid/name toolbar controls and saved choices stay synchronized across map views and reloads. Lower map resolution changes pixel work only; reduced motion also removes globe zoom interpolation. Cross-tab storage updates apply without writing loops, and blocked storage falls back to preferences for the current visit. Traveler name and connection behavior retain their existing multiplayer handlers. The server seed is read-only in ordinary play; client Generate world is restricted to existing art-review preview modes. Settings does not pause the shared world or change its four-hour village day. Audio settings remain absent until audio playback exists. See player settings and technical architecture.

Beginner guides and tutorial upkeep (implemented)

The beginner/start guides and practical tutorials now include seventeen original screenshots captured from the shipped game in a separate default-seed local world. They illustrate navigation, package comparison, reservation/founding, conditional food readiness, material planning, legal construction, separate operating staffing, current versus full-staff production, physical import quotes, barter drafts and retained return changes. Nearby prose explains what each control does and which separate confirmation or later completion remains required. Example village names, amounts and times are not promises for other settlements; no daily harvest or successful import delivery is claimed by these captures. The detailed Getting started walkthrough reuses three relevant illustrations.

Images remain read-only wiki content with descriptive alternatives/captions, proportional mobile sizing and full-size links. The generator checks referenced PNG dimensions and hashes against the capture manifest. Contributors review affected images alongside beginner/start lessons, replace stale controls or quotes, and update provenance in the same change. This check proves file integrity; factual/visual currency still needs inspection. See illustrated lessons and screenshot publishing.

The read-only wiki now has a dedicated Guides & tutorials player entry point at /wiki/tutorials.html, linked from every wiki page and the gameplay hero. It is a separate top-level section alongside Gameplay and Technical, with its own active tab, lesson index and tutorial search. Its Beginner guide explains needs, available labor/stock, reviews and scheduled time. Its Start guide follows current package comparison, separate reservation/founding, food checks, one legal useful project, operating staffing and actual cycle verification. Focused lessons cover building, production blockers, physical imports/player barter and returning to a persistent world. The detailed Getting started walkthrough remains the deeper reference; tutorials grant no goods, authority or game progress.

Tutorials are authored Markdown generated, searched and link-checked alongside the gameplay and technical pages. Every gameplay/interface/simulation change must review and update the beginner/start instructions and affected lessons in the same change; a scoped review note records when no instruction changes. AGENTS.md and the wiki coverage gate require the authored tutorial update in addition to the living world design. Contributors still update affected gameplay rules in wiki/guide.md and internal explanations in wiki/technical.md. Build/freshness checks run through the existing GitHub/test/deployment workflow; they cannot verify prose accuracy. This documentation change adds no guided in-game progression, timing changes or new playable system.

Consolidated AI faction server design — October 7, 2026

The AI factions server design consolidates the agreed neutral houses, three major powers, server execution model, scale recommendation and low-cost constraint into one shareable Markdown entry point. All routine live faction gameplay is engine-driven with zero language-model calls; optional non-authoritative prose remains disabled by default and globally budgeted. The detailed faction and capacity specifications remain linked from that record. This is documentation consolidation, not a new faction implementation, capacity certification, deployment or authorization for model spending. The technical wiki includes the saved document.

Version 1 publication — October 7, 2026

After accepting the scoped Version 1 wrap-up and separate Version 2 plan, the user requested update git and live. Publish the verified release source, tests, portable fixtures, authored documentation and regenerated wiki to the existing GitHub main branch, then verify the existing Railway production deployment. Keep local QA, private attachments and saved-world directories outside the commit. Preserve the production service's persistent world and art volume; do not replace them with a QA save. Publication does not close the deferred Version 2 gameplay requirements or certify human usability. The release notes and technical reference distinguish local gameplay evidence from the live deployment checks.

Version 1 release and Version 2 boundary

Version 1 is ready as a local playable village → production → patrol → paid land improvement → supplied-outpost release under the revised two-day delivery instruction. See Version 1 notes for launch steps, actual controls, the first eighteen working technology applications, verification and limits, and the release checklist for its acceptance record. The wider original M0–M8 requirements remain unfinished in the separate Version 2 plan. Version 2 has not started.

A fresh native-clock woodland run has now founded once, completed and staffed a real lodge, and reopened with the same identity in 16.102 seconds from entry. Four paid reviews/ten events, all 73 exact engine transactions, whole save restoration and forty layout checks support this first-project path. All 49 earlier accepted closings and 35 portable fixtures remain byte-preserved. This is automated evidence; native full-day production and unassisted human learning remain outside this result.

The current core release regression run passes 177/177 cases across fourteen files covering production/food, shared workers and stock, storage, finite deposits, outposts, City reviews, militia, continuity, trade and persistence. Test-file hashes stayed unchanged. It overlaps earlier selected evidence; totals below retain their exact scope.

Ten release-test/helper files are now corrected without changing production behavior or original fixtures. Older waterworks expectations include the existing empty books through format 43, and governor cargo custody/spending reflects the real two-ram walking load. The perimeter missing-book case now corrupts only its perimeter ledger; removing several other ledgers had correctly triggered an earlier isolation error. The refuge test retains every shelter, architect, firewood, water and population assertion and updates its stale 47-topic count to the current 56-topic catalog. Whole-state, paid-custody and exact perimeter-error assertions remain.

The tenth correction repairs watershed historical-format test inputs. Before deleting any later book, the helper verifies its marker and complete typed empty contents, so paid custody cannot be discarded. All 22 downgraded inputs omit the eleven empty books introduced after format 31; eight migration endpoint assertions expect the current format 43. Original malformed-term errors, paid work, stock, water, title and notice assertions remain. The complete 35-case watershed file passes; production and original fixtures are unchanged.

The complete original npm test run across 593 files finished with 3321 cases: 3305 passed and 16 failed. All 16 failures are resolved by complete current-source affected-file runs (28/28, 6/6, 9/9 and 35/35). The original failing run and its seven declared changed test files are retained, with the watershed correction separately made after termination; it is not presented as a clean full-suite pass on current sources. The fourteen core files and ten affected files pass 255 distinct selected cases, with matching source hashes. Syntax covers 155 current paths; 49 older accepted closing saves and 35 portable fixtures remain byte-preserved. The perimeter run retains its explicitly normalized historical paid predecessors; exact empty stage 30→43 books and sediment 1→2 empty-removal metadata change no existing stocks, paid work, geometry, mass or timestamps.

Version 1 delivery instruction — October 7, 2026

The user has changed the delivery sequence: wrap up Version 1 within two days on the next goal continuation, then prepare Version 2 for a separate new goal. The Version 1 release plan defines the playable core, 48-hour window and release checklist. The Version 2 plan retains the wider original requirements as explicit deferred work. This supersedes earlier open-ended next-work priorities; it does not claim the deferred features complete. Do not start the Version 2 goal yet. The delivery window began October 7, 2026 at 06:17:48 UTC and ends October 9 at 06:17:48 UTC (08:17:48 Europe/Berlin); it does not restart between continuations.

Mixed-material barter and earned warehouse renewal — October 7, 2026

City v263 adds Trade & routes → One-time barter, coin sale or relief → Add materials for mixed barter → Review mixed barter proposal. The main send/receive rows plus two optional rows per side specify one to three distinct materials, 1–40 whole units each. A material cannot appear on both sides, and at most one dated material per side keeps its original expiry. Both owners separately consent to the complete bundle; payment is reserved locally, then the sender separately pays dispatch, two carriers and route provisions. All materials exchange together on arrival with sufficient storage. Collected payment becomes usable only after physical home return and unloading. Capacity includes cargo, travel meals and any separately paid animal feed. Unsupported, unavailable, over-capacity or stale orders fail atomically. Cancellation releases local payment and physically returns undelivered sender cargo; a completed exchange is final.

Version-one trade books and their logistics markers remain exact on read/restore. Only a successful explicitly reviewed mixed proposal promotes both to version two and records kind: mixed-barter / mixedBarterVersion: 1; all old agreements remain unchanged. Invalid proposals grant no promotion, goods, workers, knowledge, title or public authority. Ordinary barter, gifts, coin sales and finite recurring agreements retain their existing single-material terms. No world-coordinate, simulation-clock or other saved format changes.

The portable earned journey ../test/fixtures/earned-renewable-storage-journey.manifest.json now passes the served City controls: twelve separately reviewed orders, 157 independently settled/replayed events and 52 responsive checks at 320/390/640/1440px. Two selective cuts produce real home logs; two paid clearing passes make one footprint legal. The second home storehouse increases capacity 1800→2200 using actual timber/food. A physical camp trip collects twenty timber/twelve food. Separately consented mixed barter delivers six timber/twelve logs to the coastal home for eighteen food, and a separate ordinary trade delivers six timber to the farmer for twelve food. Whole saves, later identity and the production loader pass. All 117 people/72 workers, met meals, health 100 and active scribes persist through seventeen configured village days; seventeen uninterrupted kitchen batches extend the prior chain from 338 to 355. This uses the existing 100ms work unit and advanced QA clock; it does not certify native wait times or human usability. Home logs are again zero, farmer/coastal timber four/two and the finite ore seam 196, so further civic/fuel/material supply remains necessary.

A final read-only pass clears the duplicate-row message when the draft is corrected, dismisses a valid mixed review and adds 24 responsive checks without an order, clock advance or saved-state change. The complete 390px editor and completed agreement were visually inspected. The current selected run passes 109 distinct cases across 14 files; historical counts and duplicate runs are not added, and the full repository suite is not claimed. All 49 canonical checkpoints restore and all 34 older portable fixture bytes remain preserved; the new fixture brings the total to 35. Only the two previously accepted neutral waterworks migrations remain allowed; trade books do not promote on read. See implementation status, progression plan, interface, player guide and technical details.

Native coastal start and selected settlement context — October 7, 2026

Implemented in map script/style settlement-context-1, with City v262 retained: Region and Hex show a readable Selected settlement line naming the actual managed region containing the canonical selected hex and counting its full Managed footprint. The geographic board title remains geographic. Hex also names the selected canonical hex number. A fresh overview refreshes the caption; an unmanaged selection clears the previous settlement name, and Global hides the extra line. Names use text content from the existing authorized managed-region overview. This creates no rights, deposits, inventory, terrain, command or save fields. The native mobile image prompted a separate 12px line instead of placing the village name inside the existing 8px navigation description.

The portable native coastal journey ../test/fixtures/native-coastal-first-session-journey.manifest.json uses the ordinary fresh served coastal package, its actual guide, legal-site labels and four reviewed orders: reservation, founding, a storehouse and a one-day food-space policy. Ten settled events across eight committed transaction states replay exactly. The quoted 6.8-second construction finishes in 6.921 native seconds after funding. The 417.536-second entry-to-building interval includes declared QA recovery; it is not unassisted pacing evidence. The same founded village continues across restart without another grant or repeated founding/construction, then a later session retains the storehouse and policy. All 40 people/24 workers remain, with 6 field growers, 2 fishers and 2 cooks. Capacity becomes 1800, food-space target 40 and the existing conditional food balance remains +5/day. No four-hour daily harvest was observed.

Forty-eight responsive checks cover the entry/founded continuation, map context, ready-site preview, two subsequent reviews and guide. A final zero-order/zero-gameplay-event native pass adds 24 checks across owned Region/Hex, Global, shared development, unmanaged land and return, with the entire saved world unchanged. The named/unmanaged mobile captions and complete guide were visually inspected. The exact coastal closing adds one separate preserved world and one portable fixture; totals become 48/34 while retaining the 47 older closings/33 older fixtures and only the two prior neutral waterworks migrations. The current selected run passes 81 distinct cases across 13 files; the full repository suite is not claimed. Woodland, farming and coastal now each have bounded default-seed native first-construction evidence. Human learning, all native first-session production, full varied-seed/camera/touch/art/hidden-information behavior and every wider original M0–M8/fourteen-scenario requirement remain open. See status, plan, map design, interface, Getting started and technical details.

Native first-session construction sites — October 7, 2026

Implemented in City v262: the construction preview's Build plot selector names each managed hex's current Can build now, Requirement remains or Blocked status and first authoritative reason. Occupied land is visible before selection. Pending or stale checks say Checking site…; they do not retain a ready label. The labels reuse the existing building/orientation site scan and canonical map selection. Payment still needs a fresh separate review, and funding does not guarantee an immediately available crew. No simulation, founding grant, durations, save fields or migrations change.

The portable native-clock journeys ../test/fixtures/native-first-session-journeys.manifest.json begin with actual fresh served worlds and anonymous players, with no prepared opening, clock override or stock edits. Woodland reserves, founds and builds a lodge: three reviewed orders/nine settled events, operational about 14.025 seconds after entry and 7.898 seconds after construction funding. It is deliberately recorded as unstaffed. Farming reserves, founds and builds a 400-capacity storehouse: three orders/nine events, operational about 13.138 seconds after entry and 7.007 seconds after funding. A later normal-clock continuation reviews its existing field from five to six growers and reopens the same saved identity. Its 167.931-second entry-to-staffing time includes QA recovery, so it is not an unbroken newcomer timing claim. Four total farming orders/ten events preserve 40 people/24 workers,1800 storage capacity and a conditional 20.5-food daily surplus. No full four-hour village harvest was observed.

The initial occupied-plot failure identified this UI defect. Two subsequent post-payment QA failures (a screenshot after preview closure and an absolute worker-count selector) retained their actual paid worlds, journals and independent exact replay; no paid construction was repeated within either world. Read-only native clock observations reproduce every actual engine transaction and committed event-state hash, followed by whole production-loader closing/save restoration. The two isolated profiles add 47 preserved canonical closings/33 portable fixtures, including all 45 older closing and 32 older fixture byte hashes unchanged except the two previously accepted neutral waterworks read migrations. Sixty valid responsive geometry checks span 320/390/640/1440 pixels; the mobile ready-site preview was visually inspected. The current selected run passes 68 distinct cases across 10 files; the full repository suite is not claimed. Automated native clock/input checks do not certify unassisted learning, all three native starts, full camera/art/hidden-information coverage or complete M0–M8/fourteen-scenario acceptance. See status, plan, interface, Getting started and technical details.

Mixed detachment field ammunition — October 7, 2026

Implemented in City v261: Defense & patrol → Field resupply → Review ammunition resupply also serves an equipped infantry-and-archer detachment. Its actual surviving archers have six-arrow quivers; line soldiers receive no ammunition. The existing two-person carrying team pays warehouse arrows and travel provisions, walks to the held field hex, loads only empty surviving quiver space and brings surplus home physically. Food, replacement kits, wages, injuries, equipment and the prior order retain their separate rules. Moving escorts, garrisons and campaigns retain their existing supply restrictions.

A successful explicit mixed-arrow dispatch promotes the paired Combined book markers from1 to2, retaining all existing records. Read-only projections, rejected orders, old home loading and saved version-one books cause no promotion. New version-four supply journeys use version-two ammunition custody tied to the actual detachment and funded infantry fitting; version-one/two/three food, kit and pure-archer journeys remain compatible. One validated field-load receipt records each actual delivery, with stock, prefix chronology and surviving-quiver checks.

The current selected run passes269distinct cases in40files, including seven focused cases covering payment, recall, duplication, tampering, surplus custody after detachment closure, actual patrol line casualties and offline settlement. A separate portable controlled transcript ../test/fixtures/controlled-mixed-field-ammunition-journey.manifest.json verifies two reviewed City orders, four independently settled events, whole replay/save restoration, later identity and28responsive checks. A zero-order/zero-clock card pass adds four responsive checks and an inspected mobile image. All44prior closings and31fixture hashes are preserved, with only the two previously accepted neutral waterworks migrations; the separate new controlled closing/fixture bring totals to45/32. Its normal100ms paid depot/drill setup and one controlled four-arrow contact are declared; it proves no ordinary earned battle or newcomer pacing. The full repository suite is not claimed. The original M0–M8 and fourteen scenarios remain active. See the status, plan, interface, player guide and technical reference.

Target funding, charcoal renewal and paid soil recovery — October 6, 2026

Implemented in City v260: Production mandate → Estimate funding for target replaces the fixed ten-batch shortcut. A pure estimate uses current local stock and the actually staffed recipe, retains prior recipe commitments, and prepares either a capped stock-gap bill or one more batch beyond today's daily spending. It changes only local draft allowances; the existing reviewed mandate command retains all authority, accounting, timing, real-input and storage checks. Unstaffed/invalid/exhausted finite-source estimates cannot make a partial change. No saved fields, versions, migrations or resources are added. See the player walkthrough and technical explanation.

The exact worked-mineral closing continues through 18 actual reviewed orders / 64 independently settled events in two linked checkpoints over 12 configured village days. Ten existing logs produce eight charcoal; ten existing iron/five charcoal produce ten new tools. A separately consented two-tool trade physically returns, then two tools from the home’s combined stock physically reach the mineral camp. Capped spending does not renew when stock falls. Both wheat plots subsequently need and receive paid soil care from their owners' existing compost/timber; the next real harvest restores positive home food balances. All117remaining people/72workers, met meals, health100 and lawful public holders/successors persist. Twelve further consecutive kitchen batches extend the chain from326 to 338. The seam still has196finite ore; future fuel, input, storage, civic and land supply remain necessary.

The two portable ../test/fixtures/earned-charcoal-renewal-journey.manifest.json transcripts ../test/fixtures/earned-soil-after-charcoal-journey.manifest.json retain separate parent provenance and real reviewed controls, dismissals, atomic event witnesses, whole replay/save restore and later identity. Current scoped coverage is 189 distinct cases / 28 files, plus108accepted responsive checks at320/390/640/1440pixels. Forty-two earlier canonical closings and twenty-nine older fixtures remain preserved; the two previously accepted neutral migrations are the only allowances. The original paid runner's final resource-label assertion failed after all sixteen orders; its paid state was independently validated and subsequent read-only UI checks used no orders or clock advance. The full repository suite, actual newcomer waits, complete varied-seed journeys and all wider original M0–M8 / fourteen scenarios remain open; this is bounded earned progress.

Earned worked-mineral continuation — October 6, 2026

The exact accepted civic/toolmaking closing now earns 86 served reviewed orders and 934 independently settled events across 84 configured village days. The woodland owner explicitly closes migration, separately buys four existing tools by consented trade, pays for Record keeping, returns an on-site mineral report, registers its charter and sends eight existing residents/six workers. Their camp separately builds and staffs a food plot, receives real timber loads and funds a mine on the surveyed finite seam. Four miners produce 14 ore, leaving 196 of 210 in the ground. A paid home carrying team returns twelve ore; the farming owner separately consents to a physical food-for-ore exchange, smelts all twelve into twelve iron and spends the remaining charcoal to forge two additional tools. A later four-tool return shipment draws from the workshop's combined existing and new stock. Further forging is blocked by actual charcoal depletion; eleven iron remain at the farmer.

Optional farmer/coastal scribes are explicitly paused during funding, then restocked and restored through ordinary reviews without a second adoption payment. Public accounting remains active. Soil care, real forest work, finite-depot deliveries, storage room and actual camp collections still govern the route. Three existing non-ruler elders die naturally at age 85; the current office holders, succession law and nominated successors remain, while interim eligibility passes to existing living adopted kin, final population totals 117 and the original 72 workers remain conserved across homes, camps and travel. Every community has met food needs and health 100 throughout. 84 more consecutive kitchen batches extend the parent chain to 326. This is bounded earned play on the existing seed; finite seams, charcoal and later supply/land constraints remain. Actual newcomer waits, complete varied-seed regional journeys, manual map/art/hidden-information breadth and all wider original M0–M8 requirements remain open.

Every paid review is first dismissed without a command or state change. The new survey-material handoff is checked both eligible and blocked by the actual travelling team. Responsive layout checks cover 320/390/640/1440 pixels; the mobile survey card was visually inspected. Whole production-loader validation, independent full replay, exact save restore and a later same identity pass. The portable transcript ../test/fixtures/earned-integrated-mineral-journey.manifest.json pins the unchanged civic/toolmaking source. Forty-one earlier closings and twenty-eight older portable fixtures remain unchanged; the two previously accepted neutral migrations remain the only allowances. Current selected coverage is 159 distinct cases across 23 files, including one new complete served transcript; historical counts are not added and the full repository suite is not claimed. QA clock advancement uses the saved 100 ms work unit and four-hour village day; it does not certify real newcomer pacing.

Frontier survey supplies and the worked-mineral route — October 6, 2026

Implemented: Frontier & charters → Plan survey supplies opens a fixed one-trip material goal in Supply chains. It uses the same current route provision calculation as dispatch, including two workers, round-trip meals and the delay reserve. Material and workforce blockers retain the bill; unsafe routes and held parcels offer no misleading plan. Only the existing released candidates are exposed, with no unsurveyed resource details. The handoff separately reviews the current dispatch quote. Nothing is reserved or paid by planning; reports, rights, founders, local buildings and freight remain separate. No saved field or migration is added.

The next integrated dependency is worked ore for the existing smithy: a founding home with its first available title can supply a mineral camp, whose existing residents need food work before extraction. A second direct outpost instead needs active Land registry and a sound staffed registry office. Founder departure reduces home population and workers; open migration can fill the freed housing from the finite waystation. Optional service suspension is a reviewed allocation choice, with operating supplies needed before restoration. The original M0–M8 scope and acceptance gates remain active. Companion detail: interface, plan, status, player guide and technical reference.

Earned civic and toolmaking continuation — October 6, 2026

The exact accepted continuous-fuel closing now continues through 128 served reviewed orders and 1,375 independently settled events over 133 configured village days. Paid Joinery selects the precision saw; both owners earn Public accounting and separately review their timber budgets. The farmer builds a Smithy and Charcoal kiln on legal free fields, imports ten finite waystation iron for twenty timber plus travel meals, consumes fifteen logs for twelve charcoal, then ten iron/five charcoal for ten actual tools. A separately accepted food-for-four-tools trade physically returns four fabricated tools to the coastal home; a mixed camp trip delivers one. Ordinary camp collections, eighteen qualifying woodland cuts, fifteen consented trades, paid soil/compost care and finite-depot relief deliveries supply the route. Scribes are explicitly paused during workshop funding, then restored with real stock and remain active on every subsequent settled check for over thirty days. Public accounting remains active. Original people/workers and met needs/health 100 persist. The kitchen completes 133 additional consecutive daily batches, extending the parent's uninterrupted chain from 109 to 242. Finite iron, future storage and material upkeep still need real work; this is bounded manual play rather than indefinite supplies or the full M0–M8 objective.

Walking-team Trade choices now expose server-quoted 40 relief food and 10 iron loads, including the same travel meals, carrying limits, household reserves, finite depot room/stock, worker and current-caravan blockers. New options quote or inspect only; review and physical return remain separate. The portable transcript ../test/fixtures/earned-civic-tools-journey.manifest.json retains the exact parent opening and actual served receipts. 376 responsive checks cover 320/390/640/1440 pixels; paused and active operating-buffer controls, review dismissal, later identity and whole replay/save restore pass. The interrupted first run's five paid orders are preserved and resumed exactly; no paid prefix is replayed against its already-paid save.

City v258 finishes the current redraw before coalescing another redraw requested by a blur/change handler. A deterministic served nested-blur check retains the fourteen-day draft and issues no order. The earlier paid run recorded two DOM replacement errors; their evidence remains preserved. Current UI revalidation resumes its exact paid closing with no new order or clock advance and no page errors. All real receipts, replay and restored state remain unchanged.

Operating supplies as a material planning goal — October 6, 2026

Implemented: a learned program with positive daily material upkeep now exposes Research → Plan operating supplies. City v258 opens its backward supply tree with seven assumed operating village days; the player can select one to thirty. The tree uses this community's current specialist rate, including fractional named-specialist rates. Paused programs can be planned before being enabled.

This conditional buffer is separate from current active-service demand. Planning reserves and spends nothing, enables no program and changes no save. It excludes research, first adoption, household meals, travel and project costs. It does not predict continuous operation: future appointments, competing staff, institution condition and input shortages still require the normal controls and forecast. Service enable/suspend and actual production or transport remain separate reviewed orders. See interface, implementation status, player guide and technical reference.

Continuous village meals through owned storage and renewed supply (M1/M2/M3/M6 partial): The exact manual material-route closing now supports a served City continuation with two separately paid storehouses. The woodland owner pays sixty timber/fifteen food for a legal home storehouse. Three physical deliveries each send twenty actual coastal timber and collect forty-six camp food, freeing destination space and supplying the camp's own sixty-timber/fifteen-food storehouse. No plot, building, stock or workers are granted.

The continuing coastal home uses four existing wheat growers, one fisher and one kitchen worker: 28.6 field food plus six cooked meals against thirty-two residents' demand. Each full kitchen batch spends three actual fish and half a log. A regrown camp plot is cut seven times; fourteen paid trips each collect seven logs/six food. The partner's two woodland plots support fourteen real selective cuts and working milling. Separately consented timber trades fund soil care, and four further food-for-timber trades free home storage when needed. Twelve full-day soil repairs and three own-material compost batches remain paid. The served City journey spans 150 configured village days and records 109 consecutive daily kitchen batches, with healthy met needs in all five communities and the original home/camp population/workforce totals preserved. This is a bounded manual route; wider indefinite supplies, tools, civic services, disasters, seeds and all original M0–M8 gates remain open. All eighty-three paid orders use visible City controls and actual reviews. The prototype supplies an expected-action list; acceptance independently replays the real captured commands and preserves their receipt/history IDs.

City v256 formats production shortages below 0.01 as Missing less than 0.01 [good], and larger shortages to two decimal places. The existing blocked status, exact required inputs, spending and stock remain unchanged. Display rounding authorizes no partial batch or goods. See status, player guide and technical reference.

At the preceding continuous-fuel checkpoint, scoped acceptance covered 76 distinct selected cases across thirteen files, eighty-three ordinary City orders, 1,583 independently replayed events and 240 responsive checks at 320/390/640/1440 pixels. Every review is dismissed without a command or state change before confirmation, and each settled event matches an independent replay. The kitchen completes 109 consecutive daily batches; later identity and whole save restore pass. Thirty-nine earlier canonical closings and twenty-six older fixture hashes are preserved, with only the two already accepted empty-waterworks migrations. The portable continuous meal-route manifest ../test/fixtures/earned-continuous-fuel-journey.manifest.json preserves actual browser receipts and the exact prior material closing. Current totals do not add duplicate runs or historical checkpoints. Full original M0–M8, nine milestones and fourteen scenarios remain active.

Worn food soil and manual material renewal (implemented, M1/M2/M3/M6 partial): Overview derives Inspect food-plot soil care for a staffed blocked food field with enabled preparation below fifty condition and a negative food balance. It selects the exact owned plot in Land & water, explains the ordinary compost/timber/crew/day repair and retains other blockers. Basic-field staffing recovery keeps precedence. City v255 adds read-only selection, no persisted fields, grants or migrations.

The exact post-coastal upkeep world continues through four selective harvests of the same regrown camp plot, four actual log/food collections, four separately consented log-for-timber barters and six full-day soil repairs. Actual milling converts seventy-two received logs into fifty-four timber: the partner pays forty-eight timber and three for Seed selection while retaining 84 against opening 81. Existing people/workers, healthy meals and separately paused scribes are preserved over 81 configured village days. This is bounded manual material renewal. The kitchen/fishery are paused during most of it, then restored; closing three fuel logs and nearly full warehouses still require another paid collection/storage decision. Continuous fuel/civic/tool supply, indefinite resource renewal and all broader original M0–M8 gates remain required. See implementation status, player guide and technical reference.

Post-coastal upkeep (earned, M2/M6 partial): The immutable coastal closing retains the farmer's real worn-soil deficit; it is not claimed food-sustainable without further work. A separate City continuation spends four of the farmer's own logs/four food for compost, then two actual compost/two timber for a full-day soil repair. Two reviewed orders, eleven independently replayed events, 24 responsive checks, read-only review dismissal, later farmer identity and whole restore pass. Seven more ordinary days then prove positive conditional food balances, health 100 and met needs in both homes and both camps, with both nine-step guides met. Closing farmer 32 logs/13 timber/6 compost and coast 4 logs/19 timber remain finite; both Record keeping services are explicitly paused. The original coastal closing/receipts stay unchanged. At the preceding coastal/upkeep checkpoint, verification was 61 distinct selected cases/nine files, not added historical runs. Full M0–M8 and recurring fuel/material/soil/civic supply remain required. See implementation status, player guide and technical reference.

Coastal integration and carrier guidance (implemented and earned, M0–M6 partial): Inspect supply-team workers opens Workers when an established camp has no travelling team and fewer than two home residents are available. It reports the actual local count and explains separately reviewed assignment/service changes, food reserves and restarted production. Camp labor cannot fill home carrier roles. Existing paid journeys retain trip inspection. This is pure server-derived navigation, with no command, grant, new saved field or migration. See interface, player guide and technical reference.

The exact farming closing now earns the coastal village's own four-person cautious patrol, useful wheat field and supplied woodland camp. The farmer separately pauses timber-consuming Record keeping. Coastal paid Seed selection/Drill, finite iron/tools imports, crafted kits, two full training days, actual camp dispersal, home wound recovery and demobilization precede land work. A separately accepted thirty-two-food/twenty-log trade with the farmer supplies three paid compost batches. Three-day soil preparation raises the existing field's moisture across wheat's 0.55 threshold, without changing natural terrain. Soil later wears below fifty and stops wheat; two separately funded repairs spend two compost/two timber each and restore actual production. Household reserves cover these pauses.

Four independently accepted coastal barters send twenty-four food for eighteen timber each. Longer walking provisions prevent assuming the farming route's twenty-four-timber load. Record keeping is paused while materials arrive, then restored for a fresh returned survey, current conditional charter and seventy-timber founder kit. Eight existing residents/six workers establish outpost-2, followed by a separately paid local field/two growers. After founder departure leaves only one free home worker, the new guide exposes the actual shortage. Pausing the coastal scribe and separately releasing two of eight wheat growers leaves four free residents while retaining positive full-cycle food capacity. A paid team delivers thirty-two food/one tool and returns twenty actually harvested local logs; the smokehouse resumes cooking. Coastal home/camp retain positive conditional food balances for seven further ordinary days. Farming home/camp retain health 100/met needs, but the older wheat soil wears to zero and the home has a real -3.25 daily food balance before the separate upkeep above. Coastal closes with thirty-two home residents/eighteen workers, eight camp residents/six workers, twelve home logs/nineteen timber/three tools/three worn kits. Civic services are explicitly paused; ongoing soil/fuel/material renewal is still needed.

All 56 remaining orders use visible City controls, including five separate partner payment reservations and the farmer's explicit service pause. Each review is dismissed first without a command or state change. The exact farming closing is the opening, with no intervening paid setup or joined private stocks. Whole 259-event replay/save restore, 160 layout checks at 320/390/640/1440 pixels, touch controls and a later coastal identity pass. The preceding coastal/upkeep checkpoint covers 61 distinct selected cases across nine files; prior checkpoint totals are historical, not added. Thirty-six earlier canonical closings restore and all twenty-three older portable fixture hashes remain unchanged, with only the two previously accepted empty-waterworks migrations. The accepted record is .qa-city/coastal-integrated-goal-handoff.json.

Woodland, farming and coastal now each have an earned integrated starter example on the current seed. Full journeys on other seeds, a recurring renewable material/food economy, manual map/touch placement, real newcomer waits, art/hidden-information and the original wider six-branch/military/political/realm/major-water/resource/disaster gates remain required. Full M0–M8, all nine milestones and fourteen acceptance scenarios remain active.

Alternative economy and starter seed viability (implemented, M0–M6 partial): A village with neither a local timber-producing building nor natural woodland now offers Inspect timber trade. Advice preserves starting timber for other bills and explains the separately paid mill, real log inputs, finite imports and consented barter. The receiver must independently reserve the agreed payment; the sender pays its actual goods, two carriers and travel meals. Timber remains outside usable sender stock until physical return/unloading. An already paid caravan takes precedence and retains its actual waiting/blocking advice. This adds no automatic proposal, foreign inventory disclosure, goods, title, saved field or migration.

Three additional independently configured seeds each earn all three starter profiles, legal first projects and actual staffed-institution Scouting through ordinary commands. Each profile uses its own grant and stocks. Whole seed-bound replay and restore pass; restoring under the default seed is rejected. These are nine bounded early paths, not certification of every generated seed or complete multi-seed regional journeys. See implementation status, interface, player guide and technical reference.

The exact prior alternative-starter closing now earns the complete farming integrated target through visible City reviews. Existing barley fields keep meals available; real iron imports fund four kits, four existing residents finish two training days, and a cautious patrol disperses this village’s own surveyed camp. One wound heals at home before demobilization returns workers and three worn kits. Soil preparation on an existing surveyed field spends actual compost, timber and a tool over three full days, raises usable moisture and makes the separately chosen wheat crop possible without changing natural terrain. The farmer then reaches a real founder-kit shortage: forty-nine timber and three tools against sixty timber/four tools, plus ten extra timber for the camp food plot. Three separately accepted barters export thirty-two actual food each for twenty-four timber each, with real reservation, carrying and return. Another physical tools import completes the kit. Returned survey, separate charter and supplied founders move eight existing residents/six workers into a camp, followed by separate local food-plot construction/staffing. A paid trip delivers thirty-two food/one tool and returns twenty locally harvested logs. Home thirty-two residents/eighteen workers and camp eight/six remain healthy with met needs and positive conditional food balances for seven more ordinary days; all nine guide checks are met. Home retains fifteen timber and still needs future civic/material supply; this is not an indefinite material-renewal claim.

All forty-one remaining reviewed commands are served, including the woodland partner’s three separate payment reservations. There are no intermediate paid setup commands or joined private stocks. Whole 250-event replay/restore, 116 responsive checks at 320/390/640/1440 pixels, touch reviews, read-only dismissal of every review and a later farming identity pass. One extra command uses Workers’ actual one-person staffing buttons. The independent prototype is an expected-action list, not injected setup. The three seed fixtures remain separate from the farming world. At the preceding farming checkpoint, checked totals were 58 distinct selected cases across eight files: fifty-seven current regressions, including the new timber-advice case and three seed-bound replays, plus one new whole farming City transcript. Thirty-five earlier canonical closings restore and twenty-one older portable fixture hashes remain unchanged; only the two previously accepted empty-waterworks migrations apply. The preceding farming record is .qa-city/farming-seeds-goal-handoff.json. Earlier checkpoint counts are historical and are not added. Full journeys on other seeds, manual map gestures, newcomer pacing, art/hidden-information and wider M0–M8 gates remain open.

Farming/coastal first projects and Scouting guidance (implemented and earned, M0–M4 partial): The guide now offers Inspect food plot workers when a negative food balance can be covered by additional currently available workers on an existing, ready basic food plot. It names the exact plot, current/needed growers and conditional full-day output. Fuel-consuming recipes, blocked output, inadequate free workers or insufficient field capacity retain Production advice. Opening Workers focuses that building; each Assign one remains a separate reviewed order and restarts the normal growing cycle. This grants no food, fuel, residents or automatic staffing.

For unknown Scouting, a missing lodge offers Plan Scouting’s lodge and its actual supply goal. An existing sound operating but unstaffed lodge offers Inspect lodge workers. Legal cleared fields can host the institution without mature woodland; construction, one staffed practice day, paid research, full learning days and adoption remain separate. Catch-up and lawful-handover advice still take precedence. This changes only derived navigation and focus; save versions and simulation payments remain unchanged.

From the exact independent fresh-entry closing, thirty-nine ordinary days exhaust the coastal kitchen's logs and expose the farming warehouse's real storage blocker. Each original owner uses only their own starting supplies and current reviewed controls. Coastal field staffing rises six → seven → eight, restoring a conditional four-food daily surplus without replenishing fuel. Both villages separately construct storehouses and cleared-field lodges, staff one lodge worker, earn actual practice and learn/adopt Scouting. They retain forty residents/twenty-four workers each, health one hundred, no food shortfall and positive current food balances for seven further ordinary days. The accepted browser transcript has forty-three command/time events, twelve paid orders, twelve read-only dismissed reviews, sixty-four responsive checks at 320/390/640/1440 pixels and later same-owner sessions. Whole prefix/served replay and restore pass. At the preceding alternative-first-project checkpoint, checked totals were 53 distinct selected cases across six files: fifty-two current guide/supply/military/starter regressions plus one new portable alternative-owner transcript case. Thirty-four earlier canonical closings restore and twenty older portable fixture hashes stay unchanged; only the two previously accepted empty-waterworks migrations apply. The accepted record is .qa-city/alternate-starters-goal-handoff.json. Earlier checkpoint counts below are historical and are not added. The complete coastal patrol/land/outpost route, full integrated journeys on other seeds, manual map gestures, newcomer pacing and art/hidden-information breadth remain open. Full M0–M8 stays active. See implementation status, interface, player guide and technical reference.

First integrated starter journey (implemented and earned on one seed, M1–M6 partial): The exact separate fresh-world-entry closing now continues through a food-secure woodland village, real iron and mill-log shortages, a four-person protective patrol, useful soil preparation and a physically supplied outpost. Its three original woodland/farming/coastal founding identities retain their one-time grants; other homes provide no private stock, knowledge or authority to the woodland player. Existing paid Seed selection, Drill, Scouting, Crop rotation and Record keeping are the only five learned topics needed in this route. The first served lodge remains staffed, and all later learning, production, land work and expansion use ordinary authoritative commands and scheduled checks.

Compare early militia equipment (implemented): The guide's Compare militia equipment opens the existing Troops goals. Train two/four/six militia residents uses the actual corresponding kit count and recruitment quote. Train this goal shows local kits, the remaining gap and the smallest supported whole craft batch covering that gap. The shared military bill is two timber and one iron per kit, including when stock or another prerequisite blocks crafting. Quantity-matching craft/recruit reviews still require current authority, commons, active Drill, civilian labor, food and actual stored kits. Two residents face high risk against the uncleared surveyed camp; larger forces cost more workers, equipment and meals and promise no victory. No saved ledger, grant, timing or migration changes.

The served route imports five actual iron, crafts four kits with eight timber/four iron, transfers four existing civilians into two full training days, and pays a cautious physical patrol. The camp disperses; one wound heals at home, and later real trade loses no further food to that camp. Demobilization returns the surviving workers and three worn whole kits. A real logs blocker stops the mill until owned selective harvest supplies another batch. A separate cleared, surveyed woodland plot receives real compost and three full days of soil work, then a paid, staffed wheat field; its natural terrain remains unchanged. A returned frontier survey and separate charter precede eight transferred founders, ten extra food-plot timber, and separate camp construction/staffing. One reviewed mixed trip delivers 32 food/one tool and physically returns 20 locally harvested logs. Both communities remain healthy with positive current food balances through seven further ordinary days. All nine introductory guide checks are earned, with total home/camp population 40 and civilian workers 24 preserved.

The new portable earned-starter-full-controls-journey fixture independently replays all 262 continuation events and restores the whole closing exactly. All 43 remaining starter orders use visible City controls and separate reviews, including paid research/adoption, crop choices, land survey/clearing/compost/soil, field building/staffing, frontier survey/charter, founders, camp harvest and both supply directions. Every review is first dismissed without a command or state change. 68 layout checks at 320/390/640/1440 pixels, touch reviews and later identity pass. The extra three commands reflect the actual Workers controls' one-at-a-time staffing changes; no materials, people or rights are injected. Its pinned predecessor already served world entry/founding and the first staffed lodge. The earlier 259-event mixed setup/served fixture remains immutable; its narrower scope is historical. At the preceding woodland checkpoint, checked totals were 49 distinct cases across five files: 48 prior cases on unchanged source plus one new complete City-transcript case. Thirty-three earlier closings restore and nineteen older portable fixtures retain their hashes. Other starting paths/seeds, manual map gestures, newcomer pacing, art and hidden-information review remain open. See implementation status, interface, player guide and technical reference. That preceding woodland checkpoint is .qa-city/starter-full-controls-goal-handoff.json. The integrated target and its remaining paid City controls are earned within this one-seed scope; full M0–M8 remains active.

Recorded military lives and lawful city continuity (implemented and earned, M5/M7 partial): City → Defense → Combined detachments now exposes Recorded detachment members in the current detachment and its history. Each recorded birth retains its role/slot, actual birth date and age at the latest settled village check. A fallen member keeps the age/date/cause from the real casualty or old-age receipt; a living member who leaves a detachment keeps the age at its recorded return. Earlier unnamed troops remain explicitly unrecorded. This is a read-only projection of existing custody, with no saved field, age reset, person grant or migration. Full calendar dates are shown, rather than a time of day alone. Current wages and departure readiness are separate checks.

The exact earned four-born Combined closing continues for 1,449 ordinary village days, without resource, health, population, terrain or age edits and without joining another branch. A real one-day refit spends the existing one iron/one timber. The owner names and appoints one existing civilian adult at age24. The original ruler dies naturally at85 after99 days; interim stewardship retains the appointed adult while player orders remain locked. Separate embodiment and lawful handover restore human rule. All four serving birth records then die naturally at85, first the two line slots, then the two archer slots. Each death removes one resident and mobilized soldier; it returns no civilian worker. The archer deaths lose their two fitted bows and twelve held arrows. The last death closes the detachment as lost and deletes the empty force. The previous permanent combat casualty remains unchanged. Closing population34/civilian labor19/health100, no food shortfall, twelve spare home arrows and one spare militia kit remain, communal cash11 and previously earned military wages35 remain, and the successor is living at84.

This proves the same born soldiers' qualified Combined service followed by home aging under an already expired professional term, through actual mortality. It does not prove continuously paid sixty-year service, further battles, ranged firing, title conquest or indefinite population renewal. The source already earned its real advanced infantry, mixed drill, camp dispersal and all seven-day wages; no new wage term is injected during the lifetime continuation. Whole daily and served replays/restore preserve actual birth-key mortality and equipment custody. The served branch uses five reviewed orders and eleven events, with thirty-six checks at320/390/640/1440 pixels; a separate final date-display check covers eight further read-only layouts without changing the accepted closing. That earlier checkpoint passed 71 distinct selected cases across six files, including two new lifetime/roster cases. Thirty-one earlier canonical closings restore and seventeen older portable fixtures retain their hashes; only the two previously accepted empty waterworks migrations apply. Earlier checkpoint counts are historical and are not added. That preceding lifetime continuation is pinned in .qa-city/born-lifetime-goal-handoff.json; the full original M0–M8 goal, nine milestones and fourteen scenarios remain active. Wider military/political/realm progression, useful permitted major-water delivery/maintenance/removal, resource/disaster renewal and complete fresh-entry beginner/pacing/art/hidden-information breadth remain open. See interface, player guide and technical reference.

Born professional/Combined supply and drill (implemented and earned, M3/M4/M5/M7 partial): Defense now offers Prepare Combined formations for an existing militia before the technique is known. It shows the actual five instructor states, four/six-person cohort requirement, two advanced infantry days and the separately paid two-day mixed drill bill. Plan combined drill materials opens that exact consumer in the existing backward supply tree; it spends nothing and grants no qualification. Infantry fitting, wages, research and household meals remain separate. Player trade now includes charcoal at one carrying weight per whole unit in both agreement and caravan validation, without creating depot stock or changing save versions.

The exact four-born-soldier closing now earns 546 further setup events. Retained owned woodland is actually harvested/milled; three physical ten-iron barters use existing finite waystation iron, and a timber sale earns twenty coins. The existing toolmaking neighbor physically receives iron/logs, works its kiln and forge, and delivers sixteen tools plus three charcoal. A second paid survey/registration creates a legal home smithy field, preserving the renewable woodland. The textile owner enrolls an existing civilian through council petition, separately embodies them and accepts lawful handover; existing flax is spun and four yarn physically traded. No population or worker is added by naming this steward. Paid Textile crafts, Infantry formations, Archery and Combined learning/adoption complete; idle production/forestry assignments are released to keep two actual researchers available. The supplied home smithy makes twenty-four arrows and half-staffed bowmaking uses real yarn/timber/half a tool for two whole bows.

The served UI funds a real seven-day, four-person infantry term, completes both advanced training days, separately pays the two-archer/two-line drill and completes its two full days. Those same four actual birth records patrol, disperse the surveyed camp and physically return. One soldier is wounded at contact and heals during the later ordinary home checks. Clearing this camp ends its provision raids and grants no territory. Natural dense camp cover prevents the complete volley; none of the twelve held arrows is fired and no terrain is changed to manufacture a ranged test. The prior permanent casualty remains dead and no new military death occurs. At term expiry twenty-eight coins have become new military-household wages; total earned wages are thirty-five and communal cash is eleven. Closing ages are 51, 26, 25 and 24, population thirty-nine, civilian labor twenty, health one hundred, no food shortfall, four soldiers home/unwounded, condition 84.5/morale100/fatigue0. The Combined qualification and twelve held arrows remain, but the completed professional term provides no active wage effect or free departure.

The preceding supply-and-drill checkpoint passed 84 distinct cases across ten files: eighty-one selected regressions plus three new material-plan, actual charcoal recall and portable whole-journey cases. Forty served layout checks cover 320/390/640/1440 pixels, planning and dismissed reviews are read-only, later identity and whole independent replay/restore pass. Thirty earlier canonical closings restore with only the two previously accepted empty waterworks migrations; sixteen prior portable fixtures retain their hashes. The latest closing and audit 24 are pinned in .qa-city/born-combined-goal-handoff.json. The full nine original M0–M8 milestones and fourteen scenarios remain active. At that supply-and-drill checkpoint home aging through eighty-five was still unverified; the recorded lifetime section above now proves it under expired wages. Further battles/weapons/title negotiation, wider political/realm forms, useful permitted major-water delivery/maintenance/removal, longer resources/disasters and complete beginner/pacing/art/hidden-information breadth remain open. See interface, player guide and technical reference.

Coming of age and recorded reinforcement (implemented and earned, M2/M5/M7 partial): City → People → Community family growth now shows Coming of age and recruitment: the next six resident children, their age at the latest settled village check, their actual adulthood check and village days remaining. One lifecycle year is twenty-four village days. Current recorded civilian adults and the subset remaining below eighty-five through two training days are shown separately; Defense still checks staffing, civilian floors, kits, health, roles and instructors. Open Defense only navigates. The panel reminds players to pause ongoing family growth after their intended cohort; this adds no automatic birth limit, saved field, migration or resource grant.

The exact accepted born-professional closing continues with three ordinary births, each after twenty-four consecutive eligible days. Population rises from thirty-six to thirty-nine while civilian labor stays twenty. The owner then pauses births. All three children receive their normal eighteen-year maturation checks; the youngest matures after 504 village days from the opening, and labor reaches twenty-three. Health remains one hundred with no food shortfall. The same veteran remains in service, ages from twenty-three to forty-four, and the prior second-born soldier remains permanently dead. No founding package, stocks, age edits, workforce or balances are joined from other branches.

The served UI ends the veteran’s completed professional role at home, retaining seven already earned wage coins, and reviews three recorded reinforcements. Three existing militia kits are committed; two full training days complete with four actually born soldiers. Population remains thirty-nine and civilian labor returns to twenty. The veteran crosses a real birthday during those two days, giving closing ages 45, 20, 19 and 18. Equipment condition is 99.5, all four are home and unwounded, morale is one hundred, fatigue is zero, one kit remains, communal cash is nineteen and earlier military-household earnings remain seven. This is a trained ordinary militia cohort; it has no current professional role or Combined detachment.

The preceding born-cohort checkpoint passed 57 distinct cases across six files, including two portable cohort/check-read cases; earlier counts are historical and are not added. The independent daily setup records 506 events for 504 normal village days. The served branch records ten events with four reviewed commands, dismissed reviews are read-only, thirty-six checks cover 320/390/640/1440-pixel layouts, and later identity plus whole replay/restore pass. Offline catch-up drains the existing bounded simulation transactions, preserving actual birth and maturation times. Its household/army/economy custody matches the daily path; transaction revisions are naturally different. Twenty-nine earlier canonical closings restore with only the two previously accepted empty waterworks migrations; fifteen prior portable fixtures retain their hashes. The latest continuation is pinned in .qa-city/born-cohort-goal-handoff.json and the full original nine milestones and fourteen scenarios remain active in audit 23. Full born professional/Combined lifetime through eighty-five, wider political/realm forms, useful permitted major-water operation, longer resources/disasters and complete beginner/pacing/art/hidden-information breadth remain open. See interface, player guide and technical reference.

Born survivor recovery and advanced infantry service (implemented and earned, M5/M7 partial): Defense now shows Home recovery with the actual next ready-at-home check and current blockers. Rest uses an operational commons at least 65% condition without building work, the households’ last supplied meal and at least 65 community health. At an eligible ordinary check, one wound can heal, fatigue falls by twenty and morale rises by ten within their limits. Training, refit and away duty use their own clocks. Rest never repairs equipment or revives a fallen resident; Review refit pays actual timber/iron and a separate full day.

The accepted continuation starts from the exact wounded community-born militia closing. The same nineteen-year-old rests normally, keeps 85 equipment condition, and later reaches age twenty-three through ordinary village days. Warehouse food initially blocks further log harvest; actual farmer assignments retain meals while freeing space. Owned selective harvest and milling, finite coin-paid bricks and timber-for-iron barter, an actual timber sale, and six tools physically forged/delivered by the existing toolmaking village supply the work. A returned paid survey and local registration add one adjoining field for the staffed barracks; the old cleared school records are historical and those cells are already occupied by later buildings. No school salvage, new starter package, resource grant or borrowed branch balances are used.

Two hundred sixty-nine actual setup command/time events earn the supplies, title, barracks, full Field logistics/Standing service learning, separate adoption and paid refit. The served UI then funds a real seven-day infantry term for the same single surviving birth record, completes both advanced training days, sends a cautious patrol that withdraws from the stronger observed camp and physically returns, and completes all seven wage days. Seven coins become military-household earnings; communal cash falls from twenty-six to nineteen and no wage days remain held. The earlier second born soldier stays permanently dead. The closing survivor is home, unwounded, condition 98/morale 100/fatigue 0, qualified infantry with an expired term; another professional departure needs a new funded term.

The preceding born-professional checkpoint passed 94 distinct cases across eight files, including two actual recovery/broken-commons cases and one portable complete setup/served replay. The served proof includes two ordinary recovery advances, sixteen later command/time events with two reviewed paid orders, thirty-six layout checks across 320/390/640/1440 pixels, touch controls, read-only dismissed reviews, later identity and exact independent replay/restore. A final read-only UI check verifies the same closing with correct singular troop labels at all four widths. Twenty-eight earlier canonical closings restore, with only the two previously accepted empty waterworks migrations, and all fourteen prior fixture hashes stay unchanged. The original M0–M8 remains active: full community-born professional/Combined lifetime through eighty-five, broader birth/maturation coverage, political/realm forms, useful permitted major-water operation, long-term resources/disaster and complete beginner/pacing/art/hidden-information breadth remain open. See interface, player guide and technical reference.

World entry and starter comparison (implemented, M0/M1/M2 partial): A new player sees Choose your start → Compare village starts above the shared development City overview and can use the same button in the compact map overlay. Founding compares woodland, farmland and coastal packages from the actual server package definitions, with current available location counts. Show woodland locations, Show farmland locations and Show coast locations filter the location cards without reserving land or spending a grant. An existing reservation remains visible across filters. Existing-community invitations remain available below the founding locations; a resident start or already spent grant offers no second package.

The served fresh-world branch starts with no charters and three newly created session identities. All three choose a style, inspect its actual map site, dismiss reservation/founding reviews without mutations, then explicitly reserve and found. The woodland player pays for a legal forester’s lodge, completes its actual construction stages, separately assigns one worker and reaches a normal timber and meal day. Touch actions at 390 pixels, keyboard entry, 40 layout checks across 320/390/640/1440 pixels, later session identity, exact independent replay and whole-save restore pass. Eight actual commands and five ordinary time advances are recorded. This proves entry through a first staffed building and production day on one world seed; the complete beginner bottleneck/patrol/land/outpost journey, elapsed pacing, multi-seed coverage and art/hidden-information breadth remain open.

The original M0–M8 goal stays active. This change adds a read projection and local UI filter, with no saved ledger, migration, people, goods, knowledge or rights. Twenty-seven earlier separate closings restore with only the two previously accepted empty waterworks migrations, and all thirteen previous portable fixture hashes remain unchanged. The fresh entry branch remains separate from the guide/research, born-militia, realm and reservoir branches. See interface, player guide and technical reference.

First-session guide actions (implemented, M1/M2/M3/M4/M5/M6 partial): Overview now puts the existing nine-step village-to-region guide before the return briefing. Three unfinished steps expose a concrete current control instead of a generic section link: a building material goal, exact research/adoption topic, initial militia equipment comparison, patrol provisions, soil bill or frontier/food-delivery control. A funded construction crew opens Orders; existing founder travel and trade stay visibly outside home stock. Every link is read-only and every paid order still uses its separate current review. This extends the original guide rather than creating another quest ledger or starter grant.

Food advice distinguishes producers ready with current warehouse inputs from the engine’s conditional ordered food-chain capacity. In a fresh coastal start the kitchen waits for six fish in stock, while the earlier fishery can supply its cycle: 33 stock-ready food and 45 conditional chain food against 40 demand. The existing virtual-input allocation and progress rules stay authoritative; shared inputs, storage, needs before harvest and later changes prevent a capacity figure from being a guaranteed meal or indefinite sustainability claim. Unstaffed kitchens remain visible and negative balance returns food to the unfinished steps.

Research links distinguish unknown, funded, learned-but-not-adopted and interrupted programs. Catch-up advice waits for current needs; council stewardship points to separate embodiment and lawful handover. The guide retains all nine checks and previous recorded results, adds no persisted field/migration and grants no people, materials, learning or rights. The original M0–M8 goal remains active, including broader military lifetime, political/realm authority, useful permitted major-water operation and full onboarding/pacing/art/hidden-information validation. See interface, player guide and technical reference.

Current army application: choose recorded community-born recruits (M5/M7 partial, implemented).

Current scoped guide-action acceptance: 658 distinct selected cases across 65 files pass, including seven new guide cases and two portable first-session replay cases. This is not the full repository suite; failed development assertions and duplicate reruns are not counted. Three actual founding packages, eleven read-only guide links, 36 layouts at 320/390/640/1440 pixels, four separately reviewed paid commands and twelve served command/time events prove construction, staffed timber production and learning followed by separate adoption, with exact independent replay/restore and later-session continuity. The prepared founding orders are setup evidence; a complete newcomer journey from world entry, long-term balance, touch interaction and art/hidden-information breadth are still open. Twenty-six earlier closings restore with only the two previously accepted empty waterworks migrations, and twelve earlier portable fixture hashes stay unchanged. The separate born-militia closing remains the broader military continuation; no saved branches were joined. No staging, commit, push or deployment occurred. The original goal remains active.

City → Defense → Recruit recorded community-born adults adds explicit recruitment and reinforcement of the oldest eligible local civilians with recorded births. The ordinary buttons keep selecting civilians without birth records first. New optional recruitmentSource: recorded orders choose only existing civilian birth records, never named household members, children, travellers or serving troops. Adults whose age-85 boundary falls within the two-day training window are skipped in favor of the next eligible adults. The review shows actual ages/birth dates, kit costs, the remaining civilian workforce and full training requirement. Current ownership/character/world revisions, health, unassigned labor, civilian floor, reserves, real kits, existing role/detachment restrictions and ordinary training remain binding.

The same validated birth/service records retain identity through mobilization, reinforcement cancellation, demobilization, later enlistment, physical travel and permanent casualties. No resident, worker, birthday, equipment or army is granted; there is no new persisted ledger or save-version change. The portable earned roster journey ../test/fixtures/earned-recorded-recruitment-journey.manifest.json continues the exact household successor closing through 550 ordinary events: lawful recovery of an existing toolmaking steward, actual remaining iron/charcoal forging, separately signed physical tool trade, two real 24-day community birth intervals, eighteenth-year maturation and four paid kits. The older named holder's born-to-85 history remains intact.

Twenty-three served command/time events, six commands and twenty-eight 320/390/640/1440-pixel layout checks prove explicit reinforcement, a paid day followed by cancellation returning the same adults/kits, fresh two-day reinforcement, full demobilization and a new recorded two-person militia with two full training days. An ordinary ration-funded patrol then meets the actual surveyed camp without altered enemy strength: one community-born soldier dies permanently, the wounded survivor walks home, population falls by one and civilian labor is not restored by a fatality. Review dismissal, reload, a later session, exact independent replay and whole-save restore pass. Nine roster boundaries and two portable cases cover this scope. This is militia birth-to-combat evidence; professional/Combined qualification and a complete community-born military life through old age remain open. The full original M0–M8 goal remains active.

Recorded recruitment is optional later play. Getting started still uses real existing civilians, kits, Drill, food and the first supplied patrol; it does not require waiting for a birth or eighteen-year maturation. See living-world design, implementation status, interface, player guide and technical reference.

Earlier scoped recorded-recruitment acceptance: 649 distinct selected regression cases across 63 files pass, including nine roster boundaries and two portable journey cases; this is not the whole repository suite. Twenty-five earlier closings restore with only two already accepted historical empty waterworks 42→43 migrations, and eleven previous fixture hashes are unchanged. The catalog remains 44 buildings, 56 technologies, 32 recipes, 92 resources and six branches. No new save migration, branch join, staging, commit, push or deployment occurred. The full original goal stays active.

Earlier household continuity: recorded history and an earned full lifetime (M7 partial, implemented).

City → Family & continuity → Household history displays recorded named births, arrival as an existing resident, adulthood, lawful public handovers and deaths in chronological order, with the person's age at each event. It derives these rows from existing records and adds no saved ledger, resident, worker, goods, qualification or authority. An adult adopted from a recorded community birth retains their actual age at joining. Earlier unnamed or founding births are not invented. The existing lifecycle panel still shows living ages, next birthdays and old-age boundaries; named household civilians remain separate from the military roster.

The portable earned household lifetime ../test/fixtures/earned-household-lifetime-journey.manifest.json continues the exact unchanged realm-office closing through 2,396 ordinary command/time events. Existing adult guardians, twelve eligible birth days, sustained household meals, eighteenth-year worker maturation, earlier rulers' natural deaths and separate lawful handovers let a naturally born child become the holder. No age, health, people, knowledge, stock or elapsed-time grants were used. Actual service pauses and food staffing keep reserves; finite iron imports, real smithing, separately consented physical tool/iron trades and two remaining finite waystation tools fund later work. Demolition plus salvage frees real plots; ordinary woodland recovery, harvest and milling pay for a staffed lodge, Drill, Scouting, kits and two trained existing militia.

At the born holder's natural age-85 boundary, Masonry research, a running four-person Town house crew and an already outward supplied patrol are all active. The served City journey records the natural death, retains paid research and construction, and recalls the same troops physically. Choosing the previously appointed adult keeps interregnum; Review lawful handover separately transfers authority. The funded house and research then finish and both militia return home. Twenty-four layout checks at 320/390/640/1440 pixels, cancelled reviews, reload, a later session, exact independent command replay and whole-save restore pass. This supplies ordinary lifetime evidence for required scenario 12; it does not complete every M7/M8 gate. A named civilian lifetime is not a community-born Combined formations military lifetime or casualty proof. Broader political roles, sovereignty, indefinitely renewing mineral/supply chains, useful permitted major-water operation and remaining first-session/touch/art gates remain planned. The original M0–M8 goal stays active.

This later household panel changes no founding choice or first-project requirement. Keep the Getting started food, staffing, production and supplied patrol sequence; household birth and long-term appointment are optional later decisions. The previous realm election and other earned/controlled branches retain their original bytes and independent custody. See the gameplay plan, implementation status, interface, player guide and technical reference.

Earlier scoped household acceptance: 632 distinct selected regression cases across 60 files pass, including four portable/history cases; this is not the whole repository suite. Twenty-four earlier closings restore, with only two already accepted historical empty waterworks 42→43 migrations, and ten prior fixture hashes are unchanged. The new derived history adds no save migration. Catalog remains 44 buildings, 56 technologies, 32 recipes, 92 resources and six branches. Earlier evidence remains separate; the full original goal remains active. Nothing was staged, committed, pushed or deployed.

Earlier realm application: jointly elected production governor (M4/M7/M8 partial, implemented).

City → Public offices → Joint realm production office lets a supplied federation of up to four independent founding homes nominate a named existing member owner. Every home must supply Public offices, Regional institutions, Constitutional design and the existing civic services. The proposer pays only its own twelve food and six timber; every affected lawful embodied owner separately funds their local election bill. All consents precede three existing delegates working three full local voting days in every home. Every actual local majority must approve. Ratification grants no access until the exact nominated character separately accepts within three shared days.

The accepted office lasts seven shared days, bounded by the original compact expiry. A shared day uses the slowest participating local day. The governor can inspect consenting warehouses/workforce/producers, adjust existing producer staffing and recipes, apply ordinary local production plans, and adjust an existing stock target within its owner's ceiling. Review coordinated realm production applies two to eight producers across at least two consenting homes atomically against current world, office and producer revisions. It checks every local workforce and ordinary due-work/rights gate before changing any home. Stock, residents and workers remain local; production, meals, input use and previously funded queues remain real.

Each affected home permits three realm orders per shared day and twenty-one over the term. A coordinated order consumes one action in each affected home, including the governor's own. Foreign single-home delegated production uses the same ledger. Ordinary owners retain their own local production authority. The role grants no construction, spending permissions, trade, research, military orders, title, family access or ability to delegate again. Existing input allowances, owner stock-target ceilings, pauses and spending totals remain binding.

Any consenting owner may revoke the whole office; the governor may decline or resign. Service loss suspends all shared access until local restoration, without extending the term. A changed named governor or signing owner, departed consenting member or ended source compact ends it. The source compact's safeguards survive lawful local succession; this personal production office needs fresh consent after a named holder changes. Newly admitted members gain no authority under an earlier election. Applied production and paid work continue after revocation or expiry. Cancellation of unfinished voting returns only each home's unspent recorded bill through normal congress storage/refund controls; completed election work stays spent.

This implements a bounded production role across separately owned homes. Other other realm offices, wider political forms/elections, negotiated sovereignty, broader campaigns, useful major-water operation and the remaining original acceptance gates stay open. The full M0–M8 plan remains active. See player controls, technical custody and interface.

Earlier scoped realm-office acceptance: 598 distinct selected cases across 55 files pass, including twenty-one office boundaries and two portable journey cases; this is not the whole repository suite. The exact prior congress closing continues through 988 normal setup events with finite iron/tool production, independently accepted physical trades, Public offices courses/adoption, natural founder death and lawful existing-kin handover. No stocks, people, health, knowledge, terrain or extra time were granted and earlier branches remain separate. Twelve actual served command/time events, eight commands and 96 320/390/640/1440-pixel layout checks prove three separately funded local majorities, separate acceptance, three atomic three-home mill orders, daily draft blocking/reset and member revocation. Whole independent replay/restore, read-only review dismissals, foreign privacy boundaries, reload and a later session pass.

The actual next day consumes two home logs and makes two timber; two other mills correctly produce nothing because their logs are exhausted. The manager displays those real blockers. Six timber of local civic upkeep in each home still reduces net stock, and the founder home's current food output is two below daily meals. This finite acceptance certifies authority and management, not an indefinitely sustainable economy. Twenty-three earlier closings restore, with only two already accepted historical empty waterworks 42→43 migrations; nine earlier fixture hashes are unchanged. The new portable manifest ../test/fixtures/earned-realm-offices-journey.manifest.json pins the exact preceding congress fixture and closing. Nothing was staged, committed, pushed or deployed. The full original M0–M8 goal stays active.

Earlier congress delivery: federation admissions and shared safeguard amendments (M4/M7/M8 partial, implemented).

A ratified compact now supports City → Constitution & authority → Federation congress. With supplied Regional institutions and Constitutional design in every affected home, a member can invite another independently governed founding community, up to four homes, or propose changed shared food/civilian/timber safeguards. Every affected lawful embodied owner separately consents and pays twelve food and six timber above local reserves and within their own allowance. The proposer funds only its own bill. No delegates begin until all owners accept; then each home assigns three existing workers for three complete local workdays. Every actual local majority must approve, all constituencies must be represented, final policies must conform and each original signer must still hold lawful authority. Research, offers and consent alone grant no membership or amended authority.

Admission adopts the current compact terms. Amendments support whole food floors of 3–14 days, civilian minima of 12–40, and daily public timber ceilings of 6–20; jointly paid relaxation can return to the founding minima. Each home's current policy must conform before proposing or consenting. Congress never changes local policy automatically or bypasses a civic council's required paid assembly. Existing safeguards bind throughout deliberation; the original twenty-eight-shared-day compact expiry stays fixed. Independent titles, populations, warehouses, armies, constitutions, succession and private estates remain local. Passage, taxes and production appointments retain their separate agreements.

A congress offer lasts three shared days and funded work at most ten, bounded by the original term. A shared day is the longest founding/participating local day. Missing services, changed signing authority or unavailable labor releases delegates and restarts the unfinished full day. Membership/term changes supersede unfinished proposals. Decline or cancellation releases all jobs; each warehouse receives only its own unused bill, with completed work retained as spent and a full warehouse holding its own refund. An admitted home may give seven shared days of exit notice, bounded by the original term. It stays bound until that deadline while the founding communities retain their compact. Either founding owner's original exit ends the whole group; expiry issues no free renewal or policy reset.

Current earned acceptance continues the exact separate previously served compact closing. It records 2,090 ordinary preparation events: rightful third founding, a second food plot, actual forestry/milling, a smithy and kiln, finite imported iron, forged tools, independently accepted physical food-for-timber trades, paid research/adoption and a fresh paid founding compact. Normal old age remains; existing populations are 39/39 and the new home 40. Fifteen actual served events then prove separate three-owner consent, nine delegate workdays, three actual majority ballots, a jointly paid amendment and the exact admitted-member exit. 64 responsive checks at 320/390/640/1440 pixels, cancelled read-only reviews, consecutive reloads, later guest session and exact whole replay/restore pass. The portable fixture embeds the original source closing bytes and pins the unchanged earlier compact fixture; branches and stock are never merged. The four-home bound is implemented; this earned served journey exercises three homes.

The original M0–M8 goal remains active. Other other realm offices, wider political forms/elections, sovereignty and other outstanding original acceptance gates remain open. This finite three-community congress journey certifies no indefinite economy or complete realm government. See player instructions, technical custody, interface, plan and implementation status.

Earlier scoped congress verification: 527 distinct selected cases across 48 files pass, including 21 congress boundary cases and two portable journey cases; this is not the whole repository suite and repeated runs are not counted. All 64 served layout checks pass. Twenty-two prior saved closings restore exactly apart from the two already accepted historical waterworks 42→43 empty-custody migrations; eight prior fixture hashes remain unchanged. Nothing was staged, committed, pushed or deployed. The full original M0–M8 goal remains active. Current evidence is .qa-city/federation-congress-final-verification-attempt1.json and .qa-city/gameplay-acceptance-audit-attempt16.json.

Preceding political application: founding civic federation compacts (implemented; congress above extends membership and safeguards).

Current selected verification: 504 distinct passing cases in 46 files, including eighteen federation cases and two portable earned-journey cases; this is not the full repository suite. The current two-owner served City journey passes forty-eight responsive checks at 320/390/640/1440 pixels, including the binding workforce control, cancelled reviews, exact ratification/exit, reload/later session, whole replay and restore. The portable fixture retains the first accepted eight-event served replay; later served runs use their own command IDs and remain separate. 21 earlier branch closings restore, with only the two already accepted historical waterworks 42→43 empty residue-custody migrations; all seven prior portable fixture byte hashes remain unchanged. Syntax, wiki build/check and the staged coverage command pass with an empty Git index. Current continuation is pinned in .qa-city/civic-federations-goal-handoff.json; no original milestone is marked complete.

In City → Constitution & authority → Civic federation compacts, two independently governed founding communities can jointly ratify common safeguards: at least three household food reserve days, at least twelve civilian workers before new recruitment, and at most twenty public timber per local day. Each retains its own founding charter, land, warehouse, army, local constitutional rules and succession. This is a finite shared policy arrangement; sovereignty, pooled property, compulsory taxes, transit and production appointments are not granted by the compact.

Both communities need active Constitutional design, Courts, Civic representation, Record keeping and Public accounting, a sound dry commons and staffed registry, met needs, 65 health, compliant current policies and three available existing delegates. Each owner uses separate fresh reviewed consent and pays twelve actual food and six timber from their own warehouse/public allowance. The offering owner reserves only their local bill; acceptance pays the invitee's bill and starts two local three-whole-day conventions. Existing food workers, other producers and household/civic workers each have one visible vote. Each local majority needs two votes and all three represented constituencies; actual reserves, timber and workforce determine support. Both must approve, and both communities must still satisfy the common terms and retain their signing lawful officeholders, before joint authority activates. Research, proposal and acceptance alone enact no safeguards or new residents.

The shared day is the longer of the two local village days. Offers expire after three shared days; unfinished conventions expire ten shared days after acceptance. Worker/service/commons loss releases delegates, retains actual supplies and restarts the unfinished full local day when support returns. A changed signing officeholder pauses unfinished consent for cancellation; a successor inherits no uncast vote. Either owner can close unfinished work. Each warehouse recovers only its own unused bill; a full warehouse retains that refund for later collection rather than discarding foreign supplies. Completed work remains spent.

Ratified safeguards bind both ordinary edits and paid assembly proposals for twenty-eight shared days. Stricter local policies remain possible under their existing steward/council authority. Institution loss and lawful succession do not erase the ratified obligation. Either current lawful owner can give seven shared days of exit notice; safeguards continue until that notice or the existing term ends. Expiry/exit preserves local settings and all titles and does not issue free renewal. One open or active compact per community bounds overlapping jurisdiction. Federation congress above now implements jointly funded admissions and safeguard amendments. Other realm offices, monarchy, republic, merchant councils, wider elections and negotiated sovereignty remain planned.

The ordinary earned branch continues the exact separate civic Dialogue closing. 393 normal events, using default 100 ms construction work and no stock, population, knowledge, health, terrain or timing grants, obtain timber through actual harvesting/milling, barter finite tools, research/adopt the three advanced political topics in both communities and set lawful local policies. Its actual two-owner served journey separately reviews/cancels and confirms proposal, acceptance and exit, completes both paid votes and reaches the exact exit deadline. Forty residents and twenty-four civilian workers remain in each community; closing food and timber are finite. This does not certify indefinite supply or the fully assigned regional-capital branch. Portable evidence is test/fixtures/earned-civic-federations-journey.json.gz; the full original nine M0–M8 milestones and fourteen acceptance scenarios remain active. See player guidance, technical reference, implementation status and the plan.

Current military application: supplied ram expeditions, real garrison contact and temporary occupation (M4/M5 partial).

The paid declaration stage now leads to a separately reviewed physical expedition in City → Defense → Supplied siege expeditions. After the full twenty-four real hours of notice, the founding owner needs at least four existing trained, fit soldiers at home, four additional available civilian engineers, one actual stored covered ram and sufficient real meals. Active Drill, Campaign planning and Siege engineering, met needs and at least 65 health are required. A staffed mason workshop and barracks support those services. Structural engineering is required for fabrication, not continued field duty. No second army, recruits, equipment or remote supplies are granted by deployment.

The ram and baggage walk with the existing army for up to eighteen hexes each way. Each engineer carries at most thirty weight: the ram weighs twenty-four, and all engineer meals and extra army food count. Meals cover both walking legs, a maximum twenty-four real hours of duty and one local day of return reserve. Soldiers carry their normal four-day capacity; co-located engineer baggage physically tops it up. Household demand excludes the actual travelling people and records their consumed travel food once. Existing wages and known soldier age horizons must cover the whole quoted trip. Third-party military passage must explicitly name siege expeditions; relief, trade, combined relief/trade and allied-watch permission do not authorize this purpose. Fire and recorded basin floodwater hold actual travel while carried meals continue to be eaten.

Only actual stationed soldiers defend the fort. Contact uses their real equipment, morale, wounds, formations and available volleys, with a condition-scaled fort bonus of two for a tower, four for a keep or six for a castle. Ties hold for the defender. Defeat can permanently kill actual residents and lose their kits, ammunition and carried food; existing professional refunds, cohorts and birth-linked mortality remain authoritative. Defeated survivors withdraw along their physical garrison route. An empty fort has no invented defending army. This first application is a bounded contact/ram mechanic; wider battle commands, siege weapons, civilian raids and negotiated territorial settlement remain open.

Four engineers, the real army and held ram apply supplied pressure in complete two-real-hour intervals. Each interval damages up to eight fort condition points, capped at a breached condition of twenty-five, and wears the attacking force. A sound hundred-condition fort therefore needs twenty real hours to breach. Review temporary occupation is offered only after at least twelve real hours of recorded pressure, a breached fort and no holding defender. Separate confirmation grants up to four real hours of temporary military custody within the existing twenty-four-hour duty deadline. Original warehouse, public office, tax, charter, family and legal ownership rights remain. Occupation blocks structural work while held and changes no civilian population.

Review siege recall, lost support/readiness, ended war, finite duty/occupation expiry or an exhausted force ends hostile duty and returns the army and engineers physically. Accepted truce or declaration withdrawal ceases duty immediately. Four engineers stay assigned until home even if the last soldier dies. At return, people are released; full storage retains actual cargo without workers. An unused whole ram returns whole. A used ram is dismantled into six timber and two iron, deliberately preserving only partial salvage instead of restoring worn equipment to a new pooled ram. Consumed meals, notice costs, fatalities and wear remain spent. Reuse requires normal materials and new fabrication.

This extends the previous notice-only checkpoint below. The earned continuation starts directly from its actual closing, forges tools, obtains finite iron by real barter, admits two real migrant households, crafts four kits and trains four residents, then pays a fresh declaration and serves its notice. The defender independently learns Drill/Scouting, builds/staffs its lodge, imports iron and trains two residents. Eighty-one normal setup events use no stock, population, knowledge, health, terrain or timing controls. Selected current verification passes 409 distinct cases in thirty-eight files, including twelve siege cases and two portable earned-journey cases. This is not the full repository suite. Forty-eight actual served responsive checks at 320/390/640/1440 pixels cover separate owner reviews, defender arrival/contact/death, pressure, temporary occupation, physical return, later session, exact whole replay and restore; all helper servers stopped cleanly. Twenty separate prior branch closings restore with only the two already accepted historical waterworks migrations, and all six prior fixture byte hashes remain unchanged. The portable earned-territorial-siege fixture pins eighty-one normal setup and forty-five actual served events. The longer real journey also crosses Elara’s existing old-age boundary: the attacker closes at thirty-nine residents with all four soldiers home, the defender at thirty-nine after one actual field casualty. This natural household death is preserved independently of military losses. Current acceptance and next work are pinned in .qa-city/territorial-siege-goal-handoff.json. The full original M0–M8 goal, nine milestones and fourteen acceptance scenarios remain active.

Previous notice-only checkpoint: targeted declarations, protection and truce (extended above).

After actual Siege engineering research/adoption, the founding owner can separately declare a disputed-control claim against an existing foreign watchtower, keep or castle. Active Record keeping, Campaign planning and Siege engineering, met household needs and at least 65 health are required. The reviewed single-line claim is 12–240 characters. Four food, four timber and one tool pay the complete notice immediately, above household food reserves and within the public timber ceiling. Declaration uses two existing account attention points. The claim records the owner's position; it is not a court judgment or legal entitlement.

The declaration gate derives seventy-two real hours of starting-estate protection from the actual founding charter time. A protected family cannot declare offensively. City → Defense shows the calendar deadline and a separately reviewed, irreversible early exit; no hostile order silently accepts that loss. Distant outpost fortifications and actual imported allied armies physically at a starting fortification are outside that estate protection. An invitation or outward march is not an imported army. The exemption records real unit/agreement/arrival custody; it creates no soldiers or rights. Broader NPC territorial wars and direct raids remain planned, so protection is currently enforced at this live declaration gate.

Both families see the selected fortification, recorded claim, paid bill and identical dates in City → Defense → Incoming and outgoing notices, with an actual Defense briefing. The first siege preparation notice lasts twenty-four real hours independently of the four-hour village day; the notice expires after seven real days. The label changes to “notice served” only at the exact deadline. Lost instruction does not rewrite accepted dates. One live outgoing declaration per founding community and one live notice per target prevent duplicate spending. No unit, equipment movement, damage, title or public office is granted.

The declaring owner can withdraw without a refund. Either owner can offer a truce lasting at most twenty-four real hours and ending no later than the original notice expiry. The other owner separately accepts or declines; the proposer can withdraw an unanswered offer. Acceptance requires the same proposing character to remain active, ends the declaration and transfers no property. Earlier declined, withdrawn and expired offers retain their receipts, with at most sixty-four earlier offers plus the latest one. Replies need fresh world and declaration revisions and lawful founding-community authority, but ending a notice does not require keeping its optional instructors active.

The earned continuation begins at the pinned covered-ram closing, resumes previously paid Record keeping, pays Campaign planning adoption and founds a real second community which builds/staffs its tower. Twelve normal-timing setup events and eight actual served events use no inventory, population, knowledge, health or terrain grants. The defender explicitly exits protection; the attacker pays the claim, both exact 24-hour boundary points are exercised, and separate owners decline, re-offer and accept a truce. Twenty-eight responsive checks at 320/390/640/1440 pixels, read-only review dismissal, owner reload/later session, exact independent replay and restore pass. The portable earned-war-notice fixture pins this continuation and its unchanged original earned-ram dependency.

Selected previous notice-checkpoint verification: 345 distinct cases in thirty-one files passed, plus twenty-eight served responsive checks and restoration of nineteen separate prior branch closings. Seventeen prior closings restore unchanged; two historical waterworks saves receive only the already accepted 42→43 empty residue-custody migration. All five prior portable fixture hashes remain unchanged. This is a selected run, not the full repository suite; reruns and earlier served attempts are not counted twice. The original full goal stays active. Current notice/truce evidence and the next actual deployment/pressure/occupation work are pinned in .qa-city/war-notice-goal-handoff.json.

This supersedes earlier “all declarations planned” descriptions. The physical deployment, supplied pressure, real defender contact and reviewed temporary occupation described above now extend this notice-only checkpoint. A paid notice or manufactured ram does not complete the Siege engineering military application. The full original M0–M8 goal, nine milestones and fourteen acceptance scenarios remain active. Preserve separate prior branches and continue from the recorded notice/truce branch rather than combining their stocks. See implementation status, player guide and technical reference.

Current implementation: covered-ram fabrication under Siege engineering (M4/M5 partial).

Siege engineering follows Structural engineering and Campaign planning at a staffed mason workshop: ten practice days, four research days costing twelve timber/four iron/twelve food/two tools, then six timber/one tool for first adoption. One supplied existing specialist consumes one food per village day. The topic has real equipment production and the separately reviewed declaration/protection/truce gate described above. The supplied physical deployment, pressure and temporary occupation above are now implemented; territorial ownership settlement remains planned.

In City → Defense → Covered ram fabrication, choose a sound, dry, staffed mason workshop. Keep Structural engineering and Siege engineering active, a sound staffed lumbermill and smithy available, household needs met and health at least 65. Four additional existing workers need three full village workdays. The entire bill is twelve logs, eighteen timber, six iron, three woven cloth, three tools and twelve food, protected by actual stock, household reserves and public material ceilings. Each completed day spends exactly one third. Lost services, workers or workshop availability release the crew and restart the interrupted day when restored; the original unspent bill remains held. Cancellation returns only unused supplies once, when the complete refund fits. Completed work stays spent.

Completion creates one whole covered ram, held safely without workers until home storage has room. Its actual carrying weight is twenty-four units on existing physical trade/outpost routes. Receiving or transporting equipment grants no knowledge, soldiers, attack order, occupation or title. Old saves retain absent siege custody; paid adoption creates only an empty marked ledger. Assembly inputs/output and carrying weight are checked by the live dependency catalog and shown as a separate three-day paid project in Supply chains, never as automatic daily production.

The normal-timing earned branch replays 1,993 actual setup events from the original founding package. Forestry, milling, finite barter, a physically supplied worked stone outpost, stone dressing/house salvage, charcoal/tool forging and flax/yarn/cloth production fund its institutions and supplies. Temporary industries occupy and later release actual charter plots through paid demolition/salvage. Eight existing residents move to the outpost, leaving thirty-two at home. Wheat keeps its supplied Seed selection specialist; the unused Drill instructor is released before fabrication. The ten-event served City flow cancels a read-only review, refunds one partially worked order, then funds, pauses, resumes and completes another without a second bill. It passes twenty-four layout checks at 320/390/640/1440 pixels, owner reload/later session, independent whole replay and save restoration. The closing retains one ram, 1,058 food, 44 timber, 116 logs, four cloth/four iron and 2.25 tools with the food crop and both engineers active. The earlier depleted-food harness remains a separate superseded attempt and is not this acceptance branch.

The portable test/fixtures/earned-covered-ram-journey.json.gz stores the original opening, complete setup, actual served commands and exact closing; its manifest pins both compressed and raw bytes. Unit coverage also includes actual physical delivery of the produced ram to the owned outpost, protected reserves/budgets, stale/foreign authority, partial refunds, service interruption, declared full-storage boundaries, offline catch-up and malformed custody rejection. A new indefinite material economy or a military siege is not certified by this finite equipment journey.

Prior covered-ram checkpoint verification: 312 distinct cases in twenty-seven files passed, plus twenty-four served responsive checks and restoration of eighteen separate prior branch closings. Sixteen prior closings restore unchanged; two historical waterworks saves receive only the already accepted 42→43 empty residue-custody migration. Four prior portable fixture hashes remain unchanged. The full repository suite is not claimed, and superseded harness/reruns are not counted twice. The original M0–M8 goal stays active; evidence and next siege deployment/notice/pressure work are pinned in .qa-city/siege-goal-handoff.json.

Current catalog: 44 buildings, 56 technologies across six branches, 32 workshop recipes and 92 resources, plus the separately funded covered-ram assembly project. This supersedes older absent/planned equipment descriptions and checkpoint counts below. The Siege engineering application remains partial until physical deployment, engineers and military supplies, lawful declaration/target protections, existing real 24-hour war notice and at least 12-hour visible pressure before major occupation work together. All nine M0–M8 milestones and fourteen original acceptance scenarios remain active; no broader milestone is completed here. See primary design, implementation status and player guide.

Implemented: paid Combined formations within an existing professional force (M4/M5 partial).

Combined formations follows Formations and Archery at a staffed barracks. It needs ten practice days and four research days with twelve timber/twelve food/two tools; first adoption costs six food/one tool. One existing coordinator consumes one food per local day. Adoption creates only empty marked custody and grants no people, gear, combat result or land.

Separately prepare two bow-equipped members and the remaining infantry line inside one existing four- or six-person, fully advanced, funded professional infantry. The two-day drill reserves eight food, one tool, two manufactured/imported bow kits and twelve actual arrows. The tool is spent immediately; four meals are spent after each full successful home day. All soldiers must be unwounded, at least 80 condition/morale and at most 20 fatigue, with active Drill, Standing service, Formations, Archery and the coordinator, met basic needs and at least 65 health. Pauses restart the unfinished day without another equipment bill. Existing military people, civilian labor, wages, family history and physical travel remain authoritative; no separate army is created. A prior simple formation is replaced and its earlier cost remains spent.

At actual contact, fit line members receive their existing 25% infantry role factor. Fit bow members receive 50% only with a complete volley of two real arrows each; otherwise their factor is one. These roles are weighted by the actual unwounded headcount. Two fit members of each role are required for coordination; wounds reduce bow availability first. Open fields or woodland below 45% cover add 10% to the firing formation; moderate woodland at 45–69% applies a 15% penalty. Dense cover, fire, inundation, fatigue above sixty, condition/morale below fifty, missing instructors, unpaid service or insufficient ammunition prevent coordinated fire. Patrol/relief contact spends a complete volley once. Actual guarded or escorted crossings conserve arrows if the ordinary line already deters that crossing. Quotes never fire or grant protection remotely.

Reload combined quivers only at home from real stock, up to six arrows per surviving bow member. Existing pure-archer field/depot supply is unchanged; mixed remote ammunition delivery remains outside this first application. End the detachment at home before reinforcement, professional role change or demobilization. Unfinished drill returns unused meals and both held bows; fitted bows return as whole items rounded down by actual equipment condition. Surviving arrows return in full, with an all-or-reject storage check. Fallen bow members lose actual bows and up to six arrows each. Existing dated combat/birth-linked death receipts pin the distinct equipment losses. If every member dies before fitting, unused home drill supplies remain explicitly recoverable, rather than disappearing or being credited into a full store.

The ordinary 840-event setup independently replays from original founding supplies with default 100 ms construction, actual woodland harvest/milling, finite barter, bow/arrow manufacture, barracks research/adoption, four real soldiers and twenty-eight reserved wage coins. Its twenty-event served City flow completes paid drill, instructor pause/fresh-day resume, a physical patrol and exact home return. Actual camp cover is dense, so this earned patrol correctly fires no arrows. The separate declared-open-camp branch verifies actual four-arrow firing and paid home loading; its terrain change is disclosed and its stocks are never merged with the earned branch. Each flow passes twenty layout checks at 320/390/640/1440 pixels, canceled read-only reviews, consecutive authenticated owner reloads, exact independent replay and whole-save restoration. All owned servers stopped, including the first harness title-case mismatch.

Current scoped verification is 239 distinct cases in twenty-one files: twelve combined cases, two portable earned-journey cases, 133 retained military/birth/service cases in nine files and 92 catalog/City/supply/population/knowledge/attention/preserved-branch cases in ten files. Duplicate repair/reruns are excluded; this is not the full repository suite. Controlled unit inputs cover terrain, severe readiness loss, storage and a synthetic terminal-death callback. That callback tests held stock custody, not a playable training battle or a complete new birth-to-old-age journey. The portable earned fixture preserves the original opening, all setup and served commands and exact closing without reading disposable QA data.

Combined-formations checkpoint catalog: 44 buildings, 55 technologies across six branches, 32 recipes and 90 resources. Combined formations supersedes its older planned/absent descriptions below. Siege declaration/deployment/pressure is the next unfinished part; the current equipment stage is described above. Wider mounted/political/realm scope, disasters, compulsory taxes, indefinite regional supply and useful permitted reservoir operation/maintenance/removal remain open. All nine original M0–M8 milestones and fourteen acceptance scenarios remain in the active goal. The finite earned closing has forty people, twenty civilian workers, four existing soldiers, 832 food, 49.5 timber, 29 logs, no tools, three bows and sixty-four arrows; communal coins remain fifty-two. The infantry wage term is finite and subsequent fitting/refit needs real tools/iron. No broader milestone is marked complete.

See implementation status, primary living-world design, and player guidance. Evidence is pinned in .qa-city/combined-goal-handoff.json; the preceding Dialogue, constitutional, court, regional, pressure and recovery branches remain separate and preserved.

Implemented: first voluntarily funded Interfaith and civic dialogue application (M4 partial).

Interfaith and civic dialogue follows Scholarship and Civic representation at sound commons. It needs ten practice days, five research days with fourteen food/ten timber/one tool, then separate four-food/four-timber adoption. One existing mediator uses one food each home day. Both founding communities also need active Literacy, Scholarship, Civic representation and Record keeping, a sound dry staffed school/registry and met household needs with at least 65 health. Research and adoption alone grant no consent, remedy, visit, coin, population, policy or belief effect.

The first mediation application concerns an actual missed cultural or pilgrimage exchange visit. During that sender’s seven-day retry wait, its lawful embodied founding owner may offer one to twenty earned communal coins to the other community and reserve six food/four timber locally. A three-day offer starts no delegates and charges the invited owner nothing. That owner separately reviews acceptance, pays its own six-food/four-timber bill and chooses philosophical or faith-supported local dialogue. Both sets of two existing delegates then complete two full local discussion days. The two traditions have identical costs and effects; each owner retains their own choice.

Compensation transfers from held funds to the invited community’s communal treasury only after both sessions finish. Completion waives only the offering sender’s retry wait for that exact missed promise. The original pact stays unfulfilled and its actual visit history stays unchanged. The other sender’s wait and any later missed promise remain separate. A new exchange still requires fresh consent and paid physical visits; no guest access or successful visit is invented. This is voluntary mediation, not a court judgment, compulsory tax or removal of private disagreement.

Local service, damage, needs or labor loss releases only the affected delegates and restarts their unfinished full day. A finished local side releases its delegates while compensation waits for the other side. Both sessions must finish within ten offering-community days after acceptance. Either owner may withdraw; offer expiry, withdrawal or the work deadline returns held coins to the sender. Completed work remains spent. Each community’s unused materials return only when its own warehouse fits the full bill; otherwise they remain held safely without workers or forced loss. Only that local owner can explicitly accept its own overflow loss. A later safe storage check or reviewed collection returns the bill once.

City → Knowledge & community → Civic dialogue exposes eligible missed promises, compensation/tradition selection, separately paid fresh reviews, both local progress/cost histories, interruption/deadline, withdrawal and held refunds. Workers separates dialogue delegates; Supply chains lists the conditional real local bill, while Regional overview links invited consent, local interruption and refund-space issues. Public chunks omit private terms; production stewards receive no dialogue records or controls.

Paid adoption adds only civicDialogueVersion:1 and an empty version-one book. Legacy absence remains absent. Marked restore validates exact source-pact facts, both actual founders/issuers and adoption chronology, sequential records, held/paid/returned whole coins, actual local supplies/work/clocks/refunds and orphaned jobs. The coin-market conservation equation includes held compensation. Referenced old pacts remain retained and unfulfilled. World/simulation three and major-waterworks 43 remain unchanged.

Current scoped verification: 294 distinct cases across twenty-four files: twenty-two dialogue cases, two portable ordinary earned-journey cases and forty-six catalog/navigation/founding cases in five files; 112 retained coin/ethics/scholarship/civic/constitutional/pilgrimage/performance/continuity cases in eight files; and 112 integration/preserved-branch cases in eleven files. Duplicate reruns are excluded; the full repository suite is not claimed. The previous summary counted the integration files as twelve; the actual selected log contains eleven, and its 112 passing cases are unchanged.

Ordinary earned acceptance: An 862-event setup replays exactly from the original world opening using normal 100-millisecond construction work units and four-hour village days. Two actual founders use only their ordinary packages, paid selective harvest/precision sawing, finite tool barter, paid institutions and real research/adoption. One village grows flax, spins yarn, weaves cloth and physically trades two cloth for one tool under both owners’ consent. It then completes a paid pilgrimage trip, a real host stay and physical return; the offering village misses its reciprocal visit at the actual fourteen-day deadline. No materials, knowledge, people, coins, terrain, damage or accelerated construction are granted.

The separately served seven-event City flow from that earned opening verifies both owners’ actual local payments, independent faith-supported/philosophical traditions, held compensation, no early payment, actual mediator suspension and fresh-day resumption, exact source-promise remedy, owner reloads, a later private session, whole replay/restore and twenty responsive checks at 320/390/640/1440 pixels. The mobile paid-history screenshot was inspected and the server exited cleanly. Each community spends six food/four timber; four existing communal coins move from the sender’s twenty-four to the recipient, leaving twenty/four and NPC treasury 1176. The original recipient visit and unfulfilled pact remain unchanged. Both communities retain forty residents, twenty-four civilian workers, full needs and positive staffed wheat food balances.

Earned evidence is pinned in .qa-city/dialogue-earned-goal-handoff.json, .qa-city/dialogue-earned-opening-attempt7.json and .qa-city/dialogue-earned-browser-YviiBP/evidence.json. The portable test/fixtures/earned-civic-dialogue-journey.json.gz includes the original opening, all setup commands, the earned ready state, actual City commands and closing; its manifest pins compressed/decompressed hashes. Regression tests independently replay the entire setup and the served custody sequence without reading disposable QA files. The prior declared-material/previous-pilgrimage-adoption/one-millisecond-setup branch remains separate and preserved in .qa-city/dialogue-goal-handoff.json. No stocks or branch states are merged.

This verifies the finite optional mediation journey. The earned closing has 32.5 sender timber and 19.5 recipient timber, no stored logs or tools, with four spare recipient cloth and the existing source manuscript retained. Record keeping and Scholarship still consume two timber per community day; remaining owned woodland and actual milling/imports must be supplied before those services exhaust this buffer. Food is sustainable at the present population and active staffing, but indefinite institutional supply and every geographic starting choice are not certified. At that dialogue checkpoint Combined formations was next; it is now implemented above, and Siege engineering remains open; all nine original M0–M8 milestones and fourteen scenarios remain in the active goal.

The current earned handoff preserves all prior controlled and earned branches and audits all nine original milestones and fourteen scenarios. Historical controlled application evidence remains labeled as controlled; ordinary earned dialogue acceptance is now supported above. See implementation status, plan, player guide and technical reference.

Preceding Dialogue catalog: 44 buildings, 54 technologies across six branches, 32 recipes and 89 resources. Dialogue now has a functional voluntary mediation application. Combined formations is now implemented above; Siege engineering remains a named gap. Wider doctrine/shared institutions, mounted/political/realm progression, compulsory taxes, disasters, indefinite regional supply and useful permitted reservoir operation/maintenance/removal remain open. The full original M0–M8 goal remains active; this finite earned mediation journey completes no broader milestone.

Implemented: Scriptural/philosophical scholarship, manuscript preservation and physical commentaries (M3/M4 partial).

Scriptural/philosophical scholarship follows Literacy, cultural Scholarship and Ethical teaching at a staffed scriptorium: ten practice days, four research days with twelve food/twelve timber/one tool, then separate four-food/six-timber adoption. One existing scholar consumes one food/one timber each home day. Research/adoption alone create no text, public promise, belief conversion or population. The community owner separately chooses philosophical or faith-supported discussion of Fair earnings or Civilian care. Both traditions have identical rules. Discussion holds one actual Ethical teaching manuscript, reserves nine food/six timber, and assigns two existing readers for three full home workdays. Each completed day consumes three food/two timber. Completion returns the original manuscript and stores one whole matching commentary; two whole storage units are needed for the pair. The source is preserved, not multiplied or spent. Further copying, physical trade or instruction remains separate.

Instruction and discussion require their actual teachers, scholar, dry sound commons/school/scriptorium, met needs, at least 65 health, existing workers and paid resources above reserves/budgets. Service, damage or labor loss releases readers and restarts only the unfinished full day. Completed writing stays spent; the preserved source and finished commentary wait together in custody if storage is full, with readers released. Cancellation returns unused resources and the original source once, including a finished commentary if one already exists; storage overflow requires explicit consent. A text remains a physical good, not an automatic policy or permanent abstract research score.

A separately reviewed Ethical teaching course can optionally hold one matching commentary with its ordinary eight-food/four-timber bill and two students. Active Literacy must remain supplied while reading. At two-day completion the whole commentary is consumed and the chosen promise binds new founding-community orders for twenty-eight home days. Ordinary instruction needs no commentary and keeps its original fourteen-day cost and behavior. Cancelling unfinished reading returns the whole held commentary and unused food/timber; completed promises cannot be cancelled or replaced before expiry. The same Fair earnings levy/allowance/morale rules and Civilian care food/workforce guards apply. Prior signed wages, troops, constitutional authority and private beliefs remain unchanged; completed promises survive service loss and succession.

Whole ethicalCommentaryFair and ethicalCommentaryCare goods use the existing cargo, weight, capacity, reservation, route and storage rules. A command-level two-founder journey trades the original source and commentary in separately consented physical trips. The recipient cannot act before delivery, then separately pays manuscript study, local Ethical teaching adoption and their own chosen twenty-eight-day course. They need Literacy and Ethical teaching, not a free grant of the producing community’s Scriptural/philosophical scholarship. A faith-supported source discussion can support the recipient’s philosophical instruction without converting anyone.

City → Knowledge & community → Texts & scholarship shows real scriptorium/tradition selection, fresh paid quotes, source custody, readers, whole-day progress, interruptions, cancellation and private history. Ethics & public promises offers an explicit matching-commentary checkbox, actual item cost and fourteen/twenty-eight-day duration. Workers lists manuscript readers separately. Supply chains trace actual source copying, paid discussion and later optional instruction, explaining that the original source is held and returned. Public chunks expose only a job silhouette; producer delegates receive no discussion history or controls.

Paid adoption adds only scripturalScholarshipVersion:1 and an empty version-one book. Absent legacy saves remain absent. Existing ethical records retain their original shape and fourteen-day terms; newly funded commentary instruction carries nested instructionVersion:2, exact item custody and bindingDays:28. Protected payroll retains its original exact paid ethical source and frozen allowance. Restore rejects lost books, forged sources/materials/output, workers, clocks, incomplete or contradictory text storage and invented extended promises. World/simulation three and major-waterworks 43 remain unchanged.

Preceding scholarship verification: 382 distinct cases in thirty-two files: twenty-two Scriptural/philosophical scholarship cases and ten supply-chain cases in two files, 219 retained economy/politics/continuity cases in sixteen files, 123 military/population/City/education/trade/transport cases in eleven files and eight preserved-branch cases in three files. Duplicate reruns are excluded; this is not the full repository suite. The default-timing 306-event opening is command-earned, including real school/scriptorium construction, surplus-food waystation provision trips, tool barter, research/adoption and an actually copied Ethical teaching manuscript. No stock, people, coins, knowledge or terrain controls were added. Served Fair earnings and Civilian care flows verify actual paid discussion, preserved source, whole commentary, optional instruction, independent tradition choices, full replay/restore, consecutive private owner reloads and thirty-two responsive checks at 320/390/640/1440 pixels without page errors. The source/supply tree is read-only and opens the real scholarship controls. All owned browser servers stopped. Evidence is pinned in .qa-city/scholarship-goal-handoff.json; .qa-city/gameplay-acceptance-audit-attempt8.json preserves all nine original M0–M8 milestones and fourteen required scenarios. The full goal remains active.

The two earned served branches remain separate from earlier Ethics, Tax, Court, Civic, constitutional, regional and controlled mortality/recovery evidence. Original manuscripts remain real stock after writing; commentaries are spent only by later completed courses. Stocks and specialists are finite. New classes do not certify spare clerks in the fully assigned regional capital or indefinite economic sustainment. See status, plan, player guide and technical reference.

Preceding scholarship catalog: 44 buildings, 53 technologies across six branches, 32 recipes and 88 resources. The new religion topic and two physical commentary goods are functional. Dialogue is now implemented above; Combined formations and Siege engineering remain two named gaps. Wider doctrine, political and mounted scope, realm progression, compulsory tax, disasters and useful permitted reservoir operation/maintenance/removal remain open.

Preceding delivery: Ethical teaching and paid public promises (M4/M5 partial). The optional religion topic follows Record keeping at sound dry commons: six practice days, three research days costing eight food/six timber, then separate adoption costing four food/four timber. One existing mentor consumes one food/one timber each home day. Learning/adoption enact no pledge, conversion, money, health or morale grant. The lawful embodied founding leader separately reviews secular or faith-supported instruction for one of two public promises. Both traditions use identical consent, costs and effects; private beliefs are unchanged.

Instruction reserves eight actual food/four timber and assigns two existing students for two whole home days. Each completed day consumes four food/two timber. Only completion establishes a fourteen-day promise binding new orders in that founding community. Services, dry commons at least 65 condition, met needs, health at least 65 and actual labor are required throughout instruction. Interruption releases students and repeats the unfinished full day. Cancellation returns only unused supplies once, subject to storage or explicit overflow consent. Completed promises cannot be cancelled/replaced before expiry; they survive mentor/service loss and succession. Broader community belief, doctrine, interfaith and realm effects remain planned.

Fair earnings protects the first four gross coins per person in new stipend or military pay terms and caps new levies at a quarter. Seven-day quarter terms collect zero; fourteen-day terms collect two whole coins per person. Military quarter consent needs 82 morale and spends two points. Existing signed terms retain their original allowance and rate, including half levies. Newly signed protection is recorded with its paid course and stays in that finite pay term after the promise expires. Civilian care requires new recruitment or reinforcement to leave twenty existing civilian workers and requires new recruitment, reinforcement, office stipends or professional pay to begin with four household food days in actual food stock. Existing troops, signed wages and funded work retain their obligations. The promise cannot bypass stricter reserves, council policy bindings, budgets, readiness, equipment, age or lawful succession.

City → Knowledge & community → Ethics & public promises displays separate traditions, fresh quoted eligibility, exact material/student costs, actual pending progress, interruption/cancellation, current binding and private history. Tax & public receipts, stipend reviews and military pay show each term's real frozen allowance and consent. An unavailable course shows a reason; the owner chooses whether to commit. Producer delegates/public chunks do not expose beliefs or course details. Paid adoption adds only an empty version-one ethical book/marker; legacy absence stays absent. Restore validates cost custody, jobs, labor, whole-day clocks, earned completion, chronology and the exact source of protected pay. World/simulation three and major-waterworks 43 remain unchanged.

Preceding Ethical teaching verification: 305 distinct cases in twenty-four files: eighteen Ethical teaching cases, 201 retained economy/politics/continuity cases in fifteen files, 78 military/population/City/attention cases in five files and eight preserved-branch cases in three files. Duplicate reruns are excluded; this is not the full repository suite. Both new default-timing openings are command-earned without direct stock, coin, population, knowledge or terrain controls and replay exactly from their original opening. Served Civilian care and Fair earnings flows verify paid reviews, read-only cancellation, actual pause/resume or military pay, complete save replay/restore and consecutive private owner reloads. Thirty-two responsive checks cover 320/390/640/1440 pixels without page errors. All three owned browser servers, including the first civic harness selector failure, stopped. Evidence is pinned in .qa-city/ethical-goal-handoff.json; .qa-city/gameplay-acceptance-audit-attempt7.json retains all nine original M0–M8 milestones and fourteen required scenarios. The full goal remains active.

The civic opening replays 79 actual events and its served course pauses with mentor loss, resumes a fresh full day, then binds Civilian care without changing the twenty-four original civilian workers. The military opening independently replays 360 actual events. Its served faith-supported Fair earnings course is paid to completion; suspending the mentor preserves the promise while saving optional upkeep. Four original troops then earn fifty-six gross coins in fourteen days, collect eight actual public coins and retain forty-eight private wage coins. Consent changes actual morale 100 → 98; communal coins finish at sixteen and the market treasury stays 1,136, conserving 1,200 total. Timber/iron/tools are finite; no indefinite sustainment or free clerks are certified. Earlier regional, tax, Court, Civic, constitutional, controlled mortality and recovery branches remain separate. See status, plan, player guide and technical reference.

Preceding Ethical teaching catalog: 44 buildings, 52 technologies across six branches, 32 recipes and 85 resources. Ethical teaching now has a functional local voluntary application. Scriptural/philosophical scholarship and Dialogue are now implemented above; Combined formations and Siege engineering remain named gaps. Wider religion, mounted service, politics, realm progression, compulsory taxes and permitted useful reservoir operation/maintenance/removal remain open.

Preceding delivery: Tax administration and consented payroll collection (M4/M5 partial). Optional registry-supported research follows Public accounting and Record keeping: four research days, twelve timber/eight food/one tool, then separate six-timber/four-food adoption. One existing tax clerk consumes one food/one timber each village day. Learning/adoption enact no tax or coin grant. Newly funded seven-day household stipends and seven/fourteen-day professional military terms offer no levy, a quarter levy or a half levy. Under standard terms, the first two gross coins per person in each finite term are protected; the paid Fair earnings promise described above gives newly signed terms a four-coin allowance. Cumulative whole-coin assessments collect only as actual pay is earned; seven days can collect one/two coins per person. A fourteen-day military term can collect three/six. No prior balance or inheritance is assessed.

The lawful owner reviews gross commitment, maximum collection, minimum net pay and fixed terms before funding. The embodied household officeholder agrees their own stipend terms. Standard military terms require 84 morale for quarter or 88 for half, paying an immediate four/eight morale cost. A current taught Fair earnings promise caps new terms at quarter, requires 82 morale and spends two points. Readiness, equipment, actual coins, operating budgets and existing physical military obligations still apply. Higher collection reduces private earned pay and military morale; it does not create troops, private wealth or recurring NPC income. Tax receipts move actual gross-pay coins into the same community treasury; its finite original 1,200-coin monetary conservation equation remains intact.

Collection requires active tax, accounting and record services at that instalment. A missed collection is permanently waived, with no later arrears or seizure of private balances. Existing stipend rules still cancel/refund unearned pay on office/accounting loss or death. Military wage expiry/physical return and home cancellation retain their original rules. Cancellation refunds only unearned gross wages; collected tax stays public and net earned pay stays private. Actual private net coins alone enter named-household wills and estate chapters. Existing untaxed contracts retain their accepted terms even if Tax administration is learned later. Written charters, council policy bindings and succession authority remain in force; these finite voluntary pay terms enact no compulsory tax ordinance.

City → Knowledge & community → Tax & public receipts explains allowances, clerk costs, consent and actual receipts, with links to Family & continuity and Defense & patrol. Their pay reviews expose all three collection choices and histories separate gross earned, private net and collected coins. Unavailable offers display current reasons. Owner/delegated privacy remains enforced. Paid adoption promotes only an empty taxAdministration:{version:1,contracts:{}} and coinMarket.payrollTaxVersion:1. Restore rejects lost contract terms/index, changed allowances/rates, forged clocks/receipts/net balances and invalid military morale consent; absent legacy saves remain unchanged. This adds a manuscript resource through the existing knowledge catalog, without changing world/simulation three or major-waterworks 43.

Preceding tax verification: 209 distinct cases in eighteen files: fifteen tax scenarios, 186 retained scenarios in fourteen files and eight preserved-branch scenarios in three other files. Duplicate reruns are excluded; this is not the full repository suite. Both independently command-earned default-timing openings replay exactly. The served stipend and military flows pass paid reviews, read-only cancellation, actual allowance/collection, whole-save replay/restore and consecutive owner reloads. Thirty-two responsive checks cover 320/390/640/1440 pixels, without page errors; all three owned browser servers, including the failed harness attempt, stopped. Evidence is pinned in .qa-city/tax-goal-handoff.json; .qa-city/gameplay-acceptance-audit-attempt6.json retains all nine M0–M8 milestones and fourteen original required scenarios. The full goal remains active.

The stipend closing has seven gross earnings, one permanently waived levy instalment, one actual public coin collected, six personal coins and eighteen communal coins. The independent military closing has four original troops, twenty-eight gross wages, eight actual coins collected, twenty private wage coins and forty-four communal coins; agreement initially reduced actual morale from 100 to 92. Both retain finite timber/tools/iron/logs and existing service obligations, not an indefinite reserve guarantee. The older main regional, pressure, Court, Civic, constitutional and controlled-mortality/recovery branches are preserved separately. See implementation status, plan, player guide and technical reference.

Preceding Tax administration catalog: 44 buildings, 51 technologies across six branches, 32 recipes and 84 resources. Tax administration delivers optional finite payroll collection, not compulsory land/trade/realm tax. Ethical teaching, Scriptural/philosophical scholarship and Dialogue are implemented above; Combined formations and Siege engineering remain named gaps. Wider mounted service/politics, realm progression and permitted useful reservoir operation/maintenance/removal remain open.

Implemented: Constitutional design's local written authority (M4/M7 partial). The fifty-topic catalog now supports paid research and separate adoption of a charter clerk, requiring Courts and Civic representation at a dry staffed registry. Neither learning nor adoption enacts a charter. A separately funded founding-community convention uses three existing delegates for three whole village workdays and pays twelve food/six timber above existing reserves and public/operating limits. Food workers, other producers and household/civic workers vote under visible reserve rules; two votes ratify the proposed arrangement and an eligible existing adult successor. Rejected work spends its actual bill and changes no authority. No resident, workforce, coin, title or supply is granted.

Two actual arrangements are available. A Steward charter permits ordinary lawful steward policy and succession orders, while preserving any existing seven-day assembly binding. A Civic council charter continues requiring paid assemblies for household food reserve, civilian recruitment floor and public timber-budget changes after those seven days. It also requires a paid three-day council succession appointment instead of direct nomination. A further paid convention may amend the arrangement. These are founding-community authority choices; wider monarchy, republic, federation, elections and realm constitutions remain planned rather than a ranked upgrade sequence.

Ratified authority persists through inactive specialists, institution damage and lawful public handover. A nominated adult does not automatically become ruler: embodiment and lawful handover remain separate. Under council authority, handover consumes that appointment and leaves a vacancy until another paid appointment. Death of a nominated successor does not grant an automatic replacement. An embodied existing adult can request the bounded paid succession session during interregnum; charter amendments still require human public authority. Existing council recovery may name a real unclaimed civilian, but does not bypass the written council appointment. An existing dependent's maturation likewise grants no council appointment.

Funded conventions and appointments retain original issuer, real cost, actual spent days and unused supplies through interruption or succession. Registry/commons exposure, service loss, candidate death and labor loss release the three delegates; restored service restarts a full unfinished day. Cancellation returns only unused materials under actual storage limits; explicit overflow acceptance is an engine option and the City asks players to make room. Ordinary repairs can proceed while a constitutional session is paused. Paid court consent/rulings, earlier assembly history, title boundaries, private estates and other funded obligations are unchanged.

City → Constitution & authority shows each arrangement, eligible existing successors, fresh server quotes, actual vote rules, paid pending work, refunds and recorded ballots. Family & continuity explains council appointment authority and disables direct nomination under the council charter. The Workers ledger counts constitutional delegates separately from producers. Private City previews are read-only; public chunk job silhouettes omit the session identity, candidate, ballot and material custody. Paid adoption promotes only an empty version-one constitutional book/marker; older absent-schema saves remain absent. Restore validates exact costs, work clocks, ordered receipts, charter amendments, lasting policy authority and actual successor custody.

Preceding constitutional verification scope: sixteen constitutional cases, 149 retained cases and eight preserved-branch cases pass: 173 distinct cases in sixteen files. The independently command-earned default-timing opening obtains real tools by timber barter and actual harvest/milling supplies the later sessions. Controlled unit scarcity, storage loss and the existing founder's critical-health boundary are declared inputs, separate from that earned branch. Current catalog: 44 buildings, 50 technologies across six branches, 32 recipes and 83 resources. The full M0–M8 goal remains active. Tax administration is now delivered above; continue the remaining named religion/army choices, wider political/realm arrangements and useful permitted reservoir operation/maintenance/removal. See the implementation status and plan.

The current served earned branch ratifies a council charter, changes the real nominated successor through a second paid session, changes food reserve through a paid assembly and retains council authority after its seven-day term. Consecutive authenticated owner clients agree after reload; the existing one-session-per-account rule remains in force. A separate declared-health branch verifies actual mortality, embodiment, a real next-day service recovery, paid appointment during interregnum and lawful handover that consumes the nomination. Both branches restore and replay exactly. Thirty-two responsive checks cover 320/390/640/1440 pixels across the two accepted flows; there are no page errors and all owned servers stopped. Evidence is pinned in .qa-city/constitution-goal-handoff.json and the original-scope .qa-city/gameplay-acceptance-audit-attempt5.json. Failed browser/setup evidence remains preserved. The assembly editor now retains its focused numeric input during fresh City replies and refreshes its quote after blur, preventing the observed lost-selection race.

Implemented: Courts and consented civil review (M4/M7 partial). The politics topic follows Contract law and uses a dry staffed registry. Paid research learns the rule; separate adoption supports one existing judge with one food and one timber per village day. Neither step changes a lease, title, public office or balance. City → Knowledge & community → Civil courts supports one recorded submission per paid, returned and fully unloaded worked-site lease, with four open submissions per community.

The tenant proposes a whole 1–paid-rent coin claim. Original nonrefundable rent and its physical receipt remain unchanged. Only the host's later explicit consent submits the lease to the unworked-rent rule, escrows actual communal coins and pays six food/two timber plus two extra existing witnesses for two whole local hearing days. Food reserves, public timber budget, real labor and operating ceilings apply; escrow counts as a gross commitment. The rule is floor(paid rent × unfinished days / offered days), capped by the consented claim, regardless of the interruption cause. Completed work allowance dismisses the claim; mineral quantity is not guaranteed. Judgment transfers only held coins once and returns the remainder to the host.

Requests expire after three local days; either party can close an unpaid request. Funded cancellation needs both current leaders' withdrawal consent. A single request leaves the hearing running and escrow held. Joint withdrawal refunds only unused supplies, requires host storage or the host's explicit final loss approval, and returns held coins to the host. Dry sound commons, registry, legal service and witnesses are required throughout; interruption releases two witnesses and restarts the unfinished whole day while completed work and escrow remain. Commons repair can run while the interrupted hearing retains custody. Canonical native-water boundaries recheck civic and court work. Funded hearings and original consent survive council stewardship, death and lawful handover; new orders retain current character authority.

Courts adopts only an empty version-one root book/marker. Earlier saves remain exactly absent before adoption; missing marked custody or a court program without its book rejects. Global monetary conservation includes court escrow. Restored cases validate lease evidence, signatures, exact coins/materials, work clocks and rulings; retained case references protect original lease receipts from archive pruning. Public chunks expose only basic local job status, and private City inspection is restricted to each community's owner and the shared case parties. The catalog now contains 49 topics across six branches and 82 resources. World/simulation stay three; major-waterworks stays 43.

Preceding Courts verification passed 202 distinct selected cases across twenty files: seventeen civil court cases, 177 retained gameplay cases and eight preserved map/earned-regional/pressure-recovery fixture cases. The earned court opening replays 749 actual setup commands and advances at default construction timing without stock, people, coins, knowledge or terrain edits. The served two-player flow cancels reviews read-only, requests/consents separately, pays the real bill, advances two workdays, awards six of twelve held coins and returns six; both reloads and independent whole-state replay agree exactly. Four widths (320/390/640/1440) fit with no page errors. Controlled damage, scarcity, warehouse capacity and critical founder health are unit inputs, separate from that earned branch. See .qa-city/court-goal-handoff.json and .qa-city/gameplay-acceptance-audit-attempt4.json.

The full M0–M8 goal remains active. Wider court jurisdictions, criminal cases and appeals are planned. The local Constitutional design and Tax administration applications are now delivered above; the remaining religion/army choices, realm progression and permitted useful reservoir operation/maintenance/removal remain open. Continue an actual optional Constitutional design application next. See implementation status, interface and both wiki audiences.

Civic representation and binding local assemblies are implemented (M4/M7 partial). The politics topic follows learned Record keeping and Public accounting and needs a dry, staffed operational registry. Research and adoption are separate paid choices. Its civic clerk uses one existing worker and one food per village day; learning or adoption enacts no policy. City → Knowledge & community → Civic assembly offers any whole proposed household food reserve (0–30 days), civilian recruitment floor (0–200 workers) or public timber budget (0–1,000 per day). The server displays the actual workforce constituencies, vote rules and conditional estimate before ordinary confirmation.

A session pays six food and two timber above household reserves and the current public budget, then assigns three additional existing workers for two whole local workdays. Food workers, other producers and household/civic workers each cast one delegate vote under visible needs rules; no named character or population is created. All three existing constituencies must remain represented. At the final workday, two supporting votes ratify the proposal; rejection spends the real session bill and changes no policy. A ratified value binds ordinary owner edits for seven village days, including the existing army recruitment floor and public budget. Another paid assembly can amend it; expiry releases the restriction without automatically changing policy.

Loss of services, registry access, sound dry commons or delegates interrupts the unfinished whole workday and releases its three workers. Completed days stay spent; resumption after the ordinary specialist-service check starts a fresh whole day. Changing the reviewed policy before the vote also holds the session. Cancellation refunds only unused supplies once; overflow needs space or explicit loss acceptance. Funded sessions and ratified terms stay with the community through council stewardship and lawful handover. New public proposals still need the current lawful leader. Starter succession law is unchanged; broader elections, court jurisdictions, constitutional choices and assemblies outside the founding community remain planned.

The preceding Civic representation step raised the catalog to 48 topics across six branches; the current court step above raises it to 49. Explicit paid adoption promotes the absent legacy assembly schema to an empty version-one book/marker, with no decision, people or stock grant. Earlier saves remain unchanged before this new adoption. Missing books alongside the civic program or jobs reject rather than hiding custody. Costs, whole-day clocks, refunds, ballots and active bindings validate on full restore. World/simulation remain three and major-waterworks 43. The full goal stays active; see implementation status, interface, player guide and technical reference.

This step passes 197 distinct scoped cases across eighteen files, including seventeen assembly cases and retained village, regional, recovery and resident-continuation journeys. The served City branch uses ordinary founding, paid research/adoption and registry construction without extra stock, workforce or terrain edits. Actual reviewed funding and two acknowledged workdays produce the recorded decision; independent replay and whole-save reload agree exactly. Proposal/history layouts fit 320, 390, 640 and 1,440 pixels. Controlled scarcity, commons exposure and founder age in unit tests remain separate from that earned branch. The current original-scope audit is .qa-city/gameplay-acceptance-audit-attempt3.json; .qa-city/civic-assembly-goal-handoff.json pins verification and the separate older branches. Full M0–M8 acceptance remains incomplete.

Earlier goal-wide audit and physical journey visibility. The audit checks all nine original M0–M8 gates and fourteen required validation scenarios against current sources and fresh scoped regressions. The core village, supply, patrol, land-improvement, outpost and delegated/succession loops have evidence; the full goal remains incomplete. The 47-node live catalog spans six branches, but later Tax administration, Courts, Constitutional design, Ethical teaching, Scriptural/philosophical scholarship, Interfaith and civic dialogue, Combined formations and Siege engineering were absent at that audit. Civic representation is now implemented above. Mounted service preparation already supports paid rider drill, mounted patrol, corridor guards and convoy escorts; the separately proposed wider Cavalry service choice and tactics remain partial. These proposed choices need actual optional applications, institutions, costs, authority, UI and acceptance; branch navigation alone is insufficient. Civic representation's first assembly application supersedes that earlier gap above; wider elections remain planned. Continuing permitted reservoir operation, maintenance/removal and remaining realm work stay open. See implementation status and .qa-city/gameplay-acceptance-audit-attempt2.json.

Travelling crews now belong to their actual route chunk, including all later reservoir stages. Shared position/label rules drive map markers and selected-hex inspection. City → Land → Show recovery crew opens its current hex. Owners can follow their own teams between manifested parcels; this grants no title, new mutable region or command authority. Foreign accounts receive no additional transit subscription rights. Old/current locations refresh together; reversed replies cannot erase a newer position, and stale replies cannot revive a completed team.

Derived replies preserve physical routes and paid custody. An otherwise silent mobile-job step now emits WorldJobPositionChanged when its position, phase or due/meal clock changes, so the gateway commits and broadcasts actual progress instead of losing it on reload. These canonical checkpoints advance ordinary world/chunk revisions; they grant no authority and add no saved fields. World/simulation stay three and major-waterworks 43. A separately generated current replay fixture records these revisions; older fixture bytes, review metadata and saved trial receipts remain intact and restore exactly. A legacy land fixture was corrected to omit all later major books/markers; runtime still rejects hidden unversioned custody. Fresh verification and its scope are recorded in implementation status. This is not full-suite or full-goal acceptance. Both wiki audiences and Getting started are reconciled.

Paid abandoned pressure-test residue recovery is implemented (M8 partial); the full M0–M8 goal remains active. City → Land → Recover abandoned sediment offers Review residue recovery and Review recovery recall once the original failed, reconnected pressure crew has fully returned/unloaded. Separate current-source cleanup authority binds the original trial fingerprint, installed floor, holder/title and exact walking route. Funding needs Hydraulic engineering, Land registry, Public accounting and a sound staffed registry; title, holder, geometry and Hydraulic engineering stay current during travel/work. The expired pressure permission does not prevent cleanup.

The nonrefundable 28-day fee costs four home timber, one tool and four food. Fund four actual available home residents with one additional carried tool per unfinished day and finite meals for both walks, work, seven extra waiting days and unloading reserve. At the current 35-step route: fresh cargo two tools/64 meals (66/120 capacity), total bill four timber/three tools/68 food; after day one, one tool/60 meals, total bill four timber/two tools/64 food. Funding costs one attention; review cancellation and recall are free. Actual return and full capacity-limited unloading release labor.

The first whole safe gallery day spends one tool and contains all retained sediment as spoil; the second spends another and verifies clearance. Unsafe access resets the current day while meals continue. Finite wait/return reserve or lost current authority stops work. Recall keeps actual completed transfers; a separately paid journey resumes the unfinished day. An additive recovery ledger derives effective sediment/spoil without rewriting original failed trial receipts or native transfers. Funding, arrival and day one cannot clear retesting; both paid days are required. Recovery creates no warehouse sediment, water, pressure result, containment certificate or useful-water rights.

Explicit major-waterworks 42→43 adds only an empty recovery book/marker and updates the two parent versions; world/simulation remain three. Old economic and pressure fixture bytes remain immutable and assert exact neutral migration. Controlled regression inputs are initial upstream cultivated soil, additional home/source timber 80/40 recorded before new commands, and unsafe original cleanup access. Actual runoff deposits 21 mass; paid recovery contains it and returns workers. The forced original crew's historical one-third unmet travel meal remains; recovery adds none. This tests finite custody, not earned recurring supply or a natural disaster. See off-channel specification and implementation status. Indefinite minerals, remaining realm/castle, permanent containment, useful permitted water and the full completion audit remain open.

Recovery acceptance includes 110 distinct cases across 24 selected files and the independent 95-event whole-state replay in .qa-city/residue-recovery-independent-audit-attempt1.json. Served City checks cover review cancellation, paid funding/recall, persistence/reload and four viewport widths. Funding and recall freeze one transaction timestamp while the real clock continues between requests. .qa-city/residue-recovery-goal-handoff.json preserves the later earned regional closing, the separately accepted finite pressure closing and the controlled recovery branch; their stocks and certificates are never merged. These scoped checks do not certify the full goal.

The residue-remediation gaps in the historical acceptance notes below are superseded by this recovery stage; their original verification scope remains historical.

Current earned regional continuation: the measured 120-day food/material/repair reserve gate passes. The exact ten-community clay-satellite closing continues for 120 actual village days at unchanged saved 100 ms generic work timing. Every community remains healthy and fed, all originally active services stay supplied, home retains uninterrupted Regional capital and all crews return/unload. Ordinary local mining, selective woodland harvests, actual two-leg mineral collections and small refining batches pay for eight real headworks repairs. No stock, residents, knowledge, coins, titles or elapsed time are injected; no runtime or UI rule changes in this acceptance stage. Home's primary precision mill retains three staff; borrowed food workers return to their three/six closing field assignments. Population remains 142, with sixty at home, twelve at the clay sponsor and eight in its satellite.

Every tracked resource grows both at home and across all ten communities after all production, meals, freight, civic service and repair bills:

New clay extraction is 96 from eight twelve-unit credits, against 56 actual kiln inputs. Six sixteen-clay collections on each of the two separately paid links deliver 96 home. New ore extraction is 56 from eight seven-unit credits, against sixteen smithy inputs; three fourteen-ore collections on each link deliver 42 home. Small local warehouses sometimes unload a returned load in parts as food consumption opens space. One clay and three ore relay jobs do so; their distinct gross receipts sum to exactly sixteen or fourteen, and workers remain committed until all unloading finishes. Counting one receipt per trip would incorrectly reject this valid capacity-limited flow. Eight repairs each spend eight timber, four bricks and one tool. Seven brick batches, five charcoal batches, four mixed-metalwork batches and four tool-forging batches transform real inputs; continuing selective harvests supply actual renewable logs.

All 1,200 single-community daily assessments retain health 100, no hardship/food shortfall and valid labor, household water and storage. Home closes with 683 food, 82½ logs, 319¼ timber, 92 clay, twenty bricks, 72 ore, six iron, eight charcoal and twenty-one tools. Current food output remains 2½ below daily demand, so physical farm deliveries remain part of the working regional economy. Existing titles, exhausted/Greywood deposits, depot, founding grants, communal coins and every major-waterworks book are unchanged; pressure goods and certificates are never merged. The current ordinary human holder stays house-7-child-1.

This closes the measured reserve sample, with finite mineral supply still to renew. The new seams retain only 24 clay and 28 ore. A passing 120-day regional cycle does not prove indefinite mineral operation, a locally self-sufficient capital, remaining realm/castle systems or useful major water. Review the next lawful finite source or extraction rights before the following long cycle. Continue the separate pressure branch toward permanent containment, useful permitted water and abandoned-residue remediation, and audit the remaining M0–M8 requirements before completion. The full goal remains active.

Current closing .qa-city/earned-reserve-cycle-attempt3-closing.json, at 1894060800000, SHA 64f0b1f513ff64df4f1f1ae5e7cc72d4351098bc13d114371bc4b2283677a6c3. Independent audit .qa-city/earned-reserve-cycle-independent-audit-attempt1.json exactly replays 3,231 events and 403 accepted results, independently recaptures all warehouse/production/daily ledgers, closes ten warehouse balances and restores three distinct full checkpoints; eight repair observations are separate. 36 distinct tests pass across seven selected files, including the integrated cycle, prior/new pinned returned saves, forestry, recipes, recognition and fractional warehouse restoration. Earlier attempts and accepted branches remain preserved. Scheduling exists only in acceptance tooling. See implementation status, plan, player guide and technical reference.

Preserved preceding clay-satellite continuation: paid local wells and a tenth community were verified; its reserve sample still declined. A registered local village can now construct a separately surveyed Secondary groundwater well beside its operational village commons. A raw camp must first complete paid local village development; a retained charter without restored commons does not authorize new well construction. The actual commons must be operational, at least 65 condition and free of building work. Existing survey, natural terrain, adjacency, title, clearing and construction requirements remain. The base bill is forty timber, eighteen bricks, twelve food and two tools, plus the review's real construction support. Finished wells deliver twelve additional places only with active Irrigation, one real pump worker, condition at least 65, no building work and dry access to the existing usable commons connection. Funding, a groundwater survey and retained paused pumps supply no water. A mineral central source capped at twelve stays capped at twelve; its separate nearby lens is a paid new source, not a free central headworks extension.

The exact accepted ore closing continues for 454 village days plus 7,196,000 ms at its saved 100 ms generic work timing. Exhausted ore camp outpost-5 pays for housing, local village development, seven separate researches, a working lumbermill, a secondary well and a registry. Three existing four-person households physically move from home after actual destination housing and water are available. The sponsor temporarily reaches twenty residents/twelve workers: its five administration/water assignments and six founder workers must fit at the same time. Eight existing sponsor residents/six workers physically establish clay satellite outpost-16 at lowland-v1:515:711, leaving twelve at the sponsor. The root keeps six direct titles; retained old links and custody are unchanged.

Ten twelve-clay extraction credits reduce new seam 1454950 from 240 to 120. Five sixteen-clay camp-to-sponsor journeys and five separately paid sponsor-to-home journeys unload eighty new clay exactly once, covering the seventy-two actual home kiln clay inputs in this continuation. The existing earned ore satellite extracts seventy new ore, leaving 84, and returns 42 home against 32 actual smithy inputs. Both bounded replacement samples pass. The old clay seam's final 36 are actually extracted, leaving zero; exhausted ground and Greywood Stewardship deposits remain unchanged. Camp/food plot consume the seventy-timber kit, with another fifty mine timber delivered later. Nine paid repairs each spend eight timber, four bricks and one tool. The depot, grants, coins and every major-waterworks book remain identical to the ore input; no pressure stocks or certificates are merged.

The capital is restored through actual checks, then all ten communities complete a measured 120-day cycle. Across the whole continuation, 4,246 individual daily assessments retain health 100, zero hardship/food shortfall and valid labor, water and storage; every journey returns and unloads. One named ruler resident dies through actual aging; ordinary family embodiment and lawful handover restore human rule under house-7-child-1. Network population therefore closes at 142, not 143; home has sixty residents/twenty-one workers, the sponsor twelve/six and the satellite eight/six. Home's primary precision mill stays staffed three. Its food fields close at three and six; redundant pumps and, once population is at most 64, optional Urban sanitation/waste staffing are deliberately paused to free real food workers. Active Regional institutions and care remain supplied. Restore sanitation and enough water before renewed growth. Current home food output is still 2½ below daily demand and needs real freight.

The recurring reserve gate still fails. During the measured 120 days, home food falls 27½, logs 22, clay forty, bricks two and charcoal three; timber rises 160, ore six and tools stays seventeen. Healthy operation and a passing replacement sample over the whole preparation do not establish a renewable combined reserve cycle. Closing home stocks are 619½ food, 47½ logs, 263¼ timber, 52 clay, ten bricks, 46 ore, two iron, zero charcoal and seventeen tools. Finite seams and food imports still require management.

Preserved clay-satellite closing: .qa-city/earned-clay-satellite-attempt14-closing.json, at 1892332800000, SHA dd6d7f9c2876163d73f3bf0fb7fd8cd8ad6f834b20f8425b69cc6eb557d38590. Independent audit .qa-city/earned-clay-satellite-independent-audit-attempt1.json exactly replays 12,803 events/1,500 accepted commands, independently recaptures warehouse/production/daily ledgers, closes all ten warehouse balances and restores eleven full checkpoints. 38 distinct tests pass across ten selected files, including local well eligibility, the whole earned journey and a manifest-pinned returned fixture. No new command, UI flow, ledger or schema is added; world/simulation stay three and major-waterworks stays 42. Acceptance scheduling remains test tooling. Every failed/provisional attempt and prior accepted branch is preserved. The newer 120-day continuation above closes those measured reserve deficits. Finite mineral renewal, remaining realm/castle progression, permanent containment, useful permitted water and abandoned-residue remediation stay open. The full M0–M8 goal stays active. See implementation status, gameplay plan, player guide and technical reference.

Preserved preceding ore continuation: a lawful ore satellite was verified; its combined reserve gate remained open. The accepted clay closing continues for 521 village days plus four seconds at its saved 100 ms generic work timing. Home keeps its six direct titles. Village outpost-3 earns its own local research, lumbermill, well headworks, additional house and staffed registry before surveying and conditionally chartering iron parcel upland-v1:509:697. One existing four-person household physically moves from home to the sponsor only after water and housing are ready. Eight existing sponsor residents, including six workers, then physically establish its mineral satellite outpost-12. All nine communities retain the same 143 network residents; home closes at 73, sponsor at eight and satellite at eight. No stock, people, knowledge, coin, title or elapsed time is injected.

The local scribe and registry deliberately pause while accumulating real materials, then are supplied and staffed again before survey, charter and founder departure. Six techniques are learned through paid local research: Joinery, Seed selection, Crop rotation, Irrigation, Public accounting and Land registry. The separately constructed camp/food plot spend the seventy-timber founding kit. Five later sponsor-to-camp loads carry the iron mine's separate ninety timber; home-to-sponsor deliveries fund those loads and civic overhead. The sponsor pauses extra water/registry service after departure leaves only eight residents. Retained titles remain valid; another founding would require current services again.

Eight actual seven-ore extraction credits reduce new seam 1426265 from 210 to 154. Four fourteen-ore camp-to-sponsor journeys and four separately paid fourteen-ore sponsor-to-home journeys return and unload all 56 ore once. Home metalwork consumes 32 ore during the measured continuation, so bounded ore replacement passes. Preparation also uses twelve retained ore from the exhausted old mine and 24 finite waystation iron bought with 48 real timber through physical caravans; these are startup stocks, never new extraction. Exhausted seams, Greywood Stewardship deposits, grants and communal coins remain unchanged.

All nine communities pass 4,302 individual daily assessments with health 100, no hardship/food shortfall and valid labor, water and storage. Twenty-seven home well repairs and one sponsor repair each pay eight timber, four bricks and one tool with four real workers. Home's original active services and Regional capital recognition are restored before closing; temporarily borrowed field workers return to their original assignments and the primary precision mill retains three staff throughout. Every crew returns and unloads. Home closes with 28 labor, 591½ food, 35½ logs, 97¼ timber, ten bricks, 36 ore, four iron, one charcoal and sixteen tools. Its current food balance is −16½ per village day, sustained by actual farm freight.

This continuation extracts 108 clay, returns 96 and consumes 176 in home brick recipes, drawing down the eighty opening home clay. The clay camp closes with twelve stored clay and only 36 left in ground. Clay replacement fails for this longer sample, although the prior 193½-day clay stage below passed its own 96-versus-56 gate. Neither bounded result proves a combined renewable food/material/repair reserve cycle, self-sufficient capital or indefinite regional operation. The finite pressure branch remains separate; no hydraulic stocks or certificates are merged.

Preserved ore closing: .qa-city/earned-ore-renewal-attempt14-closing.json, at 1885788004000, SHA a02130a9f142a77d70b264cfd0da94e6ca96e28b198bc53fd5c32405d784815c. Independent audit .qa-city/earned-ore-independent-audit-attempt1.json exactly replays 16,058 events and 1,170 accepted commands, independently recaptures every warehouse/production/daily entry, verifies all nine warehouse balances and restores nine full milestones. 48 distinct tests pass across eight selected files, including the whole journey and manifest-pinned returned fixture. World/simulation stay three and major-waterworks stays 42 with unchanged empty pressure books. Acceptance helpers add no runtime command, UI or player automation. Failed attempts remain preserved. The newer clay satellite above replaces this checkpoint as the current earned continuation; its 120-day cycle still leaves combined reserve deficits. Remaining realm/castle progression, permanent containment, useful permitted water and abandoned-residue remediation stay open. The complete M0–M8 goal stays active. See implementation status, gameplay plan, player guide and technical reference.

Preserved prior clay stage: the sixth direct clay outpost passed its bounded sample. The accepted source-preparation save continues through 193½ actual village days at its saved 100 ms generic work timing. The home earns City and Regional capital through the existing daily checks, pays for two additional registry offices on surveyed fourth-ring plots, and staffs three sound offices with active Land registry and Regional institutions before issuing the sixth direct title. A returned survey and conditional charter authorize released parcel lowland-v1:519:709. Eight existing home residents, including six workers, physically establish outpost-10; network population stays 143. No stock, residents, research, money, title or elapsed time is injected.

The new camp uses its paid seventy-timber kit for forty-timber camp establishment and a thirty-timber Community food plot. Three later physical deliveries carry the separate fifty timber for its clay pit. Eight actual twelve-clay extraction batches reduce seam 1450857 from 240 to 144. Six returned sixteen-clay loads deliver all 96 new clay to the home; its actual brick recipes use 56 clay during this continuation. Clay replacement passes for this measured sample. Twenty already mined ore are collected from the exhausted old mine, with zero new ore extraction: ore replacement and the full recurring reserve gate remain false. Exhausted seams and Greywood Stewardship deposits remain unchanged; reclamation restores no minerals.

All eight communities retain health 100, zero hardship and zero food shortfall across 1,422 individual daily assessments, with valid labor, water and storage. Eleven separately paid home well repairs each spend eight timber, four bricks and one tool with four real workers. Every journey returns and unloads. Home closes with 77 residents, thirty labor, 648½ food, 30¼ timber, eighty clay, twelve bricks and nine tools. Its current food balance is −20½ per village day, supported by real food-outpost deliveries; this is bounded healthy regional operation, not a self-sufficient capital or an accepted indefinite reserve cycle.

After founder departure, home Land registry and the two added clerks are deliberately paused; the six direct titles remain valid, but further founding is unavailable. The original home registry and Regional institutions remain supplied. Source outpost-1 deliberately pauses optional Regional institutions and its registry clerk, keeping Record keeping/Public accounting and assigning its six workers to food and timber; the existing child title remains valid. The home primary precision mill stays staffed with three workers. These are actual staffing/service choices and must be priced again before another expansion.

Preserved clay-stage closing: .qa-city/earned-clay-renewal-attempt15-closing.json, at 1878285600000, SHA a039cad7d22499d830060a6b9afe12a5211f1a53706be489a506a48586554fd9. Independent audit .qa-city/earned-clay-independent-audit-attempt2.json verifies all 4,073 command/advance events by exact whole-save replay, five full milestone restores, finite extraction, returned receipts and unchanged grants/coins/depot/geology. 26 distinct tests passed across eight selected files for that stage, including both tracked earned fixtures and the separately preserved pressure-result fixture. The original schema-39 input restores through explicit neutral 39→40→41→42 empty permission/attendance/trial books; world/simulation remain three. No runtime or City control is added by this acceptance tooling. Earlier failed attempts and checkpoints remain preserved.

The finite pressure result below belongs to a separate accepted branch; neither its stocks nor its certificates are merged into this earned economy. The 120-day source-preparation notes are historical. Their open clay gate was superseded for the measured 96-versus-56 sample; the subsequent ore journey above establishes new ore supply but exposes a longer clay deficit. Follow the current closing and remaining gates above. The complete M0–M8 goal stays active.

The finite live pressure trial is implemented; permanent containment and useful water supply remain planned. City → Land → Live pressure trial adds Review live pressure trial and Review pressure trial stop. Entry requires the separately paid current permission, all named holders' explicit consent, four physically arrived workers, two carried cleanup tools, finite meals, active Hydraulic engineering and a freshly reviewed dry clean opening. Confirming entry costs one attention. Cancelling a review spends nothing; starting withdraws no second material fee.

The actual next canonical opening must match the reviewed geometry and hydrology. Only private interval authority can exclude the installed raised footprint from the natural curve, split actual incoming runoff, own compartment water/sediment and release through the paid closed outlet. The bounded game protocol charges to full head, holds it for one whole water interval, discharges through the head-limited 1,000-subunit outlet and uses the clear-water exterior drain. Each of at most eight intervals checks its own global water/sediment closure and a fresh natural comparison for affected holders and adverse soil, building, inventory, wetland or fish effects. A forecast flag or copied receipt authorizes no live interval.

At a successful drained boundary, restore the natural connection immediately, before two paid sediment cleanup days; this supersedes the earlier proposed cleanup-before-reconnection sequence. A stop, lost permission/engineering, unsafe route, insufficient return reserve, exhausted interval allowance or failed preflight also restores the natural connection. Remaining water is transferred exactly once into the natural basin. Sediment stays in explicit compartment custody, then moves to contained spoil on the first safe cleanup day, with no resource credit. Each of two whole safe days spends one already carried tool. Unsafe gallery access resets the work clock and continues consuming meals. Exhausted cleanup supplies return the workers with no result; any residual sediment remains durable and blocks retesting. Paid abandoned-residue recovery is implemented in the separate stage above.

Only actual charge, hold, discharge, drawdown, two paid cleanup days and natural reconnection produce the finite game pressure result. It explicitly grants no permanent containment, recurring flow or useful supply. Afterward the workers physically walk home and unload unused meals; only then is home labor released. Restore sustainable mill/woodland staffing after return. World/simulation stay version three; explicit major-waterworks 41→42 adds only an empty trial book and the two parent markers, following the separately preserved 39→40 permission and 40→41 attendance migrations. No migration grants goods, workers, water or certificates. The complete M0–M8 goal and the separate earned mineral/capital progression gates remain active.

Accepted finite trial: seven actual intervals captured 3,148 plus 25,000 direct rain subunits, balancing 15,898 spill, 1,000 head-limited outlet release, 10,000 exterior drawdown and 1,250 modeled evaporation. Closing water and sediment are zero. These are actual typed trial transfers; the retained kernel remains game arithmetic. The result is earned at 1857169200107, after natural reconnection and two paid cleanup days. Ordinary 35-step return/unload then restores the home mill to three staff. The accepted continuation is .qa-city/pressure-live-restaffed-attempt1.json, at 1857211200107, SHA 9e6816c1295c70b56c5d7c68ba69900f27ab6cff265027a132cd9e68fffb99f2. Both communities retain health 100 and +2.5 daily food; home labor is 12/14, with 58 logs and 27 timber. Source timber is 12 and remains a finite reserve. The separate exhausted-mineral branch is preserved and its stocks are not combined here.

Scoped acceptance: 137 distinct tests pass across eighteen selected files: twelve live trial cases, one pinned earned-fixture case, seventy-eight attendance/permission/native-ledger regressions, thirty-nine retained-cache predecessor/forecast cases and seven parent migrations. Full actual command/advance replay includes physical return and ordinary restaffing; every trial phase restores exactly. Independent audit: .qa-city/pressure-live-independent-audit-attempt1.json. Verification: .qa-city/pressure-live-verification-attempt1.json. The new tracked offchannel-pressure-trial-returned compressed fixture pins the earned closing; all earlier snapshots, failures and journals remain preserved. These checks establish this bounded stage, not the full repository suite or completion of M0–M8.

Served City acceptance covers review cancellation and confirmed start/stop, an actual held compartment stopped with an exact 10,000-subunit natural-basin credit, and the earned result after reload. Every scenario passes persistence and 320/390/640/1440 layouts; all three test servers stop cleanly. Evidence: .qa-city/pressure-live-city-browser-4RW6h1/evidence.json, .qa-city/pressure-live-city-browser-HXXDDo/evidence.json and .qa-city/pressure-live-city-browser-htUGvX/evidence.json. The earlier failed locale-specific browser expectation is preserved; it changed no accepted checkpoint.

See the living world design, off-channel specification, player guide and technical reference. The attendance-only notes below describe the preserved preceding checkpoint; their pending hydraulic stage is superseded by the finite live trial above.

Preserved attendance checkpoint, before live pressure implementation. From the separately paid current permission, four actual home residents carry two tools and 96 meals over the exact 35-step route. Funding costs one attention and respects real labor, inventory and operating ceilings. Tools remain carried, every elapsed travel/wait interval consumes paid meals, and the workers stay unavailable until their actual return and unloading. City → Land provides Review pressure crew journey and Recall pressure crew. Cancelling either review spends nothing. No attendance order removes a plug or changes a gate, the original natural curve, water, sediment, containment or pressure certification.

Current accepted arrival: .qa-city/pressure-attendance-ready-attempt3.json, at 1857030000107, SHA acb14a10bfdd93b98e939891c127ec769b772ab6941d24bdec35e1b27eb0abb5. Ordinary staffing reduces the basic home mill from three workers to one, preserving the five field hands and registry clerk; the four freed residents are then paid and physically walk all 35 steps. Both communities retain health 100 and food output above demand. The home has all fourteen labor committed, so standing selective harvest waits for available workers. The smaller mill produces 0.75 timber against two daily civic timber: 43.25 timber remains on arrival. This is a finite temporary assignment; restore sustainable mill/woodland staffing after the crew returns. No workers, stock, technology or time are granted.

At the floor the crew carries both tools and 84⅓ meals, with zero unmet meals, and may wait at most seven village days. Consent withdrawal, changed title/holders/proposal/reach, permission expiry, lost Hydraulic engineering, unsafe access or the finite return meal reserve send the crew home. Fire or floodwater can hold the physical journey; held travel consumes provisions. An unsafe elevated-gallery exit holds departure. Unused goods are credited only when the returning workers reach home, and insufficient warehouse room holds unloading and labor release. The full quoted journey, future eight-interval trial allowance, two cleanup days and an unload reserve must fit cargo capacity and the original permission expiry; arrival does not extend that expiry.

The fresh arrival comparison is a read-only forecast: 5,943 captured plus 27,000 rainfall subunits balance 19,943 spill, 1,000 outlet release, 10,000 exterior drawdown and 2,000 modeled evaporation, with zero closing water, conserved sediment and no modeled adverse built/ecological difference. These are hypothetical flows, not actual pressure receipts. Arrival is not a certificate. At that attendance-only checkpoint, live custody, failure recovery, cleanup, reconnection and a pressure result were unimplemented; the finite trial above supersedes those pending steps. Permanent containment and useful supply remain planned. The complete M0–M8 goal remains active; genuine replacement mineral production on the separate earned regional branch is also outstanding.

Whole-save verification: .qa-city/pressure-attendance-verification-attempt3.json replays every actual staffing/funding/arrival command and advance, then verifies the independent ordinary recall/35-step return/unload closing at 1857072000107 (SHA 7e4480aee041acf4f4e545a6790d078872471ae4c4caec1faa63527980dab8fc). The arrival remains the continuation checkpoint; the later recalled branch is return evidence. Preserve both, all older fixtures and their original journal receipts. Explicit schema 40→41 adds only an empty version-one attendance book and the two major-waterworks parent markers; world/simulation remain three. The preserved 39→40 permission step remains separate. See the primary living world design, player guide and technical wiki.

Scoped attendance acceptance: 69 distinct tests pass across ten selected files (eleven attendance cases, twelve preserved permission cases, thirty-nine retained-cache waterworks/forecast regressions and seven parent migrations). Whole ordinary arrival/return replay and independent step audit pass. Served City funding and physically arrived recall scenarios pass cancel/confirm, persistence, reload and 320/390/640/1440 layouts; both test servers stopped cleanly. Browser evidence: .qa-city/pressure-attendance-funding-browser-mHhyy4/evidence.json and .qa-city/pressure-attendance-readiness-browser-i26qyo/evidence.json. Independent audit: .qa-city/pressure-attendance-independent-audit-attempt1.json. These checks are scoped acceptance, not the full repository suite or completion of M0–M8.

The following permission-only notes describe the preserved preceding stage.

Separate pressure-test notice and paid permission are implemented; the physical trial remains planned. After the installed floor, dry inspection and all six working connections are complete and every crew returns, the current human source holder can review a finite conserved comparison. The notice binds the exact proposal, installed predecessors, dry route and current affected reach. Every named community, including the source, must explicitly consent. The permission expires twenty-eight source village days after filing; changed holders, title, proposal or reach definitions and consent withdrawal stop its currency. Filing and payment each cost one attention; consent and review cancellation are free. The home pays four timber, one tool and four food once, subject to its actual inventory, services and operating ceilings. Withdrawal or expiry refunds nothing; bounded regrant within the same current notice requires no second payment.

Preserved permission-only closing: .qa-city/pressure-permission-attempt5-closing.json, at 1856988000107, SHA c7e4219dc0b75674ef4d1776b504624f150d3e59d178d4e6d7e264af3a3e0bc5. Five ordinary commands re-enable already learned source Land registry/Public accounting, file the exact notice, explicitly consent as the source holder and pay once. No time, people, technology, water or stock is granted. Home pays four timber, one tool and four food, retaining 73 logs, 45.75 timber and eleven tools; source remains twelve residents/eight labor, with all eight workers assigned and current food output above demand. The woodland mandate and home civic services remain active.

This permission grants no pressure certificate, containment, storage, capture, release or useful supply. At this preserved permission-only checkpoint, physical trial orders were unavailable. Paid attendance is now implemented above. Guarded live water/sediment custody, finite trial failure handling, sediment cleanup and natural reconnection still need implementation and separate acceptance. The full M0–M8 goal remains active, and the earned regional branch still needs genuine mineral replacement. Existing construction stock and the thirty-two-day woodland sample remain bounded evidence. Earlier schema-39 checkpoints and their journals are preserved; their explicit 39→40 migration adds empty permission custody, then 40→41 adds empty attendance custody. Neither step rewrites predecessors or historic command receipts.

Verification: 96 distinct tests pass across seventeen selected files, including twelve permission/save cases, the exact final five-command journal, the preserved woodland/supply journals, full paid plugged controls and floor lowering, conserved model/warehouse regressions, cached predecessor operations and eight parent migrations. The served City flow passes notice/consent/payment cancellation and confirmation, withdrawal/regrant, reload and 320/390/640/1440 layouts; its test server stops cleanly. Independent audit: .qa-city/pressure-permission-independent-audit-attempt4.json, SHA 139e20bd6164f9fdaf107cc3506feaa1eaa3a3844e444cd794374ccc58b9d312. Current verification: .qa-city/pressure-permission-final-verification-attempt1.json. This is scoped acceptance, not the full repository suite or completed M8. Earlier uncached prerequisite factories were deliberately cancelled and are not counted as passing; the supported retained-cache regressions pass with all input hashes recorded.

The permission-only predecessor had two unassigned workers. The current attendance journey frees two mill hands before paying four workers, keeps all field/registry staffing and requires the standing forestry mandate to wait while home labor is fully committed. Permission alone still reserves no staff, meals or materials.

The woodland and pressure-model notes below record preserved predecessor stages.

Local woodland replacement and fractional warehouse restoration are verified. Two paid forest extensions and one physically arrived adult from the finite waystation support the ordinary construction home. During 32 measured days, five completed selective harvests deliver 105 logs, the three-worker basic mill uses 96 logs for 72 timber, and all three civic services consume 64 timber. Logs increase by nine and timber by eight. Food output covers both communities, health remains 100 and no new food shortfall occurs. The exact 485-event journal replays and the whole closing restores unchanged with world/simulation version 3 and major-waterworks schema 39. These are existing player controls, not grants of people, goods or technology.

Keep the registry clerk: Regional institutions still needs that staffed institution when Land registry is suspended. With the original 24 residents/thirteen labor, the field, mill and civic services leave only one harvest worker. The verified remedy admits one adult over a 44-step/four-day paid walking journey, bringing home to 25 residents/fourteen labor. The field's 27.5 output covers the larger population. Two spare workers now support ongoing selective harvest without resetting mill cycles. Switch the next-party policy back to households after dispatch, keep the current journey's admission requirements satisfied, then close migration after the adult arrives. No second party is sent.

warehouse-history.js separately bounds lifetime-total cancellation by actual movement count and gross turnover. The retained checkpoint/receipt chain keeps its previous strict stock tolerance. Historical tools turnover above seventeen million can continue real fractional engineering payments and restore down to zero without rewriting stock or books. Current-stock discrepancies, changed retained receipts, material gross changes and arithmetic overflow still reject within the stated numerical limits. This is arithmetic validation, not a cryptographic audit. Schema and book versions remain unchanged.

Latest closing: .qa-city/pressure-home-woodland-attempt5-closing.json, at 1856988000107, SHA 42bf2a75d467fb60d65d714bc24b19bd1a9fd4137d7ea1a4395195ad2e48f1de. Home keeps 73 logs, 49.75 timber and twelve tools; source keeps 27 timber and about 7.2 tools. Verification passes 87 distinct tests across ten selected files, including exact current and predecessor journal replay. The woodland replaces measured log/timber use; source engineering still consumes finite inherited tools. Live pressure, containment, reconnection, useful delivery and regional mineral replacement remain unfinished. The separate earned regional branch is preserved. See implementation status, reservoir plan, player guide and technical reference.

The following pressure-model and supply-only evidence is the preserved earlier stage; its 105-test total describes that earlier verification run.

Pressure-model verification: 105 distinct tests pass across fourteen selected files: eleven new sequencing/sealing cases, one real ordinary supply/replay case, preserved v1/v2 kernel/transition and paired forecasts, full paid floor lowering with sixteen lined-open water intervals, and surface/basin water, routing, sediment, exposure, topsoil and wetland regressions. The independent audit also recomputes every modeled component balance and replays/restores the entire supplied closing save. This is scoped verification, not the full repository suite or completion of M0–M8. No new City control or live pressure authority was added. The primary design and both wiki audiences are synchronized; generated wiki build/check and whitespace validation pass.

The pressure-stage construction home is replenished through an ordinary returned supply trip. The exact plugged-controls checkpoint continues to 1855874400040 through twelve ordinary commands and 74 advance calls. Home temporarily suspends its three civic programs, staffs the existing forester lodge and re-enables its already learned Scouting. A two-worker carrier team pays seventeen meals and collects 21 existing source timber over the reviewed 37-step dry detour, with 59 return weight inside its 60 capacity. The source field is assigned three existing workers. After return/unload, Scouting and the lodge stand down and all three home civic services resume; known programs need no second adoption payment.

Home closes with 24 residents/thirteen labor, about 1,020.67 food, 25 timber and sixteen tools; source keeps twelve/eight, about 806 food, 27 timber and fifteen tools. Current field outputs cover household and active engineering food demand in both communities. Health stays 100 and no shortfall is added. All major-waterworks books, plugs, predecessor receipts, rights and population are unchanged; the whole 86-event continuation replays and restores exactly. This transfers finite inherited construction stock and proves no new mineral/woodland replacement. The separate earned regional branch remains separate.

Earlier supply-only continuation: .qa-city/pressure-supply-preparation-attempt2.json, SHA 8b32d844602ffcb5230eaf0bbd6d6fac338b25323f86119b47101ce767ca43eb; independent audit: .qa-city/pressure-progress-independent-audit-attempt1.json. Manifest-pinned test/fixtures/offchannel-pressure-supply-ready.json.gz retains the exact state and journal. Its fresh read-only pressure forecast closes after eight intervals, counting 5,943 capture and 27,000 rain, with 19,943 spill, 1,000 outlet release, 10,000 exterior drawdown and 2,000 modeled evaporation. All balances close, but actual pressure, containment, reconnection and useful water remain unfinished. The later woodland continuation replaces measured civic timber; replacement tools are still needed before source engineering exhausts its finite stock.

Installed-floor pressure sequencing is modeled; live testing remains planned. Conditional sealing now removes the actual paid raised footprint at height 455074 from the natural curve, retaining the original 450074 bed in design provenance and the exact twenty-lift/50,000-fill ground fingerprint. It retains that paid foundation instead of proposing a second fill. The installed lined-open floor remains connected in every live save; only a bound read-only forecast facade can compare sealed behavior.

The finite forecast protocol charges from actual predicted source flow and footprint rain, requires full head 456074 at both boundaries of the next interval, observes one separately rated 1,000-unit existing-outlet discharge, then returns clear water through the already-built 50,000-unit exterior drain to the natural basin. Upslope runoff and drawdown share that drain's rating; spill retains its own rating. A rainy seven-interval comparison captures 3,148, counts 25,000 rain, spills 15,898, releases 1,000, returns 10,000 through the drain and loses 1,250 to the declared hypothetical evaporation assumption, closing empty. Every paired water/sediment balance closes and the actual schema-39 save remains identical.

This is model verification only: no plug is removed, no gate opens and no live storage, pressure certificate, containment, water right or irrigation is granted. A hold at interval boundaries does not certify continuous intraday head or calibrated material behavior. Sediment remains in custody when clear water drains; nonzero sediment still needs paid cleanup. The model stops at its first empty boundary and explicitly requires reconnection; it does not prove the live closed-empty state. Paid temporary containment and pressure authority, current affected-holder review, loader-validated live custody, attendance/failure handling, actual reconnection, useful delivery and recurring maintenance remain implementation gates. The full M0–M8 goal remains active. See reservoir construction and implementation status.

Paid plugged reservoir connections are implemented; M8 remains partial. After the actual installed-floor dry inspection and every predecessor crew's physical return, four existing home builders can install six separately paid working-control connections. These reuse the paid collars, closed fittings and raised gallery: source split with a fixed minimum 25% natural bypass, capture path rated 50,000, release gate and existing-outlet junction rated 1,000, then nonreturn spill and exterior drain rated 50,000. Ratings are proposed water subunits per interval; plugged construction does not prove hydraulic performance.

Source, release and safety stages have separate 28-day licences, each four timber, one tool and four food. Licensing requires source Hydraulic engineering, Land registry, Public accounting and a sound staffed registry. Work retains current source engineering, title, frozen inspected predecessors and strict dry access. Every task carries its real material batch and finite meals, completes whole workdays, and returns/unloads before another major crew uses either community. Recall returns unfinished materials; completed connections remain installed.

Six tours complete in 45 village days on the current 35-step route. Ten paid workdays invest eight timber, eight bricks, four dressed stone, four iron and six tools. Three licences additionally spend twelve timber, three tools and twelve food. Crews carry 184 meals, consume 180 and physically return four. This continues the exact accepted inspection checkpoint with inherited controlled construction supplies; it grants no new stock, people, labor or title and does not establish earned regional supply. Both communities retain health 100, valid food/storage/labor and unchanged predecessor books. All 45 paired canonical water intervals agree.

Both source/release plugs remain fitted, every gate stays closed, and the natural basin retains its stage curve. Actual hydraulic pressure testing, containment authorization, closed-empty storage, permitted capture/release, useful irrigation and recurring maintenance remain required. The earlier dry inspection certificate remains immutable. The separate earned regional 120-day preparation still lacks replacement clay and ore sources; its reserve gate stays false. The full M0–M8 goal stays active. Current saves use explicit neutral schema 38→39 migration, adding only the empty working-controls book and marker. Reservoir construction and implementation status provide details.

Earlier construction notes below are historical where they describe working connections as unfinished; this paid plugged stage supersedes those statements, without superseding their pressure or containment requirements.

Preserved earned regional source preparation (verified for 120 days; its mineral limits are historical). The accepted maturation checkpoint continues through 120 more village days at the default 100 ms work timing, without new stock, residents, workers, rights, research or money. All seven communities remain inhabited and healthy through 840 complete daily assessments, with every opening active service, valid labor/water/storage, and no food shortfall or hardship. The primary three-worker mill completes all 120 actual batches and produces 360 timber. Earlier 117½-day maturation acceptance remains valid historical preparation. The later eighth-community clay result above supersedes this checkpoint's current-continuation and open-clay wording; its ore and full reserve limits remain applicable.

The physical chain produces 23 home harvests/483 logs, 223 additional timber, 91½ source timber, 35 source field batches/385 food, five brick batches, four charcoal batches, five metalwork batches and six tool-forging batches. Seven paid one-day headworks repairs spend 56 timber/28 bricks/seven tools and return every crew. Twenty-one returned source trips deliver 134 timber/803 food and collect 32 clay; eight forest trips collect 168 logs/48 food; 36 farm trips collect 1,872 food; one ore trip collects twenty stored ore. Three separate source-to-satellite trips bring back 24 food and 24 newly extracted clay. All 69 trips return. Unused travel rations remain separate from collected or produced food.

Preparation changes the schedule, not simulation rules: shorten the source farm phases when civic timber is low, limit timber exports to actual source needs, fit both journey rations and goods inside carrier capacity, and finish real workshop batches before allocating repair workers. A forest load of 21 logs/six food fits its current twelve-ration, 60-weight quote; the earlier 21-log/eight-food load does not. Clay extraction is audited from actual warehouse credits and matching deposit depletion, because extraction is not a workshop production-history row. All seven warehouses reconcile from opening stock and real ledger movements.

Home closes with approximately 573 food,36½ logs,51¼ timber,forty clay,fourteen bricks,three iron,two charcoal and twelve tools, above the existing 16-timber/eight-brick/one-tool repair floors. The twenty-four newly extracted clay cover only part of forty clay consumed, and the twenty ore used came from retained stock at an exhausted mine. Both mineral replacement gates and the full recurring reserve gate therefore remain false. Reclamation does not restore ore or clay. Fund and title new physical extraction sources before restarting that acceptance gate.

Current regional checkpoint: .qa-city/earned-regional-source-preparation-attempt7-closing.json, SHA 60b4c8285d76da1c41d501454fac4de7478f13ad9c52dae3b9dfed588c1af7b3, at 1875499200000. Manifest-verified fixture test/fixtures/earned-regional-source-preparation-opening.json.gz and test/earned-regional-source-preparation.test.js reproduce 840 assessments, paid repairs, relay freight, stock arithmetic and all 3,176 command/advance events into an identical whole save. The checkpoint is separate from the accepted installed-floor inspection branch and transfers no supplies to it. All earlier references to an unexecuted 120-day continuation are superseded only as preparation; recurring replacement, working reservoir controls, pressure testing, containment and useful permitted water remain open. See implementation status and gameplay plan.

Paid installed-floor inspection (implemented and verified; M8 remains partial). After continuous-floor installation and every earlier crew's physical return, four existing home residents can make a separately paid inspection tour. The twenty-eight-day licence costs four timber, one tool and four food, freezes the installed-floor receipt and walking route, and requires staffed source Hydraulic engineering, Land registry and Public accounting. The tour reserves one tool and finite meals for travel, one complete observation day, at most fourteen waiting days and return. The current thirty-five-step route costs 84 food and carries 85 of 120 capacity. Source Hydraulic engineering and current title remain required throughout the inspection; earlier drain operators are no longer needed.

Inspectors must actually arrive before the observed interval opens. A fresh review first simulates the next boundary, then the entire following water interval. The live opening and closing must match that exact review: zero footprint water, zero bed sediment, no exposure, natural receiving head below floor 455074 and no rain or incoming water during the observed interval. The first boundary starts observation and earns nothing. Only completion of the following full canonical interval spends the tool, records one paid workday and issues the dry inspection certificate. Recall, changed title/holder/service/flow or exhausted waiting sends inspectors home with unspent tool and unused meals; no automatic cleanup or water intervention occurs.

Default-timing acceptance continues the exact accepted schema-37 installed-floor checkpoint without new goods, people, labor, title or hydrology grants. The tour completes in 8 11/12 village days, observes interval 2947→2948 and returns all four inspectors. Its 84 carried meals reconcile as 35⅔ consumed and 48⅓ returned, with no crew hunger, community food shortfall or hardship. Source/home retain twelve/24 residents, eight/thirteen labor capacity and health 100. All predecessor books remain immutable. The closing schema-38 checkpoint is .qa-city/installed-floor-inspection-complete-attempt2.json, SHA d2100a5964db24e9159e9538475308cbfdbfa9a2e67196f69ccae2feb08f216c, at 1855137600040. The tracked manifest-verified starting fixture is test/fixtures/offchannel-installed-floor-complete.json.gz; inherited controlled construction supplies are disclosed below. This is inspection acceptance, not earned regional supply.

City → Land & water → Inspect the installed reservoir seals offers Review dry inspection licence, Review paid inspection tour, Review inspector recall and Review full dry inspection, each with cancel/confirm. Licence and tour acceptance cost one attention each; observation and recall are free. Live gateway checks verify actual payment/refund, full opening/completion boundaries, exact independently advanced persisted state, reload, the inspected map status and layouts at 320/390/640/1440 pixels. Inspection leaves connected lined-open hydrology, natural basin custody and the retained stage curve unchanged. Eight later paired water intervals and offline/stepped simulation-and-receipt replay also agree; invocation revision counters and notification times remain separate delivery metadata.

The certificate proves one actual dry installed-floor inspection only. Hydraulic pressure testing, rated working controls, containment authorization, closed-empty storage, permitted capture/release, useful irrigation and recurring maintenance remain unfinished. Nonzero sediment still needs separately paid cleanup. The independent regional checkpoint gains only empty construction/inspection books through schema 38. Its earned maturation preparation now passes through 117½ days with seven paid returned repairs; the separate earned 120-day recurring reserve acceptance remains open. The full M0–M8 goal stays active. Reservoir construction is the companion specification; living world design remains the primary entry point.

The following floor-construction evidence remains valid as the preceding schema-37 stage. Its references to a later qualifying inspection are fulfilled by the separate paid stage above.

Continuous floor and connected lined-open mode (implemented, M8 partial). The completed 214-mass floor/fitting kit now has separately paid joining and installation. Four existing home builders carry four bricks, two dressed stone, two iron, two tools and 88 meals on the current 35-step route. Two whole workdays invest the joining batch, add 18 mass in slot ten and create a 232-mass kit in eleven slots, within the reinforced 240-mass gantry rating. The 28-day stage licence separately costs four timber, one tool and four food. A recalled completed joining remains staged; a later one-day rigging tour pays one tool and 84 meals instead of rebuilding the parts. Each crew has fourteen days of bounded ready custody and real return/unloading.

After joining, four separately paid source drain operators may share this exact prepared worksite. A current-tick actual completed drain pulse must leave zero local water, zero bed sediment and receiving head below floor 455074. The whole next canonical interval must also have zero opening/rain/incoming/closing/discharge and no sediment. The source authorizes the exact comparison; every named current holder consents to both dry lowering and sixteen future lined-open intervals before a separate start command. Title, Hydraulic engineering, crew presence, paid meals, setup/licence expiry and the actual closing fingerprint are rechecked. Lost consent or changed conditions cancels lowering and preserves staged parts.

Successful lowering consumes all 232 staged mass, seals the continuous floor/toe joint and releases eleven slots. Earlier fabrication, fitting, wall and foundation books remain immutable; separate consumption projections show zero staged floor/hardware and all twelve gallery slots free. The original-bed drain operators stop operating and both crews return physically. Installation begins connected lined-open behavior on the following water interval. Rain and separately attributed upslope runoff cross the existing footprint-to-basin interface once; the natural basin owns persistent water. Local film, local evaporation and local infiltration are zero. The raised footprint stays in the natural stage curve. Basin retains its existing wet-bed evaporation and aggregate seepage approximation; this is no claim of reduced whole-basin seepage. Flow above the 50,000-subunit header rating remains explicit open-basin overbank export to the same natural custodian. External sediment uses the same conserved boundary; the covered floor generates no new topsoil erosion.

Default-timing acceptance completes the joining, five actual consented drain pulses, lowering and both crew returns, then sixteen post-return water intervals. One builder tour uses two workdays and 88 paid meals (60 consumed, 28 returned); one source operator tour pays two timber, one tool and 60 meals (29⅓ consumed, 30⅔ returned). No crew hunger, new community food shortfall or hardship occurs; populations/labor remain twelve/eight at source and 24/thirteen at home, health 100. The complete schema-37 checkpoint is .qa-city/floor-placement-complete-attempt3.json, SHA 58883e93ca6c7f578cfe1856fedf2ea1759499d8e0fb72cdf926f59ee021d551, at 1855009200040. Its opening construction stocks are controlled: home {food:1000,timber:200,bricks:12,dressedStone:6,iron:8,tools:30}, source {food:900,timber:50,tools:25}, with all other goods retained. No mid-journey grants, extra people, labor, title or predecessor changes occur. Closing home food/timber are about 1009½/136, source 804½/48; the historical home unmet-food total 26 remains unchanged. This acceptance does not establish earned regional supply.

The earlier proposed requirement for a qualifying inspection before floor deployment is superseded by this exact clear-bed, full-dry construction interval. A separately qualifying post-installation inspection, hydraulic pressure tests, containment authorization, storage/capture/release controls and useful permitted delivery remain required. A construction receipt grants none of those. Nonzero bed sediment blocks this route and requires separately paid cleanup; no cleanup is silently performed. The independent 32-day regional checkpoint receives only empty construction/inspection books through schema 38; its earned maturation preparation now passes through 117½ days with seven paid returned repairs. The later earned 120-day recurring reserve gate remains open. The full M0–M8 goal stays active.

City → Land & water offers Join and install the continuous floor, with reviewed licence, setup payment, recall, source authority, holder consent/withdrawal and separate lowering. Cancelled reviews spend nothing. Confirming licence or setup costs one attention; consent, review and recall are free. The served payment/installed City and map checks verify exact costs/custody, reload and 320/390/640/1440-pixel layouts. See reservoir construction and implementation status.

The following predecessor-stage notes describe custody before this installation; their staged/open descriptions are historical, not the current installed state.

Paid closed fittings and reinforced gantry (implemented and verified). After all floor modules/collars and crew returns, five separately paid two-day home-builder tours reinforce the existing full-stroke gantry, then bolt and dry-check closed hardware on the source blank, release blank, emergency-spill nonreturn and exterior-drain collars. Gantry reinforcement costs four timber, four iron and two tools; each collar assembly adds one timber, two iron and one tool. The gantry overlay raises its 200-mass rating to 240 while preserving the original paid wall receipt and 2256-height lowering stroke. Hardware adds seven mass to each nine-mass collar in existing slots six through nine. The combined kit weighs 214; ten slots remain occupied, two free, with 290 unused supported gallery mass. No gallery capacity or roof is added.

Default-timing canonical acceptance completes in 39⅙ village days: three licences, five returned four-builder crews and ten paid workdays. Investment is eight timber, twelve iron and six tools; licences add twelve timber, three tools and twelve food. The 160 carried meals balance as 156⅔ consumed and 3⅓ returned, with no unmet crew food. All 407 checked advances match independent canonical hydrology across 39 water intervals. Earlier construction/title books stay immutable, schema-36 restoration is exact, and the separate regional checkpoint migrates neutrally. Controlled finite supplies and the historical home unmet-food total of 26 are disclosed in implementation status.

City → Land & water now offers Assemble closed reservoir fittings with reviewed licence, task payment and physical recall. Read-only map/City views show the reinforced rating and combined staged kit. Assemblies are disconnected and uninstalled; paid dry mechanical checks are not hydraulic pressure or containment proof. Next required stages are actual floor/toe deployment with coherent lined-open hydrology, any needed paid cleanup, real dry inspection, installed controls, containment and useful permitted water. Earned regional supply and the full M0–M8 objective remain open. See reservoir construction.

Paid reservoir floor kit implemented and verified. After all six installed wall faces and all builder/operator returns, the same-owner home can license a two-day staging cradle, then fabricate three floor modules and four interface collars. Eight separately paid four-builder tours preserve actual cargo, meals, workdays, site custody and physical return. The cradle reuses released gallery slots without adding capacity; edge-on parts intercept no rain and remain above the unfinished floor. The base floor-and-collar kit holds 186 mass before closed hardware is added in ten of twelve 42-mass slots. Its 10 coverage units are an explicit construction scale, not a derivation from hydraulic areaScale.

The default-timing canonical-weather journey completes in 72⅔ village days with four licences, 26 workdays and eight returned crews. Materials are sixteen timber, 48 bricks, 28 dressed stone, four iron and sixteen tools; licence fees add sixteen timber, four tools and sixteen food. Its 296 carried meals balance as 290⅔ consumed and 5⅓ returned, with no unmet crew food. All 682 checked advances match independent canonical hydrology, covering 72 water intervals. Earlier construction and title books stay immutable; the complete schema-35 save restores exactly. Both communities retain population twelve/24, labor eight/thirteen and health 100, with no new hardship or food shortfall. Controlled finite opening supplies are disclosed in implementation status; this does not close earned regional supply.

City → Land & water now offers Fabricate the reservoir floor kit with reviewed licence, task funding and recall. The original wall fabrication ledger stays immutable; its public gallery projection now subtracts the actual 186 staged mass, leaving 318 unused supported mass and two wholly unreserved slots. These parts do not seal the floor, move sediment/water or grant storage. The current closing bed sediment is zero. Separate installed-control checks, floor/toe deployment, any needed cleanup, dry inspection, containment and useful water remain open. See reservoir construction and technical reference.

All six wall faces verified (bounded construction acceptance). The default-timing, canonical-weather command journey completes the separately paid gantry and all six faces in 79½ village days. Seven licences, seven returned home crews, six separately paid returned source operator crews and eight setup workdays persist. The home invests eight timber, four dressed stone, four iron and eight tools; licence fees add 28 timber, seven tools and 28 food. Its 536 carried meals balance as 314 consumed and 222 returned, with no unmet crew meals. Twenty-one actual consented drain pulses find the six qualifying dry lowering intervals. Each successful interval matches an independent hydraulic control, consumes one staged 84-mass pair and frees the same capacity. All 504 gallery mass units are released, every crew returns/unloads and the complete save restores exactly.

No earlier foundation, fabrication, closure, preparation or title receipt is rewritten. Both communities retain their twelve/twenty-four residents, eight/thirteen worker capacities and health 100, with no new food shortfall or hardship. Closing home/source timber is 206/seven; source food remains about 246⅓ and home food 1119⅔. Opening stocks are controlled and disclosed: home 400 timber, eight dressed stone, eight iron, forty tools and 900 food; source fifty timber and twenty-five tools, with its other stocks retained from the input. No mid-journey grant, population, labor, title or water is added. This verifies construction custody and finite upkeep, while earned regional supply remains open. Floor/toe sealing, cleanup, dry inspection, containment, useful water and the full M0–M8 goal remain open.

Immutable closing evidence is .qa-city/wall-placement-six-face-acceptance-final.json (SHA 14f47ca4d401298451a560e215c4708549dd6cc5c3ff2f4c19c2fbeafb390b62); the independent audit is .qa-city/wall-placement-independent-acceptance.json (SHA 1f775d1bb4021d921491261eb479b872c8b2f45aca44c76ad0cb5215d78f0f5d). The original full-fabrication and separate regional-preparation files stay immutable; the latter migrates only to empty lining/wall books. Four wall tests pass from the tracked manifest-verified full-fabrication fixture, including stale wet openings, consent withdrawal and forged custody. Existing fabrication, paid fourteen-task replay, legacy migration, civic budget/labor and City projection checks pass. Served City/map checks verify six installed faces, zero remaining ready pairs, 504 free staging mass, private-field filtering, read-only reloads and layouts from 320 to 1440 pixels. See implementation status.

The actual City payment flow also passes: cancelling the gantry review leaves the whole save unchanged; confirming pays eight timber, four dressed stone, four iron, two tools and 32 quoted meals before an outward four-builder job appears. Carried custody and exact funding survive reload without completing the gantry. Evidence .qa-city/wall-gantry-payment-browser-5JtHGp/evidence.json has SHA 4d5f5a1a3604b3d2ce34a3d9513fa486543e675b5c77bdc88bd994ca4d22f157. The payment review and funded card were visually inspected at 390 pixels; the card fits all four tested widths. Both served browser servers shut down successfully.

Paid wall placement (implemented; floor and water use remain planned). After all fourteen fabrication tasks and their crew returns, the founding home can separately license and fund a lowering gantry. The two-day gantry costs eight timber, four dressed stone, four iron and two tools. It spans the 2,256-height-unit stroke from deck 457330 to floor 455074, is rated for 200 mass units against each 84-mass face pair, uses no cassette slots and intercepts no rain. Existing curtain gear supplies no free lowering rating.

Each face has its own paid four-builder home tour and one-day setup consuming one tool. Its crew waits at most fourteen village days on finite carried meals; the source separately pays and sends four drain operators after setup. Both actual crews, Hydraulic engineering, title, current licence and safe access must remain available. A new actual current-tick dry drain opening precedes a fresh wall-lowering comparison and every named current holder's consent. The separate lowering command commits one complete next canonical interval: opening and closing water, rain and incoming water must all be zero, the receiving head stays below floor 455074 and bed sediment remains unchanged. A changed opening, lost authority/operator or withdrawal cancels lowering without consuming the cassette.

Successful lowering consumes two already paid staged halves, installs one face and frees exactly 84 gallery mass units. The original fabrication asset, receipts and material investment remain immutable; a separate consumption ledger supplies City/map installed counts and current slot availability. The floor remains open and toe joints unsealed. Walls alone change no water, sediment, ground, natural curve, curtain position or reservoir operating authority. Paid gantry and setup receipts retain their physical crew histories; recall returns unspent carried goods and meals but retains completed work and spent setup tools. See reservoir construction.

The 28-day stage-specific licence costs four timber, one tool and four food from the home sponsor. Both licence and tour funding cost one attention; opening/cancelling a review, consent and recall do not. Applicable operating budgets cover exact separate licence, gantry and setup bills. At the current 35-step route the gantry tour carries 34 material-mass units plus 32 meals (66/120); a face tour carries one tool plus 84 meals (85/120). The source operator tour and both communities' continuing food/civic upkeep are additional bills. These bounded construction mechanics do not establish earned regional supply or close the full M0–M8 goal.

Paid lining fabrication (implemented; floor sealing and water use remain planned). A completed twenty-lift foundation with every construction/operator crew returned can now support a separately licensed gallery and wall-section workshop. The founding home pays and sends four existing builders; the source retains title and active Hydraulic engineering. Two separately funded four-day gallery assemblies precede twelve six-day wall-half tasks, two per perimeter face. Each task carries its actual materials and travel/work/return meals within capacity 120, completes atomically, then returns and unloads. The material bill is 60 timber, 126 bricks, 84 dressed stone, six iron and 28 tools across 80 workdays, before travel, licences, meals and source service upkeep. This is fabricated site custody, not installed lining or a working reservoir.

The new gallery is an explicitly paid open-grate structure at height 457330, 256 above the existing wall top 457074. Both assemblies must complete before it grants elevated final-hex access or twelve supported slots of carrying-mass capacity 42 each. The original closure deck supplies access only and gains no free storage rating. Gallery assembly needs an unflooded route and worksite with receiving head below floor 455074; ordinary retained surface moisture can remain. Later fabrication may use the completed gallery above a wet target only while head stays strictly below the wall top. All preceding route hexes must remain dry. Stage-specific licences bind the exact source/sponsor/route and immutable paid predecessors. The downstream opening, curtain travel, bypass, natural beds, storage curves and water/sediment ledgers remain unchanged. See implementation status for verification scope.

All fourteen fabrication journeys verified. Default-timing construction now completes both gallery assemblies and twelve wall halves in 161⅔ village days. Seven paid licences and fourteen task payments cover 80 recorded workdays, 656 carried meals and the exact material bill above. Every four-person crew physically returns and unloads; all fourteen receipts remain pinned and restore exactly. Source and sponsor retain health 100, no new food shortfall, valid labor and storage. Actual canonical rain continues, and hydrology matches the no-lining control across all 1,290 advances. Independent replay of 367 commands and those advances reproduces the complete closing save. Opening sponsor stocks are disclosed controlled construction supplies; earned regional production/import remains an open gate. See implementation status for immutable evidence and technical reference for the portable test and save rules.

The earlier 75 focused regression tests, four custody/projection checks, additive migration checks and first-trip City flow remain valid. A new portable full-journey regression passes from the tracked foundation fixture, bringing this verification selection to 76 tests without skipped cases. The completed-state browser check also passes final 14/14 task, 12/12 section and 6/6 face counts, zero installed lining, absence of further fabrication payments, exact read-only reload and 320–1440px layouts. Both final cards were visually inspected. That fabrication checkpoint precedes the six wall placements now verified above; floor sealing and useful water delivery remain planned.

Full twenty-lift foundation verified: The final thirteen cycles complete from the immutable returned-seven checkpoint in 104 village days using the default 100ms generic work unit. Every lift has its own paid licence, carried batch, source operator tour, actual dry drainage, current-holder consent, placement, reopening and both crew returns. The completed asset has 50,000 fill, bed455074, twenty placements and no active construction or operator job. Independent audits confirm forty distinct returned crew jobs, exact save restoration, immutable earlier work and rejection of a twenty-first lift. Temporary exclusions are removed; storage, capture, release and live-flow permissions remain false. This is construction-subsystem evidence from disclosed initial stocks, not earned regional-economy or full M0–M8 acceptance. See implementation status for the accepted checkpoint and audits.

Paid foundation supply bootstrap verified: Ordinary forest surveys, titles and six harvest/clearing jobs supply 168 logs. A normal operating-budget review permits 42 actual mill batches producing 126 timber, followed by the paid forester's lodge, Scouting research/adoption and a completed dry-route exchange of forty tools for 21 timber. The 55.67-day check includes the founder's and Jonas's normal old-age deaths, lawful handover to Mira and nomination of an existing younger civilian without adding residents, workers, goods or water. The returned checkpoint has home population 25/labor capacity fourteen and source population twelve/capacity eight; both retain health 100, no new food shortfall and storage below 1,400. Home timber/tools/stone/clay are 93/49/180/90; source timber/tools are 37/59.1. That bootstrap checkpoint retains two lifts; the subsequent continuation above reaches seven. Every remaining paid cycle still needs fresh hydrology, consent and physical return checks, including the next succession. Controlled initial construction stocks remain disclosed; this is not earned regional-economy acceptance. See the construction checklist and implementation status.

Regional attempt 29 corrects attempt 28's mill pause: sequential mixed shipments arrive, physical timber funds the forestry gap and the mill resumes. It reaches 32 measured days with exact daily coverage, health 100 and zero service failures in all seven communities, then stops before a civic bill after the repair helper commits the only sponsor team to food-only cargo. Repair preparation must deliver food and civic timber before the shortage. Its original longer-cadence calculation requires about 1.37 more workers than the four available for extra milling and freight; handcart repairs and inputs do not close that schedule's gap. This is evidence about the audited schedule, not proof that every ordinary schedule is impossible.

Regional preparation: first 32 days verified. The corrected fifth bootstrap completes 224 full daily assessments across all seven continuously inhabited communities. Four physical forest returns deliver 96 logs, six additional mill batches produce 24 timber, three sponsor journeys deliver their paid cargo, and a normal well repair spends eight timber, four bricks and one tool. Every community retains health 100, no new food shortfall or hardship, required services and valid labor, water and storage. All seven trips return and unload; the default-timing save restores exactly. This accepts only the bounded first 32 preparation days. The remaining 112.5 days, normal maturation of the two existing dependents and the later 120-day recurring-reserve test remain unverified. See implementation status for exact evidence. The earlier paper ledger must be reconciled with actual stock and missed local harvest opportunities before another continuation; a rate calculation does not create a receipt.

The final continuation also verifies changing stewardship: Mira's ordinary old-age death during lift19 triggers the existing public handover, preserves funded work and reduces home population25→24 and worker capacity14→13. Both communities remain healthy, fed and within labor/storage limits. Unique guarded command IDs avoid replaying the earlier saved receipts. The thirteen new cycles pay actual licence, material, operator and service bills; returned food is credited only after physical unloading. Exact default-engine restoration preserves the whole chain. See implementation status for costs and the preserved earlier failed harness branches.

Remaining M8 work is separately paid sediment cleanup/spoil transfer when needed, hydraulic pressure tests, containment and useful permitted water delivery. The actual paid installed-floor dry inspection is completed and recorded above. The installed connected lined-open mode gives the natural basin sole persistent water custody, exports local rain and separately attributed upslope bypass once, and avoids a duplicate local evaporation/infiltration pass. Fabrication alone does not enable it; the separately paid actual floor-lowering receipt does. A proposed high-side spoil rack additionally needs a separately paid full-stroke hoist and actual authorized cleanup intervals; existing curtain gear cannot lift sediment to the higher rack. Those later proposals and their hydrology remain unverified. The full M0–M8 objective and earned regional supply gates remain active. See the construction checklist for the current fabrication bill and remaining gates.

A source-only refinement now proposes one persistent water owner for the lined-open bay: the natural basin. The footprint would have zero Surface storage and local losses, exporting rain and attributed upslope runoff once while remaining in the basin curve. A single basin evaporation pass avoids charging the footprint twice; connected-basin aggregate seepage remains and is not a claimed liner leak or measured yield benefit. Nonzero sediment removal needs finite paid cleanup and supported spoil custody, and a real dry inspection interval remains unproved. This proposal is not implemented; see implementation status.

Regional repair attempts 25–27 extend the corrected food and mill staffing schedule. Attempt 25 reaches seventeen measured days before an audit helper misreads already-delivered food; attempt 26 fixes that receipt check and reaches 22 days before a helper omits restoring field staff. Attempt 27 restores the field correctly and retains health 100, zero service failures, positive food, a paid repair, replacement materials, the next repair reserve, empty freight and exact restoration through 22 days. It stops at the sponsor timber guard: 3.75 timber, a mill producing 1.5 against two daily upkeep, and home timber 18.25 below the protected export trigger. A physical milling/delivery schedule must close that rate gap; the full 120-day gate remains open. See implementation status.

Regional repair reserve, attempts 19–22 (not accepted): Attempts 19–20 identify the actual thirty-log forestry target and show that scheduled milling from physical logs must count in the next-event timber guard. Attempt 21 corrects that guard but reveals that the nominal forest route still selects secondary food cargo; it stops after forty measured days with sponsor food 3.5 against the next ten-food bill. Attempt 22 makes that route log-only, collects 84 logs in four measured trips and carries nineteen food with a sixteen-timber export, then stops after 34 measured days when repair scheduling pauses routes with sponsor food 9.5 against the same bill. Attempts 21–22 keep all seven communities at health 100 with exact daily coverage and no service failure; neither passes the 120-day reserve gate. The accepted input remains immutable at SHA 4746644b25d2bceca3d97ca70bc1b5f8d4cc0f975afbb009299587388de360ec. The next schedule must physically provision sponsor food through route draining, the paid repair and replacement-material production before entering fundRepair. See the implementation status for exact evidence and hashes.

M8 paid foundation (all twenty paid lifts and crew returns verified): The raised design uses twenty paid lifts of 2,500 fill subunits and 250 height units each, from original bed 450074 to floor 455074. Each lift consumes ten rough stone, five clay and one tool, totaling 200 rough stone, 100 clay and twenty tools, before licensing and meals. These are direct investments of existing extracted goods into the frozen construction specification; no new fill resource or recipe credits free material. Four existing residents from the source's same-owner founding home carry one home-paid batch, complete at least one preparation day, then wait on finite carried meals. The home also pays the foundation licence. The four stationed drain operators remain a separate labor commitment. Preparation creates no raised ground or operating authority.

Each prepared lift needs a new actual dry drain opening, fresh affected-holder review and consent, and an explicit combined placement/closure command. The transition moves all local bed sediment into durable contained spoil with no inventory or fill credit, consumes the exact carried batch and places one lift atomically. Water must be exactly zero. The new window retains the existing eight-interval limit and every reopening-prefix review; geometry is fixed throughout that window. Reopening removes the temporary exclusion but keeps the paid raised bed in natural-basin capacity and flood exposure. A later lift repeats the paid preparation, dry-opening and authority sequence. Old isolation-only receipts remain immutable. Version 32 now supplies separate construction, ground/spoil and authority books; old saves migrate to empty books. The complete twenty-lift command journey places and reopens the worksite after each lift, returns all forty crew jobs and restores exactly. The final thirteen cycles also preserve funded construction through lawful succession. Lining, permanent containment, capture/release and useful irrigation remain required. This work does not complete the M0–M8 goal.

The source and founding home now supply distinct paid crews. The existing basin-approach source has twelve residents, eight workers and a surveyed twelve-unit water supply; two local four-person crews plus Hydraulic engineering and its registry would exceed that labor capacity. The source's same-owner founding home therefore pays the foundation licence and lift cargo, and sends four existing residents over a frozen dry route. The source retains the proposal, title, staffed engineering and its separate drain operators. The verified journey uses 35 route steps, 84 meals and 31 cargo weight, totaling 115 of 120 capacity. It adds no residents, labor or water capacity. Each later licence may quote a new safe route; existing licence, cargo and travel histories retain their exact origin and route. Historical paid construction remains valid after later stewardship changes, while new work rechecks current authority. The full twenty-lift construction and return acceptance gate now passes; later lining and reservoir-operation gates remain open. Existing closure and isolation fixtures remain immutable.

Regional repair reserve, attempt 18 (not accepted): The protected-export continuation completes its first measured paid well repair and 29.5 measured days after 32.5 preparation days. All seven communities retain health 100 with no service or food failure, exact daily assessment coverage, empty closing freight and exact restoration. It stops when sponsor timber reaches 4.75: opening 24.25 plus 16.5 milled plus a 24-unit delivery cannot sustain 60 consumed in upkeep. Home closes with 19.25 timber and can spare only 3.25 above the protected sixteen; another 24-unit shipment is unavailable. One 21-log sponsor harvest in the measured window does not sustain the current milling/upkeep cadence. This is a schedule/rate failure, not a proof of impossibility. The 120-day repair-reserve gate remains open; later attempts are recorded above.

M8 paid temporary isolation (implemented): After the supported-open perimeter, a separate paid removable curtain has 33 tasks: 28 panel courses, a flush seat, dry operating deck and lifting/reopening gear, upslope bypass/header, nonreturn spill fitting and raised proof. Its bill is 64 timber, five bricks, eight dressed stone, 34 iron and seven tools, plus licences and carried meals. The existing outside jamb support is credited. Four-person capacity-limited trips keep the assembly raised and the full opening clear throughout construction. The immutable completed asset remains raised-ready; a separate operating ledger records its actual position.

One separately approved actual attended-drain pulse must leave exactly zero water in the current interval. Retained sediment remains in ordinary local custody and occupies twice its mass in effective volume. The same paid stationed operators may then close only after a fresh review of eight isolated intervals and every forced reopening prefix zero through eight, followed to a common seventeen-interval deadline. Every named affected holder grants current consent. CLOSE binds the exact paid assembly, perimeter, drain receipt, proposal, opening and frozen consent prefix. Station time and carried meals must cover mandatory reopening before interval nine plus physical return. Comparison and authorization never lower the curtain automatically.

Migration 30→31 introduces separate version-one physical-closure, operating-authority and hydraulic-isolation books. Startup restores a privately authorized curve exclusion before validating retained surface water. Water and bed sediment remain in their ordinary ledgers; live sediment partitions reference the exact durable isolation record and certificate. Each actual interval uses the canonical coupled kernel and is checked against its private preflight. Recall, withdrawal, changed authority or the deadline requests reopening before the next canonical interval; the crew stays at the paid station until the reopening receipt commits. Interior/exterior wall failure also runs fresh natural drainage from the same opening. Rejected commands restore the private runtime boundary, and the reviewed reach is reserved against new hydraulic changes while closed. New drain/outlet pulses cannot overlap isolation. Reopening does not automatically reclose.

Paid foundation lifts are implemented to the bounded extent described above. The full foundation continuation has passed. Wall/floor installation, intake/capture, finished reservoir operation and useful irrigation remain implementation and acceptance work. An eight-interval window does not silently grant enough time to complete the later fill: any extension or subsequent window needs fresh authority. The full M0–M8 goal remains active; this stage does not satisfy the earned regional supply or completed reservoir gates.

Temporary-isolation verification: 111 distinct focused tests pass, including paid assembly, live/reloaded isolation, consent and recall, conservative failure reopening, migration and hydrology regressions. Served City QA passes the explicit comparison/consent/close/reopen journey and 320/390/640/1440-pixel layouts. Controlled construction stocks and separately seeded sediment/flood inputs are subsystem evidence, not earned regional or reservoir acceptance. See implementation status for the evidence and remaining gates.

Regional repair-reserve continuation, attempts 14–17: The accepted food-throughput input remains unchanged. Attempt 14 exposes a zero-elapsed quote-shape error; 15 stops before a mill consumes logs still travelling; 16 completes a real opening well repair and begins measurement but stops at a quote-before-worker-release error. Attempt 17 fixes that ordering and completes fifteen measured days without service, health or food failure, but at condition 70 the home has only 10.25 timber against the guarded sixteen needed for repair plus retained reserve. A twenty-four-timber sponsor delivery leaves too little home repair stock. The next schedule must reserve that bill before outbound timber and preserve physical log deliveries and civic output; this is not repair-reserve acceptance. Full evidence and exact restoration are recorded in implementation status.

M8 temporary-worksite comparison: A completed supported-open perimeter now has an explicit City comparison for eight or sixteen temporary-closure intervals. It starts from actual water and sediment. A moist plot needs one separately reported, conservatively screened hypothetical drain interval before closure; the candidate must reach exactly zero surface water. Removing the plot from the natural basin curve moves no quantity, and its immediate exposure change is recorded. The natural branch starts at the same actual opening and includes the preparation interval, so downstream effects cover the complete sequence.

The unfinished enclosure uses original ground 450074, spill 456074 and wall top 457074: normal volume 60,000 and absolute volume 70,000, with water plus twice retained sediment occupying that space. Ordinary surface-water and sediment books remain sole custody. Direct rainfall and interior opening water pay unlined losses; upstream water and sediment bypass without eroding the interior. Spill is finite and depends on the complete same-interval receiving head, including later basin inputs. Backwater may retain freeboard. If the accepted branch reaches the interior or exterior wall limit, it is discarded and the same interval runs afresh with the natural curve restored, ordinary capacity and conserved downstream release. There is no automatic reclosure.

The eight/sixteen-interval comparison remains read-only. Live temporary closure uses the separate paid assembly, operating review and durable ledger described above; this comparison alone grants no authority or capacity. The full M0–M8 goal stays active; see the construction checklist and verification status.

M8 supported open perimeter: After completed preparation and the connected-closed drain, four paid residents can construct the raised design’s five keyed walls and downstream open-bay supports. The exact plan contains 193 structural lifts, five keyed packages and one final check. Each lift spans at most 256 height units, with an exact final remainder; its bill is one timber, one brick and two dressed stone. Each keyed package costs two timber, two bricks, two dressed stone and one tool; the final check costs one tool. The total structural bill is 203 timber, 203 bricks, 396 dressed stone and six tools, before licence fees and journey meals. Finite tranches preserve installed work and physically return unused cargo. The downstream opening remains clear through its full height; this stage changes no water, sediment, terrain or natural basin capacity.

The supports are placed entirely inside plot 1372994 using the paid preparation frame and cribbed structural sections. Neighbor beds size the outside support face; they are not worker positions or permission to excavate adjacent plots. The access threshold stays at original grade 450074 for every task, including upper lifts: basin exposure or water reaching that grade stops further work. Ordinary retained surface moisture remains in its existing ledger. A completed support is not a closed barrier, and no downstream cross-bay key or face is installed.

A source-only 28-village-day licence costs four timber, one tool and four food. Licensing needs the exact immutable preparation/drain predecessors, current source title and route, active Hydraulic engineering, Land registry, Public accounting and a sound staffed registry office. Hydraulic engineering remains required in the field. Ordinary household reserves and any enabled founding-HOME operating budget still apply. Each four-person trip carries the largest next task prefix that fits capacity 120, meals and a physical return before licence expiry. Recall, lost authority or unsafe access retains installed supports and returns the crew with its remaining custody.

Major-waterworks migration 29→30 introduces a separate version-one perimeter ledger. City exposes licence, tranche and recall reviews, exact support progress, carried supplies and map location. The separate temporary-isolation stage above follows the open perimeter; all twenty raised-fill lifts now pass. Paid lining fabrication follows, while floor installation, reservoir operation and useful irrigation remain open. See the construction specification and implementation status.

M8 attended construction drainage: A completed closed drain can now receive a separately paid four-person operator tour. Two timber, one tool and quoted outward, fourteen-station-day and return meals enter finite carried custody, capped at 120. Source Hydraulic engineering, available residents and ordinary reserve/operating-budget checks remain required. Existing home budget service prerequisites still apply; this stage introduces no additional source clerk requirement.

Verification now covers 293 distinct focused cases and the served responsive City journey, including an actual 1,575-subunit release, saved continuation and physical return. Nonzero sediment attribution and late receiving-head rejection have separate controlled tests. Catch-up cannot accept retroactive consent, and City displays current viewer rights without private signer details. Controlled service supplies make this subsystem evidence rather than a completed earned reservoir journey; implementation status records the exact scope and artifacts.

Each release needs fresh source approval for the exact next water interval and separate current consent from every named affected holder. Construction consent grants no operating water or sediment rights. Review forecasts one added release followed by seven closed intervals under current land uses. Before execution, the complete coupled water/sediment interval runs on an isolated copy through the same core as live simulation. Final receiving head includes all same-interval incoming water and sediment before spill. Changed opening custody, dependencies, rights, staffing or an expired station window cancels the pulse before live movement; ordinary runoff continues.

Successful extra drainage uses the existing natural edge and ordinary water/sediment ledgers. An immutable interval receipt attributes added movement without duplicating custody or changing the historical connected-closed construction asset. The control stays closed between separately approved pulses. Recall cancels pending drain authority immediately. During a lowered temporary-closure window, operators remain stationed until reopening commits, then walk home and unload unused supplies. Ledger 29 adds a separate version-one operating book and rejects hidden, incomplete or inconsistent custody. City exposes tours, exact reviews, holder decisions, results and recall. Supported open-perimeter work and separately authorized temporary isolation are implemented above. Paid fill, finished reservoir storage and useful irrigation remain open. See the construction specification and implementation status.

M8 paid closed construction drain: A separate notice and paid licence now precede a three-task, four-person construction journey after completed disconnected preparation. The fresh eight/sixteen-interval comparison identifies affected owners; their consent is recorded against that review and remains withdrawable. The twenty-eight-day notice and exact title, preparation, geometry and structural downstream dependencies govern further work. A four-timber/one-tool/four-food licence pays for authority to install a closed control. Construction separately consumes two bricks, two dressed stone, two iron and two tools, plus finite travel/work meals. Recall or lost authority returns unused custody physically and preserves installed components.

The resulting asset is connected-closed, with an open perimeter, unchanged natural ground/basin curve and zero water or sediment moved. Preparation history stays immutable. Ledger 28 adds the separate version-one drain book; older snapshots migrate only when drain fields/jobs are wholly absent. City shows notice, consent, licensing, paid work, recall and the closed result, while public map data exposes only the visible works and crew. Separately paid attended drainage now binds current operating consent and conserved interval receipts as described above. The supported perimeter and temporary isolation are implemented above. Paid fill, finished reservoir storage and useful irrigation remain M8 acceptance gates. See the construction specification and implementation status for verification.

M3/M6/M7 bounded food-throughput acceptance: A command-only continuation now sustains the home and sponsor's services through exactly 120 measured days plus one day of paid return journeys. Independent audit confirms 121 unique, contiguous civic assessments for each, no failed service day, exact material balances, empty freight at both boundaries and exact save restoration. Event-observed health stays 100 across seven communities, population/workers stay 146/77, and network food increases 577.5 after production, meals, specialist upkeep and freight consumption. Five repairs are paid. Freeing workers from idle mills permits concurrent two-worker supply teams; all routes still compete with local production for actual residents.

The repair-reserve gate remains open after two further preparation failures. Attempt10 adjusts staffing too late for a known labor decline. Attempt11 protects that boundary but its runner repeatedly resets the sponsor mill, so no batch completes before civic timber runs out. These are preserved failed schedules, not an economic impossibility result. The next distinct continuation must retain productive assignments between actual changes and complete the promised early supply before home bulk stockpiling. Implementation status preserves clocks, custody and independently checked artifact hashes.

This closes a bounded food-throughput trial, not the full regional supply gate. Combined logs/timber increases 13, but home timber ends at 4.25 with headworks condition zero, below the eight-timber repair bill; secondary wells still supply households. Converting the retained logs into a recurring civic and repair reserve, then continuing finite mineral replacement, remains required. No resource grants or whole-scenario replay are claimed. The earlier food-deficit trial below remains separate evidence; implementation status records exact clocks, receipts and limits.

The subsequent repair-reserve candidate fails after 98.5 measured days: home timber cannot cover repair plus civic reserve, sponsor food reaches zero and measured civic services fail. The primary mill's fourth worker leaves only three available after an ordinary labor decline, preventing simultaneous two-person freight teams. A revised three-worker schedule preserves civic services and repair timber for 31.083 measured days but then stops at sponsor food zero; replacement-material journeys and repair work have paused core freight for 17 days. The following candidates test earlier finite-part production and a larger sponsor food target, with preparation costs and minima still counted. These failed branches remain separate from the accepted food-throughput evidence.

The two bulk-preparation follow-ups also stop before measurement: first at a sponsor staffing threshold, then at insufficient sponsor civic timber despite prepared home repair parts. Positive food and exact restoration alone do not satisfy the regional gate. The next supply analysis must account for labor declines and both communities' simultaneous upkeep, including home stock reserves that block outbound timber. The implementation status retains each separate failed branch and its evidence.

M8 construction-drain review: City separates the unfinished site's drainage comparison from the finished-reservoir forecast. The eight/sixteen-interval candidate leaves the perimeter open, preserves original ground and natural basin capacity, and adds only bounded drainage of retained surface water along the existing natural edge. Ordinary water allocations carry the sediment; no surface bed becomes free spoil or materials. Same-interval receiving head before spill limits the extra flow. Backwater can hold it while the site remains exposed to natural flooding. Owner review preserves temporary downstream, coastal, land, ecology and stock effects without moving live water or issuing rights. Paid closed connection and construction consent are now implemented above; live attended drainage now uses the separate continuing consent and interval receipts described above. Supported temporary isolation is implemented above. Foundation fill, finished containment, reservoir storage and useful irrigation remain M8 acceptance gates; see the construction checklist.

Drain-review evidence: 62 distinct focused tests and the served responsive City checks pass. At the unchanged reviewed site, the candidate drains 1,575 subunits over eight intervals or 3,150 over sixteen, while backwater blocks additional drainage in six or twelve intervals. The conservative storm head reaches 455035.6966 against original grade 450074. Water/sediment balances and candidate ledger revalidation pass; the result establishes drainage windows rather than continuous flood protection. Implementation status records controlled fixture limits and exact evidence.

M8 paid disconnected reservoir preparation: A selected raised v2 draft can file a separate source-only preparation notice, pay a registry licence and send four residents to stake six boundaries, assemble an unopened drain fitting and a disconnected cutoff frame, and verify the site. The exact nine tasks invest 12 timber, 2 bricks, 4 dressed stone, 2 iron and 2 tools; travel meals are paid separately. The licence costs 4 timber, 1 tool and 4 food and ends with its fourteen-village-day notice window. Current source title, a source-held walking route, closed completed outlet works, current engineering and unflooded ground are required. Weather or authority changes return the crew with unused goods; completed tasks stay at their exact site. City exposes review, payment, progress and recall, including retained work after amendment or withdrawal. Ledger 27 migrates older saves to an empty version-one preparation book without altering earlier proposal, notice or construction records.

Preparation leaves authored ground, natural runoff, basin capacity and water/sediment custody intact. It creates no raised fill, perimeter walls, opened drain, storage or capture/release connection. The implemented successor stages connect a closed exterior drain, then separately authorize finite attended pulses with conserved ordinary water/sediment routing and unchanged natural basin capacity. The supported perimeter and separate paid curtain now permit quantity-neutral temporary isolation with conserved original-bed custody, as described above; stakes and a disconnected cutoff frame provide no barrier. The later paid-fill boundary must conserve existing water and sediment before solid material displaces water. Forecast success alone cannot grant those permissions. This advances the full M8 path without completing its reservoir or useful-irrigation acceptance; see the off-channel construction checklist.

Preparation verification: 186 distinct focused tests pass across the new rights/work ledgers, existing outlet stages, City/protocol, founding/population and migration. Major-work crews use carried meals without duplicate home consumption and remain protected from hardship departure while committed. The served browser verifies payment review/cancel, clerk stand-down after licensing, crew reload, physical recall/unloading and four widths from 320 to 1440 pixels. An additional uncached prerequisite rebuild passes the four preparation-custody cases; final focused runs cover later strict-state and meal-accounting edits. Controlled late-stage construction stock is explicit and does not prove an earned economy. See implementation status for exact scope and evidence.

M3/M6/M7 attended regional service interval: A later command-only trial keeps the sponsor mill staffed while replenishing civic timber, instead of waiting for another woodland harvest. The 120.083-day measured loop records no civic-service failures and minimum health 100 across all seven tracked communities; seven paid repairs complete. Existing return journeys close at 121.75 days, with Regional capital recognition, a retained repair bill and an independently verified exact save restoration. Combined home/sponsor wood rises 44.25, but sponsor food falls 667.5→186, so renewable food supply remains open. No population, labor, founding-stock or coin grants are introduced. Earlier failed attempts and the unchanged 48.583-day input remain distinct. This establishes bounded attended service, not equilibrium; see implementation status for observation scope and precise boundaries.

M8 paired off-channel forecast and raised design (implemented, bounded): City owners can explicitly compare eight or sixteen future water intervals for their selected compartment. Natural and hypothetical constructed branches use cloned current hydrology and the same weather, with conserved dewatering, direct rainfall, source capture/bypass, sediment, spill and outlet delivery. The response retains temporary land, soil, building, wetland, fish and downstream-receiver changes, including coastal interests; it changes no proposal, water, goods or permissions. Owner responses identify foreign resource harm without exposing those communities' stock quantities; the internal evidence remains exact. Existing v1 geometry fails at water tick 2071 in the reviewed fixture: receiving backwater 455205.9 blocks its 450074 spill while direct rain would overflow storage. The failure and completed partial evidence stay visible.

New selections use a distinct raised v2 design: original natural ground/exclusion 450074, floor 455074, maximum water/spill 456074 and wall top 457074. It requires 50000 fill subunits of paid foundation work; the design supplies none. Gravity is bound to the actual source bed 472464. Version 26 preserves saved v1 terms and immutable notices, rather than upgrading their geometry. Clear and reselect to review the new candidate. A bounded forward comparison is separate from a complete impact notice, paid containment, live reservoir custody, useful irrigation and continuing operating rights; those gates remain open. See the off-channel checklist and implementation status.

M3/M6/M7 maintained sponsor-forest interval (verified, bounded): The later corrected continuation physically relocates four residents to the sponsor, suspends Land registry after paying the expansion title, and runs both home mills from sponsor forestry and mixed Governor freight. Its 48.583-day window keeps sampled health at 100 and required freight/sanitation services active, re-earns Regional capital recognition and restores exactly. A deliberate day-24 maintenance window frees workers, pays an actual headworks repair, replaces spent bricks and collects 96 food. The interval harvests 250 logs and mills 234 timber, with exact custody; combined wood stock still falls one and home/sponsor food reserves decline. Woodland recovery and continuing food supply remain unresolved. The complete repair bill exists at close but not throughout the interval, so attended maintenance is not autonomous repair readiness. The earlier 24-day branch remains separate evidence. See implementation status for service changes, boundaries and receipts.

M8 off-channel conservation primitives and sealing review (implemented, bounded): The selected compartment now has a pure interval kernel for finite capture, rounded environmental bypass, direct rain, bounded losses, sediment-displaced capacity, nonreturn spill and head/receiver-limited release. Exact endpoint addresses and immutable receipts bind every input/output; none creates a live asset or permission. A separate sealing planner accounts for the footprint's existing surface water and sediment before a hypothetical empty compartment opens. Drain water supports only a bounded sediment load; the remainder stays explicit planned excavation spoil, with no inventory credit. City exposes this current-custody calculation under Before sealing the compartment. At the reviewed real design checkpoint, the footprint holds 2,000 water subunits despite no natural-pool exposure; planned dewatering would credit those to the existing basin, and excluding the footprint removes exactly one bed from the candidate storage curve. Reads change no world custody. Read-only forward coupling is now implemented as described above; paid containment/dewatering, durable storage, useful delivery and continuing rights remain open; historical counterfactual simulation would additionally need full per-cell interval evidence. See the off-channel checklist.

M3/M6/M7 first satellite material cycle in the default regression (verified, bounded): The ordinary City integration now branches from its unchanged first earned-100 checkpoint at day 3016 through paid sponsor development, household relocation, satellite founding and a complete replacement-clay repair. Sequential saved boundaries retain the same world; no ignored checkpoint, stock grant or lifecycle rebase is required. Twelve finite clay are extracted, eight travel satellite→sponsor→home, six bricks are fired, and eight timber/four bricks/one tool restore the worn-out central headworks to 100. Offline versus stepped cargo custody and exact final restoration pass, as does the whole City test with its separate 120-day and 3,600-day branches. The preparation records one old-age death and four relocations, home minimum health 20 and sponsor minimum health 89.5 with an observed hardship counter of seven. The later material-return leg records no hardship and finishes with populations 95/8/8. This makes one material cycle reproducible; healthy expansion and recurring supply balance remain open. See implementation status and technical reference.

Verified, M3/M6/M7 recurring satellite supply (bounded): From the accepted first replacement-clay repair, a command-only continuation builds the satellite's own food plot, stages actual sawn timber and tools, activates the sponsor's researched Regional institutions, and authorizes both paid Governor legs plus renewable forestry. A measured 24-world-day interval dispatches eight new upper and four new lower trips, completes two automatic headworks orders, keeps food available and finishes with all three communities at health 100. Population remains 95/8/8 and restore/replay is exact. This uses reserves: home/sponsor timber falls from 127.25/73.5 to 28.25/54.5, bricks from 16 to 8 and tools from 3 to 1; no forestry cargo is dispatched during the interval. The finite clay seam retains 24 after preparatory extraction. A later continuation builds and staffs the second sawmill described below; adequate log throughput, continuing tool supply and later replacement deposits remain necessary for a longer sustainable network.

Implemented, M6/M7 paid City growth plots: Recognized City and Regional-capital settlements can register existing released fourth-ring field/forest plots for ordinary growth. Registration requires active Record keeping, Public accounting, Land registry and Regional institutions, a staffed sound registry, an individual physically returned survey no older than fourteen village days, adjoining title, sixteen timber, two tools and eight food, plus ordinary budget/reserve checks. This reuses the bounded release set; excluded founding parcels, marked features and foreign titles remain excluded. The receipt freezes earned recognition and registry identity. City title persists after later decline or service loss, adds no residents, water yield or stock, and construction remains separately paid. Existing exact waterworks authority retains its original receipt. An earned continuation registers the twenty-second plot, clears it and builds a second lumbermill; the resulting City restores exactly. Both mills are later staffed by three residents each and receive real forestry cargo. Over the later 24.083-day interval, home timber rises from 1.25 to 10.25 but sponsor timber falls from 41.5 to 0.5, stopping its Record keeping and Regional institutions. Home health reaches 71.7 before recovering to 100. This verifies construction and renewed physical supply, not uninterrupted services or network equilibrium. Household water capacity 96 covers the current 91 home residents despite the worn-out central headworks. See implementation status.

M8 reservoir review after outlet commissioning (implemented, bounded): Recorded retention and release comparisons now include prior positive outlet transfers. The unchanged branch must reproduce every water balance, ordinary crossing, bound operating receipt and coupled sediment route/bed. The proposed branch reuses the recorded control settings and ticks, recalculating transfers from its changed water and head; capture can reduce a prior pulse to zero. City distinguishes observed outlet water/sediment from proposed amounts. Missing certificates or coupled history reject the complete comparison rather than dropping an interval. Legacy unobserved rows remain unobserved. This is a conditional historical comparison, not recurring operating permission or a built reservoir.

M8 separate reservoir design (implemented; physical operation remains open): The eight-entry candidate paths merge inside the natural basin and cannot isolate stored water from environmental bypass. The source can now select or clear an exact dry compartment at hex 1372994 after actual survey and title registration. The amendment freezes a 10,000-subunit capacity, six internal walls/freeboard, a single controlled source split, exterior drainage/nonreturn spill and a junction into the independently valid outlet. It replaces shared-pool intake terms, preserves historical notices/outlet receipts and returns the proposal to draft. The existing natural basin is unchanged. New notice filing remains unavailable until the separate forward comparison is integrated with complete impact and permission requirements; selecting geometry builds nothing. The original v25 migration preserves older terms; the later v26 migration above also preserves every selected v1 geometry. Paid construction, initially empty liquid custody, direct rainfall/bypass/spill accounting, useful irrigation, continuing rights and maintenance remain required in the off-channel implementation checklist and major waterworks plan.

Renewable fish-stock save custody (M0/M3, implemented and verified, bounded): Loading a world no longer overlays missing stock rows with fresh authored fish. Each stock carries a versioned axial address beside its numeric cell, and the saved set must equal the authored Tidebreak shoals plus stocks actually established by coastal founding and coastal outposts, including evacuated sites. Restore checks exact source identity, recovery rate and day length, bounded remaining quantity, depletion status, recovery clock and revision. Missing, extra, conflicting or relocated records reject instead of refilling or moving a shoal.

Complete older numeric-only ledgers migrate by adding address metadata without changing fish, habitat, recovery time, inventory or catches. Only an explicit pre-stock state/simulation 1/1 save without resource-use evidence may initialize an entirely absent ledger. The first-city walkthrough and harvesting controls are unchanged. This closes a demonstrated resource-resurrection bug, not the remaining general map/entity/job migration or the full M0–M8 goal. See implementation status and both player and technical wiki explanations.

Renewable-stock verification: 54 distinct focused tests pass, including real coastal founding/outpost establishment, corruption rejection, compatible legacy metadata, durable gateway startup and the existing City integration. A read-only audit covers three local worlds: the earlier connected-outlet checkpoint and current satellite-founded checkpoint preserve stock custody plus inventories/economies exactly; the older persisted capital store preserves stock custody, with a separate existing storage-policy migration outside that economy comparison. All source bytes, hashes, sizes and modification times remain unchanged. The focused evidence is .qa-city/resource-stock-coordinate-final.txt, .qa-city/resource-stock-existing-tests.txt, .qa-city/resource-stock-adjacent.txt and .qa-city/resource-stock-existing.txt. Static catalog validation and generated wiki checks pass; this is not a full-repository test result or completion of M0–M8.

Commissioning verification — 125 distinct focused tests pass: 30 core water/sediment/impact/integration/migration tests, 88 adjacent impact/budget/attention/City/regional/protocol tests, five physical-connection tests and two commissioning/reservation tests. The current commissioning suite also verifies full-corridor title loss and durable operator meal-clock events between water intervals. The paid-monitor/operator journey now authorizes a real pulse, matches all ten live water-interval fingerprints, transfers exactly 1,000 subunits (one game water unit) with a coupled zero-sediment receipt, closes observation and physically returns the operators. Scheduled and completed states restore; altered review, consent, interval, water and meal/material custody reject. An explicitly controlled affected-cell tenure branch verifies the second named community's consent and withdrawal. Relevant construction rolls back completely, unrelated production continues, pre-release drift moves no water, and post-release drift records one retained transfer plus an incident. The fixture begins after isolated late-stage construction with controlled material lots and rebased household clocks, so it proves this subsystem rather than the entire earned economy.

The live-server browser verifies closed-connection review/cancel/fund/recall with exact command payloads and physical refunds, map crew visibility, operator review/cancel/fund/recall, exact pulse authorization, reload and consent withdrawal at 320, 390, 640 and 1440 pixels without page errors. Three older local worlds preserve their prior water/sediment, stock and population and restore exactly again. Full gameplay acceptance remains open. Conservative limit: physical-work reservations are reach-scoped, but the opening fingerprint covers the wider registered hydrology network; a disconnected basin's hydrology change can invalidate a review.

Closed-gate connection and single-pulse commissioning (M8/W4, bounded): Completed receiver/source controls now unlock separately paid plug-removal work. Four builders travel receiver first, invest four whole workdays (4 timber, 2 bricks, 4 dressed stone and 4 tools in total, plus actual travel/work meals), remove both natural plugs behind closed controls and return unused custody. A separate four-person operator expedition costs 2 timber, 1 tool and finite meals for travel plus up to fourteen station days. Only operators physically at the dry source worksite may request one reviewed pulse, capped at 1,000 subunits (one game water unit).

The pulse forecast follows paired closed/open branches through every changed basin and both changed coastal crossings until water storage and sediment bed differences close, within twelve intervals. It inventories affected modeled fish, ecology, land, structures and current holders; unresolved exports or adverse modeled impacts block authorization. Source authorization and each named holder's revocable exact-review consent are separate from expired construction notices. Every physical alignment cell also freezes its source-charter or exact unassigned licensed-corridor title basis; a later foreign charter or changed basis blocks release independently of the affected-water graph. The live water kernel checks interval fingerprints and conserved debit/credit, closes the gates in the release interval, and retains actual water/sediment receipts. The affected reach is reserved during observation; unrelated city activity may continue. Cancelled, completed or interrupted observation sends operators home with remaining supplies. One actual transfer permanently consumes this asset's test allowance; it does not enable recurring release, intake capture, reservoir storage or village irrigation.

New version-one connection and commissioning books migrate only wholly unmarked older saves to empty ledgers. Physical work, crew addresses, paid custody, certificates, grants and conserved transfer identities remain separately validated. Reservoir-retention replay now preserves and verifies recorded positive operating requests and coupled sediment; future pulse forecasting remains a separate bounded capability. See major waterworks plan, player guide and technical reference.

Earlier transfer-kernel verification (historical baseline): 142 distinct focused tests pass: 25 water/sediment cases, 44 impact/rainfall/exposure/unsupported-operation cases, and 73 surface-water, natural-connection, fish, proposal and City-integration cases. Three existing local snapshots preserve all prior hydrological values, stock and population through migration, then restore exactly again. Controlled binding tests cover post-loss debit/credit, closing levels, a nearly dry sediment-filled source, mass transfer, forged balanced receipts and omissions after the history window rolls forward. The separate paired monitoring probe identifies two changed coastal crossings and finite storage closure; it supplied the initial evidence for the later commissioning implementation; the injected probe itself granted no operating approval. The complete M0–M8 goal remains active.

Capital satellite material cycle (verified, bounded): The command-only continuation from the first earned-100 save now establishes the sponsor and clay satellite, supplies its real construction, extracts twelve clay from a finite 240-unit seam, and physically carries eight first to the sponsor and then home. Four clay remain at the satellite. Home fires eight clay plus three logs into six bricks, then pays eight timber, four bricks and one tool for an actual headworks repair from condition zero to one hundred. Founding grants and coin balances are unchanged; no stock, population or lifecycle-clock grants were used.

The final .qa-city/satellite-material-accepted.json restores exactly. The first clay trip also matches one offline catch-up against twenty-four exact due-time steps. Final populations are capital 95, sponsor eight and satellite eight, with 151 residents/82 workers across the network after the earlier recorded old-age death, maturation and physical transfers. All three have zero food hardship; capital health is 84.32 and the other two are 100. Child food is 21 and sponsor timber/tools are exhausted. This proves a funded first replacement-material cycle and recovery after water-service failure, not uninterrupted water, continued exact-100 population or autonomous long-term supply. The separate verified 120-day exact-100 interval remains valid. Implementation status retains the founding and material provenance.

Sealed-control verification: 71 distinct focused tests pass: ten new endpoint cases plus 61 adjacent construction/channel/title, budget, attention, City/regional-projection and protocol tests. The new suite builds a paid founding/footing/interior/permit fixture, with explicit controlled late-stage material lots and coherently deferred village-day/identity windows. Final cases revalidate that saved fixture with the current engine; this proves isolated construction custody, not long-run material affordability or useful reservoir operation. Coverage includes receiver-before-source completion, the wet source component and separate dry worksite, resumed physical trips, recall/rights loss, budget spending, public privacy, live daily advancement, real-clock funding, fractional unloading, and corrupted/overlapping saved crews. Real-server browser checks verify reviewed renewal/funding/recall, map visibility, reload, both sealed cards and 320/390/640/1440-pixel layouts without page errors.

Remaining M8 water gate: The capped outlet test establishes a measured transfer through one connected asset only. Full reservoir operation still needs physical intake and containment, initially empty project storage, environmental bypass, spill safety, continuing rights and operating maintenance/removal. The capital-origin satellite now closes one paid replacement-material cycle; full recurring supply and the complete M0–M8 acceptance goal remain open.

Satellite source provenance: The earlier probe used the 100-resident equilibrium-setup boundary, 59 village days after the first earned-100 checkpoint. It already consumed 56 finite clay and 20 stored ore during setup; it was not after the separately measured 120-day interval. The successful command-only material continuation above branches from the actual first earned-100 checkpoint, which retained 128 clay in the deposit and 122 stored ore. It now proves one replacement-clay and repair cycle; recurring supply and uninterrupted service remain open. Later-setup brick shortages are not by themselves evidence for changing production balance.

October 2 sealed outlet controls (M8/W4, partial): A fully supported and lined dry outlet now permits paid receiver-control construction, followed by source-control construction. Four residents carry bounded materials and meals, prepare the exact endpoint profile, install its frame and closed iron gate, check its seal, then return and unload. Recall and interruption preserve invested work and return unused custody physically. The source component faces basin water; its crew works from the first completed dry interior hex behind the intact source plug. Component and worksite retain separate checked axial addresses and title evidence. Flood or fire at the dry worksite blocks work.

Paid construction permits can be renewed after interior completion until both controls and the closed-gate connection are complete. Renewal rechecks current title on all endpoint and interior cells; an old public-corridor licence cannot override a later foreign charter. Each control certificate independently binds endpoint/worksite title, geometry, historical notice and expiring authorization. A separate version-one ledger preserves earlier footing/interior evidence. City shows costs, custody, recall and sealed states; public maps show visible works and crew positions. Those historical construction receipts retain intact plugs and zero moved water; the newer connection/commissioning overlays record subsequent plug removal and the actual test. Intake, full reservoir impacts and continuing water consent, recurring operation, maintenance and lawful removal remain required by major-waterworks-plan.md. The M0–M8 goal remains active.

Capital continuation evidence correction: The earlier satellite probe starts at an earned 100-resident checkpoint, then records an old-age death to 99 before conservative household transfers. It must not be reported as continuously exact-100. The separately verified 120-day exact-100 interval remains valid. The bounded satellite-to-capital refined repair-input journey above is now verified; it does not promise uninterrupted service or indefinite mineral supply.

October 2 structure custody validation: 292 distinct focused scenarios pass across construction, founding, districts, carts, land work, outposts, save migration and the existing integrated journeys. Two local checkpoints preserve all prior gameplay values while adding checked location metadata, including six cleared/live plot replacements. Controlled late-game keep/terrace boundaries are distinguished from the command-earned house, cart and integrated settlement journeys. This is a bounded M0/M1 checkpoint; the full implementation goal remains active. See verification and remaining work.

Implemented, M0/M1 structure and district site custody (bounded): Standing buildings, ruined and cleared building history, and every authorized district step now retain exact axial anchors and ordered footprints alongside their numeric cells. Restore checks the catalog footprint at its saved orientation and its settlement's land, and rejects overlapping structures except cleared history. District authorization freezes the complete site; later funding checks and retained attempts must use that same footprint and orientation.

Construction, rebuild, repair, demolition, salvage and village-development work retain their own addressed work site. Structure-linked land work keeps the selected hex; terrace and drainage foundation maintenance can target a non-anchor footprint cell. Construction handcart loans, held returns and collected history keep the exact borrowing site even after the job ends. One wholly unmarked legacy family gains version-one metadata without changing materials, workers, paid work, condition, clocks, ownership or history. Partial or conflicting saved locations reject before startup accepts clients. Starter buildings and established or reoccupied camps create the same evidence; camp-to-village conversion retains its one-cell site. This advances stable location custody; broader map/job coordinates, the satellite material continuation and other M0–M8 acceptance gates remain open. See implementation status, gameplay foundations and both wiki audiences.

Implemented, M0 household journey coordinates (partial): Frontier-waystation household migration now retains exact axial addresses for the source, each active and historical route, each recorded travel death and each physical relief rendezvous. The copied location in a community-born adult's mortality record and in active/completed relief caravans is validated with the same household ledger. Migration version nine upgrades only wholly unmarked older records; partly marked, unsupported or conflicting addresses reject restoration. Historical transfers whose route was never saved retain an explicit null address instead of invented geography.

New departures create both numeric and axial routes, and reviewed recall or automatic turnback reverses both together. Route position, travel clocks, people, workers, meals, relief goods, deaths and existing receipt identity are preserved. Every saved address resolves back to the original numeric cell. The normal startup migration commit makes these changes durable before clients can act; runtime movement still uses numeric cells. This advances the stable-location requirement without changing household admission, food costs, travel speed or player controls. General map/entity/job coordinate migration and the broader M0–M8 gates remain open. See implementation status, gameplay foundations and both wiki audiences.

Implemented, M0 offline world forks (bounded): A host can now run npm run world:fork -- --source <world-directory> --destination <new-world-directory> while the source is stopped. The tool holds exclusive local ownership of both paths, materializes the saved world without advancing its clock, and requires current validated domain data. A complete current event-only save is supported; an unidentified world, older snapshot envelope or state needing migration must first be migrated and checkpointed through the server. Existing and overlapping destinations are refused. The source's files and directory contents remain unchanged.

The child receives a new instance identity and matching versioned ancestry in its manifest and state: original root, immediate parent, generation, source revision, semantic SHA-256 digest and fork time. Geography, charter namespace, people, inventories, production, paid jobs, carried cargo, player token hashes, map mutations and retained receipts remain exact. A canonical checkpoint replaces the need to copy raw parent journals. Native worlds remain unmarked; child ancestry cannot change or disappear through an ordinary save. Parent session envelopes are rejected in the child, while a reconnect using the copied account identity can inspect that child's retained receipts. This issues no new founding grant and creates no merge relationship between later play in the two worlds.

Publication reserves a new destination and uses a complete pending marker before exposing any world directory. A failed or interrupted publication remains blocked from startup when cleanup cannot safely finish; removing a stale writer claim alone cannot turn it into a fresh world. Fifty-eight focused storage, fork, identity, migration and real-gateway tests pass, including command-earned in-flight cargo, a second fork generation, exact source bytes and modification times, CLI refusals and a killed publisher. Local hard-link publication is required; no distributed fencing, damaged-journal repair or power-loss durability is claimed. Remaining coordinate custody, exact-100 satellite replacement-material acceptance and the broader M0–M8 goal stay open. See fork operation and recovery, implementation status and both wiki audiences.

Implemented, M0 exclusive local world storage: Every writable world store now acquires an atomic sibling claim before reading saved data. Existing world directories and missing worlds behind junctioned parents resolve to the same canonical path, used for both the claim and all persistence I/O. A second cooperating local server cannot open that world. Preparation reads without creating world files; domain validation precedes activation, and background saves begin only after startup migration and gateway setup succeed. Failed preparation, activation, migration and gateway setup release ownership without checkpointing rejected state. Close rejects new writes, drains every partition even when one fails, writes the final checkpoint and releases ownership, including on a failed checkpoint. Final player positions are captured before socket teardown; bounded HTTP/WebSocket shutdown and signals received during startup also finish cleanup.

A process crash deliberately leaves its claim in place. Startup never steals a claim by age or process ID; the host operator must verify that its owner has exited before removing the exact sibling claim. Replaced ownership cannot be used to write or deleted by ordinary cleanup. This is a local single-writer contract, not distributed fencing or a power-loss durability guarantee. Offline forks now use this ownership contract as described above. Damaged-journal repair, remaining coordinate custody and the broader M0–M8 gates remain open. See multiplayer recovery and operator guidance and implementation status.

Implemented, M0 transaction checkpoints and strict recovery: A proposed world transaction reaches the world journal before the persistence store publishes it to checkpoint state. Snapshots capture state only when their queued write begins, after preceding transactions settle; a rejected order cannot reappear through a checkpoint prepared during its failed append. A successful founding transaction keeps its player identity in both journal and snapshot. Background movement or map-marker write failures cannot reject an independently successful world transaction. Monotonic event timestamps keep later changes beyond the last checkpoint even within one millisecond or after a backward wall clock.

Startup now materializes saved data read-only and rejects malformed snapshots, malformed journal records, unsupported storage records and conflicting player identities before creating directories or accepting clients. It preserves physical world-journal order, legacy root-to-partition migration order and the newer explicit player profile when older embedded profiles overlap. A damaged existing save is not treated as a fresh world. The gateway defers background save timers until domain restoration and the startup migration commit succeed; failed restoration or migration drains pending work without checkpointing rejected state. Snapshot failure reaches shutdown and produces a failed process exit. Thirty-two focused persistence, protocol, identity, migration and real-gateway scenarios pass, including an actual server refusing a corrupt save without changing its bytes or timestamp. This verifies the local transaction/checkpoint slice; offline forks are implemented above, while deliberate journal repair and power-loss durability remain separate work. The full M0–M8 goal remains active. See multiplayer architecture, implementation status and both wiki audiences.

Implemented, M0 session-bound commands and reconnect recovery: Protocol 3 issues a fresh 128-bit session epoch at each welcome, bound to the durable world instance and authenticated numeric player. Every subsequent JSON request carries that binding. The gateway checks the active socket and binding when receiving a request and again before queued commands, private city reads, quotes, forecasts and receipt lookups start. Replacing a session invalidates its waiting work. The replacement welcome also waits behind pending commits, so a failed append is rolled back before its initial private overview. Movement and peer-presence baselines also start only after welcome, preserving the first visible players and their names. A command already executing finishes its atomic commit; the new session can recover its own durable receipt in the same world. Epochs are transport authority, not new saved resources or permanent receipt identifiers. Missing, stale, other-player and other-world bindings cannot execute requests.

City reviews capture the current session and embodied character, including a legitimate null character during interregnum. Disconnect disables confirmation; a new epoch closes old reviews, refreshes City and discards old forecasts/quotes. Ordinary drafts in the same world/account remain available for a fresh review. Changing the world or player reloads the whole client, discarding private caches and drafts. Old-socket frames are ignored. Opening the same identity elsewhere leaves the replaced tab disconnected until explicitly reloaded, avoiding competing reconnect loops. Persisted uncertain City orders carry their world/player/session binding; only the same world/player may recover them through a status query with its new epoch. Unscoped legacy records and mismatched worlds/accounts are discarded; no order is automatically resubmitted. Receipts that have expired remain unknown and can be inspected through the existing Orders path. This completes the transport/session binding slice; remaining entity/map/job address custody and other M0–M8 gates remain open; offline forks are implemented above. See multiplayer architecture, player guidance and technical reference.

Implemented, M6/M7 mineral satellites (bounded): A developed local village directly linked to its founding home may sponsor one retained iron, clay or stone outpost. Its own sound, dry village center, active Record keeping and Land registry, and staffed registry office at 65% condition authorize the expedition. It must return an ordinary paid survey, register the released parcel and transfer eight existing local residents, including six workers, with its own paid camp kit and provisions. The walking route is limited to twenty-four edges. The capital's direct-title limit remains separate; a satellite cannot sponsor another settlement. Empty retained satellite titles still occupy their sponsor's one slot.

Every satellite has separate stock, people, production and immediate-parent rights. Its minerals reach the capital only through two separately funded physical journeys: satellite to sponsor, then sponsor to capital. Root operating and regional logistics budgets cover the descendants without pooling warehouses. Regional overview includes both levels and links to the correct sponsor; Supply chains explains the two trips and does not offer a direct capital pickup. Loss of local services preserves funded travel and retained title, but blocks new founding or reoccupation. Evacuate and return all work from the child before evacuating its sponsor; restore the parent before reoccupying the child.

The additive outposts.satelliteVersion marker accepts only wholly unmarked older direct networks. Exact certificates bind the original local charter, registry, sponsor, root, parcel and departure across founder job, resident transfer and retained link; recalled founder history keeps the same custody. Cycles, deeper nesting, missing or misplaced certificates and inconsistent budget routes reject restore. Focused controlled tests and served City checks verify these mechanics. A separate command-earned local-village journey pays for its mill, research, imported materials, headworks and registry, relocates an existing household to reach sixteen residents and ten workers, then founds a clay satellite, builds its pit, mines twelve finite clay and relays those twelve units home over the two paid links. It adds no stock, knowledge, residents or workers through test setup. The clay remains in travelling escrow until delivery, and restored offline and stepped completions agree on network inventories, population, labor, deposits, links and resident-transfer custody. The command-earned exact-100 capital still needs a proven expansion provisioning sequence: its existing narrow timber surplus cannot finance a new local workshop without competing with water and civic upkeep. That longer production-and-repair acceptance remains open; this implementation grants no minerals, residents or perpetual supply and does not complete M6/M7. See implementation status, gameplay foundations and both player and technical guidance.

Implemented, M0 ordinary work-journey coordinates (partial): Regional road crews, quarry-lease crews, livestock collection and relocation, and watershed surveyors now retain versioned axial addresses beside every numeric route step. Completed road edges and returned crew receipts retain those same addresses; quarry permissions also bind the exact extraction site, and livestock jobs bind the supplier or destination enclosure. Watershed receipts bind the home, observation endpoint and any surveyed corridor through their checked ordered route. A compatible wholly unmarked save gains only this metadata, preserving people, animals, minerals, cargo, meals, completed work and the crew's position. Partly marked, unsupported or inconsistent routes reject restoration. The gateway durably commits every validated additive startup migration before accepting clients, even in an already identified world. Runtime movement remains numeric; general map/entity custody still keeps M0 open; offline forks are implemented above. See gameplay foundations, implementation status and the technical reference.

Implemented, M8 dry outlet construction (bounded): Physical construction now progresses from the existing paid receiver-side footing to the complete dry interior alignment, one exact receiver-first section at a time. Each section derives raised support or excavation, bed preparation and lining from the paid profile and selected section. Four existing residents carry a finite tranche; its whole work units fit their 120-weight capacity and the current construction window. Completed units stay on their exact hex through recall, expiry, changed proposals and reload. A paid same-design construction permit can renew the window for another fourteen village days without consuming a proposal revision or extending the original public notice. Each permit preserves its own payment, deadline and authorization identity. Changed geometry, report, tenure or notice evidence still needs the ordinary amended design and exact rights. The source and receiving end plugs stay intact throughout.

The first Basin footing at 1346379 still costs 12 timber, 11 bricks, 6 dressed stone, 1 tool and 32 food. That earlier receipt certifies a test footing, not a raised channel: no historical material is silently converted into new support. An identical already excavated cut is credited only through its linked original receipt. The next section must raise its bed 2,028 height units using eight support units, then prepare four bed units and lay two lining units. Together these additional stages consume 12 timber, 18 bricks, 22 dressed stone and 2 tools, plus the separately quoted meals for each physical trip. The surveyed route has seventeen interior cells; several upstream cuts are substantial and require many funded trips. Geometry and work costs are not reduced to fit the first village's stock. The remaining physical-work material plan excludes future travel meals and paid permit renewals, which are quoted separately.

City → Land & water reviews the next exact tranche, section progress, actual crew location, stage receipts, carried materials/meals and physical recall. The map shows only funded or physically worked sections, without private custody. Regional overview reports held crews and low provisions. The remaining-work plan also lists current site conflicts on future sections: the worked Basin source's lumbermill and mason workshop occupy its two source-end plots. Those structures require normal relocation/unstaffing, demolition and salvage before their sections become buildable; future funding still rechecks the actual site. Active Hydraulic engineering and its staffed registry remain necessary; the two civic registration programs can stand down after issuing each exact licence or construction permit. Finished dry sections grant no land title, water, irrigation or flood protection. Hydraulic verification, endpoint and intake construction, complete affected reach and continuing water permissions, operation, maintenance and lawful removal remain open under the major-waterworks gates. The full M0–M8 goal remains active.

Implemented, M7 council recovery after the last adult: When council stewardship has no living adult household member, a reviewed petition may enroll one eligible existing civilian from the founding home and appoint that adult as successor. It does not embody them or hand over public authority: Choose this adult and Review lawful handover remain separate actions. Population, labor, assignments, funded work, grants, communal property and earlier estates stay intact. Recorded community-born candidates keep their real age; travelling, military and already named residents cannot be taken. Children may instead mature under the existing rules. A missing eligible local civilian leaves a readable waiting state, not a new person. City and Regional overview explain the path. Separate versioned council receipts preserve who joined after each death and permit only that recorded successor to close the earlier public chapter; legacy saves gain empty recovery history. A command-founded coastal village now exercises the entire 57-year original household lifecycle and later recovery, with exact six-day post-handover replay; a separately earned sealed coin remains sealed and equal-timestamp child/death/enrollment history restores correctly. Wider office powers, universal continuation without an eligible resident, remaining M0 custody and physical major waterworks remain open. See implementation status, gameplay foundations and both wiki audiences.

Implemented, M0 finite-deposit identity (partial): Starting clay/iron seams and founded frontier iron/clay/stone deposits now retain exact axial coordinates alongside their numeric runtime keys. Restore validates the complete expected ledger against generated starting seams and established parcel provenance, including evacuated sites. Missing, extra, overfilled, relocated or partially marked deposits reject loading; exhausted seams cannot reappear through the old default merge. A complete older ledger gains only coordinate metadata when the root marker and every row address are absent. The narrow pre-deposit state/simulation-v1 format may initialize starting seams only with no existing ledger, coordinate marker or extraction evidence. Gateway commits coordinate migration before accepting clients while retaining the world instance ID. Numeric map storage and other entity/job migrations remain open. See implementation status, multiplayer architecture and both wiki audiences.

Deposit continuity evidence: Command-built mine tests preserve partial and complete depletion through address migration, storage holds, final partial batches, save restoration and catch-up. Existing clay, stone, reclamation, leased extraction, evacuation and reoccupation paths continue to pass. All eight existing local snapshots load through the new constructor; their deposit keys and every previous deposit field remain identical. The full earned exact-100 City integration, including its 120-day material interval and separate 3,600-day branch, also passes. This verifies the deposit slice; it does not complete M0 or the full M0–M8 goal.

Implemented, M0 persistent world instances (partial): Independently created worlds now receive distinct random 128-bit instance IDs even when their terrain seed is the same. The ID is retained in both the living snapshot and manifest, survives restore, and is advertised in the welcome and server health response. A compatible legacy save gains the new version/ID pair only when both records lack both fields; partial, malformed or conflicting identities reject startup. The first identity commit reaches the event log before any client is accepted, including at the old snapshot's timestamp boundary. Migration preserves existing geography, charter namespace, numeric cells and gameplay state. Copying an identified save preserves the same logical world; creating an independently identified fork uses the explicit offline workflow above. The seed-derived worldId remains the generator namespace. Wider coordinate-backed state migration still keeps M0 open. See multiplayer architecture, gameplay foundations and both wiki audiences.

Earned exact-100 City capabilities (verified): Normal City integration continues the command-earned 64-resident material checkpoint through seven paid plot registrations, workshop relocation, five timber houses, three staffed secondary wells, care and sanitation. The ordinary Public timber allowance is raised to cover the relocated mill. Three older workers die; three replacement births mature through the actual 432-day childhood interval, three later births remain dependent, and physical migration brings 33 finite-source residents and 17 workers. The result is exactly 100 residents and 44 workers, 100 permanent housing places, 108 household-water capacity, full current sanitation and restored Regional-capital recognition. The source has no workers left and founding grants are unchanged. Save restoration preserves the earned state. The subsequent 120-day material interval below extends this growth evidence with repeated unattended repairs.

City acceptance provenance: The older secondary-well scenario supplies expansion timber/tools directly and remains a controlled service fixture. Normal City integration earns its exact-100 state from the command-built capital with real forest, clay and ore supply and local refiners. Growth ends with food 1325, logs 17.5, timber 7.75, bricks 2 and one tool. The material proof pays for physical startup collections and local production before measurement; measured starting stock cannot cover all later repairs. The separate 3,600-day lower-population branch remains distinct evidence. This continuation changes no production rate, source quantity or founding grant; workshop recognition uses the explicit capability rule below.

Implemented, fulfilled-target workshop capability: Town and higher stages may count a sound, staffed workshop waiting at its fulfilled stock target only while its next staffed batch otherwise has the required inputs, recipe and institutional service, production and operating allowances, source permissions and storage. Public status remains a routine wait and no extra batch is produced. Missing inputs, exhausted allowances, explicit pause, unavailable service, building work or insufficient storage still prevent capability. The read-only production projection exposes separate batch readiness; production execution is unchanged.

Verified, M2/M3/M7 earned 120-day material interval: After ordinary-command setup, the exact-100 community runs 120 village days without player commands, food shortfall, lost City capability or development-stage changes. Water stays at 108; minimum food is about 1145, timber 20.75 and protected repair labor four. Three governed routes make 23 forest, eight clay and eight ore departures; 27 new forest orders feed the precision mill. Targeted charcoal, metalwork and bricks refill actual consumed stock. Seven headworks orders spend 56 timber, 28 bricks and seven tools. Clay falls 72→32; the exhausted ore seam stays zero while stored camp ore falls 102→72. Bulk catch-up matches all gameplay state, with transaction revisions checked against actual commits and briefing observation timestamps classified separately. A day-60 save replayed over identical daily boundaries matches the complete final snapshot. This closes the bounded maintenance gate. Replacement minerals, broader lifecycle/office continuity, remaining coordinate custody and physical major waterworks keep M0–M8 open.

Implemented, M3/M7 coordinated regional freight (bounded): A founding owner can review authorizations, revisions or pauses for two or three established owned outpost Governor routes as one regional plan. Each row carries the destination revision and explicit cargo targets, reserves, transport, workforce floor, treasury target, trip limit and allowances. Acceptance changes ordinary mandates together; it moves no goods or workers. A stale, foreign, incomplete or invalid later route rejects the whole order. Earlier spending and paid journeys remain, and coordinated pauses remain available after institutional service loss. One- and six-home-day copied comparisons expose real dispatches, commitments and worker competition. The earned 120-day City proof now couples three such routes to forestry, finite minerals, staffed refining and seven paid repairs. Longer horizons and replacement mineral sources remain broader M3/M7 work. See interface behavior, implementation status and both wiki audiences.

October 2 coordinated-freight validation checkpoint: Seventy distinct focused scenarios pass across Governor plans and loads, regional forestry/production plans, regional forecasts and real multiplayer integration. Hidden-browser checks verify two-route drafting, inspection/removal, pure one- and six-day comparison, edit invalidation, cancellation, acceptance, reload and coordinated pause at 320, 390, 640 and 1440 pixels without page errors or overflow. A full-catalog three-route message fits the 16 KiB envelope; the socket rejects larger messages. Static gameplay dependencies and synchronized wiki output pass. The later earned 120-day material proof extends this checkpoint; the full M0–M8 goal remains active.

October 2 validation checkpoint: The reviewed waystation/household Scouting recovery and active-caravan axial-custody slice passes 186 distinct focused scenarios, including the complete village-to-supplied-outpost command journey and a 3,600-day Regional capital simulation. Static gameplay dependencies and synchronized wiki output also pass. This checkpoint does not claim a new full-suite run or completion of the broader M0–M8 plan. See implementation status.

Implemented, M0/M3 caravan route addresses (partial): Active waystation and bilateral player caravans retain exact ordered axial addresses beside their bounded numeric walking routes. Dispatch records the addresses for the accepted path; an in-flight Scouting detour replaces both representations together. Escort troops follow that live route while their original consented itinerary remains separate. A logistics-ledger marker migrates numeric-only older active caravans only when the marker and every caravan's address fields were absent; restore rejects changed, missing or partially marked addresses. Migration preserves location, cargo, reserved imports, travel food and workers, and the same physical exchange and return completes afterward. Completed caravan history and original draft-animal funding routes remain separate numeric-only or route-free records, so this does not close the broader world-coordinate milestone. See gameplay foundations, implementation status and both wiki audiences.

Implemented, M3/M6 reviewed waystation hazard detours (bounded): A founding community with active Scouting can quote a dry walking route around known fire or recorded basin floodwater before dispatching an ordinary waystation caravan. The route is chosen before stock, coins, equipment or workers are committed; its actual distance determines travel food, carrying load, horse feed, road-adjusted time and dated-goods arrival. A fortification lookout can still review the chosen route for its separate camp warning. Targeted household relief searches a dry prefix to the household's actual meeting hex and retains the original depot tail as a funded fallback if that meeting is missed. Only the prefix must be clear, so a blocked later depot approach does not prevent a reachable relief meeting. Without active Scouting, or with no fitting dry path, the existing hazard rejection remains. Later hazards can still interrupt or reroute the paid team without adding cargo or food. Command and physical-return tests cover fire and floodwater with real Scouting adoption, pure quotes, save restoration, finite import delivery and relief before a sealed depot. See gameplay foundations, implementation status and both wiki audiences.

Implemented, M0/M5 militia route custody (partial): The surveyed defense corridor, active militia units and paid two-worker field-supply journeys save an ordered axial address beside every bounded numeric route cell. A newly surveyed corridor records its address before any patrol order. The unit address is refreshed on patrol, guard, mounted, escort, garrison and relief orders, on each caravan-follow route replacement, and when relief duty returns home. A recipient-consented peer escort also keeps axial steps for its original accepted passage itinerary, distinct from the unit's live caravan-follow route. Accepted allied-watch and relief-campaign agreements retain their original axial route after their units return; unsigned offers retain a null route and address. A community-born soldier's age-85 death receipt retains the death hex address, the unit's historical route, and any linked field-supply route or garrison-post address; a copied peer-escort permission retains its accepted itinerary. Separate defense and agreement-ledger markers migrate older numeric-only survey, unit, supply, peer-permission, allied-watch, relief-campaign and old-age receipt records only when the relevant marker and all corresponding address fields were absent. Restore checks the addresses against the bounded map and rejects changed or partially marked records before accepting saved physical custody. Movement still uses numeric route indexes. Other military records and job families, and world-wide map identity remain open before arbitrary-scale movement. See gameplay foundations, implementation status and both wiki audiences.

Implemented, M6/M7 held resident-party recovery guidance: Regional overview now identifies an actual founder, household, reoccupation or evacuation party held by fire or recorded floodwater. Without active home Scouting, its issue opens Research & adoption and names the learning, adoption and staffing route to a possible next-check detour. With service active but no fitting detour, it opens Frontier & charters and names fire clearing or water recession. The read neither reroutes nor replenishes the party; residents and goods stay with the paid journey and travel food continues to be consumed. A hazardous emergency evacuation uses the same exception after its first blocked check. This advances recoverable interruption without guaranteeing a dry path. See gameplay foundations, implementation status and both wiki audiences.

Implemented, M3/M6 reviewed resident detours (bounded): Active home Scouting now lets reoccupation and household-relocation reviews choose a dry walking route around known fire or recorded floodwater before payment. Their actual path determines provisions, worker age eligibility, carrying checks and travel time; a sealed route rejects without moving residents or stock. Evacuation reviews also choose a dry homeward path when one exists, with food need and time based on it, but retain the ordinary emergency departure if no safe alternative fits. When that fallback crosses known fire or recorded floodwater, its quote marks the hazard and City warns that the party may be held while its food is consumed. This preserves the ability to leave a dangerous outpost while disclosing the risk. Saved journeys and resident transfers use the chosen numeric and axial route. Later hazards remain subject to the existing in-flight detour or hold rules; a real community-born adult old-age death followed by survivor rerouting now has a restore-and-arrival regression. See gameplay foundations, implementation status and both wiki audiences.

Implemented, M3/M6 dry founder dispatch and resident travel (bounded): Once a returned report and conditional charter are in place, active home Scouting can choose a dry walking route around existing fire or recorded floodwater for the eight-person founder expedition. The normal sixty-edge path and any tighter additional-outpost registry limit still apply to the chosen route. The actual path determines paid provisions, carrying weight, age window, duration, saved job addresses and the resident-transfer route; the Supply chains founder provision estimate uses that same path when one exists. A sealed path rejects dispatch without moving people or goods. If a new fire or flood blocks the next hex of a travelling founder, settler, reoccupation or evacuation party, active home Scouting can replan from its current hex within the sixty-edge limit. The check changes the route but does not move the party or refill its food. The job and transfer record the same new numeric and axial path; any earlier resident death retains a versioned copy of its exact previous route so the death hex and index remain valid after rerouting. A party with no safe replacement remains held, consuming carried food. Arrival, rights, storage and household admission still run their existing checks. This improves interruption recovery without guaranteeing a safe path or renewable supply. See gameplay foundations, implementation status and both wiki audiences.

Implemented, M5/M6 recoverable frontier-survey travel (bounded): An active home Scouting service can quote a dry walking survey route around fire or recorded basin floodwater before the two-person team is dispatched. The chosen route sets actual paid provisions, travel time and saved axial steps; no route means no departure or payment. If new fire or floodwater blocks a survey on its outward leg, active Scouting can replan from the team's current hex at its next travel check without moving it on that check or adding food. Returning surveyors can seek a bounded dry detour around either hazard while retaining their carried report and provisions, even if Scouting is inactive. Every detour must still fit the released sixty-edge route; a team without one remains held and consumes carried food. This improves first-outpost survey recovery, but does not grant rights, guarantee a dry route or finish wider cross-region movement. See gameplay foundations, implementation status and both wiki audiences.

Implemented, M6/M7 blocked outpost-route recovery guidance: Regional overview now gives a paid supply team held by fire or recorded basin floodwater a specific next action. Without active home Scouting, the exception opens Research & adoption and explains that learning, adopting and staffing the service can let the same team try a dry detour at its next travel check. With Scouting active but no available dry route, it stays linked to Frontier & charters and explains that clearing the fire or waiting for water recession is still necessary. The read creates no detour, food or cargo; the existing travel check retains authority over movement and carried provisions continue to be eaten. This improves return-play recovery but does not guarantee route safety or an indefinite supply chain. See gameplay foundations, implementation status and both wiki audiences.

Implemented, M0 bounded axial lookup (partial): The shared world kernel now resolves an integer axial q,r back to the current bounded cell ID, and ZoneEngine exposes that lookup and the generated natural cell at the address. Survey and outpost route restoration uses the inverse lookup to check that each saved axial step resolves to its paired numeric step. This preserves the existing world checksum, seed, geography and save IDs. It does not allow a different map extent or generator to load the current snapshot; terrain generation, mutable state and travel execution still depend on the bounded numeric grid. See gameplay foundations, implementation status and both wiki audiences.

Implemented, M0/M6 outpost journey and transfer route custody (partial): Every active outpost journey now retains an ordered axial address beside each numeric route cell, and each population transfer retains the same address sequence as its departure route. Scouting reroutes replace the job's saved addresses when new floodwater or fire changes a supply path. Restore checks each address against its bounded cell, including completed transfer receipts, and migrates old numeric-only routes only when the route marker and fields are absent. The simulation still moves by numeric IDs; this neither migrates other job families nor permits arbitrary world expansion. See gameplay foundations, implementation status and both wiki audiences.

Implemented, M0/M6 retained outpost link address (partial): After the founders establish a village, the permanent home-to-outpost link now retains the same released parcel's axial center. Restore compares that address with the released site and the founded region's validated anchor; an older numeric-only link migrates only when its ledger marker and coordinate fields are absent. A mismatched link blocks new supply and reoccupation quotes before further stock or residents are committed. Evacuation retains the address for lawful later reoccupation. Link keys and operational travel routes and transfer history still use numeric IDs beside their saved axial addresses, so arbitrary-coordinate expansion is open. See gameplay foundations, implementation status and both wiki audiences.

Implemented, M0/M6 conditional-title-to-founder custody (partial): A conditional outpost charter now saves the surveyed parcel's axial center, and its founder expedition carries that same destination after the claim is consumed. Restore validates both records against the released site, migrating old numeric-only claims and active founder jobs only when their version marker and address are absent. Founder quoting rechecks the claim before committing people and cargo; arrival rechecks the expedition before granting a new charter and returns a mismatched team home. These checks do not change who owns land or how routes are executed. Founder routes, outpost links and transfer history now retain checked axial addresses, while their operational IDs and other world records still require migration for arbitrary expansion. See gameplay foundations, implementation status and both wiki audiences.

Implemented, M0/M6 frontier-survey coordinate custody (partial): An active frontier survey now retains axial q,r addresses for every travel step as well as its destination, carried report and returned evidence. A dry return detour replaces the saved route addresses with its real new steps. Restore validates every route address and the destination against the bounded generated world; conditional-charter and paid-fringe registration recheck returned-report location before granting title or spending stock. Old numeric-only jobs and reports migrate under explicit ledger markers without changing people, stock, route position or claimed land; partial or forged fields reject. Travel still executes with numeric cell IDs, and report keys, other jobs and global map storage remain to migrate before arbitrary expansion. See gameplay foundations, implementation status and both wiki audiences.

Implemented, M0/M6 world and charter identity (partial): A stable seed-namespace world ID now accompanies the snapshot and manifest independently of the current map array dimensions. Founding and outpost charters retain that ID and their original axial q,r cell list; restore validates those coordinates against the generated seven-cell origin before accepting a charter. Old same-seed snapshots and version-three manifests migrate additively without changing inventory, region IDs or numeric cell IDs. A forged world ID or charter coordinate fails restoration. This is a foundation for the required world-coordinate migration, not its completion: paid extension receipts now retain validated axial coordinates beside their numeric cells, while general jobs, map storage and other live records still need coordinate custody. Finite deposits now have the explicit axial identity described above; their runtime keys remain bounded numeric IDs, and two independently hosted worlds with the same seed share this generator namespace. The separate persisted world-instance identity above now distinguishes those worlds; the remaining coordinate migration still gates arbitrary expansion. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M5/M7 civilian recruitment floor (bounded): A charter owner can set a 0–200 civilian-worker floor in City policy. Militia recruitment and reinforcement now recheck the current civilian count against that floor before spending kits or moving people; existing soldiers, worker assignments and food production do not change when the policy is edited. The same floor applies at home and at a locally chartered outpost, persists through save/restore, and old saves migrate to zero without inventing a prior constraint. Regional overview exposes a below-floor exception if later population or labor loss crosses a retained floor. This is a guard on future orders, not automated recruitment, a farmer-specific roster or complete M7 security delegation. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M8/W2 receiver-reach evidence custody (partial): An exact outlet notice now freezes a v3 digest of its exact reviewed-cell set and public charter-cell assignments, natural and paid-channel branches, open limits, known coastal exits, exact screened ocean and shore cells, coastal public charter assignments and unchartered inland-cell count. Notice currency compares the current review with that filing-time evidence after checking named parties and reasons. A changed inland or coastal boundary suspends answers and new grants even when the same communities remain named, requiring amendment and fresh notice. Major-waterworks ledger v24 migrates v23 notices with no invented digest; older v1/v2 reach digests remain loadable but require fresh amendment under the stronger v3 check. An older selected-outlet notice must be amended before further action, while an older notice without a selected outlet retains its ordinary checks. This does not turn the bounded reach into complete W2 effects or W3 permission. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2 receiver-party map navigation (partial): The selected major-outlet potential reach now carries a public charter location for each listed community: its region anchor, or a current charter cell when no anchor is recorded. City lets the player find that community on the map while reviewing the exact notice. City also lists bounded natural and engineered frontier reasons, omitted channel count and known ocean exits with map links; a focused frontier is an unresolved review boundary, not a predicted wet hex. This is a navigation aid, not a private settlement report, a new right or complete W2 affected-area coverage. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2 engineered coastal recipient coverage (partial): The bounded connection screen now follows known ocean exits of a receiving basin reached through an existing paid channel. Public charter holders near those exits enter coastal review and any selected-outlet potential receiver notice; the ocean remains open and unreviewed water, rights and future effects stay blocked. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2 selected outlet potential receiver reach (partial): An exact selected major-reservoir outlet now opens a separate bounded natural-and-existing-channel review rooted at its receiving basin, even when the retained historical comparison releases no water or lacks complete route history. It lists current public communities on that potential network and nearby screened coastal users without exposing private inventories or water levels. Those communities enter the exact notice basis as potential receiver-reach parties independently of recorded new wet land; a changed public holder or reach reason suspends an older notice until amendment. Open natural, engineered, ocean and computation frontiers and unchartered cells remain explicit blockers. This is a possible affected reach, not proof of future discharge, an exhaustive ocean review, customary title or permission. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 exact common inlet section (partial): A source engineer can now select or clear a 1,000/2,000/4,000-height-millionth depth and 1/2/4/8/16/32 abstract lining lanes on a selected exact pool-entry grade. The game-model capacity is 50 water units per lane per four-hour interval at base depth, scaled by depth. City compares each option with the concurrent merged-entry peak from registered rows and rejects a selection below that recorded target. A selection revises the exact draft, freezes in later notices, increases the four-worker preliminary lining bill and caps both the exact-entry retention bound and routed whole-basin hypothetical capture; neither comparison moves live water. Major-waterworks ledger v23 migrates v22 without inventing a section and rejects a v22 section or forged active/frozen dimensions. This is not proof of head, gate capture, containment, future flood safety, rights, funding or a controlled store. intake-engineering-unverified remains. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 shared intake demand screen (partial): Rated exact entry controls now join complete candidate pool paths with the fully registered four-hour transfer rows used by the gate and exact-entry reviews. At each graded-path hex, review sums simultaneous post-bypass, per-gate-limited possible admission from the entry paths crossing it, then shows the observed-window peak and latest load. Merged approaches thus expose a common-channel planning target rather than treating one gate rating as the trunk rating. This read-only screen proves no physical channel width, containment, spoil, controlled storage link or future flow capacity. intake-engineering-unverified remains. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 provisional lined remote outlet section (partial): After a source owner rates an exact remote release corridor and returns its paid full-corridor field profile, active Hydraulic engineering can revise the proposal with one of three lined open-channel depths (1,000, 2,000 or 4,000 terrain-height millionths). The full-pool screen combines the saved rate's lining lanes, proposed opening invert and current observed receiver peak when available; without receiver history it uses the natural bed optimistically. It shows estimated four-hour throughput and grade-cut plus depth-dependent lining work and material needs. The verified recorded-window whole-basin comparison now also limits each proposed transfer by section capacity at its closing source and receiver head, reporting withheld water separately from gravity backwater; the exact-entry upper bound now also applies the section at closing source head against fixed observed receiver peak, or optimistic natural bed without history; it still omits same-interval routed arrivals and receiver rise. A section below the selected rate at current head is refused; changing or clearing the section increments the proposal revision, and notices freeze the selected depth and lanes. Ledger v22 migrates v21 without inventing a section and rejects forged geometry. Exact proposal and notice validation now compares reconstructed terms by value rather than JavaScript property order, so rating an inlet after selecting an outlet survives reload while forged route cells still fail. This is a game-model planning choice, not verified friction, erosion protection, design flood, safe discharge, rights, W2 impact completion or W4 construction. The release-outfall-engineering-unverified blocker remains. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 released public-works outlet strip (partial): The canonical Basin marked-site-avoiding route is now an explicit scenario release for a narrow construction wayleave on its sixteen presently unchartered, feature-free hexes. It is not a general presumption that unchartered atlas land is vacant. After the source pays for and returns the exact corridor field survey, files a current notice, keeps Hydraulic engineering, Land registry and Public accounting active, and staffs an operational registry, it may pay thirty-two timber and sixteen food to register those exact cells for that proposal revision. The separate survey already spends access tools. The right covers currently unchartered released cells only; a later public charter holder requires its own acknowledged construction easement, and an amendment needs a new registration. The receipt and survey provenance survive restore under the current v22 ledger; v21 introduced the licence and v20 migrates with none invented. This resolves the Basin route's present title gap without creating a settlement charter, feature-use approval, water right, engineered section, safe discharge, complete W2 impact evidence, all-party consent, funding or W4 operation. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 marked-site-avoiding remote outlet (partial): The same bounded lower-receiver scout now finds a deterministic shortest land walk that excludes marked natural features. It is offered only when distinct from the lowest-ridge and unrestricted direct paths. At the paid Basin source, this alignment reaches the same endpoint in eighteen steps across sixteen unchartered plots, avoids the unrestricted direct route's two dune features, and increases provisional one-lane cut work from 1,702 to 1,725 units. Selecting candidate-unmarked-outlet-v1 revises and freezes exact proposal cells; construction-title and feature checks, head, notice, receiver observations and a paid corridor visit all use that geometry. The chosen route clears the corridor's marked-feature blocker in this case but grants no title, ecological approval, channel or discharge proof. Major-waterworks ledger v20 migrates v19 without inventing an avoidance path and rejects altered or unversioned geometry. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 direct remote outlet choice (partial): The bounded lower-receiver scout now compares its least-ridge trace with the shortest walk to the same endpoint. For each exact route City shows walking steps, provisional one-lane grade cut-work units and currently unchartered hexes. The paid Basin source can choose an 18-step direct route across 16 unchartered cells instead of the 34-step least-ridge route across 32, but its provisional cut rises from 998 to 1,702 work units. A reviewed candidate-direct-outlet-v1 alignment freezes the exact direct cells in a new proposal revision and notice; grade, title, release replay, receiver monitoring and paid endpoint/corridor surveys follow that chosen geometry. Major-waterworks ledger v19 migrates v18 without an invented route and rejects altered or unversioned direct geometry. This is a choice of proposed work and rights exposure, not a channel, hydraulic proof, consent or water movement. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 exact corridor field evidence (partial): After the exact remote receiver field report returns, a source owner may fund Review exact outlet corridor survey for the same active ridge proposal. Two actual surveyors walk every selected route hex using own or unchartered access, spend one full village day at the endpoint and publish a natural-bed, biome and feature profile only after returning. Four timber, two tools and route meals are paid at dispatch; two timber and one tool become nonrefundable shallow-water access gear immediately, while the rest are spent on completed study or physically returned. This distinct expedition may wade modelled water no deeper than 0.003 normalized height; deeper water, fire, new foreign title, lost Hydraulic engineering or insufficient meals can delay or interrupt it. A returned exact profile clears only release-corridor-unvisited. It does not create a channel, station, water, title, verified section/rate, safe receiver discharge or consent. Survey ledger v5 migrates older saves neutrally and validates the complete canonical route and paid custody. The major waterworks plan, implementation status, player guide and technical reference retain the remaining W3/W4 gates.

Implemented, M8/W3 remote receiver observation (partial): An active source-owned candidate-ridge-outlet-v1 proposal opens a physical two-worker field visit to its exact unchartered endpoint. The first trip uses two timber, one tool and route meals, studies for a full village day and publishes natural drainage and site findings only after returning. A returned report for that exact proposal then permits a separate paid Review remote receiver runoff station trip: two workers carry six timber, two tools and meals along source-owned or unchartered ground, study for a full day, install the passive gauge, and return with its report. A new foreign charter blocks dispatch or interrupts the outward route before materials are spent; recall, fire, flood, lost Hydraulic engineering, meals and storage retain the ordinary journey rules. The installed station is a narrow nonexclusive observation easement on previously unchartered ground, recorded with its proposal and pinned prior field report. It is existing infrastructure if the parcel is later chartered; it grants no parcel title, construction corridor, water use or permission to affect others. Version-five survey and version-three surface-water ledgers migrate older saves without stations and reject unmarked or forged remote monitors. The Basin endpoint 1346380 has a complete two-cell local station catchment and enrolls receiving basin 1342280 for full-area rainfall; after complete intervals, its observed peak clears release-receiver-unmonitored. The returned site report separately clears release-remote-site-unvisited. Hydraulic grade, environmental effects, construction title, consent and W4 operation remain unresolved. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 remote outlet corridor selection (partial): A current source owner may promote one of City's bounded lower receiving-catchment traces into exact, revisioned candidate-ridge-outlet-v1 proposal terms. Selection validates the deterministic path and optimistic endpoint head. Every path cell joins construction title, marked-site, notice and easement review; the existing grade, candidate rate and release replay use the remote receiver. Same-source amendments retain canonical geometry, while clearing does not rewrite older notices. Major-waterworks ledger version eighteen migrates old saves without an invented route and rejects unversioned or altered geometry. At initial corridor selection, the paid Basin example reaches basin 1342280 across 35 cells, with 32 untitled and no receiver observations yet. This extends the earlier natural-spill-only selection described below; neither path grants survey access, proves safe channel capacity, moves live water or authorizes W4 construction. See major waterworks plan, implementation status, player guide and technical reference.

M7 standing communal treasury target (implemented, bounded): An owner with active Regional institutions may add a one-direction coin target to a reviewed Governor mandate for an established linked outpost. The target names the destination treasury balance, a source balance to retain, at most 100 coins per trip and a separate gross transfer allowance that is capped overall or renews on each home village day. Each ordinary daily Governor check uses current spendable balances; a funded trip carries the lesser of the gap, surplus, trip limit and remaining allowance. It may be coin-only when material targets are satisfied, or share a paid physical supply trip with goods. The same two home carriers, route, travel food, equipment, material limits, recall, save custody and fixed coin conservation apply. A busy route or missing service waits or blocks without paying; pausing stops future dispatches, while funded teams continue. Gross transfer authorization is never replenished by recall, and relocation does not consume the separate regional coin spending ceiling. Legacy mandates migrate with no coin target under an explicit version marker; unmarked new fields reject. This supports bounded automatic remittance or outpost funding, not arbitrary remote treasury edits or wider realm finance. See gameplay foundations, implementation status, interface, player guide and technical reference.

M3/M6/M7 physical communal coin support (implemented, bounded): A reviewed custom supply trip between a founding home and a populated, established owned outpost may deliver up to 100 whole home coins, collect up to 100 whole outpost coins, or do either alongside ordinary goods. The two workers, paid travel food, route hazards and physical exchange remain authoritative. Home coins leave the home treasury at dispatch and become spendable at the outpost only on arrival; recall before arrival returns them to home on physical return. Collected coins are reserved from the outpost balance at dispatch, move onto the team only after a successful exchange, and become spendable at home only on physical return. Recall or a low-provision return before exchange releases the reserved amount at the outpost. Both legs survive reload and are included in fixed coin conservation and phase-specific custody validation. Coins take no warehouse space or cart weight; transfers do not use the optional regional gross spending ceiling, though later covered purchases or wages do. A reviewed standing Governor target can now automate bounded transfers as described below; broader realm finance remains open. See implementation status, interface, player guide and technical reference.

M7 shared coin operating ceiling (implemented, opt-in): The founding home's existing regional operating budget can now separately include communal coins. When its owner enables coin coverage and reviews a whole coin ceiling, new prepaid professional service terms, finite waystation market purchases and accepted buyer payments for bilateral player coin sales from that home or a linked outpost must fit the same lifetime or renewing home-day allowance. The full wage term is booked when escrow is paid; waystation spending is booked only when a real purchase caravan departs; a player coin purchase is booked when the buyer accepts and reserves payment, once per recurring round. The buyer City names a current over-limit acceptance blocker before review; recurring schedules wait without creating a child when the allowance is exhausted. Seller income never uses this ceiling. The budget neither transfers coins nor changes local treasury, equipment, labor, stock or market availability checks. Refunds return actual unspent coins but never restore gross spending authority. Pausing covered operations blocks new included payments; already funded troops and cargo continue. Older material-only budgets migrate with coin coverage off, so their existing cash paths remain available until an owner explicitly opts in. This advances M7 treasury control but leaves broader wage policy and the other M0–M8 gates open. See implementation status, interface, player guide and technical reference.

M7 consented steward stock target (implemented, bounded): An accepted production steward can review a new warehouse target for an existing owner-funded target-mode producer, from one unit through the charter holder's retained target ceiling. The owner sets or renews that ceiling through the ordinary full production mandate review. A steward cannot create a target, unpause production, change its resource, recipe, fish-source reserve, input allowance period or budget, or authorize new spending. The reviewed adjustment restarts a full production cycle, changes no stock immediately, and keeps recorded inputs and batches; later real batches still pay from the owner's existing local allowance. Appointment, active accounting, fresh revisions and ordinary producer checks remain required. This narrows an M7 delegated decision while leaving broader regional authority and all open M0–M8 gates in the implementation ledger. See the interface, player guide and technical reference.

M8/W3 bounded alternate-outfall reconnaissance (implemented, evidence only): City now searches at most 1,200 nearby land hexes within eighteen walking steps of a proposed source basin, groups lower-bed endpoints by distinct receiving catchment and shows up to six least-ridge terrain traces. It separates the recorded high-water level of monitored receivers from unobserved catchments and reports the highest natural ridge above the candidate full-pool waterline on each shown trace. At the paid Basin site, both nearby receivers have recorded backwater above the proposed pool; another lower catchment has no retained peak and its least-ridge trace still crosses more than 0.02 normalized height above the pool. This read changes no water, proposal, title or job and cannot certify a grade, section, rights, impacts or W4 service. It directs the next W3 work toward paid receiving observation and a defensible outfall or a different source site. See major works plan, implementation status, player guide and technical reference.

M7/M8 finite shared-water repair instruction (implemented, bounded): A commissioned source village can review a standing allowance of one to twenty cumulative repairs for its signed shared-well conduit, then pause or raise that cap without resetting past payments. At each source village day, condition at or below 60% can fund the existing 12-timber, 8-brick, 2-tool four-worker repair only if continuing consent, Hydraulic engineering, four free workers, both sound connections, a safe corridor, local materials and the public budget permit it. A blocked check spends nothing and appears in the source's Regional overview. Paid work continues if the instruction is paused; condition returns only on completion. Old saves migrate with no instruction. The rule neither renews water consent nor authorizes major-reservoir W3/W4 construction. See gameplay foundations, implementation status, interface, player guide and technical reference.

M7/M8 shared-water regional exceptions (implemented, bounded): The account's Regional overview now calls out an unanswered shared-well offer, accepted but unfunded conduit, unfinished sealed work, delivered water below the agreed maximum, source-side wear before failure, and an approaching or ended consent window. These are current readings from the existing signed and paid conduit, with links to that owner's City Land & water controls. An agreed maximum is not a guaranteed new water source: household priority, service, condition, wells and work can reduce delivery. Both owners see their own relevant status without the other's warehouse. No new water, right, order or save field is created; major reservoir W2–W4 remain separate and open. See gameplay foundations, implementation status, player guide and technical reference.

M8 inlet-grade command repair (implemented): The existing exact reservoir inlet-grade selection and clearing rules are now reachable through the authoritative command dispatcher. The grade still needs rated entry controls, current survey evidence, Hydraulic engineering and public authority; a selection revises proposal language only. The watershed tests exercise the full command path and recipient notice snapshot. Physical intake construction and operation remain planned.

M0/M1 engine cell-reference guard (implemented, bounded): The authoritative zone engine now parses only in-range numeric cell IDs or canonical decimal map keys at its terrain, region, stock, vegetation, occupancy and active-site boundaries. A missing footprint cell can no longer coerce null into valid world cell zero; owner checks and previews reject it without reading unrelated terrain. Existing canonical string keys and valid numeric IDs keep their meaning. A southern-edge footprint test covers this path. The width-dependent ID model still needs the separate stable world-coordinate migration before arbitrary expansion.

M0/M1 world-edge cell-ID guard (implemented, bounded): The shared world kernel now rejects a row beyond the configured southern boundary when encoding a numeric cell ID, including small generated test worlds. Encoding and decoding agree at the last valid row, so footprint or map calculations at the edge cannot manufacture an out-of-world integer reference. This changes no valid saved cell, geography, checksum, charter or migration. Numeric IDs still depend on map width; the planned world/axial identity migration before arbitrary expansion remains open. See gameplay foundations, implementation status, player guide and technical reference.

M8 proposed reservoir material exception (implemented, bounded): An active exact rated intake or graded outlet proposal now creates a source-owned Regional overview exception when its combined preliminary one-time bill exceeds current local stock above the household food reserve. The exception names the missing goods and opens the exact Supply chains goal for that proposal revision. Clearing a rate or amending terms changes the goal and warning on the next read; sufficient stock or withdrawal removes it. This helps a regional steward arrange real production or physical imports before any later work order. It reserves nothing, grants no hydraulic approval, settles no land or water right, and does not authorize construction. See major waterworks plan, implementation status, interface, player guide and technical reference.

Physical manuscript production goals (implemented, bounded): Once a topic is known locally, Supply chains also offers Copy [topic] and Scriptorium copy: [topic] as one-book Knowledge goals. Both use the existing project graph and real school or scriptorium cost, including a physical book output. The school handoff opens the topic’s manuscript-copy review and its current blocker; the scriptorium handoff preselects one book in the commission panel and shows its live quote or blocker. These alternatives compete for different learning/work slots. A hypothetical batch in the material tree does not create a book or reserve a worker, and transporting and studying a book remain separate physical and reviewed steps. See implementation status, interface, player guide and technical reference.

Alternative learning material goals (implemented, bounded): The Supply chains Knowledge picker now exposes unknown topics through manuscript study and academy research as well as public research. Each path uses the existing authoritative one-time cost: study includes its physical book and study supplies; academy research includes prepaid daily support. A study handoff opens the exact topic’s manuscript controls, while an academy handoff preselects the topic in the academy panel and reports a current quote or blocker. If any selected learning path finishes, its goal advances to the separate adoption bill. The planner issues no learning order and does not make a physical book, school, academy, staff, practice or prerequisites available. See implementation status, interface, player guide and technical reference.

Public technology material path (implemented, bounded): The six-branch Research screen and the Supply chains goal tree now share exact one-time costs for public research and first adoption. Unknown topics appear as Research [topic] goals; once learned, the selected material goal advances to Adopt [topic] rather than falling back to an unrelated building. A retained program exposes no second adoption bill, even after a reviewed suspension. Each goal can focus the exact topic's live Research card, where prerequisites, institution, workers, practice, stock and current program state still determine eligibility. Learning does not activate a policy or technique, and the material trace grants no research progress. The focused command path compares graph costs with real funding, adoption, suspension and restore. This connects M3 supply planning to M4 technology choices without a save change or free resources. See implementation status, interface, player guide and technical reference.

Named-specialist course supply path (implemented, bounded): A known local service with real upkeep now offers a Train named specialist goal in Supply chains. The goal traces one course's authoritative four timber, eight food and one tool, including source batches, current shortages and physical import possibilities. It grants no qualification or reserved materials. The goal's Inspect named specialist training action selects that service in Research & adoption, where the current learner, school, mentor, free worker, food reserve and actual quote still govern a reviewed three-day course. Current and forecast Regional backup warnings also offer Trace backup course supplies for the same owned community. Backup designation after qualification remains separate unless a valid course backup plan was chosen. This links M3/M4/M7 material preparation to the named-service continuity path without a new save field or automatic order. See implementation status, interface, player guide and technical reference.

Forecast specialist handoff (implemented, bounded): The six-day copied Regional forecast can first show a named-service backup warning on the incumbent's age-80 birthday while the live region has no such issue yet. Its Inspect current controls link now opens the present community's Research screen with that known service selected, so the player may review training before the live warning arrives. Navigation does not pay for a course or change an appointment; current eligibility and authority still govern every action. The future forecast and current world remain separate, and six days of projection cannot promise that the incumbent or institution will stay eligible. See implementation status, interface, player guide and technical reference.

Aging named-service succession exception (implemented, bounded): Regional overview now uses the existing household-aging clock and named specialist appointments to turn a later-life warning into a service-specific exception when an incumbent has no designated trained backup. It names the affected technique and old-age boundary, becomes urgent with at most four village days left, and points to the selected community's Named specialist training controls in Research & adoption. The link preselects that exact service but issues no course or appointment; school, mentor, learner, goods and separate reviewed backup authority remain necessary. A designated living backup returns the issue to the ordinary family-aging warning, and the existing death transfer still determines actual service. The focused path warns before age death, funds and completes a real course, appoints its graduate as backup and preserves the named service on death. This improves M4/M7 regional continuity without changing mortality, training costs, save shape or automatic authority. See implementation status, interface, player guide and technical reference.

Regional repair-material continuation (verified, finite): The command-built Regional-capital route now continues from separate paid clay and iron-ore returns through three further preventive central-well repairs over a copied finite interval. The player pauses automatic headworks work, allocates real saw, kiln and smithy labor, maintains a paid woodland log route when civic timber is low, and funds each repair from the local warehouse. After two repairs exhaust the ready brick stock, returned clay and logs fire replacement bricks; returned ore and charcoal forge another tool before the third repair. Every linked community remains fed and the home retains enough water for its residents on each checked day. A named specialist dies during the interval; releasing the dead appointment and restoring supplied Record keeping and Regional institutions allows lawful service and Regional-capital status to return after a temporary stage decline. The copied world reloads with the same materials, products and repair state. This is evidence for one recoverable M3/M7 material cycle, not infinite mineral renewal or uninterrupted civic rank. See implementation status, gameplay plan, player guide and technical reference.

Standard camp food-plot provision recovery (implemented, bounded): A populated camp without a Community food plot now compares its stored food with the plot's current construction-food bill plus three days of resident meals. If short, the founding home offers Food plot provisions: the current shortfall plus two days of resident meals, capped at 40 food per reviewed trip, subject to the same route rations, two carriers, household reserve, capacity and destination storage as any outpost supply. The camp card's Arrange plot provisions from home opens that exact manual supply panel; it never sends goods on navigation. Food remains at home or with the physical team until camp arrival and the plot still needs timber, a paid four-builder job, two later growers and a harvest cycle. A longer route or larger camp can need further trips, and no standing food policy is created. The command-built low-food journey verifies real home debit, transit custody, camp receipt, construction and first harvest. See implementation status, interface, player guide and technical reference.

M1/M3/M6 standard-founder food-plot supply (implemented, bounded): A standard founder expedition establishes its camp with twenty timber, ten short of the first Community food plot's thirty-timber bill. The camp's missing-timber card now opens the founding home's Frontier & charters supply panel for that exact outpost. The home lists a Food plot timber offer for up to ten currently missing timber, priced by the existing physical supply quote; review and confirmation withdraw stock and two carriers, and the camp may build only after arrival. If more than ten timber is missing, later trips still need separate payment. The command journey proves a standard camp's shortage, one paid ten-timber delivery, construction, staffing and real successive food harvests, including in-transit custody and save restoration. An isolated live City check confirmed the cross-community navigation, ten-timber review and outward carrying job. This complements the optional founder kit that carries ten extra timber rather than adding a grant or changing saves. See implementation status, gameplay plan, player guide and technical reference.

M1/M2/M6 outpost food readiness (implemented, bounded): After a local Community food plot is built, its Frontier & charters card now reads the same current producer status as City Production, including the first blocker or potential next-cycle food output, and links directly to that Production card. It also shows the camp's existing economy projection: potential daily food balance, stored food and days of meals without new production. These are current estimates, not an automatic harvest or promise of future water, storage or staffing. The integrated journey confirms an unstaffed completed plot is blocked and its staffed projection is ready with nonnegative potential balance; an isolated live City check showed 11 potential food, 80 in stock, ten no-production meal days and +3/day before navigating to the field's Production controls. See implementation status, gameplay plan, player guide and technical reference.

M4/M6 pilgrimage dispatch correction (implemented): A reviewed pilgrimage or civic visit now reaches the physical journey handler again. The existing two-worker payment, host consent, travel, one-day gathering and return rules are unchanged; the missing module export had prevented dispatch after review. The dedicated 13-scenario journey suite now passes, including foreign permission, exchange promises, recall and save migration. See player guide, technical reference and implementation status.

M1/M6 outpost food-plot construction and staffing handoff (implemented, bounded): A settled outpost's Frontier & charters card identifies a suitable local Community food plot and its current construction blocker. Preview food plot on map opens that exact hex in the ordinary footprint preview, where the server's selected-plot quote controls Review construction. After actual completion, the existing-plot card offers Review two growers when workers are free, using the normal staffed-building order. Previewing creates no field, workforce or food; local materials, terrain, four builders, two later growers, water and harvest time still apply. The integrated journey checks the recommendation against the selected-hex construction quote, then verifies an operational plot with zero staff before assigning two and feeding the outpost from actual production. An isolated live City check confirmed the exact hex and payment in the review, paid construction, and the two-grower handoff. See implementation status, interface, player guide and technical reference.

M3/M6 founder expedition material goal (implemented, bounded): After a frontier survey and registered outpost charter, Supply chains offers a standard founder kit and a variant carrying ten extra timber for the camp's first food plot. The goal uses the same route-specific travel ration and cargo calculation as the actual dispatch quote: eight existing residents, including six workers, carry 64 food, 60 or 70 timber, and four tools, plus travel food. The current quote or blocker remains visible; Fund this outpost opens the existing reviewed founder order only when eligible, while Inspect charter and route opens Expansion. Selecting a goal neither reserves supplies nor establishes the camp. Arrival still requires physical travel, and food production requires a separately built and staffed local plot. The integrated journey verifies quote parity before paid dispatch and removes the goal after the charter is consumed. See implementation status, interface, player guide and technical reference.

M3/M5 land-goal order handoff (implemented, bounded): Supply chains now lists the actual Prepare and enrich soil and Small irrigation channels bills as land goals, alongside existing woodland, terrace, topsoil and well goals. For a selected land goal backed by the current Land & water or woodland quote, Improve this plot names the exact selected hex, live eligibility reason or cost, and opens that project's existing reviewed order only when eligible. Choose or inspect plot returns to the plot selector; switching plots requires a new server projection. No goal selection surveys, clears, irrigates or plants land. The integrated village-to-outpost journey proves both new goal bills match the soil and irrigation quotes before paid work changes effective biome and water demand. A live founding-village check showed survey blockers and disabled project buttons on an unsurveyed plot, plus the Land & water navigation. See implementation status, interface, player guide and technical reference.

M3/M5 first-patrol supply goal (implemented, bounded): When a trained militia is ready at home and has a surveyed frontier corridor, Supply chains now offers Supply a frontier patrol. Its food input comes from the same route, troop count and carried-ration calculation as the authoritative patrol quote, so the goal can expose additional food needed even when protected household reserves currently block dispatch. The card shows carried and new food separately, the actual quote's risk or blocker, and ordinary or cautious reviewed patrol actions. It disappears while the unit is away; a dispatched patrol continues to use its real carried supplies, route, hazards and casualty rules. A command test confirms planning is inventory-neutral, matches the quote, respects reserves, and removes the waiting goal after physical departure. See implementation status, interface, player guide and technical reference.

M3/M5 militia-kit crafting handoff (implemented, bounded): The first militia Supply chains goal now reads actual local kit stock and the current two-kit craft quote. When fewer than two kits are stored, it shows the exact remaining amount, the smallest real batch's four-timber/two-iron bill, and the authoritative craft blocker or eligibility. Review two militia kits enters the existing command review only on an eligible quote; crafting then needs its full paid workday and storage before the separate recruitment quote can spend those kits. Hypothetical supply-tree batches never count as stored equipment. The local founding-village UI shows a two-iron blocker; a command journey proves a paid iron return makes the craft quote eligible before actual kit production and resident recruitment. See implementation status, interface, player guide and technical reference.

M4/M5 first-militia readiness from a supply goal (implemented, bounded): The Train two militia residents Supply chains goal now combines its two-kit material tree with the current authoritative recruitment quote. It names the actual blocker, offers links to Drill and Defense, and opens the existing reviewed Review two recruits order only when that quote is eligible. Founding militia requires active Drill at an operating commons, eligible free residents and crafted kits; it does not require a barracks. The adjacent barracks goal remains a separate construction path for later standing service. Goal inspection spends nothing and a changed world is rechecked by the recruitment command. See implementation status, interface, player guide and technical reference.

M3/M4 barracks-to-militia supply handoff (implemented, bounded): A barracks building goal now explains that its construction materials do not include recruit equipment and links to the existing Train two militia residents supply goal through Trace first militia equipment. This is a read-only goal switch; it does not reserve, buy or craft kits. A command journey completes the founding home's four-load partial barracks import itinerary, buys the final brick, constructs and staffs a real barracks, then separately buys iron, crafts two militia kits and recruits two residents. The iron left after construction is only one unit, while two kits require two; the extra import is a real paid trip. Site, technique, production, worker, stock and recruitment gates remain authoritative. This closes the explanation gap between the building and its first troop goal, not the larger automation or long-run resource balance. See implementation status, interface, player guide and technical reference.

M1/M3 building-goal construction handoff (implemented, bounded): A selected building in City Supply chains now links directly to that exact definition's map footprint preview. The goal shows the current selected-plot construction reason and offers a direct Review construction action only when the current server projection has an eligible quote. The preview compares managed sites and keeps the usual terrain, rights, technique, material, crew and storage gates; neither action spends anything before the existing construction review is confirmed. A live founding-village walkthrough opened a Community food plot from its goal, compared four eligible plots, and reached the ordinary reviewed order on a chosen plot. Multiple planned copies remain material estimates and require separate real plots and orders. See implementation status, interface, player guide and technical reference.

M3 mixed-material import plan from a supply goal (implemented, bounded): A founding-home building, land, item or troop goal with two to four different uncovered resources can suggest one editable waystation itinerary containing different import offers. The pure planner uses currently eligible quoted lots and caps total receipts by available finite depot stock. It first seeks complete coverage with the fewest loads, least excess and least coin spending. If four loads or current stock cannot cover everything, it can instead show the strongest two-resource partial plan and name the remainder still unarranged. Clicking Plan N mixed imports opens an unsent Trade & transport draft. The player reviews cumulative ceilings and authorizes the first real load separately; later loads are requoted, paid and delivered one at a time. Neither the suggestion nor an undelivered load closes any goal shortage. A paid stone-and-bricks journey confirms separate physical returns and restored itinerary state; a fresh barracks goal visibly proposes three five-brick loads and one five-iron load, with one brick still missing. Unquoted resources, later blockers and further loads remain manual; this is not automatic procurement or renewable supply. See implementation status, plan, player guide and technical reference.

M3 supply-goal committed import cue (implemented, partial): The founding home's Supply chains goal now shows any undelivered loads in its current waystation itinerary that overlap a material shortage. A travelling load is identified as reserved for its caravan; pending or blocked loads are explicitly unpaid and unreserved. The notice links to Trade & transport for the actual itinerary and blocker. It never subtracts those quantities from the goal gap: only physical unloading changes the local warehouse and clears a shortage. A live City walkthrough confirmed that a twelve-stone goal dispatches its ten-stone first load, reserves that finite waystation stock, leaves five stone pending, and still shows twelve stone needed at home. See implementation status, player guide and technical reference.

M3 player-supplied mineral market (implemented, partial): The funded waystation now posts whole-lot coin sales and purchases for rough stone, clay and iron ore. Prices are four, one and two coins per unit respectively. A sale uses the normal two-worker caravan, holds the finite market fund and deposits only actual carried mineral at the shared depot on arrival; the seller receives coins after the team returns. A purchase reserves existing depot stock and the buyer's communal coins, and credits material only when the purchasing team returns. New worlds still start with only the existing finite rough-stone depot allotment; clay and iron ore start at zero. Paid outpost quarry, clay and iron journeys now prove source extraction, home collection, sale, purchase and save restoration without a mineral grant. This lets real player production replenish market supply but does not renew a finite seam or guarantee future stock or NPC funds. See implementation status, plan, player guide and technical reference.

M3 supply goal to linked import planning (implemented, partial): When a founding-home material goal exceeds a single currently eligible waystation load, the Supply chains line can now seed a two-to-four-load Trade & transport import draft. The pure planner chooses the fewest quoted loads, then the least excess, and rejects a sequence whose total exceeds the currently visible finite depot stock. The player may edit the draft and must separately review its cumulative ceilings and first actual departure. A retained active or blocked itinerary is linked for inspection instead of silently replaced. A twelve-rough-stone goal selects ten and five lots; the goal remains unmet after dispatch and after the first return, then closes only when the second team unloads. This connects visible building-material demand to physical supply without treating unpaid future loads as stock or making finite market supply renewable. See implementation status, interface, player guide and technical reference.

M3/M6 bounded waystation import itinerary (implemented, partial): A founding-home player can review two to four exact barter or coin-purchase import loads in Trade & transport with cumulative food, material and coin ceilings. The first normal caravan dispatches immediately; each later load is requoted and paid only after the previous two-worker team returns and unloads. The ledger records committed spending and each outcome across saves. Busy carriers defer a check; other failures block the saved next load for a reviewed retry with revised ceilings or cancellation. Cancelling leaves any already paid team travelling; recalling that team cancels future loads. Finite waystation stock, available funds, protected food, route, capacity, workers and home storage remain authoritative at each dispatch and return. Regional overview flags a blocked load. The two-trip stone test confirms physical conservation and reload. This reduces repetitive ordering, while long-run supply and depot renewal remain open. See implementation status, interface, player guide and technical reference.

M3 mineral replacement through physical import (implemented, bounded): The Supply chains goal tree now offers a direct reviewed caravan quote for a fundable waystation import lot. It selects the smallest currently quoted eligible lot that covers the open line, or the largest eligible lot if one trip cannot cover it; the player still reviews actual payment, carriers, route and storage before dispatch. A stone-camp continuation idles the quarry, barters real timber for ten then five finite rough stone at the waystation, and covers a twelve-stone home goal only after both teams return. A restored in-flight team unloads the same stock once. This gives a playable finite alternative to a local source but does not replenish a deposit or guarantee long-run market supply.

M3/M6 finite mineral replacement handoff (implemented, partial): A low or exhausted worked stone, clay or iron deposit in an owned outpost now opens the founding home's Supply chains on that exact resource and a replacement goal for up to twelve more whole units above current home stock. The issue retains the affected outpost identity, while the home view can compare other owned sources and actual import or lease paths. This is read-only planning: neither the depleted deposit nor another source is replenished, and production, permissions, freight and delivery still require separate paid orders. The founding Getting started route is unchanged.

M3/M6/M7 paid second-return recovery (verified, bounded): The stone-camp journey now continues past its first Governor return and a zero-timber home-service interruption. The player pauses optional civic programs and food-field staffing, exports actual surplus food to make warehouse room, reassigns mill and harvest workers, and mills real logs into replacement timber. A leader dies during this longer recovery; embodying the appointed living adult and completing lawful handover restores public command authority without resetting the Governor ledger. Restored home service lets the existing mandate fund a second physical quarry-stone return, using the outpost's daily target refill and remaining finite deposit. This proves one recoverable regional interruption with family continuity, not indefinite regional supply.

M3/M6 Governor service recovery navigation (implemented, partial): When the founding home's Governor exchange loses required civic service, it now shows a read-only recovery panel with current home timber, Trace home timber, links to the inactive Regional institutions, Record keeping and Public accounting cards, and Manage registry staff. These controls navigate within the authoritative home City; they never restock timber, reactivate a program or dispatch cargo. The paid stone-camp continuation confirms the reason for this handoff: its quarry refills after collection, yet the next Governor check remains blocked when home timber upkeep stops Regional institutions. A later delivery still requires actual materials and staff; an enabled program can resume at a later daily check, while a disabled program needs adoption review.

M3/M6 replenishing outpost target draft (implemented, bounded): When the home Supply chains shortcut opens a new owned-outpost producer target, its unsent draft now defaults to a one-batch daily-only input allowance. A collected outpost warehouse can therefore refill toward that same stock target on later eligible checks without reauthorizing every batch. The shortcut resets only a new unsent draft's suggested input ceiling; an accepted mandate keeps its reviewed allowance period, and the player may edit the draft before review. The paid stone-camp journey observes actual post-pickup quarry replenishment under this period, while home Record keeping and Regional institutions can still stop the next Governor dispatch when their timber runs out. Finite deposit, local tools, staff, food, storage and physical freight remain gates; this does not prove long-run supply.

M3/M6 remote production into delegated freight (verified, bounded): A command-funded stone-camp journey now combines a zero-stock home goal, the exact outpost quarry target and a preauthorized Governor collection. The home pauses timber-consuming civic services during real woodland replenishment, delivers materials for local accounting, and restores its staffed registry and Regional institutions. A first Governor check with the quarry unstaffed reserves no cargo or material allowance. Later staffed batches spend tools and finite stone; a subsequent check dispatches one real carrying team, and only its return adds home rough stone. The Governor ledger survives reload. This proves one complete bottleneck-to-return path without establishing indefinite forest, tool or mineral renewal.

M3/M6 resource-trace handoff (implemented, partial): An individual home Supply chains resource trace now offers the same reviewed future Governor collection as the goal tree when an owned outpost has no stock but a current producer or woodland source. A named building producer also offers its outpost production-target draft from the trace. Without a selected goal quantity, these shortcuts start with an editable need of at most twelve units beyond home stock. No cargo, output or mandate is created by viewing or opening either draft; the ordinary production and transport checks still decide what arrives.

M3/M6 preauthorized collection from an empty producer outpost (implemented, partial): A home Supply chains goal can now offer Plan governor collection while an owned outpost has zero collectable units but a current producer or renewable woodland source. A depleted mineral site alone does not qualify. The unsent Governor draft sets a home target from the uncovered goal and funds one prospective load in the appropriate daily or retained allowance without claiming that load exists. Review and accepted authorization move nothing. Each later Governor check applies the existing service, labor, route, protected-stock, allowance, storage and physical-carrying rules; a new collection-only route waits without spending until real outpost output exists, while an existing route may still carry its other authorized goods. A command-built woodland case empties the camp through two paid pickups, records a blocked zero-stock check, finishes a second actual harvest, and delivers a later Governor load only after its journey returns. This joins source planning with future logistics without creating automatic production or inexhaustible resources. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

M3/M6 blocked outpost target recovery (implemented, partial): A Production mandate with unavailable target-accounting service now links directly to Public accounting in the selected community's Research section. This also applies when a home material goal opened that outpost's unsent target draft; changing sections retains the draft, and no research or mandate command is issued. The local accounting path remains subject to its real prerequisites, workers, supplies and adoption. Linked founding-home accounting with Regional institutions remains an alternative. See gameplay foundations, implementation status, player guide and technical reference.

M3/M6 outpost target prerequisite shown at source (implemented, partial): The home Supply chains producer row now names the accounting route before opening an outpost target draft: active Public accounting at that outpost, or active Public accounting and Regional institutions at its linked founding home. An isolated City check with a 301-unit rough-stone gap showed the 288-unit surveyed quarry remainder and 13-unit unmet balance, then opened the exact Stone camp quarry with 288 prefilled. Its review stayed disabled without accounting, as the Production mandate explains. The shortcut remains an unsent plan; no remote extraction or freight is implied. See gameplay foundations, implementation status, player guide and technical reference.

M3/M6 finite remote production target (implemented, partial): A home Supply chains goal now carries each owned mineral outpost producer's current surveyed deposit remainder into the remote target suggestion. The proposed new output is bounded by that producer's remaining whole units after collectable outpost stock; any further home gap stays visible and needs another source. A depleted site offers no target shortcut. On opening the destination City, the current deposit is checked again, so a changed or exhausted seam cannot silently produce a stale draft. This changes only read guidance and an unsent draft; physical production, input spending, finite depletion and paid return still decide stock. Clay and stone cases cover live remainders; pure cases cover partial and zero capacity. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

M3/M6 outpost target through paid home delivery (verified, bounded): The home-to-outpost production shortcut now has a command-funded stone continuation. The player sends timber to the quarry camp, researches and adopts its local Record keeping and Public accounting, reviews a rough-stone target on the identified quarry, and staffs it. Real batches consume local tools and reduce the surveyed deposit; home remains short until a separately paid team returns with stone. A deliberate pause isolates that transfer, then a reviewed daily input allowance lets the outpost refill after the pickup. The target and material ledgers restore. This proves a bounded source-to-workshop-to-freight loop, not an inexhaustible seam, permanent accounting service or unattended regional balance. See gameplay foundations, implementation status, player guide and technical reference.

M3/M6 home shortage to outpost production (implemented, partial): A home Supply chains goal that still lacks an owned-outpost material after accounting for collectable remote stock can now offer Plan outpost production target on the exact producing building. The outpost City is fetched first; its current recipe, local warehouse stock, mandate and inputs determine an unsent stock-target draft. The player still needs active accounting, staffing, finite source material or deposit, input allowance, storage and a full production cycle, then a separately paid return journey. The home projection exposes the remote structure ID but grants neither remote stock nor authority. A clay-pit case verifies zero stock, exact producer identity, local target calculation and a pure read. This links the regional dependency tree to production control without completing long-run mineral replacement or automatic logistics. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

M3 local material goal to reviewed production (implemented, partial): A selected recipe step in the home's Supply chains goal tree can now open a specific built producer's Production mandate with a draft stock target for that line's uncovered units. The draft uses the recipe's nominal full-staff yield to estimate whole batches, preserves a retained mandate and its spending, and raises capped input ceilings for those batches or a daily ceiling for one next batch. It does not change staffing, recipe, stock, authority or the live order. The owner checks the actual producer, food and material consequences and confirms the ordinary target mandate; each later batch still needs an accountant, current recipe, workers, inputs, storage and a full cycle. A command test carries a four-tool shortage through a real smithy target, physical iron and charcoal consumption, and save restoration. This connects a supply-tree suggestion to an executable local order without claiming the hypothetical tree is a schedule or solves finite regional supply. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

M3/M6/M7 Governor carrier recovery (implemented, partial): When an authorized Governor exchange is blocked because its home lacks two carriers plus the owner's idle-worker floor, City shows the exact required and currently free worker counts and opens the existing Regional staffing comparison. The owner must choose staffing reductions or swaps, compare one or six home days and confirm the ordinary atomic order; no staff move automatically, and the Governor's next daily check still applies service, stock, food, route, storage and budget rules. A copied capital continuation follows workshop staffing and paid clay and ore collections from distinct owned outposts; each load returns physically before increasing usable home stock. Both target-based routes stay authorized, and the satisfied clay target takes no further carrier while ore dispatches. This connects a material shortage to a reviewable labor choice, but finite deposits, future crews and repeated repairs still need management. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

M3/M7 one-community staffing swaps (implemented, partial): The existing reviewed Regional staffing comparison and atomic order now allow two to eight producer changes within a single owned settlement, including the founding home, instead of requiring two different communities. It still checks each producer revision, local labor, owner authority and catch-up state; it releases workers before new assignments and changes no stock during review. At a command-built 64-resident, seven-community capital with zero free home workers, a copied continuation moves the staffed saw crew to the existing smithy and then the kiln. Real stored iron and charcoal produce tools, and physically collected clay plus logs produce bricks; the branch restores with no grant. This makes a repair-material bottleneck actionable without transient labor over-allocation, but the owner still chooses recipes, freight, staffing and well work. It does not establish indefinite brick, iron, tool or City balance. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

M3/M7 regional shortage-to-supply navigation (implemented, partial): Regional overview's timber-balance, missing headworks materials and low post-repair civic timber warnings now open the affected community's Supply chains screen with the corresponding timber, ordinary well-repair or repair-plus-two-service-days goal selected. The link resets the proposed quantity to one; it creates no purchase, production order or repair. A 100-resident City built with controlled expansion stock continuation replaces its finite twenty-trip woodland authorization with an explicitly ongoing, daily-funded food/log exchange. Over thirty further home checks, the real governor dispatch count passes twenty, both communities remain fed, home timber stays at or above twenty and the ledgers restore. Without new bricks and tools, headworks still wear and City status is lost; repeatable repair-material production and freight remain the next M3/M7 balance gate. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

M8/W2 held-pool transit exposure (implemented, partial): The recorded-window major-reservoir comparison now checks whether proposed source-basin water newly covers any remaining cell of a currently paid outward or returning journey. It counts distinct journeys and their named current charter owners publicly, keeps route hexes private to each noticed carrier, adds a source-pool transit approval blocker, and makes the carrier an exact notice party even if it holds no flooded land. This is read-only present-route evidence: it does not move cargo, change a journey, prove future passability or clear W2–W4 rights and engineering. See major waterworks plan, gameplay foundations, player guide and technical reference.

M3/M6 regional woodland before cargo (implemented, partial): The founding home's Supply chains resource trace and goal tree now list a linked owned outpost with zero logs when it retains natural forest or a standing forestry instruction. The projection selects one actual manual harvest plot by current quote readiness, reports its conditional yield or blocker, and links to that outpost's Land & water screen. A retained standing instruction appears separately with its current ready, waiting, blocked or paused reason and links to Orders. Neither source is counted as home output or stock; the pickup controls remain unavailable until whole logs physically enter the remote warehouse. A command-built route proves manual harvest, reservation, paid return and save restoration; an authorized then paused standing instruction remains visible without inventing a harvest. This extends the earlier building-producer discovery to managed natural resources, while regrowth, food, workers, storage, route funding and long-run timber balance remain open. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

M3/M6 remote producer discovery (implemented, partial): The founding home's Supply chains tree now keeps an established owned outpost visible as a material source when its warehouse has zero collectable units but a building there has the resource in its currently selected recipe. The entry names each actual producer, its plot, current readiness and blocker, and links to that outpost's Production screen. It does not count a possible batch as home stock or offer pickup before whole stock exists. A staffed clay pit with an empty warehouse and the same pit after its workers are released prove the distinction without changing the world on read. This makes the regional supply path actionable before extraction; workers, inputs, finite deposits, local storage and paid freight still govern real material. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

M3/M6/M7 supply-goal-to-Governor collection (implemented, partial): A founding home's Supply chains tree and owned-outpost resource trace now offer Plan governor collection beside an available remote material when Regional institutions are known or a Governor route already exists. The button opens that outpost's existing Governor exchange draft with a home stock target, a collection row and enough material allowance for a first possible load. A fresh route defaults to ongoing, daily-renewing authorization with no delivery target and a visible travel-food ceiling; an existing route retains its delivery, other collections, trip cap, period and gross spending, adding a free collection row rather than replacing its main cargo. A duplicate or full route is rejected in the draft. Nothing is dispatched or reserved by the shortcut: the player must review the ordinary Governor command, and each later departure still needs institutional service, two carriers, travel food, stock above outpost reserves, route access, capacity, warehouse space and a current allowance. The paid command test confirms actual remote logs enter home stock only on return. This connects the supply tree to delegated physical renewal, but finite deposits, production staffing and long-run regional balance remain open. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

M2/M7 household-water repair priority (implemented, partial): Due recurring land instructions now check an eligible central well first when its headworks are within three ordinary wear checks of losing extra delivery and residents need that extra capacity. Otherwise plots remain ordered by the most worn improvement, with cell ID ties; improvements within a plot retain their own wear and funding order. The well still needs its normal specialist, food, four workers, materials, allowances and paid one-day job. An unfundable priority check spends nothing and leaves another plot eligible. Regional overview raises an urgent Timber floor blocks automatic well repair issue when the ordinary well materials are present but the reviewed post-payment floor blocks an imminent household-water repair. A paid 16-resident well/channel case proves crew priority and offline replay; a 12-resident case retains most-worn order. This improves M2/M7 exception management, not material renewal or guaranteed water. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

M3/M7 retained timber in recurring land work (implemented, partial): The owner can now review a 0–1,000 whole-timber floor after each automatic land-maintenance payment on a surveyed owned plot. The default is zero, including migrated version-one/two instructions, so earlier repairs keep their rules. Each eligible soil, channel, well, terrace, drainage or road quote still checks its ordinary materials, food, four workers, specialist, public budget and daily/total allowance. Before committing that quote, the standing instruction also checks that local timber after its repair cost would meet the reviewed floor. If not, that candidate waits with a specific blocked reason; another cheaper eligible improvement on the same plot may still proceed. No stock or crew is reserved when the floor is approved, and already funded work is unaffected by later edits. City Land & water offers the floor beside the trigger and budget, displays two current days of active specialist timber use as an optional example, and explicitly warns that protecting civic timber may delay a well repair until household water fails. Manual reviewed repairs remain separate. The version-three ledger adds a validated floor and migrates older ledgers to zero without altering spending or jobs. This moves regional management from warning to a bounded owner choice, but does not guarantee replenishment or safe water when the floor prevents work. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

M3/M7 civic timber after a well repair (implemented, partial): The ordinary headworks job continues to spend eight timber, four bricks and one tool. A distinct read-only Supply chains goal adds two days of the settlement's current active timber-funded service draw to that bill so players can plan a buffer while releasing mill workers for the four-person crew. Regional overview raises a Supply chains exception once an enabled well reaches 80% condition or below, no repair is funded, the local warehouse holds the actual repair materials, active service timber draw is positive, and payment would leave less than that buffer. It explains the current stock, bill and service draw without reserving materials or claiming that two days of production, staffing or service are guaranteed. The alert clears on sufficient stock or changed conditions; the paid maintenance instruction and job semantics are unchanged. This addresses the civic-service interruption exposed by the larger-capital continuation, but does not solve finite mineral supply or unattended upkeep. See gameplay foundations, implementation status, player guide and technical reference.

M3/M6/M7 larger-capital material renewal (implemented, bounded): A 64-resident Regional capital with six chartered communities can continue from the existing long-growth checkpoint using owned, physical material flows. Two manual outpost-supply trips return 20 forest logs and eight mine ore; the home mill, charcoal kiln and smithy make the next tool, and its already authorized daily land-maintenance instruction pays the first ordinary eight-timber/four-brick/one-tool headworks repair. The existing Governor exchange then returns another log load. Retained iron and charcoal fund a forge-tools batch while local clay and logs fund a six-brick kiln batch. Running four mill workers builds enough timber beyond the repair bill to preserve civic service; the same instruction pays and completes a second ordinary repair. For 45 further daily checks, the capital remains recognized, all 64 household water places remain served, and every chartered community remains fed. The endpoint has 82% headworks condition and a finite reserve of 10 timber, four bricks and one tool. This is a tested labor and material schedule, with no new stock grant or rule. It does not establish indefinite equilibrium against finite ore/clay, forest availability or later maintenance. See gameplay foundations, implementation status, player guide and technical reference.

M3/M6 outpost pickup custody in material goals (implemented, partial): A home goal now lists its already ordered outpost pickups separately from both remote available stock and local inventory. Outward supply teams show goods reserved at the outpost; after successful loading, returning or unloading teams show the actual carried amount. A recalled team that never loaded a pickup is not listed as incoming. Neither state reduces the material shortage or enables home production; only unloading does. The projection exposes an owner-scoped pickup state on existing movement rows, and the read-only planner uses it without changing jobs, inventory or saves. The clay-pit route checks reservation, return and delivery against the same eight-unit goal. This helps avoid unnecessary duplicate pickups but does not guarantee arrival or close the long-term finite-material balance. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

The planner provisionally assigns each pending load once across all branches of a selected goal. Its suggested additional pickup amount uses only the need left after those provisional assignments; if a pending load could cover a line, that line instead prompts the player to inspect its journey. The displayed local shortage remains unchanged until delivery.

The pending line now shows the funded team's next journey check as a check time, not an arrival promise. Inspect journey opens and focuses that exact team's card in Frontier & charters; a stale completed journey is not treated as still inspectable. This links the shortage decision to actual route custody without changing travel or automatic dispatch cadence.

M3/M6 regional source tracing and outpost pickup (implemented, partial): The founding home's Supply chains graph now lists whole, transportable goods actually stored above any food reserve in each established owned outpost. A missing local clay, ore, timber or other supported material shows its remote source in the goal tree and resource trace, with the outpost name and hex. Remote stock never covers the local goal gap or enters current production rates. Plan outpost pickup opens that exact outpost's custom supply form with up to twelve currently available units prefilled; the player must request a fresh server quote and separately review a paid two-carrier trip. Stock reserved for an existing trip is already debited from the source and stays in cargo custody until unloading. The clay-pit integration checks the zero-local/twelve-remote state, the eight-unit reservation and the eventual home delivery without any read-model mutation. Route hazards, workforce, provisions, load weight, storage, perishability and future depletion still constrain the real trip; this does not create renewable clay or automated freight. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

M3/M7 scheduled paid headworks upkeep on the supplied 100-person City (implemented, bounded): The City and woodland-camp continuation now joins its existing physical Governor exchange to Fund recurring land maintenance on the surveyed home well. The owner chooses 60% condition, zero extra idle workers and a renewing daily allowance of eight timber, four bricks and one tool. Authorization debits nothing. Twelve actual home logs sold to the finite waystation fund the next four bricks and one tool while the governor keeps collecting real camp logs. Seven daily checks wait above the threshold; the eighth funds a normal four-worker maintain-headworks job at 60%, spends the local materials once, and preserves all 100 water places while the crew works. Completion restores 100% headworks condition. City status, 100 home residents, the eight-person camp, food, sanitation, grant ledger, maintenance instruction and inventories survive save restoration. This reduces repetitive repair clicks without granting replacement bricks/tools: the next cycle still needs another physical material source or purchase and the governor authorization remains finite. See implementation status, plan, player guide and technical reference.

M2/M3/M6/M7 bounded 100-person City with regional woodland freight (implemented, verified): A continuation from the linked eight-person woodland camp now replaces the failing manual-only timing with an explicit Governor exchange for logs: home target 40, outpost retention five, at most twenty per leg, paid food rations and a six-trip limit later reviewed upward to twenty with larger finite allowances. A 1,600-food home target keeps warehouse room; a 250-food camp target keeps room for recurring standing forestry. Real two-person teams repeatedly move logged wood while the staffed precision mill funds Record keeping, Regional institutions and sanitation. Two further finite twelve-log sales buy four bricks and one tool each; two ordinary eight-timber/four-brick/one-tool headworks repairs finish before the central twelve water places fail. After the second repair, the home earns City with 100 residents while the camp retains eight. Across at least 31 explicit City-day checks and the intervening market and repair journeys, the development ledger shows no downgrade, food and sanitation remain fully served, water remains at least 100 places, and the governor ledger reaches sixteen paid dispatches. At the saved endpoint the City has 24 logs, 31 timber and 76% headworks condition; the camp has 34 logs. This is a bounded managed recovery, not unattended equilibrium: the reviewed plan stops at twenty trips, the finite buyer and bricks/tools still need renewal, and future waterworks cycles remain open. The original manual-only failure below remains useful negative evidence. See implementation status, plan, player guide and technical reference.

M2/M3/M6/M7 linked woodland supply reaches 100 people but exposes the next cadence gate (implemented, bounded): The three-return woodland branch now continues through real civic and water recovery. Its staffed precision saw stalls when timber reaches zero after Joinery lapses during a mill staffing pause; selecting the basic saw turns already stored logs into timber and reactivates Joinery. Pausing Land registry saves one daily timber, permitting active Regional institutions and a 92-resident City while more camp logs arrive. Home food targets at 1,600 leave cargo space; further physical log returns and a finite sale of ten logs buy two missing bricks and one tool. After temporarily pausing the governor program and collecting another real load, the home pays the eight-timber/four-brick/one-tool central headworks repair, restoring 108 water places. The three food fields return to continuous output, which admits eight actual migrants in five village days and reaches 100 residents while the eight-person camp remains occupied. A longer replay preserves both communities and food, but intermittent manual returns leave the home mill without input while the camp still holds at least twenty logs; headworks wear returns water to 96 and the home is a Village. The stage, residents, stock, charter and outpost restore from save. This manual-only branch shows the supply and repair timing that the bounded governor continuation above addresses. See implementation status, plan, player guide and technical reference.

M3/M6/M7 physical woodland source from a 100-person home (implemented, bounded): A separate command continuation branches at the earlier 100-resident Town checkpoint, before the later City recognition and local-woodlot stress run. It sells 180 actual clearing logs in weight-limited physical waystation trips, then spends those finite coins on 70 delivered timber and five tools. A two-worker survey returns from nearby Woodland charter 2, Record keeping registers the conditional charter, and eight existing home residents carry a paid founder kit with ten extra timber. No new starting grant or population appears: the home drops to 92 and the new camp holds eight. Its carried 30 timber funds a Community field staffed by two locals; four subsequent local checks have no food shortage. A normal selective harvest removes woodland cover and credits camp logs. Three paid home supply teams each carry 32 food outward and return 18 actual camp logs; two selective harvests are manually ordered, then a third is ordered by standing forestry after the home funds and adopts Regional institutions. The first attempt to authorize that instruction correctly fails while the linked home lacks the service. Eight more real clearing logs buy two tools for research and adoption; a staffed home registry and existing Public accounting support the regional service. Logs enter home stock only when each team returns, and the established link, people, inventories and retained forestry order restore from save. Earlier expansion timber/tools were controlled, and the finite market and three returns are bounded checkpoints. Later governor freight and paid repairs are measured above; this three-return checkpoint alone does not establish City balance. See implementation status, plan, player guide and technical reference.

M2/M3/M7 City single-woodlot limit (measured, open): A copied continuation of the serviced 100-resident City checkpoint keeps the ongoing one-plot forestry and 1,600-food field targets unchanged. City's Regional overview already shows both civic timber-balance and missing headworks-material issues. Without a further supply or demand decision, stored timber reaches zero on the third additional village check, sanitation leaves residents unserved, the central headworks fall below their delivery threshold on the fourth, household water drops to 96 and earned recognition falls to Town. The copied run leaves the successful checkpoint untouched. This establishes a specific remaining M3/M7 gate: a renewable second timber source or lower supported service draw, plus repeatable repair bricks and tools, must be integrated before claiming long-run 100-person City balance. See implementation status, plan, player guide and technical reference.

M2/M3/M7 City food-space and standing-forestry coordination (implemented, bounded): After the 100-resident City has titled and twice harvested its reserved woodlot, the owner may authorize an ongoing Standing selective harvest instruction on that exact plot. In the command route, its first village check correctly blocks on fewer than 21 free warehouse spaces; City's Land & water projection names the storage reason, and no automatic job or logs appear. Reviewed Target production orders at 1,600 local food on all three staffed fields leave household meals running while freeing room. The next check funds a real two-worker forestry job; completion credits actual logs, and eight more checks retain 100 residents, City status, food, water and full sanitation service. This coordinates two existing systems without a new stock grant or save format. The one-plot timber budget, finite buyer and future well repairs remain unproven over a long run. See implementation status, interface, player guide and technical reference.

M2/M3/M7 City woodland reserve (implemented, bounded): The 100-resident City route now puts its storehouse on a field, leaving one mature outer-ring forest plot unbuilt. After City recognition, a real log sale buys the four tools, three of which pay for a returned survey and charter registration of that plot. The owner completes a selective harvest, mills actual logs into timber, and keeps 100 residents, City stage, food, water and full sanitation service through nine daily checks before a second harvest and three more after it. The same plot regrows enough for that second selective harvest; a brief pause of one food field frees the full 21 warehouse spaces required to store that batch, after which staffing resumes. At that checkpoint, the live City Regional overview identifies the missing repair materials and points to Supply chains; the issue clears after completion. Four real logs sold after the first harvest buy the missing bricks for a fourth paid central headworks repair before the nine-check run. This proves a renewable local log source and a consequential food-versus-material storage decision. It does not prove that one plot can cover daily civic and sanitation timber indefinitely; headworks repairs, finite market funds and wider regional materials remain open. See implementation status, gameplay interface, player guide and technical reference.

M2/M4 secondary local wells (implemented, partial): Founding villages and developed local villages can draw on paid adjacent groundwater lenses beyond their separately limited central source. For an outpost, new construction requires its retained local charter and actual operational village-center commons, condition at least 65 and no building job; an undeveloped or merely reoccupied camp must first develop or restore that commons. Existing paid well custody survives damage or evacuation, with actual delivery still subject to ordinary source connection and pump conditions. After learning and adopting Irrigation, the owner must use Survey land on an adjacent field or woodland hex with natural moisture at least 0.55, elevation at most 0.65 and no marked feature. Any woodland must be cleared. Secondary groundwater well then occupies that one titled plot and costs 40 timber, 18 bricks, 12 food, two tools and 110 construction work through the ordinary paid building queue. Surveying and funding provide no early water. Each completed, operational well adds twelve local daily household/irrigation places only while it has at least 65 condition, one assigned worker, active Irrigation and a dry site. Staffing, damage, flood, specialist loss and demolition can remove that delivery; the founding commons must remain usable. City Buildings gives the construction review and City Land & water lists each well's delivery, staff and condition. The finite water allocation still serves households before channels, and signed imports/exports remain separate. Save restoration validates the plot's actual survey, natural source and commons adjacency, without issuing new title, water or stock to older saves. A command-funded route sells 39 real founding timber for 78 coins, barters additional timber for tools, buys 78 bricks from finite waystation stock, surveys and builds three staffed secondary wells, pays to repair one damaged well, then funds the central deep lens and headworks. It raises local capacity from 60 to 108 without injected waterworks materials; later population growth uses a separate controlled expansion-material branch. A follow-on command branch registers first- and second-ring charter plots, builds eight timber-framed houses for 104 permanent places, three staffed food fields, a care hall, waste yard and storehouse, and admits 60 actual waystation residents to reach 100 without another founding grant. The central headworks first wears below delivery condition; three staffed secondary wells retain 96 places until a paid repair restores 108. At 80 residents, a real log sale buys repair bricks and a tool, while a staffed precision lumbermill turns cleared logs into timber for daily sanitation and two further paid headworks repairs. Full food, water, health and sanitation hold through 25 consecutive 100-resident village checks. A staffed registry and adopted Regional institutions then earn City status after three qualifying checks; save restoration preserves 100 residents and 108 household water. Only later expansion-phase timber/tools are controlled. Clearing logs and waystation stock are finite, so renewable regional supply, indefinite upkeep and the wider M0–M8 objective remain open. See gameplay foundations, implementation status, interface, player guide and technical reference.

M4/M7 town sanitation (implemented, partial): The Building-branch Urban sanitation topic requires learned Care institutions and Public accounting, eight practice days, a staffed operational Care hall, three research days costing ten timber/eight food/one tool, and adoption costing four timber/one tool. An active specialist occupies one worker and one food per day. It enables a one-hex Waste collection yard on cleared field or forest ground for 65 timber, 16 food, two tools and 110 construction work. Each yard has two staff places and standard damage, repair, work and demolition rules, with a semantic footprint-and-label visual fallback. The first 64 residents have basic sanitation capacity. Each sound dry yard worker covers up to 24 additional residents while the specialist is active; collection spends one real timber per started 48 covered residents at each village check. Limited local stock or a reviewed daily collection limit reduces coverage rather than funding an arbitrary number of yards. The owner may cap collection at zero, one, two, four, eight or unlimited timber per day in City People; the server accepts any whole limit from zero through 32 or unlimited. A policy change spends nothing immediately and keeps staff, specialists and past receipts intact. This permits timber to be kept for well repairs or regional upkeep at the cost of unserved residents and health pressure. Unserved residents cause min(8, 2 + unserved/8) health pressure, rounded to hundredths, after ordinary care and events but before direct flood injury. At 96 residents, 32 unserved cause six points of pressure; two workers and one timber cover all 32. At 160 residents, four workers need two timber to cover all 96 above the base; one timber covers only 48. The service creates no people, waste commodity or compost. At 100 or more residents, City qualification and retention require a fully covered most recent village check at the current population, plus an active specialist and enough sound dry yard staff for the population. Current timber stock is a next-check warning, not a recognition prerequisite immediately after a paid collection; three failing daily stage checks still precede demotion. This adds no retrospective stage change to existing saves. City People shows coverage, unserved residents, next timber demand and the last health loss; Supply chains shows the conditional material use. Older saves gain an empty version-three ledger with unlimited collection. Version-one receipts retain their historical one-timber rule, and version-two ledgers retain the scaled rule while migrating to the new unlimited default. Subsequent checks apply the selected limit. Waste transport geography, disease transmission, baths/hospitals and longer-run M7 balance remain open. See gameplay foundations, implementation status, interface, player guide and technical reference.

M3 processed-crop market (implemented, partial): A chartered village with an operational Grain mill in at least 65 condition and two assigned mill workers may review City → Trade & transport → Sell flour for coins. One flour earns two coins from the waystation's existing finite 1,200-coin operating fund. The ordinary two-carrier caravan takes actual oldest-first dated flour and separately funded travel food; the quote rejects flour expiring by estimated arrival. The buyer consumes delivered flour without adding undated depot stock. Buyer coins are held at dispatch, become communal spendable coins only after the carriers return, and are refunded on outward recall. If a delay lets carried flour expire before exchange, the cargo is lost and the sale recalls; surviving recalled flour returns with its original expiry. marketFlourVersion: 1 validates live custody and retained receipts, while older saves gain only an empty version marker. City shows flour age on the sale review, active caravan and completed receipt; Supply chains lists the conditional market use. This extends the crop → mill chain into physical commerce, not a renewable buyer fund or a complete regional market. The fish sale and its legacy marketFish records retain their separate rules. See gameplay foundations, implementation status, interface, player guide and technical reference.

Implemented, M2/M3 household-grain processing floor (partial): City → People now offers a reviewed zero-to-three-day grain meal floor, measured from current residents. A staffed grain mill waits when its next batch would leave less than that many one-grain fallback meals; an already supplied bakery still runs. The City producer reason and potential food-output forecast use the same floor. The default is zero for new and migrated villages. Household meals may use this grain after prepared and gathered food run short; trade and separately reviewed spending are not protected by the milling floor, and aging continues to the original expiry. Raising the floor creates no food, reserves no physical stock, and cannot rescue grain from spoilage. storagePolicyVersion two migrates earlier policies without changing stock, dated batches, workers or funded work. This gives the player a real processing-versus-emergency-food choice while wider food preservation and the M0–M8 progression remain open. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M2/M3 dated grain and flour (partial): A chartered settlement now keeps dated grain for sixty village checks and flour for fourteen, using the same oldest-first warehouse batches and before-production daily expiry as fish. Milling consumes the oldest grain; a completed batch creates fresh flour, while cooking consumes the oldest flour and creates prepared food, which still has no age limit. Household fallback and flood loss withdraw the oldest dated grain. Owned outpost supply, governor routes and bilateral trade or relief retain original grain/flour expiry through reservations, travel, storage waits and recall. Old saves keep their actual stock and active physical cargo; previously undated grain/flour begins a disclosed fresh grace period at migration without backdating or minting goods. Warehouse movements record spoilage, and City supply-chain, cargo and trade views disclose dates. This makes crop timing, processing and distant exchange consequential; cold storage, broader diet and all M0–M8 gates remain open. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M8/W3 monitored-source rights comparison (partial): City → Land & water now compares each paid monitored source plot's exact untitled construction hexes and marked existing-use sites alongside its release-head evidence. The selected source uses the same authoritative footprint as its detailed proposal; other stations are reviewed independently at their highest supported candidate capacity. In the paid Lower basin, both supported capacities include farm 1375043, so a smaller reservoir does not bypass its protection. This comparison grants no title or consent and settles no existing use, W2 effect or W4 engineering. See gameplay foundations, implementation status, waterworks plan, interface behavior, player guide and technical reference.

Implemented, M1/M5/M8 marked-ground construction rights (partial): The shared construction footprint now rejects any new building cell with a generated natural feature unless it is a resource marker used by an extractor on its already surveyed matching deposit, or an exhausted surveyed resource site with a completed paid reclamation. The quote categorizes the refusal as a rights issue, names the exact footprint hex and offers an unmarked plot as the current remedy; funding rechecks the same rule and spends nothing on rejection. Existing buildings, surveyed iron extraction and lawful reuse after reclamation keep their accepted behavior. A controlled later-title Lower basin farm demonstrates why charter title alone cannot turn marked existing use into a building site. An explicit feature-use adjudication and any lawful conversion project remain planned. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M8/W3 marked-site notice disclosure (partial): Each recipient's exact major-reservoir notice now derives the marked natural features on all proposed source, pool, spill, selected intake and outlet construction cells from its frozen terms. City displays those hexes before the recipient's construction-easement action, including marked cells outside that recipient's charter, and separately identifies any marked cells it currently holds. The two-owner Lower basin notice exposes farm 1375043 to the southern recipient without pretending that recipient can sign for the unchartered farm; the list restores from the saved notice terms. The existing construction-feature blocker remains. The disclosure is public terrain evidence, not a field-access right, identified customary holder, feature-use consent or W4 work. See gameplay foundations, implementation status, waterworks plan, player guide and technical reference.

Implemented, M8/W3 construction-feature protection screen (partial): The exact reservoir construction footprint now checks every natural terrain feature, including sites held by a public charter. Its separate candidate-construction-features-unreviewed blocker persists if a marked plot later gains title or an easement; the City title panel names the marked hexes and explains that their existing use and protection still need review. The Lower basin farm at 1375043 demonstrates the current unchartered case, and a controlled titled case verifies that title alone cannot erase the warning. No feature-use adjudication, NPC/customary consent, construction approval or W4 operation is implemented. See gameplay foundations, implementation status, waterworks plan, player guide and technical reference.

Implemented, M3/M6/M8 two-owner receiver supply, notice and consent (partial): The paid southern-bank route continues in one shared world after both villages' six receiver titles. The southern home trades six real tools for eight observation-home timber; the source then buys thirty finite iron, harvests woodland, makes charcoal and forges enough tools to hold at least twenty-four before shipping monitoring loads. Its village builds a mill, researches Hydraulic engineering, returns a watershed report, pays for a dry survey of fourth-ring works hex 1375044, and installs a runoff station at owned hex 1375047 without buying another waystation tool. A 25-unit proposal selects its natural intake and exact pool-entry controls; the source activates Land registry and Public accounting and pays sixteen timber, two tools and eight food to register the fresh surveyed edge against those exact terms. The unselected base storage/spill footprint then has only marked farm 1375043 without public title. The source files a notice naming the southern village as a current construction holder. Player eight acknowledges and grants an easement over its two exact intersecting hexes, 1375042 and 1377091, and separately signs water use; player seven signs source water use. The frozen notice, individual answers and signatures, trade, titles and gauge survive restoration. These exact signatures settle only the named parties' decisions on this revision. The farm and additional selected-control endpoints still block complete construction title; all affected rights, W2 impact clearance, hydraulic proof, funding and W4 operation remain open. See gameplay foundations, implementation status, major waterworks plan, player guide and technical reference.

Implemented, M6/M8 southern basin village and receiver title (partial): A separate South basin charter parcel at watershed-south-v1:499:674 releases seven dry fields near receiving basin 1375046. From woodland start site:495:703, a second player pays for its returning survey, Record keeping charter and physical eight-founder trip while the observation village retains four receiver titles. Real field work, a house, a relocated household, a staffed home registry, local research, materials and a three-day project develop the southern camp into a twelve-person village. Separate physical deliveries, returned edge surveys and registry payments then title connected hexes 1377091 and 1375042 to that village; both owners' titles survive restoration. Hex 1375043 remains unchartered: its generated farm feature excludes it from ordinary edge releases even though it lies inside the southern three-hex radius. The construction-title screen now names marked features among unchartered works cells instead of implying geometric reach supplies a title path. The southern village has no basin-water or reservoir entitlement; existing farm use and tenure, all-party consent, W2 effects, hydraulic design and W4 operation remain open. See gameplay foundations, implementation status, major waterworks plan, interface behavior, player guide and technical reference.

Implemented, M6/M8 paid fourth-ring receiver pre-survey (partial): A current returned watershed report for the Lower basin village now lets City show only the report's natural pool-entry endpoints at the fourth charter ring as survey-only prospects before a runoff station is installed. No proposal, title or hydraulic approval is implied. In the paid journey, three exact edges appear; two workers survey hex 1375044 while it is still dry and physically return the report. The village then installs its runoff station, drafts a 25-unit reservoir proposal, selects the owned natural intake and the exact pool-entry controls, activates Land registry, Public accounting and Hydraulic engineering, and pays sixteen timber, two tools and eight food to register that still-fresh fourth-ring report. The saved receipt pins the exact proposal revision and entry edge; restoration validates both. Five of the seven base storage/spill plots are titled; 1375042 and 1375043 remain unassigned in that unselected footprint. The active exact-entry proposal also has twelve untitled construction cells, including other entry endpoints, so its title blocker remains alongside W2 effects, W3 consent and hydraulic proof, and W4 works. See gameplay foundations, implementation status, major waterworks plan, player guide and technical reference.

Implemented, M6/M8 paid receiving-basin title before monitoring (partial): A developed Lower basin observation village can use existing Frontier & charters surveys and registrations to title four exact receiver construction plots before installing its runoff station. Three returned second-ring surveys and registrations claim basin center 1375046 and spill-edge hexes 1377095 and 1377096; a separately returned outer-ring survey, active Public accounting and Land registry claim hex 1375045. Real home timber and tools travel to the village, each report physically returns, and the charter receipts and station restore together. Once the station records floodwater, a survey dispatched to the still-unclaimed center can return without findings, so the sequence matters. At this four-title stage, the 25-unit major-reservoir screen sees those plots but still lists 1375042, 1375043 and 1375044 as unassigned. Title does not certify a hydraulic outlet, water use, affected-party consent, W2 impact or W4 works. The frontier report now directs players to survey and register dry edges before monitoring. See gameplay foundations, implementation status, major waterworks plan, player guide and technical reference.

Implemented, M6/M8 downstream observation village (partial): A second fixed Frontier offer, Lower basin observation parcel, releases seven dry natural field hexes at watershed-watch-v1:505:670, separate from the Basin approach and earlier offers. Its center drains to basin 1375046, the first Basin proposal's receiving catchment. The ordinary paid two-person frontier survey, conditional charter and eight-founder physical trip establish only those seven cells. A locally staffed field supports food production; a house and second household lead to a twelve-person village charter with a staffed registry. Ordinary carriers then deliver timber, tools, logs and bricks while local workers complete a mill and research through Hydraulic engineering. Separate paid source-survey and runoff-station teams return from owned hex 1375047; their report and gauge restore from save. This establishes actual regional monitoring without itself claiming the receiver pool center, spill, water-use rights, engineering or operation. A 25-unit reservoir screen still sees unresolved construction title, and the observed Basin's synthetic second-spill corridor released zero in its recorded wet intervals. W2 effects, W3 authority and W4 works remain open. See gameplay foundations, implementation status, major waterworks plan, interface behavior, player guide and technical reference.

Implemented, M8/W3 monitored-source outlet comparison (partial): City now includes complete natural release-route counts in its paid monitored-source comparison. For each returned, installed source station it reviews the highest supported proposal capacity, counts routes with ideal receiver-bed head, routes retaining head against the receiver's recorded high water, routes losing that head at the recorded peak, and routes without receiver high-water history. Different source plots draining to the same basin share that basin's current release evidence rather than appearing to create extra stored water. The player can identify a poor outlet site before changing an active draft. These counts are bounded historical screens; they neither establish a buildable hydraulic section nor clear impact, title, consent or W4 construction. See gameplay foundations, major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 early receiver high-water comparison (partial): Every complete candidate natural spill crossing in a major-reservoir review now reports the receiving basin's retained highest water level when a conserved receiver record exists, even before the owner selects an outlet corridor. The source City compares that level with the proposed full-pool waterline and shows the maximum ideal one-interval release at the observed peak beside the older receiver-bed estimate. A crossing with no recorded receiver history says so; zero head at the observed peak remains visible rather than silently presenting the bed-based margin as viable. This is a retrospective screening bound under the current sediment bed, not simultaneous flow proof, a future design flood, rated hydraulics, rights or W4 construction. The selected graded-outlet blocker and existing release replay retain their separate rules. See gameplay foundations, major waterworks plan, implementation status, player guide and technical reference.

Implemented, M5/M7 same-plot maintenance fallback (partial): A recurring land instruction checks eligible improvements on one plot from most worn to least worn. If the first repair lacks its own specialist, current quote, operating permission or selected-period material allowance, it records that reason and may fund the next repair that meets those gates. Settlement-wide food and worker floors, older queued crews and the plot's existing job still block every candidate. The ordinary land job spends its actual local materials; a funded decision and City preview name deferred more-worn work so it is not silently treated as repaired. A paid prepared field with worn soil and irrigation now repairs the channel while the soil's missing compost authorization remains visible, with offline agreement. This improves regional upkeep without supplying materials or guaranteeing every due repair. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M2/M3/M7 renewing land-maintenance materials (partial): The existing daily land instruction now offers a reviewed Renew each home day allowance alongside its capped total. At each check, real soil, channel, road, drainage, terrace or well repairs still use the ordinary four-worker paid job, local stock, specialists, food buffer, crew priority and shared operating budget. The daily ceiling resets only at the next home day; gross commitments and cancellation history remain recorded, and switching to capped must cover all past spending. The historical version-two ledger migrated older instructions as capped with no extra materials or work; current version-three saves additionally give them a zero retained-timber floor. City and Regional show the period and current spending. A command-funded well scenario pays two separate headworks repairs beyond a one-repair daily ceiling; supply renewal and indefinite regional balance remain open. See gameplay foundations, implementation status, player guide, technical reference and interface behavior.

Implemented, M8/W3 saved notice-party reasons (partial): A newly filed major-reservoir notice now records why each named community entered that exact revision: connected or coastal reach, screened storage land, changed land exposure, outlet-wetted land, added receiver building/well pressure, or construction footprint. Several reasons can apply to one holder. City shows the filing-time reasons to the source and recipient even after an amendment; it does not replace the recipient's current impact comparison. Version-sixteen save migration marks older notices' reasons unknown rather than reconstructing historical evidence. For a new notice, a changed reason list for the same named holder now suspends further answers and consent until amendment and re-filing; an existing signature cannot clear current coverage while the basis differs. The reasons do not certify complete affected parties, water rights, hydraulics, funding or W4 service. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 frozen engineering disclosure for affected communities (partial): The source's filed major-reservoir notice history, each named recipient's City notice, and the related confirmation reviews now show the exact selected pool-entry edge list and per-edge rating, shared inlet invert profile, low-level release corridor, outlet rate and outlet invert profile frozen on that notice revision. Missing components are stated explicitly. Recipients can inspect these terms before acknowledging, granting construction access or signing water use; a later amendment leaves the older notice visible as superseded history. The existing recipient projection already carried these terms, so this adds no right, modelled flow, permission or save field. It addresses a reviewability gap, while unassigned/customary holders, complete effects, hydraulic proof, all-party ratification, funding and W4 operation remain open. See major waterworks plan, gameplay foundations, implementation status, player guide and technical reference.

Implemented, M8/W3 exact shared pool-entry grade and supply envelope (partial): Major-reservoir review derives one bounded, descending candidate invert across every known in-pool entry path. Merged paths share one cut rather than charging it once per gate; a natural approach at or above the proposed waterline is explicit. A complete grade adds path lining and abstract cut work to the rated-intake material goal. With rated exact entry controls and current Hydraulic engineering, the owner may now select or clear that canonical profile as candidate-graded-entry-paths-v1 in a new proposal revision. Version-fifteen ledger migration leaves older drafts and notices ungraded; restore rejects invented old-version, altered active and altered frozen profiles. A same-capacity amendment retains the selected profile, while clearing controls or rating removes it; older notices keep their own exact terms. The paid Basin's eight entries share three hexes, with one 295-millionth cut and two cut-work units; its gate-and-grade envelope is 56 four-worker village days and 168 timber, 116 bricks, 104 dressed stone, 40 iron, 11 tools and 224 food. The preliminary bill can be previewed before selecting exact grade terms; if entry paths are incomplete, it explicitly covers gates only. This is proposal language, not a constructed hydraulic connection. A physically verified hydraulic section, all-entry controlled capture, spoil, physical containment, rights, funding, W2 effects and W4 operation remain open; intake-engineering-unverified stays. See major waterworks plan, gameplay foundations, implementation status, player guide and technical reference.

Implemented, M1 live main-navigation handoff (partial): The main Economy, Family & Tribe, Politics, Military and Explore buttons now open the matching authoritative City sections: Supply chains, Family & continuity, Public offices, Defense & patrol, and Frontier & charters. They use the same current settlement, access checks, reviews and server orders as opening those sections through City. A resident or appointed helper still receives the existing restricted City view. City remains the active management workspace; Chronicle and the explicitly linked future-design screens remain labeled local rehearsals with no persistent orders. The former state where all five top-level destinations opened sample screens is superseded. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3 per-site finite extraction plans (partial): The City material-goal tree now allocates stone, clay and iron workdays against each existing local extractor's own remaining deposit. Every full or partly depleted site workday adds its full recipe input; two small seams cannot masquerade as one combined cheap batch. The tree prefers currently ready sites, lists the chosen hexes, yields and batches, and identifies a blocked plot if covering the goal requires it. It shares per-site capacity across all branches of one hypothetical goal without changing the deposits, staffing or warehouse. For example, an eight-unit quarry and a one-unit quarry need three six-unit-cap workdays and 0.75 tools to recover all nine units. Live production still decides whether each workday can run and collect output. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M6 exact accepted-lease material sources (partial): The private City supply graph no longer advertises a generic leased-quarry workday as if every tenant had permission. Once a tenant accepts a specific stone, clay or iron site lease and its current dispatch quote is valid, the goal tree shows that lease as one finite source: at most the lesser of the agreed workdays' maximum and the exact deposit still in that host plot. Its branch traces the whole dispatch commitment in tools and journey food, names the host hex and notes that reserved rent pays on arrival and extracted goods reach this warehouse only after physical return. Review lease dispatch on that branch opens the same exact command review as Expansion; confirming it sends the physical crew, while Inspect lease terms opens the agreement list. The host's local producer diagnosis also names the live lease reservation that prevents staffing that same extractor. Unaccepted offers, blocked dispatch, travelling crews and completed leases cannot supply a new hypothetical tenant batch. The planning read itself does not dispatch workers, spend coins or add stock; the real command rechecks staff, services, food, site and route. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M8/W2–W3 retained receiving-basin high water (partial): Each active conserved basin node now retains its highest observed closing storage and tick beyond the rolling twenty-interval detail window. Version-five basin-water saves migrate older ledgers using only the oldest retained opening and subsequent closing samples, marking where peak history begins rather than inventing an earlier flood. A selected major-reservoir outlet grade compares that receiver peak at the current sediment bed with the proposed full source-pool waterline. If the observed receiver level reaches or exceeds full source head, source City reports a distinct design blocker even when the original high-water interval has aged out of detailed replay. This comparison is a historical stress bound, not a synchronized future-flow forecast, hydraulic certificate, consent or permission to build; unknown older peaks, unregistered inflow, channel losses, receiving flood safety and W4 operation remain open. See major waterworks plan, gameplay foundations, implementation status, player guide and technical reference.

Implemented, M3 finite local extraction planning (partial): The City material goal now reads the recorded remaining stone, clay or iron deposit beneath each existing local extraction building. A selected quarry or mine recipe can propose only that combined remaining yield, including a partly depleted final batch, and the planner shares the limit across material branches. Every proposed workday still requires its normal input; current staffing and blockers remain visible. A future unbuilt site has no measured deposit ceiling in this read, and separately accepted leased extraction, physical carriage, warehouse space and competing production remain outside this local cap. The tree never extracts or grants material. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3 combined material-source planning (partial): City → Supply chains now lets the owner add multiple sources for one missing material in priority order and remove any of them. The read-only backward planner uses current stock once, then proposed co-products once, then each selected source only while a gap remains. A storable ruin has one finite salvage batch; later selected workshops or other ruins cover only the remaining need, and requests above their combined finite yield stay visible as shortages. A repeatable source placed first may cover the entire hypothetical gap, leaving a later ruin unused. Each selected source's own inputs, staffed readiness and real-world blockers remain visible; no order, travel, material or worker is committed by the tree. Automatic best-source choice, finite capacity for all recipe/deposit paths and a guaranteed future supply schedule remain open. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3 supply-chain salvage source (partial): The City Supply chains graph now includes each idle chartered ruin whose complete salvage batch can be reserved beyond protected household-food space. It names the exact ruin and plot, shows its catalog-derived materials as a one-time source, and links back to Buildings and the map. A finite maxBatches: 1 planning limit prevents the backward goal tree from repeating one ruin to cover larger requests or counting co-products twice; uncovered units remain explicit shortages. Funding removes that source while work is active, cancellation can restore it, and clearing or rebuilding removes it permanently. A full warehouse makes a new salvage order uncollected and therefore removes it from material sources. This is a read-only planning option, not a grant, automatic order or guarantee that future rights, workers and storage still permit salvage. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M5 ruin-salvage custody (partial): New chartered salvage orders quote the structure's recoverable materials. If the complete batch fits beyond protected food space, the paid order holds those warehouse places; capacity loss queues it before the ruin is cleared, and a later repair crew can pass it. Completion releases the hold and credits the quoted materials once. If the batch cannot fit at funding, the same ruin can be removed with all salvage explicitly left uncollected; later free space does not mint materials. City → Buildings shows the current outcome for each idle ruin, while the accepted job and completion receipt preserve it through restart. Older funded salvage jobs retain their original partial-credit and overflow behavior. This addresses redevelopment custody, not other production or recovery paths. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M5 clearing-log custody (partial): New chartered Clear woodland orders quote the recoverable log batch and its storage outcome before funding. If the whole batch fits beyond protected food space, the paid job reserves it through queued, running and paused work; other production and cargo see only the remainder. If capacity later falls, the crew waits before cutting trees until repair, added storage or moved goods restore room, and later repair work can proceed. If the batch does not fit at funding, clearing still opens needed building land: the review states that the logs will be left uncollected, and the saved order records that choice so later free space cannot mint them. Completion credits at most a stored quote or explicitly records all uncollected logs. Existing saved clearing jobs retain their accepted behavior. Older clearing and salvage jobs, along with other output paths, still need separate custody review. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M2/M3 selective-harvest warehouse reservation (partial): A chartered community's manual Selective harvest and standing forestry instruction compute the same expected log yield and check local warehouse capacity plus any household-food space target before funding. The accepted job holds that many log places through queued, running and paused work. Ordinary production and physical arrivals count the hold as occupied capacity; cancellation releases it, and completion releases it before crediting no more than the quoted yield. If warehouse damage or removal makes the hold exceed current capacity, the paid crew queues before felling and keeps its reservation; repairing or adding storage, or moving other goods out, lets it finish. A blocked harvest does not hold a later repair crew behind it. Older saved jobs keep their original terms, while new reservations are validated on restore. The crowded-village test checks a blocked quote, unchanged trees, concurrent arrivals, cancellation and replay; damage and completion-time tests check that no logs are discarded when capacity falls. The seven-community route uses a real food pickup to free warehouse room before harvesting in the nearer forest village and verifies a recovered Regional capital across save restoration. This protects selective harvests only; output custody for other completion paths still needs review. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 six-title capital stone-to-lining continuation (partial): The saved 62-resident Regional-capital branch now carries its twenty-five purchased rough stone through a separately surveyed and paid home plot, forestry log deliveries and regrowth, sawmilling, local charcoal and tool forging, Masonry and Structural engineering, a staffed mason workshop and three real dressing batches. Four of eighteen dressed stone fund research and twelve line the existing well after clay returns, local brick firing and timed paid repairs. The accepted commands preserve all 62 residents and six outpost titles, and a restored save retains the lining. The material and crew diversion temporarily lowers the stage to Village. A further saved-state continuation harvests and delivers owned forest logs, brings food from the forestry village, mills a civic timber reserve, repairs the lined well, restaffs the school and registry services, and re-earns Regional capital after nine qualifying daily checks. A separate saved continuation maintains Regional capital for 26 more village days with two full 24-log forestry returns and eleven faster sawmill days while two extra registry clerks temporarily lend their labor. Every advance checks 62 residents, six local food days, delivered lined water, unchanged stage history and six retained titles; three offices return for six-title capacity and the endpoint reloads from save. At 26 days it holds two timber and 54% well condition. A separate saved branch starts a funded renewal after 24 days, while there is still repair lead time: two staffed sawmill days use actual home logs, an owned clay camp sends eight clay, and two concurrent kiln and smithy days make bricks and a tool. The paid headworks repair restores the existing lining to 100% condition without a household water gap, while 62 residents and six titles persist across save restoration. Suspending two civic programs frees the needed labor and temporarily lowers recognition to City. A further saved continuation physically returns four forestry log loads, mills civic timber for seventeen high-staffing days, holds a final log load for the staffed workshop, re-adopts the two civic programs and re-earns Regional capital over nine qualifying checks. All 62 residents, six food days, delivered water, three restored registry offices and six-title capacity persist across reload. During that same timber rebuilding, a physical eight-clay return and two local kiln days overlap sawmilling, so the regained capital has ten timber, eight bricks and a tool at 51% well condition. A further saved command-only continuation releases four field workers and pays a one-day headworks repair before extra household water stops. The existing lining reaches 100% condition, 62 residents remain supplied, and all six titles persist across reload. The eight-timber payment temporarily disables Regional institutions for lack of operating stock: recognition still reads Regional capital, but current new-title capacity falls to two. A further saved continuation tests the nearby forest village: a physical 48-food pickup opens warehouse space, an owned harvest stores real logs, a second team brings twenty logs home, and staffed sawmilling restores active Regional institutions. With a temporarily borrowed registry worker, the scenario keeps its home field and mill supplied, restores office staffing and verifies Regional-capital recognition, 62 residents, six owned titles, six local food days and lined household water across reload. Longer unattended material balance remains open. This supersedes the earlier stone-staging-only descriptions below. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M3/M7 seven-community stone staging (partial): The earned 62-resident Regional-capital checkpoint has six retained outpost titles, no owned stone and no free home workers. A new isolated continuation releases two mill workers, reviews and funds three ordinary ten/ten/five-lot waystation caravans, pays fifty local timber plus real travel food, and physically receives twenty-five rough stone from the finite depot. The source falls by exactly twenty-five, no seventh title appears, and the restored save retains local and depot custody. This closes the first actual stone-acquisition gap in that capital without granting a quarry or relaxing title rules. The continuation above now funds Masonry, Structural engineering, the workshop and lining; longer regional water and food balance remains open. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M3/M7 finite waystation rough-stone import (partial): A newly initialized frontier waystation holds ninety-six rough stone alongside its existing finite goods and offers one rough stone for two actual village timber. City → Trade & transport reviews one, five or ten lots; the ordinary two-person caravan reserves exact depot stock at dispatch, carries timber and travel food, exchanges on arrival, and brings the stone home before it can be dressed. Recall restores unexchanged stone to the waystation and returns unused village goods physically; depletion blocks another order. Existing saves keep their recorded waystation inventory and receive no retroactive stone. This gives a six-title capital a paid material alternative when it has no owned quarry or foreign lease, without creating a mine, dressed stone, workers or renewable supply. A bounded seven-community capital lining route now completes; sustained material balance remains open. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M5/M7 cross-owner stone-to-well route (partial): The existing worked-site lease and lined-headworks systems now have an integrated command-only journey across two founding owners. The host offers four workdays at an idle finite stone quarry; the tenant reserves twelve real coins and sends four residents with food and tools. Actual arrival pays rent, four extraction days remove twenty-four rough stone from the host deposit, and the crew returns it physically without a new outpost title or mineral grant. The tenant earns Masonry and Structural engineering, keeps the lumbermill and mason workshop staffed, dresses that rough stone, purchases the remaining ordinary materials with physical waystation caravans, surveys suitable groundwater, extends the well, and pays for stone lining. The receipt, source debit, later one-point wear and restored ledgers are checked. This proves a lawful cross-owner supply option for a village already at its outpost limit; it does not yet prove that the specific seven-community capital can negotiate a nearby host, finance and staff the route, or sustain recurring repair materials. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M3/M5/M7 dressed-stone well lining (partial): A current owner with active Structural engineering, a staffed mason workshop and a sound existing surveyed well may fund line-headworks at its village source. Four real workers spend twelve dressed stone, eight bricks and one tool over two active village days. The lining marks the current headworks level at completion and changes later ordinary wear to one condition point per day instead of two; work already paid and condition already lost remain real. maintain-headworks restores condition without discarding the lining, while well-headworks extends the source and resets its lining because the larger level has not been lined. Yield, household priority, flood interruption and structure damage rules do not change. Land version six migrates older headworks to linedAt: null; restore validates the timestamp and unfinished-job custody. City, Structural engineering text, the local supply graph and Regional repair warnings expose the choice and true lead time. An integrated founding-village journey now earns the agricultural and building prerequisites, supplies a finite owned quarry, physically brings home rough stone, keeps the lumbermill staffed so Masonry supports the mason workshop, dresses stone, trades local logs for bricks and timber for tools, prospects its suitable commons, and pays for extension and lining. This proves a real local stone-to-well route without creating minerals; the capital continuation above now also pays for refinement and lining, while indefinite repair balance remains open. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M8/W2–W3 outlet landholder notice (partial): Exact major-reservoir notice parties now include current public charter holders of receiving-basin land newly wet because of the selected outlet, comparing the same proposed interval with its outlet closed. This includes bare land that was also wet under natural flow, which the natural-versus-proposal claim list and building/well-pressure list can both miss. Party IDs are de-duplicated and retain current owners; no response or water consent is inferred. The controlled recorded-window case has one land-only holder and no other party path. This read changes no water, charter or save schema and does not establish customary holders, future flood safety, all-party W3 approval or W4 construction. See gameplay foundations, major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 flood-exposure release counterrequest (partial): A named recipient of a current 50% opening-storage-release notice can now object on flood-exposure grounds and ask the source to consider 25% instead. The City objection choice follows the recipient's own release-impact comparison, but the bounded model is not required to prove the concern: future and customary flood risk remain unresolved. The existing revision-bound response records the lower request in both communities' notice and return history. It does not change the release rule, water, permissions or construction; the source must amend to 25%, file a fresh notice and obtain new answers and separate consent. Restore validates the exact 50→25 flood-request scope without rejudging later-changing flood evidence. See gameplay foundations, major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2–W3 recipient release-specific exposure (partial): A current named reservoir-notice recipient now sees its own land newly wet because of the proposed outlet release, its added standing-building flood-rate points and newly wet working well connections. These compare each candidate interval with that same interval's outlet closed, separately from the existing natural-versus-proposal flood scenario. An alternate 25%/50% release comparison shows the same recipient-scoped outlet effects for both exact choices, while the source retains the public aggregate for engineering and party review. A charter outside the receiver receives zero private cells and building pressure. No live condition, water, proposal or rights change; future flood safety and complete W2–W4 gates remain open. See gameplay foundations, major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 exact amendment preview (partial): When City reviews the same surveyed source as an active major-reservoir draft, its capacity, bypass and release alternatives now retain that draft's exact intake corridor, rated entry controls, outlet corridor and graded outlet. Each alternative recomputes the complete current review, including verified release, impact, blockers and notice parties, before a material amendment is filed. The selected draft's 50% bypass/release no longer appears as a mislabeled 25% comparison. A different source plot still starts an independent site preview; no proposal, water, materials or saved schema changes on read. Full W2 effects, W3 engineering/rights and W4 construction remain open. See gameplay foundations, major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2 disconnected entry evidence (partial): The routed rated-intake comparison now distinguishes a selected entry that carries positive measured, gate-admissible water but has no same-interval recorded path to a source-basin export. City names up to eight such hex pairs in the one-interval comparison and counts affected intervals in the retained-window and controlled-release scenarios. A reachable gate behind a narrow shared edge is kept separate: its total potential falls, but it is not called disconnected. This helps locate an exact W3 intake problem without assigning mixed-water ownership, solving delayed storage or claiming built gates. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2 rated source-inflow custody (partial): The routed exact-entry ceiling now applies only while direct recorded runoff enters the proposed source basin. Basin-to-basin arrivals remain in the candidate water balance and continue through its ordinary route; they cannot consume gate capacity justified by surface edges ending at the source basin. A controlled case has 2,000 direct units and 118,326 upstream-transfer units: with 25% bypass, rated capture is 1,500 and the transfer contributes zero gate capture. The older unrated basin-wide scenario retains its separate semantics. This resolves one false attribution in the impact comparison; mixed-water origin, delayed surface storage, hydraulic works, complete ecology and lawful construction remain open. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2 exact routed-entry ceiling (partial): Rated reservoir comparisons now constrain hypothetical capture twice: each named entry supplies at most its measured transfer after per-edge bypass and gate throughput, and a bounded flow calculation limits that total to water that could follow same-interval recorded surface transfers to exact source-basin boundary exports. Missing entry or basin-source receipts allow zero rated capture. An unrelated basin export cannot be attributed to a gate, and a downstream bottleneck reduces the ceiling; positive-flow gates without a recorded path are now identified separately. The paid Basin remains able to hold ten units under its measured paths; rated gate capture is taken only from direct source-basin runoff, while upstream basin transfers pass through. This is a conservative recorded-path scenario, not proof of which mixed drops reached the basin, storage across intervals, a built hydraulic connection, full W2 effects or construction rights. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M7/M8 retained gate-rate exception (partial): Regional overview now alerts the source owner when an active exact reservoir proposal rates any selected entry gate below that edge's retained measured four-hour peak. It names the count, worst peak and excess, the history start and the Land & water destination; it disappears after a sufficient revised rating, clearing the rating or withdrawal. The read changes no proposal or water. An old measured peak can still demand review after its 20-row detail interval ages out, while unmeasured earlier extremes and hydraulic design remain unresolved. See implementation status, major waterworks plan, player guide and technical reference.

Implemented, M8/W3 retained entry-flow peaks (partial): Each registered surface-routing edge now keeps its highest measured four-hour transfer and tick after the peak ledger begins. Rating an exact reservoir entry gate compares its tier with that retained per-edge peak, so a high flow remains a design warning after its interval leaves the 20-row detail window. Earlier cumulative flow cannot establish an interval rate: older saves initialize peaks only from their verified retained rows, with the earlier period explicitly unknown. City shows both recent-window and retained peaks. This improves a preliminary throughput screen; it does not size a gate for unobserved extremes, prove a hydraulic link, complete effects or authorize construction. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2 rated-intake constraint on verified basin replay (partial): A proposal with exact rated pool-entry controls now caps each hypothetical basin-wide capture interval by recorded exact-edge transfers after bypass and gate throughput, then by possible same-interval paths through recorded transfers to source-basin exports. This is an upper bound on possible intake, applied in both one-interval and carried-storage history; the existing basin conservation, sediment, flood and recipient comparisons then follow the constrained branch. An interval before every edge has complete measured coverage admits zero hypothetical rated intake, and City names the covered and unobserved intervals. The separate exact-entry retention card remains a useful measured bound, while the basin replay now also obeys that bound as a quantity ceiling; it still cannot attribute mixed water to a particular entry or establish a built hydraulic connection. A controlled case reduces capture from ten to six water units, then admits none on an unobserved interval without changing live water. Physical gate connections, full W2 effects, rights and construction remain open. See implementation status, major waterworks plan, player guide and technical reference.

Implemented, M3/M8 rated-intake supply envelope (partial): An exact rated intake-control proposal now produces a read-only four-worker, staged preliminary estimate for every selected entry edge. It includes timber, bricks, dressed stone, iron, tools and food, with shortages after protecting household meals. When an outlet is also rated, Supply chains presents one combined one-time material goal; clearing either rating leaves the other component. No stock is reserved. The lane rule does not establish gate geometry, hydraulic capacity, environmental bypass, rights or a funded construction order. See implementation status, major waterworks plan, player guide and technical reference.

Implemented, M7/M8 regional outlet exception (partial): The source owner’s Regional overview now raises an attention item for each of the eight most recently updated active graded-reservoir proposals whose current exact historical replay loses discharge to receiving backwater. It reports requested and delivered water, backwater loss and affected interval count, then links to the exact Land & water review. It disappears when the rate is cleared or the proposal is withdrawn. The read is source-only and moves no water or goods; a changed outlet or release rule still needs a new exact notice and permissions, and complete W2/W3 evidence is still required before any major construction. See implementation status, major waterworks plan, player guide and technical reference.

Implemented, M8/W2 graded-outlet receiving backwater (partial): The verified whole-basin history now checks the candidate receiving basin’s pre-release waterline after direct local runoff and known same-interval arrivals routed by a no-release candidate branch against the proposed source store before each graded gravity release. The effective head floor is the higher of the exact outlet invert and receiver level; retained sediment displacement in the existing basin model is included where recorded. A bounded search then limits whole-unit transfer as the source level falls and the receiving level rises; water withheld by initial backwater or this receiver rise is counted separately per interval and adds a source blocker. In the paid Basin ten-unit, 50% case the exact-entry upper bound still suggests five units, but the receiver stands higher on both release intervals, so the whole-basin replay delivers zero of ten requested units and reports five units additionally blocked by backwater. The third-basin regression verifies that routed water can block a five-unit release that opening water and local runoff alone would admit. The comparison changes no live water or rights. It conservatively counts routed arrivals before ordinary losses; it does not size a channel, solve friction or guarantee future downstream levels. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M3/M8 proposal supply tracing (partial): The source village now lists the rated intake and/or graded outlet of each active exact reservoir proposal as one combined one-time planned material use in Supply chains. Its bill matches the major-waterworks estimate, including real dressedStone; the resource trace can follow finite roughStone extraction through a staffed Masonry workshop, warehouse stock, and physical imports. This is deliberately excluded from recurring demand and stock coverage. Clearing either rating removes that component; withdrawing the proposal removes the current goal. Amended terms change the read-only graph without consuming or reserving goods. It remains unfundable until W2 effects, W3 engineering and rights, and lawful construction exist. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 preliminary outlet work and supply estimate (partial): An exact graded outlet proposal now derives an owner-only planning bill from its current route cuts and selected rate. Every 2.5 game units of proposed four-hour throughput adds one abstract lining lane inside the exact route hexes; each cell's positive cut depth contributes rounded cut-work units. The estimate breaks work into staking, cut/lining and fit/test stages, uses a four-person crew and lists timber, bricks, dressed stone, tools and food, plus whole-unit shortages against spendable source-village stock after protecting the household food reserve. The paid Basin three-cell, 2.5-unit route estimates eight village days and 40 timber, 25 bricks, 16 dressed stone, three tools and 32 food; the local dressed-stone shortfall requires a finite rough-stone quarry or import, an active Masonry workshop, then physical delivery for later planning. This is not a fundable construction quote, reservation or verified hydraulic section. Width, friction, spoil, receiving flood effects, lawful permissions and final costs remain W2/W3 gates, and no worker, stock or water changes on review. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 exact graded-outlet proposal (partial): A lawful source owner with current Hydraulic engineering, a selected corridor and complete recorded pool-entry flow can choose or clear a 1, 2.5, 5 or 10 game-unit four-hour candidate outlet rate. The command freezes the deterministic per-cell grade profile and selected rate as candidate-graded-outlet-v1, revises the draft and makes earlier notices and signatures historical. The earlier version-fourteen migration carries version-thirteen saves forward without inventing an outlet design, validates both active and frozen profiles against terrain and rejects unversioned or forged ratings. A selected design limits the exact-entry bound and basin-wide controlled-release replay by both the graded entrance's held-water floor and the chosen per-interval rate; the replay still sends only its hypothetical released water to the separate receiving basin. At the paid Basin ten-unit site, the 2.5-unit rating with the 7.41-unit graded head floor permits five units in the exact-entry upper bound, while receiving backwater prevents all whole-basin scenario release. Head or throughput shortfalls get separate blockers. This is exact proposal and notice language, not a hydraulically proven or physically built channel: width, friction, safe receiving discharge, material bill, construction and W4 operating rules remain open, as do W2 impact and all-party W3 gates. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 candidate outlet grade preflight (partial): After an exact outlet corridor is selected, the proposal review now derives a one-millionth game-height fall per route step from the receiver bed plus one unit, showing each cell's natural bed, candidate invert and positive cut depth. It computes the opening held-water floor needed to stand above that graded entrance and a full-capacity release sensitivity for illustrative 1, 2.5, 5 and 10 game-unit four-hour rates. The paid Basin three-cell route would cut the spill cell by 511 height-millionths, retain at least 7.41 water units at the entrance, and have at most 2.59 units of gravity head at ten-unit capacity. Before rating, this is a geometric preflight; after a rate is selected the grade and tier become exact proposal terms, still without a physical design: channel section, friction, cut volume and spoil, structural protection, material bill, receiving flood safety and live operation remain unspecified. The recorded replay retains its more optimistic receiver-bed floor until a grade and rate are selected as exact terms; the permanent engineering blocker remains. Capacity variants recompute the grade at their own waterline. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 selected release corridor and bounded replay (partial): A current owner with Hydraulic engineering can revise one reservoir draft by choosing a complete, bounded in-pool route to a distinct receiving basin from the screened natural spill crossings, or clear that choice. The exact candidate-low-outlet-v1 cells join construction-title, public-notice and easement terms; same-source amendments retain the route, while each revision requires fresh notice and signatures. Ledger version thirteen preserves old version-twelve proposals without inventing an outlet and validates selected and frozen notice geometry on restore. For a selected route, the exact-entry retention bound and basin-wide controlled-release history cap each interval's requested opening-storage release at water held above the receiver-bed gravity-head floor, show requested, released and unmet water separately, and send only the hypothetical released water to the receiving basin in the replay. The paid Basin ten-unit, 50% case requests 10 units across three recorded intervals but can release only 5.24, leaving 4.76 unmet. Selection makes a previously implicit outfall target reviewable; it does not excavate a conduit, prove rated discharge or safe downstream effects, move live water, grant rights, or clear release-outfall-engineering-unverified. W2–W4 remain open. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 release-outfall head screen (partial): Reservoir candidate and saved-proposal reviews now trace each natural spill crossing from the held basin cell through its pool footprint to the receiving hex, then compare the proposed capacity waterline with the spill lip and receiver bed. The screen computes an optimistic minimum stored volume needed for gravity head at the receiver, and checks each recorded-window entry-bound release against that ceiling. The paid Basin ten-unit proposal has a complete three-hex corridor but its natural spill lip is above the proposed waterline; even an ideal cut toward the receiver leaves at least 7.38 water units held, permitting at most 2.62 units of one-interval release head at full capacity. The 50% opening-storage release case exceeds this bound on recorded ticks and gains a specific blocker. No conduit, controlled outlet, rated discharge, excavation bill, title, impact proof or water movement is created; release-outfall-engineering-unverified remains. This narrows the formerly implicit outfall assumption without satisfying W2–W4. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 bounded pool-entry gravity review (partial): Candidate and saved reservoir reviews now trace each known natural pool-entry edge from its pool endpoint downhill through the proposed footprint to the basin cell. They distinguish complete in-pool paths, current primary drainage splits, and approach cells above the proposed storage waterline; a dry upper approach can still carry natural runoff. The paid Basin path has eight of eight complete natural approaches, including one dry upper pool cell. A selected control with an incomplete in-pool path gets its own blocker. This is terrain evidence that tests the previous shared-store assumption, not a physical gate, retaining wall, controlled connection, release outfall, complete affected-reach review or construction authority. intake-engineering-unverified and W2–W4 remain. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 exact-entry retention screen (partial): A rated pool-entry proposal now exposes a separate read-only upper bound from the same fully registered, rolling twenty four-hour transfer rows used by its gate review. For each exact selected edge, the screen reserves the selected environmental bypass, limits possible admission to its proposed per-edge rating, then releases the proposed 25% or 50% of opening held water before admitting new flow into one finite shared store. It reports observed exact-edge flow, required bypass, possible admission, released water, passing water and held water per interval; each row conserves those measured edge transfers. The earlier basin-wide retention and impact replays remain separate comparison scenarios, because pool rain and other basin inputs do not cross these entry controls. Even this narrower bound assumes every admitted edge can reach the store and omits actual gate geometry, future flood safety, complete effects, permissions and W4 operation. The engineering blocker remains. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 rated pool-entry proposal terms (partial): After selecting every exact natural pool-entry control, a lawful owner with active Hydraulic engineering and a complete recorded entry-flow interval can use Rate proposed pool-entry gates. The reviewed command selects one of five proposed four-hour throughput tiers (50, 100, 250, 500 or 1,000 game water units) for every listed edge, stores it as rated-entry-controls-v2, increments the exact proposal revision and requires a fresh public notice and rights review. The current review compares each edge's observed peak with the selected tier; a smaller tier adds intake-control-rating-below-observed-peak, while an unrated control set has its own blocker. An existing fourth-ring works title offer stays available after rating. Ledger version twelve migrates earlier proposals without inventing a rating and rejects forged or unversioned rated terms, including in notices. The paid Basin test moves from an undersized rating to a tier above all observed peaks, preserves the old notice's exact smaller tier and verifies unchanged water, stock and title. Passing the observed-rate check does not verify a physical gate, a link from every entry to held storage, future storm capacity, environmental bypass at each control, full W2 effects, permissions or W4 operation; intake-engineering-unverified remains. This extends the entry evidence below and does not supersede the remaining major-waterworks gates. See implementation status, player guide and technical reference.

Implemented, M8/W2–W3 measured pool-entry evidence (partial): The major-reservoir candidate and saved-proposal reviews pair every bounded natural pool-entry edge with its actual conserved surface-water transfer, endpoint registration time and current routing target. surfaceRouting version two now keeps the latest twenty exact four-hour transfer rows, while a baseline retains earlier totals; each row and baseline must reconcile to the cumulative edge ledger on restore. Version-one saves checkpoint their current totals and begin with no invented rate history. City → Land & water → Observed water at pool entries reports registered, unregistered, positive-flow and currently diverted counts, plus combined and per-edge peaks and latest rates from intervals that fully cover every known entry endpoint. The paid monitored Basin fixture records positive flow on all eight entries and a same-interval combined peak from real transfer rows. Cumulative receipts and recent rates can span drainage changes; they omit unregistered boundary discharge, rain within the pool and other basin inflow. They are neither the basin's total arrivals nor an engineered gate-capacity design. This is a read-only review: no gate, permission, stock or water is created, and intake-engineering-unverified and the full W2–W4 gates remain. See the major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8 construction-title actions in City: The major-reservoir construction-title card now joins each displayed unchartered construction hex to this village's current released charter-edge offer. It shows the server-quoted registration cost, returned-report state and live survey/registration blocker, with direct Review edge survey and Review charter extension actions when their ordinary quotes permit them. An unoffered hex remains explicit instead of implying that geometric reach grants title. These actions still spend real materials, send the existing physical survey team and recheck rights and stock on confirmation; the card grants no gate, water or construction authority. The paid Basin path below can clear its selected construction-title blocker, while intake engineering, complete impacts and W4 operation remain open. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M6/M8 exact fourth-ring works title and survey recovery: An active source proposal with selected canonical pool-entry controls exposes only its matching unchartered fourth-ring plain field or forest as a Major works edge in Extend this village charter. Active Land registry, Public accounting and Hydraulic engineering, a staffed office, an individual returned two-person survey, adjacency to existing title and a payment of sixteen timber, two tools and eight food are required. This extends that village to radius four under a version-three extension ledger; old version-one/two receipts retain their original radii. Title remains paid land after the proposal is withdrawn, but it grants no gate or water right. The paid Basin village now surveys and registers control endpoint 1377089, previously beyond all ordinary three-ring releases. Its completed frontier team takes a bounded dry route from its actual hex when new floodwater blocks the homeward path; it carries the report and remaining provisions and restores/replays that route. One replacement tool is physically staged before runoff monitoring, because the long home supply path later floods. A further paid Basin journey now registers all five ordinary inner/outer entry endpoints with home-forged tools and physical supply; with the fourth-ring control, the selected entry footprint has no unassigned cells. This clears only that proposal's construction-title blocker. City now distinguishes conditional fourth-ring reach from land with no current title path; full hydraulic design, all-party rights, W2 impacts and W4 operation remain open. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 exact proposed pool-entry controls: After selecting a natural route, a charter owner can now use Propose controls for all pool entries on a complete bounded ingress screen. SELECT_MAJOR_WATERWORKS_MANIFOLD stores all eight canonical directed Basin entry edges as exact revision-three proposal terms. Their endpoints join construction-title and site-use screening, public notice parties and separate exact-cell easements. Seven edges still lie outside the original two-cell route, and their endpoints require separate paid title; selecting them grants no title, gate, diversion or material. The new term survives notice, same-source amendments and save restoration, while clearing it makes prior notices historical. A controlled second-charter endpoint demonstrates an independent acknowledgment and easement choice. Ledger version eleven migrates older drafts without inventing controls and rejects forged or unversioned edges. Basin-wide capture, hydraulic linkage between controls, impacts, NPC/customary tenure and W4 funding/operation remain unresolved. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 intake-entry coverage gate: A selected natural intake route is now compared edge-for-edge with the bounded natural ingress routes entering its proposed storage pool. The paid Basin approach proposal has eight complete known pool entries; its exact two-cell route follows one, leaving seven outside the selected corridor. City maps unmatched edges and reports an intake entry control unselected blocker until the owner selects exact control sites; an incomplete entry search instead reports its own unresolved blocker. Even an overlapping edge is only a natural flow trace, never a constructed gate. Selecting all entry sites still leaves the basin-wide capture replay hypothetical; lawful title, engineered gates and connection, full effects and rights are needed before funding. The check recomputes from exact proposal terms and current terrain, changes no title or water, and survives save restoration. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2 current charter flood exposure: The verified retained-window reservoir comparison now allocates its existing depth-based building flood rates and wet village/outpost well-connection intervals to each named current public charter. City shows this breakdown for both no-release and controlled-release terms in candidate and saved proposal reviews. It derives from present standing footprints and the exact natural/candidate replay, counts a changed building or connection once per community, and keeps the globally conserved replay and existing rights blockers unchanged. Standing structures without a current named charter stay in an explicit unattributed bucket; their pressure remains in the global total. Current building condition is not revealed for another charter; only the proposing village retains its conditional condition-loss scenario. The screen does not predict future construction, repairs, household water, custom tenure or a safe project. A controlled second-charter well on an actually changed basin hex verifies the partition and read purity. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 paid natural-route proposal path: The visible Basin approach start now has a command-only path from the 35-hex founder expedition through four paid pool/spill titles to a real major-reservoir notice. The local village builds its own lumbermill, receives home timber, tools, logs and bricks by physical carrying trips, records local timber practice, researches Joinery, Timber framing, Masonry, Seed selection, Crop rotation, Irrigation and Hydraulic engineering, then returns a paid watershed survey and runoff-station journey from open field 1370944. Its generated terminal is 1372993 with a 15.86-unit candidate saddle. The complete two-cell natural route is source-chartered and free of current feature, structure and land-work conflicts. A new major-reservoir draft selects that route at revision two; a public notice freezes the exact alignment and save restoration preserves it. Replacement tools travel before monitoring because later basin floodwater can obstruct the long supply route. The tested journey earns no additional people, water, charter land, construction job or operating reservoir. Selection and clearing revise exact terms and leave earlier notices historical; same-source capacity/bypass/release amendments retain the route. Construction-title, site-use, notice-party and easement screens include its exact cells, while engineered hydraulic design, complete W2 impacts, separate land and water permissions and W4 construction/operation remain open. See major waterworks plan, implementation status, interface behavior, player guide and technical reference.

Implemented, M8/W3 named public holder on a proposed intake: Another charter on an otherwise titled, feature-free and unused natural trace is now a named rights party rather than a reason to reject the proposal. Selection still refuses any unchartered route cell, natural feature, standing structure, improvement or active land job. The selected corridor joins exact construction cells; the other public holder receives the new notice and must separately acknowledge, grant its precise-cell easement and grant water consent, while the source signs its own water use. In the paid Basin fixture, a test-only later allocation of the terminal cell to the founding home exercises this inter-community sequence: both signature blockers clear only after their actual actions, but engineered intake and major-impact blockers remain. The title reallocation is a controlled test state, not a new player title-transfer command. If a selected route later loses public title, its current notice and signature coverage suspend until amended and re-filed. Public NPC holders still cannot be signed for by the source. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M6/M8 watershed village and exact basin-edge title: From the visible basin-approach woodland start, a paid survey, conditional charter and eight founders establish a treeless seven-field outpost at the end of a 35-hex route. Optional founder timber funds its first field; paid loads and a Town house allow four existing residents to move in, giving twelve real residents and eight workers. Further timber trips backhaul the field's surplus food so later deliveries still fit the small camp depot. A staffed home registry, local Record keeping, transported 120 timber, food and tools fund the three-day village upgrade. Local Public accounting, Land registry and a built staffed registry office then support four individually returned surveys and payments for the exact three candidate pool cells and separate spill receiver. The title receipts extend the existing charter and survive restoration without creating population, water or stock. This clears title on those four cells only: no source-to-basin intake alignment, complete affected-party rights, W2 impact model, W4 construction or operational reservoir follows from the titles. See implementation status, major waterworks plan, player guide and technical reference.

Implemented, M6/M8 bounded watershed outpost release: A fourth visible woodland starting choice, Woodland charter · basin approach, exposes an existing released home with a walkable route to one newly authored Basin approach parcel. The new parcel is seven natural, unoccupied field hexes, has a bounded twelve-unit camp well and does not alter older site IDs or offers. A player must still pay for a two-person returned frontier survey, a conditional charter and an eight-resident physical founder expedition; carrying ten extra timber supports an ordinary local food-field build. The tested field raises food stock after its first full production interval. Four distinct candidate source-adjacent pool/spill construction hexes lie outside the camp but within its existing paid radius-two/three charter-fringe releases. The basin has 15.86 game water units of natural saddle capacity, but neither discovery nor settlement grants those four titles, intake rights, water-use consent, funding or construction. The tested route now completes local village development and those four separate surveys and payments; other required intake and water rights remain unresolved. The earlier remote three-cell fixture remains unreachable through current releases; this alternate basin supplies a viable staged route without treating arbitrary unchartered land as vacant. See implementation status, major waterworks plan, interface behavior, player guide and technical reference.

Implemented, M8/W3 candidate construction-title audit: A source reservoir review checks exact source, pool, spill-crossing and selected intake-control hexes against live public charters. City counts source-held, other-held and unchartered construction cells, maps the first twelve unchartered cells, and distinguishes cells beyond ordinary three-hex reach. An exact selected control at a released fourth-ring works plot now has a conditional paid path; the review identifies those separately. Other distant cells still need a lawful remote-rights route, and candidate construction title unresolved remains while any exact construction cell lacks current charter title. Geometric reach never establishes vacancy, survey, registration, customary tenure or permission. The older remote basin and a second 52-cell candidate pool still span beyond one local charter. This audit grants no easement, impact clearance or W4 construction authority. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2-W3 candidate-pool ingress screen: A source reservoir review now follows bounded natural routing across the proposed pool perimeter, identifying each edge where water would enter the candidate pool and counting the distinct endpoint cells by present source charter, other public holder and unchartered land. The paid closed-basin fixture has eight such edges, several outside the listed source/pool/spill candidate construction cells. City shows up to twelve edge pairs and map shortcuts, with an explicit incomplete reason if the bounded review cannot cover the perimeter. Current title changes update the counts without changing immutable ingress geometry, signed easements, notices, water or save data. These edges are evidence for designing a controlled intake manifold, not selected gates: the current impact replay assumes basin-wide capture and cannot yet establish buildability, all inlet rights or W4 operation. See major waterworks plan, implementation status, interface behavior, player guide and technical reference.

Remote-rights gate for the controlled basin (observed, not implemented): The tested three-cell pool and its eight entry edges lie outside both current charters. The nearest currently released farming site center is fifteen hexes from the basin terminal, while ordinary paid charter extensions reach three hexes and exact selected works plots reach at most four from an eligible center. Thus this older controlled proposal still cannot obtain pool/entry title through the current founding and extension path. Future W3 work must provide a lawful remote site-right route or use a different candidate basin with reachable title before an intake design can become fundable; a notice or the new screen cannot manufacture those rights.

Implemented, M8/W2-W3 natural gauge trace disclosure: A major-reservoir source review now separates its paid observation plot from any future engineered intake. It follows the bounded natural drainage trace to the proposed basin and reports its steps, current source-charter cells, other public holders and unchartered cells without changing land or water. In the tested paid basin, the gauge is 25 natural steps from the terminal basin and most intervening cells are unchartered. City exposes bounded map shortcuts and an explicit Intake alignment unselected approval blocker. The signed source/pool/spill candidate easements do not authorize an intake corridor; a selected buildable alignment, affected holders, separate rights, complete impact model and staged work remain M8 gates. This is current terrain and tenure evidence, not a frozen construction route, permission or added notice party. See major waterworks plan, implementation status, interface behavior, player guide and technical reference.

Implemented, M8/W3 reservoir notice return history: Filing an exact major-reservoir notice now writes a factual Land & water entry to the source and each named charter's owner-only city briefing. A recipient's answer and subsequent exact-cell easement or continuing-water-consent grant/withdrawal enter the source and acting recipient's briefings. An objection preserves its recorded concern and any requested opening-storage release or new-arrival bypass percentage in both affected briefings, while stating that amended terms still need a fresh notice and consent. This records what happened while an owner was away; it does not replace the live notice screen or Regional overview for current terms, deadline, currency, signatures or blockers. Briefings remain capped at forty recent entries, older saves gain no fabricated history, and reading them changes no rights or water. This closes a return-navigation gap without approving W4 construction or resolving the wider W2 impact model. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 regional reservoir notice exceptions: Owner-only Regional overview now reads current major-reservoir notices for the source charter and named recipient charters. A recipient sees an unanswered exact notice with its deadline, then separate pending construction-easement and continuing-water-consent choices after acknowledgment; completing both removes that recipient prompt, while withdrawing consent restores it. The source sees unanswered or objecting parties and current land/water-signature gaps. Open windows become urgent in their last two village days; stale evidence and expired windows point to amendment and a new notice instead of a grant action. The exception links to each community's Land & water controls and changes no notice, water, land, stock or authority. It does not clear the wider affected-reach, ecology, all-party ratification or W4 construction gates. See major waterworks plan, implementation status, player guide and technical reference.

Blocked itinerary service points to the supporting home (implemented M6/M7 interaction): A saved outpost itinerary still rechecks the shared regional logistics budget when each later load departs. If its actual blocked reason is missing home Regional institutions, Public accounting or Record keeping service, Regional overview now sends the owner to the founding home's Research & adoption screen, retaining the affected outpost identity. The home shared-budget issue points to the same remedy. After restoring service, the owner reviews Retry of blocked load in Frontier & charters; the saved load, already paid journeys and past spending are unchanged. Missing source goods or other local load blockers continue to open itinerary controls instead. A focused command test suspends Regional institutions after the first paid load, observes the second load blocked with no new cargo, restores service, retries and completes the physical route. This makes the exception actionable; it does not bypass accounting or authorize an unfunded journey. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Three paid repair-material loads across two capital repairs (implemented M3/M6/M7 slice): The 68-resident, seven-community acceptance route now has an opt-in branch that authorizes one three-leg Outpost itinerary from the founding home: eight finite clay from the owned clay village, four finite ore from the owned mine, then eight more clay from the clay village. Each next load departs only after the previous carrying team returns, pays real travel provisions and shared logistics allowances, and returns physical stock. All three departures occur while Regional institutions, Public accounting and Record keeping are active, because a later dispatch still rechecks those services even under a saved itinerary. After the third team returns, the home can suspend civic programs for production and repair. The first kiln consumes eight clay; the remaining eight stay in the warehouse through the food-target and freight continuation and pay the second kiln batch, so that second repair needs no fresh manual supply order. The itinerary and both warehouse stocks survive save replay. This is a bounded finite-source schedule with player-approved loads and actual crews, not a renewable clay/ore chain or unattended headworks upkeep. The manual pickup branch remains a valid alternative. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Food-field continuity during accounting outages (implemented, M2/M3/M7 partial): A charter owner can review a food target on a Community field with an optional Harvest continuously until service returns setting. The default for new and migrated mandates remains Pause harvest. If local or delegated Public accounting becomes unavailable, the opted-in field uses its selected crop, real workers, inputs, soil and storage as continuous production; target and allowance checks are temporarily inactive and these harvests do not enter the target spending ledger. The saved target, prior spending and staff remain intact. Once accounting returns, normal target and allowance checks resume automatically without a second player order. This does not restore missing crop or specialist service, produce through full storage, or authorize a new target while accounting is unavailable. The option appears in the local Production mandate editor and coordinated regional production plan. The seven-community, 68-resident combined route now runs both the original manual-switch branch and a separate opt-in branch from the same saved checkpoint. The opt-in branch pays two ordinary headworks repairs, observes actual wheat receipts in each accounting outage without recording target batches, resumes the retained target, keeps all seven charters fed and 68 home residents watered, and restores its saved ledgers. It still consumes finite clay, ore and fuel and does not prove indefinite material renewal. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M2/M3/M7 second combined repair with uninterrupted woodland meals: A target-production order at the owned woodland village depends on delegated home Public accounting and Regional institutions. Before the 68-person capital suspends Regional institutions, Land registry and Record keeping for another well repair, the owner can explicitly switch its two-worker wheat field to continuous production; the seed keeper and two free selective-harvest workers remain in place. The funded governor team returns, one paid team collects eight finite clay, and the home saw reserves eight timber. Retained iron and charcoal let a three-worker smithy forge two tools, while two kiln workers turn clay and logs into six bricks. A separate four-worker maintain-headworks job spends eight timber, four bricks and one tool before household water fails. The owner restaffs the saw, rebuilds civic timber, restores the programs and reviews a return to the 1,160-food field target and governed log transport. Three more checks re-earn Regional capital with 68 watered residents, 92% headworks, 31 logs, five timber, four bricks, one tool and 1,060.5 food; the woodland village keeps 1,163.5 food and 160.5 warehouse spaces. Save restoration preserves both inventories, well and target; every advance keeps all seven charter communities fed. This shows a player-managed workaround for a temporary delegated-service outage, not automatic or renewable material equilibrium. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M2/M3/M7 combined woodland target and paid repair: The 68-person Regional capital can now follow one verified schedule that keeps a bounded woodland food target in place while staging and paying the next headworks repair. The owner reviews a 1,160-food target on the linked forestry village's two-worker wheat field, using home Public accounting and Regional institutions instead of adding a local clerk. New woodland batches wait at the target and resume when meals lower stock. Before home programs pause, the owner switches the field to continuous production so local meals continue while paid crews return eight finite clay and four ore; staffed home charcoal, smithy and kiln batches make the new tool and bricks for a normal four-person repair before water delivery fails. Restored civic service permits a reviewed return to the target, standing selective harvests and governed physical log freight. Twelve later home checks leave 1,165.5 food and 188.5 free warehouse units in the forest, with the 68-resident Regional capital watered at 62% headworks and all seven charter communities fed. A six-day midpoint reload reproduces both warehouses and the production, forestry and governor ledgers. This combined path supersedes the earlier uncertainty about scheduling both independent branches together, but finite mineral/clay renewal and the following repair remain open. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 finite replacement materials after 68-person wheat recovery: A saved fork of the 92%-well Regional capital pays its next repair from physically collected materials rather than invented starting stock. The owner pauses future woodland governor trips and lets the funded team return, suspends three timber-upkeep civic programs, and separately collects eight clay and four iron ore from owned finite outposts. The home saw reserves eight timber. Two charcoal workers consume local logs; three smiths use four ore and two charcoal for three iron and one tool while two kiln workers fire delivered clay with logs into six bricks. Four released residents fund maintain-headworks before water loss, spending eight timber, four bricks and the new tool. Restored staff, civic programs and woodland governor trips re-earn Regional capital. The saved endpoint has 68 watered people, 86% headworks, 37 logs, four timber, two bricks, three iron, two charcoal and about 1,001 food; all seven charter communities remain fed. This branch remains an independent repair measurement; the combined route above verifies bounded overlap with a woodland target, but neither proves renewable minerals. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M2/M3/M7 delegated woodland food target: The established same-owner forestry village can use the founding home's active Public accounting and Regional institutions for a reviewed target-production mandate on its local wheat field. At the saved 68-resident checkpoint, a 1,200-food target needs no local accountant or material allowance; the two field workers and seed keeper remain assigned, leaving two local workers for standing selective harvests. Production pauses at the warehouse target and resumes under ordinary day checks as households consume food. Across twenty home days, the village retains meals and ends with 1,210.5 food and 123.5 free warehouse units, compared with 45.5 free units from continuous wheat production on the same starting save. New physical harvest orders and governed log departures continue, all seven chartered communities remain fed, and the capital retains Regional-capital status and water for 68. Midpoint save/replay preserves the production, forestry and governor ledgers and both warehouses. This uses existing service and target rules, with no save-schema change; it does not establish infinite source space or replace the capital's depleted brick/tool supply. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 second 68-person repair after woodland wheat: At the 54%-well checkpoint, the home pauses future governor log trips but leaves its funded team in flight. Suspending Record keeping, Land registry and Regional institutions for one saw check lets three local workers turn actual logs into enough timber for repair. Releasing the saw crew and one registry clerk makes the four-worker headworks job possible while the home still has four bricks and one forged tool. The job spends eight timber, four bricks and one tool before household delivery fails, restoring the headworks to 100%. The owner restaffs saw and clerk, remakes three civic timber, restores the programs and reauthorizes the physical log route. Three more checks re-earn Regional capital with 68 residents, 92% headworks, 46 logs, three timber and 965.5 food; the woodland wheat field retains its positive one-food local balance. All seven charters remain fed and save restoration agrees on stock and water. The next brick/tool batch and durable multi-community equilibrium remain M3/M7 work. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M2/M3/M4/M7 woodland supplier food recovery: The owned forestry village's two-worker basic field feeds eleven of its twelve residents per daily check. It now has a verified command-funded route to local food sufficiency: temporarily staff its existing lumbermill to convert real harvested logs into three timber, pay for and complete local Seed selection research, adopt its one-worker program, and choose wheat on the existing suitable field. Two field workers then yield thirteen eligible food per day, changing the local balance from minus one to plus one while leaving two workers free for each selective-harvest crew. Eight more checks record further standing harvest orders and governed log departures; all seven charters remain fed and the 68-person Regional capital remains watered. Save restoration retains the forest's crop, knowledge and stock. The capital well has worn to 54% by this checkpoint; the subsequent paid repair is proved above, while source warehouse space, later finite inputs and longer multi-community balance still need work. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 paid repair after 68-person food recovery: From the saved 68-resident Regional capital with a 70% headworks, the owner can pause new woodland governor trips while its funded two-worker team completes. A separate paid journey collects eight finite clay. Temporary suspension of Record keeping, Land registry and Regional institutions lets the three-worker home saw reserve eight real timber; its released labor then staffs the smithy and brick kiln. Retained two iron and one charcoal become two tools, and imported clay plus local logs become six bricks in the same production check. Four released workers fund an ordinary eight-timber/four-brick/one-tool headworks repair before the extra-water cutoff. The saw, civic programs and governed log route resume. Five further checks preserve Regional capital, six home food days, 68 watered residents and food in all seven chartered communities; save restoration retains the paid stocks and well. The bounded endpoint has 84% headworks, 33 logs, five timber, four bricks, one tool and 913 food. Finite mineral and clay replacement and long-run multi-community balance remain open. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 adult food balance after governed forestry: The 66-resident Regional capital's governor team can be paused without recalling its already funded log journey. Once that team returns, the owner temporarily suspends three timber-upkeep civic programs, physically collects eight finite clay, uses the staffed home saw and kiln on real logs and clay, and pays another eight-timber/four-brick/one-tool headworks repair before water fails. The temporary service interruption briefly lowers recognition to City but retains all six outpost charters. Restaffing the second wheat field from one to three workers, restoring the three civic programs and keeping a three-worker saw creates 71.5 eligible daily food output. Two separately travelled adult workers from the finite waystation enter the final two permanent housing places; the unused third party returns when migration closes. At 68 people, water capacity is 72 and daily food demand is 67 with two governor carriers away. The reauthorized physical woodland route resumes, and home food rises by twenty during eight more ordinary checks while all seven chartered communities stay fed and no home resident loses water. The home re-earns Regional capital and three staffed registry offices yield six current slots. Save restoration preserves population, title, inventories, well and the active governor ledger. The endpoint has a 70% well, 35 logs, four timber, two bricks and no tool; future toolmaking, finite clay and long-run regional balance remain M3/M7 work. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 governed forestry freight with full capital administration: The balanced woodland source can feed an existing paused governor exchange without granting logs on authorization. At the 66-person Regional-capital checkpoint, moving one worker from the second home food field and one from the saw leaves a three-worker lumbermill, one worker in that field, all three staffed registry offices and two real carriers. The reviewed mandate asks for up to 64 logs at home, limits a load to twenty units and uses daily food/log allowances. Ordinary checks dispatch three separate two-person jobs over eleven days; two complete and unload real source logs while standing selective forestry keeps producing at the linked village. The home retains Regional-capital status and six current administration slots, with water for all 66 residents and food in all seven charters. Two starting timber cannot pay three civic programs on the first day, but saw output restores active Regional institutions before the first paid departure. The saved active mandate, commitments, cargo, title, well and inventories survive reload. The endpoint has 43 home logs, three timber, 883.5 food, a 70% well and no bricks. The route demonstrates bounded automatic log transport; home food output, clay, replacement tools and later well repairs remain part of the M3/M7 sustainability gate. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 balanced forestry and retained capital repair: The 66-person home can continue from the post-toolmaking Village with a 92% well to an earned Regional capital and fund another physical well repair while retaining the title. The linked woodland village's three-worker food field made a daily 4.5-food surplus that refilled its 1,400-place depot and blocked complete 21-log harvests. Assigning two food workers yields eleven food against twelve household meals, keeps more than one hundred local food days stored and leaves a two-worker harvest crew free. One paid forty-food source pickup opens the depot; restored home Record keeping, Land registry and Regional institutions then let the already authorized mandate issue repeated real selective-harvest jobs. Three separately paid twenty-log returns keep the home saw working through Village, Town and City qualification. After all three registry offices are staffed, a short saw shift frees four builders for an eight-timber/four-brick/one-tool maintain-headworks job at 56% condition. Two saw workers continue production during a fourth paid log return, four resume afterward, and the capital does not regress. The saved endpoint has 92% headworks, 36 home logs, two timber and one tool; the source retains 47 logs and over 1,300 food. Every advance preserves water for 66 and food in seven charters, and restore preserves title, stocks, well and forestry order count. The route is a bounded manual supply and repair proof; finite clay, further toolmaking and automated regional exchange remain M3/M7 work. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 replacement tool and repair cycle after capital return: The 66-person, seven-community capital's 70%-condition well can receive another fully paid repair even when no tool or worker is initially free. Temporary shifts release saw and registry workers and pause timber-consuming civic programs. Concurrent outpost teams move 32 woodland food plus four logs and eight finite clay; during transit two charcoal workers burn five real home logs and three smiths use the four retained ore through metalwork and forge-tools to produce three tools. A staffed office temporarily restores delegated civic service so the standing woodland instruction orders a physical selective harvest. The home saw and kiln process the remaining logs and delivered clay, then an ordinary four-worker maintain-headworks job debits eight timber, four bricks and one tool before water fails. A further paid team returns twenty logs after the marked woodland harvest completes. Every advance preserves water for 66 and food in seven charters; save restoration agrees on mandate count, all inventories and the well. At the bounded endpoint, the well is 92%, two tools and four bricks remain, and the home has regressed to Village during temporary civic suspension. Twenty logs and three timber are present, but returning to Regional capital and sustained depot/production scheduling are still M3/M7 work. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 paid capital return after forestry restart: The 66-person home can continue from the saved 80%-well Village checkpoint to a Regional capital without bypassing the existing economy. Two parallel paid pickups move woodland food and finite clay; delegated civic service then lets the retained woodland instruction create a real harvest job. A separately funded log return feeds the home saw while a staffed kiln converts clay and log fuel into bricks. Suspending three timber-consuming civic programs for the production and repair window preserves eight timber for an ordinary four-worker maintain-headworks job, which restores water to 100% before any household loses capacity. Restored civic service and two more paid twenty-log returns keep the saw and public records operating through seven further Town, City and capital checks. Three staffed registry offices provide six current administration slots. All 66 residents retain water, all seven charters remain fed, and restore preserves stage, stocks and the well. The endpoint has 70% well condition, eight logs, ten timber, two bricks, zero tools and no free labor. The route proves a finite manual recovery; future toolmaking, clay collection, staffing and water maintenance remain M3/M7 work. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 forestry restart from the 66-person timber bottleneck: The one-timber endpoint's enabled woodland harvest order is blocked by suspended delegated civic service and a nearly full source depot. A paid forty-food collection frees complete-yield storage, the home staffs four saw workers against five retained logs, and the owner re-enables Record keeping, Land registry and Regional institutions. The retained mandate then issues a real two-worker selective harvest; on completion its logs exist at the woodland village, and a separate paid carrying team returns twenty logs and four timber. Milling the arrival makes home Regional institutions active again, so the service-specific forestry blocker clears. All seven communities remain fed, all 66 home residents retain household water, and save restoration preserves the order ledger, inventories and headworks. The home is still a Village with 80% headworks; capital requalification, future warehouse-space releases and renewable repair material balance remain M3/M7 work. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 forestry service exception routing: An enabled standing selective-harvest order can stop even with mature owned trees and available village workers when local Public accounting is absent and the linked founding home's Public accounting plus Regional institutions are not active. In the 66-person seven-community material endpoint, the home has one timber and its civic service is suspended, leaving the forestry village's retained order blocked. Regional overview now marks the forest as affected but sends the service-specific issue to the home Research screen, where the owner can restore the delegated institution after staging real timber; local worker, storage and land blockers still point to their local controls. The read model issues no harvest or stock and does not erase the standing instruction. This makes the production bottleneck actionable but does not itself close the renewable timber or capital-upkeep gate. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 replacement ore and two further paid 66-person repairs: From the fresh-well checkpoint below, paid teams concurrently collect eight finite ore from the replacement owned mine and eight clay from the owned clay village. Home metalwork spends four ore and two charcoal to yield three iron and one tool; Forge tools then spends two iron and one charcoal for two tools. A staffed kiln consumes the delivered clay and local log fuel for six bricks. Two more four-worker maintain-headworks jobs each spend eight timber, four bricks and one tool before the household-water cutoff, restoring 100% headworks. All 66 residents retain delivered water and six food days through every advance; all seven chartered communities remain fed and save restoration matches inventories and the well. The endpoint has one timber, no bricks and one tool. Mine and clay stocks are finite, and another timber cycle is necessary before further upkeep; renewable seven-community supply remains M3/M7 work. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 next 66-person well cycle: A saved branch from the 100% headworks checkpoint after the new home's first repair sends separate real teams for eight finite clay and woodland logs, overlapping the journeys with a paid mature forest harvest. Pausing the home saw keeps the imported logs available for a staffed kiln to fire six bricks. A four-worker maintain-headworks job then spends eight local timber, four bricks and the retained tool while the well still serves all 66 residents, restoring condition to 100%. Food in all seven chartered communities and six home household food days hold at every advance, and save restoration preserves warehouse balances and headworks. The endpoint has seventeen timber, two bricks and no tool; this Village branch is distinct from the separate full-office Regional-capital freight proof below. Renewable tools and clay, civic service during further repairs and sustained multi-community balance remain M3/M7 work. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M2/M3/M7 paid Town house, adult admission and full-office freight: The registered outer field receives a real Town house after physical woodland harvests and log returns, home milling, finite clay delivery, charcoal, brick and toolmaking, and four preventive well repairs. Joinery lowers its reviewed quote from 70 to 63 timber plus twenty food; the house adds four permanent places without people. One more worker in the second food field enables two physical one-adult waystation arrivals; closing migration returns the unused third traveler, leaving exactly two fewer source residents. A further paid well repair and three forestry log returns fund restored Record keeping, Land registry and Regional institutions. One home mill worker, a staffed school and all three staffed registry offices allow nine qualifying checks to regain Regional capital and six current founding slots while leaving two real carriers. A funded governor trip departs, collects village timber and returns with the source debited. The 66-person home keeps food and household water, all seven communities remain fed, and restoration preserves stage, administration, migration debit, inventories and well. At 52% headworks with seven timber, zero bricks and one tool, another paid repair and longer renewable supply remain M3/M7 work; full M0–M8 is not complete. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M2/M3/M7 paid housing-plot charter extension: The 64-resident home already uses all 64 housing places and every currently owned buildable hex. From the second well-repair checkpoint, ordinary smithy work forges two tools from retained iron and charcoal, and imported finite ore pays a later metalwork batch for a third. Two physical woodland journeys supply timber. A two-worker frontier survey returns evidence for a released outer field but grants no construction right; the staffed Land registry separately spends twelve timber, two tools and six food to annex precisely that plot to the existing charter. The extension survives save restoration and changes neither population nor housing capacity. Water remains delivered to all 64 people at 70% headworks, all seven communities remain fed and their six outpost rights persist. The paid-house and later continuation above builds on that plot, admits two adults and completes a paid two-carrier return with all offices staffed; renewable material supply remains M3/M7 work. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 capital return after the second 64-person repair: The saved paid-repair continuation forges two tools from retained local iron and charcoal, then makes two separate forestry pickups of sixteen timber with eight logs and twenty timber. School and saw staffing resume, and the owner re-enables previously adopted Regional institutions. Three checks each for Village, Town and City qualification restore Regional capital; a third paid twenty-timber return during those checks prevents civic-material loss. The 64-person home retains six food days, two tools, at least twenty timber and sound headworks, and all seven owned communities retain food. Staffing the other two sound registry offices restores six current founding slots; the snapshot reloads with the same stage, water, inventory and administration. This full-office arrangement leaves only one free home worker, so it cannot also fund a normal two-person governor team without more productive labor or a temporary staffing change. Renewable timber, tools, clay, carts and simultaneous civic/freight capacity remain planned M3/M7 work. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 second preventive repair from the renewed 64-person route: A saved tenth-day fork of the physical governor exchange has 64 residents, six home food days and 64% headworks. The owner pauses later governor dispatch but lets the current homeward team return, suspends Regional institutions to reserve timber, pays a clay-village collection of eight finite clay and 32 food, staffs the home kiln to fire bricks from clay and logs, then pays a sixteen-timber forestry pickup. A four-worker maintain-headworks job consumes its normal eight timber, four bricks and one tool, restoring the well to 100% while household delivery never drops below demand for 64 people. All seven communities remain fed, their charter links persist, and restored inventories and well state match. Suspended civic service and redistributed workers temporarily lower current capital recognition and new-founding capacity even as existing rights remain; the continuation above restores both. The later 66-person house branch proves one simultaneous full-office freight return; renewable repair inputs remain M3/M7 work. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M2/M3/M7 adult-worker regional return: A saved branch immediately after a paid preventive well repair keeps the home food field at eight staff and reviews one adult worker for the next migration party. Two separate one-person journeys debit two real residents and travel rations from the finite waystation while a paid two-carrier team is collecting twenty forestry timber and eight food; a second real team returns 32 food and eight logs. The owner closes migration at 64 residents, staffs one school and home saw and three source-village field and saw workers each, then reviews renewing daily governor allowances and home timber, logs and food targets. Over fifteen home days at least three governor teams depart and two mixed loads return; the home requalifies as Regional capital while keeping six food days and household water, all seven chartered communities eat and save restoration agrees. Its 54% headworks still needs a later paid repair. Six charter rights survive, but only one staffed registry office and two available carriers mean four current founding slots; concurrently staffing all three offices remains open labor work. This closes one bounded workforce-to-freight-to-capital recovery, not a perpetual regional equilibrium. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M6/M7 full handcart governor load: A reviewed owned-outpost governor mandate may now set a combined unit limit from one through 100 for each leg. Automatic and manual outpost supply and saved exact-load itineraries validate up to 100 units of an individual good, then enforce actual loaded weight against the selected transport: ordinary human carriers have 60 weight; a real serviceable handcart has 100, with route food and any horse feed occupying capacity. The cart is borrowed once, returns worn and requires the existing production or repair chain before another cart trip. An 80-food governor pickup is physically paid, debited from the source and held in escrow until return, with cumulative allowance unchanged by unloading; a separate 70-food itinerary leg retains its paid cart and cargo on save restoration. Existing mandates retain their stored limits without migration. This closes an artificial governor cap that previously wasted real cart space; acquiring renewable carts, six-day home food reserves and recurring well inputs remain planned regional-economy work. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 renewing mixed governor freight checkpoint: The command-funded seven-community branch after preventive headworks repair reopens its paid forestry exchange with a daily-only material allowance. One manual timber/log/food return first restocks the home saw. A retained governor mandate then targets home food, timber and logs while three village field workers, three village saw workers, one home saw worker, the school and a registry office remain assigned. Ten home days produce at least three distinct automatic paid departures and two physical mixed returns; travel rations and reserved collections remain accounted for, every chartered community is fed, the 62-person home keeps working well water, and save restoration preserves the route and both inventories. This demonstrates repeated freight and civic-input replenishment over a bounded interval. The two free carriers and current load limit cannot simultaneously hold the six-day home food reserve with this staffing, so capital qualification lapses. A lasting Regional-capital food, labor, transport and repair-material balance remains planned M3/M7 work. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M3/M7 preventive headworks repair and capital recovery: The prior 52% Regional-capital checkpoint has locally stored four bricks, eleven timber and two tools. The owner follows the repair-ready Land & water issue immediately, moving two extra registry clerks, the home saw worker and the school worker off their posts to release four residents for a paid one-day maintain-headworks job. Its ordinary eight-timber, four-brick, one-tool cost restores 100% headworks before the delivery cutoff; every checked step retains household water for 62 residents. A fully staffed home food field covers two physical forestry journeys carrying twenty timber plus eight food and then sixteen timber plus eight logs. One home mill worker and the retained civic programs support nine qualifying checks from Village through Town and City to Regional capital, after which three staffed offices restore six effective outpost slots. A saved reload retains all inventories, stage, rights and 66% headworks at the endpoint, with food in all seven communities. This demonstrates one uninterrupted-water preventive cycle with a temporary civic downgrade, not indefinite upkeep; new bricks, fuel, timber and tool inputs remain necessary. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M3/M7 local toolmaking and second capital return: The second well-repair endpoint is an intermediate Town state with zero tools. A further saved continuation moves four physical forestry-village loads home, including sixteen transported logs, sixty-four timber and an additional paid selective harvest at the village. Eight staffed home food-field workers cover the carrying and craft interval; the charcoal kiln consumes five logs for four charcoal and the smithy's Forge tools cycle consumes two retained iron and one charcoal for two real tools. The owner then runs a staffed home mill and field, temporarily releases two extra registry clerks for the final timber pickup and restaffs all three offices. The existing 62 residents, working repaired well, six retained charters and local food support nine qualifying checks through Village, Town and City back to Regional capital and six current outpost slots. All seven communities stay fed and a restored save retains stage, water and actual inventories. Eleven timber, two tools and 52% headworks remain at this checkpoint; this proves a second funded source-to-service recovery, not indefinite upkeep. A new owner-only repair-ready issue targets Land & water when a well at 60% or lower has its full local bill, escalating at three or fewer ordinary wear checks; the 52% endpoint shows two checks remaining. It neither reserves stock nor starts work. Staging the next repair before extra water stops and renewing clay, wood fuel, iron and transport remain planned M3/M7 work. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M3/M7 second well-repair cycle and lead-time exception: The previous 54% headworks, eight-timber capital is another intermediate checkpoint. At ordinary two-point wear, the owner's Regional overview now computes how many well-wear checks remain before extra delivery stops and escalates missing repair materials at three or fewer. The tested owner buys time with a short paid clay-village trip for eight finite clay and 32 food, fires six bricks from that clay and real home logs, then returns sixteen timber from the productive forestry village on another physical trip. The well drops below 50% during that longer journey, reducing household water from 72 to 60; the separate four-worker repair consumes four bricks, eight timber and the last tool and restores 100% condition and delivered water. Six retained outpost charters and food in all seven communities survive the temporary interruption; save restoration preserves actual stock, water and current capacity. The endpoint is Town with two timber and no tools. The local-toolmaking return above replaces tool fuel and regains capital; pre-staging bricks and timber before the three-check deadline and sustaining later cycles remain planned M3/M7 work. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M3/M7 timber return after the local well repair: The zero-timber repair state is an intermediate checkpoint. To recover, the owner moves three home mill workers to the food field, physically collects 40 surplus food from the forestry village and opens warehouse space for a paid 21-log selective harvest there. Its staffed local mill saws those village logs, and two actual carrying teams return sixteen then nine timber. The home rebalances field and mill workers, temporarily releases two extra registry clerks for the second trip and restores all three after arrival. Nine qualifying checks across Village, Town and City regain Regional capital: 62 residents, six local food days, delivered well water at 54% headworks condition, active Regional institutions, six effective outpost titles and food in all seven communities. Save restoration preserves the resulting stocks and rights. This is one renewable woodland input cycle and one civic recovery; the eight-timber home buffer and worn well still need future paid material renewals for sustained play. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M3/M7 local clay-to-well renewal checkpoint: A saved continuation after the seven-community capital return uses a paid owned-outpost supply trip to collect eight finite clay and 32 food, staffs the home kiln for two production days, and fires six bricks from that clay and three home logs. A separate four-worker maintain-headworks project consumes four bricks, eight timber and one tool, restoring the well to 100% while the 62-person home and its six outposts stay fed. The resumed save preserves the actual stock, six retained charters and headworks. The repair exhausts local timber, so Regional institutions cannot pay its next daily upkeep; effective expansion capacity drops to two even though no charter is revoked. The owner-only Regional overview reports the one-timber daily operating need, current local stock and a Supply chains target. Regional capital stage remains during its three-day decline grace, not as evidence of sustained service. The forestry return above restores timber and civic capacity once; replacement tools and an unattended seven-community food, water and civic balance remain planned M3/M7 work. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M3/M7 regional woodland return to capital: After the forestry-village mill's second recorded production cycle, a further saved-state continuation restores its founding home from Village to Regional capital with existing residents and real regional materials. The owner pauses home Record keeping and milling while five paid log-collection trips and thirteen selective harvest jobs draw on the two other owned woodland villages and the forestry village; two additional paid trips bring food home. Two four-worker well repairs spend the remaining bricks and tools during collection. Sixty-three delivered logs let the home saw new timber; retained iron and charcoal forge tools; Record keeping and Land registry are readopted, then a staffed home mill, food field and registry office keep Town, City and Regional capital requirements true over nine separate daily checks. At the checked endpoint, all seven chartered communities have food without a latest shortfall, the home has 62 actual residents, more than six local food days, sound delivered water and 27 logs, and staffing the other two offices restores six-title capacity. Save restoration preserves the stage, capacity and every community inventory. The forestry village's mill and Record keeping are paused during this redirected supply interval; this proves a funded recovery, not simultaneous unattended regional balance or renewed bricks and tools after the spent stock. See implementation status, gameplay foundations, player guide and technical reference.

Implemented, M3/M7 local forestry mill supply chain: A separate branch from the recovered seven-community snapshot uses ordinary commands to fund a lumbermill in the forestry village. The home temporarily releases registry clerks, suspends Land registry upkeep and moves workers from food growing to milling; the village reduces field staffing for selective harvest and suspends its own Record keeping upkeep while stockpiling. At least six physical outpost-supply trips transfer home-made timber toward the village's 110-timber and 30-food building cost, while return loads bring real logs and food. Clay pickups, brick firing, retained-ore toolmaking and paid well repairs keep the home work route viable. Construction occupies an open local plot; two village mill workers then convert locally harvested logs into timber, and a further physical team returns sixteen timber to the home. After a previously cut woodland plot regrows, another paid selective harvest replenishes village logs; the village readopts Record keeping and records a fresh local sawmill batch. Save restoration preserves the built mill and both inventories. The temporary civic suspension can lower the home's recognized stage and new-founding capacity; existing outpost rights remain. This first branch proves a bounded second production site; the regional-return continuation above restores capital status through separate paid work, while unattended seven-community balance remains open. See implementation status, gameplay foundations, player guide and technical reference.

Implemented, M3/M7 land-work supply goals and well repair exception: City → Supply chains includes paid land projects in Work backward from a goal, including an existing well's exact Repair well headworks quote. The owner can plan one to twenty future repairs or buildings; the selected count multiplies their catalog bill before the existing tree allocates stored timber, bricks and tools once and traces upstream sources. This is a material estimate, not a schedule, reservation or promise that the well will need or permit that many repairs. The repair consumer is conditional because paid work can recur as the built headworks wears; each real job still needs condition, materials, specialist service and four workers. Regional overview raises a private material warning when enabled headworks reach 80% condition or lower and the local warehouse lacks any of the eight timber, four bricks or one tool for the next repair; below 54% the warning is urgent. It identifies the actual shortfall and links to Supply chains. An already funded repair suppresses the unneeded warning; completed or incoming goods still follow their ordinary job and cargo rules. Planning several projects does not create renewable timber, bricks or tools. See implementation status, player guide, technical reference and gameplay foundations.

Implemented, M3/M7 managed seven-community upkeep: The recovered capital has a separate saved-state continuation lasting at least 24 village days. Two extra registry clerks can move off duty during supply and four-worker well jobs without losing existing titles; the remaining staffed office and active services keep capital recognition, and all three offices return afterward. The home keeps seven field workers and one mill worker during this interval, trading faster timber output for food stability. Paid forest food and log pickups, clay delivery and local brick firing, retained-iron tool forging, and at least two further headworks repairs keep delivered water, six local household food days and every chartered community fed at each advance. The test checks that Regional capital never regresses, six-title capacity returns after each operation, and the ending inventories and capacity restore from save. This is an actively managed finite interval, not a proof of recurring timber equilibrium or indefinite mineral supply. See implementation status, player guide and technical reference.

Implemented, M3/M7 sixth mineral outpost and bounded recovery: An earned Regional capital with active Land registry and Regional institutions can pay for and staff a third distinct sound registry office to support six retained outposts. One or two offices retain their four- and five-title limits; lost service or status stops new over-limit expeditions without revoking existing titles. The City shows the live count and staffing requirement, and a seventh persisted title is rejected. The integrated capital branch begins with five outposts and a physically exhausted iron seam. It transports ore already mined into the old warehouse, forges tools, collects woodland logs, mills timber, pays for a third chartered office, repairs its well with clay fired into bricks, and re-earns Regional capital by restoring actual services, workshop input, food and water. A returned survey and conditional charter then send eight existing residents with a paid camp kit to a second finite iron site within twenty-four walking hexes. The camp builds a field away from its seam; paid food and timber journeys fund a local mine; staffed miners consume its own ground stock; a returning team brings ore home for charcoal-fueled iron and tool production. The original seam remains empty, six titles and both inventories survive save restoration, and staffing losses after founder departure do not undo the paid title. A command-driven continuation rescues the hungry forestry village by changing its food-field mandate to continuous, delivering actual food and exporting selectively harvested logs. Clay-fired bricks, forged tools and milled timber pay for a well repair; three real waystation households restore the home to 62 residents. Restored accounting, one staffed registry office, a school and a supplied mill with two workers available for Regional institutions earn Town, City and Regional capital again. Staffing the other two offices then restores six-title capacity, with food in all seven communities. This proves bounded recovery, while recurrent fuel, finite seams, repairs and longer seven-community balance remain open. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 finite mineral exception planning: The private Regional overview now warns when an owned, surveyed iron, clay or stone source has a built staffed extractor and at most the larger of 20% of its original stock or five full-output batches remaining. It names the exact outpost hex, ground stock and approximate cycles at current staffing; an exhausted built source remains visible even when unstaffed. Deliberately idle live seams do not generate a near-term warning. The issue opens that community's Supply chains, where the player can compare actual inventory, physical imports and worked-site leases; another released survey is possible only with title capacity and its normal costs. This read changes no deposit, cargo, title, production or save. It makes finite-source risk actionable before brick, tool or masonry production stalls. The separate sixth-outpost journey above proves a bounded replacement iron input; replacement clay and stone routes and long-term seven-community balance remain open. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 governed masonry and further six-community upkeep: After establishing the fifth clay outpost, the 64-resident Regional capital can review a daily-only governor route that collects clay from the staffed finite pit. Each dispatch reserves real carriers, route food, outpost stock and shared logistics allowance; only a returning load credits home clay. The owner pauses a competing forestry route while arranging labor, mills retained logs during a temporary administrative pause, physically retrieves fresh logs to keep the home workshop supplied, and restores capital recognition. The home kiln then fires at least two more batches. During a further 36 managed village days, a reviewed daily-only land-maintenance instruction at 70% headworks condition funds two ordinary four-worker repairs from local stock. Each commitment spends eight timber, four bricks and one tool; the owner frees the crew and brings forestry logs home, but does not buy more bricks or manually start those two jobs. The repaired home retains delivered water and Regional capital status, and all six communities remain fed at each checked day. The brick balance proves the repairs consume more than the pre-governor stock, so locally fired bricks pay part of that upkeep. The maintenance ledger records both funded orders and survives save restoration alongside the well and inventories. Office staffing can be temporarily reduced without losing the fifth title. This is a finite, actively managed interval; it does not prove indefinitely replaceable mineral seams or unattended regional balance. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 fifth charter and local clay-to-brick chain: An earned Regional capital with active Land registry and Regional institutions can keep four retained outposts with one staffed operational registry office. Two distinct staffed operational offices, each at least 65% condition, raise its dispatch capacity to five. Losing an office or the stage lowers capacity for new expeditions but does not revoke existing titles. A command-funded continuation of the 64-resident capital builds and staffs the second office, claims nearby building ground for a brick kiln, and surveys and charters a clay-bearing fifth site. Eight actual residents travel with the paid camp kit; six are workers, with a food field off the deposit. Physical supply journeys bring construction timber, a staffed clay pit extracts from the finite seam, and a return caravan carries clay to the home kiln, which fires six bricks from eight clay and three logs. The branch funds headworks repairs, restores 64 residents and Regional capital recognition, and checks food in all six communities and save restoration. This proves an available local brick chain, not renewable clay, indefinite staffing, market independence or unattended six-community balance. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M7 chartered iron in the larger-capital journey: After the managed 240-day, 64-resident checkpoint, the same earned five-community state can fund an iron mine at its surveyed fourth outpost. Its camp field must occupy a non-deposit plot, preserving the finite seam for the mine. Physical supply journeys deliver ninety milled timber while collecting surplus camp food to make warehouse room. Four local miners turn seam stock into iron ore; a return caravan brings ore to the home, where staffed charcoal and mixed metalwork produce iron and tools. The owner temporarily suspends unused land-registry upkeep to accumulate construction timber, funds additional headworks repairs and replenishes bricks and earlier tool inputs, then restores the registry and verifies the home remains a watered Regional capital with all five communities fed. The mine is a bounded seam; this proves a local ore-to-tool link in the established capital, not an indefinite mineral balance. The later fifth-charter branch above adds local clay and bricks. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M2/M3/M7 ten-year managed growth and well upkeep: The earned five-community Regional capital has a command-funded branch that grows its founding home to 64 actual residents: one four-person household arrives after paid shelter and deeper water work, then three one-adult parties arrive from the finite waystation. The owner funds recurring maintenance at a 54% headworks threshold, temporarily reassigns workers for four-person repair crews, trades real logs for bricks and timber for iron, and forges replacement tools with local charcoal. A reviewed increase in total maintenance allowances retains earlier spending. Ten completed repairs spend 80 timber, 40 bricks and ten tools. Across 240 further village days, every advancement verifies more than 60 home residents, usable headworks, Regional capital status and positive food without a latest shortfall in all five communities. The path includes lawful ruler handover, at least two later material replenishments and a matching offline replay across the final decision-free segment. This is a managed finite-supply ten-year route, not proof of indefinite demographic, forestry, fuel, market or institutional balance; the separate 3,600-day longevity route below still ends at 60. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M2/M7 surveyed founding-well expansion and first above-60 arrival: A suitable founding commons on original, moist field ground can fund Prospect a deeper groundwater lens after surveying its source plot and staffing Small irrigation. Four actual workers spend eight timber, eight food and one tool over two village days. Completion records one verified twelve-unit deeper lens, raising that home's source limit from 60 to 72 but delivering no extra water. A separate three-day paid Extend surveyed well headworks project uses twenty-four timber, eighteen bricks, two tools and four workers to access the new yield. The existing headworks condition, damage, flood, household priority, irrigation competition, repair and automatic maintenance rules then apply; worn works lose all twelve extra delivery. Earlier saves migrate from land ledger version four to five without new yield, materials or residents, and forged survey records reject. A branch from the earned Regional capital checkpoint now pays for iron imports, local charcoal and forged tools, exchanges food for forestry-outpost logs, mills the timber, restores food reserves, completes the survey and headworks, and builds one town house. With 64 housing places and 72 sound delivered water units, a four-person party physically leaves the finite waystation and raises the home above 60 residents; its source debit, household capacity and save replay are checked. The earlier 3,600-day route still ends at 60, and this shorter growth branch does not establish indefinite balance. Fund source and shelter while labor and material headroom remain; never count surveyed potential as current delivery. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, managed Regional capital through day 3,600: The five-community command-funded continuation funds a third backup cohort for Record keeping and Regional institutions with real mill output, retained tools and paid courses. Enabled specialist programs short of workers raise a Regional overview exception linked to People; temporary reassignment restores service. A reviewed governor target stops outbound food while real log collection continues. Near the existing 60-person housing and water limit, the owner selects one adult worker as the next migration party instead of the default four-person household. Each departure removes one actual adult and outward/return rations from the finite waystation; current housing, water, staffed food output and food reserves must admit that person at departure and arrival. Paid field and mill staffing shifts restore migration eligibility and timber while adult labor ages. Every checked day through 3,600 retains Regional capital and five fed communities, with offline replay across decision segments. This supersedes earlier 2,600- and 3,500-day capital checkpoints; it demonstrates managed renewal within the existing capacity, not indefinite demographic or ecological balance. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M2/M3/M6/M7 integrated renewable regional operation and office recovery: The command-funded five-community Regional capital journey now runs 2,600 managed village days with ongoing home/source forestry, a daily-only governor material allowance, daily-only shared logistics and daily-only shared operating ceilings. Real local harvests, mill batches, food shipments and returned logs continue; both shared books and the governor retain more than 10,000 gross food committed while enforcing each home-day limit. The existing specialist handovers, capital stage and positive food in all five communities hold, and offline segments match the stepped inventories and both shared budget ledgers. A temporarily unsupported regional office cannot authorize or revise a budget or fund other covered regional work. An already enabled daily-only operating budget still permits local material-consuming production within its reviewed daily ceilings, so a mill can turn existing logs into timber needed to restore office service. Pausing the budget, exhausting the day's allowance, missing physical inputs, losing local production prerequisites or using capped mode still blocks the affected batch. This closes a circular timber-recovery trap; it does not establish indefinite unattended ecological, labor or material balance. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M2/M3/M6/M7 renewing shared operating permission: The optional founding-home operating budget now offers Lifetime total ceilings or Renewing daily ceilings. Daily mode limits each covered material to at most 1,000 units per home village day, renews at that boundary, and retains all gross spending, activity/community totals and dated receipts. Capped mode keeps its 10,000-unit lifetime ceiling. A reviewed edit must cover spending in the selected period; switching back to capped cannot undercut gross spending. Material-consuming production, district and repair work, automatic regional deliveries, military support and other covered activity still require real goods, workers, storage, rights, local allowances and any separate shared logistics permission. A pause blocks new commitments while paid work continues. Existing version-one ledgers migrate as capped and conservatively treat gross spending as today's spending until the next day; no goods or authority are granted. City and Regional overview show the period, today, gross commitments and next reset. This removes a second finite authorization stop from renewing workshops and routes, but does not prove indefinite economic balance. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M2/M3/M7 renewable targeted-production authorization: A chartered producer's reviewed warehouse target now chooses a Capped total or Renew each village day input allowance. The selected output stock threshold and active local or delegated Public accounting still gate every staff-scaled batch. Daily mode checks the current local day against a whole-material limit of at most 1,000 per input; capped mode retains the old 10,000-per-input lifetime limit. Both modes keep lifetime batch count and gross input spending. A mode edit must cover commitments in the selected period, and a blocked batch spends nothing. Version-three production mandates migrate versions one and two as capped, preserving stock, target, fish-source floor and prior batches; because older ledgers retained only the latest batch, migration conservatively treats all prior spending as current-day spending until the next day. Production receipts now use the actual village check time, keeping same-day edits chronological. Local City and coordinated Regional overview expose the period and copied comparison. Renewing permission supplies no materials: recipe inputs, staff, specialists, protected food, natural deposits, storage and optional operating budgets remain physical limits. The current M2/M3 and M7 economy still needs long-run balance verification.

Integrated forestry recovery, M2/M3/M7: The command-funded four-community City journey now changes its near-spent 200-order standing harvest instruction to ongoing daily checks through the same player command. The prior total remains stored and the owner does not receive timber immediately; later real two-worker jobs carry the issued count beyond 200. Over the 2,600-day managed journey, food and accounting remain active, and segmented offline replay matches stepped inventories, production, forestry and family continuity. An unchanged capped branch stops at 200 and eventually loses Regional institutions to timber shortage. This verifies that the new authorization removes that administrative stop in an integrated save, while demographic repair, worker availability, forest recovery, food, storage and broader long-term balance still need player management.

Implemented, M2/M3/M7 ongoing selective forestry: The charter owner may now review Capped total or Ongoing daily checks for a standing selective-harvest instruction, locally or in one coordinated plan for two or three linked communities. Older version-one forestry ledgers migrate to version two as capped, keeping their order count, selected plots, paid jobs and recent checks. Ongoing mode retains lifetime orders and at most one automatic decision per local village day, without a finite lifetime stop. Each potential order still needs mature healthy owned trees, active local or delegated accounting, home food above reserves, two workers plus the retained floor, no prior automatic or queued crew conflict, and full log storage; ordinary work and tree recovery determine actual output. Switching back to capped mode requires a total covering all prior orders. Regional overview reports a near-total warning only for capped instructions; City and copied regional forecasts disclose the selected mode. This permits renewable log management across years, but does not prove net-positive timber, food or cart/tool inputs in a multi-community equilibrium. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M6/M7 renewing food-only supply: An established owned outpost's recurring food instruction can use either its original capped lifetime food authorization or a reviewed daily allowance of at most 1,000 food per home village day. Every accepted physical load charges cargo and travel provisions together. The daily choice preserves gross lifetime spending and actual jobs while renewing only the route's permission on later days; a blocked or satisfied check advances the daily ledger without spending. The owner may change modes, but a capped ceiling must cover all lifetime commitments and a daily ceiling must cover food already committed today. Shared regional and operating budgets, home household reserves, staffed accounting and records, free carriers, route safety, outpost storage and the optional funded tower-meal target still apply. Version-four mandates migrate versions one through three as capped, preserving paid journeys and current-day receipts. City, review and Regional overview name the allowance period. This removes the remaining finite route ceiling from the basic recurring food path without proving long-term food production or full regional balance. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M6/M7 renewing governor allowances: An authorized governor exchange now chooses either its original capped total per-material allowance or a daily allowance that renews on each home village day. The daily choice has a 1,000-unit ceiling per good per day; the route still sends at most one physical team per daily check, obeys its optional total trip limit, and rechecks stock, carriers, reserves, storage, route, institutional service, shared logistics and operating budgets. Every accepted load books gross lifetime and current-day spending, including travel food, horse feed and reserved collection. Pauses, recalls and returns do not erase either ledger. Switching from daily to capped requires totals covering all lifetime spending; switching to daily must cover spending already made that home day. Existing saves migrate explicitly to capped governor allowances. The City editor, review and Regional overview identify the selected period, while the low lifetime allowance warning applies only to capped routes. This removes a finite route ceiling as an obstacle to recurring regional supply; food-only mandates and long-term multi-community balance remain open. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M6/M7 daily-only shared logistics: The founding owner may now choose between the existing capped shared logistics budget and an explicit daily-only authorization. Both modes apply whole-material ceilings of at most 1,000 per home village day to automatic food, governor and saved-itinerary loads; only capped mode also stops at reviewed lifetime material totals of at most 100,000. Daily-only is not free transport: each departure still needs a real route, workers, stock, food, storage, rights, local mandate allowance and any separate regional operating budget. Gross lifetime spending and physical receipt history keep accumulating, and pause/recall/refunds never erase them. Switching back to capped mode requires ceilings covering all prior spending. Version-two shared ledgers migrate version-one budgets as capped without creating any authority, goods or journeys; older saves still start with no shared budget. Regional overview pairs current-day spending with daily ceilings in daily-only mode, and the private forecast includes the selected mode. This advances a sustainable recurring regional rate while full three-community equilibrium remains open. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M6/M7 chronological regional controls: A founding owner may pause an enabled recurring food-supply or governor exchange instruction before its next due check, or cancel future itinerary loads before the next saved departure. Any already paid carrying team and cumulative spending remain intact. Once a check or departure is due, the simulation must process it before a pause or cancellation can take effect. A command at the due instant is rejected with a refresh instruction and makes no state change; after catch-up, the owner may stop subsequent checks or future loads. This uses existing saved schedules and requires no migration. It prevents a newly submitted control from cancelling an earlier physical dispatch or recorded blocker. See implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M6/M7 finite governor trip plans: A founding home with active Regional institutions, Public accounting and Record keeping may give an established owned outpost's governor exchange a reviewed total paid-trip limit, or leave it ongoing. Targets, carried weight, two existing workers, household reserves, route safety, local and shared budgets, fish age and warehouse space are still rechecked for each physical trip. A waiting or blocked daily check consumes no trip. On the final funded dispatch the authorization closes automatically; its crew and cargo finish, return or wait under ordinary route rules, and gross allowances stay spent. Once the last team returns, Regional overview flags any still-unmet stock target as an actionable exception. The owner can later raise the absolute total beyond trips already sent or explicitly choose ongoing dispatches. Existing mandates migrate to ongoing without new goods or journeys. This provides a finite multi-trip regional instruction; coordinated forecasts of several future custom loads remain open. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M4/M7 Large civic works: The Building branch now continues from Structural engineering and Construction planning to Large civic works. A staffed mason workshop supports four research days using twelve dressed stone, sixteen timber, twelve food and three tools; adopting the topic uses six more dressed stone, six food and one tool. Its specialist occupies one worker and consumes one food and one timber each village day. The topic unlocks a separately built Stone civic works hall using sixty timber, forty-eight dressed stone, thirty-two bricks, twenty-four food, four tools and real construction work. One sound, dry, staffed operational hall adds a fourth four-person building crew slot only at earned City or Regional capital status while Construction planning, Regional institutions and Large civic works remain active. Multiple halls do not stack. A damaged, flooded, understaffed or busy hall removes the fourth slot, queueing its running crew with paid materials and completed progress intact; restoring service resumes it. The hall grants no population, title, materials or land, and bridges remain planned. A command-funded masonry and hall path plus a four-crew interruption test verify this capacity; the broader M0–M8 gates remain open. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M4/M8 paid topsoil recovery: Actual registered runoff can reduce prepared-field topsoil quality separately from soil-work condition. An owner with active Agronomy may now fund Rebuild eroded topsoil on a surveyed prepared plot with recorded quality below 100. Four workers spend two village days and eight compost, four timber and one tool; completion restores at most twenty missing quality points, limited by the loss still present then. Existing soil-work condition, water routing, sediment already exported, immutable elevation and mineral deposits do not change. The field pauses production while its crew works, and renewed runoff can erode the rebuilt layer. The version-two topsoil ledger records paid restoration separately from natural fallow recovery, migrates version-one histories with zero treatments, and verifies quality arithmetic and chronology on restore. This is a local recovery choice, not complete W2 terrain or affected-reach modelling. See gameplay foundations, implementation status, interface behavior, player guide, technical reference and waterworks plan.

Implemented, M4/M8 armored terrace runoff spillway: Structural engineering now has a second paid use after terrace reinforcement. On sound reinforced surveyed works, four real workers spend two village days placing a spillway with eight dressed stone, eight bricks and one tool. After a full recorded water interval, a sound armored terrace loses half the measured runoff condition damage, rounded up, while its prepared soil, water routing, topsoil loss and other improvements keep their existing exposure. If the terrace falls below 50% condition, the spillway stops protecting it until a separate paid retaining-work repair restores soundness; ordinary reinforced daily wear continues. The project does not restore current condition, move water, create stone or remove critical-foundation risk. Land ledger version four migrates older terraces with no spillway; erosion ledger version two marks older receipts unarmored without rewriting historical damage. This advances a material response to observed runoff, not complete affected-reach modelling or major waterworks approval. See gameplay foundations, implementation status, interface behavior, player guide, technical reference and waterworks plan.

Implemented, M4/M8 structural terrace reinforcement: The Building tree offers Structural engineering after Masonry and Contour surveying. A staffed mason workshop supports its research and one-food-per-day specialist program. An owner may fund a two-day, four-worker reinforcement on an existing sound surveyed terrace using twelve real dressed stone, eight timber and one tool. Completion records the reinforcement and halves ordinary terrace wear from two to one condition per village day, even while fallow. Reinforcement alone does not restore current condition or change measured runoff erosion; the separate spillway above addresses terrace-only erosion. It does not remove critical-foundation risk, supply resources or authorize bridges. Current land saves are version four: older version-one/two terraces migrate unreinforced, while version-three reinforcement is retained without granting a spillway. Paid work, restoration and offline days use the same rules. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M7/M8 regional commitment exceptions: The owner-only Regional overview now brings accepted bilateral pilgrimage and cultural exchanges into the same decision list as food, cargo and trade problems. A received three-day offer links to City → People for acceptance or decline. An accepted pact raises an issue until that owner's separately funded visit succeeds; the warning becomes urgent in its final two village days. If the owner misses the fourteen-day promise, the issue shows the seven-day reoffer wait and clears when it ends. An owner who already delivered gets no false missed-visit warning, and fulfilled, withdrawn or expired offers do not linger. The view reads existing exchange ledgers, preserves ordinary permission and funding rules, and changes no stock, visitors or save schema. This advances three-settlement exception management and reciprocal commitments; broader diplomatic enforcement and M0–M8 gates remain open. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M4/M6 physical pilgrimage and civic hospitality: The Religion tree includes Pilgrimage and civic hospitality after Ritual and civic calendar and Sacred and civic architecture. A staffed commons or refuge supports paid research and local adoption; one guide uses one food daily. A founding owner can review a two-worker round trip to a populated established owned outpost or to an inviting foreign chartered founding city or established outpost. The foreign host owner separately controls public pilgrimage guest access and up to four named invitations for foreign founding communities in City → People; performer permissions do not grant either form of pilgrimage consent. A named owner chooses independently whether to fund a visit. The home pays route rations and carries two gathering food. Visitors walk the surveyed route, can face fire or floodwater delays and Scouting detours, use the existing carrying-team capacity, remain one full host village day and return physically. At the event the host must have a sound dry camp or commons, met food, water and shelter needs and four local food above its household reserve. A completed gathering spends that host food and the carried two food, restores up to two host health and starts a seven-host-day interval. Foreign consent from public access, a named invitation or an accepted exchange is checked again at arrival and before the gathering; withdrawing the last applicable permission sends an unheld team home with unused gathering food. Lost guidance or hospitality likewise produces no visit receipt or host food charge; eaten travel rations remain spent. The version-three host ledger stores public access, bounded named invitations and consent on foreign receipts. Version-one owned visits and version-two public-consent saves migrate with no new private grants, stock or visitors. Faith and secular civic visits share the same rules and change no beliefs, title or people. Two foreign founding communities with active pilgrimage guidance can now propose and accept a bilateral pilgrimage exchange. An offer expires in three days; acceptance opens mutual guest consent for fourteen days and promises one successful paid visit in each direction. The visits still use the ordinary two workers, carried event food, route rations, one host day and four host food above reserves. After both visits, consent extends to thirty days from acceptance. Either owner may withdraw; an unheld team relying only on the pact returns with unused event food. A sender that misses its visit by the fourteen-day deadline waits seven days before offering that partner another pact. Public guest access and named invitations remain independent. The version-one global exchange ledger migrates older saves empty and validates recorded promises against actual host receipts. Longer routes and wider spiritual institutions remain planned. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M4 brick-efficiency choice: The Building tree now includes Efficient kiln firing after Timber framing and Record keeping. A staffed operational brick kiln supports the research and an adopted one-worker specialist with one-food daily upkeep. The existing kiln recipe remains the save-compatible default: eight clay plus three logs yield six bricks at full staffing. A reviewed kiln recipe change can instead select eight clay plus two logs for the same six bricks while the specialist stays active. Changing recipes resets the kiln's next production cycle without creating material. Suspended or unavailable service pauses the efficient recipe; it does not revert a paid choice or refund past fuel. Both recipes still consume finite or physically imported clay, actual logs, labor and storage. The supply-chain inspector presents both paths. This adds a useful fuel tradeoff, not a new clay source or automatic brick stock. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M5/M8 first Campaign planning tactic: The Army tree now has Campaign planning after Standing infantry service, Scouting and Field logistics. At a staffed barracks the learned and adopted planner enables a donor to choose Review cautious acceptance for an offered, consented professional relief campaign. It spends one real home tool in addition to the ordinary soldier food, host depot reservation and standing wages. After muster and physical travel, the force observes the camp from its last safe approach. The contact check uses its then-current field strength, actual camp terrain, wounds, equipment, morale, role, ammunition and any active formation. If weaker than the observed group, it records a dated report for both communities and walks home without entering, firing or fighting; the camp remains able to raid. If strong enough, it enters and resolves the existing casualty-bearing battle. Fire, flood, transit consent, wages, depot stock and return provisions still apply. The accepted order and tool payment validate on restore; old agreements acquire no stance or tool debit. This is one bounded relief tactic, not a commander system, territorial campaign, mixed formation or full M8 war. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M5 first infantry formations: The Army tree now includes Infantry formations after Drill and Standing infantry service. Research, adoption, barracks instruction and daily upkeep use ordinary knowledge rules. In City → Defense & patrol an existing ready unit with four fit, unwounded soldiers may order Shield wall or Loose files at home; each new or changed order spends four food above protected reserves and one tool. Shield wall gives 25% defensive strength on fields or woodland cleared below 45% cover, but takes a 10% field-attack penalty. Loose files give 20% field strength in woodland with 45–69% cover, but take a 10% defensive penalty on open ground. The shared strength calculation applies at actual patrol/relief contact and real defended guard or escort crossings, alongside existing professional, mounted and archery rules. Fire, fatigue at 80 or more, low condition or morale, fewer than four unwounded soldiers, or a lapsed instructor removes the effect. Reinforcement changes the cohort and ends the old formation; a fresh paid order is needed afterward. Old saves acquire no formation, while current malformed orders reject restore. This is a bounded infantry doctrine choice; mixed-unit formations, command hierarchy, territorial campaigns and full M5/M8 war remain open. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M3/M6/M7 Scouting detour for owned-outpost supply: An active Scouting program can route a newly reviewed manual or automatic supply trip around known fire or basin floodwater on a dry walking path. The accepted path sets actual walking distance, road timing, carrier rations, carrying weight and, when a named trained horse is chosen, animal feed. Governor range, load planning and allowances use that same path. If a new hex becomes blocked after departure, a human or draft-assisted supply team can find a bounded path from its actual current hex on either leg. It pauses for that travel check, keeps undelivered or collected goods in custody, consumes time-based food and announces the reroute in Expansion briefings. If no dry path exists, it waits under existing food, animal-feed and recall rules. A draft loan retains its original paid route and feed authorization while recording the revised travel path separately. Extra checks and edges consume the same carried feed and wear the same horse; low provisions can still force a physical return. This does not change land rights, outpost founding or the food-first start; broader route recovery remains open under gameplay foundations. See implementation status, interface behavior, player guide and technical reference.

Implemented, M8/W2 conditional wetland retention-limit comparison: A named recipient's current major-reservoir notice now carries the live wetland condition response through verified natural and proposed basin-water intervals into each owned observed marsh's next-interval local retention limit. The shared capacity rule applies each branch's condition and today's local sediment bed, including the sediment-loss cap at half that branch's capacity. City shows today's limit beside the natural and proposed closing limits in game water units. A lower conditional limit identifies potential future overflow pressure, but the replay holds today's local retained water fixed: it does not replay the marsh's rain, surface transfers, actual discharge or feedback into downstream basins. No water moves, no rights are granted and W2 complete affected-reach ecology, W3 consent and W4 physical works remain open. See major-waterworks plan, gameplay foundations, implementation status, player guide and technical reference.

Implemented, M5 paid reconnaissance order: After an active Scouting specialist surveys an uncleared frontier camp, a home-ready trained militia may use City → Defense & patrol → Review reconnaissance. The reviewed START_PATROL recon stance funds soldier food for walking to the last approach hex and home, with the ordinary delay reserve. The unit stays in physical custody, consumes provisions and encounters actual fire, flood and age hazards. At the approach it observes the camp's current strength and tree cover, writes a dated owner report, and turns home without entering the camp or fighting. It does not clear the group or prevent raids. A service lapse after departure does not rewrite the accepted march; new reconnaissance requires active Scouting. The optional stance persists and validates through save/restore, clears at home, and uses the same paid unit rather than creating scouts. This advances the planned investigate order alongside ordinary attack, cautious contact and guard; wider scouting, formations and campaigns remain open. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M8/W2 conditional recipient wetland health review: A current named major-reservoir notice now compares observed, unconverted wetlands inside the reviewing community's registered basins under the verified natural and proposed waterlines. Each branch starts from today's recorded condition and consecutive dry checks, holds today's separate local retained water fixed, and applies the same wet/dry condition transition as live wetland ecology for each retained water interval. The owner sees per-hex closing condition and dry exposure; unknown habitat records, unregistered basins and converted plots are counted separately, and foreign wetland state is not exposed. A controlled three-interval case shows release leaving one proposed dry check and no-release extending the streak until the live habitat-loss rule applies. The later capacity comparison above derives a retention limit from each branch's health; neither comparison reconstructs historical habitat, future weather, actual local storage/discharge feedback, complete affected-reach ecology or permission for construction. The broader W2–W4 waterworks gates and M0–M8 plan remain open. See implementation status, player guide and technical reference.

Implemented, M3/M5 defensive archery and fire discipline: A paid, fully trained archer force can use manufactured bows and finite carried arrows to defend an actual caravan crossing. A corridor guard gains 50% defensive strength only while holding its post with a complete volley and a clear enough line of sight; a moving escort gains the same conditional bonus only while co-located with the caravan at the observed camp. Archers default to Conserve arrows: at an eligible protected crossing they fire only if their ordinary strength is below the observed group; ordinary strength can still deter without spending. The reviewed Covering fire policy instead fires two arrows per unwounded member at every eligible protected crossing, even when ordinary strength suffices, and halves that crossing's condition wear and fatigue gain. Both policies record each actual volley once in the existing ammunition ledger and report. Cover of at least 70, fire, fatigue above 60, expired wages or insufficient arrows removes the ranged bonus and any covering-fire benefit. The review can use archer strength at the intended post, but the actual crossing rechecks terrain, readiness, pay, carried arrows, food and position. Home reload and physical field ammunition delivery retain their existing finite custody; a supply rendezvous does not extend guard duty. Older version-three archer jobs migrate to version four with the conserving policy and no invented ammunition. Command tests cover real guard and escort crossings, both policies, finite depletion, dense-cover and fatigue gates, save restoration and offline replay. This advances the bow/arrow supply chain into a useful defensive army role without completing formations, campaigns or the full M0–M8 plan. See implementation status, player guide and technical reference.

Implemented, M5 supplied mounted corridor guard: A rider-qualified, ready two-person militia can review a one- or two-day mounted guard at the surveyed frontier approach in City → Defense → Militia riders and mounted duties. The post must be fields or woodland with under 45 tree cover. The order pays ordinary guard soldier food plus a separately conserved horse-feed allowance for the ride, duty and return, then takes two identified fitted, cared horses into army custody. The pair rides along the actual corridor and protects real caravan crossings only after arriving at the post, while two unwounded, low-fatigue riders and both fit, fed horses provide a conditional 75% defense bonus. The camp stays intact; dense cover, tired riders, horse condition or feed, soldier food, fire, flood, return reserves, deadline and recall can remove protection or send the group home. Existing field-food resupply can support soldiers but does not extend duty or replenish horse feed. Surviving horses return by the real route to ordinary home care, and unused feed unloads only when storage permits. Rider saves migrate to version four with distinct patrol, escort and guard custody; malformed guard or feed records reject restoration. This completes one bounded mounted defensive order, while formations, mounted campaigns, wider cavalry tactics and the rest of M0–M8 remain open. See implementation status, player guide and technical reference.

Implemented, M8/W3 source water signature: Filing a major-reservoir notice starts review without consenting the source community's continuing water use. During the current fourteen-day window, its lawful public character must use a separate exact-term Review source water consent order, and may later withdraw or regrant it under the same bounded action history as named recipients. The source's signature covers only its own community; recipients still acknowledge and sign independently. The water-use blocker clears only while the source and every currently named recipient have live signatures on the same revision and release rule. Where no recipient is named, the source signature alone can clear that one blocker, while unknown users and every other impact, land and construction gate remain. Existing saves acquire no invented source consent; the unchanged version-nine action schema validates new source actions and preserves earlier recipient actions. No water or stock moves. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M5 mounted convoy escort: A ready rider-qualified two-person militia can assign two distinct fitted, recently cared home horses to an already dispatched, still-home caravan in City → Defense → Militia riders and mounted duties. The reviewed order pays the existing escort soldier food plus a separate horse-feed pool sized to the caravan's planned round trip and an eight-feed delay reserve. Horses travel with the actual escort and consume two carried feed each per village day; the caravan controls pace, including road speed, holds and detours. At a real co-located camp crossing on fields or a woodland walking trail, two unwounded low-fatigue riders with two fitted horses at 70 condition or better and positive feed gain 75% defensive strength. Mountain, wetlands, lost fitness, fatigue, wounds, permission loss, depleted return food, fire or flood can remove protection or detach the escort. The militia then returns from its actual hex while the caravan continues. Surviving horses return to their enclosures for paid home care, and unused feed waits for warehouse space. The rider save marker migrates version two to three and marks each new mount record as patrol or escort; old active patrols migrate without changing paid stock or position. This adds a second mounted duty with real caravan protection; the mounted guard above is a later third duty. Cargo gains no free speed, and formations and campaigns remain open. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M5 first mounted patrol: A rider-qualified, ready two-person ordinary militia can now choose any two distinct, locally present, mature saddle-qualified horses in City → Defense for the surveyed frontier patrol. Departure physically transfers both horses from their enclosures into army custody and pays the existing soldier-food quote plus a separate route-sized horse-feed allowance. Horse water demand and ordinary enclosure care stop while travelling; each horse consumes two carried feed per village day, loses condition with travel, and is shown at the militia's actual route hex. Two fit, fed horses move at one hex per twenty-fourth of a village day; an unfit, unfed, dead or unaccompanied pair falls back to ordinary walking pace. Fire and recorded floodwater still block the next hex while both supply pools continue to drain. Horse-feed shortage turns the unit home and can kill mounts after prolonged delay. The camp uses the existing casualty rules. At actual field contact on fields or woodland with under 45 tree cover, two unwounded riders with fatigue at most 60 on two mounted horses at 70 condition or better and positive carried feed gain 75% effective strength; dense cover, unsuitable ground or lost readiness removes that advantage. The survey review shows current camp terrain, and the encounter receipt records whether the advantage applied. If the whole unit dies in the field, surviving mounts and carried feed are lost; survivors shepherd both horses home. On return, surviving horses re-enter their home enclosures and need fresh paid care before another departure. Unused horse feed returns only as warehouse space permits; a home unloading phase retains any remainder. The rider/mount save marker migrates through version three, and restore validation ties every mounted horse to its unit and conserved feed. This patrol remains one order alongside the mounted convoy escort above; the mounted guard above is now playable; formations, campaign cavalry, dedicated mount recovery and full realm warfare remain open. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M5 militia rider drill precursor: City → Defense offers a reviewed two-day rider drill for a healthy, ready two-person ordinary militia after two distinct, mature, saddle-qualified horses are present and cared for in working enclosures. Active Animal husbandry and Mounted service preparation specialists, four actual warehouse feed and an age window covering the work are required. The militia stays home; each successful day needs fresh paid care for both horses and spends two held feed. The horses are reserved against draft work, breeding and relocation while training. Interruption pauses progress; cancellation returns only unused feed when storage permits. Completion records qualification on the existing unit and releases the horses for ordinary work. Casualties, an old-age death or completed reinforcement remove that unit qualification. The drill alone grants no field effect; the separate supplied mounted patrol and convoy escort above now assign mounts and carry feed, while wider cavalry remains open. Gameplay foundations retains the remaining M5 gates; see implementation status, player guide and technical reference.

Implemented, M4 Agriculture selective breeding: After Animal husbandry, a staffed livestock enclosure can support learned and adopted Selective breeding. Its active breeder spends one feed per village day and unlocks a separately reviewed resilience line in the existing paid horse breeding flow. Ordinary breeding still pays eight food, twelve feed and one tool; selecting resilience pays twelve food, sixteen feed and one tool and needs both identified mature parents at 95 condition. A breeder, ordinary parent care, reserved nursery place, spare water and caretaker must remain available over the same twelve successful work days. Interruption retains paid inputs and progress. The resulting identified foal has recorded parent, project, birth, maturity and resilient-trait custody. Its ordinary care still costs two feed and two water per day, but missed care removes eight instead of ten condition and complete care restores eight instead of five. The trait never creates an animal, shortens maturity, removes mortality or grants cavalry. The breeding ledger migrates version-one ordinary projects, receipts and foals to version two without adding a trait. This advances the Agriculture tree and renewable horse chain; army mount and field systems and the wider M0–M8 gates remain open. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M4 Agriculture Agronomy and targeted soil care: The Agriculture path now extends Seed selection → Crop rotation → Agronomy as a working research, adoption and specialist choice. A staffed operational community field supports the agronomist; the adopted program costs one food per village day. On surveyed, already prepared soil below full condition, its active service unlocks a separately funded one-day, four-worker Targeted soil care project using one compost and one timber. Ordinary Restore soil fertility remains available for two of each without Agronomy. Both restore only the soil improvement's condition on completion, pause a food plot's harvest while the crew works, and retain paid progress if the specialist becomes unavailable. The City Stewardship card names the actual soil condition and measured topsoil quality. Neither project replaces erosion-lost topsoil, stops runoff, changes immutable geography or grants materials. Automatic land maintenance continues to authorize the ordinary recipe, so its existing material ceiling remains predictable. This advances M4/M5 without closing later agricultural, supply-chain or waterworks gates. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M1/M3 live source diagnosis in supply goals: A selected recipe in Supply chains → Work backward from a goal now compares its proposed full-staff batches with the actual local buildings assigned to that recipe. The tree names how many sites are ready, gives an at-most current-cycle output for the material on that line, and surfaces the first real site blocker with its hex when no site is ready. Find producer prefers a ready assigned site. A shortage can therefore point from a proposed building or troop item through a stalled mill, kiln or workshop to its actionable condition. This read-only diagnosis never converts possible output into stock, reserves inputs, guarantees completion or replaces the authoritative order and forecast checks. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M2/M8 elevated storehouse against shallow recorded flooding: The Masonry branch now unlocks a real 400-capacity elevated storehouse after ordinary timber, dressed stone, tools, food and crew-funded construction on a dry cleared site. Its sound, operational raised floor subtracts 0.002 normalized depth from the recorded inundation at that storage footprint when calculating pooled vulnerable-stock loss. Deeper water can still expose stock, and condition below 65% or a damaged stage removes the lift; structural flood damage is unchanged. This is not a promise that named goods reside there, a weather forecast, flood control or a major waterwork. A command-only quarry-to-mason-to-building journey and save restore verify its physical supply path. W2 complete reach/ecology, W3 rights and W4 works remain open. See gameplay foundations, implementation status, waterworks plan, player guide and technical reference.

Implemented, M1/M2/M8 current flooded-store exposure: City → Land & water now shows every standing storage building, its capacity, the current recorded wet footprint and depth, and a one-interval calculation for the present pooled vulnerable stock if this exact depth persisted. The same read-only helper supplies the authoritative water-boundary loss, so the displayed quantity matches simulation under unchanged conditions. A dry standing store dilutes the exposed capacity share but does not move or reserve a particular good; building one still requires a lawful dry site and real materials. The card states that registered water may not persist and unregistered water remains unknown, and it does not save a forecast or change stock on read. Complete W2 coverage, W3 rights and W4 works remain open. See waterworks plan, implementation status, player guide and technical reference. Implemented, M8/W2–W3 current wetland-holder notice evidence: The verified natural-versus-proposal replay now scans currently observed, unconverted wetlands in registered basins for a changed wet/dry interval, including source water held in the candidate pool. Public source review reports distinct changed-site counts, named current charter holders and a separate count with no named charter holder; it exposes no private condition, food stock or site coordinates. Each named affected holder gains an ordered exact notice-basis reason, while the source receives explicit changed-wetland and unattributed-holder blockers. Recipient City continues to show only its own forage and conditional habitat detail. This is bounded present-site evidence, not discovery of customary rights, unobserved or unregistered ecology, future weather, W3 all-party consent or W4 operation. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M2/M8/W2 held-pool marsh and wetland response: The recipient-scoped retained-window natural-versus-proposal comparison now includes water held in the candidate source pool when checking current healthy, unbuilt marsh-forage sites and the live wetland inundation response. A newly submerged source-basin marsh loses its conditional 40-food capacity and eight-food daily regrowth contribution while its starting wetland condition and dry streak follow the live wet/dry rule toward a different next-interval retention limit. Conversely, held water no longer fabricates a dry streak where it replaces routed node water at an already wet marsh. These are owner-scoped, read-only current-configuration scenarios: no food, habitat or live water changes, and present local retained water is held fixed rather than coupled back into the hydrology replay. Full species-specific ecology, future forcing, notice of all ecological interests, W3 authority and W4 operation remain open. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M3/M8/W2 proposed-pool stored-goods pressure: The retained natural-versus-proposal waterline comparison now applies the live per-store flood-loss rate to current standing storage capacity, including source water held in the candidate pool and the separate raised-floor lift. Public source review lists affected current charter names, distinct stores and capacity-weighted pressure without disclosing another charter's goods. Each recipient privately sees the largest one-interval additional whole-unit loss from its current pooled vulnerable stock; zero rounded whole-unit loss remains distinct from a higher physical loss rate. Positive pressure adds a distinct source blocker and exact notice basis, including where no new land hex becomes wet. The screen changes no stock or water, does not compound historical inventories and cannot prove a future design flood, complete tenure, W3 authority or W4 operation. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M2/M8/W2 proposed-pool household injury pressure: A separate natural-versus-proposal retained-window comparison now includes water held in the candidate source pool alongside its routed basin water. It checks each current charter home and ready refuge against the two closing waterlines and uses the live dry-housing and direct flood-injury formulas. The source sees named communities with added pressure, while an affected owner sees its own worst one-interval exposed residents and pressure; another owner receives no private health detail. Added pressure has a distinct source blocker and exact notice basis even when land was already wet naturally and only depth worsens. The same held-water source level now also drives recorded-window land, standing-building, working-well and condition-loss comparisons, while the separate full-capacity storage screen names the potential footprint. Other ecological responses and actual stored-goods custody under a built reservoir remain W2/W4 work. This is conditional present-configuration evidence using recorded forcing, not a past health debit, future design flood, verified hydraulic works, consent or W4 operation. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M2/M8/W2 proposed-outlet household injury pressure: The retained-window outlet-open versus outlet-closed comparison now applies the live housing and direct flood-injury formulas to each current receiving charter with a modeled home or refuge. Both branches use the same opening sediment bed and today's residents, standing buildings, dry-housing base, ready refuge policy/staff and finite current logs. An owner-scoped notice shows the largest one-interval additional exposed residents and direct injury pressure if that recorded waterline held through the next household check; public source review names affected communities without disclosing population or health. Added pressure gets its own blocker and exact notice reason. The read changes no health, refuge supplies, structures or water; ordinary health floors, later weather, changed staffing and unknown reaches remain outside this conditional result. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M6/M8/W2 current paid-route impact from a proposed outlet: The verified outlet-open versus outlet-closed retained-window comparison now intersects land newly flooded by the outlet with the untraversed cells of currently paid outward or homeward journeys. It counts affected journey owners publicly without disclosing cargo, and an owner-scoped notice links the affected remaining route hexes, including cells beyond its own charter. The source receives a distinct active-transit blocker, and the journey owner enters the exact current notice basis. Review neither moves a team nor changes its paid goods; live flood holds and recovery still use ordinary travel rules. Completed route segments, inactive phases and dry intervals do not count. This is a current-job, recorded-water screen, not a forecast for future traffic, complete network rights, a safe outfall or W4 operation. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2 recipient storage exposure from a proposed outlet: The verified retained-window replay now compares each outlet-release interval against the same proposed reservoir with its outlet closed, using the same opening sediment bed. Current standing stores contribute their real catalog capacity, effective basin depth, sound raised-floor lift and per-store flood-loss rate. The source sees affected store counts and capacity-percentage-point pressure, not another charter's inventory. Each recipient's private City notice may show the largest one-interval additional whole-unit loss for its own current pooled vulnerable goods; current stock is held fixed for that interval and no historical stock is replayed or withdrawn. Added store pressure becomes a distinct exact-notice basis and source review blocker. The calculation is read-only and does not establish future flood safety, complete affected reach, consent, or construction authority. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M2/M8 depth-weighted flooded stores: Each inundated standing storage building now contributes its own effective-depth rate (5% per 0.001 normalized depth, capped at 25%) times its storage capacity to pooled warehouse loss. A shallow store no longer takes the deepest store's rate merely because another site is deeper. Sound elevated floors still offset their own depth, and a dry store contributes only to the denominator. Whole-unit withdrawals, dated fish batches, warehouse history, City current-water preview and offline replay use the same calculation. The version-two flood ledger migrates version-one receipts without changing their historical loss; new receipts retain validated weighted pressure. This improves W2 actual flood consequences but leaves complete reach, W3 authority and W4 works open. See waterworks plan, gameplay foundations, player guide and technical reference.

Implemented, M2/M8 loss of loose building materials in flooded storage: Recorded basin inundation now also removes a bounded capacity-weighted share of pooled logs, timber and charcoal at each four-hour storage check. These whole goods use the existing depth-scaled loss and warehouse-history receipts, making later building, fuel and charcoal-dependent production compete with actual flood damage. The three IDs append to the version-one flood receipt order, so older saved entries remain valid and no earlier interval is replayed. Stone, metal and tools remain outside this stock rule. Dry storage stops further loss; W2 complete reach and ecology, W3 rights and W4 works remain open. See waterworks plan, implementation status, player guide and technical reference. Implemented, M8/W2–W3 recipient basin-flow comparison of alternative terms: The current open reservoir-notice comparisons for a different opening-storage release or environmental bypass now show the recipient’s registered charter-intersecting basins alongside its well, building, land and fish effects. For each bounded basin, City puts the noticed and alternative change in summed arrivals, latest closing pool and lower-arrival interval count side by side. Each branch is measured against the same recorded natural water; no absolute foreign basin balance or water allocation is disclosed. Omitted basins remain explicit, and neither alternative is a new notice or consent. This improves downstream-flow objections without resolving full affected reach, ecology, all-party rights or W4 works. See waterworks plan, implementation status, player guide and technical reference. Implemented, M8/W2–W3 recipient release comparison: A named recipient of a current open major-reservoir notice can compare the noticed 25% or 50% opening-storage release with the other supported rate. The read-only recorded-window replay holds storage capacity, environmental bypass and natural forcing fixed, and exposes only that recipient’s current operational wells, standing-building condition scenario, charter land, marsh and surveyed coastal fish evidence. City compares wet well intervals, conditional building condition, land exposure, outlet-only receiver exposure, and per-owned-fish-bed discharge and supported no-harvest reserve. An unavailable replay states its reason; suspended, expired, legacy no-release and superseded notices offer no alternative preview. Only the noticed exact terms can receive consent; switching rates requires a source amendment and fresh notice. This is not live water operation, full ecological proof or construction permission. W2 complete effects, W3 all-party rights and W4 works remain open. See waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2–W3 recipient bypass comparison: A current, open major-reservoir notice now gives its named recipient a second read-only recorded-window replay at the other supported environmental-bypass rate while holding storage capacity, opening-storage release and recorded forcing fixed. The comparison is limited to that recipient’s current operational well connections, standing-building condition scenario, charter land changes and surveyed coastal fish beds; the fish list names each owned bed’s modeled basin discharge and, where complete evidence permits, its conditional no-harvest closing reserve. The existing exact notice remains the only consentable terms, and a suspended, expired or superseded notice offers no alternative preview. If exact replay fails, City states why instead of inventing effects. This makes a downstream-flow bypass request more informed, but it is not a new proposal, a forecast, proof of full ecological sufficiency or permission to build. W2 complete affected reach, W3 all-party rights and W4 construction remain open. See waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 bypass counterrequest: A named recipient may now pair a downstream-flow objection with a request for the other supported 25% or 50% environmental bypass of new arrivals, instead of a release counterrequest. The response is tied to one current notice revision and is visible to source and recipient; it neither alters the proposal nor signs water consent. The source can compare the bypass variants, amend its exact terms and file a fresh notice. Earlier requests remain historical, and new acknowledgment and consent are required. Version-nine major-waterworks ledgers add a nullable bypass-request field to each response; older ledgers migrate it to null without inventing a negotiation, and restore rejects forged rates or requests outside downstream-flow objections. No live water, rights or construction change. Complete W2 effects, W3 all-party ratification and W4 works remain open. See waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2–W3 selectable environmental bypass: A major-reservoir source now chooses either 25% or 50% of each interval’s new arrival to bypass candidate storage. This is an exact draft and notice term, separate from the selectable release of already held water. The City capacity review shows a matching measured bound, one-interval and recorded-window replay for each bypass choice; current draft and recipient notice evidence is recomputed from its frozen bypass and release terms. A higher bypass leaves at least as much new inflow in the natural basin and can reduce capture under the same recorded forcing, but does not establish ecological sufficiency or a complete downstream flow right. Amendments retain old notices as history and require fresh notice and consent. Existing 25% records remain valid, unsupported percentages fail commands and restoration, and no live water or construction changes. The local drainage-channel bypass remains its separate fixed 25% rule. W2 complete impacts, W3 all-party rights and W4 physical works remain open. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 wider named notice parties: Filing an exact major-reservoir notice now names the union of current connected-reach communities, nearby coastal communities, charter holders on the candidate storage waterline, charter holders whose land changes in the verified release replay, and current charters whose standing receiver buildings gain depth-based flood pressure. The owner snapshot comes from each current public charter. The same party derivation is repeated before recipient answers or new easement and water-consent grants; a new or changed holder suspends the old notice until the source amends and re-files. Capacity, bypass and release alternatives derive their own lists instead of copying another choice's holders. City shows these current candidates before filing. A missing exact replay contributes no invented impact holder, and unknown/customary claims, incomplete reach, ecology, complete ratification and physical works remain blockers. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2 bounded reservoir sediment trap in the proposed replay: Complete version-two sediment journeys now let each captured runoff or basin-transfer water leg retain an integer proportional share of the sediment carried on that leg. The water replay identifies exactly how much of each incoming leg enters the candidate reservoir; the separate sediment replay conserves opening bed plus incoming mass across closing basin beds, ocean/unresolved exits and a cumulative trapped-mass account. Trapped mass stays in the proposed reservoir through later releases and no longer contributes to basin bed displacement; released water may still remobilize untrapped basin sediment. The natural branch must still reproduce the saved sediment journeys exactly, and older incomplete journeys continue as water-only comparisons. City shows trapped mass and recipient-specific downstream fish-bed effects without changing live water, soil, sediment or fish. The proportional rule is a bounded design assumption, not measured sediment chemistry, future erosion, long-term reservoir capacity, decommissioning or authorization to build. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2 conditional fish-reserve recovery: For a recipient-owned coastal stock with a first verified nearby-flow interval and complete water and sediment rows, the reservoir notice now applies the same capacity-capped fish recovery calculation as live stock advancement before each branch's habitat condition changes. Both no-harvest branches start at the current read-only projected fish reserve and present condition; City reports total recovered fish and closing fish in the water alongside closing condition and next-day potential. An initial 100-of-240 stock reaches 116 naturally versus 115.2 under the modeled retention after two observed intervals, while a nearly full stock stops at 240. This is a bounded conditional comparison, not actual future fish, harvest or catch, and it changes no live stock. Complete affected-reach ecology, rights and physical major works remain open. See waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2 first observed coastal reach: The incoming major-reservoir fish-bed comparison begins counting live low-flow and turbidity triggers only at the first complete recorded interval with positive natural nearby flow. Earlier ticks are labeled unobserved even when a later crossing proves the coast connected today. The optional condition replay starts from the stock's present condition at that first verified tick and applies the same later recorded forcing to natural and proposed branches. A fish bed with no verified flow in the retained window receives no dry-habitat or condition claim. This changes only recipient-scoped review, not live fish or water. Full ecological reach, future weather, catch and reservoir operation remain open. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2 route-coupled sediment comparison: Basin sediment version two retains up to twenty exact interval journeys: source mass and ordered basin transfers and exports with the water amount supporting each leg. Restore checks these against source custody, per-basin balances and the corresponding water routes; version-one saves migrate with an empty new journey window rather than invented history. The reservoir replay verifies natural water against each interval's opening bed, then verifies a retained sediment journey before showing a coupled proposal. Proposed sediment follows the proposed water crossings, changes the bed used for the next interval's water routing, and uses each branch's closing bed for land, building and marsh exposure. If any interval lacks a journey, verified water and exposure comparison remains available with the recorded natural bed path but no proposed sediment claim. This model holds recorded incoming soil fixed and models a bounded proportional reservoir sediment trap. Recipient-owned coastal fish beds see nearby natural/proposed sediment load and the live turbidity trigger only for complete water-and-sediment intervals; a connected, complete fish-bed window can now apply the live condition rule from present condition and show resulting recovery potential without moving fish. Future weather, catches, stock, source erosion and actual habitat recovery are not forecast. No live water, sediment or fish changes, and W2 ecology and impact blockers remain. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2 bounded coastal fish-bed discharge exposure: The exact natural-versus-proposed reservoir replay follows modeled basin ocean exits near each recipient-owned surveyed coastal fish stock, using the live shoal model's connected-ocean reach rule. A notice reports summed basin discharge, lower-basin-flow intervals and the largest reduction under storage/release terms. Basin-water version four additionally records each new direct ocean source in its twenty-interval route window. For intervals with that complete source record, the fish-bed comparison includes unchanged direct runoff in both branches and counts when total nearby flow falls below the live shoal model's one-water-unit low-flow trigger. Where the new exact basin-sediment journey covers the whole replay, the notice also compares route-following coastal sediment and the live turbidity trigger. Older rows preserve basin water evidence while direct flow or sediment history remains explicitly unknown. Only the recipient's founded/outpost stocks appear in a bounded sixteen-stock list; the read changes no fish, sediment or water. The source-soil input is fixed, a bounded proportional reservoir sediment trap is modeled, and later habitat response remains open: these include a conditional present-condition replay but are not future stock, catch or recovery forecasts; W2 ecological blockers remain. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2–W3 public coastal fish-bed holder evidence: The verified natural-versus-proposed replay now counts surveyed ocean fish beds whose nearby basin discharge changes in at least one retained interval. City names current charter holders and counts affected beds without publishing their coordinates, reserves or habitat condition. A named holder gains a distinct exact-notice reason, while an unchartered or unknown holder is counted as unresolved; either case adds a source review blocker. The recipient's private per-bed flow and habitat comparison remains the place to assess direction and severity. With a complete recorded sediment journey, a separate public count and exact-notice reason identify holders whose nearby basin sediment load changes, including sediment-only effects; incomplete older journeys make no sediment claim. Both screens exclude unregistered beds, future catches and distant ecology, and neither clears W2 impact proof, W3 rights or W4 construction. See the waterworks plan, player guide and technical reference.

Implemented, M8/W2 conditional marsh-food exposure: An exact major-reservoir notice now compares the natural and proposed waterline at each verified recorded interval for the recipient's currently healthy, unbuilt, undrained wetland hexes in registered basins. It applies the live village rule: at most two dry marsh sites, each supplying 40 wild-food capacity and eight daily regrowth. The incoming City notice shows both branches per interval and counts changed sites; another charter's sites and absolute basin receipts stay private. Today's habitat condition is held fixed, so this is a conditional foraging potential, not past harvest, a future habitat forecast or complete ecology. Unregistered healthy sites are counted as omitted. It changes no live food, habitat, basin water or approval status. Full aquatic, coastal, downstream and long-term ecological review remains open. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 filing-time impact evidence custody: A newly filed exact major-reservoir notice now records whether its natural-versus-proposed retained-window replay was actually verified at filing. If it was, a later replay failure suspends new answers and land/water grants even when the public party names and reason list happen to stay the same; restoring the exact evidence before expiry restores the review. Notices may still be filed as preliminary review without an exact window, and City explicitly says they lack filing-time impact proof. Version-seventeen migration marks older notices unknown rather than inventing historical verification. This strengthens consent currency but does not certify the whole affected reach, ecological safety, hydraulic engineering or W4 construction. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 notice currency: A major-reservoir notice now stays actionable only while its paid source report is still the current returned report and its named inland/coastal public party IDs and owner snapshots still match the current bounded reach review. A newer survey, changed charter exposure or changed public holder suspends further acknowledgment, objection and new land/water grants on the frozen revision. The source sees an amendment-required blocker and the recipient sees a suspended review; previously signed coverage stops counting toward live source blockers. A named party can still withdraw a recorded grant. Amending and filing a fresh notice re-snapshots the current evidence and parties. This closes a stale-party permission gap but does not prove the reach is complete: unassigned tenure, omitted coasts and channels, ecological effects, all-party ratification and physical major works remain open. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W3 bounded public review: Filing a new major-reservoir notice opens a fourteen-village-day window for that exact proposal revision, paid survey, capacity, bypass and release rule. City shows the deadline to source and named recipients. An answer, construction-easement grant or water-consent grant must arrive before the deadline; at the deadline those grants stop counting toward the source's signature blockers. A lawful recipient can still withdraw a recorded grant. A version-seven notice migrates as closed history without an invented deadline; the source must amend and file a fresh notice before new actions. This matches the existing fourteen-day charter-survey freshness scale as a provisional public-review rule. Complete affected-party identification, ecological evidence, ratification, funding and physical major works remain open. See the waterworks plan, player guide and technical reference.

Verified live M4/M5 preparation path: A command-only village journey now reaches the riding course without test-seeded stock or mocked knowledge. Its flax field and textile workshop spin, weave and make two saddles; physical iron, tools and bricks arrive by caravan, while a finite timber sale earns the coin payment for a purchased horse pair. The village keeps a food field and storehouse, uses fully staffed precision milling against timber-consuming instruction, and reuses compact-charter plots after the saddle and Scouting work is finished. A staffed pasture and enclosure support the identified horses; Drill, staffed-lodge Scouting, Field logistics and a staffed barracks make Mounted service preparation research and adoption reachable. Ordinary paid care and the separately reserved saddle and feed then complete one horse's three-day course. This verifies the fitted-horse precursor; home militia rider drill is now implemented above, and the first mounted patrol is now implemented above; wider cavalry remains planned. The implementation status records the regression evidence; the player guide describes the playable sequence.

Implemented, M4/M5 riding qualification precursor: Saddlery is an army research topic after Animal husbandry and Textile crafts. Research needs a staffed textile workshop, eight recorded village days of practice, actual timber, food, tools and iron, then separate adoption and a supplied specialist. With Textile crafts also active, two workshop workers can choose a one-day batch that consumes eight cloth, four timber, two iron and one tool for two whole saddles. Cloth has a real flax → yarn → cloth path; iron can be imported or smelted. Saddles occupy warehouse space, weigh two per item in physical cargo, enter production and warehouse history, and can be traded. Switching recipes competes with garments; a stopped Saddlery service pauses this recipe without erasing finished saddles. After funded Mounted service preparation research and adoption at a staffed barracks, a cared, mature, identified horse can enter a reviewed three-day riding course at its home enclosure. The course reserves one physical saddle, six extra feed and one trainer. Each completed day requires fresh ordinary paid horse care, an operational enclosure, active Animal husbandry and Mounted service preparation specialists and at least 80 condition. The first completed day fits and spends the saddle; each completed day spends two extra feed. Pauses preserve progress; cancellation or animal death returns only unused supplies when whole storage permits. A completed qualification and fitted saddle remain on that horse's saved identity. During training the horse cannot work a draft loan, relocate or breed. The separate home militia rider drill now trains riders; this horse course alone creates no military order or combat bonus, while the later mounted patrol above uses qualified animals. Existing draft horses remain identified animals, never warehouse saddle stock. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M3 selected supply path: City → Supply chains → Work backward from a goal now lets the owner choose one local recipe or funded project for each uncovered resource. The read-only path allocates current local warehouse stock once across its branches, honors the displayed protected food amount, expands whole proposed batches into their actual catalog inputs and totals requirements still uncovered by a selected path. A selected batch's excess output and co-products can cover later lines once in a separate hypothetical pool: two mixed-metalwork batches for five iron also propose two tools, so a goal needing three tools shows only one still uncovered. No proposed output enters current stock or becomes usable by an order. It separately flags a selected producer with no building, assignment or ready instance, or a project needing funding; zero material shortfall does not imply executable production. A physical import remains an alternative that requires delivery. Chosen sources can share workers, buildings and finite deposits, so the view is a material planning aid rather than a fundable quote. It changes no inventory, jobs, save data or authoritative command checks. Wider M0–M8 progression remains open. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M3/M5 mounted-supply trace correction: The local supply graph and troop goal list now include the existing two-person militia rider drill as a four-feed paid action. Its source note points to two fitted, cared horses and active husbandry and mounted-service specialists; a completed drill grants rider qualification but does not pay for a patrol. Horse and riding-course notes distinguish playable mounted patrols, corridor guards and convoy escorts from still-planned formations and campaigns. Route food and horse feed remain separately quoted by each live Defense order, so no generic expedition cost is invented in the static goal tree. See player guide and technical reference.

Implemented, M1/M5 military Region view: Defense & patrol can open an owner-only Military Region overlay using a current City revision. It marks the real militia, its separate field-supply team, an active surveyed camp and built local or linked-outpost watch posts at their current hexes. Dashed lines follow the remaining accepted outward or homeward routes of the unit and supply team; they are not movement guarantees or future combat outcomes. The legend names carried food, phase, blockers and post condition and can open each hex. The overlay yields to building placement and replaces other analytical shading. Scoped assistants, other owners and stale City data receive no private military view. This improves command awareness while mounted use, larger formations and wider army logistics remain open. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M5 cautious frontier patrol: The owner can review a cautious stance for the same paid, supplied militia patrol. The unit walks the surveyed corridor normally. At the final approach to a still occupied camp, it compares its current effective field strength with the observed camp strength; if weaker, it turns home from the preceding hex without a volley, contact or casualties. An equal or stronger force enters and resolves ordinary combat, including wounds and possible losses. The withdrawal records a defense report, leaves the camp and caravan threat intact, and consumes real march food and time. Fire, flood, food shortage and recall still apply. The optional stance is saved only for that trip and clears at home. This improves scouting and risk control; mounted troops and wider army progression remain planned. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M8/W3 source ratification feedback: An exact current reservoir notice now reconciles the source proposal's two signature blockers with its live rights ledgers. Construction easements are not signed clears only when every candidate construction cell is covered by source charter or a current exact recipient grant and none remains unassigned. Continuing water-use rights are not signed clears only when the source has separately signed and every named notice recipient has current communal consent to the exact release-rule terms. Partial grants, withdrawals and amended revisions keep the relevant blocker; legacy notices without a release rule cannot clear the water-right blocker. This is read-only progress feedback: unresolved affected reaches, customary or coastal users, occupied worksites, ecology and the unverified major-impact model still prevent W3 approval or W4 construction. See major waterworks plan, implementation status, player guide and technical reference.

Implemented, M1/M7 City construction capacity: A charter starts with one four-resident building crew slot. Active, supplied Construction planning provides two. A settlement that has actually earned City or regional-capital status and maintains active Regional institutions alongside Construction planning can coordinate a third. The slot adds no workers or materials: each simultaneous job still reserves four available residents and its own paid inputs. Losing a prerequisite or falling back to Town immediately queues the later running crew in ordinary FIFO order, preserving paid progress and remaining work; restoring the services or stage resumes it when labor is free. The City Workers and building review show the live slot count. No save schema changes. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, household relief timing: City People now links an active new stepwise household directly to Trade. The household-directed caravan quote shows its estimated arrival at the current shared hex under current roads beside the party's next saved movement check. This is a funding decision aid, not a promise that either party stays on that route. The physical meeting and food receipts below remain authoritative.

Implemented, M2/M3 paid household food rendezvous: Trade & transport can now direct a reviewed Provision the frontier waystation caravan toward one active new stepwise household already on an interior hex of that caravan's physical route. The two paid carriers bring finite home food and their own travel rations. Only when the caravan reaches the household's actual recorded hex before the party moves away does its remaining food cargo transfer to the household's current or return-ration compartment; no remote supply, free food, route detour or guaranteed meeting occurs. On a successful meeting the caravan turns home from that hex. If the meeting is missed, the remaining cargo continues toward the waystation under the ordinary relief rule; a later blocked route can hold the team until cleared or recalled. A known hazard beyond the current household hex does not prevent this targeted dispatch, but hazards up to the meeting point do. Carrier consumption can reduce what is handed over. The City caravan and People views and an owner briefing identify the result. Migration ledger v7 records food received and a job/time/hex/amount receipt alongside prior meal consumption so active save restoration and offline replay preserve the exact stock movement. Older active journeys gain zero received food and old transfers gain empty relief receipts. This bounded intervention does not heal or kill travelers; hunger-related illness and mortality remain open. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M1/M2/M3 waystation food recovery guidance: When an owned City is otherwise ready to admit its selected migration party, has no current journey, and the surveyed path is passable, City → People quotes the exact waystation food needed to fund the outward and reserved return legs. If the finite source is short, Regional overview → Decisions across the region raises one attention issue for that City and opens Trade & transport, where Provision the frontier waystation is an existing paid physical caravan offer. Committed food remains at home or in transit until the team reaches the depot; the issue clears when delivery restores eligibility, the route or policy changes, or a journey is already under way. This read-only warning never tops up source stock or dispatches a household. It connects the finite recovery charge below to an actionable resupply route. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M2/M3 finite waystation care after hungry household travel: A new stepwise household that recorded unmet travel meals and physically reaches the frontier waystation is served up to one meal per surviving resident from the waystation's actual food stock. A shortage serves only what exists, including zero; the return still completes. Unspent carried rations are credited before this charge. The completed household transfer records the arrival time, unmet meals, survivors, stock before service and food consumed; City → People shows the current source food, and a People briefing reports the charge. That stock is also the real source for later migration and can be replenished through existing physical trade. Migration ledger v6 added a neutral recovery: null to older receipts; v7 adds the separate rendezvous receipt above. This care does not heal, kill or reroute anyone; illness and mortality from hungry household travel remain open. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M2/M7 household travel exceptions: The owner-only Regional overview now treats an active stepwise household's current route blocker as an attention issue and less than one full party meal carried as an urgent issue. Both point to the owning City → People controls, name the party's present saved hex, and clear from the live overview when the route or food situation changes or the journey ends. Earlier unmet meals alone do not keep a warning active. The issue is a read-only view of the existing travel and food ledger; it does not reroute, resupply, recall, injure or grant the household. Incoming v3 households can still use the separately reviewed recall, while fire containment or water recession lets a held route resume. See implementation status, gameplay foundations, player guide and technical reference.

Implemented, M1/M2 household location context: Both Find household on map and Show household route on Region map focus a stepwise household's current recorded hex while retaining its owner City projection along that route. The first action keeps the route layer off; the second selects it. Where the physical hex lies in a different region, the map status labels that region a Household hex, while City management still names the household's own charter. Explicit City selection or movement off the route returns to ordinary region selection. No charter, travel, stock or authority changes. See implementation status, player guide and technical reference.

Implemented, M1/M2 household route on Region: The owner-only Household route overlay traces the current incoming, leaving or returning household's remaining saved path, marks its actual hex and current-leg endpoint, and shows the next check and blocker. City → People opens it directly through Show household route on Region map; the Region toggle is also available while that fresh journey belongs to the selected City or selected route cell. While inspecting a route hex outside the charter, the City projection remains tied to the owner, so another region's City cannot replace the route information. Choosing an unrelated region or City ends that inspection. The layer is suppressed during building placement and replaces other analytical overlays. A stale projection, another owner, scoped role, completed journey or disconnected client cannot present the route as live. It is a current travel plan, not a detour, destination guarantee or land right. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M2 household recall: An owner may review Recall household and close migration for a new incoming waystation household. The accepted command names that exact active journey, closes the village's migration policy, and reverses the household at its current saved route hex. People, workers, remaining outward food and reserved return food stay with the party until it physically reaches the waystation; consumed meals are not refunded. A household still on the source hex rejoins immediately. An unrelated, older, already returning or stale journey cannot be recalled, and a hazard can still delay the return. This is player control of a funded migration already in transit, not a rescue, supply delivery or detour. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, M2/M3 household migration route and hazard: Newly dispatched households keep an actual hex index on the already surveyed waystation–village route. Each village day a fed party can walk up to twelve adjacent passable hexes; a new journey with less than one full party meal available at the start of a check walks at most six. Both paces stop before recorded basin floodwater or fire, consume carried food while delayed, and resume on the same route after the hazard clears. A known hazardous route blocks automatic departure; City → People shows the reason before dispatch, then the current hex, blocker, food carried, unmet meals and extended arrival time. Find household on map selects the journey's present hex without granting a route or territory. New incoming journeys keep their return food reserved: when outward food can no longer cover another full day, the household turns around at its actual hex and walks back along the route. If still at the waystation, it rejoins immediately. Incoming households still need current housing, water, active food output and reserve at arrival; refusal also turns them back physically. People, workers and provisions remain conserved across return, death, save/reload and offline replay, with waystation recovery consumption now separately recorded. Migration ledger v7 preserves older active timed journeys and v4 stepwise journeys under their accepted rules; new journeys use the reserved-return rule and finite waystation care above. A delayed return can still exhaust food and record unmet meals, with no journey-specific death or general rescue order; the paid route rendezvous above is available when the party can meet a caravan. Rerouting and general flood forecasting remain open. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M0/M3/M6 basin exposure on two more physical journeys: A frontier survey quote now refuses a known flooded hex on its fixed walking route before reserving two residents, food, timber or tools. A funded team checks the next hex each movement step, holds at its actual position while its existing ration clock continues, and resumes after recorded water recedes. Floodwater covering the destination during on-site work turns the team homeward without completing a report or granting land; its return still obeys route exposure and physical unloading. A local adult choosing independent waystation life likewise cannot leave on a currently flooded walking route. If water rises after departure, that existing adult waits before the next wet hex, with ordinary personal meals/hunger continuing, and resumes when it dries. Neither path gains a detour or free supplies. See gameplay foundations, implementation status, player guide and technical reference.

Implemented, M1/M4 topic-to-institution navigation: Each topic in the six-branch City Technology paths has a direct Locate [topic] institution action. It opens Region with Institutions filtered to that topic's actual built matching sites. The Region selector can switch topics or show all sites. For a selected topic, marker color and text use that topic's exact current candidate, staffing, work, condition and recorded flood result, so a building serving another topic cannot appear usable for this one. An empty filter names the required institution and sends the player back to building eligibility; it does not construct a missing site or grant learning/adoption. The owner-only, same-revision City boundary and settlement-wide service rule remain. See gameplay foundations, implementation status, interface behavior, player guide and technical reference.

Implemented, founding save continuity: The four existing founder-household adults begin their lifecycle at the exact village charter issuance time, even when the server clock moves between the charter and continuity calls. On load, a narrow repair accepts an older save where all four founding lifecycle timestamps share the same drift of at most one minute after issuance and their recorded years still agree with the charter; it sets those timestamps to the charter time before normal household validation. This preserves the existing people, goods, office and elapsed village-day state. Other malformed household dates remain invalid. Restart durability is part of the playable founding path; see the implementation status, player guide and technical reference.

Implemented, M1/M4 institution map view: Region can show the selected owner's actual buildings that serve as research or technique institutions. The server derives each site from the same institution-candidate rules that decide whether a topic has support, including stage, condition, work, required staffing and recorded flooding. A marker distinguishes a usable institution supporting active techniques, a usable institution without an active linked program, and an unavailable building; the text list names its current blocker and opens its hex. The view reads the current authorized owner City at the selected settlement and revision, is suppressed during construction preview, and is mutually exclusive with Managed land, Staffing and Resource sites. Institution service in this simulation is settlement-wide, not a geometric radius: the marker locates a source but does not claim nearby building coverage, teach a topic, adopt it, reserve supplies or guarantee ongoing upkeep. Broader service systems and spatial reach remain open. See the gameplay foundations plan, implementation status, player guide and technical reference.

The six-branch Technology paths card can open this map view directly from Show institutions on Region map; the player can also toggle it within Region.

Implemented, M3/M6/M8 basin-exposure transport rules: Recorded basin floodwater now affects paid livestock collection, livestock relocation, leased extraction crews and regional road crews. A quote refuses a route whose required hex is already flooded before workers, stock or rent are committed. An active team checks its next hex on every step and waits at its real current hex while paid travel food, and animal feed when animals are aboard, continue to follow their existing consumption rules. A flooded livestock enclosure cannot accept animals; if it is the receiving enclosure, relocation may turn back instead of waiting for admission. The quarry site list identifies a flooded extraction site, which withdraws its crew before another tool or deposit unit is spent; floodwater at a road work edge stops work and returns unused materials. A built road edge touching floodwater temporarily grants no travel improvement and becomes usable again when the exposure clears, subject to its other condition and service rules. These checks use the current recorded basin-exposure state and introduce no independent flood flag, teleport, refund or save format. They cover these four civilian routes; other travel modes and a general flood response remain separate work. See the gameplay foundations plan, implementation status, player guide and technical reference.

Implemented, M1/M3 resource-site map view: City → Supply chains can locate one chosen material in Region using the current authorized owner City projection. The view marks this settlement's actual warehouse anchor when stock is positive, buildings assigned to recipes that produce or use the resource, and physical cargo or reserved exchange goods at their current hex inside the region. An owned carrying team's remaining planned path is traced only until it leaves the selected region; the current hex remains distinct from future route cells and route interruption can change the plan. Its text legend separates ready producer output from blocked or assigned use, shows current warehouse and per-cycle demand totals, and links each marker to Inspect hex. The map can switch resources without placing an order. It never includes another charter's private recipe detail or route, remote cargo as local stock, catalog-only workshops as built sites, or hidden deposits. City projection and overview revision must match the map-selected settlement; a stale or scoped City hides the layer. It is an alternative to Managed land and Staffing, and yields to construction preview. This is a live bottleneck locator and a bounded transport trace, not a regional supply forecast or combined production plan; household/service and one-time demand remain in Supply chains. See implementation status, interface behavior, player guide and technical reference.

Implemented, M1 staffing map overlay: Region can show the selected owner's current staffed worksites at their actual building anchors. Each marker shows assigned workers over capacity; the legend distinguishes empty, partial, full and inactive structures and offers Inspect hex links. The browser derives these markers only from a fresh, authorized owner City projection matching the selected settlement and world revision. Scoped resident and production views, another charter, disconnect and stale responses cannot present this private staffing layer. It is read-only and does not imply that a fully staffed producer has inputs, sound condition, active services, storage, or an area of service. Managed land, Staffing and Resource sites are mutually exclusive analytical views; the construction-site preview temporarily suppresses the chosen view and restores it when closed. Service reach, complete transport flow and other M1 overlays remain open. See implementation status, interface behavior, player guide and technical reference.

Implemented, M1 construction site comparison: when an owner previews a known building, the server evaluates that definition and orientation at each recorded plot of the selected mutable region. It uses the same constructionRequirements blockers and construction-plan quote as acceptance, distinguishing immediately fundable anchors, anchors whose footprint/terrain/rights are suitable but another requirement remains, and spatially blocked anchors. The Region map shades and labels these candidates, while the selected footprint retains its per-hex reasons. The managed-site list groups ready, conditional and blocked anchors; its disclosures and inspected-hex focus survive a fresh quote. The selected-site panel also exposes the current construction inputs, quoted work only when fundable, capacity, baseline full-staff production and each authoritative blocker remedy. It does not claim future output without workers, supply, service or storage. Founding-only structures and fixed charter prototypes return one explicit unavailable reason without coloring false candidate anchors; a pasture awaiting Animal husbandry can still display conditional sites. This is a current, read-only comparison: no land, survey, deposit knowledge, resources, workers or construction queue place is granted. A newer world revision refreshes it; actual acceptance rechecks authority, stock and site. Any selected analytical overlay temporarily yields to the placement comparison and returns on cancellation. Other analytical overlays, service reach and broader M0–M8 work remain open. See implementation status, interface behavior and player guide.

Authorized map-header stock and communal treasury — September 25, 2026

Implemented, M1 partial: The shared World header now uses the same current authorized City as its overlay for stock and population figures; the map's selected-hex inventory no longer overwrites that summary. The food and population labels name the City supplying those figures, so viewing another player's mapped charter does not imply its private stores are in the header. A charter shows its current spendable communal coin balance only after a matching live owner City revision arrives, with reserved and carried payments excluded. Shared development says coins are not modelled; absent, refreshing, offline, ended-resident and restricted views show no coin balance. Restricted and no-city transitions also clear earlier stock figures instead of leaving private values visible. The selected-hex inventory remains separately scoped to the inspected land. This is a presentation and privacy correction with no treasury or save mutation. See the gameplay foundations plan, implementation status, player guide and technical reference.

Recorded managed land on the Region map — September 25, 2026

Implemented, M1 partial: Region now has an optional Managed land analytical overlay. It shades the exact public mutable-region cells for charters the connected player can manage, other communities' charters, and shared development in separately labeled colors. Unshaded cells have no recorded managed region in the current overview; this does not claim unowned territory, a survey, influence or a future building right. The existing selected-settlement dashed perimeter stays visible above the shading, and buildings, routes and crews draw over it. The toggle changes local presentation only and redraws when a newer overview arrives; it issues no order or rights change. Definition-specific construction comparison is available during placement preview; broader service reach and other analytical overlays remain open. See the gameplay foundations plan, implementation status, player guide and technical reference.

Food consequence timing and caravan count — September 25, 2026

Implemented, M1 partial: When the selected owner's community has a negative potential daily food balance, its priority note now states the deficit, the first approximate needs-check number when food stock alone could fall below one full day's current demand, and the next recorded check time. This respects the simulation order in which meals are taken before new production. It is conditional on current staffing and potential output; production blocks can bring risk sooner, while later production changes, foraging, grain fallback or cargo can change it. The pulse's Waystation caravans figure now counts only actual waystation teams, excluding peer-trade caravans shown under Trade and in the inbound-cargo disclosure. These are read-only explanations from the current authorized City projection. See the gameplay foundations plan, implementation status, player guide and technical reference.

Recurring cargo in the selected City — September 25, 2026

Implemented, M1 partial: The owner City's bounded work and inbound-cargo disclosure now includes current physically carried material on recurring trade rounds, in addition to bilateral trade, waystation returns and outpost supply. A recurring round appears only while its cargo is moving toward the viewed community; its next check and blocker come from that round's active journey. The waystation row excludes peer-trade caravans, whose physical jobs already appear in the bilateral or recurring trade projections, so the same load is counted once. Outpost supply includes governor- and mandate-funded journeys because those use the same supply-role journey record. The display remains a short current-custody summary, not a delivery forecast or complete monetary-transfer view; carried coin payments and other route types remain in their full City sections. See the gameplay foundations plan, implementation status, player guide and technical reference.

Scale-aware selected City and settlement footprint — September 25, 2026

Implemented, M1 partial: Global now keeps the selected accessible settlement card compact by default: identity, available workers, stocked food and direct Open City, Locate on map and Show city details controls. An explicit expansion shows the full owner pulse, priorities, work and direct actions on the globe; entering Region or Hex shows the full card automatically. Region outlines the map-selected settlement's actual mutable-region cells with a gold dashed boundary and labels that meaning in the map context. Locate on map centers the card's community and enters Region, so a fallback City card never implies an unrelated selected hex is its land. The line describes known settlement/charter cells, not political influence or ownership outside the recorded region. No rights, map coordinates or simulation state change. Wider spatial analysis and connected-site highlighting remain open; see the gameplay foundations plan, implementation status, player guide and technical reference.

Dated communal treasury pulse — September 25, 2026

Implemented, M1 partial: A chartered settlement now retains an eight-check window of its spendable communal coin balance at completed village-day checks. New charters start with a zero-coin opening; an older save migrates with its current balance as the opening and no invented earlier trend. The owner City overlay shows current spendable coins and the change at the latest completed balance check, or says trend pending before a day is recorded. Trade explains the dated comparison and separates currently spendable coins from reserved or carried payments. The same pulse shows current used/capacity storage and links to City Overview. The first post-migration comparison may cover less than a full day. This is a historical check-to-check change, not a forecast or a full transaction ledger; coins can move between checks. The history remains private to the owner City projection. Broader budget and spatial overlays remain open. See the gameplay foundations plan, implementation status, player guide and technical reference.

Actionable city pulse and bounded physical work — September 25, 2026

Implemented, M1 partial: Each owner-side number in the selected-city pulse now opens the matching live City section: workers, supply, people, production, Orders or Trade. The overlay also shows a compact, expandable count and up to four details for active local building/land jobs and physically carried cargo approaching this community on outpost supply, returning waystation, bilateral trade or recurring trade routes. It shows the carried material and any route blocker or next scheduled check, not a promised arrival or warehouse stock. The list uses only the current, authorized City revision and does not enter resident or production-steward views. It neither changes jobs nor duplicates route accounting. Complete spatial overlays and other journey types remain open M1/M7 integration; see the gameplay foundations plan, implementation status, player guide and technical reference.

City-scoped starting overlay and job badge — September 25, 2026

Implemented, M1 partial: The Orders badge now counts only jobs in the currently selected, accessible City projection; the earlier world-wide activeJobs total is no longer presented as this city's queue. When no current City detail is available, the badge stays unknown and the sidebar says it is refreshing. For an owner with a matching live City revision, the map overlay uses that projection to show residents versus permanent housing, stocked food days without production at current demand, current potential food balance, local job and waystation-caravan counts, and three existing actionable blocker explanations. It links directly to Buildings, Workers, Expansion and Orders. A disconnected or stale City detail never presents these figures as live. Shared development explicitly says when food and housing simulation is not modelled, and restricted roles retain their scoped panels. This advances the gameplay foundations plan's starting overlay; fuller incoming-delivery/footprint views remain M1 work. See the implementation status, player guide and technical reference.

Live map shell and City handoff — September 25, 2026

Implemented, M1 partial: The shared map status, now available through •••, identifies the connected player and actual continuity mode from the server snapshot, shows connection state, and names a selected city only when that city is in the visible settlement projection. Before synchronization, the overview and Orders sidebar display waiting text instead of sample weather, influence, shortages, activity, stock and jobs. When no accessible city is selected, City and the sidebar show a neutral entry state; changing to a resident or restricted production role clears earlier private job rows. At this earlier handoff stage the top-level concept destinations were sample rehearsals; the five gameplay shortcuts now open live City sections as described above. The authoritative City still owns order reviews and writes. This closes a misleading prototype display in the starting journey, not the remaining M1 live-screen or M8 world-simulation gates. See the implementation status, player guide and technical reference.

Revision-bound reservoir release counterrequests — September 25, 2026

Implemented, M8/W3 partial: A named human recipient who objects to downstream flow may request the other supported opening-storage release rate on the exact current notice: 50% against a 25% notice, or 25% against a 50% notice. A flood-exposure objection to a 50% notice may instead request 25%. An earlier legacy notice without a release rule remains in history; the source must amend and file a bounded notice before a new request. The source and recipient see that request beside the objection and frozen notice terms. It grants no water, consent, veto or amendment by itself; the source may amend, re-notice, and obtain a fresh answer and separate water consent. The prior request remains on its superseded notice. The version-seven ledger migration adds requestedReleasePercent: null to older responses without inventing a counterrequest; restore rejects unsupported or same-rate requests and flood requests outside the exact 50% to 25% scope. New notices use the provisional fourteen-village-day review window; broader flow and ecology evidence remains open under the waterworks plan. Full affected reach, all-party W3 ratification and W4 construction remain open. See the waterworks plan, implementation status, player guide and technical reference.

Alternative controlled-release terms after downstream review — September 25, 2026

Implemented, M8/W2–W3 partial: The source can now choose 25% or 50% of opening held water for release at each recorded interval while with a separately selected 25% or 50% minimum bypass of new arrivals. City compares either choice against the same verified no-release window before drafting. A downstream-flow objection can lead to an amendment with a higher release share; that amendment changes the exact proposal revision, leaves the old objection and terms in history, and requires fresh notice, acknowledgment and water consent. A recipient sees the selected percentage, its own replayed land, well, building and basin-flow differences, and the exact terms it signs. Old version-five 25% records remain valid without migration, and legacy version-four notices still lack a release rule until amendment. More release changes timing and retained storage in this bounded model; it does not prove downstream delivery, settle all affected rights or authorize construction. See the waterworks plan, implementation status, player guide and technical reference.

Stated grounds on major-reservoir objections — September 25, 2026

Implemented, M8/W3 partial: A named human recipient of a current major-reservoir notice may acknowledge it or object with one recorded ground: downstream flow, flood exposure, existing land use or an evidence gap. City places these choices beside that recipient's exact-term impact review and shows the selected ground to both recipient and source. An objection is a dated public review record for that revision; it does not automatically veto or approve work, grant land or water rights, or settle the concern. The source can amend and re-notice; the old answer remains visible as superseded history. Version-six ledger migration preserves older objections with “ground not recorded” rather than inventing a concern. Full affected-party identification, negotiation, W3 ratification and W4 construction remain open. See the major-waterworks plan, implementation status, player guide and technical reference.

Recipient basin-flow changes on major-reservoir notices — September 25, 2026

Implemented, M8/W2–W3 partial: A current named recipient can now inspect the proposed change in water arrivals and latest closing pool for registered basin catchments intersecting its current charter. The same exact-route-verified recorded-window replay uses that notice's frozen capacity, bypass and release rule. Arrivals are summed within each basin over the window; closing change is from the last verified tick. City lists changed basins first, at most sixteen, and states when more intersecting basins are omitted. Only signed differences from the natural branch leave the recipient projection; it also identifies the largest per-interval arrival reduction and increase, their ticks and how many ticks were reduced, so a later release cannot hide an earlier shortfall behind the net total. Absolute natural or proposed foreign basin balances remain private. Separate basin rows are not added into a fictional regional water supply. An unregistered or unresolved downstream reach remains unknown, and this comparison grants no household or irrigation allocation, all-party right, funding or operation. See the major-waterworks plan, implementation status, player guide and technical reference.

Current-building condition under recorded reservoir scenarios — September 25, 2026

Implemented, M8/W2 partial: The exactly verified natural, no-release and controlled-release basin replays now apply the existing depth-based flood-damage rate to separate copies of the viewing community's standing building conditions. Each branch begins from the same current condition, spends no more than remains, and stops after a building reaches zero. City → Land & water shows capped condition spent and counts of that community's buildings that would reach ruin across the recorded window, plus per-tick loss. This is a conditional scenario: it assumes current buildings existed at the start of old recorded weather, no repair or other hazard occurred, and today’s footprint and sediment bed stayed fixed. It never changes real condition, staffing, inventory, jobs or flood-damage receipts. The earlier uncapped rate points remain separate pressure evidence. This comparison is not historical damage or a future flood guarantee; wider W2 effects and W3/W4 rights, funding, service and recovery remain open. See the major-waterworks plan, implementation status, player guide and technical reference.

Recipient land, well and building notice review — September 25, 2026

Implemented, M8/W2–W3 partial: A named recipient of a current major-reservoir notice now sees a read-only comparison of its own changed charter land, working village-center and outpost-camp well connections, and current-building condition scenario under recorded natural water and that notice's exact proposed terms. Version-five notices use their exact selected 25% or 50% opening-storage release; legacy notices use their original no-release scope. The result shows wet connection-intervals, capped condition loss and ruin, and distinct own charter hexes newly covered or dry under recorded terms, with per-tick counts and map links to at most 64 cells in each direction. If exact recorded routes cannot be replayed, City gives a reason instead of an impact figure. Historical superseded notices do not recompute current effects. This puts concrete local service evidence beside acknowledgment, easement and water-consent controls without exposing another community's private water or authorizing construction. The comparison still uses today's structures under past forcing and does not establish future water capacity, full affected parties or W3/W4 approval. See the major-waterworks plan, implementation status, player guide and technical reference.

Recorded-window well-connection exposure — September 25, 2026

Implemented, M8/W2 partial: The verified natural, no-release and controlled-release comparisons now count when recorded-window basin levels would cover today's usable village-center or outpost-camp well connection. Only an operational center or camp in at least 50 condition qualifies, matching the live local-source eligibility rule; the current footprint is checked against each branch's closing basin waterline. City → Land & water shows natural and proposed wet connection-intervals, distinct current connections whose wet status changes, and per-tick counts. In a controlled three-tick basin, no-release retention leaves one current connection dry across all three intervals, while the fixed release re-covers it in two. This is read-only site exposure under recorded forcing. It does not compute historical household water, alternate conduit supply, future reliable service, condition loss or full affected-party approval. The W2 impact and W3–W4 rights, funding and operation gates remain open. See the major-waterworks plan, implementation status, player guide and technical reference.

Exact-term major-waterworks water consent — September 25, 2026

Version-five release terms: New reservoir drafts and notices specify both a selected 25% or 50% bypass of each interval's source arrival and a selected release of 25% or 50% of opening stored water per interval, rounded up. A named recipient's new water consent covers those exact terms and the chosen capacity. Older version-four notices and signatures remain capacity-and-bypass-only history; the source must explicitly amend and re-notice before asking for release-inclusive consent. This extends reviewable terms, not live operation or all-party approval.

Implemented, M8/W3 partial: A named human recipient of a current major-reservoir notice may, after acknowledging it, separately grant or withdraw communal consent to that revision's exact capacity, selected 25% or 50% minimum source-arrival bypass and selected 25% or 50% opening-storage release. This is distinct from acknowledgment and construction-cell easement. Only the recipient's current lawful public authority can act; the source cannot sign for another community or an NPC holder. Each action is dated, bounded, revision-scoped and validated on restore. Amendment makes old actions historical; a changed holder prevents an old grant from counting as present consent. City shows recipient controls and the source's named signed/unsigned parties. Version four introduced the consent ledger without invented signatures on older saves; version five binds new consent to the release rule while preserving older notices' narrower scope. Paid two-community tests cover authentication, withdrawal, regrant, amendment, legacy migration, corruption rejection and conserved stock/water. A signature from a named recipient still does not establish the complete affected-party envelope, ecological/flood proof, all-party rights, funding or physical works. water-use-rights-unsigned and the other W2–W4 blockers remain until those gates are satisfied. See the major-waterworks plan, implementation status, player guide and technical reference.

Reservoir scenario land-waterline comparison — September 25, 2026

Implemented, M8/W2 partial: Both verified recorded-window reservoir scenarios now apply the existing basin exposure rule to their natural and proposed closing water at each tick. For each changed registered basin, the comparison uses current generated bed heights and sediment displacement to identify land hexes newly covered or dry relative to the exactly replayed natural branch. City → Land & water shows per-tick counts, distinct changed-hex counts across the window and map links to up to 64 exact cells in each direction; more cells are explicitly omitted from the display. In a controlled three-tick enclosed basin, retention leaves two land cells dry, while a later release restores their modelled inundation. No live flood exposure or damage is rewritten. The comparison covers current terrain and registered basin catchments under recorded forcing, not historic damage, building repair, future floods, habitat, unregistered recipients or guaranteed protection. Full W2 affected-reach/effect review, W3 rights and W4 operation remain open. See the major-waterworks plan, implementation status, player guide and technical reference.

The same changed-cell sets are now intersected with current public charter regions and counted against uncleared structure footprints, paid land improvements and active non-compost land projects. City names each current charter holder with newly covered/dry cell counts, keeps unassigned cells explicit, and reports aggregate current-use counts without disclosing inventories or claiming a structure would be repaired or damaged. This is a present-day review aid for affected-party notice and siting, not a historical tenure record or substitute for consent.

The same verified intervals now compare standing-building flood-rate pressure for today's operational or damaged structure footprints. Each scenario computes the deepest modelled wet footprint cell and applies the live one-to-ten-point depth rate without changing condition. City shows exposed structure-intervals, summed rate points, the number of distinct structures whose rate changes and per-tick totals. A present structure may not have existed during recorded weather; repairs, ruin thresholds, occupation and work are not replayed. These rate points are not actual or predicted condition lost and do not clear the impact gate.

Recorded-window controlled reservoir release — September 25, 2026

Implemented, M8/W2 partial: City compares a read-only controlled-release scenario with the no-release retained-window branch below. At each recorded interval it requests the selected 25% or 50% of opening held water, rounded up. In the older unselected-outlet scenario that hypothetical water enters the source basin; after an exact corridor is selected, receiver head limits the actual release and the hypothetical discharge enters the selected distinct receiving basin. New runoff can refill finite storage only after the selected 25% or 50% source-arrival bypass. The release then takes bounded basin losses, reciprocal routes and exact crossings. The unchanged natural branch must first reproduce each saved basin balance and route; a mismatch with current geometry or sediment withholds both scenarios. City shows requested, released and unmet water, newly captured and closing storage, source exits and net changed crossings. This makes dry-interval discharge and its competing storage cost visible without moving real water. It is illustrative history, not a ratified operating schedule, usable irrigation, future-weather prediction or full flood/ecology assessment. Complete affected reach and effects, W3 rights and W4 paid construction and operation remain open; major-impact-model-unverified still blocks approval. See the major-waterworks plan, implementation status, player guide and technical reference.

Verified retained-window reservoir comparison — September 25, 2026

Implemented, M8/W2 partial: City → Land & water now offers Verified recorded-window retention comparison for up to twenty recent, exact water-route intervals after a monitored source basin starts recording. The unchanged branch begins at the first retained opening balance, applies each interval's actual local runoff, and must reproduce every registered basin's saved water balance and exact transfers/exports before the next tick is trusted. A different current sediment bed, missing source history or any route/balance mismatch stops the comparison with an explicit reason. The proposed branch uses the same runoff sequence and natural basin rules but starts an empty off-channel store, intercepts no more than selected capacity with the selected 25% or 50% minimum source-arrival bypass each interval, and carries the water it captured into later intervals. Every branch balances starting water, runoff, losses, exports and closing natural plus proposed storage. City shows per-tick arrival, capture, retained water, source exits and changed-crossing counts, plus basin IDs affected during the window and net crossing amounts. The source's real ledger, materials and rights remain unchanged. Old version-one/two saves start their exact route window at migration, so the comparison never invents earlier weather or routes; a twenty-tick cap bounds work. This is a historical, no-release design scenario, not an operating reservoir, forecast, irrigation or flood promise, ecological assessment or complete affected-party envelope. The major-impact-model-unverified blocker remains, as do W3 permissions and W4 construction/operation. See the major-waterworks plan, implementation status, player guide and technical reference.

Verified one-interval major-reservoir comparison — September 25, 2026

Implemented, M8/W2 partial: A source owner with a returned monitored basin can now open Verified one-interval retention comparison in City → Land & water. The read-only model takes the latest conserved basin samples and exact route row, reconstructs every registered basin's opening water and local runoff, and reruns natural losses, reciprocal/higher-saddle transfers and ocean/unresolved exports. It publishes a comparison only if that unchanged branch exactly reproduces every recorded basin balance and crossing. The proposed branch begins an empty off-channel store, intercepts at most the selected capacity from water arriving at the source basin, passes at least 25% of cumulative interval arrival into the natural basin, and routes the rest through the same bounded physics. City names changed exact crossings and affected basin IDs, and discloses when routing remains unsettled after its pass limit. Both branches conserve initial water plus recorded runoff against final natural storage, losses, exports and hypothetical capture; neither edits the world. If changed sediment or incomplete evidence prevents exact natural replay, the card gives the reason rather than an impact figure. This advances an engineered-versus-natural physical comparison for one observed forcing interval. It does not model a release schedule, useful irrigation, habitat or household effects, all future weather, complete affected reaches, construction corridors, permissions, upkeep or failure. The major-impact-model-unverified blocker remains; W3/W4 are still open. See the major-waterworks plan, implementation status, player guide and technical reference.

Recorded major-reservoir source exits — September 25, 2026

Implemented, M8/W2 partial: A paid monitored source-basin review now traces its actual cumulative outgoing water to each registered receiving basin and to exact ocean or unresolved boundary crossings. City → Land & water → Major reservoir proposal exposes these under Recorded source-boundary destinations, both for the selected capacity and for an active proposal's current review. The list comes from conserved basin transfer and export receipts, names crossing hexes where recorded, and excludes incoming water. Old migrated ocean or unresolved exports remain separate unlocated historical totals; they are never assigned a guessed crossing. These cumulative exits run from first basin registration through the current water tick, whereas the adjacent retention bound covers only the most recent twenty intervals. They establish where this source has actually discharged within the bounded model, not how a reservoir would split its hypothetical passed water, what happened beyond unresolved or ocean boundaries, or a downstream benefit. Review changes no water, rights or project terms. Complete affected reach, ecological counterfactual, W3 permissions and W4 construction/operation remain open. See the major-waterworks plan, implementation status, player guide and technical reference.

Implemented next, still W2 partial: The basin ledger now records an exact, bounded route row for each of its last twenty new water intervals, aggregating directed receiving-basin transfers and ocean/unresolved crossing amounts. Every restored row must match that tick's conserved node incoming/outgoing/export samples. City nests Recent exact route receipts under the cumulative source destinations, so a source owner can see when water used each known path rather than infer timing from lifetime totals. Version-one and version-two basin saves migrate to version three with an empty route window beginning at the migration tick; neither cumulative transfers nor older exports are replayed into made-up intervals. This supplies temporal provenance for both verified replay branches above, but still has no release schedule or authority to change live flow.

Compare paid monitored reservoir source plots — September 25, 2026

Implemented, M8/W2 and W3 preparation: City → Land & water now compares up to sixteen installed runoff-station plots in the current charter before a reservoir draft is recorded. Each entry recomputes the largest allowed capacity supported by its own returned paid report, source basin, capacity-screen land count, built-site and land-work conflicts and remaining approval blockers. An installed station whose current report has not returned or whose geometry is unsuitable shows its actual reason instead of a usable candidate. The selected plot appears first; choosing Inspect source plot focuses that canonical hex for the ordinary City plot review. A source can compare two paid plots that drain to the same conserved basin, but their stations do not create separate water or approval. Further monitored sites beyond the bounded list remain available for individual map inspection. This is a private, read-only design comparison, not a project amendment, alternative-region survey grant, source-right signature or permission to build. Complete W2 impacts and W3/W4 rights and operation remain open. See the major-waterworks plan, implementation status, player guide and technical reference.

Paid land works remain visible in major-reservoir site review — September 25, 2026

Implemented, M8/W2 and W3 preparation: The exact source, pool and spill-crossing construction cells are now checked against current paid land improvements as well as built structures. Prepared soil, irrigation, headworks, terraces, drainage and roads are named by holder and plot; an active non-compost land job is also named when its site or outlet intersects the candidate. A survey without an improvement is not a conflict. Any current improvement or job adds a separate candidate-land-works-unresolved approval blocker. On a paid monitored candidate, a normal funded small-irrigation job at a spill crossing appears during work, persists as completed channels after construction and disappears from this land-work screen only when those channels are retired. The operational food plot on the same crossing remains a separate built-site blocker. City shows source and affected-recipient land uses without cancelling paid work, refunding goods, removing a structure, granting rights or moving water. Project design, compensation or decommissioning of these uses must be resolved before major construction; complete W2 impacts and W3/W4 rights and operation remain open. See the major-waterworks plan, implementation status, player guide and technical reference.

Recorded inflow bounds proposed reservoir retention — September 25, 2026

Implemented, M8/W2 and W3 preparation: A source owner with a returned runoff station can compare a major-reservoir capacity with the basin ledger's last twenty actual interval inflows. A read-only scenario begins empty, passes at least the proposed 25% or 50% environmental bypass in every interval, captures no more than remaining capacity, and passes the rest when full. Each row reconciles opening held water plus recorded inflow to closing held water plus water passed; it makes no releases or losses and never changes the live basin balance. The same rows separately preserve the observed natural-basin balance: actual opening water and arrivals equal closing water, registered downstream transfers, ocean/unresolved exits and evaporation/infiltration. City → Land & water shows both accounts for the measured window, or explains that no interval has yet been recorded. The observed exits are a current-service reference, not the difference caused by building the candidate: existing natural pool storage, sediment, missing sources, planned release/irrigation demand, wider recipients, ecological thresholds and legal water rights remain unresolved. The hypothetical capture is an upper bound, cannot authorize water use or work, and is not a construction-induced flow forecast. See the major-waterworks plan, implementation status, player guide and technical reference.

Named holders may grant exact candidate-cell easements — September 25, 2026

Implemented, M8/W3 partial: After a current major-reservoir notice is acknowledged, a named lawful human holder may separately grant a construction easement over every listed candidate construction cell now in its own charter: source observation plot, candidate pool footprint and spill-crossing endpoints. Filing notice now includes current public holders of these exact cells even when their crossing stays dry in both the storage screen and recorded flow replay; a dry construction holder can therefore review and sign rather than being absent from the notice. The exact cell list and proposal revision are reviewed before signature. The same community can withdraw after filing and regrant only while the current notice window remains open, within a bounded action history; a material amendment makes the earlier grant historical rather than carrying it into new terms. A communal grant survives a character change while its charter still holds the same cells, but current coverage is rechecked if title changes. The version-three proposal ledger migrates version-one drafts and version-two notices without inventing signatures. City → Land & water shows missing current holders, unassigned construction cells and recipient grant/withdrawal actions. The source cannot sign for another holder or an NPC. Even complete candidate-cell coverage grants no continuing water use, intake corridor, impact approval, funding, operation or right to build; W2 complete reach and W3 all-party rights remain open. See the major-waterworks plan, implementation status, player guide and technical reference.

Major reservoir capacity screening exposes footprint gaps — September 25, 2026

Implemented, M8/W2 and W3 preparation: The major-reservoir review compares each selectable capacity with the bounded basin storage model's dry-bed waterline. It names the land hexes below that level, natural feature hexes, any modelled wet hexes outside the candidate construction footprint, current public communities with screened land and screened cells still outside charters. It also intersects that dry-bed capacity screen with current recorded basin exposure, using the same floodwater rule that actually interrupts buildings and travel. The review separates screened land dry now from currently exposed land above the selected capacity line; a new water boundary can change this live comparison without changing a frozen proposal revision. Separately, exact candidate construction cells (source, pool and spill-crossing endpoints) are checked against every uncleared structure footprint, including ruins and unfinished works. Occupied sites are named with their current holder and block approval until the built use is resolved; a land easement does not clear or relocate it. A paid candidate demonstrates a real operational food plot at a spill crossing. A footprint mismatch remains another approval blocker. City → Land & water updates the comparison when capacity, real basin water or standing site use changes and shows a named recipient its current charter intersection and occupied construction cells. The calculation reads immutable terrain, current recorded exposure, public built sites and charter geometry; it does not fill a basin, create water, move goods, clear a structure or promise flood reduction. This is a present-state reference beside a local design-capacity screen, not a forecast of construction-caused flooding or drying: present sediment, engineered releases, downstream users, ecology, easements and complete affected reach still need W2/W3 evidence before consent or construction. The major-waterworks plan, implementation status, player guide and technical reference retain the open gates.

Major reservoir notices expose exact terms without granting consent — September 25, 2026

Implemented, M8/W3 partial: The lawful source owner can file one public notice for the current version of a major-reservoir draft. Each notice freezes its own proposal terms, paid survey and presently identified inland and nearby coastal communities, including NPC holders, while keeping unassigned ground, incomplete reaches, features and unsigned rights visible. A named human community can acknowledge receipt or object once with a stated ground under its own current authority. The response is evidence of review, never itself a construction easement or water-use consent; an NPC holder cannot be silently signed by the source. A material amendment increments the proposal revision, retains earlier notices and responses as history, and requires new notice and responses. Withdrawal ends the current notice without deleting history; recipients can still inspect their superseded notices. Version-one drafts migrate through the current version-seven ledger with no invented notice. City → Land & water shows both outgoing and incoming notices. Filing or responding transfers no materials or water and cannot start work. The separate candidate-cell easement action above follows an acknowledgment; complete W2 effects, all-party W3 ratification/funding and W4 operation remain open. See the major-waterworks plan, implementation status, player guide and technical reference.

Major reservoir terms can be drafted from paid basin evidence — September 25, 2026

Implemented, M8/W3 preparation: A lawful community with active Hydraulic engineering, a returned watershed report and an installed runoff station can record an exact, versioned major-reservoir draft. The source observation, basin terminal, candidate footprint, spill crossings, proposed ten/twenty-five/fifty-unit capacity and selected 25% or 50% environmental bypass are stored together; the selected capacity cannot exceed the generated candidate saddle volume. City → Land & water presents current public candidate parties, unassigned terrain, natural features and explicit open reach, easement, water-use and impact-model blockers before the player confirms. One active draft per community can be amended with a new revision or withdrawn; an older paid report stays pinned when a later survey returns. Old saves migrate to an empty marked ledger. Drafting alone does not notify a recipient; the separate notice action above does. Neither action moves water, spends materials, changes land, gathers legal signatures or grants construction approval. Unknown downstream/ocean users and incomplete W2 effects still block W3 ratification and W4 operation. See the major-waterworks plan, implementation status, player guide and technical reference.

Accounted coastal sediment affects a finite shoal — September 25, 2026

Implemented, M2/M8/W2 partial: A nearby ocean fish stock reads newly accounted basin-to-ocean sediment exports and direct ocean-bound surface-sediment sources at the same water boundary as its existing freshwater observation. The two routes partition conserved water and sediment. At least one game water unit normally improves shoal condition by five points; a high load of at least ten abstract mass units and at least one mass per 2,000 water subunits instead lowers condition by ten. A dry recorded interval still lowers it by ten. The interval's fish recovery settles at the prior rate, so the new condition changes only future recovery. This makes measured upstream erosion an actual downstream food and trade pressure without inventing fish or water. Version-one habitat records migrate with a neutral zero sediment reading. City Production and forecast fish sources show the last water and sediment observations. Unregistered sources, distant/coastal sediment fate, other aquatic species, complete affected reaches and W3/W4 major works remain open. See the waterworks plan, implementation status, player guide and technical reference.

Accounted sediment continues through basin storage and spill — September 25, 2026

Implemented, M2/M8/W2 partial: A registered surface-sediment boundary export now follows the actual basin-water source decision. When its water entered a modelled basin, the same abstract soil mass enters a separate versioned basin-sediment ledger instead of disappearing at the surface edge. Each recorded basin transfer or ocean/unresolved spill can carry at most floor(water subunits / 100) retained mass units. Evaporation and infiltration remove water but leave soil bed load; mass can settle, move on a later spill, or leave through an explicit terminal export. Source, basin, transfer and crossing totals reconcile without turning sediment into warehouse goods. Old saves checkpoint their current sediment boundary totals as historical offsets, with no backfilled basin deposit.

Retained basin sediment displaces up to 50,000 water subunits in the level calculation, at two subunits per mass unit. It does not add water. The following water interval can therefore spill more or flood higher with exactly the same conserved water volume; current private basin levels and flood exposure use the same displaced level. A controlled basin comparison proves extra real saddle transfer, and a connected lake spills the corresponding soil mass to the ocean. City → Land & water shows the private basin sediment balance; forecasts and offline replay agree with paid prepared-field observations. The model remains bounded by registered source coverage and basin topology. Broader coastal habitat, unregistered sources, complete affected reaches, W3 ratification and W4 major-project operation remain open. See the waterworks plan, implementation status, player guide and technical reference.

Cultivated soil mass now follows registered runoff — September 25, 2026

Implemented, M2/M8/W2 partial: Each quality point actually lost from prepared topsoil now generates 100 abstract sediment-mass units at that plot's water boundary. The same recorded discharge and allocated natural/channel edges carry at most one mass unit per 100 water subunits; a wetland carries half that rate. Excess remains as bed load and can move on a later wet interval. The sediment ledger balances generated plus incoming mass against retained bed, registered transfers and unrecoverable boundary exports. Unknown receivers are not credited later merely because monitoring expands. Old saves checkpoint the current processed water tick with an empty version-one ledger, so no past soil becomes fabricated sediment.

Deposited mass on a registered natural wetland reduces its next-interval surface retention by two water subunits per mass unit, capped at half the current unsilted capacity. This changes subsequent conserved runoff and may increase downstream discharge; later flow can flush the deposit. City → Land & water shows private sediment receipts and the wetland capacity loss, while owned forecasts and offline replay run the same interval model. Controlled route and paid prepared-field tests cover conservation, save validation and downstream effects. The basin extension above carries accounted soil through storage and spill; unregistered sources and coastal/aquatic species impacts remain unresolved. W2 remains partial; all-party rights and major construction/operation under W3/W4 remain open. See the waterworks plan, player guide and technical reference.

Measured runoff changes cultivated topsoil — September 25, 2026

Implemented, M2/M8/W2 partial: A surveyed plot with completed prepared soil and registered surface runoff now keeps a separate topsoil quality from 0–100. A four-hour boundary with at least 8,000 water subunits of actual discharge and 0.002 normalized fall loses min(4, floor(discharge/8000), floor(fall-millionths/2000)) quality points, limited by quality remaining. A sound completed terrace or fallow halves the hit, rounded up. Fallow also restores one point on every sixth low-flow boundary if quality is below 100; wet fallow can still erode. A new soil improvement must have existed for the whole interval. The water ledger and immutable generated elevation/biome do not change; the later sediment ledger above routes newly lost soil mass.

Each lost quality point reduces a food plot's actual yield by 0.2 percentage points through the same effective fertility used by production and forecast. Paid soil or terrace condition repair does not erase topsoil loss; low-flow fallow restores quality slowly while pausing harvest, and the separately paid Agronomy treatment above restores up to twenty missing points. Project food previews retain the current quality penalty. City → Land & water shows the selected surveyed plot's quality and recent receipts. The original version-one topsoil ledger checkpointed old saves at the processed water tick with no historical loss; current version two retains that migration and adds paid-restoration custody. Its latest twenty receipts per affected cell reject missing marked state, forged chronology, geometry and totals. Controlled tests and a paid prepared-field station verify the response and offline/forecast equivalence. This extends the earlier completed-work runoff erosion rule; complete sediment reach, full terrain response, complete affected reaches, W3 rights and W4 major works remain open. See the waterworks plan, player guide and technical reference.

Implemented, M2/M8 direct flood health consequence: On a charter's household day, an otherwise usable home covered by recorded basin water loses its housing places as before. After dry permanent places and any actually supplied temporary refuge are counted, the residents left unsheltered because of flooded housing face a separate depth-scaled health injury. The deepest affected home gives one to five hazard steps per 0.001 normalized depth, capped at five; community health loses up to that step count times the exposed fraction of residents, after ordinary food, water, shelter and care effects and above the existing 20-health floor. No resident or inventory is silently deleted. The version-two village people ledger migrates older version-one saves with an empty versioned injury record and no retrospective harm. City → People names the exposed count, depth step and actual health loss; a dry or refuge-protected day records zero. Controlled flooded-center, dry-damage, neutral migration, tamper and offline-replay tests cover the rule. This is pooled immediate injury, not named-person wounds, mortality, complete flood reach or a major waterworks benefit. W2 remains partial and W3/W4 are open. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M2/M8 bounded coastal fish habitat: A finite coastal fish stock within four connected ocean hexes of an accounted basin-to-ocean crossing or direct ocean-bound runoff source now responds to that interval's discharge. The crossing may end on a shore plot whose routed path, including flats, reaches the ocean within 32 cells. Basin exports and direct-source ocean receipts are disjoint, so water and sediment each count once. At each observed four-hour water boundary, at least one game water unit of discharge improves shoal condition by five points, up to 100, unless the heavy accounted sediment load described above lowers it by ten; a dry known connection also reduces it by ten, down to zero. Its actual fish-stock recovery rate for the next interval is the existing base rate multiplied by condition percent, with no new fish, water or instant catch. Recovery through the just-finished interval settles at its prior rate, including when the source was full. City Production and source forecasts show current recovery, condition, last observed flow and sediment. Old or unmonitored stock keeps its original rate; no earlier discharge is reconstructed. A real conserved lake spill, a direct ocean source across a flat, dry follow-ups and restored replay verify the timing. This is one local coastal fish response, not complete aquatic species ecology: distant coasts, salt/mixing, migration and rights remain unresolved. W2 full reach and W3/W4 major works remain open. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M2/M8 living-marsh food habitat: The existing staffed, finite emergency-foraging pool now counts up to two unoccupied natural wetland hexes alongside up to two usable woodland hexes. A marsh contributes only after an actual water-interval habitat observation reports wet mode and at least 50 condition, while it remains unconverted and outside recorded basin inundation. Each usable marsh contributes forty wild-food capacity and eight per village-day regrowth, versus the woodland's sixty and twelve. The same assigned foragers gather at most five food each per due day; gathered food still feeds unmet household needs first, and only spare food enters the warehouse. Drought, drainage, construction or inundation can remove marsh capacity and stop its regrowth; wet recovery can restore it. No surface water becomes food and no new stock or save field is granted. A paid, monitored marsh-village scenario verifies real gathering, exclusion of its converted plot, restored and offline custody. This gives wetland ecology a playable resource consequence while W2 species-specific aquatic habitat, full affected reaches and W3/W4 major works remain open. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2 nearby coastal-claimant screening: A returned basin review now follows connected ocean hexes for up to four steps from each known natural, candidate-spill or paid-channel ocean exit, with a shared 256-ocean-cell budget. It names current public communities whose charter intersects those ocean cells or adjacent shore; no foreign inventory, station or private report enters the view. The screen is separate from the inland affected-cell count and never marks the open ocean complete. Farther users, ocean mixing and ecological effects remain unresolved, so this evidence cannot ratify W3 rights. City → Land & water shows the crossings and possible nearby coastal parties. Controlled tests cover a nearby claimant, an out-of-range claimant, dynamic public identity and read purity. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M2/M8 recorded flood loss of pooled vulnerable stock: At each four-hour surface-water boundary, standing village commons, outpost depots and storehouses with an inundated footprint expose a share of the community’s pooled warehouse equal to their share of standing storage capacity. Each flooded store contributes its own five-percent rate per 0.001 effective depth, capped at 25%, weighted by its share of standing storage capacity; whole units are removed separately from prepared food, grain, flour, animal feed, fresh fish, preserved fish, flax, yarn, cloth, garments, saplings, logs, timber and charcoal. Floodwater spoils the edible goods and damages textile, nursery, loose wood and fuel stock. Dated fish loses its oldest expiry batches first, preserving the age ledger; its used counter includes this non-expiry withdrawal, while the flood and warehouse receipts identify the cause. The warehouse-history ledger records each real withdrawal and a versioned flood-storage ledger retains bounded receipts and cumulative losses. Existing version-one receipts remain valid; the new material losses begin only at later water intervals. New or migrated saves start at the next interval without retroactive damage. Dry storage stops new loss, while later production and household needs continue normally. City → Land & water shows the losses, and offline replay/restoration agree. Stone, metal and tools remain outside this stock rule; pooled resident injury follows the separate daily rule above. This is a real W2 consequence of recorded basin water, not a claim of complete affected reach or W3 project approval. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2 connected channel recipients: A returned watershed review follows up to sixteen installed drainage-channel crossings away from natural flow. A complete non-ocean recipient catchment omitted by the original eight-basin pass enters the possible-community and natural-feature scan; the review now also follows its bounded higher outlets and reciprocal backwater network. Across recipients it can add at most 8,192 supplemental catchment/network cells, sixteen basins and 128 directed crossings, with incomplete or over-budget extents and ocean users explicitly open. A second installed channel originating in newly included terrain is followed in the same bounded review. City → Land & water lists supplemental crossings, basins and unresolved frontiers while distinguishing possible parties from live transfers or legal consent. Foreign water, stock and private reports remain hidden; no water or rights change. The downhill card also shows the fixed 25% natural bypass before receivers join the ledger. Controlled terrain tests find upstream and wider-connected public claimants, verify a second channel and oversized frontier, and retain read purity. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M2/M8 flooded local well access: A chartered village or outpost draws its surveyed local water only while an operational, sound village center or camp has a dry footprint. Recorded basin inundation at that connection sets local delivery to zero, including any paid headworks increment; it also suspends the existing bilateral conduit at that endpoint. Household and livestock water, supplied irrigation, migration eligibility and the next daily health check use this actual available capacity. Water is not removed from the basin or the underlying surveyed well limit, and a dry, otherwise sound connection resumes normal delivery. City → Land & water names the well flood when local delivery is zero. Controlled founding-center and signed-conduit tests cover zero capacity, daily household need, both endpoints and recession. This well-access rule does not model contamination or every unregistered basin reach; the separate stored-food flood loss is described above. See the implementation status, waterworks plan, player guide and technical reference.

Implemented, M2/M8 recorded flooding of shelter: An operational home with any inundated footprint cell contributes no permanent housing until the water recedes; a flooded staffed community refuge offers no temporary places. The existing daily needs check turns an uncovered resident into a shelter shortfall, affecting health and migration eligibility through the ordinary rules. A dry, sound home returns its capacity without creating residents or refunding previous costs; a dry refuge again needs its existing policy, staff, condition and firewood. City People, economy housing and Regional capacity now agree. Controlled funded tests cover the founding forty-place center and an eight-place staffed refuge, recovery, firewood custody and restore. Stored-food flood loss is described above; this shelter rule does not directly injure residents or prove complete basin exposure. See the implementation status, waterworks plan, player guide and technical reference.

Implemented, M8/W2 existing-channel recipient review: A returned watershed report's wider basin review now names existing paid drainage channels that leave a source's natural downhill edge. It follows up to sixteen such routes into their bounded receiving paths, adds encountered public community cells to the possible affected-party list, and flags a recipient basin omitted by the natural basin bound, an unresolved path or further omitted channels. The list includes installed channels regardless of current upkeep, so it describes possible engineered reach rather than claiming current transfer. It reveals no foreign live condition, station, stock or report and changes no water or rights. City → Land & water shows each crossing and explicit limits. This improves W2 recipient evidence but does not trace every engineered channel, establish actual project-specific impacts or authorize W3 consent. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2 recorded floodwater on watershed fieldwork: A known inundated hex on a selected charter survey route rejects both ordinary observation and runoff-station dispatch before materials or meals leave storage. Paid surveyors check the next hex at each travel step; floodwater holds their physical position and carried supplies while travel meals continue. If their observation plot is flooded at its work check, they abandon the observation and return physically with unused timber and tools; no findings or monitoring station are created. A flooded return route holds completed findings privately until the team can reach home and publish. Existing fire, engineer, food and storage rules continue. Controlled exposure tests cover rejection, held travel, observation failure, refunds, return and restoration; separate station scenarios verify generated basin water. This closes another W2 consequence without proving complete affected reaches or granting construction rights. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2 recorded flooding on shared well conduits: A known flooded hex anywhere on an accepted woodland conduit route prevents funding construction, repair or removal before materials are spent. An already funded four-person conduit crew waits while any corridor hex is flooded, retains paid materials and earned work, and resumes through ordinary crew scheduling after recession. Once commissioned, the buried interior can remain wet without interrupting delivery, but flooding either well connection suspends the actual transfer until dry; source priority, condition, engineer and consent checks still apply. City waterworks reviews and delivery reasons expose the interruption. Controlled exposure tests cover rejected payment, held/restarted work, endpoint loss and conserved recovery; separate paid-station basin tests verify real generated floodwater. This is an existing minor shared-well easement, not approval for major storage or diversion. Complete affected reaches, engineered impacts and all-party water rights remain open. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M4/M8 flooded institutions: A recorded inundated footprint makes an otherwise sound village center, outpost camp, school, registry, barracks or other supporting institution unavailable for its linked knowledge service. At the water boundary, ordinary flood damage also reconciles active programs; the affected service stops, the City/Regional reason names floodwater, and it can resume through the existing daily service check after recession if staffing, condition and supplies still qualify. New research/adoption quotes cannot use a flooded institution. A funded academy or scriptorium project and named specialist training block before another stage, retain invested work and unused supplies, and require the existing reviewed resume after the site dries. This makes recorded water matter to all six technology branches without erasing learned knowledge or changing save fields. Controlled funded tests cover service, academy, scriptorium and school recovery; complete flood ecology and major-project rights remain open. See the implementation status, waterworks plan, player guide and technical reference.

Implemented, M8/W2 flooded industry pauses: Recorded basin water over any footprint cell of an operational producer now blocks that producer's recipe, including workshops and extractive buildings as well as fields and nurseries. A due cycle advances without spending inputs or awarding output, and recession permits only the next ordinary cycle. City Production and Supply chains show the floodwater reason. This extends the existing cultivation/site-work consequence without granting water, refunding prior expenses or changing save fields. A funded lumbermill scenario checks input/output custody, recovery and restoration; the basin-exposure tests also retain a real paid-station inundation path. The separate stored-food loss is described above; material damage, named-person wounds, complete affected reaches and major-waterworks approval remain open. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M8/W2 local environmental bypass: When a completed drainage channel is sound and its reserved outlet differs from the natural downhill neighbor, each recorded four-hour discharge interval sends at least 25% (rounded up to the nearest thousandth of a game water unit) along the natural edge. The remaining flow takes the paid channel. Both missing receivers enter empty at the next water boundary, with no local rainfall until separately monitored; channel admission has priority under the 64-cell interval limit. Separate durable edge transfers and station crossing balances conserve the split, including after repair, failure, removal, restore and offline replay. City Land & water shows the bypass, both destination hexes and cumulative edge receipts; older natural-edge history remains on that edge. An unregistered source remains unresolved. This fixed local rule is a prerequisite for major diversions, not species-specific habitat sufficiency, affected-party water rights or approval to build a reservoir. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M5/M8 recorded floodwater for watches and campaigns: Local, owned-outpost and consented allied tower-watch quotes reject a known wet marching route before funding, including long and standing watches through their shared quote. Paid forces stop before a flooded next hex with their people, rations and position intact. An inundated occupied fortification stops route warnings immediately and triggers physical withdrawal at the next military check; its lookout detour excludes recorded wet hexes. A consented professional relief offer cannot be accepted across a known flooded route; a paid campaign holds at a flooded next hex and withdraws without combat if its camp floods before contact. A moving escort cannot be newly assigned to a known wet caravan route and provides no protection while co-located on a flooded hex. Controlled-exposure tests cover atomic rejection, held custody, provision use, restored/offline campaign state, watch withdrawal, dry detours and physical return. No save schema changes. This does not establish complete coverage of every travel mode, unregistered basin reach or engineered-water effect. See implementation status, waterworks plan, player guide and technical reference.

Implemented, M5/M8 recorded floodwater for local militia: A known inundated hex on the surveyed route rejects a new paid patrol; a corridor guard checks only its actual walk to the post, and a known wet hex on a field-supply rendezvous route rejects dispatch before stock is spent. A paid militia or supply team checks its next hex on each movement step; floodwater holds its route index, people and supplies while normal travel provisions continue. A guard standing on an inundated post provides no corridor protection and withdraws at its next needs check. Existing Defense cards show the quote or journey reason; restore retains the paid position and recall uses the ordinary physical return. Controlled-exposure military tests verify rejection, held custody, provisions, guard withdrawal and restore. This extends the recorded-basin travel rules below; the watch and campaign extension is above. See implementation status, player guide and technical reference.

Implemented, M3/M6/M8 recorded floodwater on charter cargo routes: Current basin exposure now participates in caravan and owned-outpost travel decisions. A known inundated hex blocks a new caravan, bilateral-trade, founder, household-relocation or reoccupation route before payment; manual outpost supply may instead take an active-Scouting dry detour priced before dispatch. An accepted caravan or outpost journey checks its next hex at each paid travel step; floodwater holds people and cargo with provisions still running unless an active scout finds a bounded dry caravan path or an outpost-supply path from its current hex. Without a path, movement resumes after recession. Scouting grants no crossing immunity; draft-assisted outpost teams may detour but receive no extra animal feed or reset of their original paid loan. Founders whose destination camp floods during assembly withdraw home instead of establishing there. Existing journey and Regional issue cards display the block reason. These are consequences of recorded basin exposure, not a claim that every unregistered watershed or every other travel mode is modelled. Focused controlled-exposure tests cover quote rejection, conserved paid cargo, blockage, regional reporting, detour, recession, restore and offline agreement. An additional end-to-end test funds a real runoff station, lets rainfall flood a low woodland route, holds a paid bilateral caravan before the wet hex, restores that state, physically recalls its cargo and rejects a new offer while the route remains wet. Wider transport/ecology effects remain open. See the waterworks plan, implementation status, player guide and technical reference.

Implemented, M2/M3 food reserve at recurring production: A recurring producer that spends more prepared food than it returns now checks the settlement's existing stored-food reserve before its batch. The first such live chain is the tree nursery's compost-and-food-to-saplings recipe. If a batch would lower prepared food below the reserve floor, it waits without taking inputs, advancing its receipt or banking missed cycles; the current City Production and Supply chains views name the blocker. Household meals and food-producing harvests keep their existing priority. This uses the already reviewed zero-to-thirty-day stored-food policy and requires no save migration or new stock. It complements the separate free warehouse space policy below. A command-funded nursery test checks protected meals, food-plot continuation, later policy recovery, offline replay and restore. See the implementation status, player guide and technical reference.

Implemented, M2/M3 player-controlled food warehouse space: Each chartered community has an independent, reviewed City policy for zero to three household days of free warehouse room, defaulting to zero for new and migrated saves. The target is the ceiling of current daily food demand times the chosen days, so it follows population and active services. A nonfood producer's positive-net batch waits if it would cross the target; a new standing selective-harvest order also waits if its whole expected log yield would cross it. Legume compost collection leaves the greater of its existing one-cycle food headroom and the selected target. Food production can use the space. This is a preflight at each production or new-order decision, not locked inventory: already funded work, manual deliveries, returns and other stock movements can still fill it. City shows the setting, current target and free space; Production and Regional overview expose blocked reasons. This complements the separate policy that protects stored food from optional spending, and makes no stock or capacity on adoption. See the implementation status, player guide and technical reference.

Implemented, M2/M3 whole-unit warehouse credits: The shared storage-credit boundary now admits compost, militia kits, physical cargo equipment and manuscripts only in whole units. It validates every such amount before applying any part of a mixed credit, so an invalid later item cannot leave an earlier good stored. Fractional free capacity cannot split an arriving or refunded item, and an overfull warehouse never turns a credit into a stock debit. The existing source rules decide whether an unaccepted item stays with a journey or is discarded; this change grants no capacity or goods. This protects the version-two compost and equipment save invariants after the legacy migration below. See the implementation status, player guide and technical reference.

Implemented, M0/M2/M3 whole-compost save migration: New land ledgers use version two. A version-one charter save with fractional compost from the former legume partial-staff rule now retains the whole units and removes only its fractional remainder. If the save has a warehouse-history ledger, migration appends a dated, exact outgoing compost adjustment and keeps opening, gross totals, retained receipts and current stock reconciled; older saves without that ledger establish their migrated whole stock as the opening. Already whole version-one stock is unchanged, and version-two fractional stock still rejects as malformed. Restoring the migrated snapshot performs no second debit. Existing soil plots, paid jobs and technology remain unchanged. See the implementation status and technical reference.

Implemented, M2/M3/M4 legume food-first storage: Legume harvests put prepared food ahead of the compost byproduct. Compost is collected only in whole units that fit while leaving warehouse room for the next household meal cycle; excess green manure remains uncollected on the plot and grants neither warehouse stock nor a soil-condition bonus. Food still needs actual storage, so a warehouse filled by unrelated goods can block its harvest. City Production and Supply chains show a current-space limit, and the crop review explains the rule. A command-built village, patrol, improved/irrigated plot, physical outpost exchange and staffed outpost food plot now sustain both settlements for 1,000 additional village days without new orders, while daily and bounded offline replay match. This is a bounded survival result, not proof of indefinite resource balance or comprehensive regional progression. See the implementation status, player guide and technical reference.

Implemented, M3/M4 crop dependency trace: The City supply-chain recipe graph now distinguishes a crop's planting requirements from its recurring harvest requirements. Rye, barley, wheat and vegetables need the active Seed selection program to plant and continue harvesting. Flax and milling grain additionally need their respective textile or millwright specialist only when selected; suspending that specialist later does not retroactively stop the standing crop, while its processors retain their own service gate. Legumes need both Seed selection and Crop rotation when planted and at each harvest. The read-only graph exposes these rules even when a crop is not selected and grants no technique, stock or field. See the gameplay interface, player guide and technical reference.

Implemented, M3/M4/M5 legume food-and-soil chain: An owned operational community field can now plant Legumes and green manure after Seed selection and Crop rotation are both adopted and staffed. Planting spends two real food and restarts the full field cycle. A full eight-worker village-day harvest yields 32 prepared food and up to four whole stored compost on suitable moist ground, instead of the basic field's 44 food; partial staffing scales food and rounds compost down to whole units. The active Crop rotation soil steward is required for this crop to continue producing. Normal storage, flood, soil, workforce, target, budget and daily-consumption rules apply; no output is granted on selection or while blocked, and missed cycles are not banked. The compost can fund existing surveyed soil preparation, maintenance, nursery or reclamation work in that settlement or travel as paid cargo. This gives a local renewable alternative to the commons compost batch and livestock byproduct while sacrificing meal capacity. Existing crop selections remain valid and no stock is granted; version-one fractional compost is handled by the version-two migration above. See the implementation status, player guide and technical reference.

Implemented, M2/M6/M7 returned outpost workforce: A founder, reoccupation, relocation or evacuation party rejoins its home population and labor once when it reaches the home hex, even if its goods must wait for warehouse space. The active unloading job retains the historical worker count that arrived. If a birth-linked returned civilian reaches 85 while that job is still waiting, the local death receipt removes one actual resident and worker and the outpost assignment derives one fewer live worker from that receipt. Remaining cargo and equipment stay at the home hex until storage permits unloading; zero surviving workers do not recreate labor or discard goods. City and Region journey cards now distinguish the historical returned residents from the current workers assigned to unloading; Region counts no returned resident as still transferring. The older transfer's departure/arrival counts are not rewritten, and restoring the save rechecks birth, move and death custody. Age-unknown adults still lack a retrospective birthday. See the implementation status, player guide and technical reference.

Implemented, M2/M6/M7 age-known outpost resident-travel mortality: A community-born adult who reaches 85 on an active founder, reoccupation, household-relocation or evacuation journey dies at that job's current route hex on the birth community's village check. The version-two outpost transfer retains original departure residents and workers, the accepted route and a chronological death receipt; the moving job loses one resident and worker. Birth-ledger version eleven closes the exact adult and transit move, while versions one and ten migrate with no invented deaths. Only survivors enter the outpost or home, and a smaller relocating household is checked against its actual arrival count. The original paid cargo and provisions stay with the trip. If the last resident dies, the journey ends at that hex and its remaining carried goods are recorded as lost instead of being credited to a settlement or used to found an empty charter. Surviving dependents on a founder or reoccupation party whose last worker dies return home instead of building a camp; other survivors continue their existing physical route. The People card and origin briefing distinguish these deaths; age-unknown legacy cohorts still have no retrospective birthday. See the adult cohort ledger plan, implementation status, player guide and technical reference.

Implemented, M2/M6/M7 resident-transfer age review: Founder, reoccupation, household-relocation and evacuation quotes select the same age-known civilian workers that the real transfer carries after available age-unknown workers. They reject a new departure when one selected person's recorded age-85 date falls within the planned walk and possible return; founder and reoccupation checks include two days for camp assembly. The authoritative transfer repeats the check before debiting residents. Death during a delayed active journey and death after return while unloading now follow the linked rules above. Age-unknown cohorts remain M2/M7 work. See the adult cohort ledger plan, implementation status, player guide and technical reference.

Implemented, M2/M7 age-known household-travel mortality: An adult born under Community family growth who reaches 85 during a finite waystation household journey dies at the actual modelled route hex on their birth community's daily check. The party loses one resident and one worker in transit; neither the home nor the waystation loses that person a second time, and only survivors arrive. Destination housing, water, food output and reserve checks use the surviving party size; the next new household still needs four places. The original departure count remains historical in migration-transfer version three, while a dated death receipt records the leg, route cell and party count before loss. Birth-ledger version eleven closes the selected adult's journey and mortality at the same instant; older versions migrate with empty deaths and no invented life event. Leaving, arriving and turned-back journeys retain their physical route and existing provision commitment. The People card counts residents born here who died on a household journey, and the return briefing identifies the hex and smaller party. Adults from age-unknown legacy cohorts remain unfinished; no retrospective birthday is invented. See the adult cohort ledger plan, implementation status, player guide and technical reference.

Implemented, M2/M5/M7 field-supply old-age transition: A soldier with a recorded community birth who reaches 85 while holding a field hex for a paid military supply team dies at that hex. One resident and mobilized soldier, proportional unit rations, militia kit and any fitted equipment leave the ledger; civilian labor is unchanged. The version-eight military death receipt retains the unit route and the linked carrier team's ID, route position and intended resume phase; version-seven saves migrate with null supply history. The rendezvous ends at the same check. Survivors resume their prior outward, homeward or guard order from the held hex, subject to the ordinary guard strength check. If the final soldier dies, the unit closes without a return claim. The two civilian carriers turn home with undelivered paid food, kits or arrows; travel consumption remains spent, and full home storage leaves cargo with the carriers until space is available. The carrier journey and death receipt validate on restore. Age-unknown legacy residents still lack a retrospective death clock. See implementation status, player guide and technical reference.

Implemented, M2/M5/M7 consented relief old-age transition: A birth-linked professional soldier reaching 85 during home muster, outward march, camp approach or return dies at the actual home or route hex. The donor loses one resident and mobilized soldier, proportional carried food and fitted kit; the wage term closes and refunds only unstarted days. The agreement keeps its original accepted troop count, route, transit permissions and hosted-depot food authorization. Survivors end offensive duty and walk home from their actual position; a home-muster death ends the order there. If the final soldier dies away from home, the agreement records a terminal loss, returns unused host depot food when storage permits, leaving any blocked remainder claimable, and never claims a physical return. Version-seven military death receipts snapshot the campaign; versions one through six migrate with null campaign history. Restore reconciles historical campaign position, accepted force, battle and old-age losses, payroll and equipment. The version-eight transition above covers linked field-supply holds. See implementation status, player guide and technical reference.

Implemented, M2/M5/M7 consented allied-watch old-age transition: A birth-linked soldier reaching 85 while marching to, holding or returning from another founding community’s consented tower dies at the actual route hex. The agreement retains its original accepted troop count and expiry while the unit loses one real soldier, carried food and kit; the donor loses one resident and mobilized soldier. The original host arrival-refill ceiling and past payments remain recorded. A death before arrival reduces the refill actually taken; later daily food uses surviving strength and keeps prior receipts intact. A surviving force continues its physical assignment subject to existing leader consent, service and reserve checks; it can return with fewer soldiers. If the final soldier dies, the agreement becomes lost, preserves its food and watch receipt, and does not claim a physical return. Version-six military death receipts and agreement validation reconcile the historical post, accepted strength, actual casualties and host spending. Linked field-supply mortality uses the version-eight transition above. See implementation status, player guide and technical reference.

Implemented, M2/M5/M7 owned fortification-watch old-age transition: A birth-linked militia member reaching 85 while walking to, holding or returning from a one-, two-, seven- or fourteen-day watch or a standing watch at an owned local or retained-outpost tower, keep or castle dies at that route hex. The surviving unit keeps its physical route, remaining provisions and watch assignment; its lookouts still need an operational staffed fortification and an active scout before new caravan warnings. If the last soldier dies, the unit and watch end without creating a replacement. A version-six military death receipt snapshots the watch and post, including the outpost host, so later demolition does not erase the historical location; versions one through five migrate with null watch history. Funded finite watches retain the original food allowance and each actual daily receipt. Standing watches retain their approved cumulative ceiling and lifetime meal count and spending, with only the thirty most recent receipts displayed. Each death receipt records the meal count already paid, so old spending remains checkable even after early receipts roll out of view. At an outpost, the original four-day arrival-refill ceiling remains authorized: a death before arrival reduces the food actually taken, while a later death never rewrites the host's paid refill. Later daily collections use the surviving soldier count at the actual host. A loss may still force a physical return under the existing lookout, scout, accounting, reserve or carrying-capacity rules. Linked field-supply duty uses the version-eight death transition above. See the adult cohort ledger plan, implementation status, player guide and technical reference.

Implemented, M2/M5/M7 convoy-escort old-age transition: A birth-linked militia member who reaches 85 while accompanying an NPC or permitted peer caravan, or while walking home after detachment, dies at the actual route hex. The village loses one resident and one mobilized soldier but no civilian worker. The birth service, cohort, equipment, food, wages and version-five military death receipt close together; the receipt retains the escort assignment and shared route position. The caravan keeps its cargo and trade consent. A surviving escort remains alongside it, but each later crossing rechecks the smaller force and may be unprotected. Peer permission retains its original accepted troop count and reconciles recorded deaths on restore. Versions one through four migrate without invented escort history. Linked field-supply mortality is implemented above. See the gameplay plan, implementation status, player guide and technical reference.

Implemented, M2/M5/M7 militia old-age transitions at home, on patrol and on corridor guard: The age-85 home village check closes a birth-linked soldier in ready, basic training, reinforcing, refitting or professional-training phases, or on an unaccompanied patrol or local corridor guard, including the return walk. It removes one resident and one mobilized soldier, never a civilian worker; the matching birth service, cohort and military death receipt remain linked. A stalled reinforcement adjusts the recruit or veteran side of its paid training record: surviving recruits continue training if all veterans die, and surviving veterans become ready if all recruits die. A professional death cancels the active term, retains earned wages, refunds only unstarted days and reduces fitted bow/spear and archer quiver custody. On patrol or guard duty, the receipt retains the actual route and cell; a guard receipt also snapshots its assignment. Survivors retain their position and provisions, and an understrength guard stops protecting crossings and walks home. The military old-age ledger migrates through versions one to four into version five without inventing historical routes, guard assignments or escorts. Owner Defense and private briefings show losses and refunds without birth keys. Resupply holds still need a coordinated death transition with their attached travel records. See the adult cohort ledger plan, implementation status, player guide and technical reference.

Implemented, M2/M5/M7 military age-window prevention: Birth-linked militia now expose the earliest recorded soldier age-85 boundary in owner Defense. A newly reviewed two-day recruitment or reinforcement must finish before any selected known recruit reaches 85; reinforcement also checks the existing known roster. Patrols, guards, escorts, owned and allied garrisons, relief campaigns, and seven/fourteen-day professional contracts reject planned service that reaches the boundary. Standing watches check the authorized food horizon, including added allowances. Age-unknown legacy soldiers receive no invented deadline. These checks are conservative planned-finish gates, not natural death: an attached duty delayed by fire, supply or old saves can still cross 85, and its death transition must reconcile roster, equipment, pay and hosted agreements. See the adult cohort ledger plan, implementation status, player guide and technical reference.

Implemented M2/M7 opt-in community birth, physical family mobility and maturation: The founding home and each established, populated outpost can review Community family growth in City → People. Authorization adds no population, workers or supplies. Two present unnamed civilian adults, excluding named residents and traveling crews, and twenty-four consecutive eligible village-day checks are required locally: health at least 80, three stable needs days, permanent housing and water for one more resident, eligible local food output including active service upkeep, and the larger protected food reserve. A failed check resets preparation; pausing ends preparation but retains born residents. A reviewed named-household birth takes the last eligible housing place first when both paths reach a birth check together at home. Each completed interval adds one unnamed dependent to actual population. The child eats and occupies housing/water from the next household day and becomes one civilian worker on the eighteenth-birthday village check, without adding another resident or public office. Hardship emigration cannot take a protected child. A founder expedition, reoccupation or household relocation may explicitly carry up to its two dependent places as community-born children; complete outpost evacuation carries all resident children. Each origin birth receipt keeps a chronological physical journey and return history, so a child stays protected at the actual destination or source after recall. If an eighteenth birthday passes in transit, maturation waits for the first receiving-home village check after arrival and adds one worker there. A newly matured adult enters ordinary generic labor and retains an age-known civilian receipt at the maturation settlement. Founder, relocation, evacuation, reoccupation and recalled resident journeys can carry that adult in an existing worker place when age-unknown workers are exhausted; the transfer receipt and birth receipt agree on departure and physical arrival without another population or labor grant. Hardship household departure now carries selected age-known adults to the finite waystation; a later incoming household can carry the same birth key to a chartered community, while changed admission conditions return that adult physically to the waystation. The version-three migration ledger retains completed transfer receipts, including exact age-known journey deaths, even after active journeys end. Recruitment and reinforcement select age-unknown adults first, then link any selected community-born adults to the exact militia unit and enlistment receipt. Cancellation and demobilization return those survivors to civilian custody; fatal contact consumes age-unknown soldier places first, then closes selected known identities when casualties exceed that remainder, without a second labor debit. The unit owner sees each recorded soldier age from the original birth at the last completed village check, with warnings from 80; recruitment and reinforcement previews exclude a selected known civilian aged 85 or more. Natural old-age death now applies to birth-linked soldiers at home, on unaccompanied patrols, on local corridor guard duty, on convoy escorts and on owned or consented allied fortification watches; linked field-supply holds are covered above. A present age-known unnamed civilian now dies at the first local village check at age 85, even when family growth is paused; one resident and one civilian worker leave the aggregate counts, assignments reconcile, and the birth record retains an exact death receipt with the local community and pre-debit totals. An age-known adult who instead reached the finite waystation dies at age 85 on their birth community's next daily check; the shared source loses one actual resident and worker, and the same birth record names the waystation as death location. No birth or settlement population is granted at that transition. Founding-household adult adoption, resident membership and independent careers now retain the selected age-known resident's birth key, real age and life clock; the same receipt follows that named adult through death without a second population debit. Resident membership can release the same birth key back to local civilian life; a later invitation or physical journey retains the earlier membership history, and resident death removes that person once. Independent careers debit the person and worker at claim, then close the receipt at death without another debit. Anonymous legacy adults and older adoption, membership or career receipts keep their age-24 model. Version-eleven per-settlement birth ledgers migrate disabled older saves and version-one/two child histories; version-three matured adults become unresolved because past generic movements are unknowable, and version-four adult transfer histories remain intact; version-six adults gain empty membership histories, version-seven adults gain empty service histories, and version-eight adults gain a null mortality receipt without retroactive death. Child, adult and household transfer lists, repeat moves, returns, membership and soldier periods, casualty closure, chronology and worker capacity validate on restore. Initial unnamed residents still have no retrospective age or natural-death clock. The adult cohort ledger plan specifies remaining legacy-age mortality work; regional demographic equilibrium remains open. See implementation status, gameplay plan, player guide and technical reference.

Implemented M2/M7 named household birth slice: A lawful founding-home leader can review a plan for one named child with a second living adult guardian. The village needs three stable days, health at least 80, permanent housing and water for the additional resident, eligible local food output for the enlarged household and active services, and a protected food reserve. Twelve consecutive eligible household checks complete the plan; a failed needs/capacity check resets progress, a guardian death ends it, and the player can cancel it. Planning grants no person or supplies. A completed birth adds exactly one dependent to population, with no worker, estate or office. The child uses normal household food, water and housing, follows the 24-village-day year, and at eighteen becomes one existing civilian worker through the ordinary maturation rule. The private Family & continuity screen shows eligibility, progress and history. Old saves gain an empty marked birth ledger; receipts and childhood chronology validate on restore. This is one bounded named-family renewal path. Pre-existing unnamed ages, child illness and field mortality, autonomous demographic balance and broader political inheritance remain planned. See the implementation status, gameplay plan, player guide and technical reference.

Implemented M4/M8 Festivals path: Festivals is a Culture topic beyond the audited first eighteen. Two village days of practice, local research and separate adoption install a one-worker cultural organizer; knowledge alone holds no gathering. A charter owner reviews a one-day local event in City → People. Funding spends eight food above protected reserves and two timber within the public budget, and reserves two additional existing workers until the next household check. If basic food, water and shelter needs are met and both the organizer and local commons remain operational, the event adds up to three community health recovery; otherwise it records an interrupted gathering without a bonus. Paid supplies remain spent either way, and another event must wait seven village days. Old saves receive an empty validated festival ledger; pending and historical costs restore without replaying payment. See the implementation status, gameplay plan, player guide and technical reference.

Implemented M4/M8 ritual and civic gathering calendar: Ritual and civic calendar is a Religion topic after Festivals, with six practice days, three paid research days, separate local adoption and one steward using one food per day. It is equally available to faith and secular communities and does not choose or convert beliefs. In City People the charter owner may review one to four future gatherings. That authorization pays nothing and expires after its finite count; each actual village-day funding check must still pass the ordinary seven-day interval, active Festivals and calendar service, a sound commons, two free residents, eight food above protected household reserves, two timber and the current public budget. A blocked check waits without spending. A funded gathering holds its workers and resolves at the following household check under the ordinary basic-needs and health-cap rules, even if the owner later stops future calendar funding. The calendar adds no stock or people and never renews itself. Existing version-one festival saves migrate to an empty disabled version-two calendar, preserving paid events and receipts. Public foreign pilgrimage access is now live; wider routes and broader spiritual institutions remain planned. See the implementation status, gameplay plan, player guide and technical reference.

Implemented M3/M4/M8 school and theater performances: Performing arts follows Festivals, Literacy and Textile crafts. Six practice days, funded research at a staffed school and separate local adoption provide one performing-arts organizer. A charter owner can build a Community theater with 80 timber, 12 bricks, four cloth, 16 food, two tools and 120 work, then assign two venue workers. In City → People, the owner chooses a specific sound, dry, staffed school or theater and reviews a local performance. Funding spends two food above household reserves and two real cloth and reserves two more residents until the next household check. If basic food, water and shelter needs are met and the organizer and booked venue still operate, a school adds up to four community health recovery after any festival, while an undecorated theater adds up to six. The event never moves to a different venue after funding; interruption gives zero bonus without refunding cloth or food. A new performance waits five village days. Supply chains exposes theater construction and both cultural-event material costs as conditional uses, not ongoing demand. The event creates no residents, belief change or materials. Old charter saves start an empty validated version-six performance ledger; version-one school histories and pending costs migrate without changing their four-point cap. Owned and invited foreign-community performer tours are implemented below; the first Shared civic identity effect is described afterward. See the implementation status, gameplay plan, player guide and technical reference.

Implemented M3/M4/M8 cultural patronage: After Performing arts and Scholarship, eight village days of practice and four funded research days at a staffed theater support separate adoption of a one-worker patron; its active service consumes one food daily. A sound, staffed theater with the active technique can use four cloth, two timber and one tool per ordinary production cycle to make one whole notable work in local stock. Stock, protected food, storage, operating budgets and staff still govern each cycle. Existing owned-outpost routes can carry whole works at four weight each. An owner can review installing one local work per sound, dry, two-worker theater while the patron and Performing arts organizer remain active; the work leaves local stock permanently. Its installed display raises the cap of subsequently funded performances at that theater from six to eight health recovery, subject to the same basic-needs, venue and 100-health bounds. Funding snapshots the venue and display, so an earlier booking does not improve retroactively. Clearing the theater removes the display without refund. Actual completed theater production can earn the descriptive Cultural patronage economic identity after three qualifying days in the seven-day evidence window; it grants no multiplier. Supply chains shows the theater recipe and optional one-time display use, not daily demand. The performance ledger migrates prior saves through version four to version six and validates paid history and local displays. The display itself creates no residents, belief change or touring performer; paid physical tours are described below. See the implementation status, gameplay plan, player guide and technical reference.

Implemented M4/M6 physical performer tours: With active Performing arts at the founding home, two free adult workers, two cloth, two event food and separately paid round-trip rations, a charter owner can review a visit to a populated established owned outpost or an inviting foreign chartered community. The quote follows the actual dry walking route, including Scouting detours, carrying capacity, cart policy and protected home food. The two workers remain assigned to the physical supply-team journey; their event goods and provisions remain in cargo rather than appearing in the host warehouse. On arrival they stay one full village day at the host camp or village commons, through a host household check. A sound, dry gathering site, met host food/water/shelter needs and continuing home organizer service then allow up to four bounded host health recovery. A failed held visit still consumes the two food and two cloth; shortage or recall before the event returns unused cargo instead. Regional overview names the physical performer tour and links to People. The team and any remaining provisions return physically, with fire/flood, storage, cart wear and supply delays using the existing journey rules. A host waits five village days after a held visit before another tour. Save migration adds a version-six performance ledger with separate host tour receipts and preserves older local events and venue caps. City People shows quotes, the traveling team and host history. This does not move charter title, transfer household membership, create residents, change belief or grant a remote permanent venue. Any chartered foreign host, including a founding village, developed local village or established outpost, may review an opt-in guest policy in City People. Foreign communities appear as guest destinations when their host has public access or a private invitation for that visitor. A founding-village destination has no frontier site but still uses the same validated walking route, paid team and full host-day check. The host can close public visits or withdraw a private invitation; permission is checked at arrival and again after the full-day stay. Loss of every applicable permission returns an unheld team with unused event food and cloth while spent travel rations stay spent. A held guest event uses the same household, site and organizer checks, four-health cap and shared five-host-day interval. Older saves migrate with public guests closed, no private invitations and existing owned-tour receipts marked non-guest. The version-six ledger records up to four named foreign founding communities per host; public access and private grants are independent. Invitation changes require the host owner and a current reviewed revision, notify the named visitor, and grant no settlement or warehouse rights. The visitor still chooses and pays for a physical tour. Restore rejects forged partner IDs and malformed invitation timestamps. Broader diplomatic enforcement and civic identity institutions remain planned. See the implementation status, gameplay plan, player guide and technical reference.

Implemented M4/M8 bilateral cultural exchange commitments: Two foreign founding owners with active Performing arts and Shared civic identity may review a cultural exchange offer in City People. The other owner must accept within three village days; an offer alone grants no access. Acceptance opens guest-performer visits in both directions for fourteen days and records a promise that each community will send one successful paid tour to the other. Signing transfers no goods or workers. Each sender separately reviews, funds and walks a real two-person journey with event food, cloth and travel provisions. Only a held visit with the host's basic needs, gathering site and home organizer operating fulfills that sender's promise; an interrupted visit spends its held-event goods under the normal rule without meeting the obligation. Once both promises are fulfilled within fourteen days, bilateral access extends to thirty days from acceptance and the two active civic programs can use the four-host-day repeat interval, subject to the host-wide last-visitor rule. Either owner can withdraw; expiry or withdrawal removes pact-only consent, so an unheld team without public or private permission turns home with unused event goods. Public and private permissions remain independent. At the fourteen-day deadline, an accepted pact missing either visit is marked unfulfilled. A community that did not send its successful promised visit waits seven further village days before it can offer another exchange to that same partner; the community that delivered may reoffer, and the other owner may choose to initiate a new offer. The wait grants no resources or automatic visit. Existing saves receive an empty version-one global exchange ledger; restore validates parties, owners, dates, statuses and bounded retained records. This is a recorded, finite commitment and shared access, not automatic dispatch, belief conversion, title or warehouse authority. Broader diplomatic enforcement and cultural institutions remain planned. See the implementation status, gameplay plan, player guide and technical reference.

Implemented first M4/M8 Shared civic identity cooperation effect: The Culture topic follows Literacy and Regional institutions. A staffed school, eight village practice days, four funded research days, separate adoption, one specialist and one food of daily upkeep make the local program an actual choice. Between two foreign founding communities, the shorter four-host-day performer-tour interval begins only after both programs are active, both owners maintain named private invitations and each community has held one successful paid guest visit from the other since those invitations were granted, or the owners have fulfilled a jointly accepted cultural exchange. Each qualifying visit must still be within thirty of its host's village days. Public guest access alone does not establish the shared exchange. The private-invitation route ends when either grant is removed or its visit evidence ages out; the signed-pact route ends on withdrawal or term expiry. Losing either active civic program restores the ordinary five-day interval. The ordinary five-day host interval still applies when the most recent held visit came from another community. Consent, two travelers, cloth, event food, route provisions, host needs and the four-point recovery cap remain unchanged. This is a bounded repeat-visit benefit backed by reciprocal action, not belief conversion, population transfer, realm-wide identity or a permanent diplomatic obligation. Broader civic identity and reciprocal cultural obligations remain planned. See the implementation status, gameplay plan, player guide and technical reference.

Verified M4 initial knowledge gate: The first eighteen topics now have three authoritative nodes in each Building, Agriculture, Army, Culture, Politics and Religion branch. Their existing applications are live: housing and crews; crops, soil and irrigation; recruited and supplied militia; records, schools and physical books; budgets, titles and governors; and optional mutual aid, care and refuge. The implementation-status audit names all eighteen applications and their behavioral tests. Learning remains distinct from adoption, and care/refuge still require separately reviewed public or faith-supported policies with equal welfare effect; a faith topic does not choose a belief for residents. A focused eleven-suite application run passes 113 cases. This verifies the initial content/working-choice acceptance gate, while wider specialists, diffusion/licensing, institutions and political or religious choices remain planned; the six-path City presentation alone never proved those mechanics. See the gameplay plan, player guide and technical reference.

Implemented M7 labor exception routing: A blocked standing selective harvest with fewer than two truly free workers now appears in owner-only Regional overview as Standing forestry needs workers and opens the affected community's People screen. Its detail includes the actual free-worker count and the next household's eligible food-output threshold, directing the player toward migration or worker reassignment. An idle-worker-floor policy that blocks a harvest despite two free workers still opens Land & water for mandate review. This changes only the private exception target and explanation: harvest crews, policy floors, migration admission, paid jobs and save records retain their existing rules. The 2,600-day City scenario exercises both the first and second actual workforce shortage. See the implementation status, gameplay plan, player guide and technical reference.

Implemented M2/M7 migration recovery guidance: The owner-only City → People → Household migration card now displays the next four-person household's resulting resident count, the current eligible one-cycle food output against the exact admission threshold including active service upkeep, and stored food against the protected reserve requirement. These figures come from the same population.conditions calculation used by both waystation departure and arrival checks; they do not forecast sustained surplus or reserve people. The card links directly to Production so a target-held food plot or missing staff can be reviewed. In the 2,600-day City route, stock alone was ample but the current eligible output fell below the next household's threshold; raising both field targets and assigning one more grower made admission possible, after which two actual waystation workers restored the harvest crew. Saved migration and inventory rules are unchanged. See the implementation status, gameplay plan, player guide and technical reference.

Implemented M2/M3/M7 long-horizon four-community recovery: The command-funded City route appoints an existing civilian as council successor after its third outpost; adoption adds no population, labor, stock or office. The founding home and three locally fed outposts complete 1,000 consecutive village days without new player orders: each stays populated and fed, home Public accounting and Regional institutions stay active, and 198 of 200 standing-harvest orders are used. The original ruler dies naturally, leaving an AI interregnum while funded production and regional services continue. On return, the owner embodies the appointed adult and completes lawful handover, raises the starter food target from 600 to 900, temporarily opens migration for one finite four-person/two-worker household, then closes it. A running automatic harvest reports waiting for its own crew before testing labor for another order, so Regional overview's near-cap warning appears instead of a false worker blocker. A separately reviewed cap increase to 400 retains prior orders and grants no logs. The player adopts and appoints another existing adult. At day 1,462, the current ruler's natural death removes one worker; forestry cannot hire its two-person crew. The player completes the second lawful handover, adopts and appoints a further successor, raises both food-plot targets to 1,200, assigns a sixth starter-field worker and briefly reopens migration. One more real waystation household supplies two workers, after which migration closes. All four communities remain fed and populated with active home services through day 2,600; after another old-age death, the third appointed adult completes handover without new people or goods. An unchanged snapshot loses home Regional institutions to timber shortage. Offline replay matches all four inventories and economies, forestry and production ledgers, and household continuity across each command-free interval. This is finite managed recovery, not indefinite regional equilibrium; local labor, tree, food, storage and succession checks still apply. See the gameplay plan, implementation status, player guide and technical reference.

Implemented M3/M7 reviewed forestry continuity: A charter owner can now increase a standing selective-harvest instruction's cumulative lifetime order cap from its earlier 200 maximum to any reviewed total up to 10,000, including already issued orders. The existing log target, mature owned trees, household food, two workers, warehouse room, local or delegated accounting, ordinary job completion and pause behavior still govern each harvest; changing the cap grants no logs or jobs. Regional overview gives an owner-only attention warning when an enabled, otherwise unblocked instruction has one to five orders left, links to Land & water, and clears after a reviewed increase or pause. At 10,000 the capped total cannot rise further; the owner may review ongoing daily checks or manual harvests. Existing version-one ledgers and orders migrate to version two as capped without changing their prior work; malformed and over-limit records still reject. The City acceptance route starts with a 200-order cap and later reviews ongoing daily checks; real harvest orders then pass 200 while the stored cap remains, but this does not prove indefinite material balance. See the gameplay plan, implementation status, player guide and technical reference.

Implemented M1/M3/M7 City timber-balance guidance and a shorter funded route: The City → Supply chains timber card now states current ready workshop output, assigned recipe inputs, active service use and a conditional net per village day. It identifies an operating Land registry's actual daily timber upkeep and explains that completed claims persist if the player disables that program; future registrations require re-enabling it. This is a read-only planning quantity, not a forecast or material grant. Supply chains also lists finite paid log and timber imports in both the goal tree and resource trace, with actual shared-depot stock and the owner's current coin balance; coin prices are shown as money rather than material cargo. In the command-funded City journey, the player suspends the registrar only after the last needed early land claim, keeps the actual forestry and precision sawmill running, and re-enables the known program before later registration. The 550-timber buildup falls from 237 to 158 village days. A matched world retaining the registrar has less than 550 at the same date, with the same number of standing-harvest orders; both routes consume real logs and service supplies. The full objective still needs acceptable real-time pacing and enduring material balance. See the implementation ledger, gameplay plan, player guide and technical reference.

Implemented M3/M8 two-sided finite material market: City → Trade & transport now offers Buy logs with coins (one coin per log) and Buy timber with coins (two coins per timber). A chartered village must have earned communal coins, two free carriers, travel food, reserve and route capacity; the waystation must have that exact stock from real earlier deliveries. Dispatch reserves the goods and coins, and the goods enter the village only after the team returns. The existing sale prices match the purchase prices; travel and real material supply still constrain exchange. Neither good starts in the depot, so these offers do not accelerate a solitary world without an actual seller. The finite 1,200-coin fund, shared depot, recall and save custody rules are unchanged. The implementation status, player guide, technical reference and gameplay plan track this incremental market path; solo City timber pacing and broader regional supply remain open.

Implemented M1/M2/M6 outpost food-plot guidance: City → Frontier & charters now gives a populated outpost an owner-scoped local food plot card. It uses the authoritative Community food plot construction requirements over that charter's current owned plots, ignoring plots with land, title or occupancy blockers, and shows a viable candidate's exact discounted cost, local material shortfall and current blocker. Map and Buildings links lead to the existing reviewed construction flow; the card spends nothing and does not reserve a plot. Once a field exists, it shows the existing structure's stage and staffing instead. Evacuated empty sites receive no false food-building prompt. Focused tests verify the standard founder load's ten-timber shortfall, the optional load's ready plot, read purity and the built/staffed transition. This improves the first outpost's player path without bypassing construction, local food costs or crew rules. See implementation status, player guide and technical reference.

Implemented M2/M3/M5/M6 integrated self-feeding outpost acceptance: The original command-only journey already founded a village, resolved a real mill-log bottleneck, patrolled and cleared a raiding camp, changed a forest plot into irrigated farmland, and exchanged finite food/tools for outpost logs. It now makes a second real woodland harvest and mills enough additional timber to afford the optional 70-timber founder load. After paid travel and assembly leave 30 timber at the outpost, local four-person construction spends that timber, food and one tool on a Community food plot; two of the six arriving workers staff it. The separate supply trip still physically delivers food and a tool and returns locally harvested logs. Thirty more home village days without new commands keep both settlements fed with zero household shortfall. Direct offline advance matches both warehouses, and save restoration preserves the result. This connects the first integrated goal to a locally replenishing outpost rather than ending on finite carried food; the interval does not prove perpetual supply or complete M0–M8. See implementation status, player guide and technical reference.

Implemented M2/M6 founder food-plot load: A founding village can review a standard expedition or one carrying ten additional paid timber within the same 300-weight team capacity. The camp still spends forty timber and two tools during assembly; the larger load leaves thirty timber on arrival, enough for one Community food plot if local food, a suitable plot and builders are available. The ordinary 20-timber arrival remains the default for old clients and saves. The server checks current stock, reserve, route capacity and rights at dispatch; no remote materials or new residents are granted. A later separate food delivery is still needed for the guided supplied-outpost objective. See implementation status, player guide and technical reference.

Implemented M2/M3/M6/M7 four-community acceptance extension: The command-funded City journey feeds each camp immediately after founding. The first camp receives ten actual timber by a separate carrier trip after its standard founder load; the second and third carry ten extra paid timber in their founder loads. Four local residents build a Community food plot in each camp, two residents staff each field, and the third camp receives a separate physical 16-food delivery. After three 160-food local production targets are set, the owner suspends Land registry, staffs the home starter food plot with five workers, the second home field with four and the lumbermill with four, then resumes bounded home forestry. This allocation leaves at least two home workers available for real standing harvest jobs while retaining enough food and timber output for Public accounting and Regional institutions. An earlier 90-day allocation with six starter growers, five second-field growers and three mill workers left only one free worker; its extension stopped harvests and lost timber service after 39 more days. With the revised allocation, all four communities remain inhabited and fed with zero household food shortfall for 270 checked village days, both home services stay active, and real forestry orders rise from 85 at day 90 to 116 of the 200 authorized orders at day 270. The later interval retains at least 108 home timber; direct offline advancement matches inventories, economies and production/forestry ledgers. City status later declines after the founder transfers, but the three owned titles remain and a fourth founder order still rejects over capacity. This is a finite, player-configured result, not indefinite regional equilibrium or a regional-capital completion claim. See implementation status, player guide and technical reference.

Implemented M1/M2/M3/M7 City-path verification update: The command-funded woodland-to-City-to-three-outposts journey uses bounded Standing selective harvest for its initial sixty days, capital timber buildup and three later founder-funding phases. The player pays to adopt Joinery and selects Precision saw timber at the existing lumbermill: four completed logs become four usable timber per fully staffed cycle, compared with three under the historical default. The better yield consumes no fewer logs or workers, needs the active woodwright, resets the production cycle on selection, and creates no stock at authorization. The default remains selected in older saves. The player enlarges the selected forest list after paid charter extensions, pauses future harvest orders before labor-sensitive work, and restores the default saw recipe before suspending Joinery. Precision sawing alone reduced the main 550-timber reserve from 454 to 237 village days; suspending registrar upkeep after early claims reduced the same route to 158. The full run's 270-day continuation remains under its 200-order forestry cap and needs no manual START_HARVEST command. Substantial waiting and material and staffing choices remain; satisfactory pacing and long-term three-outpost balance stay open. See implementation status, player guide and technical reference.

Implemented, M3/M7 coordinated production partial: City → Regional overview now lets the founding-home owner change target, pause or continuous mode for two or three existing producers in at least two established owned linked communities, or four while the founding home currently holds earned City status through one reviewed order. Each producer keeps its local recipe, staff, warehouse stock, source reserve, prior counted batches and cumulative input spending. The plan changes no goods or workers immediately and restarts a full local production cycle at each changed building. The server checks every producer revision, owner and local service; an invalid second row rolls back all changes. A one- or six-home-day comparison submits the same order to a copied world and reports each community's warehouse, workers, storage, final producer status and retained spending before a separate live confirmation. This coordinates existing local production instructions without creating a shared warehouse, automatically staffing producers or solving indefinite regional supply. See the gameplay plan, implementation status, player guide and technical reference.

Implemented, M3/M7 coordinated forestry partial: In City → Regional overview, a founding-home owner can draft two or three standing selective-harvest changes across distinct established linked communities, compare the combined instructions with current orders for one or six home days, and submit them as one atomic order. Each row authorizes or pauses its own existing local ledger, plots, target, idle-worker floor and selected order period; a stale, foreign, invalid or unavailable row rejects the whole order. The comparison runs the ordinary command on a copied world and shows local food, logs, timber, workers, storage, new harvest orders and daily check reasons. Authorization creates no immediate job or logs, and an issued job continues after pause. This closes the earlier multi-instruction authoring gap while long-term regional fuel balance, cart/tool renewal and combined forestry with staffing or cargo planning remain open. See the gameplay plan, implementation status, player guide and technical reference.

Implemented, M3 supply planning partial: City → Supply chains offers a read-only quantity target of 1–1,000 units for any listed resource or crafted/project output, including refinements and equipment beyond militia kits. The item list comes from positive outputs in existing local recipes and funded projects; extracted raw resources remain in the Resource list. Changing the target recalculates local apparent gaps and each alternative source's whole-batch upstream requirements without booking shared stock or issuing an order. Buildings and troop steps retain fixed quoted quantities. Trained draft-route notes now describe the already implemented eligible manual and automatic routes. This improves the requested resource-to-material-to-use tree but does not optimize competing recipes, guarantee capacity or fulfill the remaining M3 logistics gate. See the plan, implementation status, player guide and technical reference.

Implemented M7 allowance visibility: After an enabled governor mandate actually dispatches a physical team, Regional overview compares the most recent committed load with the route's remaining cumulative allowances. If a second identical load would exceed any currently relevant material allowance, the home receives an attention-level issue naming the outpost, the limiting good, available units and previous commitment. The issue links to the existing Frontier & charters review; increasing authorized funding or pausing the route clears it. This read-only calculation cannot predict whether future demand will need the same goods or travel rations and does not reserve or renew authorization. It uses the existing bounded dispatch history and owner-scoped projection, with no save migration. The paid next check remains authoritative. See the gameplay plan, implementation status, player guide and technical reference.

Implemented M2/M6/M7 finite unattended regional step: The existing migration, staffing, production, forestry and governor rules now pass a combined command-built home-plus-two-camps scenario without further player orders during its sixty-day observation. Two households physically leave the finite frontier waystation and arrive at the founding home, adding eight residents and four workers under actual housing, water, food, health and reserve checks. The player closes migration, lowers the home food reserve to six days, staffs five field and three mill workers, stops unnecessary camp foraging, and retains the two local 250-food field targets and three bounded forestry instructions. Separate existing governor mandates target 30 home logs from the first camp and 400 home food from the second, with retained camp stocks and cumulative allowances. Both routes dispatch repeatedly with real home carriers, travel food, escrow and warehouse credits; multiple log returns are receipted. All three community food stocks stay positive without household shortfall at each checked home day, home timber and both home accounting/regional programs stay active, and all three forestry ledgers issue jobs. A copied world without either route ends with less home food. Direct offline catch-up matches all three inventories, both governor ledgers, all forestry ledgers and home program state. This demonstrates finite, no-further-order integration; it does not establish perpetual stock, carts and tools, wider route reliability or every M7/M8 acceptance gate. See the gameplay plan, implementation status, player guide and technical reference.

Three-community production stewardship — September 24, 2026

Implemented M3/M7 slice: An established same-owner outpost can now use the founding home's active Public accounting plus Regional institutions for its own target production and raised production priority, as well as standing forestry. Local Public accounting remains an independent route. Home institutions pay their existing upkeep and carry no goods to the outpost; the outpost uses its own staff, stock, recipes, field, storage and source. Authorization of a target still starts a fresh full production cycle. A home service lapse blocks target batches and returns raised priorities to normal without deleting the saved orders or spending their allowances; restoration resumes them under ordinary timing. This explicitly supersedes earlier local-only accounting guidance for these three controls, not for unrelated policies that still require local service. The shared regional-accounting check uses the established owner-linked outpost record and requires both home programs to be active each time; no save schema or stock migration is needed.

The command-built three-community journey funds two physical ten-timber deliveries, builds and staffs a food plot in each camp, rebuilds home timber through real harvest and milling while optional services are suspended, and restores the home accountant and regional governor. It authorizes 250-food warehouse targets in both camps, releases the first camp's continuing foragers to make room when its 400-unit store reports a forestry storage exception, then runs one bounded forestry instruction in each of the three communities. An extension exposed a real bottleneck: one home mill worker cannot replace institutional timber upkeep by day fifty, while additional mill staff compete with food workers and two-person harvest and carrier crews. The player starts local home harvesting at four field/three mill workers, raises field staffing to five, and releases field workers temporarily for three rounds of separate paid return journeys from each camp. Each of six trips collects eighteen locally stored logs and twelve food through the existing physical supply command. Across sixty checked home days, households retain food, Public accounting and Regional institutions remain active, all three forestry ledgers issue local jobs, and the camp storage exception clears. Segmented offline advances match all three warehouses, forestry ledgers and home programs between each intervening player order and return. Carrier travel advances time between sampled home days. This demonstrates a finite, actively managed M7 path; it does not prove unattended balance, perpetual tools or cart inputs, autonomous exchange, combined forestry with staffing/cargo planning, or all M8 systems. See the gameplay plan, implementation status, player guide and technical reference.

Linked-home accounting for outpost forestry — September 24, 2026

Implemented M2/M7 regional step: A populated established owned outpost may authorize its own bounded standing selective harvest through the founding home's active Public accounting and Regional institutions when it has no local Public accounting specialist. The home pays the existing service upkeep; the outpost still owns the selected natural plots and supplies its own two harvest workers, household food and warehouse space. The rule uses the existing established outpost link and same owner, grants no materials or labor, and creates ordinary local harvest jobs only at the outpost's daily check. Losing either home service blocks new delegated orders until service returns without cancelling an issued local job or resetting the mandate ledger. Local Public accounting remains an independent path. The City projection names the accounting source, and the regional warning points to a missing service. A six-day regional comparison and direct offline replay agree with live outpost inventories and order counts. This extends the forestry design below; multiple communities can each hold local instructions, and a later regional multi-instruction authoring control exists; indefinite regional balance remains open. See the gameplay plan, implementation status, player guide and technical reference.

Reviewed standing forestry comparison — September 24, 2026

Implemented M3/M7 planning slice: The owner's City → Land & water → Standing selective harvest order review can now compare the exact authorization or pause against current orders for one or six home village days. The comparison runs both timelines on copied worlds containing every owned linked community. It reports each local warehouse's food, logs and timber, free workers, new ordinary harvest orders, daily waiting or blocked decisions and observed regional issues. Authorization alone still starts no job; only subsequent daily checks may issue one, and logs enter stock only after normal completion. Pausing future orders leaves already issued harvest work intact. A forecast spends nothing, reserves no plot or worker, and becomes stale after a world or draft change; the separate Confirm order remains the live action. This extends the bounded forestry design below, while a later regional multi-instruction planner coordinates separate ledgers and indefinite timber equilibrium remains open. See the gameplay plan, implementation status, player guide and technical reference.

Bounded standing selective forestry — September 24, 2026

Implemented M2/M3/M7 slice: A charter owner with active Public accounting can open City → Land & water → Standing selective harvest, explicitly select one to eight owned natural forest plots, and review a local log-stock target (1–200), idle-worker floor (0–24) and reviewed capped total (1–10,000) or ongoing daily checks. The authorization starts no job and grants no goods. Once per village day, while stock is below target, the world rechecks current accounting, household food above the protected reserve, two available workers plus the retained floor, older queued work, a single outstanding automatic harvest, mature healthy unflooded and unoccupied selected trees, and room for the complete expected log yield. It chooses the most mature eligible selected plot deterministically and creates the ordinary two-worker selective-harvest job. Logs enter the local warehouse only on normal completion; existing regrowth, cancellation and crew controls apply. A blocked or waiting day records its reason but spends no allowance. Issued work remains in the lifetime count even if cancelled; capped revisions cannot lower the total below past orders. Pausing stops future checks without cancelling a job already in Orders. Regional overview lists the retained instruction, flags a blocked authorization and warns for capped instructions when one to five authorized orders remain and no immediate blocker takes priority. Older unmarked saves migrate to an empty authorization; marked jobs without their ledger and malformed ledgers reject. This replaces the earlier blanket statement that logs have no optional automatic source, while rejecting any claim of continuous yield or indefinite timber balance. The gameplay plan, implementation status, player guide and technical reference carry its status and controls.

The command-built coastal journey now uses this exact standing instruction after registering its second forest edge. With a bounded home food target and the existing staffed mill, the player issues no manual harvest orders during the following ninety village days; the three timber-consuming services remain active and the camp keeps its own meals. A second engine advances directly from the authorization snapshot to the same date and matches both warehouses, active services, forestry ledger and jobs. Six more unattended days also match stepped replay. Pausing at the end leaves one already issued harvest holding its two workers, so the player lets that job finish before using the carriers for an iron import. This verifies a finite ninety-day unattended forestry interval within the physical coastal supply chain, not permanent equilibrium or automated cart-material renewal.

An isolated live City check opened the charter owner's Land & water screen, selected both owned forests, reviewed an exact 30-log target and two-order cap, accepted the authorization without an immediate job, then reviewed and accepted pause. The paused settings persisted through a page reload. This checks the player control and current projection; the ninety-day command scenario above checks the elapsed simulation.

Managed coastal seasons and a fourth exchange — September 24, 2026

Implemented M2/M3/M6/M7 integrated verification: The command-built coastal journey now continues through two thirty-village-day periods and a later ninety-day period and a fourth physical governor trip. After the third fish return, the home deliberately pauses optional timber services, staffs its existing mill and selectively harvests owned renewing woodland to rebuild writing and logistics supplies. The camp releases fishery and smokehouse workers and staffs its food plot at two, producing more food than its eight residents eat. In the second period the scribe, governor and quartermaster remain active for all thirty days, but timber stock falls substantially; this demonstrates that the original wooded area and one registered edge do not yet support those services indefinitely. The player imports real tools, temporarily reallocates mill labor to a paid survey, registers a second forest edge and suspends the registrar again. With this additional renewable source, a bounded standing selective-harvest instruction and a home food-production target that preserves warehouse room for logs and timber keep those three services active for the next ninety days without manual harvest orders. The player then frees camp storage by pausing its food plot, imports finite iron, pays to repair the worn cart, harvests and mills another reserve, and releases home field workers for the fourth governor dispatch. Its logs reach the camp, where newly staffed fishery and smokehouse produce another preserved-fish batch. Both warehouses retain meal reserves; a full ninety-day offline replay matches stepped inventories, active services, forestry decisions and jobs; a further six-day unattended check matches stepped food, materials, service state and both retained targets, the fourth delivery matches offline replay, and the extended save restores exactly. This verifies a player-configured ninety-day service and forestry interval, a fourth delivery and repeated production. It does not prove unattended equilibrium, perpetual market stock or indefinitely funded cart repairs. See the gameplay plan, implementation status, player guide and technical reference.

Timber service continuity warning — September 24, 2026

Implemented M3/M7 planning visibility: City → Regional overview now warns an owned community before active knowledge services exhaust a low timber reserve. The read-only row compares current active service upkeep with output available from currently staffed, ready lumbermills and reports how many current saw cycles stored logs could feed. It directs the player to Supply chains and woodland, where actual harvesting, mill staffing, imports or optional service suspension can correct the shortage. The estimate excludes future harvests, deliveries, competing uses and schedule changes; it neither reserves timber nor guarantees service uptime. The extended coastal path also shows that food can crowd harvested logs out of storage until a bounded field target leaves room; indefinite timber balance remains open, so this warning makes the problem actionable without treating the full M7 sustainability gate as complete. See the gameplay plan, implementation status, player guide and technical reference.

Extended governor exchange corridor — September 24, 2026

Implemented M6/M7 long-range material logistics: An ordinary governor exchange still reaches an owned outpost within twenty-four walking hexes. For a route of twenty-five to thirty-six hexes, the home must keep Field logistics active and set its transport policy to Require a handcart. This is an institutional permission, not a change to manual-trip range or the cart's own speed. Authorization reserves no goods, workers or cart; each daily check still needs an available serviceable cart, two workers above the retained floor, actual cargo and route meals, open storage, stock and cumulative local/shared budgets. The cart travels with that funded team, returns worn after use and must be manufactured or paid for repair before another equipped departure. If the quartermaster or cart policy is lost, future long-range checks report the blocker without cancelling paid trips or erasing past commitments. Routes beyond thirty-six still cannot be governed. The first coastal parcel is twenty-eight hexes away, so its food/fuel and preserved-fish targets can enter the existing mixed governor planner only after this progression; the earlier manual path remains available. Focused prepared-route tests verify no capability, no cart, actual dispatch, worn return, blocked next check, offline replay and save restoration. The command-built coastal journey now verifies the research and cart-manufacturing path, a surveyed and registered home woodland extension, three governed dispatches, paid cart repair, delivered food and smokehouse fuel, and a fresh preserved-fish return with matching offline fish custody. An empty mixed-load result names each still-needed good's limiting reason, including destination storage when the camp depot is full. Older dated fish can spoil en route, so the third trip reserves a newly produced batch after conserving the camp's remaining fuel. The later managed seasonal path above extends the exchange to a fourth trip; indefinite cart, timber and food balance remains open. See the gameplay plan, implementation status, player guide and technical reference.

Custom physical outpost loads — September 24, 2026

Implemented M3/M6 player choice: City → Frontier & charters now lets the home owner choose up to three distinct delivery goods and three distinct collection goods, each with a whole quantity from one to sixty, for one manual outpost trip. The selected human or trained-horse team is included. A private, read-only server quote checks the current world revision and the same route, provisions, warehouse stock, reserved collection, food floors, transport equipment, weight, storage and fish ages as actual dispatch. The exact quoted cargo enters the normal order review, whose confirmation still revalidates and pays the authoritative command; a changed draft or world requires a new quote. No new inventory, journey, save field or free transport is introduced. The coastal journey now proves a combined food-and-log delivery and a later food delivery with dated fish collection through custom quotes. This broadens the supply-chain and outpost connection; the advanced governor exchange above supports later finite long-range deliveries, while full M6/M7 sustainability remains open. See the gameplay plan, implementation status, player guide and technical reference.

Outpost production input coverage — September 24, 2026

Implemented M3/M6 planning visibility: The founding village's Frontier & charters card now lists each linked outpost's inputs for staffed operational producers. It uses the selected recipe and current staff ratio to show local stock, input per production cycle and stock-only cycle coverage. This makes a coastal smokehouse's zero-log fuel gap visible at home while paid logs are still held on a fire-blocked team; after actual arrival, the coverage rises from the outpost warehouse balance. The display does not count local future output, cargo in transit, other consumers or delay as guaranteed supply. Its twenty-eight-hex route can use reviewed manual trips immediately; the extended governor corridor above requires later Field logistics and handcart service. The gameplay plan, implementation status, player guide and technical reference carry the corresponding status and instructions.

Build-to-source supply trees — September 24, 2026

Implemented City navigation across existing M1/M3/M5 goods: A player can choose one actual building, crafted item, troop step or resource in Supply chains and work backward from its quoted or selected target amount through current local recipes and funded projects. Each material line shows warehouse stock, protected food and an apparent gap; each source option shows one full-staff or funded batch, local workshop presence and its upstream inputs. Finite frontier import offers appear as physical alternatives, and the established resource trace exposes deeper or additional options. Recipe branches link to existing worker, recipe and building controls, with a map link for an assigned producer; funded projects and frontier imports link to their own controls. A material without a catalog source links to land inspection. These links make the first production bottleneck actionable without funding anything from the tree. Recursive paths stop at repeated inputs and three levels, making circular needs visible without inventing a free source. These are separate possibilities: shared stock, worker/time contention, finite deposits, service rights, food and transit still require the ordinary live review or forecast. No simulation, catalog, order or save rule changes. The gameplay plan, implementation status, player guide and technical wiki retain this boundary.

Six visible technology paths — September 24, 2026

Implemented City presentation of existing M4 knowledge: Research & adoption now shows Building, Culture, Politics, Religion, Army and Agriculture as expandable prerequisite paths instead of relying only on a flat topic catalog. Topics are ordered by dependency tier within each branch; cross-branch requirements name their source branch, and the live learned/operating counts distinguish knowledge from an active local program. Choosing a node focuses its existing detail card, where actual practice, institution, supplies, workers, blockers, manuscript options and research/adoption controls remain authoritative. The path is a read-only navigation layer over the current catalog nodes, not new research, automatic adoption or a save migration. This extends the gameplay plan, implementation status, player guide and technical reference.

First supplied-outpost objective follows physical arrival — September 24, 2026

Implemented, M6 onboarding correction: The home guide's Establish a supplied outpost step no longer treats founders' initial camp food as proof of an ongoing home-to-outpost supply link. It completes after a separate accepted supply team actually deposits positive food at a populated established outpost. Dispatch, goods in transit, material-only transport, a recalled trip and food stored at an evacuated empty charter do not complete it. The ordinary exchange now records an OutpostFoodDelivered event and a durable home briefing count; later acknowledgment, the forty-entry briefing window and evacuation do not erase that earned one-time step. The receipt reports delivered food and destination without creating stock. A following Bring a resource home from the outpost step records non-food collected goods only when an exchanged supply team actually credits them to home storage. Reservations, transit, outward recalls and blocked quantities do not count; partial unloading counts only credited quantities. The return receipt names the outpost and goods without claiming their production provenance, so the player guidance recommends actual local harvesting or production. The integrated command journey verifies twenty outpost-harvested logs returned home after food delivery, and saved briefing counts persist. Older saves do not fabricate retrospective deliveries or returns; new real trips can establish the evidence. This refines the first-session objective plan, implementation status, player guide and technical reference. The earlier founding and supply rules remain authoritative.

Interrupted first outpost supply — September 24, 2026

Verified M3/M6 behavior with an exception-label improvement: An accepted outpost food trip retains its two home carriers, provisions and cargo while a fire blocks the next owned route hex. The destination cannot use food still on the team; normal meals can cause an actual shortfall. Regional overview names the affected outpost on its blocked-supply alert and shows the local food warning too, including when filtered to that outpost. The player can select the burning owned hex and use Fight fire, paying ten local food, then the same journey resumes without a second dispatch or stock grant. A regression stages the environmental fire after departure, verifies the shortage, containment, one arrival, worker return and snapshot/offline equivalence. This extends the physical outpost rules and implementation ledger. It does not establish a general wilderness fire or trade-closure system; wider route interruption remains open.

The resource-specialized coastal outpost now has a command-level material-blocking acceptance path as well. Its fishery can catch from the finite bed while a staffed smokehouse lacks logs. A paid home fuel team waits behind a staged fire; fish accumulate locally, but no preserved fish appears while logs remain on the team. Sufficient extra food in the reviewed cargo lets the team survive the long route delay. A normal Fight fire order clears the owned hex; the same team delivers the logs, the smokehouse produces preserved fish on later real cycles, and a return trip carries dated output home. Replay from the blocked snapshot yields the same home and outpost inventories after containment. The failed first run, with no extra cargo food, returned early under the existing low-provisions rule, so a delayed delivery is recoverable but not guaranteed. This verifies material interruption affecting actual production, without claiming natural fire generation or general trade closure.

City → Frontier & charters → Manual supply transport now exposes that material loop as reviewed offers. Food and log fuel carries twenty food plus ten logs, while Log fuel carries ten logs without the additional settlement food. Four locally preserved fish unlock Collect four preserved fish immediately rather than waiting for twelve dated units that might expire first. Each offer runs the ordinary live quote and review; insufficient stock, protected food, labor, weight, destination space or freshness blocks it. Food cargo can sustain the carriers after dedicated travel rations run low, reducing actual delivered food. No stock, route, production, save schema or command semantics change. The coastal acceptance scenario reads both offered payloads from the owner projection before dispatch and verifies real return.

Reviewed governor policy across linked communities — September 24, 2026

Implemented, M6/M7 partial: A charter holder reviewing Review governor mandate / resume or Pause governor dispatches in City → Frontier & charters can compare that exact policy change with current regional orders for one or six home days. The regional-governor scenario checks the founding home, established owned outpost, current world revision and embodied character; a copied ZoneEngine executes the ordinary SET_GOVERNOR_MANDATE or PAUSE_GOVERNOR_MANDATE order, while another copy keeps current orders. Authorization and pause move no goods immediately. The normal daily governor checks then allocate finite home workers, stock, provisions, any named horse and cart, route access, local and shared ceilings; they dispatch actual teams whose carried and reserved goods remain separate from destination stock. A pause stops future checks but does not teleport an already paid team. The review and Regional overview show new dispatch count, additional gross commitments, check reasons and per-community food, health, free workers and warehouse differences. Confirm order remains the separate live decision. This extends the governor rules, implementation ledger, guide and technical reference. Combined mandate plans and long-term self-sufficiency remain open.

Reviewed district plan across linked communities — September 24, 2026

Implemented, M3/M6/M7 partial: A charter holder reviewing Authorize district plan in City → District plans can compare that exact two-to-six-step local plan with current orders across the linked region for one or six home days. The regional-district scenario checks the founding home, chosen owned linked settlement, plan shape, current world revision and embodied character. One copied ZoneEngine executes the ordinary AUTHORIZE_DISTRICT_PLAN order; another retains current orders. Authorization reserves no goods, plots or crew. On the copied timeline the normal district scheduler funds eligible steps only after local service, prior dependencies, site, resources, reviewed ceilings and finite crew checks. The result shows each step's status and reason, materials actually committed by the horizon, and food, health, workers and warehouse differences in every linked community. A completed producer still needs a separate worker assignment. Confirm order separately authorizes the live plan; a comparison does not guarantee later funding or completion. This extends the district design, implementation ledger, guide and technical reference. Cross-settlement district authorizations and combined route plans remain open.

Reviewed crop choice across linked communities — September 24, 2026

Implemented, M3/M4/M6/M7 partial: The existing City → Research crop-choice review for an operational food plot now offers Compare crop · 1 home day and Compare crop · 6 home days when the player owns a linked region. One copied world executes the ordinary CHOOSE_CROP order on the exact plot, spending two local food seeds and restarting a full growing day; another follows current orders. The regional result compares each linked community's prepared food, other warehouse goods, health and free workers, including any ordinary harvest, processing, meals and physical deliveries that occur. The site and prior/new crop, seed cost and next plot deadline are visible. Crop eligibility still requires the local active Seed selection service, suitable effective moisture, any crop-specific technique and live authority; the forecast checks world and embodied-character revisions and cannot substitute for Confirm order. The estimate creates no food or reservation and does not plan several farms together. The implementation ledger, guide and technical reference describe the delivered slice. Multi-crop and route plans remain open.

One reviewed building across linked communities — September 24, 2026

Implemented, M3/M6/M7 partial: City → Buildings keeps its ordinary local construction review, and an owner with a linked region can also choose Compare region · 1 home day or Compare region · 6 home days for that exact building, plot and orientation. The regional-construction scenario checks the founding home, owned linked charter, known definition, world revision and embodied character. A copied ZoneEngine funds the same START_CONSTRUCTION order as the live review, applying actual materials, attention, site and crew rules; a second copy keeps current orders. Both advance every linked community on one chronological timeline with local meals, production, journeys and shared ceilings. The comparison shows immediate materials withdrawn at the chosen community, building completion or blocking at the horizon, and food, health, free workers and warehouse differences for each community. Completed producers receive no automatic staff. Confirm order remains a separate live construction action; a stale, unauthorized or impossible proposal yields no partial forecast and the preview reserves no plot, goods or workers. The implementation ledger, guide and technical reference carry the current boundary. Multi-building construction and route proposals remain open; one reviewed crop comparison is described above.

Reviewed manual supply trip across the linked region — September 24, 2026

Implemented, M3/M6/M7 partial: A charter holder reviewing DISPATCH_OUTPOST_SUPPLY in City → Frontier & charters can compare that exact manual delivery and collection with current regional orders over one or six home village days. The optional regional-supply forecast checks the founding home, owned established outpost, real goods, current world revision and embodied character. In one copied ZoneEngine it executes the ordinary physical dispatch, retaining two carriers, provisions, optional trained animal, equipment, local warehouse deductions and collection reservations; a second copy follows unchanged orders. Both advance the same linked communities chronologically. The review shows immediate carried/reserved custody and home/outpost food, health, free workers and changed warehouse goods at the horizon. Confirm order remains a separate live dispatch; the comparison reserves nothing, creates no stock and cannot promise delivery through later fire, consumption or storage changes. Stale, unauthorized or impossible proposals yield no partial forecast. This builds on regional staffing, the implementation ledger, player guide and technical wiki. Multi-building construction, multi-crop and broader realm logistics planning remain open; the exact-load itinerary below now supplies a saved multi-order path.

Implemented, M3/M6/M7 saved itinerary: The founding owner can assemble two to four exact custom loads from linked outposts in the home City's manual supply card, including different goods, collection legs and optional trained horses. The screen-local draft can be compared privately for one or six home days against unchanged regional orders, including a waiting load and its next home-day check when a temporary shared daily allowance has been spent. That copied scenario now submits the same AUTHORIZE_OUTPOST_ITINERARY order as the live review. One confirmed live order spends one account attention, pays and dispatches the first ordinary physical supply team, and saves the remaining exact legs. When a paid team returns, the server schedules the first check of the next leg for the following simulation instant under the then-current workers, food reserve, stock, route, equipment, storage, collection rights and ordinary custody rules. When a shared regional logistics budget is configured, every accepted itinerary load also checks and books its combined outgoing goods, travel provisions, draft feed and reserved collection under that home's daily ceiling and any capped lifetime ceiling. A paused or exhausted budget blocks the first load without authorizing a plan. A later load that fits the daily ceiling but finds that day's allowance spent waits for the next home day and retries automatically; a paused budget, capped total ceiling or per-load daily ceiling blocker needs a reviewed budget edit and itinerary retry. No failed load is booked. An already travelling destination supply team also defers the next exact load to the next home-day boundary, after household needs but before new recurring governor or food departures. It can wait across several days while the earlier team remains in custody. Regional overview publishes an owner-only issue for either extended wait, linking daily allowance to Shared logistics budget and carrier contention to Frontier & charters; the ordinary one-millisecond handoff after a team returns creates no issue, and dispatch clears it. Independent single-trip manual relief remains outside those ceilings. A blocked leg stops further dispatches and becomes a regional exception; a reviewed Review retry of blocked load can fund it after conditions improve, or Review cancellation of future loads stops remaining commitments. A team that returns without completing its destination exchange cancels future legs; recalling a paid itinerary team does the same without teleporting or refunding that team's physical journey. The saved version-two plan cross-validates active job identity, ordered outcomes and a typed wait reason. Version-one books migrate with active journeys intact and infer an existing deferred daily-budget wait from its saved deadline; older saves receive an empty book without fabricated trips. The comparison does not reserve live goods, while confirmation and later accepted legs spend only their actual current cost. This closes the first distinct-load one-click path and shared itinerary ceiling; route optimization and indefinite regional sustainability remain open. See the gameplay plan, interface behavior, player guide and technical wiki.

Reviewed linked-community staffing orders — September 24, 2026

Implemented, M3/M7 partial: City → Regional overview compares two to eight proposed staffing changes on completed producers across at least two owned linked communities. It uses current world, home-plot and producer revisions plus the embodied character, owner authority and finite labor. One copied world applies the same atomic APPLY_REGIONAL_STAFFING_PLAN command offered by the review control, releasing workers before new assignments within each community; a second copy retains current orders. Both advance one or six home village days on the same chronological simulation, so full production waits, meals, physical cargo, budgets and interruptions affect each local warehouse. The display compares stock, health, free workers, storage and constraints. Review coordinated staffing order opens the exact changed rows, community count and forecast horizon for confirmation. The live command validates every destination again and either applies all rows once or rolls them all back; stale, impossible, foreign and catching-up destinations receive no partial order. The estimate reserves no goods or workers. The implementation ledger, guide and technical reference carry the current boundary. Multi-building construction, multi-crop and broader route proposals remain open; the saved exact-load itinerary above now handles an initial multi-order dispatch plan.

Governed food aims in Regional overview — September 24, 2026

Implemented, M7 partial: A governed outpost with a household-day food target now shows that target on its own Regional overview card, including live desired stock, food physically in its warehouse, current shortfall, optional already funded tower meals and the governor's current waiting, ready, blocked or paused state. The home instruction exposes the same figures. Filtering to the outpost retains this status and a link to the actual home governor controls. The read uses the same authoritative target calculation as the next due governor check and does not count travelling cargo as delivered or create a new alert for ordinary waiting. It changes no mandate, stock, save record or trip. The implementation ledger and wiki explain this M7 management view; sustainable three-settlement management and wider governor duties remain open.

Governor food-days targets for linked outposts — September 24, 2026

Implemented, M6/M7 partial: City → Frontier & charters → Governor exchange now offers a main-food target of one to twelve household days. The governor recalculates desired food at each daily check from the outpost's current resident population. A separate reviewed choice can add only the meals of already funded tower duty over that horizon; it neither creates a garrison nor authorizes new duty. A food-days instruction stores zero for its fixed main-food quantity, so the two targets cannot silently compete. Existing fixed targets for food or other goods, optional extra goods and manual supply remain available. The service, rights, route, protected home reserve, local storage, carrier labor, shared operating and logistics budgets, cumulative material allowances, actual travel and collection reservations are unchanged. Waiting checks spend nothing; completed shipments are physical and do not refund gross authorization. Old records migrate to fixed targets without new food or route authority. The implementation ledger, player guide and technical reference describe the path. Wider governor duties, appointment politics and three-settlement sustainability remain open.

Natural-source forecasts for coastal decisions — September 24, 2026

Implemented, M3/M6/M7 partial: City → Supply chains can forecast one or six village days of natural fish remaining in a chartered community's owned source, alongside its separate warehouse fish. The source panel shows opening and final quantity, capacity, recovery rate, condition, effective target-mandate floor and daily checkpoints. City → Regional overview gives each linked community its own source timeline, using the same copied-world regional advance as physical cargo and shared budgets. A source is not inventory: an existing bed's projected balance follows only natural recovery and due production, while an already funded founding journey can activate a new bed on arrival. The read is owner-scoped, creates no stock and makes no permanent state change. It assumes existing orders and already funded journeys, not future player instructions. The implementation ledger, player guide and technical reference record the verified path. Wider fisheries ecology and regional management remain open.

Reviewed coastal fish-source reserve — September 24, 2026

The finite fish bed now supports an optional conservation rule in the existing target production mandate. With active local Public accounting, a charter holder can review a whole-fish reserve from zero through the bed's capacity for an operational fishery. The warehouse target still determines when stored fish is sufficient; the separate source reserve limits each actual catch to fish above its floor. A catch can be smaller than the normal staffed batch, spends no extra inputs and never pushes the bed below the chosen floor. Ordinary recovery remains at the stock's authored daily rate and is neither credited to inventory nor accelerated by inspection. Source exhaustion, staffing, food, storage, age and regional operating checks still apply. A reached floor waits for real recovery; accounting loss blocks target production, while an explicitly reviewed switch to continuous production removes the source floor for future catches. This is a local stewardship choice, not a universal protection imposed on other communities or a guarantee of indefinite surplus.

Version-two production-mandate state records sourceReserve on every saved mandate; existing version-one records migrate with zero, retaining their warehouse target, budget, spent batches, next cycle and fish stock. Save validation rejects a negative, fractional, over-capacity or non-fishery floor. City Production shows live bed capacity/recovery and its next catch limit, and Supply chains uses the same available output. Private reads and forecasts do not advance the bed. The plan, implementation ledger, player guide and technical reference track the current behavior. Wider coastal ecology, fisheries governance and regional conservation remain open.

Coastal resource outpost: current M6/M3 decision — September 24, 2026

The first coastal production outpost uses a separate released seven-hex worksite. It does not reorder or consume earlier founding, frontier, farming or coastal-start sites or their two-ring charter-extension opportunities. A home village must send the ordinary two-resident physical survey before the private report identifies the exact ocean fish bed. The report gives a finite initial capacity of 240 fish and recovery of at most eight per village day. The existing conditional charter, record-keeper requirement and paid founder expedition apply. Only actual arrival and camp establishment transfer the eight existing residents, activate the chartered region and create the fish stock at the surveyed ocean cell. No fish enters the camp warehouse at founding. The camp has a twelve-unit freshwater well; seawater is not household water.

This site specializes in food and fish, with no mature local forest in the released seed. The outpost must receive real building materials and fuel through the normal paid route, support household meals, build and staff an ocean fishery to draw down the finite stock, and staff a smokehouse to convert five fresh fish plus two logs into four dated preserved fish. Return supply trips preserve the original fish expiry dates. Daily regeneration cannot be treated as a grant to storage or as unlimited production. Normal labor, construction, storage, food reserve, route, spoilage, authority and revision checks continue to apply. Save validation binds the outpost source, exact site cell, stock capacity, recovery, status and chronology, rejecting missing or forged stock instead of recreating depleted fish. The player guide, technical reference, plan and implementation ledger track this bounded delivery. Other coastlines, maritime travel and broader regional rights remain planned.

Dated fish-market sales replace abstract output — September 23, 2026

Implemented, M3/M8 partial: An operational fish market with at least two assigned residents enables the chartered settlement to offer preserved fish to the finite waystation buyer. A separate two-carrier journey takes actual oldest dated fish batches and travel food. The quote rejects fish due to expire before the estimated arrival. The buyer reserves three coins per fish from its conserved market fund when the caravan departs, consumes surviving fish on exchange, and credits communal coins only when the carriers return. Fish does not become timeless waystation stock or a daily workshop output. Expiry during outward travel recalls the sale and releases the buyer's reservation; survivors return with their original dates. Expiry after exchange is recorded without undoing the completed sale. The City trade review, active journey, supply chain and receipt expose these terms.

New fish markets no longer run the old preserved-fish-to-tradeGoods recipe. Version-one transition archives and removes an older market's pending automatic production time, priority and mandate, while preserving already stored legacy goods, completed history, unrelated jobs and inventory. The separate dated market-cargo ledger validates expiry, custody and restore. tradeGoods remains a labeled legacy inventory type; old stock is not silently exchanged for coins. This closes that specific abstraction, while broad regional market access, other commodities, production-chain and M0–M8 gates remain open. See the gameplay plan and implementation status.

Finite worked-deposit leases — September 23, 2026

The existing consented quarry-lease journey now also supports an idle, operational clay pit or iron mine under the host's charter. The offer binds the exact building and output material: rough stone, clay or iron ore. The same two-party legal services, 1–4 full workdays, fixed 1–40-coin rent, fourteen-day access, host exit notice, four real tenant workers, paid tools/food, actual arrival payment, exclusive site use, physical return and refund rules apply. Each complete workday removes at most 6 stone, 12 clay or 7 iron ore from that site's finite deposit. The quote checks the maximum return load using two weight units per material, plus provisions and tools against the four-person 120-weight limit; outpost and player-trade caravans use the same clay and ore weights. A site may yield less or become unusable; no deposit or output is created by permission.

Marked lease state upgrades from version one to two. Old agreements receive material: roughStone only when they are genuine version-one records; active stone crews and receipts keep their original custody. Current records validate the building, deposit kind, declared output, cargo and cumulative extraction together. Clay and ore are now supported physical cargo in the shared transport weight map. City Expansion shows each lease material and maximum; the Supply chains goal tree now lists only exact accepted, currently dispatchable tenant leases as finite sources, as described above. Old *_QUARRY_LEASE command names remain stable for saved clients. Actual funded clay and iron outposts, bilateral consent, finite extraction, carried return, restore and forged-cargo rejection are covered by mineral lease tests ../test/mineral-leases.test.js and quarry lease tests ../test/quarry-leases.test.js. General land-use leases, purchases, tenant-operated processing and broader markets remain open. The earlier stone-specific section below describes the original delivery and should be read with this extension.

Finite recurring coin sales — September 23, 2026

Implemented as an M8 advanced-trade slice: Two chartered village authorities with active Record keeping and Public accounting can agree to two to six physical sales of a fixed material quantity for a fixed whole-coin price per round. A proposal and recipient acceptance reserve nothing. Each later check revalidates the actual buyer balance, sender stock and food reserves, institutional service, route, workers, cart or named horse and separate feed when chosen. An affordable round creates the existing one-time coin-sale contract and physical caravan; only that round reserves buyer coins. Arrival exchanges the goods for carried money, and home arrival credits the seller once. An unaffordable round waits without a child contract or partial charge. Either party can stop future rounds; unexchanged cargo returns physically and the buyer receives its reserved coins, while an exchanged round completes its paid return. The agreement exposes cumulative coin commitments, credits and refunds separately from material spending. Version-three schedules migrate to version four with no coin permission; matched child price, schedule custody and coin conservation reject forged saves. The City trade editor now reviews this option alongside barter and relief. The gameplay foundations plan remains open for broader markets, authority and major watershed works; player guidance is in the wiki.

Paid breeding produces a cared-for juvenile — September 23, 2026

Implemented as a bounded H4 slice: A chartered village with active Animal husbandry can pair a cared-for mature mare and stallion, a staffed nursery enclosure with one reserved place and two spare water, an additional caretaker, and actual food, feed and tool stock. The City → People review authorizes eight food, twelve feed and one tool immediately. Ordinary daily animal care and its cumulative allowance remain separate. Twelve successful full-day checks require both parents present, sound staffed enclosures, fresh paid care, at least 80 condition and reserved nursery capacity. Loaning, training or relocating a parent pauses progress; death ends the project. Cancellation releases the worker and nursery place but refunds no spent inputs and retains the mare's 24-day biological interval, preventing restart farming.

Birth creates one new located foal-N identity with permanent parent and birth provenance, not warehouse horses or haulage. The juvenile needs its own two feed and two spare water per care day, keeper and enclosure place, and cannot start draft training until 30 village days after birth. A matured born mare can become a parent; the paid test produces a second recorded foal from the first. Adult fitness and normal paid training remain separate. Purchased supplier identities and previous jobs retain their meaning. Old husbandry ledgers migrate from version three to four with an empty breeding book; marked births require matching permanent receipts and active jobs require matching project custody on restore. Command tests cover real purchased parents, paid nursery construction and material trades, birth, care, parent-busy pause, no-refund cancellation, migration, tampering and offline equivalence. A command-driven depletion test now purchases every original supplier animal through paid physical trips, records the loss of 22 while preserving the first cared-for pair, then proves that pair produces a cared-for foal with supplier availability at zero. Actual woodland planting, harvest, timber sales and tool exchange fund the route; save restoration retains the resulting identities. This proves one survival path after complete supplier loss. Larger herd management, rescue from wider disasters and mounted uses remain open. The animal transport plan tracks those gates; the full M0–M8 goal remains active. Getting started stays food first.

A governor may delegate a named draft horse — September 23, 2026

Implemented as a bounded H3 regional route: A chartered home with active Regional institutions, a staffed registry office, Record keeping and Public accounting may authorize an established owned outpost's governor exchange with either human carriers or one explicitly selected, trained home horse. City → Frontier & charters shows qualified horses and current blockers; the authorization review names the horse, separate feed per paid trip, cumulative feed ceiling, cargo targets, retained stocks and worker floor. A selected horse requires handcart policy, a serviceable cart, complete care and rest, feed stock and the livestock operating allowance. It still uses two human handlers. The horse and feed share the existing 100-weight load with goods and human rations; it does not create extra capacity. Food-only supply mandates remain a separate human route.

Each daily governor check re-quotes the physical outpost journey, including both cargo legs, current road, public and shared regional budgets, feed and the horse. A failed check records a blocked exception without spending, reserving a cart or falling back to human transport. A funded check creates the normal outpost caravan, a version-five draft loan bound to the governor's outpost and home, separate animal-feed custody, and a governor history entry with the actual feed. The cumulative feed ledger is part of the existing material allowance; the livestock charge is not double booked as a governor operating charge. Pause stops future checks, while already paid teams return physically. Return follows the shared animal care, rest, cart-wear, recall, fire and storage paths. Older governor mandates migrate to explicit human transport with zero draft-feed history, and older draft books migrate to version five without creating animals or retroactive costs. Restore rejects a missing marked authorization or mismatched active job/loan. The animal transport plan tracks the now-delivered birth/maturation slice and wider recovery. Full M0–M8 remains active; Getting started stays food first.

A named draft horse can serve a finite recurring trade — September 23, 2026

Implemented, H3 remains partial: A sending village with active Record keeping and Public accounting may choose a qualified home horse when proposing a two-to-six-round recurring barter or relief schedule. The recipient separately accepts the fixed goods, window, maximum rounds and explicit draft service. Acceptance reserves no goods, cart or animal. Every scheduled check revalidates the same horse's care/rest, a serviceable handcart, both cargo legs, separate feed stock and livestock operating budget before any round is funded. A failed check waits and retries daily; it neither spends partial goods nor silently substitutes human transport. Ordinary no-horse schedules retain their old behavior.

Each funded round creates the existing physical two-worker player-trade caravan, a version-four draft loan bound to the child contract and schedule, and separate animal-feed custody. The agreement records immutable feed per round, cumulative feed spent and each trip's actual feed. The sender's City review shows the selected identity and provisions; the recipient sees the draft commitment and feed maximum without the private animal ID. Both parties may stop future rounds, with unchanged arrival exchange, recall, return, care and cart wear. Version-two recurring agreements migrate to explicit human transport with zero animal feed; earlier draft books migrate to version four without new assets or retroactive spending. Restore checks agreement, child contract, loan and job custody, and archived child pruning removes its completed loan receipt. The animal transport plan tracks the delivered governor route, breeding and wider recovery; full M0–M8 remains active. Getting started stays food first.

Trained draft animals carry consented player trades — September 23, 2026

Implemented, H3 remains partial: After another player accepts a one-time barter, coin sale or relief agreement, the sending village can explicitly choose a fit, trained, rested home horse for City → Trade & transport → Review horse and handcart dispatch. The existing two-person caravan borrows one serviceable handcart and that specific animal. Review prices the agreed cargo, separate human travel food, separate animal feed, both carrying directions and the currently maintained road route. Animal feed consumes real local stock and the livestock operating allowance; it does not expand the handcart's 100-weight capacity. This manual choice does not authorize a recurring or governor order; recurring agreements now make their own explicit choice as described above.

The bilateral exchange still occurs only after physical arrival, with payment remaining at the recipient until then. A low-condition horse or insufficient return provisions sends the original outward cargo home at human pace; either party can cancel before exchange and release the local payment while the carrying team returns. Fire, storage, keeper service, animal death, cart wear and paid rest retain the existing draft-journey rules. Sender City views show animal identity and carried feed; recipient views show only that the caravan is draft-assisted. Version-three manual player-trade jobs and loans remain distinguishable inside the now version-five draft book. Completed loan receipts are pruned with their archived contracts. Real two-player command and browser journeys, forecast, offline replay and restart verify this one-time route. The animal transport plan tracks breeding and wider recovery after the governor loan delivery; the full M0–M8 goal stays active. Getting started remains food first.

Natural downstream receivers extend recorded flow — September 23, 2026

Implemented, W2 remains partial: A cell with registered surface runoff now admits its missing, strictly downhill natural neighbor empty at the next four-hour water boundary. A sound paid drainage channel takes its reserved lower outlet instead and has admission priority under the 64-new-cell interval limit. The admitted cell receives only actual transferred water. It contributes no local rainfall until a separate station or complete-basin enrollment, and the next natural neighbor can join only on a later interval. If the limit is reached, discharge remains a boundary export; later admission never reclaims that export. Existing retained water, losses and basin exports continue to use the conserved ledgers.

The version-two surfaceReceivers ledger records route as natural or channel with the admitting source, aligned join time and independent rain start. Version-one channel receipts upgrade without changing water or rainfall. Restore validates source custody, immutable natural/paid-channel geometry and exact rainfall provenance. Selected owned plots now show Downhill flow coverage, including registration, receiver admission, local-rain status, cumulative edge transfers, earlier boundary exports and a map link. It exposes no foreign receiver storage. A paid coastal survey and station demonstrate natural propagation toward open ocean with matching forecast and offline replay. Ocean users and more distant unregistered reaches remain unresolved; this does not grant diversion or major waterworks rights. The major-waterworks plan tracks the remaining W2–W4 gates. Getting started remains food first.

Runoff erosion wears completed land improvements — September 23, 2026

Implemented, W2 remains partial: The four-hour surface-water interval now applies a physical maintenance consequence to completed prepared soil, terraces, irrigation channels, local drainage and roads. Only actual recorded discharge at an already surveyed plot can do this. The same routed outlet used by the water ledger establishes downhill fall; maintenance failure changes future routing, not transfers already made in that interval. Receiving and basin ledgers continue conserving all water. Unregistered plots have no inferred flow damage, and the existing marsh demonstration's 0.001220 normalized fall stays below the threshold rather than receiving fabricated erosion.

This explicit game abstraction rounds each natural endpoint elevation upward to millionths. Each full 8,000-subunit (eight game-unit) interval of discharge combines with each full 2,000-millionth (0.002 normalized) fall step, with at most four fall steps and eight condition points per improvement per interval. Below either threshold there is no recorded erosion. A completed work must have existed for the whole interval; a later installation adds no historical erosion. Sound terraces or a fallow policy halve the prepared-soil hit, rounded up. Other works remain exposed even if their service is disabled. At zero condition there is no further loss, and retiring an improvement leaves its old recorded damage intact.

Condition loss uses existing real consequences and recovery: soil below 50% loses its 10% field fertility benefit, weak terraces stop supported production and risk foundation damage, worn irrigation stops crop delivery, drainage reverts to its natural route, and roads lose their travel benefit. Repair remains the existing separately paid four-worker project with actual local materials. Fallow can restore soil on village days while cultivation pauses; ongoing erosion can partly offset that recovery. The City land view shows the selected plot's damaging intervals, capped recent receipts, lost condition by work and real outlet map links. Project reviews explain this ongoing cost before confirmation. Reads change no state or supplies.

runoffErosion version one checkpoints the current processed surface tick on old saves and starts empty without retrospective damage. Each later record binds to a surveyed registered cell, full water boundary, immutable descending route, actual discharge, rounded fall and per-work before/after condition. Cumulative damage and the latest twenty receipts survive restore; missing marked state, impossible route/fall, forged totals and clocks reject. Forecast, incremental and offline replay use the same surface boundary. The primary paid-field scenario harvests logs, makes compost, prepares a community food plot, returns a survey and installs a station, then records real erosion, loss of its fertility benefit and a paid compost/timber repair. This is erosion of completed works; terrain height, complete sediment reach, aquatic species and project-specific downstream impacts still require modelling for major waterworks. The waterworks plan retains W2 as partial and W3/W4 open. Getting started remains food first; the full M0–M8 goal is active.

Wider natural basin connections and possible affected communities — September 23, 2026

Implemented, W2 still partial: Returned watershed surveys now include Potential connected basins in City → Land & water. The original lowest-saddle review remains available. The wider review follows every connection retained by the actual natural basin storage model, including higher saddles and reciprocal receiving catchments. It lists possible affected public communities across the reviewed catchments, existing approach/lowest receiving routes and recorded boundary endpoints. Community names and present owners are recomputed on every read. Unassigned cells are explicitly not proven vacant; natural features and customary rights remain separate concerns.

This is a conservative natural connectivity screen, not a project-specific flood forecast or complete consent register. It uses no current reservoir levels or private foreign station evidence. A complete closed natural network may fit the bounds, but engineered changes, complete inflow, ecological effects and legal permissions still need review. Ocean exits and unresolved receiving paths always leave the natural review incomplete. A higher outlet cannot disappear from consideration merely because no water has crossed it yet.

The read-only version-one analysis examines at most eight basin candidates, includes at most 8,192 complete-catchment cells and records at most 128 directed connections. Each basin retains the existing topology/read bounds. Unexamined basins, oversized catchments, omitted connections and unknown recipients remain explicit boundaries. Distinct crossings remain listed; repeated uncertainty reasons are grouped per basin. Supplemental original routes and boundary endpoints are separately included in the reviewed-cell/tenure count. Frozen results use a sixteen-entry cache outside saves; no migration, stock grant, rainfall enrollment, water transfer, fieldwork-date update or foreign inventory disclosure occurs.

The paid marsh world reviews eight catchments, 2,667 terrain cells and 125 potential connections, identifying the source camp, its parent village and Greywood Stewardship. Further basins and coastal users remain unresolved. This advances affected-party discovery without satisfying the full impact/permission gate in the major-waterworks plan. Getting started stays food first and the full M0–M8 goal remains active.

Reserved outlets receive water without invented rainfall — September 23, 2026

Implemented, W2 remains partial: A sound completed local channel whose source already participates in surface flow now admits an absent reserved wetland receiver at the next water boundary. Its distinct natural downhill neighbor can enter at that same boundary so the bypass remains conserved. Both new cells start empty and receive only actual transferred water. Admission does not register local rainfall, expand a catchment, or recover earlier exports; subsequent hops from newly joined cells wait for later boundaries. Normal retained-water limits and losses apply; excess leaves along each receiver's existing downhill route and remains in surface/basin accounting. This supersedes the previous requirement to monitor both endpoints before simulating a local channel.

Failed works do not admit a new receiver. Once admitted, a cell and its remaining water survive failure, repair, removal and source route changes. No demolition or read can erase retained water. Later station or complete-basin enrollment adds local rain from its actual enrollment time, with the first interval prorated. It preserves the cell's original admission time, stored water and transfer/export history. A source without any recorded runoff still cannot create a water supply merely by constructing channels.

The current version-two surfaceReceivers ledger checkpoints old saves with empty admission history and upgrades version-one channel receipts. Each later record names the cell, admitting source, route type, boundary time and optional rainfall start. Validation combines authoritative station/basin rainfall provenance with receiver admission geometry, timing and custody to reconstruct the exact cell set. Receiver rainfall stays zero until separately enrolled. Existing surface/routing/basin identities remain unchanged.

Adequate retained transferred water can support wetland/woodland recovery. A receiving cell with low storage but no local rainfall record is unobserved rather than presumed drought-stricken. The saved rainfall start is compared against each observation's time, so later monitoring cannot reinterpret an earlier unobserved response. A wetland view distinguishes actual retained water from absent rainfall coverage, and a channel view shows receiver admission and whether local rain has subsequently joined.

The integration scenario now physically supplies and develops a marsh village, manages food and lawful household continuity, produces local timber for research practice, builds/staffs a registry on paid drained land, researches hydraulic engineering, returns a watershed survey and installs a separately paid station. Actual drainage transfers, habitat loss, forecast, offline catch-up and restore agree. Its generated basin already covers the reserved outlet; tests with controlled geometry separately prove admission without receiver rainfall. No stocks, research, residents or station receipts are granted to bypass that journey.

Getting started stays food first. The waterworks gates still require comprehensive source/affected-reach coverage, larger engineered projects, aquatic species/erosion, current downstream rights, construction and useful major operation. Empty local receiver admission does not certify those requirements or finish M8.

Completed drainage routes recorded runoff — September 23, 2026

Implemented within registered surface coverage; W2 remains partial: Sound completed drainage sends a cell's post-retention discharge to its reserved, strictly lower wetland outlet while retaining at least 25% on a distinct natural downhill edge. If the reserved and natural outlets coincide, that one edge carries the full discharge. Source runoff must already be recorded. The receiver-admission rules above let absent outlets join empty without local rainfall. Condition below 50 restores the full natural downhill route; paid repair re-enables channels when condition returns to at least 50. Decommissioning restores natural routing without deleting earlier transfers or resetting ecological loss. Unfinished works grant no channel flow. Existing same-charter surveys, reservations, slope, material, specialist and crew rules remain in force.

Receiving wetlands retain water within their current habitat-based limit and pass excess through their own route; reservation adds no capacity. All edges strictly descend, so existing elevation-order processing remains acyclic and conserved. An unregistered source remains explicitly unavailable. An absent reserved receiver now joins empty at the next boundary under the rules above, without rainfall, stored-water grants, historical exports or foreign rights. Complete monitoring/receiving coverage, engineered routing beyond those cells and full downstream-impact permissions remain open requirements rather than inferred authorization.

surfaceRouting version one and a land marker preserve cumulative transfers by exact source/recipient edge. Old saves checkpoint their processed tick and existing natural-edge transfer totals without moving water or rewriting samples. Later maintenance failure, repair, removal or current route changes cannot reassign historical incoming water to a different neighbor. Per-edge totals must reconcile every cell's transferred and incoming counters; restored edges must be natural or satisfy the immutable drainage slope/terrain geometry.

Stations retain their original natural upstream footprint. New interval readings account for water entering and leaving that footprint across any channel crossing: opening + rain + imports = closing + evaporation + infiltration + exports. Station-cell discharge is shown separately and is not counted twice. Existing seven-field readings retain their accepted historical balance; subsequent nine-field readings add imports/exports, with a shared twenty-reading window and unchanged rainfall scope. A channel may export water above a station or import it into another station's footprint without creating a false deficit or surplus.

City → Land & water shows the selected completed drainage route, active/unresolved/failure reason, natural outlet, fixed bypass and cumulative transfers along both recorded edges. A natural-edge total can include earlier pre-channel flow; the selected edge's total can also include earlier natural flow when the routes coincide. Private forecasts include community routing projections. Getting started stays food first. This closes the previously explicit local-channel routing gap where water coverage exists; the major-waterworks gates still require complete affected reaches, broader ecology, all affected rights and physical major works.

Wetland habitat changes conserved retention — September 23, 2026

Implemented, W2 ecology remains partial: Natural wetland cells now have an observed habitat condition on the existing four-hour water clock. From the second consecutive dry check, they lose five condition points per dry interval; registered surface retention below one game water unit is dry unless actual basin inundation supplies wet conditions. Wet checks restore up to two points. Physical drainage conversion takes precedence, losing up to ten points per observed check even when the drainage works are worn out. Values clamp to 0–100. Unregistered receiving land without inundation is unobserved, not presumed dry. These are explicit game abstractions, not measured ecology.

Unconverted wetlands retain at most 2 + 0.1 × condition game water units; the unobserved natural baseline is twelve. A completed drainage conversion retains at most two until physical decommissioning. A quote or unfinished project does not reduce retention. Recorded habitat loss survives decommissioning, so capacity recovers with adequate water over subsequent checks. Failed upkeep stops maintained field use under existing rules but does not restore habitat. Reserved neighboring wetland remains protected from building/conversion; designation adds no water or extra capacity. The later local-channel routing rules above now use that neighbor after admitting an absent receiver as described above; natural route evidence stays immutable.

At the next surface interval, water above the changed limit follows normal losses and downstream discharge. Nothing is clamped away on construction, removal, reading or restore. In particular, an old converted cell may still hold twelve units until its next processed interval releases the excess. The surface and basin conservation identities remain intact. This adds a real retained-water/runoff consequence to land conversion without warehouse goods, surveyed well yield, new deposits or intake rights.

wetlandEcology version one and its land marker checkpoint old saves at the current surface tick with no retrospective condition loss. Records begin at later checks over registered wetland cells, already tracked cells and wetland reached by recorded inundation. Same-boundary new surface registrations wait. Each record retains current condition/mode, capped dry streak, cumulative loss/recovery and the latest exact before/after observation. First observation starts from the accepted natural-condition baseline of 100; missing historical observations are never invented.

City → Land & water → Wetland habitat and retention distinguishes observed condition from an unobserved estimate, shows storage and next-interval capacity, and explains conversion and slow recovery. Drainage/removal reviews compare capacity using today's condition and explicitly distinguish it from stored water or a completion guarantee. Private forecasts use the same community projection. Getting started stays food first; marsh conversion is a later engineering choice with retained-water consequences.

The waterworks gates still require complete affected reaches, resolved flat/engineered routing, species-specific aquatic habitat, erosion, broader damage, all affected rights and controlled major construction/service. This is partial ecological progress, not completion of M8 or the full goal.

Woodland water stress changes food and seed habitat — September 23, 2026

Implemented, W2 ecology remains partial: Registered forest cells and existing trees reached by recorded basin inundation now respond to water at the four-hour boundary. Three consecutive flooded checks trigger six health points, two tree-cover points and one maturity point of loss per further flooded check. Two consecutive dry checks trigger four health points of loss per further dry check. Dry means a registered surface cell retains less than one game water unit; a recorded flood takes precedence. Balanced retained water adds up to two health points. Values clamp to their existing 0–100 range. These are explicit game rules, not hydrological or botanical measurements.

Ordinary vegetation regrowth is suppressed while the previous recorded water condition is flooded/dry. Flood-damaged surviving trees enter the existing recovering state; after conditions balance, ordinary recovery resumes alongside the water-supported health increment. Water stress adds no logs, saplings, food or warehouse stock. Burning, cultivated and zero-cover plots receive no additional water-supported healing. A receiving woodland without local rainfall coverage is unobserved after flood recession, not automatically drought-stricken. Natural origins remain unchanged.

Foraging woodland now needs 25% cover, at least 50% health and no floodwater. Its existing finite capacity/regrowth and worker limits still apply. Nursery seed sources retain their existing maturity/cover requirements and additionally need 50% health and no floodwater. A damaged woodland can therefore remain unusable for food/seed after recession until health recovers. Existing planted/grown timber remains subject to the normal harvest rules; decline does not deliver free salvage.

woodlandWater version one and its land marker checkpoint old saves without changing trees or supplies. New records begin at subsequent water checks; newly enrolled surface cells joining exactly at that boundary wait until the next check. Each cell keeps bounded wet/dry counters, the latest before/after response and cumulative ecological losses/recovery. City → Land & water → Woodland and nursery stock shows tree health and Woodland water stress for the selected tracked plot. Private forecasts include the same community records. The Getting started order remains food first; its fallback advice now depends on healthy, unflooded woodland.

This establishes a real water-dependent woodland outcome for future retention/diversion decisions. Aquatic species, complete sediment reach and broader terrain response, comprehensive affected reaches, consent and major construction remain open in the waterworks gates. The full M0–M8 goal stays active.

Flood damage and paid recovery — September 23, 2026

Implemented, W2 still partial: Inundated standing buildings now lose condition at each four-real-hour water boundary. Use the deepest inundated footprint cell once per building: one condition point per 0.001 normalized depth, rounded up, at least one and at most ten. Damage cannot exceed remaining condition. These are explicit game balancing units, not metres or a physical engineering standard. Operational/damaged buildings qualify; unfinished construction, existing ruins and cleared sites do not. Natural lake/ocean cells remain outside land inundation.

The existing damage system determines damaged/ruined stages, production/service loss and staffing release. Ruin interrupts attached work and returns any loaned construction cart under existing custody rules; funded materials are not automatically refunded. Repair/rebuild remain physical paid orders. Site crews wait while flooded, then resume or can be paused/cancelled normally. Repair restores condition without erasing historical flood losses. Recorded floodwater can now spoil pooled food and damage stored textiles and saplings as described above; direct pooled flood injury for exposed unsheltered residents is implemented above, while housing/service loss can also affect later ordinary needs. Woodland water stress is now implemented above; travel, species-specific aquatic habitat, complete sediment reach, broader terrain response and unfinished earthwork damage remain separate open requirements.

The version-one floodDamage ledger checkpoints the current water tick and adds no past damage on migration. Each later interval applies at most one hit per building, retains cumulative loss/count and twenty recent receipts with interval, worst cell, basin, depth and before/after condition. A repeat or restart cannot apply that interval twice. Damage occurs after pool routing and initial crew suspension, followed by institution reconciliation and crew scheduling before tied jobs/days. Water balances are unchanged; any cart return uses normal warehouse accounting.

City → Land & water → Flood damage and recovery explains the rate and shows private community damage history with building map links. Private forecasts include the same receipts and condition changes. This provides a structural consequence for future flood-management works; W2–W4 still need full affected-flow evidence, ecology, consent, controlled construction and useful service. Getting started stays food first. The full M0–M8 goal remains active.

Basin inundation affects production and site work — September 23, 2026

Implemented, W2 remains partial: Conserved basin levels now determine current inundation of land cells within each completely modelled pool. A land cell is inundated when the pool level exceeds its generated bed, rounded to the same millionth-height units used by storage. Natural lake/ocean cells are excluded. This is an explicit game-level exposure rule, not a depth in metres or a prediction outside the resolved model. Exposure consumes no water, changes no generated terrain and grants no usable supply.

Community fields, tree nurseries and other production buildings cannot produce while any footprint cell is inundated. A blocked due harvest/batch is skipped; recession restores ordinary future production without catching up missed batches. Flooded supporting institutions cannot host active technique service or newly funded learning; funded academy, scriptorium and specialist work retains its supplies and waits for a dry reviewed resume. Standing buildings also take the structural damage described above. Standing flooded storage now loses its modeled share of edible stock, including the oldest dated fish batches, plus vulnerable textiles and saplings; exposed residents can take the separately modeled pooled flood injury above, and recorded travel consequences follow the separate route rules. New building footprints reject flooded cells. Ordinary land-project quotes require dry work sites, and paid crew orders wait while their site, building footprint or drainage outlet is inundated. Surface-water boundaries reschedule crews immediately before tied work/daily events, retaining unworked time, paid materials and cancellation accounting. Recession resumes the same order; pause/cancel remain available.

basinExposure version one and its land marker checkpoint the processed surface tick on migration. Existing saves retain all water, samples, work and inventory. Effects begin only after the next water interval, without revisiting earlier harvests or completed work. Current exposures are pure derived geometry cached by water-state identity and interval; no duplicated water or saved flood-cell inventory is introduced. Forecast/live/offline simulation uses the same rules.

City → Land & water → Basin and spill review now shows Current land inundation, a pending-migration notice where applicable, affected land cells and map links. Full basin exposure requires an owned station's returned report, like its balances. A player's own selected inundated plot and blocked production/work explain the immediate local cause even without remote basin-report access. Getting started remains food first; these consequences arise only from subsequently simulated pools.

This supplies a real cultivation/work consequence for future retention projects. The major-waterworks gates still require full affected-flow coverage, habitat/sediment and terrain erosion, broader damage rules, all affected rights, controlled works and useful operation. The full M0–M8 goal remains active.

Complete station-basin rainfall — September 23, 2026

Implemented, W2 remains partial: Each installed runoff station now enrolls its complete terminal catchment when basin topology can prove that extent within the existing bounds. Every registered cell receives modelled precipitation once, including the terminal and connected lake cells. Overlapping stations reuse cells and balances. Receiving a spill does not recursively enroll another basin's rain. Unresolved catchments keep their local station coverage. This completes modelled rainfall extent for enrolled station basins, not worldwide inflow or downstream impact coverage.

The version-two surface ledger records basin registration, originating station and enrollment time. New stations enroll at actual on-site installation; new cells start empty and receive only elapsed-interval rainfall. Version-one saves preserve existing cells, counters, station samples and basin receipts. Their full catchments enroll empty after the next processed water interval, and first rain arrives in the following interval. Historical exports remain outside the surface cells and are never recovered. Natural strict-descent geometry remains unchanged; sound completed channels can override registered local transfers as described above; generated flat topology is not a claim of resolved physical flow across every flat.

Lake cells pass their rain and arriving runoff into the shared basin ledger without separate cell storage, evaporation or infiltration; basin losses apply once. A closed terminal cell's exported runoff now resolves into its own basin. No inventory, well capacity or irrigation entitlement is created. City → Land & water → Basin and spill review shows registered cell counts, complete versus partial/pending coverage and the registration date. Local station readings retain their original upstream scope. Getting started remains food first.

The waterworks delivery gates still require comprehensive affected-reach coverage, physical flood/ecology effects, current rights and consent, construction and useful service. The full M0–M8 goal remains active.

Conserved basin storage and reciprocal spill flow — September 23, 2026

Implemented, W2 partial: New water leaving registered runoff cells now feeds a separate basin ledger. Resolved receiving basins retain real transferred water, lose water to evaporation/infiltration, and exchange it across generated saddles according to their current levels. Transfers can reverse when a receiving basin rises. Each connected pair uses its lowest shared saddle, while higher connections to other basins remain available after lower connected basins fill. Ocean exports and water leaving the resolved model are accounted separately. New exits retain exact crossing receipts; older version-one export totals stay separately identified without guessed locations or water recovery. This is natural modelled flow, not a player-authorized intake or constructed waterwork.

Only actual new runoff exports fund these pools. Viewing basin catchment outlines adds no rainfall; station enrollment explicitly activates the complete traced catchment under the version-two rules above. New pools start empty; old-save migration checkpoints previously exported water without recovering it, resetting the existing cell ledger or granting stocks/well yield. All water quantities use integer thousandths of a game unit. Source receipts, directed transfer totals, per-basin cumulative losses and twenty interval balances reconcile the entire retained/exported amount. Historic surface transfers remain on their accepted edges; basin storage consumes subsequent boundary exports. Later registered channel overrides are internal transfers described above.

The hydraulic model uses explicit game units: generated elevations are rounded up to millionths, and one cell stores ten water subunits per unit of height above its model bed. Connected lake cells use a common flat bed at their minimum generated elevation. This is a game abstraction, not measured lake depth, metres or a terrain alteration. Storage determines level; no observed water level grants initial volume. Recorded inundated land now receives the production, site-work, structural and travel consequences described above; durable-stock damage, named-person wounds, broader aquatic ecology and full affected-reach coverage remain open.

Each four-hour interval feeds new runoff, charges basin evaporation up to 250 subunits per currently wet model cell, then one percent infiltration rounded down. Up to sixteen deterministic routing passes move integer water toward pairwise level balance without overdraw or overshoot. Differences left by the work limit retain their water for later intervals. At most 32 new basins are registered per interval. Incomplete routes/metadata and connections beyond that discovery limit leave explicit external exports; they cannot later reappear as free stored water. Those incomplete effects continue to block major-project approval.

City → Land & water → Basin and spill review now includes Live basin water, Water balances and Modelled basin connections. Live balances require a returned installation report for an owned station in that basin; a returning team cannot publish them remotely, even though shared physical simulation continues. The panel shows current retained water, normalized level, wet-cell count, exact balances, cumulative losses/exports and sent/returned connection totals. Private forecasts use the same chronological simulation. Derived geometry remains available from a normal returned survey without changing its historic observations.

The major-waterworks delivery plan records the remaining W2 scope: comprehensive source/affected-reach coverage, limits beyond the bounded model, ecological/flood effects and project-safe impact rules. W3/W4 still require current affected-party permissions, physical construction, actual useful service, maintenance and safe recovery. No basin water can yet be withdrawn into inventories, wells or irrigation. Getting started stays food first, and the full M0–M8 goal remains active.

Basin extent and candidate spill topology — September 23, 2026

Implemented, W2 still partial: A returned watershed report now supports Basin and spill review for its selected plot in City → Land & water. This is generated terrain analysis, separate from the report's dated field observations. It identifies the terminal basin, expands its catchment, joins contiguous equal-height land into flat components, and treats contiguous lake cells as one water body. A flat with a lower outlet routes across its connected cells to the lowest lower neighbor, breaking ties by cell ID. An enclosed flat remains a closed basin. Oceans remain open boundaries with unknown coastal users.

For a completely traced catchment, the review examines every boundary edge and reports all equally low candidate saddles, their receiving routes and terminal basins. Inside a land basin it also identifies connected cells at or below that saddle as a potential retention footprint. Normalized generator elevations are not metres, and this footprint is neither actual flooding nor a reservoir volume. A receiving basin can back up across the same saddle; the basin ledger above now models funded levels and reciprocal overflow, while geometry alone does not establish them. Candidate geometry is not a working spillway or authorization to drain.

The search is bounded to 4,096 cells per flat/lake component and catchment, 1,024 cells per route, 32 lowest spill crossings and 32,768 unique terrain cells per query. Each exceeded boundary is explicit. An incomplete catchment has no certified saddle; incomplete receiving traces and omitted equal spill branches remain blockers. The review lists current public communities intersecting the recorded area, cells outside present community regions, natural feature cells and how much of the basin participates in the existing runoff ledger. Absence of a community marker establishes no vacant-land claim or complete rights registry.

The derived topology is immutable, versioned and cached outside saved state with a sixteen-entry bound. Old reports can use the analysis without new funding or rewritten observation dates; this is a model calculation rather than additional physical fieldwork. Opening, caching or restoring a review changes no inventory, jobs, rainfall, retention, station coverage or well yield. Version-one survey geometry and historical runoff transfers keep their accepted meaning; registered completed channels now have the local override described above. The basin ledger above now uses these receiving paths for subsequent cell-boundary exports, with explicit source checkpoints; it does not rewrite accepted cell routing or historical exports.

The major-waterworks plan now distinguishes delivered basin evidence from the now-delivered bounded coupled storage/transfers and the remaining complete downstream impact envelope and ecological/flood effects. Permissions, major construction and useful operation/recovery remain open. Getting started retains its food-first sequence; the full M0–M8 implementation goal remains active.

Conserved runoff and physical monitoring stations — September 23, 2026

Implemented, W2 partial: After a returned watershed survey, City → Land & water can fund Review runoff station at that same owned plot. Active Hydraulic engineering, two available residents, a completely traced upstream catchment and a strictly descending outlet are required. Six timber, two tools and ceil(4E/12)+6 carried meals are reserved. The team walks the existing charter route, works for a full village day, installs the passive station on site, then physically returns. Materials are consumed only at installation. Recall, fire, lost engineering, meal shortages, storage-held return and lawful succession retain the survey journey's custody rules. Stations become visible only after the installation report returns; the water clock can already run during a delayed return.

One versioned global ledger models the union of installed stations' upstream cells. Overlapping stations share cell storage and rainfall, so readings are never separate additive supplies. The first installation starts an independent four-real-hour clock. New cells start empty, receive only rainfall since their actual registration and never recover historical boundary discharge. A station installed inside an existing interval waits for a complete later interval before reporting. Ordinary surveys, reads and refreshes cannot reset or refill storage.

Water is stored in integer thousandths of a game unit. Abstract rain is based on immutable moisture and a documented repeating wet/dry sequence. Strictly descending edges transfer water once; evaporation and infiltration are recorded losses, temporary retention is bounded by immutable biome, and water leaving the simulated extent is recorded as boundary export. Every cell and catchment reconciles opening storage plus rain/incoming with closing storage, losses and outflow. Infiltration does not replenish existing well allowances. This cell ledger models passive surface retention. The subsequent basin ledger above adds bounded depression/lake storage and spill flow; constructed reservoirs, groundwater exchange, complete sediment reach, broader terrain response and usable intake remain outside these water-ledger releases. Flood, habitat and completed-earthworks erosion consequences are implemented in the later sections above.

Private station cards retain twenty complete readings with full timestamps and three-decimal water amounts. Original paid installation receipts remain pinned even after later survey reports replace them. Version-two survey state explicitly preserves version-one job prices; old worlds gain an empty surface-water ledger without retroactive rain, stocks or structures. Chronological simulation, bounded catch-up, private forecasts and restarts share the same water deadlines and accounting. The first-session food/staffing walkthrough is unchanged.

The major-waterworks plan remains the delivery contract. W2 now includes the basin geometry review above but now has the bounded coupled basin ledger above but still needs the complete affected reach and actual ecology/flood effects; W3/W4 still need permission, physical major construction, useful operation and recovery. Stations grant neither inventory water nor diversion rights. The full M0–M8 implementation goal remains active.

Watershed evidence and paid field surveys — September 23, 2026

Implemented: Hydraulic engineering now enables the ordinary local watershed field survey in City → Land & water. Two actual residents take paid materials/meals to a selected plot within their own charter, observe for one full village day and physically return. Two timber and one tool are consumed only when observation completes. Meals are ceil(4E/12)+6 for E walking edges, covering both legs, one observation day and two days of reserve. Normal food reserves, public timber spending, current authority/world review and one attention apply. The field team remains assigned through storage recovery and is protected from civilian labor reassignment. Existing buildings on the observation plot continue their ordinary work; surveying does not reserve their footprint.

Version-one terrain tracing chooses the lowest strictly lower neighbor, with deterministic cell-ID ties, from immutable generated elevations. It records at most 256 upstream cells and 120 downstream edges, explicitly marking any incomplete extent. Lakes/oceans end the trace; no lower neighbor records a closed basin. This is potential drainage geometry, not an observed river, rainfall, discharge or additional well yield. The later basin review above adds connected-flat, lake-outline and candidate-spill evidence. Bounded modelled water levels are now delivered above; water-body users, comprehensive source coverage and unknown downstream impacts still need resolution before a major project can be approved.

Reports become available only when the surveyors return home. They retain observed wetland counts, mean tree cover, generated feature cells and the survey timestamp. Current public community names intersecting the traced cells are shown separately; absence of a community marker proves neither vacant land nor complete rights. Inspection does not refresh old environmental observations or grant construction/diversion consent. Re-observation replaces that plot's latest report while retaining up to twenty other return receipts.

Outward/observing teams can be recalled for physical recovery of unused supplies. Loss of the engineer, fire at the observation plot or low return meals interrupts observation. Route fire holds travel while provisions run down; unmet meals enter ordinary household accounting. Full home storage holds the team and unused goods, while an already arrived report is published only once. Succession preserves funded custody; the lawful successor can recall it. Forecasts execute the same deadlines and private Region views expose real positions and blockers.

The original version-one watershed survey ledger and separate land marker migrated old saves to no reports and no grants; the runoff extension above upgrades the ledger to version two while retaining accepted survey terms. Validation binds geometry to the generated world, limits traversal, checks original materials, elapsed meals, work/return timestamps, exclusive labor and report publication. Public map jobs omit private findings and provisions. Both wiki audiences and Getting started were reviewed; the food-first founding path is unchanged.

The major-waterworks delivery plan records the complete remaining scope. This delivers W0/W1 evidence and fieldwork, not reservoirs or M8 completion. The runoff extension above now provides limited conserved surface flow; complete basin impacts, ecological/flood effects, all-party consent, major construction, maintenance and safe drawdown remain required. Existing shared-well conduits retain their earlier rules; the full M0–M8 goal remains active.

Manual draft supplies to owned outposts — September 23, 2026

Implemented: City → Frontier & charters exposes Manual supply transport for each retained owned outpost. Choose the human team or an explicitly named, trained home horse for that order, then review an existing delivery/collection offer. A horse requires the existing handcart policy, a separate serviceable cart, active husbandry, complete care, condition 80+ and any outstanding paid rest. It does not move its home or grant animals to the receiving outpost. Two home handlers remain assigned through the physical return and recovery.

Both legs share the existing 100-weight limit among cargo, human rations and paid animal feed. For E accepted edges, animal feed is ceil(4E/12)+4. Delivered feed and journey feed are separate obligations; funding checks their combined home-stock requirement and deducts each once. Collection goods are reserved at the outpost once and released there on outward recall. Animal feed enters the existing gross livestock operating ceiling; ordinary manual cargo retains its existing budget scope. No automatic mandate gains animal authorization from this selector.

Roads and animal assistance use the same step scheduler: eligible assisted steps take 75% of current road-adjusted time, and existing deadlines remain fixed. Actual movement wears the animal; a full receiving depot holds the team before the final edge and does not invent repeated movement/wear. Time in storage or fire delays still consumes carried provisions. An outward shortage or condition below 70 releases the unexchanged collection reservation and sends original exports physically home at human pace. Starvation can kill the identified animal while the surviving team retains cargo and cart. Outpost supply continues to use its existing route/defense rules; this adds no new escort or scouting capability.

Home admission, reserved enclosure/water, unused-feed unloading, worn-cart return and paid rest reuse the delivered draft rules. A missing home keeper can hold the animal after cargo/cart unloading. Successful admission starts ordinary local care; it cannot feed twice from journey and home stores for the same interval. Full home storage keeps the team assigned until all held goods/cart/feed fit. Recall, world-review freshness, animal exclusivity, succession and private projections apply equally to the regional order. After illness/death changes staffing, the successor must restore the keeper before admitting the returned animal.

The global husbandry marker remains three. A later nested draft detour marker migrates older loans with no alternate route or changed provisions; active owned-outpost loans retain their original paid route while a separate actual route records a Scouting detour. Nested draft version two accepts draftAnimalVersion 2 owned-outpost supply loans with a retained outpost identity and matching accepted route. Validated version-one books migrate without changing manual waystation loans, qualifications, supplies or deadlines. Forged destinations, route substitution, wrong journey roles, duplicate custody and unsupported automatic-loan markers reject. Private City/Region and forecasts include the same loan. Public jobs retain no animal identity/feed ledger.

This advances H3 and M3/M6 regional logistics; the newer manual bilateral player-trade draft route is described above. Recurring and governor draft authorization are now delivered, as do H4 breeding, wider animal rescue and the remaining M0–M8 gates. Getting started was reviewed and keeps ordinary food and hauling before animal investment. See the animal-services plan and verification record.

Paid draft training and manual handcart assistance — September 23, 2026

Implemented: City → People → Livestock and daily care → Draft training and handcart trips trains an existing home horse, then explicitly selects it for a manual waystation supply journey. Training reserves one additional trainer and four timber, one tool and six feed under public timber and regional operating limits. It needs active Animal husbandry, an operational staffed enclosure at least 65% sound and an animal at least 80 condition with complete care. One course runs per settlement. Three actual work days each require fresh paid home care; the first successful day consumes the timber/tool and each consumes two prepaid training feed. Ordinary care remains separately paid. Failed checks preserve progress and supplies and retry daily. Cancellation returns only unused supplies; insufficient storage retains the trainer and animal reservation until recovery completes. A qualification preserves the same animal and purchase identity.

Select required handcart transport in Trade, then review a specific trained animal and supply offer in People. The order borrows one serviceable cart and that animal, with the existing two handlers and 100-weight ceiling including cargo, human food and animal feed. For E accepted route edges, prepaid animal feed is ceil(4E/12)+4: an ordinary walking round trip plus two days' reserve. It is a separate gross livestock operating commitment. A fit animal shortens supported travel steps by 25%, including maintained roads; it grants no extra capacity. Each actual edge costs one condition. Assistance requires condition at least 70 and carried feed. An outward team with low return provisions or an unavailable/unfit animal physically recalls its original cargo at human pace. Existing human/cart orders retain their accepted terms.

Animal feed follows elapsed time through travel, fire delays, detours and blocked home admission. Prolonged shortage reduces condition and can cause recorded mortality; surviving handlers retain the cart and cargo. Real militia escorts follow the same movement deadlines and scout detours. Home places and water remain reserved. Returning cargo/cart can unload while a missing keeper or damaged enclosure still holds the animal on carried feed. Unused feed requires warehouse room. AActual movement returns the cart worn. After a used trip, the animal needs a full paid home care day and at least 80 condition before reuse; elapsed time or relocation alone cannot satisfy this rest. An immediate unused recall returns the serviceable cart without adding rest.

The global husbandry ledger/marker is version three, with a nested draft book for courses, qualifications and loans. The book began at version one, gained owned-outpost routes in version two, and is now version three for manual bilateral player trades as described above. Validated older saves upgrade without training animals or changing accepted journeys. Training jobs use husbandryVersion 3; explicitly assisted waystation, owned-outpost and one-time trade caravans use draftAnimalVersion 1, 2 and 3 respectively. Finite completed qualifications remain permanent, with twenty canceled courses and twenty closed loan receipts. Supply trees, Workers, private City/Region, forecasts and factual return notices share this custody; public jobs hide private animal/material details. Succession preserves funded work and ordinary authority checks.

This delivers the bounded H2 service in the animal-services plan. Manual owned-outpost draft supply is now delivered above. Bilateral, scheduled and governor draft routes are now delivered; wider breeding recovery, cavalry, livestock trade and rescue remain planned. Getting started was reviewed and retains its food-first founding sequence. Full M0–M8 completion, including remaining major watershed works, is still outstanding; see implementation status.

Livestock relocation and outpost evacuation — September 23, 2026

Implemented: City → People → Relocate livestock moves the one or two present animals from an enclosure to another owned enclosure, locally or among the same founding village's established outposts. It preserves each identity, purchase, condition and lifetime care. The destination needs unreserved places, a sound staffed enclosure, actual feed for its first full care day, a remaining cumulative feed allowance and spare water after existing commitments. Recovery does not require active Animal husbandry or a sound origin; constructing a new enclosure still does.

Two available origin handlers escort the animals along an actual adjacent land route between enclosures, then walk back. For E route edges and N animals, accepted provisions are ceil(4E/12)+4 food and ceil(4NE/12)+4N feed, together at most sixty weight. The feed includes a funded animal return contingency. Both supplies leave the origin once and count as gross livestock operating spending; dispatch costs one attention and no purchase coins. Recall is free before admission. Condition is neither healed nor reset by moving.

Source places remain held until destination admission. Destination places and cross-settlement water are reserved while outward; local moves do not count the same animals twice against water. Missing destination care or insufficient return provisions orders physical return. Fire can hold either direction while elapsed food/feed consumption continues; prolonged shortage can kill. Returned animals need a restored origin keeper/enclosure, while unused food/feed can wait for warehouse space. Actual destination admission starts local care there, but the origin handlers remain assigned until their return and unloading. Both endpoint buildings remain protected from demolition/salvage while the journey exists; repairs and rebuilding remain available.

Relocation introduced version two of the global husbandry ledger and marker; the draft release above migrates it to version three. Version-one purchases keep their accepted terms and migrate each animal's already-paid home feed into a per-settlement spending map. Moving never refunds or transfers historic care spending; later care debits the receiving settlement's separate allowance. Active relocation records plus twenty completed/returned receipts retain routes, exact provision partitions and admission. Finite animal identities and purchase provenance remain permanent. Private City/Region, supply views, return briefings and forecast copies share this state; public chunk jobs omit private animals and provisions.

Ordinary outpost supply trips now deliver/collect actual feed at one weight per unit; Expedition offers expose twelve-feed batches when stock permits. Animals themselves never enter generic cargo. To evacuate an outpost, first relocate its live animals, wait for its handlers to return, release other staff and work, then use the existing resident evacuation. This supersedes the earlier no-relocation boundary. Arbitrary rerouting, rescue parties for immobilized animals, livestock sales, remaining automatic draft routes, wider breeding recovery and cavalry remain planned. Paid training and manual waystation, owned-outpost and bilateral player-trade draft trips are now delivered above. Getting started was reviewed and remains unchanged because these controls follow husbandry investment. The full M0–M8 goal remains active.

Located livestock, physical purchases and daily care — September 22, 2026

Implemented: Animal husbandry is a thirty-first working topic in Agriculture, after Seed selection and Joinery. Six practice days, an operational commons, three research days and actual experiment/adoption supplies precede its one-person service. It unlocks new pastures and a separately defined two-place Livestock enclosure. The enclosure costs 60 timber, 12 bricks, two tools, 12 food and 100 work before normal adjustments, occupies one cleared forest/field hex and needs one keeper. Older pastures retain their original production without retroactive research requirements. Legacy stables remain the inactive charter haulage prototype; existing horses are not silently converted.

The waystation has a once-recorded allocation of 24 identified adult horses, separate from all material inventories. A reviewed collection reserves two animals, two enclosure places, two available handlers, 24 earned communal coins and real home food/feed. Walking uses the actual home–waystation route, one hex per twelfth-day, with a sixty-weight provision ceiling. Coins remain held until supplier pickup; animals then travel home under the same identities. Before pickup, recall or lost husbandry/admission readiness returns the handlers and unused payment physically. After pickup, the purchase is paid and the animals return for admission. Fire delays still consume carried food/feed; prolonged feed loss lowers animal condition and can cause recorded mortality. No purchase replenishes the supplier automatically.

Home admission requires the reserved operational enclosure, condition 65+, an assigned keeper and no building work/fire. Until then animals remain with their handlers and consume carried feed. Admission does not require material warehouse capacity. Unused provisions do: full storage holds the returning handlers and supplies while admitted animals begin local care. Ordinary households feed handlers waiting at home, preventing double meal accounting. Animals never appear in the warehouse horse count.

Daily care: explicitly authorize a cumulative local feed limit in City → People → Livestock and daily care. No feed is bought or reserved by that policy, and past spending never resets. At the first village check after a complete day since admission, then each following daily check, each home horse needs two actual feed, two spare water capacity and a keeper in an operational enclosure at least 50% sound. Feed is charged only when staffing, stock and allowance checks pass; regional operating ceilings also apply. Existing households, irrigation commitments and signed water exports keep priority. Live and arriving animals reserve spare capacity against later irrigation, water-export approvals and household growth; they create no water.

Complete care recovers five condition, capped at 100, and produces one compost per animal. Storage may discard this byproduct; feeding is essential care and does not stop merely because compost cannot fit. A missing care requirement costs ten condition per eligible day; zero records death under the same identity without replacement animals or salvage goods. The keeper and care policy can continue after the knowledge specialist stops; new purchases still require the specialist. Occupied/reserved enclosures reject demolition and salvage, while repair/rebuild can restore their facilities. Outpost evacuation rejects live or arriving livestock. Local and owned-outpost relocation now provides an evacuation path, as specified above; wider disaster recovery remains open.

The original version-one global custody ledger and separate logistics marker migrated old saves to a finite supplier with no player animals. Marked missing, unmarked retained, forged animal/payment/provision state and unsupported ledgers reject; the coin conservation equation includes held purchase funds. Actual purchases retain provenance permanently within the finite animal allocation, and canceled collection detail is capped at twenty. Existing paid human/cart travel keeps its original terms. Private City controls, supply demand/byproducts, forecasts, regional exceptions, actual journey positions and factual return notices use the same ledger.

This releases acquisition, located care and the pasture → feed → cared animals → compost chain. Paid draft training and explicitly chosen manual waystation, owned-outpost and one-time player-trade assistance are delivered above. Wider automatic draft transport, breeding recovery, cavalry, animal resale and disaster recovery remain planned. The animal-services specification records those remaining delivery gates; this is progress within M3/M4, not completion of M0–M8. See implementation status for verification.

Academies and parallel research — September 22, 2026

Implemented and verified: Scholarship now unlocks a paid Community academy alongside scriptoria. The one-hex academy costs 90 timber, 24 bricks, 24 food, three tools and 160 construction work before normal discounts; it requires a school and the active Scholarship capability. Two assigned academy staff support one additional funded research project per community, with two separate researchers. Literacy, Scholarship and Public accounting must remain active. A topic still needs its own normal practice, learned prerequisites and supporting institution: an academy cannot replace a staffed mill, barracks or field required for that work. Additional academy buildings do not multiply slots.

The existing public research/copy/study slot remains unchanged. Academy research can proceed simultaneously on a different topic, and duplicate funding/study of that topic is rejected in either direction. At funding, reserve the original topic cost plus one timber and two food per research day for academy support. The current public timber ceiling and household food reserve apply to the combined commitment; funding costs one attention. Real daily work invests both experiment materials and prepaid support. Completion adds community knowledge through the existing provenance model, never automatically adopting its local service or creating a book.

Pause releases the two researchers while retaining progress and supplies. Lost academy staff, structural condition, teaching/accounting service, topic institution or healthy workers blocks the academy project. Recovery requires separately reviewed resumption and a fresh full work day. Cancellation returns every unused material and unused prepaid support atomically when storage fits; invested work, attention and gross budget spending are retained. Public research can continue while academy work is paused or blocked. Council succession retains both paid projects, while actual illness can still interrupt staff.

A marked version-one academy ledger migrates old communities to an empty additional slot without altering their existing research, people or stocks. Exact materials, sequence, durations, institutions, duplicate-topic exclusion and twenty recent completion/cancellation receipts are validated. Completed academy research participates in the existing learning-center evidence as research; the bounded daily receipt allowance now accommodates both research slots, a scriptorium and a separately released held book. City Research, supply-chain costs, private forecasts, regional exceptions, continuity inspection and return briefings include academy work. Foreign overviews hide its ledger. The building uses the normal semantic footprint/label presentation fallback.

This delivers the plan’s advanced-institution parallel-research requirement within M4/M8. Wider institutions, specialist mobility, major watershed works, fort combat and all other remaining milestone gates remain open. See implementation status and research controls.

Learning centers from completed work — September 22, 2026

Implemented and verified: a chartered community earns the public Learning center specialization after qualifying completions on three distinct daily checks within the last fourteen. Completed research, actual manuscript study, stored school copies and stored scriptorium copies qualify only with active Literacy and an operational local school staffed by at least one resident, at condition 65 or more. Recognition describes sustained institutional work; it changes no goods, knowledge, population, authority, production modifiers or Village/Town stage. Cultural and economic identities can coexist. No religious policy is required.

Only successful completion/storage records evidence. Imports, idle institutions, partial work and books held by full storage do not. Several completions at one check count as one qualifying day. Releasing a held scriptorium book by cancellation counts once if the school and teacher still operate; that between-check receipt waits for the next household check. Lost services block subsequent credit but retain earlier evidence until it ages out. Research, manuscripts, paid projects and lawful succession keep their existing custody rules. Pausing work can let recognition lapse, and resumed paid work can earn it again.

A separately marked version-one learning ledger starts empty for old saves, never inferring earlier achievement from stock or known techniques. Fourteen chronological daily frames and pending completion receipts are bounded and validated. Physical outpost reoccupation starts a fresh window against the new household calendar, preserving existing books and knowledge. City Overview exposes private completion evidence and school blockers; Region and public settlement summaries expose the label. Funded learning controls remain in Research, reached from the new card. Forecast copies use the same completion and aging logic. Label transitions enter the return briefing at their actual simulated time.

This delivers a cultural specialization within M7. Wider civic, military and trade-service specializations, larger settlement stages, fort combat and the remaining M0–M8 requirements remain open. See implementation status for verification and player guidance for the actual controls.

Standing owned garrisons — September 22, 2026

Implemented and verified: an existing trained force can now take a standing watch at an owned tower, keep or castle, including a retained same-owner outpost. The order has no fixed duty deadline and begins with a finite daily-food ceiling. It requires active home Record keeping and Public accounting, the normal scout/lookouts, readiness, route, reserves and departure provisions. The UI offers 30/90/180 duty days of daily food; this is authorization rather than stock, a guaranteed stay or a wage extension. Normal post capacity and civilian-lookout requirements remain unchanged. Initial dispatch costs two attention; later ceiling increases change permission only.

Actual host food is collected after each full duty day, within the remaining cumulative ceiling, household reserves and any regional operating budget. Outpost arrival refill remains separately bounded. The owner may review additional authorization while the force is outward or holding: prior spending is retained, no food is moved, and returning forces cannot be reactivated remotely. The ceiling is capped at one million food per assignment. A partial final meal is not charged. Loss of services, food, capacity, readiness, legal access or a professional wage term ends duty and causes physical return; recall remains available. This delivers persistent owned stationing under upkeep, not allied occupation or immunity from shortages.

New local/owned-outpost custody versions 6/7 and food-ledger version 2 explicitly identify standing assignments. Existing versions 1–5 retain their accepted finite terms and are not converted. A total collection count reconciles cumulative spending while the latest thirty daily receipts remain bounded and restorable. Supply-chain demand, opted-in replenishment planning and forecasts include only still-authorized meals inside their horizon and separate wage expiry. Regional exceptions warn at three or fewer collections remaining and while returning; city briefings retain ceiling changes and return causes. Expanded standing controls/receipts survive refresh.

Tests cover thirty-five actual daily collections, bounded history, unchanged people, physical remote supply, reserve/ceiling/service failures, replayed authorization, old-save terms, professional wage expiry and council stewardship. The health/death boundary retains the original paid order but actual loss of ill lookouts correctly ends unsupported duty. Live browser dispatch, a sixteen-day watch, ceiling review/cancel/increase, recall and two real server restarts retain position, exact spending and authorization. Fort combat still needs actual moving threats and casualty integration; larger multi-unit and permanent allied garrisons, automatic refit/rotation and the full M0–M8 goal remain open. See implementation status.

Outer charter plots and buildable castles — September 22, 2026

Implemented and verified: a second, bounded release adds eligible individual plots at distance three from a village's original center. Original distance-two fringe-v1 offers and receipts keep their identities, prices and geometry. New fringe-v2 plots cost twelve timber, two tools and six food to register after a real returned survey; active Public accounting is required in addition to the registrar and staffed registry office. A new title must connect to land already owned by this community. Released starting parcels, base regions, generated homes/features, water and unsuitable terrain remain excluded. Surveying or maintaining an institution grants no land automatically, and competing titles are rechecked at acceptance.

The first paid outer plot upgrades that community's extension ledger to version two, retaining every existing entry. Only explicitly paid cells join its canonical region and chunk membership; the radius-three bound grants no surrounding cells, resources, residents, buildings or water. Restores validate each release version and exact payment, evidence dates, ordered connection to the founding parcel, current region geometry and non-overlap. Existing unextended/version-one saves remain unchanged. Losing an accountant or registrar later blocks further registrations without deleting title.

This makes a seven-hex castle footprint possible alongside normal redevelopment. The verified scenario registers each necessary plot, builds and staffs a replacement registry outside the planned castle, demolishes and salvages the old registry, then pays for the castle and supplies six actual soldiers with three separate lookouts. Ordinary prerequisite keeps, crews, material stock, clearing, food reserves, budget and finite-garrison rules remain in force. Late-game material quantities are an explicit test-fixture boundary; this verifies paid construction and custody, not a full unassisted production playthrough. A starter outpost still needs local village development and its own registry before extending land. Fort combat, permanent allied/multi-unit garrisons, arbitrary territorial expansion and the remaining M0–M8 scope stay open.

City Expansion displays each ring, exact registry payment and blockers; reviews explain connected title and outer accounting. Building placement then uses the enlarged lawful footprint. Live browser registration/deployment and an actual server restart preserve title, castle, stationed troops and daily food receipts. See implementation status and interface behavior.

Finite fortification watches — September 22, 2026

Implemented: owned operational keeps and castles now share the finite-watch mechanism with watchtowers. Towers hold four existing soldiers with one civilian lookout; keeps hold six with two lookouts; castles hold six with three. Staffing, 65% condition, separate active scouting, actual trained/recovered troops and freedom from structural work remain necessary. Seven/fourteen-day watches still require record keeping, protected host food and finite daily spending receipts. Allied invitations remain specifically watchtower agreements with their original two/four-soldier consent limits.

Local orders find a real walking route wholly inside the community's registered charter, up to eighteen hexes. Quotes fund both walking legs, duty and return reserve within the existing four-day carrying capacity; longer routes can therefore reject a duration. Troops occupy intermediate hexes, prepare after arrival, consume supplies and return physically. Keep/castle watches provide the same newly dispatched caravan detour service; capacity grants no combat bonus, recruits, healing or land. Recall, loss of the required lookout count, services, supplies or readiness ends the watch. Existing historical command/event identifiers and saved garrison versions remain compatible. The City Defense card and confirmation name the actual fortification, capacity, civilian staffing, walking distance and food authorization.

Verified scope: the original keep scenario and the outer-charter castle scenario above pay for multi-hex construction and station six real recruits. Their late-game stock is controlled test input. The same-account outpost custody validator accepts larger forts when a lawful footprint exists; raw camps must first develop a village and extend their local charter. The former castle-placement gap is now resolved for the verified released plots through paid outer titles and ordinary registry relocation/demolition/salvage. A developed-outpost keep journey, fort combat, permanent allied/multi-unit garrisons and the full M0–M8 goal remain open. See implementation status.

Production-based economic specializations — September 22, 2026

Implemented and verified: chartered settlements now accumulate economic specializations from completed production, separate from their founding landscape and Village/Town stage. Nine sectors cover farming, fishing/preservation, forestry/timber, mineral extraction, building materials, metalworking, textiles, milling/baking and cart making. A sector qualifies on a day with at least two worker assignments on completed batches; farming requires four. Three qualifying days in the most recent seven daily checks establish the label. Multiple sectors can coexist. Interrupted work stops contributing; a label disappears as productive days leave the window. No productivity modifier, free goods, population, authority or automatic staffing is granted.

Only actual production batches from normal village-day processing enter the ledger. Assigned but blocked workers, stock already owned, imports, construction, uncompleted recipes and forecasts of possible output do not qualify. Inputs and outputs are reported gross and separately, so fish caught and later cooked remains distinguishable; these totals are neither net surplus nor warehouse stock. Manual forestry and military services remain outside this production-sector model. Institutional learning now has the separate cultural specialization described above; its evidence does not enter production-sector counts.

A marked seven-day ledger migrates without reconstructing past work. Physical reoccupation starts a fresh window at the returned residents’ next full household day, matching the existing restarted meal calendar; assets and earlier briefings remain. Its finite daily aggregates remain independent of the detailed scribe-recorded receipts, and require no new knowledge or staff. City Overview exposes the supporting work and current producer blockers; Regional overview compares labels across actual local communities. Public settlement summaries expose labels only, while the underlying economic ledger remains owner-only. Return briefings report changes, and private local/regional forecasts advance the same rules. Getting started remains applicable: early working producers naturally accumulate evidence over actual days. Broader civic, cultural, military and trade-service specializations, larger settlement stages and the full M0–M8 scope remain open. See implementation status and interface behavior.

Sustained charter settlement progression — September 22–24, 2026

Implemented and verified: founded villages and registered local villages can earn Town status after three consecutive daily checks. The first tuning threshold is 48 actual residents, matching the current 40-person start and finite household/well scale; the plan's 100-person town band remains illustrative. The checks require permanent housing and actual household water for everyone, health of at least 80, a fully fed last day, three days of food already in the local warehouse, active Record keeping and Public accounting, a staffed operational school with Literacy or care hall with Care institutions, a staffed supplied processing workshop, and a completed physical delivery or player exchange. Imports can sustain food; town recognition does not require domestic food self-sufficiency or religious adoption.

City is an earned second milestone. A functioning town needs at least 56 actual residents, six household days of local food, all town capabilities, and active Regional institutions through its staffed operational registry office for three consecutive daily checks. The threshold is scaled to the current 40-person start, rather than the illustrative larger-city band in the original plan. Three failing checks lower City to Town; a further three failing town checks can lower Town to Village. Restoring service resets the corresponding decline streak. Camps and evacuated sites cannot promote; developing/reoccupying an outpost follows existing paid rules. Woodland/coastal/farming identity remains separate from stage.

Regional capital is an earned administrative stage. While the founding home meets all City requirements, three of its established owned outposts must each complete paid local village development, keep permanent housing and household water for residents, health at least 80, no latest food shortfall and three local food days, and receive a separate completed physical food delivery from home. Three consecutive qualifying home checks promote City to Regional capital; three failing checks lower it to City. There is no free population or cargo. A capital with active Land registry, Regional institutions and one sound staffed registry can sponsor a fourth retained outpost, a fifth with two such distinct offices, or a sixth with three, under the existing survey, charter, workforce, route and funded journey rules; its regional production plan can change five distinct producers across linked communities instead of City’s four. Lost status or services stop new above-limit expeditions and lower the planning limit immediately, but existing links, jobs and rights survive. Assessment, migration, a full command-funded three-village promotion, five-producer plan and fourth founding journey now have integration evidence. Seed-selected wheat, appointed administrative specialists, a local-village forestry mandate and a paid food-for-logs governor route support a player-managed 2,600-day continuation with all five communities fed and home Regional capital throughout. A manually trained and appointed first specialist cohort, then two one-course standing backup-training plans for Record keeping and Regional institutions, preserve active offices through natural incumbent deaths; a later pause of unused Land registry frees labor. The standing plans fund real household learners after daily safeguards pass, and the qualified graduates take those posts at the death checks. Reviewed qualified backup succession and bounded standing training are available; wider recruitment, political legitimacy and broader institutions remain open. See implementation status, interface behavior and regional progression plan.

Stage recognition grants no people, workers, goods, land, title or knowledge. Earned City can sponsor a third retained outpost; Regional capital can sponsor a fourth when active Land registry, Regional institutions and one operational staffed registry office support it, and a fifth with two such offices at 65% condition or better. All remain subject to surveyed-site, route, expedition, workforce, provisions and material checks. Loss of a required service or stage immediately lowers capacity for new founder dispatches; already retained camps and paid journeys keep their people, assets and rights. A failed daily check interrupts promotion. Short interruptions do not immediately change stage.

An end-to-end, command-funded woodland journey verifies the route from the original forty residents through City and three established outposts. A separate continuation of that exact save develops all three camps into registered villages: home forestry and milling fund physically delivered timber, paid town houses and real household journeys bring each to twelve residents, local research and staffed fields qualify them, and home smithing converts imported iron and charcoal into tools after finite waystation tools run out. It pays each local charter project, restores home population through the finite waystation, earns Regional capital, and verifies a five-producer coordinated plan on a copied save. A raised reviewed forestry ceiling and further smithing fund a fourth founder journey and field; a fifth order is rejected at this one-office checkpoint. The fourth departure lowers home population below the City promotion threshold, causing a lawful capital-to-City regression. Save validation treats that as a downgrade rather than rejecting it as a failed promotion. Real migrants re-earn capital. Funded Seed selection, chosen wheat on two fields, and three actual named specialist courses and appointments reduce food and timber pressure without granting workers or stock. With two workers on the second field and three on the mill, local forest initially keeps the capital operating. The third local village then runs its own selective-harvest instruction, holds its food production at a warehouse target, and sends actual logs home on a governor journey that carries home food outward. A reviewed home food floor, continuous wheat fields and reopened migration maintain population and leave storage for both directions. During 2,600 further village days, home remains Regional capital without a stage transition, every linked community stays fed and home retains six food days. Before old-age deaths, the player twice pauses the governor, lets paid carriers return, makes charcoal, imports iron, forges tools, adopts three then two existing young adults and funds their three-day courses. The first cohort is manually appointed; the second is designated as qualified backups and takes the posts at the incumbents' actual death checks. A later pause of Land registry after the fourth charter reduces specialist and timber demand, allowing two mill workers to keep the remaining services supplied while another worker can serve Record keeping. The governor exceeds its old 10,000-food permission under an explicitly reviewed 30,000 total; offline inventory, development, governor and forestry ledgers agree between each decision. This establishes a long managed interval, not satisfactory pacing or unattended capital administration: several hundred village days and repeated resource reviews are still needed, and training and designating each backup remain player tasks. See implementation status.

The version-two marked per-charter development ledger migrates version-one town saves neutrally, records the last checked day and separate town/city streaks, and retains twenty transitions with lifetime sequence counts. Reads never advance it. City Overview provides both sets of exact requirements and links to remedies, regional exceptions warn about sustained decline, return briefings report transitions, and private forecasts run the same daily checks. Existing shared-development stage/population rules remain explicitly separate. See implementation status and interface.

Mixed governor cargo plans — September 22, 2026

Implemented and verified: governor routes can now combine up to four distinct delivery goods and four distinct collection goods in each physical exchange. The main target remains, with up to three optional additional target/retained-stock rows per direction. A resource can appear only once across both legs. One shared unit ceiling applies per leg, further limited by real cargo weight and paid travel food. Food is allocated first, followed by the main non-food target and additional rows in their reviewed order. Unmet targets do not create stock. Source reserves, transport-equipment reservations, outpost storage and remaining route allowances cap each whole-unit allocation. Collection is reserved first and opens actual destination storage for delivery; returning goods still require physical arrival and home unloading.

Mixed plans use the existing two-person outpost team, finite route and registry service, idle-worker floor, local/shared spending, recall, fire, dated fish and equipment custody. Food and tools can travel outward while logs and timber return in the same journey; no new workers, capacity, money or materials are granted. Partially satisfiable target rows show their planned amount and limiting allowance, source surplus, units, weight or storage. Shared daily and any capped lifetime ceilings, plus operating ceilings, still validate the complete proposed commitment and may block departure. Food can occupy a whole load; adjust targets, increase the reviewed unit ceiling or obtain a real handcart when other goods need capacity.

An explicit governor cargo-plan capability marker migrates old ledgers without changing their settings, spending, receipts or paid trips. Existing single-resource instructions retain their prior algorithm until reviewed editing opts them into the new plan. New mixed orders carry a version tag; editing cannot silently drop their additional targets through an older client. Remove rows explicitly to return to a simple load while retaining every past commitment. Pause stops future checks but never cancels or teleports funded cargo.

City Expansion adds extra target editors, exact review rows, allocation explanations, preserved drafts and authoritative acknowledgments. Regional and private economy forecasts use the same planner through the existing governor engine. This advances M3/M6/M7 supply coordination and multi-outpost administration. Getting started is unchanged: this follows actual outpost development and Regional institutions. See implementation status, interface specification and player guide.

Funded regional road upkeep — September 22, 2026

Implemented and verified: a founding community can authorize daily automatic repair checks for an already-built owned outpost corridor. Road engineering, Record keeping and Public accounting remain actual staffed services. Each instruction chooses a 50–90% condition threshold, a 0–24 idle-worker floor and cumulative whole-unit ceilings for timber, bricks, tools and food. Authorization reserves nothing, grants no materials or attention, and starts no construction. Older saves acquire an empty marked ledger, leaving existing road orders and assets unchanged.

Daily checks consider the most worn corridor first and use the existing four-person physical road expedition. Only existing sections at or below the chosen threshold qualify, up to four per trip. Every section commits one timber, one brick and a quarter tool, plus the existing paid round-trip/work provisions. Actual arrival and one full working day repair each section. One crew per home may be travelling or unloading; queued local four-person work takes priority. The mandate leaves its chosen workers idle and two household food days above protected reserves after departure. Current services, ownership, established destination, fire, stock, daily public timber budget and shared operating ceilings are rechecked. Local daily building/land maintenance runs first.

Pause stops future departures. Paid crews retain their instructions; recall is separate and returns unused cargo physically. All funded materials and food remain gross commitments even if returned or unspent. Editing or resuming cannot reduce a ceiling below its recorded spending. Public instructions survive lawful succession; death or illness may remove needed services, in which case the existing crew withdraws with unused materials and future funding waits. Twenty recent daily decisions are retained alongside lifetime commitment/section totals; ordinary road custody records still hold actual supplies and workers. City Expansion provides reviewed controls and blockers, Regional overview reports actionable shortages, private forecasts run the same daily decisions, and return briefings report funding or changed blockers. This extends M7 upkeep delegation; it does not build new roads automatically, grant bridges or expand land rights. Getting started remains unchanged because corridor upkeep follows actual outpost and road development. See implementation status, interface specification and player guide.

Nursery stock and paid woodland planting — September 22, 2026

Implemented and verified: tree nurseries now complete the physical propagation-to-planting chain. Crop rotation and soil stewardship enables construction and operation of a two-worker nursery on cleared forest/field substrate with effective moisture at least 0.35. Full staffing consumes four compost and four food for four whole sapling units per village day. Seed collection requires at least one unoccupied, non-burning mature wooded plot inside the same settlement (45% cover and 65% maturity, without another plot job). It does not fell trees or consume another owner's resources. Loss of the steward, seed source, moisture, inputs, staff, building condition or storage blocks actual production without creating plants.

New chartered planting commits four saplings, four timber and one tool to a two-person forestry order. No additional research is required merely to plant imported stock. Completion establishes young growth under the existing analytical recovery clock; it grants no immediate logs, mature harvest, water, mineral deposit or population. Land & water now gives reviewed clearing, selective-harvest and planting quotes with exact costs, crew, time, blockers, lost uses and alternatives. Existing paid planting jobs retain their accepted eight-timber cost and timing; shared development retains that prototype. Cancellation uses recorded work, refunds only whole unused plants and explicitly discloses storage overflow. Cleared/replanted land retains its immutable generated origin.

A finite waystation nursery supplier starts with 64 sapling units, recorded once through an explicit versioned allocation on new worlds or migration. It creates no player stock, money or founding package. The offer exchanges two actual timber for one sapling, carried by the existing physical caravan; stock is reserved once, returned on pre-exchange recall and never automatically replenished. This gives treeless farming and coastal villages a first woodland without circular nursery prerequisites. Whole saplings also travel through player agreements, outpost supply and governor routes at one weight per unit. Existing goods and rights remain in place. If a migrated depot is already full, its stock is retained and ordinary capacity rules govern new exchanges.

Local propagation is the renewable replacement path, using real compost inputs and elapsed work. Stored sapling units represent prepared planting stock; storage mortality, seasonal seed collection and species-specific nursery care are not yet simulated. Forestry seed selection does not add a new water allocation or allow river/terrain creation. See interface behavior, player guidance and implementation status. The full M0–M8 goal remains active.

Physical construction handcarts — September 22, 2026

Implemented and verified: chartered settlements now choose manual hauling or a required serviceable handcart for future construction, rebuilding, repair, demolition and salvage. Manual hauling is the migrated default. An equipped order removes one actual cart from local stock, reduces base work by 20% before rounding and retains the same four-resident crew. Optional tool consumption remains separate. Trade and building crews compete for the same physical carts; missing required equipment blocks funding rather than silently choosing manual work.

The cart stays with its accepted job during queues, pauses, service loss and later policy changes. Any actual work makes the returned cart worn; cancellation before work returns it serviceable. Completion, cancellation and ruin interruption release equipment exactly once. Material refunds retain their existing overflow rules. Equipment is never discarded for lack of warehouse space: a whole cart waits in a private local collection record, while the building completes and workers are released. Collection needs one full storage unit; paid cartwright repair consumes the existing worn cart, four timber, one iron and one tool per worker-day before reuse. Cart damage from site hazards is not separately simulated in this first version; equipment is recovered when a building order is interrupted.

The new policy also governs future district commitments and authorized automatic building repairs. Borrowed equipment is separate from cumulative consumable ceilings and cannot be counted as a purchase, extra worker or refundable material. Orders, construction reviews, cancellation reviews, supply-chain explanations, private forecasts, regional collection alerts and factual briefings expose custody and recovery. See the interface specification and implementation status.

Explicit prototype boundary: existing paid jobs keep their previously accepted timing and recorded consumed support. Existing inventory and resident horses are preserved, with no conversion into carts or free goods. New chartered structural work no longer consumes accumulated haulage, and chartered stables stop producing it; their workers remain assigned until deliberately reassigned. Additional stables cannot be placed in player charters. Existing buildings may still be repaired, rebuilt, demolished or salvaged under the ordinary lifecycle. Shared development stables and their original haulage rules remain available as the legacy prototype. The marked construction-equipment ledger initializes without retroactive loans. The earlier stable/haulage and optional-support descriptions below apply only to that prototype or already-paid legacy orders where relevant.

Getting started retains manual construction without an equipment prerequisite. Later players can manufacture or trade for real carts, compare their construction and cargo needs, and choose an explicit policy. Horse breeding, draft-animal transport, cart hazard damage, maritime logistics and the remaining M0–M8 scope remain open.

Existing child kin and real maturation — September 22, 2026

Implemented: the lawful adult leader of a founding household can name an existing local dependent as adopted child kin. This bounded cohort enters the notable household at age twelve, remains in the same village and uses one of the existing eight living household places shared with adult adoption. The source is the actual unclaimed dependent pool, excluding named dependents and mobilized residents. Adoption adds no population, workers, goods, money, housing demand or food demand. It is not a birth, immigration, or an unlimited source of labor. No child is added to an older save automatically.

The child follows the existing slow lifecycle: one age year per twenty-four village days, or four real days. Six lifecycle years later, at the eighteenth-birthday village check, the same existing dependent becomes one civilian worker. Population and meals do not change. The conversion has a durable receipt and occurs exactly once online, offline or after restart. Health and ordinary labor allocation continue to govern usable capacity; no workplace, qualification or army assignment is awarded. Unnamed dependents do not acquire an invented age clock; births and fuller cohort demographics remain open.

Children cannot be embodied, appointed to public office, trained as named specialists or selected under the existing adult-only personal will/kin rules. Maturation makes the ordinary adult choices eligible. It does not hand over office or grant an earlier estate. If the household has no living adult and its successor seat is vacant, the council nominates the newly mature adult; embodiment and lawful handover remain explicit commands. If the guardian dies, the child stays with the household under its current public stewardship, using normal needs. This initial child model has no separate childhood illness/death simulation.

Marked version-one childhood metadata leaves older family and personal coin ledgers intact. Separate child-adoption receipts retain guardian, actual source, ordering relative to adult adoptions, generation and maturity date. Save validation reconciles age, worker state, membership limits, exact one-worker conversion and adult-only authority/history. Named children are protected by existing dependent restrictions on household migration, relocation and departure. City Continuity presents review, guardian, current age, calendar maturity deadline and conversion receipt. Private forecasts project the same maturation; factual briefings record adoption and adulthood. This advances M2 maturation and M7 family continuity. See implementation status.

Worked quarry leases and Contract law — September 22, 2026

Implemented: a founding village with active Contract law, Land registry and Public accounting may offer an idle owned building-stone quarry to another player's founding village. The tenant needs Record keeping and Public accounting. The exact proposal specifies one to four full workdays and a total rent of one to forty real communal coins. Offers last three village days; acceptance reserves actual tenant coins and grants fourteen days of access including travel. Each party may hold four unresolved agreements, one lease reserves each quarry, and each tenant may send one crew. This began as the first M6 worked-site lease and M4/M8 Contract law action; clay and iron sites are now covered above, while other resource leases and land purchases remain planned.

Separate reviewed dispatch commits four existing residents, one attention, a quarter-tool per workday and quoted round-trip food with a two-day reserve. The canonical route may have at most thirty-six walking edges; total provisions, tools and maximum stone fit 120 carrying weight. Walking remains twelve hexes/day. Workers remain part of their home population but cannot staff home work or leave through adoption/hardship migration. Their actual carried meals replace home meals while away. Fresh offers, acceptance and dispatch recheck institutions; funded communal journeys survive later service loss and lawful succession.

Actual arrival pays the host the fixed total rent. Rent is nonrefundable after arrival, including early exit, site damage or incomplete extraction. The permission is a maximum work allowance, not a guaranteed yield. Each complete working day consumes a quarter-tool and extracts at most six units from the actual finite stone deposit. Stone stays with the crew until physical home return. The host supplies no workers and receives no extracted stone. The permission changes no land title, building ownership, general warehouse access or military passage rights. Civilian walking uses existing canonical route rules; this does not add negotiated third-party road rights.

The host can withdraw an unaccepted offer, or give three days of exit notice on an accepted lease, bounded by the original expiry. The tenant can cancel unused permission or recall an outward/working crew. Expiry, unusable quarry, fire or low return food stops further extraction; incomplete cycles consume no tools and produce no stone. Expired or cancelled undispatched reservations refund locally. Unpaid rent already travelling returns only on actual home arrival. Paid rent remains final. Unused tools, provisions and actual stone return physically; full home storage holds goods and worker assignment until unloading, while ordinary home meals resume. The quarry cannot be staffed or structurally changed while reserved; environmental damage remains possible.

Version-one stone agreements migrated to version two as described above; marked agreements and crew receipts validate coin conservation, extraction, tools, meals, dates, parties, routes and phases. Older worlds receive an empty ledger. Held rent participates in the existing finite 1,200-coin economy; rent is a transfer, never minted income. The latest hundred closed agreements are retained globally. City Expansion supplies party-only reviews and receipts; owner map markers, one-time workday supply graphs, supply movements, regional attention and copied-engine forecasts follow real journeys. Briefings go only to the two parties and the host site. See implementation status and interface specification.

Player coin sales and physically returned payment — September 22, 2026

Implemented: chartered villages belonging to different players can agree a one-time sale of one supported good, one to forty whole units, for a total price of one to four hundred communal coins. The seller proposes the exact goods and total price; the buyer separately accepts; the seller separately funds the existing two-person caravan. Both communities need active Record keeping and Public accounting at proposal, acceptance and dispatch. Already funded journeys continue after institutional loss or lawful succession. There is no automatic renewal, debt, minted money, ownership transfer or military permission.

Proposal moves no goods, money or workers. Acceptance removes the buyer's exact price from its available communal treasury into a local reservation. The seller still owns the unshipped goods and receives no money. Dispatch spends actual export goods and separate travel food, respects existing protected reserves/material ceilings, uses two real workers and the existing single-caravan slot, and carries any separately loaned cart. The coin reservation remains at the buyer. Existing road timing, fire, ration exhaustion, storage and escort/transit rules apply.

Only actual arrival with sufficient buyer storage exchanges the promised goods for the reserved payment. The goods become final at that point. Coins then travel with the returning caravan and remain unavailable to the seller until physical home arrival. Home arrival credits the whole payment once even if a full warehouse holds returning food/cart supplies; money uses no material storage or carrying weight in this initial ledger model. Existing NPC raids affect travel provisions, not coin theft. A physical minting, coin-weight or robbery model is not implied.

Either party may cancel before exchange. Reserved coins are released exactly once into the buyer's treasury; undelivered goods and surviving provisions return physically, with spent food retained as spending. Fish expiry before exchange uses the same recall/refund path, preserving dated surviving cargo; accepted but not yet packed fish still needs actual unexpired stock at dispatch. Full buyer storage delays exchange, leaving money reserved. After exchange cancellation cannot undo delivery or remotely credit money. Offers have no automatic expiry and share the existing eight-unresolved-agreement limit; closed receipts use the existing hundred-record retention rule. Recurring agreements remain separately authorized barter or relief, without coin terms.

A marked version-one payment extension leaves existing barter, relief and NPC purchases unchanged. Each sale records the total price, accepted/exchanged/credited/refunded timestamps and exact reserved/carried/credited/refunded quantities. Save validation ties these amounts to physical caravan phase, with the existing global 1,200-coin conservation equation extended to held player-sale funds. Communal money remains communal through succession. Coins earned from another player can fund the existing market purchases, military wages or stipends under their ordinary rules.

City Trade provides retained price drafts and reviews for proposal, reservation, dispatch and cancellation. Both parties see payment custody; unrelated players cannot inspect private agreements or balances. Treasury cards distinguish buyer reservations from seller money returning on the road. Supply journeys and private forecasts include the monetary state separately from material stock; regional journey reports show carried coins. This advances M3/M8's real market and advanced trade requirements. Auctions, recurring coin contracts, credit, broader resource leases, broader trade institutions and the rest of M0–M8 remain open. See implementation status and interface specification.

Regional service-road expeditions — September 22, 2026

Implemented: a founding community can send one four-resident crew along an established owned outpost's canonical route of at most twenty-four walking edges. Active Road building, Record keeping and Public accounting are required. A reviewed order selects up to four eligible unbuilt sections, or up to four worn sections previously built for that home/outpost. Each build section costs two timber, two bricks and half a tool; repair costs one timber, one brick and a quarter-tool. One attention and the actual materials plus separately quoted round-trip food are committed at dispatch, respecting protected supplies and operating budgets. Workers remain real residents, unavailable locally; carried meals replace their corresponding home meals.

The released right is a nonexclusive service corridor, not ownership of intervening land. Eligible adjacent endpoints need stable field/woodland ground, relative relief at most 0.04, moisture at most 0.85 and no generated natural feature. Unrelated settlement titles and other released starting parcels are excluded. Narrow section work does not clear an entire forest hex, produce timber, grant a building plot or authorize military passage. Ineligible route gaps remain unimproved. These completed edges can benefit other lawful cargo using them; they do not expand anyone's access rights.

The crew carries at most 120 weight, walks twelve hexes per village day and spends a full working day at each selected section. Materials are invested only upon completion. Food covers the unchanged walking round trip, all work and a two-day reserve. Lost engineering/registry/accounting, changed corridor permission or destination status, and return-food pressure stop further work and send the actual crew home. Fire blocks movement and interrupts work while meals continue. Reviewed recall is available before return. Partial work creates no road; completed sections remain. Unused materials and food return physically, subject to storage; full home storage holds the crew and remaining supplies until unloading can finish, with ordinary home meals restored. Spent inputs, food, gross budget commitments and attention are not refunded.

Sound edges shorten existing cargo/escort steps by one third. Previously scheduled deadlines remain accepted; subsequent steps recheck condition, fire and rights. Surveyors, settlers, independent troops and road crews retain walking speed. Each edge loses two condition per elapsed village day; below 50% the benefit stops. Paid repair restores 100% only after the crew completes that section. No automatic regional repair or bridge is included. A marked version-one road book preserves completed sections and the latest twenty returned-crew receipts per home; old worlds receive an empty book without stock, terrain or title changes.

City Expansion exposes quotes, reviews, carried supplies, actual position, recall, condition and receipts. Region view draws completed edges and the owner's travelling crew. Supply graphs show separate one-time construction/repair inputs and carried goods; private forecasts, regional attention and briefings follow actual paid work. This extends M3/M5/M6 with the first regional service corridors and supersedes the earlier blanket statement that only local road plots are available. Arbitrary roads, bridges, cross-owner road agreements, wider terrain engineering and the remaining M0–M8 gates remain open. See implementation status and interface specification.

Staffed scriptoria and finite manuscript commissions — September 22, 2026

Implemented: Scholarship now also enables a Community scriptorium: one paid charter plot, 80 timber, 12 bricks, 20 food, two tools and staged construction (ordinary local construction discounts apply). One assigned keeper supports a separately funded manuscript commission while public research, school copying/study and named specialist training keep their own worker requirements. The scriptorium needs 65% condition, no building work and active Scholarship with its supporting staffed school. A destroyed or cleared institution retains the commission until repair/rebuilding or explicit cancellation.

A lawful community reviews one known topic and one to four books. Acceptance reserves four timber and two food per book, obeys protected food and public timber ceilings, uses one attention and assigns two additional scribes. Each full working village day consumes two timber and one food from those paid inputs. Each second working day produces one physical manuscript in local storage. This is a finite commitment, with no automatic renewal or guaranteed exports. It neither creates a learner nor teaches recipients; books use existing cargo/trade, prerequisite study and separate local adoption.

A completed book waits when less than one whole storage unit is available. It remains in the commission and holds the scribes; the next daily check with room stores it once, and the next page needs a further full day. Pause releases the scribes. Lost building, school, Scholarship or workers blocks further work without consuming reserved supplies. Reviewed resumption needs the same restored institution and two available workers, then a fresh full-day delay. Cancellation returns only unused inputs plus any completed held book, atomically and only if storage fits. Stored output and consumed materials remain final; public commitments and attention are not refunded. Funded communal work survives public succession.

The version-one marked scriptorium ledger migrates old chartered communities to empty records without changing goods, grants or old learning projects. It validates topic, institution, quantities, paid progress, held output, deadlines and the latest twenty completed/cancelled receipts. City Research provides reviews, retained drafts, work controls and receipts. Shared overview responses omit both scriptorium commissions and named specialist ledgers for other owners; private City access alone is not the privacy boundary. Supply graphs expose the separate per-book project; private forecasts run its actual daily checks and regional attention/briefings report blocked or completed work. The building uses an explicit semantic footprint-and-label visual fallback. This adds a working larger culture institution and manuscript-export capacity to M3/M4/M7; universities, wider specialist mobility, licensing and the remaining M0–M8 scope remain open. See implementation status and player guide.

Consented allied tower watches — September 22, 2026

Implemented: a lawful founding-community leader can invite another player's existing trained force to a staffed local watchtower. The offer fixes seven or fourteen village days of permission, including outward travel, and a maximum of two or four soldiers. It expires unsigned after three village days. The donor separately accepts with current authority, actual ready troops, active scouting and record keeping, protected departure food and two attention. No invitation creates people, equipment, warehouse access, offensive rights or title. One unresolved hosted watch per community and one assignment per tower prevent overlapping commitments.

The donor pays enough food to carry four days per soldier. A direct walking route of at most eighteen hexes must fit readiness and separately ratified third-party passage. Military transit now offers an explicit allied tower watches purpose; existing relief, trade-escort or combined relief/escort clauses do not authorize it. New titles or ended permission trigger physical withdrawal. Professional troops require existing paid terms covering the expected permission term and return; ordinary trained militia can also serve.

On physical arrival, the host replenishes only the food actually used during the outward march, bounded by four days per soldier. Following a quarter-day preparation, the operational staffed tower and scouts brief new host caravans onto actual detours around the host's surveyed camp. Existing caravans and the camp remain unchanged. During duty the host can supply one food per soldier after each full duty day, for at most days minus one collections. Arrival and daily food draw actual local stock, protected household reserves and shared operating ceilings; the total maximum is (permission days + 3) times actual soldiers. Future host food is authorized, not reserved or created. Travel consumes part of the permission term, so actual daily spending can be lower.

The host may give three village days of exit notice, bounded by the original expiry; authorized food and warning service may continue during that window. The donor may recall immediately. Lost named consent, scouts, record keeper, tower/lookout, food, budget, wages or readiness can force earlier return. Fire blocks real movement while food continues to be consumed. Ending permission removes service and sends the same force home along its route without teleporting troops or refunding spent food. Return receipts retain arrival/daily spending and briefings; unused food returns physically or remains carried if home storage is full. Neither party gains control of the other's army or treasury.

A marked allied agreement ledger and version-five garrison custody preserve old saves without introducing troops or changing older assignments. Restoration validates parties, dates, limits, route, explicit transit scope, food receipts and active/returned force custody. Each agreement command uses one authoritative timestamp, preserving exact permission dates through live play and restart. Private city controls, forecasts, regional exceptions and briefings expose the agreement to its parties. This extends the older owned-tower scope. Larger multi-unit and permanent allied garrisons, occupation, siege warfare and unrestricted allied logistics remain future work. See implementation status, interface and player guide. The M0–M8 goal remains active.

Dated fish trade between players — September 22, 2026

Implemented: chartered villages can offer fresh or preserved fish through one-time barter, consented relief, finite recurring barter and recurring relief. These use the existing physical two-carrier caravan, weight, labor, route, reserve, budget and authority rules. Offers reserve nothing. Acceptance removes the recipient's actual payment into local custody, preserving its original dates and occupied storage slots. Dispatch selects the sender's oldest unexpired batches. Each recurring round selects and funds actual stock anew; consent creates no fish or guaranteed future supply.

Original dates survive reservations, travel, fire delays, full stores, cancellation and partial unloading. Any spoilage before exchange makes the promised exact quantities unavailable: an accepted agreement closes and releases surviving payment locally; a travelling agreement recalls its actual carriers, releases surviving payment and physically returns surviving outgoing goods. A recalled recurring round ends future rounds. Already spent provisions and commitments stay spent. After an exchange, delivered goods are final; fish collected as payment can still spoil during the return or unloading, with that loss recorded instead of undoing the exchange. Fresh/preserved fish remains separate from prepared travel provisions.

The marked per-contract fish ledger reconciles original quantity with remaining, spoiled, delivered and returned/released amounts for each original expiry. It validates physical custody and save restoration. Existing nonfish agreements migrate without altered goods or trips; unmarked fish, missing records and impossible conservation reject. Recipient payment dates reserve positions within the 256-date local limit, so cancellation can release surviving stock safely. Production waits when its next output date cannot fit, and incoming deliveries wait while age capacity is full. Expiry continues throughout those waits.

Trade reviews explain the risk before consent or dispatch. Both parties can inspect dated custody, completed receipts and each recurring round; unrelated accounts cannot. Forecasts simulate losses using a copied engine, regional attention flags active dated-trade problems, and briefings record spoilage. This extends the earlier owned-outpost age rules to player agreements. The later grain/flour extension above uses the same custody. NPC market fish trade, refrigeration and prepared-food aging remain unfinished. See implementation status, interface and the player guide. The full M0–M8 goal remains active.

Independent adult aging, death and later lives — September 22, 2026

Implemented: landless adults now age during personal work, travel, paused journeys and time embodying a household member. They use the shared pace of one age year per 24 village days (four real days), warn from 80 and die naturally at 85. An age-unknown newly claimed 24-year-old has 61 lifecycle years, about 244 real days; an age-known claimant keeps their birth-based age and remaining lifespan. Personal daily checks round a migrated birthday/death deadline to the first eligible check. Resuming a living adult retains their identity, age clock, goods, work and location. Existing unaged saves retain recorded age and start tracking at migration without retroactive deaths; already elderly adults receive one full year of grace.

Natural death resolves before personal work, meals or walking due at the same check. It cancels that adult's future activity; unfinished paid inputs return to their own sealed goods record without completing output or being consumed. An unfinished journey ends at its actual hex with no invented arrival, return or teleport. Existing arrived journeys retain their real arrival record. No further personal meal consumes sealed food. The adult already left the origin cohort when claimed, so death never subtracts a second community resident or worker. It clears embodiment only when that adult is currently selected and leaves the actual public ruler, office, household chapters and funded community work unchanged.

A later reviewed Landless continuation chooses another available existing waystation worker or eligible owned-community civilian. It has a new identity, age 24, empty personal inventory and a fresh actual cohort transfer. It receives no sealed goods, inherited authority or starter village. The preceding full career, estate, interrupted work and final location remain in the account's ended-life history. No eligible civilian means an inspectable ended record and no fabricated replacement. A living current career can only be resumed, preventing abandonment to reset hunger, stock or age. Stale identities and revisions cannot authorize a new life or its work; duplicate commands retain their original result.

The career book keeps its existing version with additive agingVersion: 1 and ended histories. Per-life indices and character IDs form a contiguous sequence; lifecycle records retain source/start/initial age/elapsed years. Restore checks current and archived inventory conservation, complete life ordering, natural-death chronology, sealed-goods equality, interrupted inputs and real journey location. Scheduler deadlines exclude deceased adults. The founding home's private current-orders forecast includes the actual independent ledger and warns on projected death; regional attention links later-life warnings to Family & continuity.

Family & continuity → Independent adult lifecycle shows current age, full calendar dates and the later-life warning. Ended independent lives and sealed goods shows death age/date/location and retained materials. Dead-life work and travel controls are absent; the new-life review names the chosen adult/origin and discloses the new age, real worker transfer, sealed estate and unchanged public office. The interface, player guide and implementation status describe the controls and verification.

Verification passes 868 tests across 107 gameplay files, including ten new lifecycle scenarios and a full healthy 61-year life. Browser checks cover paid-input custody, ended-life controls, reviewed continuation/cancellation, private access, exact community state, four viewport widths and reload. Three actual server restarts preserve paid work, death and the new life; the isolated QA process and port 34268 are stopped. This supersedes older statements that independent adults remain immortal or fixed at 24. Hunger still delays work/travel and remains recoverable; this delivery adds natural death, not illness/starvation or named personal combat. Goods are conserved in sealed records; estate claims, personal wills for goods, inheritance disputes, wages, births and wider NPC lifecycles and the rest of M0–M8 remain open.

Invited resident aging and natural death — September 22, 2026

Implemented: accepted resident adults gain one age year per 24 four-hour village days, matching the founder-household pace. Newly accepted residents start at 24; later-life warnings begin at 80 and natural death occurs at 85, about 244 real days after acceptance. Birthdays and death resolve at the first actual community daily check on or after their deadline. Housing, work expiry, role renewal/revocation and host succession do not pause or restart the age clock. This extends invited community life; independent waystation careers follow their own implemented clock above; unnamed population aging remains unfinished.

Natural death removes exactly one existing resident and one civilian worker, ends that character's housing/work authority and reconciles the real remaining labor. Existing work terms remain historical records. The host's office and funded commitments persist, subject to ordinary staffing limits. Old age takes precedence if its deadline coincides with the eighth critical-health day. The resident account can continue only by accepting a fresh host invitation as a different existing civilian; this neither revives the former adult nor awards people, goods, inheritance or another starter village. Leaving without death returns the adult to ordinary community life; that ended player record keeps its last observed age and is no longer individually simulated.

The membership ledger's additive agingVersion: 1 marks per-character lifecycle records with origin, start, initial age and elapsed years. Existing unaged saves keep their recorded ages and start tracking at migration, without retroactive deaths or stock/population changes. An already elderly migrated adult receives one full new year before natural death. Ended records remain historical. Restore validates acceptance/lifecycle chronology, age arithmetic and death evidence; replayed acceptance and work changes cannot reset a life.

The host's Founding & charter cards and the resident's Your home & work show age, next birthday, natural-death date and later-life warnings. Continue your resident story retains the ended age and cause, and Your resident lives retains each adult's recorded age. Host regional attention, factual return briefings and copied-world forecasts include resident aging/death without extending private community access. See the interface, player guide and implementation status.

Eleven new scenarios cover a healthy 61-year resident lifespan with actual founder succession, consented continuation, work renewal/revocation, exact worker loss, ended-life history, migration grace, an already elderly adult, malformed saves, offline equivalence, forecast privacy, stale/replayed identities and mid-day acceptance. The full regression passes 858 tests across 106 gameplay files. Browser checks cover reviewed continuation, actual worker/population conservation, private access, four viewport widths, full calendar dates and reload. Three actual server restarts retain the living adult, natural-death record and new life; the isolated QA process/listener are stopped. This supersedes earlier statements that invited-resident aging is unimplemented. Births and wider NPC lifecycles, broader tenure and the remaining M0–M8 work stay open.

Permanent field casualties — September 22, 2026

Implemented and verified: newly ordered offensive patrols and newly accepted professional relief campaigns resolve permanent fatalities on defeat. Effective attack strength still uses the actual surviving, unwounded troops, worn equipment, morale, funded role and eligible paid archer volley. A victory keeps the existing wound rule. Defeat kills min(current soldiers, max(1, ceil((observed strength - effective strength) / 2))); the current observed camp has strength three. One further survivor may be wounded. Severe defeat can destroy the entire force. This is deterministic initial combat tuning, not territorial war or a random death roll.

Deaths remove actual anonymous mobilized residents from population and the force; civilian labor was already removed at recruitment and is not deducted twice. The death-day meal calculation retains the elapsed fraction of each fallen resident’s demand before contact, so their already eaten travel food cannot reduce surviving household meals; subsequent days use only the living population. Named household adults remain protected civilians. Each death loses its militia kit, any fitted bow/spear kit, up to six remaining arrows and its proportional share of carried food. No field salvage enters a warehouse. Surviving soldiers retain wear, wounds and location, walk home, recover normally and may demobilize only their remaining people and condition-based equipment. A destroyed force is removed at the battlefield.

Fatal contact ends an active professional wage term immediately. Earned daily pay stays earned; every held, unstarted day returns to the donor treasury. The survivors retain their trained role and equipment but need a newly funded term after home recovery. Contracts retain their original troop count; new terms use the surviving count. Infantry fitting costs one tool per started pair. Archery receipts replay original capacity, volleys and casualty reductions before later loads; renewing pay never refills arrows.

A relief agreement retains its accepted troop count, food commitment, route and both parties' reports. Survivors return before unused depot reserves are released. Complete destruction closes the campaign with destroyedAt, no returnedAt, no invented return journey, and storage-aware release of unused host food/arrows. Overflow stays reclaimable at the host. The host population is unaffected. Returning supply teams keep their own carried goods and workers.

New recruitment remains two/four/six. A surviving one-, three- or five-person unit can recruit the actual missing civilian residents and paid kits to reach two/four/six through the same two full training days. Cancellation returns only pending recruits and kits; fatalities and veteran state remain. Other existing assignments use the surviving cohort within their capacity limits.

Each charter defense ledger has combatVersion: 1 and permanent casualty receipts; each unit has an enlisted/returned roster and contact policy. Migration adds no deaths or goods and preserves policy one for already accepted trips. Only a new patrol or relief acceptance enables policy two. Restore checks survivor arithmetic, loss quantities, wage closure, relief identity and dated ammunition capacity. City Defense shows fallen residents, actual losses, survivor counts and explicit permanent-risk reviews; briefings retain casualty events. These rules supersede older references to wholly absent field mortality and two/four-only reinforcement options. Named personal combat, sieges, occupation and wider war remain open. The full M0–M8 goal stays active.

Verification: eleven new casualty scenarios plus the existing gameplay suite pass 847 tests across 105 files. They cover actual partial/complete loss, named-civilian protection through ordinary recruitment, reduced population and real replacement training, original-versus-surviving equipment and contracts, paid archer volleys, capacity shrinkage and renewal, consented relief, host isolation, full-store depot reclamation, death-day meals, migration, malformed saves, revisions/replay, private immutable projections and offline equivalence. Browser checks verify risk review/cancellation/acceptance, one survivor's actual return/recovery and paid replacement, both parties' destroyed-campaign views, four widths and reload. Four actual server restarts retain staged local patrol and reinforcement records; both isolated QA servers are confirmed stopped. See the implementation status for the evidence and explicit readiness/storage boundaries.

Engine-driven factions and low model cost — September 22, 2026

User design constraint; faction implementation remains planned. Avoid large-scale model-agent use. Neutral houses and major powers run through ordinary game-engine code: scheduled rules, authored plan templates, state machines, bounded utility scoring, conventional pathfinding and seeded personality data. All routine economy, diplomacy, military strategy, quests, relationships and succession use zero model-inference calls. “Faction planner” and “regional controller” do not mean an LLM agent or a dedicated process per faction. The full world must operate without an API key, model provider, local inference service or GPU.

Optional model assistance is limited initially to development content drafts/read-only balancing analysis and non-authoritative narrative wording. Reviewed development output becomes versioned static content. Runtime prose, if separately enabled, cannot change facts, orders, prices, quest rewards, permissions or outcomes. Authored dialogue and factual briefings remain the complete default and fallback. Optional runtime calls default to disabled with a zero global budget; a later nonzero configuration needs atomic daily/monthly cost reservations shared across workers, bounded tokens, allowlisted models, finite jobs, caching scoped to evidence and audience, and immediate fallback on budget exhaustion or failure. No paid service is enabled or spending authorized by this design.

The scale architecture and spending policy records the task allocation, controls and acceptance tests. It clarifies all earlier AI terminology: hundreds of factions increase ordinary CPU, storage and network work, not a required stream of model requests. Verify zero default inference calls and unchanged canonical simulation with optional prose enabled or disabled. Hosting and simulation optimization remain necessary even at zero model spend. The technical wiki explains this implementation boundary; no current player controls or starting instructions change.

Named specialist training and service appointments — September 22, 2026

Implemented, M7 bounded standing training: A founding-home owner can authorize up to twenty cumulative paid courses for each named specialist service. At each village-day check after deaths and existing course work, the plan leaves an existing qualified free adult as backup first; otherwise it selects the youngest available living household worker and funds one real three-day course only when the current incumbent is living, no backup exists, no other course occupies the single training slot, Literacy and the mentor are active, a staffed school works, one learner is free, the four timber/eight food/one tool cost fits, and food remains two household days above the protected reserve. The candidate and original incumbent are recorded on the paid course; graduation designates that candidate only if the incumbent still holds the post. Existing courses continue if the standing plan is paused, while previous commitments count against a retained course limit. A plan adds no people, goods, instant qualification or active appointment. By default it waits when no free named household adult exists. A separately reviewed recruitment choice may then name one already present, unclaimed local civilian only on a day when a living lawful leader, a household place and every course requirement allow immediate funding. That transfer changes neither the settlement population nor its worker count; the new adult follows ordinary household aging and can become the qualified backup only after finishing the paid course. Authorization and failed checks name nobody. The specialist ledger and marker migrate to version five; version-four plans gain recruitment disabled, and older saves still receive empty plans. This is one capital continuity tool, not a complete successor pipeline for all institutions or families. See implementation status, player guide and technical reference.

Implemented, M7 paid successor preparation: A founding-household course may optionally name its current living specialist incumbent as the learner’s intended backup. The ordinary reviewed funding still reserves four timber, eight food and one tool and requires a real learner for three full working days. Graduation grants the personal qualification first, then designates that same adult as backup only if the original incumbent remains living and appointed to that subject, no other backup has taken the place, and the graduate is still free. A changed or released appointment leaves the qualification without a backup; this course instruction alone does not authorize future funding, appointment to the active post, extra residents or cross-settlement transfer. The version-three specialist ledger records the incumbent identity on the active course and bounded receipt; old version-one and version-two courses migrate with no backup instruction. This makes a funded succession choice survive save/replay while standing automatic training and its optional local-civilian recruitment are described above. Cross-settlement recruitment remains open. See implementation status, player guide and technical reference.

Implemented: the founding community can train its living named household adults who are civilian workers. A course requires locally known subject matter with recurring operating supplies, its active local mentor program, active Literacy and an operational staffed school at 65% condition. The community reserves four timber, eight food and one tool, spends one attention, and assigns one additional existing learner for three full village-day stages. School staff and the mentoring service keep their separate labor and upkeep. Public research can run concurrently only when its own two workers and requirements are also available.

Courses are personal qualifications rather than instant adoption or population grants. Each adult may earn multiple subjects but can hold only one named service appointment and cannot study while appointed. A separate reviewed appointment to an enabled local program keeps its ordinary worker count, institutions, household meals, rights and capability checks. It reduces that program's recurring operating supplies by 25%, representing reduced waste: a teacher service using one additional food per day uses 0.75. Programs without recurring supplies are outside this first course catalog. General pooled specialists remain usable; old saves gain no qualifications or compulsory appointments.

Funding preserves the existing protected food reserve and public timber ceiling. Costs are consumed by cumulative stage fractions rounded upward; cancellation returns only the unconsumed remainder and requires storage space. Attention and gross timber commitments do not reset. Pause releases the learner without losing progress. Lost school staffing, Literacy, mentoring or learner capacity blocks the course and retains its materials. Recovery requires an explicit resume and a new full-day interval. Courses use local daily checks, so a mid-day start completes its first stage at the first check after a full day has elapsed.

Death and worker reconciliation precede the training stage at a shared village check. A trainee dying at the last stage cannot graduate; unused supplies remain for lawful cancellation. The player may preauthorize one already qualified, living, unassigned household adult as backup for a named incumbent. At the incumbent's death check, that same adult takes the appointment if still living, under 85, free and qualified; no training, labor, goods or public office are granted. A backup dying first clears the plan. Releasing or replacing the incumbent also clears it. Without an eligible backup, the named post stays vacant and the program stops until manual appointment or release restores ordinary pooled staffing at the next normal operating check. Earlier qualifications remain personal and do not transfer to distant outposts. Ruler succession preserves funding and progress; actual illness or reduced labor may still block work.

City → Research → Named specialist training provides adult/subject selection, exact funding review, pause/resume/cancellation, qualifications, separate appointments/releases, reviewed backup designation/clearing, and bounded course and succession receipts. Reviews disclose unchanged population and service worker counts. Supply-chain demand, knowledge upkeep, food forecasts and actual daily consumption use the same discounted rates. Regional attention reports blocked courses and vacancies; return briefings record funding, graduation and appointment decisions. These personal records remain within owner-only knowledge views; production-steward and invited-resident permissions do not expand.

Verification passes 836 tests across 104 gameplay files, including 77 focused tests across nine files and ten named-specialist scenarios. Browser reviews, four responsive widths and three actual server restarts preserve paid training, graduation, appointments, private access and exact stock/people. The isolated QA server and port 34264 listener are stopped.

The original version-one migration creates empty household ledgers without altering existing programs, labor, stock or people. Version-two migration adds empty backup plans and succession history to version-one saves without changing appointments or goods. Restoration validates course identity, subjects, qualified members, timestamps, stage costs, refund conservation, appointment and backup exclusivity, and retained receipt links. The copied-world forecast includes exact course, qualification, appointment and backup state. See implementation status for current test evidence and technical wiki for the integration points.

This delivers a functional named-specialist path for M4. Wider specialist recruitment, transfer between communities, institutional licenses, larger schools and colleges, and the rest of M0–M8 remain open. It supersedes earlier statements that named specialist training is wholly absent; it does not replace the existing distinction between community knowledge, local adoption and operating capability.

One-world scale and AI empire architecture — September 22, 2026

Recommendation and validation plan, not implemented or benchmark-certified. The requested scale is thousands of concurrent humans and hundreds of AI factions, including much larger empires. The stack and capacity assessment recommends retaining the browser client and Node.js runtime, using TypeScript for new service contracts, PostgreSQL for authoritative durable state, regional simulation ownership, separate connection gateways and bounded AI planners. Add NATS JetStream with transactional outbox/inbox delivery at the distributed stage; pooled worker threads serve measured CPU-heavy work. Railway remains a candidate host, subject to actual hardware, network, storage and recovery evidence.

Current movement workers do not partition the durable living economy across machines. The living-world queue is one writer; commands and scheduled advancement clone large state; commits log full state; event selection repeatedly scans jobs/settlements; and broadcasts do broad per-player work. These are identified scale risks, not measured ceilings. Prior connection/movement tests do not validate the requested economic, military and faction workload.

One shared world spans geographic ownership domains, not isolated player worlds or one worker per faction. Major empires span multiple owners, with compact strategic summaries and finite regional allocations. Database-checked ownership epochs prevent two writers; durable transfer identities prevent duplicated cross-region armies or cargo. Cohorts, formations and scheduled events bound simulation cost without making outcomes depend on observers. PostgreSQL authority, broker retries and message deduplication are separate responsibilities.

The proposed validation fixture is 5,000 concurrent humans, 25,000 persistent human identities, 300 AI factions including three 1,000-settlement major powers, 30,000 total settlements and 100,000 active jobs. These are test inputs, not new genesis allocations or proven capacity. Separate tests cover 1,000 viewers at one hotspot, command bursts, long histories, unattended equivalence, worker failure, database recovery and 10,000 connections. The companion assessment defines latency, scheduling, headroom and recovery targets and illustrative capacity calculations.

The earlier single-process first-slice and “wait for measured pressure” advice still applies to a bounded prototype. It does not certify the full MMO target: state/persistence boundaries and the scaling path must be established before hundreds of large factions or a thousands-player public rollout. Services with local world files cannot be safely replicated as independent owners of the same world. No deployment, gameplay rule, starting flow or live storage changes occur in this design update; the technical wiki carries the architecture recommendation and status.

Slow household aging and natural succession — September 22, 2026

Implemented: every living named adult in a founding household, including subsequently adopted adults, now ages whether embodied or not. One lifecycle year is 24 four-hour village days: four real days. Warnings start at 80 and old-age death occurs at the first local daily check at age 85. A healthy founder starting at 35 therefore has 200 real days to this boundary; the founding elder at 61 has 96. These are explicit gameplay settings, separate from production time and the existing critical-illness rule. Logging out, appointing a successor, selecting an adult or entering observer mode never resets age.

The versioned lifecycle records its origin, starting age/date and completed years. New founders start at their founding date; adopted adults start at 24 on the accepted adoption date. Existing unaged saves keep their recorded adults and start tracking at migration, including saves with historical village work to catch up. Missing historical households are reconstructed at that same grace boundary. No retroactive birthdays or deaths are imposed. An already 85-or-older migrated adult receives one full lifecycle year before the first old-age check. Restores reject unmarked/missing ledgers, inconsistent ages/years, impossible dates and malformed death chapters.

All birthdays due at one daily check are applied before deaths, then deaths settle in stable character-ID order. A death removes the actual resident and, where applicable, civilian worker, with normal workforce reconciliation retaining paid work. A relative's death preserves the living ruler, unrelated embodiment, funded research, construction, stipend and military orders. The death of the current human ruler enters council stewardship and physically recalls discretionary offensive patrols under existing rules. Separate embodiment and lawful handover remain required. A later relative's death cannot steal the pending ruler's handover chapter.

Personal coin inheritance stays separate from public office. Historical heir comparisons use age at that death, not an heir's later birthday. When adults die at the same check, a still-living heir can receive an earlier chapter's coins and pass them onward in the later chapter. Unearned stipend escrow returns before that check can issue another payment. No death or handover grants people, goods, land, reset budgets or a second founding package.

City → Family & continuity shows each living adult's age, next birthday and old-age boundary with full dates, plus warnings and cause-specific death chapters. Appointment, embodiment and handover reviews show the chosen adult's unchanged age clock. Regional attention links adults aged 80 or more to these controls. Return briefings distinguish birthdays, relative deaths and public succession; copied-world forecasts include actual household age/death changes and their economic consequences. These records remain private to the account.

Verification passes 826 tests across 103 gameplay files, including 50 focused tests across six files and ten new lifecycle scenarios. The long-run scenario advances a healthy self-sustaining village through 51 lifecycle years, verifies three natural deaths and a delayed lawful handover, and restores the same state. An independent browser village advances 1,200 actual daily checks and verifies reviewed succession, two server restarts, exact age/stock custody, private access and narrow layouts. See implementation status for final regression evidence and interface specification for controls.

This supersedes earlier statements that all household age clocks are absent or all household deaths transfer public office. Births, broader NPC lifecycles, named personal field mortality and goods/land estates remain open. This is another M7 delivery; the complete M0–M8 goal remains active.

First-village walkthrough and wiki synchronization — September 22, 2026

Implemented: the Gameplay wiki's Getting started section now walks a new charter holder through choosing woodland, farmland or coast; reserving and founding; checking needs and staffing; keeping the first supply chains working; finishing one affordable project; using research and trade; and preparing for absence and return. It uses current City labels, links the generated starting packages and keeps implementation details in Technical. It adds no gameplay rules.

Wiki maintenance is a standing requirement in AGENTS.md: update the relevant authored wiki guidance and this design document with gameplay, player-interface or simulation changes, revisit the beginner walkthrough when early play changes, and regenerate pages in the same commit. GitHub checks changed gameplay paths for matching authored wiki/design edits and checks generated output against current sources and catalogs. npm test first checks wiki freshness; the Railway Docker build does the same before deployment. These gates detect missing updates and stale pages; contributors must still verify prose and examples against actual behavior. See the technical contribution workflow and the player guide.

Neutral neighbours and three major powers — September 22, 2026

Design direction; not implemented. Neighbour Houses are now explicitly neutral communities that deal cautiously with humans, build trust through small agreements, and defend themselves without initiating territorial conquest against human settlements. This supersedes the earlier aggressive Ashen Banner neighbour proposal. Alongside them, the world contains three established major factions, detailed in Major factions; names and numerical tuning remain proposals.

• The Veiled Concord: one faction of ice mages controls extensive territories around both poles. Its intentions remain unknown. Long quest lines first earn a direct audience, then separately earn limited trade; early instructions come through inscriptions, scholars and unattended proof sites rather than open mage diplomacy. Both polar seats recognize earned credentials but retain separate physical stores and armies. Fierce, overwhelming border defense comes from established forces and finite local wards. It is not a routine outward-conquering faction, and trade access does not reveal its ultimate purpose or grant unrestricted passage.
• The Crown of sh: a Lich King controls a large contiguous part of a major continent, protects it with undead forces and seeks expansion. Necropolises, finite remains, animating energy and command relays support its armies. Undead replace living food needs with explicit magical upkeep; raising consumes each eligible remains record once. Severed relays, interrupted rituals and destroyed soul anchors give players consequential counterplay. Reconstitution costs resources and time; destruction of all anchors can end the king permanently.
• The Ironblood Horde: trolls, goblins and orcs form a large realm ruled by a dynasty of orc kings. It protects its homeland and expands through funded campaigns and occupation. Clans, royal temperament and adult succession create opportunities for trade, safe-conduct, tribute, rivalry and negotiated peace. new king inherits actual obligations and assets; civil war redistributes existing forces rather than spawning duplicates.

Major factions begin as asymmetric established powers, not human-sized starting villages. Their large founding estates and forces are recorded one-time world-history allocations. Subsequent actions obey shared knowledge, authority, movement, conservation, strategic-budget and persistence rules; species and magical capability differences require explicit engine rules. New-world faction placement precedes human founding. Existing saves require verified unclaimed geography or a separate world initialization, never silent occupation of player titles. These changes are design only and do not alter the current map.

Player encounters distinguish known lethal borders from offensive sieges of human settlements. Risk previews, scoped permissions, newcomer protection and the shared territorial notice windows remain binding. The proposed first expansion trial permits one new offensive territorial campaign per major faction at a time, while real garrisons continue defending. Costs, supply reach, occupation and competing fronts constrain conquest. Faction dossiers, knowledge-limited borders, quest journals and return briefings explain actual changes without revealing hidden intentions or military state.

Delivery follows the neutral-house foundation: durable faction territory and access, then quest evidence and magical/unit economies, dynastic succession, and finally expansion after siege/occupation/logistics gates. Cross-polar recognition, quest recovery, finite overwhelming defense, undead conservation, royal succession, no theft of existing land, and unattended/restart equivalence are explicit acceptance requirements. Full faction profiles and staged verification are in the companion specification.

Dated fish on physical outpost routes — September 22, 2026

Implemented: manual outpost supply/collection and existing finite governor exchanges accept fresh and preserved fish at one carrying-weight unit each. The actual oldest batches are selected and disclosed at authorization. Ordinary route, labor, food reserve, equipment, destination capacity and spending limits still apply. Proposal/review reads spend nothing; dispatch deducts actual outgoing fish and reserves actual collection stock at the outpost. Fish is never a substitute for the carriers' separately funded prepared-food provisions.

Each dated portion retains its original expiry through outgoing travel, collection reservation, return travel, partial unloading and recall. Every route check and recall removes expired portions before any transfer. Fire, full stores and paid order status cannot pause aging. A delivery transfers only its surviving quantity; expired cargo is neither replaced nor delivered as promised stock. Recall releases surviving collection goods in the outpost with their original dates and brings surviving exports home physically. Capacity remains occupied by reserved stock until collection, release or expiry. Ordinary nonfish route behavior is unchanged.

Arriving warehouse stock keeps exact source expiry dates. It can merge only with a bucket bearing the same date; it never receives a fresh shelf life. At the destination, the first local daily check on or after that date removes it before production. Already expired warehouse stock cannot be loaded between its deadline and that local check. Local perishable ledger version two retains existing version-one dates, counters and quantities and permits at most 256 distinct dates per resource, accommodating different community clocks. The unchanged two/fourteen-check shelf lives apply to newly produced local fish. Old unaged-save migration still has its disclosed original grace boundary.

A separate marked transport ledger requires age custody on every outpost supply job. Its per-bucket original quantity equals remaining + delivered + returned/released + spoiled, with phase/cargo reconciliation, expiry bounds and exact original timestamps. Old nonfish trips receive empty custody without stock changes or new orders; unmarked fish, missing custody, unsupported journeys and malformed receipts reject. Up to twenty completed fish shipment receipts per home retain dates and final quantities; local stock totals remain separately recorded. Current authority, stale reviews, replay protection and lawful stewardship continue to govern existing orders.

City Frontier reviews show exact dated batches and explain loss/recall rules. Active journeys and completed receipts show remaining, spoiled, delivered and returned/released portions. Local supply panels explain imported dates. Actual forecasts include shipping losses, regional attention flags spoiled active cargo, and both endpoint briefings record losses. Governor commitments count the original paid shipment even when it spoils, so expiry does not reset allowances or create replacement authority.

The verified gameplay chain includes actual coastal catches, preservation, paid transport to a command-founded outpost, a locally built and staffed smokehouse, and preparation of delivered preserved fish into resident food. This supersedes the earlier blanket ban on fish transport for these owned outpost routes. Player-to-player barter/relief is implemented in the dated-agreement extension above; the newer staffed NPC preserved-fish sale is described at the top of this design. The later grain/flour extension above also carries dates. Fish-specific cold storage, prepared-food aging and broader food systems remain open. See implementation status for evidence and gameplay interface for controls. The full M0–M8 objective remains active.

Neighbour Houses: computer-controlled players — September 22, 2026

Proposed; independent house controllers are not implemented by this design. The neutral layer of computer-controlled players takes the form of persistent Neighbour Houses: families with visible adult leaders, real communities, local ambitions and memories of shared events. Humans meet them as cautious trade partners, recipients of relief and peaceful competitors. These houses can defend themselves but do not initiate territorial conquest against humans. Three distinct major powers provide polar mystery and expansionist threats as specified above. All are explicitly labelled computer-controlled and never count as connected human players. The detailed computer-controlled player design defines neighbour personalities, encounters, contact UI, decision rules, delivery stages and acceptance scenarios.

Independent houses, delegated human governors and succession stewards are distinct authority roles. Shared planning code does not confer shared permissions. Ordinary logout authorizes no new strategy; succession retains lawful contracts, offices and finite spending limits. House identity survives leader replacement. Existing production, governors, mandates, trade and continuity are foundations, not evidence that general autonomous neighbours already exist.

Retain the strategic-governor/planner/executor architecture below, with an immutable, faction-scoped knowledge projection and ordinary validated commands. Hard authority, reserves, labor, storage, attention and route constraints filter choices before personality scoring. One house shares its strategic attention across planners and settlements. Opening assets require an explicit one-time initialization record; there are no free resources, live hidden information, automatic replacement houses or forced outcomes. Relationship evidence distinguishes completed commitments, lawful cancellation and actual harm.

Start with three one-village neighbours in an isolated trial: a cautious grower, a trader and a defensive builder. Scope their decisions to supported production, repairs, barter and relief before adding recurring relationships, expansion or conflict. Proposed initial limits are one scheduled evaluation per village day plus bounded event wake-ups, eight candidate plans per evaluation, two accepted strategic commands per house per village day, and one unresolved outgoing offer per partner with three total; existing stricter limits still apply. Knowledge-filtered contact cards expose declared needs and shared receipts, while an owner's governor view explains authorized decisions. These UI additions and limits remain proposals.

Decision sequence, policy version, next due time and receipts must persist. This refines the older sleeping-region/AI-budget guidance: active and unattended worlds process the same logical event order; camera presence may reduce visual detail but cannot suppress decisions or alter economic outcomes. Overload uses bounded catch-up with retained backlog, or an explicitly recorded regional cadence change, rather than skipping selected factions' history. Replay, knowledge isolation, resource conservation, authority loss and observed/unobserved equivalence gate the first release. Wider density, warfare and family simulation remain later work.

Local fish freshness and preserved meals — September 22, 2026

Implemented: chartered communities keep bounded, persisted age buckets for fresh and preserved fish. Fresh fish expires at the second following village-day check; preserved fish at the fourteenth. Additions merge by expiry boundary, and every actual withdrawal consumes the oldest stock first. Expiry runs before that day's meals and production, removes real warehouse stock, frees storage and records an exact withdrawal and event. It creates no compost or replacement goods. Unstaffed workshops, full warehouses, paused orders and absence do not stop aging. Fish that expires on a production check cannot be processed by that check.

The smokehouse now has three mutually exclusive recipes: five fish plus two logs produce four preserved fish; six fish plus one log produce twelve prepared food; Prepare preserved fish meals consumes four preserved fish plus one log for twelve prepared food. The new recipe closes the local preservation-to-household chain with actual workers, fuel, capacity, full-cycle timing and existing production budgets. Selecting it changes no stock or age immediately. Preservation remains the default for existing buildings. Raw and preserved fish are not direct household meals; prepared output uses ordinary household, reserve and provision rules.

Perishable ledger/version marker one conserves opening + incoming − used − spoiled = current stock and reconciles every bucket with the actual warehouse. Original unaged saves receive a disclosed grace period from migration time, without invented earlier losses or new goods. Historical catch-up before that boundary cannot backdate migrated stock or new fish caught during that catch-up. Repeated restoration preserves ages; missing markers/records, impossible quantities, duplicate buckets and excessive shelf life reject. The warehouse-history boundary tracks all actual additions and withdrawals, including rollback and offline processing.

Supply chains show dated buckets, exact next-check expiry, lifetime losses and actual warehouse movements. One/six-day forecasts include simulated expiry and loss issues; regional attention points to fish expiring at the next check. Static coverage explicitly excludes spoilage and must be read alongside dates or the simulated forecast. City recipe reviews retain the existing authority, stale-review and replay protections.

Scope: this ages only fish held by chartered communities. Legacy non-chartered Greywood/Tidebreak stocks remain prototypes. The later dated outpost-route extension above now supports manual and governor fish cargo. The later player-agreement extension also preserves dated custody; other transport systems remain excluded until they do so; loading and unloading must never reset freshness. Prepared food, grain, flour, other perishables, refrigerated storage, nutrition and larger ecological chains remain open M3 work. This is one bounded step in the M0–M8 goal, not completion of that goal. Verification is in implementation status, with controls in gameplay interface and the player guide.

Finite recurring relief between communities — September 22, 2026

Implemented: a donor can offer two to six physical gifts of one supported good, 1–40 whole units per round. The recipient separately accepts the immutable goods, round count, one/two/three/seven-day return interval and seven/fourteen/thirty-day dispatch window. Offers expire after three village days. Proposal and acceptance reserve no goods, workers or recipient payment; the first dispatch check occurs one full village day after acceptance. Recipient consent creates no debt, tax, office, ownership, building or military rights. Whole manuscripts still require separate study. This extends the delivered one-time relief and finite recurring barter systems.

The donor needs active Public accounting and Record keeping at proposal, acceptance and each later dispatch. Relief recipients need neither accounting service because they authorize no payment. Barter keeps both parties' original institution and payment requirements. Every round pays actual donor cargo plus separate journey food, obeys protected reserves, public timber limits, route safety, equipment capacity and two-worker/single-caravan availability. Missing funding or services waits without a partial commitment. Full destination storage holds the exact cargo with its real team until delivery or recall. The maximum donor commitment includes all gifts and provisions; recipient commitment is always empty. Shared outpost logistics allowances do not fund these bilateral schedules.

Either party may stop future rounds. An undelivered gift returns with its carriers; goods already delivered remain final. Stopping or recalling does not erase gross commitments. No new round starts before the previous team returns and the agreed interval passes. Dispatch-window expiry prevents new spending while already funded travel continues. Each round is a tagged relief child contract with its own physical custody and delivery receipt. Original finite deadlines, four unresolved schedules per village and bounded closed-parent retention remain. Lawful council stewardship preserves accepted terms subject to actual service and supply availability; a new agreement still needs both parties' consent.

Schedule ledger/version marker two introduces no new orders or permissions. Version-one barter schedules migrate with exact terms, spending, travel and receipts retained. Empty payment is legal only for tagged relief, and parent/child kinds must agree. Missing markers, downgraded relief ledgers, payment-bearing gifts and unmatched child links reject. City proposal/acceptance/stop reviews show no-payment terms, total donor exposure and delivery limits; regional exceptions distinguish recurring relief from barter. Numeric editor blur now retains the review button so the first click opens the review reliably.

Nine new scenarios cover real deliveries and shortage recovery, finite donor commitments, missing services/reserves, recipient poverty, physical recall, irreversible delivery, full stores, deadlines, competing teams, current authority/replay, old-save migration, malformed custody, succession and offline equivalence. Browser and regression evidence is tracked in implementation status, with controls in gameplay interface and the player guide. Institutional charity budgets, requester-controlled demand, broader markets and other M0–M8 requirements remain open.

Food planning for stationed tower troops — September 22, 2026

Implemented: food-only outpost mandates now offer an explicit Residents and funded tower duty target. Resident-only remains the default and the migrated choice. At each check the expanded target is the larger of resident-days stock or the protected household reserve, plus the finite daily collections still scheduled within that horizon. The reserve addition applies only while such collections remain. Travelling forces, arrival refills, hypothetical renewals and expected harvests are excluded. Duty and professional wage expiry truncate the schedule. An authorization changes no warehouse or troop provisions immediately; existing cargo capacity, finite food allowance, two carriers, one team per destination, travel, services, storage and regional ceilings still determine each physical delivery. Simultaneous checks include current tower demand in food-days urgency only for opted-in mandates. Fixed-quantity governor orders retain their existing quantities.

One read-only collection schedule feeds mandate reviews, city food demand and the host supply graph. Scheduled meals appear at the actual tower community exactly once; they are excluded from the home and household consumer. Regional balances inherit this demand, while one/six-day forecasts continue to run actual collections and physical deliveries together in the copied authoritative simulation. The static daily demand is explicitly not a promise that duty or that demand lasts beyond its deadline. A higher stock target alone cannot guarantee that a caravan arrives before a collection or that the shared operating ceiling can fund both shipping and later tower issues.

Mandates version three retains all prior spending, checks, history, live journeys and pause state. Version-two records migrate with includeGarrison: false; version-one rekeying remains supported. Missing/malformed new permissions and a downgraded record carrying the new field reject. Existing orders acquire no military-food authorization silently. Reviews expose the current concrete target and its household, reserve and scheduled-duty components, and preserve cancelled drafts.

Seven new scenarios cover actual replenishment without injected goods, finite duty/wage horizons, host-only accounting, immutable/private reads, neutral save migration, stale/replayed orders, retained spending, offline equivalence and six-day regional prediction versus actual inventories and meals. Verification status is recorded in implementation status; controls are documented in gameplay interface and the player guide. Wider fort combat, allied garrisons and regional coordination remain open. The full M0–M8 goal remains active.

Funded seven- and fourteen-day tower watches — September 22, 2026

Implemented: local adjacent and owned-outpost towers now support seven/fourteen-village-day assignments for the existing trained two/four-person force. The home record keeper must be active. Ordinary readiness, lookout/scout, same-owner, retained outpost, fire, actual route and eighteen-step limits remain. Long duty does not require its entire food bill to fit on the soldiers: they leave with four days of carried food, while the review authorizes a finite daily allowance at the tower community. These are bounded orders; indefinite or allied deployment is not delivered.

The existing remote arrival refill remains separate. After each complete duty day before expiry, the host supplies exactly one meal per soldier, replenishing carried food at the occupied local tower. Seven-day duty authorizes six collections; fourteen-day duty authorizes thirteen. Thus four soldiers authorize 24 or 52 additional food. No daily food is reserved or deducted at dispatch. Each collection rechecks current local inventory, protected household reserves and any shared regional operating budget. Successful payments debit that host warehouse, add the same food to carried rations and record both an exact dated receipt and the regional garrison-food commitment when a regional budget exists. Ordinary household/travel consumption still removes food once. Arrival refill and initial manual provisioning remain outside this new automatic-spending category.

Failure ends the watch without spending food or resetting its allowance. Recall, lost record keeper, scout/lookout, host authority, fire, readiness, deadline or an expired professional-service term also stop future collection and cause physical withdrawal. Return food remains carried; home storage governs its eventual unloading. Troops remain mobilized home residents throughout. Existing warnings affect actual new caravan routes from the tower community, and no new population, territory, combat bonus or healing is granted. Lawful council stewardship preserves this already authorized defensive order.

New local records use garrison version three; new remote records use version four. Their attached version-one support records retain host, fixed allowance, spending, exact daily receipt sequence and next due time. Restore rejects absent/forged support, altered payment dates/amounts and downgraded long assignments. Existing one/two-day version-one/two records retain their original carrying and arrival terms, without new spending permissions. Ending a funded watch records its spent/authorized summary in the existing bounded defense history; return clears the active assignment. No new grants or synthetic historical payments are introduced.

Defense reviews expose initial provisions, optional arrival refill, additional daily allowance, real/world duration, services and failure responses. Both home and host views expose actual daily spending and the next collection; unused authorization is explicitly not a stockpile. The host supply network includes the pending daily food demand, without double-counting it at home or as household meals. The shared operating-budget scope now includes these automatic collections. The final affected suite passes 88 tests across eleven files. Eleven new scenarios cover physical local/remote supply, offline absence and return, reserves, active shared ceilings, recall/service loss, death with specialist interruption, current authority, replay, legacy short terms and corrupt support records. A real professional contract expiring exactly when food is due stops the collection before returning the force. Browser checks pass review/cancellation, retained inventories, allowance and receipt views, host-only supply demand, reload, 320–1440px layouts and actual outward/stationed restarts. Explicit QA time advances the actual march and first daily collection; no food is granted directly. Catalog/syntax/wiki checks pass and the isolated QA server is stopped. Detailed evidence and remaining broader limits are tracked in implementation status, with controls in gameplay interface and the player guide. The M0–M8 goal remains active.

Dedicated resident continuation screen — September 22, 2026

After a resident dies or leaves, City now opens a dedicated continuation screen instead of falling back to shared Greywood management. Its read-only projection exposes only the account's membership and life history, invitation navigation and minimal routing IDs. It contains no settlement warehouse, workforce, project, building or policy records. Private former communities remain inaccessible. Ordinary settlement/cell/orientation validation still applies, and invitation acceptance keeps all existing authority, capacity and current-character checks.

The overlay points to invitations, stock labels read “Not held,” map mutation controls are disabled and any construction preview ends. The continuation page omits the settlement selector, management navigation and settlement statistics. It preserves name drafts and expanded life history; no available offer produces an explicit waiting state. Withdrawing an invitation during review disables stale confirmation. Successful acceptance automatically opens the newly agreed home/work screen. Cached City data is usable only when its resident-life mode matches the latest identity, preventing old continuation data from being read as a live settlement during acceptance.

This corrects presentation and navigation without changing membership schema, population, stock, grants or rights. Three new projection scenarios cover both departure and actual village-day death, immutable reads, absent management data, invalid queries, private boundaries and a newly accepted scoped workplace. The focused eight-file run passes 52 tests. Browser verification covers cancelled departure/acceptance, no management controls, stock labels and disabled map construction, withdrawn-review invalidation, no-invitation waiting/history, retained names, automatic new-home navigation, actual staffing and unchanged populations/warehouses at 320–1440px. A final actual server restart preserves the two lives, current identity, staffing, both warehouses/populations and private boundaries. Syntax, diff whitespace and generated-wiki freshness checks pass; the isolated QA process and port 34257 listener are stopped. Details are recorded in implementation status. The broader M0–M8 goal remains active.

Resident continuation after death or departure — September 22, 2026

An account whose resident life has ended can now accept another community invitation as a new existing adult. A currently embodied resident cannot claim a second life, and a founding account still cannot use this entry route. The previous life must be recorded as left or dead before acceptance. The destination host separately offers an operational producer and an available existing civilian; acceptance repeats the ordinary capacity, authority, expiry, staffing-place and catch-up checks. Invitations are public offers for both newcomers and returning resident accounts, with that scope disclosed to the host.

Each accepted life has a monotonically increasing account life index, a distinct character ID and a link to the previous membership. Ordering follows accepted lives, not invitation creation order. A previously opened invitation in another community can therefore be accepted after departure without becoming the wrong current life. Only the latest living resident is embodied and included in named-civilian protection. Leaving retains the old civilian in their community and releases the named claim; death removes that person and worker once. A later invitation annotates another available civilian without adding population, labor, stock, shelter, knowledge, title or wages. Earlier populations, warehouses, paid work, death evidence and work agreements remain intact.

Housing and producer authority belong to the specific life. They do not transfer across communities or revive through an earlier work proposal. A new life starts only with the newly consented single-producer agreement. The account's original resident starting choice remains consumed: no continuation can grant a free founding package. If no invitation or unclaimed civilian is available, history remains readable while the player waits; this implementation does not fabricate a fallback person. Founder-family succession, landless careers, kin inheritance and wider tenure remain separate systems. Invited-resident aging now follows the implemented lifecycle rules above.

Membership schema version two preserves original character IDs while adding life index one and an empty predecessor to accepted version-one records; unaccepted offers receive index zero. It grants no people or authority. Existing resident-work terms and revocations retain their original membership references. Restore validates the complete record counter, sequential life links, unique character identities, non-overlapping lives and the ended predecessor's timestamp. Individual missing membership or work records now reject restoration, preventing silent fallback to an earlier role or starting choice. An old empty development membership ledger can recover its missing continuity marker without reconstructing any rights; nonempty version-two ledgers require their marker.

World snapshots expose the current account's resident identity. Later-life commands must carry that current character ID; omitted or former IDs reject even when a fresh world revision is supplied. An ended life can accept a new invitation but cannot issue ordinary public orders. Durable accepted-command receipts still replay without applying effects twice. The City continuation view offers available invitations, preserves cancelled name drafts, explains the absence of property transfer, and lists prior lives with community, status and death cause. The overlay links an ended life to continuation, and the new community receives the normal scoped home/work view.

Verification: 766 tests across 94 gameplay files pass, including 54 focused tests across seven files. Seven new scenarios cover cross-community departure and acceptance, a village-day death from an explicit critical-health boundary, invitation-order independence across three lives, version-one migration with an existing renewed work term, missing/forged/overlapping records, finite civilian scarcity, duplicate acceptance, offline death equivalence and rejection of ended-life work proposals. Browser checks cover cancelled departure and acceptance, old-home privacy, no restored founding controls, retained names, actual character-bound staffing in the second community, two-life history, reload and four widths. Two actual server restarts preserve the ended and continued states, distinct identity, both warehouses and populations. Narrow screenshots were inspected. Catalog validation and generated-wiki freshness pass; the isolated QA process and port 34256 listener are stopped. See implementation status, interface details and the player guide. The full M0–M8 goal remains active.

Renewed resident work and agreed workplace changes — September 22, 2026

An existing resident can now continue after their fourteen-day work term expires or is revoked, and a new lawful host can restore participation after succession. The current founding leader offers a specific operational producer from Founding & charter → AAgree a new work term. The named resident separately accepts or declines from Your home & work. A proposal lasts three village days and changes no authority before consent. Only one unexpired proposal per resident is permitted; withdrawing or declining closes that specific offer. Expired offers cannot be accepted or answered after a newer proposal replaces them.

Acceptance replaces the previous workplace authority immediately with fourteen village days measured from acceptance; it does not bank unused time from the previous term. The old producer's staffing remains as applied, and the new producer's staffing stays unchanged until a separate permitted staffing order. The old role cannot revive when the replacement expires. Housing, named-person accounting, local population, labor base, inventory, original membership, original revocations and the consumed starting choice remain unchanged. No wages, goods, title, new resident or starter grant is created.

Only the same resident identity may consent. Acceptance rechecks the proposing leader, living membership, current offer, operating workplace and caught-up community. Death, departure, a replaced host, expired/replaced offers and stale reviews reject rather than restoring powers. The new term retains the same single-producer staffing scope; no recipe, budget, construction, military, trade, family or wider production access is granted. Current role revocation targets the effective term, keeps prior evidence, and preserves housing. A damaged workplace can be replaced by a different operational producer through fresh consent, without repairing the original structure.

An additive version-one resident-work ledger and continuity marker migrate existing memberships with no renewals or authority changes. The original membership and original staffing history remain authoritative for the first term. Every later proposal retains its sequence, issuer, exact workplace, offer window, response, accepted term, revocation and bounded staffing audit. Restore checks membership/issuer/workplace references, consent chronology, exact duration, action history and absence of actions after supersession. Owner and resident views show the effective producer/end date plus the proposal history; expired or revoked initial terms are never rewritten to imply fresh consent.

Verification: 759 tests across 93 gameplay files pass, including 47 focused tests across six files and eight new renewal scenarios. The focused suite exercises expired and revoked renewal, actual changed food production, pending/accepted workplace boundaries, decline/withdrawal/expiry, host death and lawful handover, foreign/stale/replayed requests, ended membership, neutral migration, malformed records, offline equivalence and storm damage. Two-player browser QA verifies reviewed/cancelled proposals and acceptance, retained drafts, unchanged people/stock, scoped real mill staffing, privacy, reload and four widths. Two actual server restarts preserve the pending proposal before consent and the accepted replacement afterward, with exact membership, warehouse, population, staffing and action history. Narrow screenshots were inspected. Catalog validation and generated-wiki freshness pass; the isolated QA process and port 34255 listener are stopped. See implementation status, interface details and the player guide. The complete M0–M8 goal remains active.

Invited resident starts and scoped work — September 22, 2026

A founding community's current leader can now open one public newcomer invitation for an operational local producer. Any persistent identity that has not founded and has no currently embodied resident may review and accept it; the first accepted response closes the offer. Offers last three four-real-hour village days and reserve no resident in advance. AAcceptance rechecks the leader, workplace, simulation catch-up, existing unclaimed civilians and the four-resident-player community limit.

Acceptance names one existing 24-year-old civilian and records a shared-housing agreement at zero rent plus a fourteen-village-day producer-assistant role. It creates no people, workers, goods, wages, building or exclusive land. The member remains in the host's real population, consumption and labor pool. Named-civilian accounting protects this resident from being claimed again by household adoption, recruitment or founder transfers. An unused site reservation is released. The membership ledger permanently records this starting choice: subsequent departure, death or receipt eviction cannot yield a new starter village.

The role permits only staffing the specified producer. It does not permit recipe or production-plan changes, construction, spending-policy changes, research, trade, army control or delegation. Its private projection contains the agreed producer, local labor, population and food, omitting other producer and family/army/regional records. Reviews explain that moving farmers can reduce food output and released workers can start paid queued work. The owner retains ordinary management. Expiry, role revocation, loss of the operational workplace or a changed leader removes/suspends work access; applied settings continue. Housing and its inspectable membership remain after work access ends. Leaving ends control of the named adult and returns that person to ordinary civilian accounting without removing population. Eight consecutive critical-health village checks kill the resident, subtract one person/worker exactly once and retain the consumed start record. Freshly consented work renewals and workplace changes now follow the rules above. Resident continuation now follows the rules above; resident kin inheritance, personal wages, transferable leases and purchased plots remain open.

The initial version-one membership ledger now migrates to version two as described above, retaining a continuity migration marker. Old worlds receive an empty ledger without grants. Restore validates offer and acceptance chronology, unique accounts, existing producer/issuer, exact term, character identity, bounded staffing history, death evidence and named-civilian limits. Current host and member commands require fresh world reviews; duplicate accepted commands are idempotent.

City → Founding & charter lets hosts review/withdraw open invitations and revoke work roles. New identities see public invitations alongside founding sites, name their adult, review the permanent starting choice and open the community after acceptance. Your home & work presents the scoped producer controls and housing terms. The map overlay identifies this as the resident's home under the host's charter and avoids presenting hidden inventories as zero or offering owner construction controls. Restricted public-office overlays follow the same scoped presentation. See interface details, implementation status and the player guide. This extends the M0 invited-start requirement; the complete M0–M8 goal remains active.

Verification: 751 tests across 92 gameplay files pass, including 73 focused tests across seven files and seven new resident scenarios. They cover conserved starts, consent, scoped commands, revocation/expiry/leave, reservation release, four-resident limits, malformed/legacy saves and offline replay. Critical illness and civilian scarcity use explicit boundary fixtures. Two-player browser QA passes cancelled reviews/name retention, acceptance, actual producer staffing, unchanged stock/population, foreign privacy, reload and 320–1440px layouts. Narrow screenshots were inspected. Two actual server restarts preserve active and revoked memberships, exact inventory, population and staffing; revoked roles retain housing. Catalog validation and generated-wiki freshness pass. The isolated QA process and port 34254 listener are stopped.

Home militia stationed at owned outpost towers — September 22, 2026

Implemented: an existing trained two/four-person home force can take one/two village days of duty at a built, staffed watchtower in a populated retained outpost. The same account must hold both communities. The route must stay outside foreign charters and be at most eighteen walking hexes, with no known fire and enough readiness to arrive. For original one/two-day assignments, duty plus the return walk and one-day reserve must fit four carried ration-days; long routes therefore offer only one unfunded day. Longer funded watches use the daily supply rules above. A home scout and the outpost civilian lookout remain separate workers. No local recruitment, population transfer, title or combat bonus is granted.

Departure fills the unit's carried food to its existing four-day capacity from the home warehouse. The review separately authorizes a single arrival refill of up to that same capacity from the outpost. No outpost food is reserved or deducted at departure. On physical arrival, current local stock and household reserves are checked again; only the actual missing carried food is charged and receipted once. A missing refill sends the force home with its remaining provisions. The bounded march allows ordinary return without that refill; later fires and delays can still exhaust food. There is no remote refund of food already eaten or collected.

After a quarter-day watch preparation, the home scout and local lookout can brief new caravans departing from the tower community onto actual walking detours around that community's surveyed camp. Existing caravans and the home village receive no remote immunity. Recall, deadline, lost scout/lookout, failed tower, new foreign charter, evacuated destination, readiness or return-food limits end the watch and require actual return. Paid professional terms retain their normal expiry/recall rules. Structural work checks every visiting assignment and waits until the unit returns home. Visiting troops continue to count as home residents, with their own carried meals, rather than outpost civilians.

Short remote assignments use version-two attached garrison records with host identity, bounded refill authorization, actual arrival receipt and full physical route. Existing local version-one records retain their rules. Restore validates retained ownership, path adjacency/endpoints, duration, phase and exact refill amount against elapsed march consumption. No new ledger, goods or assignment is granted to old saves. Home Defense lists owned outpost towers and both costs; the host sees visiting troops and a link to their home controls.

Six command-driven scenarios cover actual harvests/trade, founding, a built tower, local surveying, crafted kits and trained home troops; physical arrival and a paid caravan detour; pre-arrival recall; an explicit arrival reserve boundary; scout/lookout loss; foreign/duration/duplicate rejection and malformed saves; and offline equivalence through expiry/return. All 51 focused tests across five files pass; the full regression passes 744 tests across 91 gameplay files. Browser checks cover reviewed/cancelled funding, exact home food, unchanged outpost stock at dispatch, guest visibility, reload and four widths. Two actual server restarts preserve the paid outward and stationed states, exact inventories and receipt. Arrival verification advances fifteen real route steps and quarter-day preparation with an explicit QA clock; five outpost food is taken at actual arrival, host warnings become active, and another account cannot inspect private host state. Narrow screenshots were inspected; the isolated QA server is stopped. Broader forts, allied garrisons, military passage for this duty, indefinite deployments and field resupply remain open; longer bounded watches now use the daily host supply described above. See implementation status, interface details and the player guide. The M0–M8 goal remains active.

Forecasting the linked regional economy — September 22, 2026

Implemented: City Regional offers one- and six-home-day forecasts across the founding village and its retained outposts. All communities advance together in one disposable copy of the authoritative world, using the same actual meal, production, construction, institution, journey and mandate deadlines. Each local warehouse, reserved collection, carried cargo and provision supply remains separate. Shared logistics and operating ceilings constrain the same copied commitments; forecasts grant no budget, goods, population, title or command receipt to the live world.

The result shows before/after local food, residents, health, workers and storage; changed warehouse goods; daily regional checkpoints; cumulative shared spending; cargo still travelling or reserved at the horizon; and named constraints linked to current local controls. A later urgent shortage replaces an earlier lower-severity warning for the same condition. Funded founder journeys can establish a new community inside the estimate, with transferred residents counted separately until arrival. Home-day labels do not synchronize local schedules. Dates and times identify the actual horizon. Bounded overview omissions are disclosed.

Only the home charter holder can request this private regional scope. Local production stewardship grants no regional inspection, foreign requests return no forecast, and an outpost request must use its founding home. Existing local production/construction comparisons remain available independently. Regional forecasts currently follow accepted orders; combined unconfirmed regional plans remain open work. One/six-day horizons, bounded event work, a computation deadline and the existing two-second request throttle remain enforced. Failures return no partial estimate. Results become explicitly outdated after world revision changes and are recomputed after reload; no new persistence schema or migration is required.

Verification includes six new regional scenarios: three-community daily equivalence under shared ceilings; stone collection custody; an actual dependent-camp food crisis after registry staffing loss; ownership/delegation/scope/work-limit rejection; repeatability after restore and changed accepted orders; and paid founder arrival. The five-file related run passes 35 tests; the full regression passes 738 tests across 90 gameplay files. Browser verification covers live three-community results, unchanged stocks/instructions/budgets, four widths, stale-result disclosure after an accepted route change and fresh estimates after reload. An actual server restart preserves live stocks, instructions and budgets; fresh estimates remain read-only, and a second account is denied private regional data. Narrow screenshots were inspected and the isolated QA server is stopped. See implementation status, interface details and the player guide. The wider M0–M8 goal remains active.

Wiki audiences: gameplay and technical reference — September 22, 2026

Implemented: /wiki.html is the player-facing Gameplay guide: controls, rules, strategy, costs, building/recipe/research tables and recovery advice. /wiki/technical.html holds hosting and contributor instructions, architecture/persistence terminology, catalog provenance and legacy fields, implementation/test status, roadmap detail and the complete design-source library. Both pages have persistent Gameplay/Technical navigation and searches scoped to their own content. Source documents link back to the Technical library. Previous source-library, hosting and implementation-limit bookmarks redirect to the new technical sections.

Author player instructions in the gameplay guide and engineering material in the technical reference. Keep actual player prerequisites and availability limits with gameplay, but avoid code paths, schema terms and test evidence there. The generator retains the same authoritative catalog values and source documents; this split changes no game rule. Regenerate both audiences with npm run wiki:build and validate with npm run wiki:check.

Complete cargo support for governor routes — September 22, 2026

Implemented: governor delivery/collection and shared regional logistics ceilings now derive from the same immutable cargo catalog as manual outpost trips. This adds rough/dressed stone, flax, yarn, cloth, garments, compost and every actual manuscript to governor routes; shared ceilings also cover spear kits, bow kits and arrows already carried by governors. Existing food, grain, flour, construction materials and cart states retain their physical rules. Each route still delivers one good and collects one different good, with actual stock, whole units, carrying weights, provisions, workers, storage, safe routes and institutional authority required.

All route and shared daily ceilings, plus any capped shared lifetime ceiling, apply together, alongside any regional operating budget. Missing resource keys remain zero; existing saves gain no allowance, goods or learning. Shared ceilings reject the whole planned shipment when insufficient. Dispatch reserves actual collection at the outpost and books gross commitments once; cancellation, recall and returned goods never replenish authorization. A received manuscript remains a physical book requiring ordinary local study and adoption.

City resource selectors group named manuscripts separately. Collapsible manuscript sections keep route allowances and shared daily and capped lifetime ceilings available without expanding all book fields initially. Reviews retain exact prior spending and no approval-time stock movement. Zero ceilings are omitted from wire payloads without changing their zero meaning. The bounded network envelope is now 16 KiB, covering a full-catalog pair of ceiling maps or three fully specified Governor route budgets; authoritative integer, resource, owner and revision validation remains unchanged.

Verification: 732 tests across 89 gameplay files pass, including all 22 focused governor/shared-budget tests and six new scenarios: catalog parity and old-budget neutrality; command-built finite quarry → delegated physical collection → staffed masonry refinement; missing shared authorization and recall accounting; every supported collection good under explicit existing-stock boundaries; a complete authorized budget; and stepped/offline stone-route equivalence. The cargo boundary loop tests custody and spending, not manufacturing or school copying. Browser checks cover named choices, zero new allowances, cancelled drafts, exact unchanged approval-time stock, funded stone/books, a full-catalog message through the live socket, reload and four widths from 320 to 1440px. Narrow form/review screenshots were inspected. An actual server restart preserves exact warehouses, instructions and ceilings. See implementation status, interface details and the player guide. Broader M7/M8 coordination and the overall goal remain open.

Consented relief between player communities — September 22, 2026

Implemented: a charter holder can offer an unconditional one-time gift to another player's home or developed local village. City Trade uses the existing recipient and We send fields, with a separate Review relief without payment action. Relief supports one currently tradable good, 1–40 whole units, subject to actual route/capacity constraints. The receiving charter holder separately accepts; the donor then separately reviews and pays for dispatch. No goods or workers move at proposal or acceptance, and the recipient pays or reserves nothing. This lets an exhausted warehouse accept aid without inventing barter payment.

Dispatch pays the exact promised goods plus separate carrier provisions, protects the donor's household reserve and public spending limits, and assigns two real residents to the existing caravan slot. Goods remain physical cargo until arrival, and full destination storage holds the gift with the team. Contracted food cannot feed the carriers; their separate provisions and genuine delay shortages remain unchanged. An offered gift can be declined through cancellation. Either party can cancel before delivery; travelling gifts return physically, and consumed provisions are not refunded. Once delivered, the gift is final and the carriers must still return home before release. No debt, title, staffing authority or military access is created. Armed escorts still require the recipient's separate permit and applicable transit rights. Manuscript gifts still require ordinary local study and adoption.

Relief uses an explicitly tagged contract, kind: "relief", with empty receive, reservation and collected-payment records. Ordinary barter retains its required nonempty different goods on both sides. Existing saves and offers are unchanged; no record is converted into a gift and no resources or consent are granted during migration. Restore requires the relief tag for empty payment and rejects payment-bearing relief, malformed custody or an unmatched recurring-schedule link. Finite recurring gifts are now delivered above; institutional charity budgets, requester-controlled demand, compulsory taxation and remote donor management remain outside this delivery. It is a finite recovery option, not proof that one shipment sustains a damaged economy indefinitely.

Verification: 726 tests across 88 gameplay files pass. The focused six-file run passes 45 tests, including seven new relief scenarios. These cover real consent and donor funding, exact physical arrival, no recipient payment/title change, final delivery, outward cancellation/return, full-storage custody, explicit empty-warehouse and reserve boundaries, foreign/malformed/replayed orders, legacy barter neutrality, malformed saves, offline equivalence and funded delivery across donor death. The illness threshold and storage/empty-warehouse limits are explicit test boundaries. The integrated recovery scenario instead stops an actual field, advances real household consumption into shortage, delivers forty donated food, and restores local farming and finite gathering. A supplied meal clears the immediate shortfall while accumulated unmet-food history remains.

Two-account browser QA starts from that actually depleted food stock, verifies gift review/cancellation, recipient consent with zero deduction, donor cargo-plus-provision payment, private access denial, reload and 320/390/640/1440px layouts. Narrow form/review screenshots were inspected. Two actual server restarts preserve the paid outbound shipment and completed gift with exact warehouses. Arrival QA advances thirty actual route steps under an explicit authoritative test clock; the received forty food supplies a real household meal, the payment receipt stays empty and earlier hunger remains recorded. See implementation status, interface details and the player guide.

Reviewed priorities for competing producers — September 22, 2026

Implemented: the charter holder can give each completed producer First, High or Normal priority through City Production. At a community's existing village-day production check, First producers are considered before High, then Normal. Equal priorities preserve the original building order. The rule applies only within that community and does not reorder other settlements, paid construction, household meals, institution upkeep or transport events. An active Public accounting specialist maintains raised priorities; service loss uses normal order without deleting the saved choices, and service restoration restores them.

Priority determines access to shared real inputs and storage when a due producer is otherwise eligible. Pauses, stock targets, remaining selected-period input allowances, regional operating budgets, actual staffing, recipe services, finite deposits and storage still apply. A blocked higher-priority producer does not stop other producers from trying. A consumer checked before its supplier can miss that day's batch and wait for the next village day; priority neither promises unavailable inputs nor retries a missed batch later that same day. Lower-priority production can remain starved, so the player must balance these choices. Automatic resource allocation, dependency optimization and cross-settlement priority planning remain open.

The order costs no materials, workers or attention, does not reserve future inputs and retains the existing cycle deadline. It cannot complete or accelerate production. Fresh world and structure revisions, lawful owner authority, completed building work and caught-up community time are checked on acceptance. Existing production-office delegates receive no added authority. Mode/target/recipe changes retain their existing full-cycle restart rules. Priority changes appear in the factual return briefing.

Persistence is an additive optional structure record, productionPriority: {version:1,ownerId,level,updatedAt}. Missing records mean Normal and preserve older order, stock, staffing and deadlines. Restore rejects unsupported versions, invalid levels, foreign owners, invalid timestamps and nonproducer records. Current food-output capacity now traverses the same producer order, and authoritative economy forecasts use the actual priority-aware simulation. Neither inspection nor a forecast commits work.

Verification: the broad regression passes 718 tests across 87 files; a final seven-file focused run passes 58, including all eight new priority tests and an additional food-capacity case beyond that broad run (719 distinct passing scenarios). A command-driven village builds a kiln, researches/adopts accounting and consumes thirty-five starting logs through seven actual charcoal batches. With five logs left, normal order funds the earlier mill, while First priority funds the kiln: three timber versus four charcoal. Other cases cover paused/allowance-blocked higher priorities, accountant loss/restoration, stable ties, missing inputs, unchanged costs/deadlines, foreign/stale/replayed commands, neutral older saves, malformed records and six-day forecast/offline equivalence. A real grain/mill/bakery chain confirms that prioritizing the bakery before flour exists delays baking and reduces the potential food estimate; subsequent baking consumes actual flour and logs.

Browser QA covers reviewed cancellation, unchanged warehouse/labor/deadline, stale-review rejection after another accepted order, cross-account privacy, reload and 320/390/640/1440px layouts. Narrow controls and review screens were visually inspected. Two actual server restarts preserve the chosen priority and exact stock/deadlines before and after one authoritative village-day simulation under an explicit QA clock. That day consumes five logs into four charcoal while the mill waits and ordinary meals/scribe upkeep continue. See implementation status, interface details and the player guide.

Food and milling goods in player trade — September 22, 2026

Implemented: chartered communities belonging to different players can exchange prepared food, grain and flour through one-time and finite recurring agreements. Each weighs one; the existing one-different-good-per-side, 1–40-whole-unit limits, recipient consent, real carrier labor, route capacity and physical exchange still apply. NPC market offers are unchanged. Grain can feed households through the existing one-for-one fallback; flour needs a supplied bakery. Neither replaces prepared journey rations or counts toward the prepared-food reserve floor.

Prepared food exports are charged cargo plus separate travel provisions. Reserving food as payment removes it from usable recipient stock while retaining its warehouse occupancy; local meals cannot spend that payment. Both sides retain the existing protected prepared-food reserve checks. Recurring maximum commitments, actual per-trip spending and restored receipts count food cargo and provisions additively. No budget, resource or permission is granted by opening an editor or loading an older save.

A bilateral agreement promises exact quantities: carriers use only separately funded provisions and never consume contracted food cargo, including food received as payment. Fire or storage delays can therefore exhaust provisions while cargo remains intact. Actual unmet rations and urgent regional warnings remain visible; players must monitor or recall the team. Cancellation before exchange releases recipient payment locally and returns any travelling exports physically. This bounded custody rule does not change emergency consumption of non-contract NPC relief cargo. Contracted prepared food has no aging; grain, flour and fish now retain dated custody under the extensions above. Other perishable storage and transport remain unfinished.

City Trade lists all three goods, explains reserve/custody rules and shows the additive recurring maximum. For example, two rounds exporting twenty food with nine travel provisions each authorize fifty-eight food in total. Food-related acceptance, dispatch and cancellation reviews explain custody. This is an additive catalog extension with existing contract/save formats; old agreements keep their terms and old saves gain no food.

Verification: 711 tests across 86 gameplay files pass, including five new food-trade scenarios; the focused food/bilateral/recurring subset passes 23. Coverage includes actual food delivery against an otherwise unchanged simulation, reserved food and explicit protected-reserve boundaries, repeated-fire delay with intact cargo and real unmet rations, recall, recurring spending, malformed restored costs and offline equivalence. The integrated production path harvests another player's grain, ships it to a real mill, exchanges the processed flour and bakes twelve flour with four logs into forty-eight prepared food. It grants no recipe input or finished product.

Two-account browser QA verifies choices, review cancellation and draft retention, separate consent, exact payment reservation, food cargo plus travel-food charging, private access denial, reload and 320/390/640/1440px layouts. The recurring review displays fifty-eight food for the example above. Two actual server restarts preserve outbound and completed exchange states and exact warehouses; completion uses thirty authoritative route steps under an explicit QA clock, allowing normal daily production/consumption to continue. Narrow form/review screens were visually inspected. See implementation status, interface details and the player guide.

Manuscript trade between player communities — September 22, 2026

Implemented: all manuscripts derived from the current technology catalog can be exchanged through one-time and finite recurring player trade. A book weighs one and occupies one storage unit; agreements use whole copies and the existing one-good-per-side, 1–40-unit limits. Either party can supply the manuscript. Receipt of a physical book conveys no automatic knowledge, adoption, exclusive license, public office or access to the other community's private knowledge. NPC waystation offers do not create or purchase books.

The sender still funds a real two-person caravan and its separate provisions. Recipient payment, including a manuscript offered as payment, leaves usable stock when accepted and remains reserved at that warehouse until physical exchange. Cancellation and recall preserve the existing exact custody rules. On the return leg, a manuscript waits with its carriers if home storage has less than one whole free unit; it cannot be unloaded fractionally. Each recurring round requires another actual available copy and its own finite payment. An unavailable book blocks the next round without partial reservations or new spending; copying another volume at a staffed school can satisfy that shortage.

After delivery, the receiving community separately funds study at its own staffed school with active Literacy, two learners, two timber, four food and the actual book. Learned prerequisites still apply. Study consumes the book on its first completed day and teaches the topic after two completed days; local adoption, specialist labor, supplies and applicable institutions remain separate. School interruption preserves unused materials and progress, and cancellation refunds only unused supplies. The tested end-to-end path copies Seed selection, trades and delivers it, studies it, adopts it, and chooses a real wheat crop.

City Trade groups Manuscripts separately from materials/equipment in both agreement editors and shows technology names. The Research manuscript panel explains both owned-outpost shipment and player trade. This is an additive catalog capability using existing manuscript, contract and caravan records: old saves receive no books, knowledge, trade permissions or rewritten terms. Save validation rejects unknown topics and fractional book inventory/cargo; existing non-book agreements retain their original custody. Named teachers, licensing contracts and broader educational diplomacy remain open.

Verification: 706 tests across 85 gameplay files pass, including six new manuscript-trade scenarios, with catalog validation passing. Two-account browser checks cover grouped choices, draft/review cancellation, exact payment reservation, physical book cargo, absent early knowledge, private access denial, reload and 320/390/640/1440px layouts. Two actual server restarts retain the outbound and completed exchange states and exact warehouses. Arrival QA advances thirty actual caravan steps using an explicit test clock, rather than directly granting delivery. The recipient then separately reviews, cancels and funds study in the browser; reserved book/timber/food and zero initial progress survive reload. Narrow trade and study screens were visually inspected. The fractional-storage test uses an explicit boundary fixture. See implementation status and interface details.

Three-settlement recovery and succession acceptance — September 22, 2026

Verified integration, using existing live rules: the regional journey now exercises one founded woodland village and two physically established outposts together. All residents, charter rights, institutions, harvested wood, processed timber and transported supplies are obtained through player commands. A normal 24-real-hour absence (six village days) retains forty residents, healthy supplied households, finite governor spending and physical cargo. Stepped and offline simulation agree on gameplay state; commit revisions may differ with the number of advance calls. This extends the earlier prepared 24-world-day food-mandate check with governor, crisis and succession integration, rather than replacing its longer absence evidence.

Removing the staffed registry halts new governor dispatches without cancelling a paid shipment. The dependent camp eventually misses an actual meal; Regional overview links its food exception to local People controls and its blocked governor route to home Expansion controls. A manual relief shipment remains carried until arrival. The next supplied household meal clears the immediate shortage while cumulative unmet-food history stays intact. Physically collecting timber from the other outpost and restoring registry staff restores delegated supply without resetting the original allowance or gross spending.

Loss of the main home food producer draws down both warehouses and raises the protected-reserve warning before home starvation. Restaffing that producer and assigning real local gatherers at the dependent camp restores food supply. These responses spend or produce actual resources; acknowledging an exception never repairs it. The regional office still needs writing supplies and governor upkeep, so finite starting reserves are not proof of indefinite unattended operation.

The combined succession scenario retains paid outpost construction, learning and an actual governor shipment across the leader's death. Losing a resident can block funded research; materials, investment and progress remain recorded. Learning resumes when returned carriers make enough workers available, and construction completes at its real scheduled stages. Public orders remain denied until the embodied council appointee accepts lawful handover. The successor can staff the completed outpost field; its actual harvest and subsequent supplied meal establish recovery. The illness threshold and later health restoration are explicit test boundaries, not a simulated disease history or a gameplay reward.

Evidence: regional journey tests ../test/regional-journey.test.js and command-driven preparation ../test/helpers/regional-journey.js, with current regression results in implementation status. No gameplay behavior, save format or UI is changed by this verification. This proves a bounded three-settlement recovery path for M7; it does not deliver broader tenure, membership, named appointments, estates, lifecycles or the remaining M8 systems.

Player wiki — September 22, 2026

Implemented: A read-only, searchable game wiki at /wiki.html opens from the main navigation in a separate tab. Its player guide covers founding, controls, rules/time, attention, needs, construction, supply chains, land and water, research, trade, expansion, military, continuity, forecasts and recovery. Generated catalogs expose the current building, recipe, technology, crop, land-project, resource and trade definitions. A linked source library preserves the full design and implementation documents, explicitly labeled as containing historical and planned material.

The wiki changes no simulation rules and loads no multiplayer client. Its editable guide is docs/wiki/guide.md; npm run wiki:build regenerates the static pages from that guide, authoritative catalogs and source documents, and npm run wiki:check detects stale output. Update the guide when gameplay changes, then rebuild. This document remains the primary design entry point; live order reviews determine actual rights, costs, staffing and conditions. The wiki distinguishes delivered bounded features from the unfinished foundations plan.

Consented player-trade escorts — September 22, 2026

Implemented: moving militia escorts can accompany the sender's physical player-to-player trade caravan, including an individually authorized recurring round. Barter consent does not grant military access. Once goods are accepted, the receiving charter holder may separately grant a maximum of two, four or six soldiers for that single caravan, before its first departure. This permission costs no resources or attention, lasts seven village days, survives succession and does not authorize hostile attack, occupation, warehouse control or later trade rounds. It cannot be silently amended or reused for another detachment.

The sender separately funds Escort caravan from Defense, using the existing trained, fit, supplied militia and active scout before the first walking step. The existing two-attention cost applies. Soldiers retain their existing population/labor custody and consume separate carried food. Finite four-day carrying capacity bounds initial round-trip routes to eighteen steps plus one delay day; road timing may shorten travel, but full ordinary walking provisions remain funded. Paid infantry/spearman rules continue to apply. A safe route provides no invented yield bonus; the review states when it avoids the known camp.

Other player charters require a separately ratified passage treaty explicitly permitting trade escorts or both trade escorts and relief campaigns, with sufficient troop capacity. Existing treaties migrate to relief only; an old military agreement never gains a new permitted activity. New and counteroffered clauses expose the purpose alongside term and troop limit. Scope, expiry, notice and newly established charters are checked during movement and before protection. Departure title receipts preserve what was known at funding, including a new charter created afterward at the same clock time; later title does not rewrite historical permission. Foreign passage grants are validated on restore.

Unused recipient permission ends immediately on withdrawal. Once troops are assigned, recipient exit notice ends it after at most three village days, bounded by the original expiry. Losing destination or third-party permission ends protection and sends soldiers home independently along their actual return path. A detour that requires ungranted passage similarly detaches them before they follow it. Ordinary civilian trade keeps its own consent; ending military permission neither cancels the exchange nor confiscates goods. Recalling troops leaves cargo independent. Cancelling outward trade returns its carriers and attached soldiers together. Both groups keep consuming real provisions; congestion, fire, readiness and return reserves can end escort duty earlier.

No extra troops, kits, food or attack target are created. The existing local camp model still determines actual encounters; this does not add arbitrary regional enemies. Outpost supply expeditions and foreign-owned forces are not yet eligible for this moving-escort command. Full garrison deployment, territorial conflict, siege/occupation, broader combat mortality and the other M0–M8 gates remain open. Current controls are in the interface contract, with evidence in implementation status.

Shared village waterworks — September 22, 2026

Implemented: jointly approved buried conduits between connected original woodland founding parcels. These redistribute existing surveyed well capacity; they never increase source yield or create stored water. The source can offer eight or sixteen daily units to a different charter holder. Offers expire after three village days; the receiver must accept before construction can be funded within seven days. Either party can withdraw an unfunded agreement or give three days of exit notice after acceptance. Ratified community consent survives lawful succession; new public orders require the current lawful character.

Hydraulic engineering is a functional building-branch technique after Irrigation, Stone dressing and masonry, and Land registry. It requires a staffed registry and eight practice days. Research consumes sixteen timber, eight bricks, two tools and eight food over four village days. Adoption consumes eight timber and two tools, assigns two residents, and requires two food plus 0.1 tools each village day. Loss of that service stops pumping and pauses funded construction/repair. Decommissioning remains available without it.

The version-one scenario releases only buried utility easements, not general land title. Deterministic routes use natural field/forest cells with no generated feature, at most twenty-four steps; base regions and every other released parcel's two-ring fringe are excluded. Some villages therefore have no eligible partner. Endpoint consent authorizes this bounded released corridor, never arbitrary occupation or a third party's charter. Pipes coexist with the consenting villages' ordinary surface use. Other village types and broader negotiated easements remain planned.

For a route of n steps, construction commits 40 + 2n timber, 16 + n bricks, four tools, and four food per rounded-up active work day. Four real residents perform one half-day stage per route cell and a final commissioning stage. Provisions are additional to household meals. Both well connections are reserved during work; local queues, worker availability, protected food stocks and budgets apply. The UI exposes the current work cell. This is staged aggregate labor with upfront materials, not yet individually simulated pipe convoys or traveling worker households. Buried conduits use a map location link; finished pipe art is not implemented.

Delivery starts only after commissioning. It is limited to the source's own local surplus after residents, enabled local irrigation and funded local channels; imported water cannot be exported again. Imports and exports balance exactly, while funded exports reserve capacity against new local commitments. Recipient household capacity and real irrigation use the remaining delivered water. Growing source needs can reduce delivery, and a failed well, corridor fire, active conduit work or unavailable engineer stops it. New resident growth remains subject to ordinary food, shelter and migration rules.

Condition falls by two points per source village day; below fifty, flow stops. Paid repair consumes twelve timber, eight bricks and two tools and takes four workers for one day. Cancellation refunds only unused recorded materials, subject to storage; cancelled initial construction leaves sealed unfinished works. After notice expires, paid decommissioning costs four timber and one tool with four workers for one day, releasing the commitment without salvage. Maximum two funded, non-decommissioned conduits per source; a pair cannot stack reciprocal or duplicate agreements. Construction costs one account attention; repair, removal and consent controls cost none.

Versioned waterworks state plus a land capability marker migrate older saves to an empty ledger with no grants. Restoration checks parties, signatures, exact route/quantity, lifecycle, job linkage, labor, timing and paid materials. See interface contract and verification status. This supersedes earlier statements that all shared water rights are absent. River diversion, dams, reservoirs, downstream watershed simulation, public water tariffs and broader diplomacy remain planned. The M0–M8 goal remains active.

Construction scenario forecasts — September 22, 2026

Implemented: A charter owner's live construction review now compares funding that exact building, plot and orientation against unchanged current orders over one or six village days. The proposed branch executes the actual START_CONSTRUCTION command in a copied world, including current character authority, world revision, footprint ownership, terrain, technology, inventory, food reserves, public budget, attention, crew support and queue rules. The target must belong to the requested forecast community, even when the player owns several communities. A second copy supplies the unchanged baseline from the same source time and state.

The comparison shows immediate material withdrawals and free workers, projected construction stages/completion, housing, residents, storage capacity, final stock differences and constraints. Unavailable crews leave the funded proposal queued; no estimated completion is claimed within a horizon where work cannot finish. Completed producers receive no automatic workers. Existing migration, meals, other producers, deliveries, research, budgets and paid queues continue under their real rules, so added housing/storage can affect those already-authorized systems. No population or resource grant is implied.

Forecasting creates no live building, plot reservation, payment, crew assignment, attention expenditure, warehouse receipt or command receipt. Both branches share the existing computation/event limits; failure returns no partial comparison. The private request remains behind durable changes and uses the existing request rate limit. Results are session-only estimates tied to building/plot/orientation, character and source world revision. An intervening world change marks the comparison and order review outdated. Cancellation spends nothing, and Confirm order remains the separate construction action. Reload clears estimates; accepted construction persists normally.

This extends the production-plan comparison described below and supersedes earlier statements that hypothetical construction is entirely absent. Crop planting, transport-policy editing, combined multi-building plans and multi-settlement scenarios remain open. No save migration or new public authority is introduced. See implementation status and interface contract. The full M0–M8 goal remains active.

Finite stone supply and masonry housing — September 22, 2026

Implemented: Two new expansion-only stone parcels append to the existing released scenario. Each has one finite 288-unit shallow building-stone deposit, a seven-hex charter opportunity and the existing twelve-unit camp well. These are authored deposits on actual natural upland ground; the generator's terrain/features do not change. Earlier woodland, iron, clay, marsh, coastal and farming offers, including their two-ring charter-edge opportunities, remain excluded from the new release. Stone requires an actual survey, conditional charter, transferred founders, paid quarry and physical deliveries. Surveying grants knowledge, not stock or land ownership.

A three-worker Building-stone quarry consumes 0.25 tools per standard cycle and produces at most six rough stone, reducing the recorded deposit. Tool shortages, workforce, storage and existing production controls constrain output. Exhausted deposits stay exhausted across rebuilding, evacuation, reoccupation and saves. Rough and dressed stone each have cargo weight two and use the existing physical outpost and peer-trade infrastructure. No frontier-market offer supplies free or unlimited stone.

Stone dressing and masonry follows known Timber framing and Record keeping, with eight practice days and a staffed lumbermill institution. Research costs twelve timber, eight food and two tools over four days. Local adoption costs eight timber and one tool, assigns one specialist and consumes one food daily. A two-worker Mason workshop then converts eight rough stone and half a tool into six dressed stone per standard cycle. Losing the active service stops processing and new masonry construction; existing houses retain housing.

A Stone-built house consumes forty timber, thirty-six dressed stone, twenty food, two tools and 180 work, creating eight housing places without adding residents. It takes half the ordinary fire damage; non-fire damage remains unchanged. The workshop costs fifty-five timber, twelve food, two tools and ninety work; the quarry has the same construction costs. Existing house, keep and castle costs remain unchanged. These additions use semantic map fallbacks, not finished new building art.

This delivers the rough-stone → dressing → housing path in the foundations plan. Earlier statements that all stone production remains absent are superseded. Lime, sand, mortar, bridges, larger masonry fortifications and broader quarry geology remain planned; the current house recipe deliberately abstracts masonry binding materials. Existing saves gain no stone inventory, deposit rights, research or buildings. See implementation status for paid-journey, regression and browser/restart evidence, and interface contract. M0–M8 remains active.

Production-plan scenario forecasts — September 22, 2026

Implemented: City Production → Plan workers and recipes together can compare a proposed two-to-eight-producer staffing/recipe plan with unchanged current orders over one or six village days. Both branches begin from the same authoritative stock, time and world revision. They simulate household needs, other producers, physical deliveries, research, existing targets/pauses/budgets, storage and scheduled work. Changed producers retain the real full-cycle startup wait. Releasing workers can start already paid queues under their existing authorization; the forecast includes those effects.

The proposed branch executes the actual coordinated-plan command only inside a copied world, including authority, embodied character, world/producer revisions, local ownership, labor, recipe and institution validation. It cannot invent inventory, change crops without the separate paid order, override mandates or bypass interregnum. A second untouched copy supplies the baseline. The response includes each branch's final inventory and daily checkpoints, per-resource differences, changed producers and predicted blockers. Both branches share bounded computation time and event work; incomplete comparisons fail rather than publishing partial results. Source inventory, workers, receipts, warehouse history and pending events remain unchanged.

The owner-only request remains serialized behind pending durable changes and rate limited. Delegated production access does not disclose wider private commitments. Comparisons are estimates kept in the current browser session, not durable orders or reservations. Draft/world/character changes mark them outdated; restoring the same draft restores a matching label only while the source world is unchanged. Reload discards forecasts and drafts. Applying coordinated production remains a separate current review, so elapsed time or intervening orders can change the outcome. No save migration or new authority is introduced.

This supersedes earlier statements that all editable forecast scenarios are absent: staffing/recipe drafts and the later single-building construction comparison are delivered, while crop planting, transport policies, multi-settlement plans and external disruptions remain outside the scenario editor. The existing current-orders forecast remains available separately. See implementation status for verification and interface contract for controls. The full M0–M8 goal remains active.

Reconciled warehouse movements — September 22, 2026

Implemented: City Supply chains now explains each resource's opening stock, cumulative incoming goods, cumulative outgoing goods and current stock, with the invariant opening + incoming - outgoing = current. Gross movements retain meals and production separately even when their net change is small. The ledger covers local chartered warehouses: construction/research payment and refunds, actual workshop output and inputs, stored gathering, household meals, institutional upkeep, care, automatic work and physical dispatch/arrival. Goods eaten directly from gathering never enter stock. Coins, reserved project goods and travelling cargo retain their separate custody ledgers; a withdrawal is not necessarily final consumption.

The latest 240 individual resource movements retain effective time, sequence, cause, originating command/job/structure and before/after stock. A rolling opening checkpoint and lifetime gross totals preserve reconciliation after older detail expires. This owner-visible stock explanation is available without a scribe; existing specialist-produced workshop receipts retain their separate institution requirement and scope. Earlier claims that complete local warehouse flow accounting is absent are superseded by this delivery. Historical activity before tracking is deliberately unknown.

An explicit version-one capability introduces neutral old-save migration: current stock becomes opening stock, with no fabricated earlier movements or goods. New founding records the actual starter grant; newly established outposts record actual arriving goods without another grant. Runtime inventory accessors observe catalog resource writes, preserve ordinary JSON/structured-clone behavior, rebind after transaction rollback and ignore detached old inventories. Snapshots store plain data. Restoration verifies retained movement chains, cumulative quantities, checkpoints and the actual warehouse. Failed/duplicate commands add no committed receipts; forecast copies never change the live book.

This advances M3 supply-chain accounting. Editable forecast scenarios, wider goods and markets, perishables, larger transport networks and the remaining M0–M8 requirements remain open. See implementation status for tested workflows and interface contract for presentation.

Household adoption of existing adults — September 22, 2026

Implemented: A living lawful founding-household leader can name an existing local civilian as adopted adult kin through City Family & continuity. The bounded cohort models a 24-year-old worker and allows at most eight living notable household adults. Dead members remain in history without occupying a living place. Naming someone changes neither population, civilian capacity, assignments, food demand, material stock, personal money nor attention. It grants no founding package, public office or retrospective inheritance. Travelling crews, military personnel and already named residents are excluded from the eligible pool shared with local career continuation. Adoption requires the current character, authority and reviewed world revision; interregnum requires lawful handover first.

The relative follows existing illness, death and embodiment rules, and can separately be selected in a personal will or council appointment. This is a household relationship within one player account; human-account invitations and a fallback when no eligible civilian exists remain open. Version-two household records preserve the original four adults and add immutable adoption receipts. Version-one households migrate with no additional people or assets. Membership dates and succession generations prevent later adoption, including at the same timestamp after a handover, from rewriting an earlier estate or death chapter.

Seven new simulation scenarios and the broader regression suite verify conservation, eight-living-person capacity and replacement after death, separate inheritance/office succession, same-time historical estates, authorization/idempotency/privacy, actual travelling-worker exclusion and return, neutral migration, malformed saves and offline replay. Live browser verification includes reviewed adoption, reload, separate will and council appointment, actual scheduled illness death, inheritance of two earned coins and reviewed embodiment/lawful handover. See implementation status and interface contract for evidence and limitations. This advances M7; the full M0–M8 goal remains active.

Personal stipends, wills and coin inheritance — September 22, 2026

Implemented: A lawful founding-household officeholder may explicitly reserve seven earned communal coins for a seven-day stipend, supported by an active public accountant and record keeper. One coin becomes personal property only after each complete village day. The stipend authorizes compensation without adding residents, workers or production. It cannot stack or renew automatically. Explicit cancellation returns unearned coins; death does so immediately, and unavailable office/accounting support cancels the remaining term at its next payment check. Earned coins stay personal. The existing finite market monetary invariant now includes stipend escrow, each adult's personal balance and sealed estates; no money is minted.

The embodied living household adult can record one adult-kin beneficiary, clear that choice to the default rule, or voluntarily donate existing personal coins to the founding community. These personal decisions remain available during interregnum without public authority. At death, the current will transfers only earned coins. If the named adult has died, the oldest surviving adult kin inherits, with character ID resolving equal ages. If nobody qualifies, the coins remain in a sealed estate. Council appointment, communal titles, material stock, research and paid armies follow their existing separate rules. Public-office heirs do not automatically receive personal property, and personal heirs do not automatically receive office. The death chapter records the exact coins, beneficiary, applicable rule and will.

A version-one personal-estate ledger is introduced through an explicit coin-market capability marker. Old worlds gain empty accounts/contracts and no personal property or retrospective estate. Restores validate seven-day payment arithmetic, finite source funds, personal donation histories and chronological inheritance against both the household death chapters and stipend records. Donation receipts include the succession generation to preserve order when an heir donates immediately after inheritance at the same timestamp. Needs/death processing takes precedence over a stipend due on the same village-day boundary. Forecast copies include the stipend scheduler without changing live assets.

City Family & continuity exposes separate communal, personal and sealed balances, reviewed wills/donations/funding/cancellation, payment deadlines and death-chapter inheritance. The integration scenario preserves paid building and research inputs/progress while a patrol returns physically; loss of the actual resident can pause research under existing worker rules. This advances M7 family continuity and the plan's death-with-funded-work scenario. Land/goods estates, inheritance disputes, personal shopping, sealed-estate claims, children and wider lifecycles beyond the delivered household aging, and wider realm systems remain open. Consented resident invitations are delivered separately above. See implementation status for verified simulation, browser and restart evidence.

Hosted campaign ammunition — September 22, 2026

Implemented: A relief host may explicitly offer 12, 24, 36, 48 or 72 actual arrows alongside a food depot. The invited force must be fitted archers; acceptance allows at most two full quivers per soldier and reserves exactly the selected host stock. The host needs an operational local storehouse, active Field logistics and sufficient supplies. Proposal, quote and cancelled review reserve nothing. Arrows held for the campaign still occupy host storage and cannot fund another order.

On each physical depot visit, the force loads only its empty quiver spaces, up to six arrows per soldier. A full quiver records a zero-arrow visit and leaves all stock at the depot. Actual contact still consumes the normal finite volley. Fire, a damaged depot or loss of the host quartermaster prevents collection. Withdrawal ends combat permission but preserves funded return supplies; it neither teleports arrows nor erases their custody. Remaining host stock is released only when the force reaches home, subject to whole-item storage and explicit later reclamation. Arrow delivery grants no repair, recovery, wages, recruits or land; separately authorized food/rest retains its own rules.

New version-four relief agreements contain a separate funded/held/delivered/returned ammunition ledger linked to the original archer fitting. Each leg's receipt matches the actual depot visit and the receiving quiver's unique depot-load entry. These receipts remain valid after the unit ends its role. Earlier food-only and rest agreements retain versions one through three and receive no arrow permission or stock. City exposes the agreed quantity, actual reservations, visits and reclaimed surplus to both signatories without exposing the other warehouse. This supersedes earlier statements that campaign ammunition depots are wholly absent; mobile camps, chains of depots, mixed formations, cavalry, engineers, larger-force combat and the wider M0–M8 requirements remain open. Verification and its browser limitation are recorded in implementation status.

Physical field ammunition resupply — September 22, 2026

Implemented: The existing quartermaster/storehouse rendezvous can include actual warehouse arrows for an archer patrol away from home. Two residents carry paid arrows and their own food along the accepted walking route while the unit holds its actual position. Delivery fills only available quiver space; excess arrows return with the carriers. Neither dispatch nor a preview adds arrows to the unit. Recall, fire, ration limits, wage expiry and withdrawal preserve undelivered cargo and physical movement. Whole arrows remain with returning carriers until warehouse space exists.

Version-three military supply jobs retain an explicit paid/carried/delivered/returned arrow ledger linked to the fitted archer cohort. The receiving quiver records the matching physical delivery once. Food-only and kit-only historical journeys retain their accepted versions and contents. City review, supply-chain movements and regional journeys expose arrow custody separately from food. Relief campaigns, moving escorts and tower watches retain their current separate supply rules; field ammunition does not grant those orders a new rendezvous protocol. Actual manufacture, paid dispatch, timed delivery, surplus return, interruption, private City controls and real process restart are verified in implementation status. The broad gameplay run passes 621 tests across 74 files. This extends M3/M5 physical supply; hosted campaign ammunition is delivered above, while mixed formations, cavalry, engineers and wider realm gates remain open.

Manufactured archery and finite ammunition — September 22, 2026

Implemented: Archery and bowmaking joins Standing service to Textile crafts. Bowstrings use actual spun yarn; lumbermills choose between timber and bow production, while smithies choose arrow forging. Existing trained militia fit manufactured bows and six arrows per member, fund ordinary wages and complete two additional training days. Coordinated ranged fire provides 50% extra field strength only at an actual patrol/consented relief encounter, consuming two arrows per unwounded member. Tree cover of seventy or more, fire, fatigue above sixty, incomplete training, expired pay or inadequate arrows prevents the volley. The later defensive-volley rule above lets an eligible guard or moving escort fire finite arrows at an actual protected crossing; without a complete volley, ordinary strength remains.

Carried arrows have an explicit versioned custody history. Reviewed home reloads transfer whole arrows from the warehouse within six-per-member capacity. The physical field-ammunition service above adds an actual carrier rendezvous and hosted campaign depots add consented physical collections; there is no automatic or instantaneous remote replenishment. Ending the role or demobilizing returns unused arrows and surviving whole bows with atomic storage checks. Spearmen and legacy infantry keep their previous rules. City previews explain the current known camp conditions without resolving combat or consuming stock. Actual manufacturing, ordinary movement, finite volleys, home reloads, private City controls and saved-state recovery are verified in implementation status. Clear-sightline combat tests use an explicit terrain boundary; the default dense woodland camp correctly suppresses ranged fire. New and historical lumbermills retain timber production as their explicit default recipe. A live restart exposed separate clock reads in professional acceptance; new contracts use one timestamp, while a versioned migration preserves the exact dates and funds of earlier contracts with at most one second of forward quote-to-acceptance drift. Mixed formations, cavalry, engineers and wider warfare remain open.

Spear-and-shield equipment and professional spearmen — September 22, 2026

Implemented: Spear and shield drill extends Standing service and Joinery through a staffed barracks, funded research and a resident instructor. The smithy's selectable spear-and-shield recipe consumes six timber, three iron and three charcoal for three whole kits at three-worker staffing. It competes with smelting and toolmaking, stops when the instructor is unavailable, and scales to one whole kit per assigned smith. Kits can travel as whole two-weight cargo through existing consented material agreements and owned-outpost routes; production and movement grant no soldiers.

Existing trained militia can enter a separately fitted and trained spearman role under the ordinary seven/fourteen-day paid service contract. One manufactured kit per soldier is fitted immediately, followed by two actual training days. Funded qualified spearmen gain 50% effective strength for corridor defense and moving convoy protection, but no professional attack bonus for patrols or relief assaults; ordinary professional infantry retains its 25% general bonus. Readiness, food, wounds, wear, finite wages, route custody and physical expiry/recall still apply. Role changes require ending service at home. Whole spear kits return in proportion to remaining equipment condition at stand-down or demobilization, with atomic storage checks; incomplete training does not multiply equipment or refund earned wages. Historical infantry saves retain their role and no spear kit is granted. City reviews, actual timed training, physical caravan protection, legacy save compatibility and real server restart are verified in implementation status. This advances M3 manufactured equipment, M4 army knowledge and M5 differentiated forces. Cavalry, engineers, formations, larger-force warfare and fort combat remain open; the full M0–M8 goal remains active.

Current-order economy forecasts — September 22, 2026

Implemented: Supply chains gains an explicitly requested one- or six-village-day forecast (four or twenty-four real hours in founded villages). It restores an isolated copy of the current world and runs existing scheduled simulation rules, including competing recipes, household needs, specialist upkeep, warehouse limits, already funded work, actual deliveries and bounded standing orders. The chosen village's before/after stock, daily checkpoints, completed production batches and observed constraints are projected back to its authorized owner. No live resources, labor, attention, receipts, research or history are changed. Simulated production observations remain separate from actual scribe-recorded history.

Results identify their source world revision and exact time interval. New player orders, future trade acceptances and new external disruptions are excluded; existing fires and scheduled interruptions remain active. The UI marks an estimate outdated after world changes and discards estimates on reload. Foreign/private state is not returned, and a limited production appointment does not authorize inspection of wider household and military commitments. Requests wait behind durable commits and have a short repeat-request limit. Unsupported horizons or a work-limit overrun reject the entire request rather than presenting an incomplete result as a forecast. Existing saves gain no ledger or order. Actual scheduled production matched the browser estimate, and a real process restart retained exact stocks, staffing and deadlines. This advances M3 competing-consumer forecasts; scenario editing, complete warehouse transaction history, perishables and broader economic institutions remain open. Detailed verification is recorded in the implementation status.

Paid village charter extensions — September 22, 2026

Implemented: Each released founding/frontier parcel has a bounded set of eligible fringe plots at distance two and, with the outer release above, distance three from its original center. The release excludes all earlier founding and outpost parcels, base development areas, generated homes/landmarks/resources, water and non-field/non-forest land. A neighboring player's absence is not evidence of available tenure. Multiple villages can survey the same released edge, but only the first valid registration can acquire it.

The existing two-resident physical survey journey spends tools, timber and carried food, performs one village day on site, and returns its report. It grants no title. Registration requires a report at most fourteen village days old, the local Land registry specialist, a staffed operational registry office, protected household reserves and ordinary budget authorization. Each original inner-ring hex costs eight timber, one tool and four food. Outer-ring hexes cost twelve timber, two tools and six food and also require active Public accounting. The recorded title immediately adds that plot to the existing charter; it grants no population, warehouse goods, housing, well yield or mineral deposits. Ordinary paid building and land orders then use this community's existing stock and workforce.

The original seven-cell founding receipt remains unchanged. A versioned extension ledger records each paid parcel and its returned evidence; the current canonical region, chunk membership and private City projection include the added cells. Unextended saves remain seven-cell charters. Losing staff or undergoing succession preserves acquired title. A developed outpost can extend its own local village using its own researched registrar, staffed registry, delivered materials and available surveyors; a raw camp cannot register extensions. The enlarged boundary supports multi-cell footprint checks without waiving building prerequisites or construction costs. This advances M6 land tenure and space for larger construction; land purchases and broader resource leases, unrelated distant plots, larger-fort combat and wider sovereignty remain open. Browser registration, paid edge construction, Region selection and actual process restart pass. Detailed verification is recorded in the implementation status.

Farming village starts — September 22, 2026

Implemented: A third founding choice opens six bounded farming parcels, displaying up to three available choices alongside the existing woodland and coastal offers. Every parcel uses seven actual moist field cells, no generated feature, relative elevation spread at most 0.04 and a verified walking route of at most sixty edges to the existing waystation. Its release excludes all earlier founding and woodland/mineral/clay/marsh frontier parcels without changing their IDs or ordering. These are farming plains with surveyed wells, not a river-flow or flood simulation.

The version-three one-time grant settles forty residents including twenty-four workers, with the existing eighteen-day food and material package, commons housing for forty and storage for 1,400. Two separate community food plots each employ five residents and produce 27.5 basic food per village day, for 55 total against forty household demand. Four charter cells remain for development. There is no granted lumbermill, mature woodlot, mineral deposit, advanced crop knowledge or water engineering. Initial woodland forage is zero. The forage display is capped by actual habitat capacity, including when earlier saves retain a larger historical reserve. Food surplus competes with storage; construction materials are the early constraint. Players can use paid planting, actual growth/harvest and a built mill for replacement timber, or consented physical trade. Starter timber still supports finite tool imports from the real waystation.

The ordinary reservation, competition, rights, crew, production, needs and one-account grant rules apply. Fields can be staffed independently, including moving eight workers onto the surviving plot after damage to the other. Founding reviews disclose the exact package and terrain. Restore validation binds the versioned receipt to its released parcel and original materials/buildings; older worlds receive no grant or changed investments. This implements the farming-start scenario from M0–M2. River/flood mechanics, invited starts and broader recovery remain open. Verification is recorded in implementation status.

Hosted campaign rest — September 22, 2026

Implemented: A host may explicitly offer one village day of rest at its supply depot on each campaign leg. The donor reviews and accepts this term with the route. New rest agreements use supply version three; version-one unaided campaigns and version-two supply-only depots acquire no rest rights. A rest agreement reserves ten food per soldier from actual host stock, within an explicit 16/32/48/60-food allowance and household/budget limits. Supply-only agreements retain eight food per soldier. Held provisions occupy storage and unused food returns only after the force returns home.

Troops arrive physically, refill to their four-day carrying limit and remain at the depot for a full donor village day. Normal ration consumption and wages continue. Only completion restores up to 20 fatigue and five morale, then replaces the food consumed during rest from the held depot stock. Troops take their next walking step afterward. Wounds, equipment and manpower are unchanged. The reviewed campaign estimate and paid-service check include both rest days; march eligibility considers fatigue before reaching the depot and after the outward rest. A depot cannot rescue troops that would exhaust themselves before arriving.

Either party may revoke rest while troops are outward or homeward; a completed battle remains resolved. The force returns physically and retains the already funded return-food entitlement. Fire, loss of the host quartermaster/storehouse, loss of a consenting signatory or paid professional service, or an outward campaign withdrawal interrupts recovery. Partial rest grants no benefit or refund for eaten food. Durable per-leg receipts record start/end, interruption, recovery and replenishment; restore validation and chronological offline replay preserve custody and timing. Defense exposes consent, food, fatigue and each stop's status. This delivers hosted field rest within M5/M8; mobile camps, chained depots and the other military and regional requirements remain open. See implementation status.

Local roads and cargo travel — September 22, 2026

Implemented: Paid local roads extend M3 transport and M4 engineering. Road engineering follows Contour surveying and Construction planning. Eight village days of practice, four research days, twelve timber, eight food and two tools establish knowledge. Local adoption costs six timber and one tool, assigns one resident engineer and consumes one food per village day. It supports two-day four-person work costing sixteen timber, twelve bricks and two tools per surveyed plot. It shares suitable cleared field/woodland land with compatible buildings and farming. Connected sound plots reduce a new cargo team's edge time by one third; fire, storage delays, cargo capacity and access rights remain separate. No shorter path or territory is invented. Existing accepted journeys without a road-travel version retain their walking contract. New steps recheck roads; accepted due times remain stable.

Roads lose two condition per village day. Below 50% ordinary travel resumes. Repair costs eight timber, four bricks and one tool with four workers for one day; paid removal costs four timber and one tool. Automatic maintenance uses existing explicit allowances. The initial implementation applies to caravans, consenting player trades, recurring routes and outpost supply teams; household moves, surveys and independent troops retain walking time. Full unimproved-route rations remain funded. The regional service-road expeditions described above now permit narrowly released owned-outpost corridors through eligible intervening ground. Arbitrary roads across unowned territory, bridge/river works and wider route planning remain outstanding requirements. City reviews, recurring-maintenance controls, conditional cargo estimates, regional issues and connected map markers are implemented. Road work uses a separate crew and does not pause compatible building production, existing irrigation delivery or the field harvest clock. Clearing the roadbed grants no extra harvest, and paid removal returns no salvage. New woodland planting/management requires road removal first. A fire detour completes any additional time required by its actual replacement edge before moving, preventing an off-road step from inheriting road speed. Versioned travel and road geometry, condition, timestamps, survey/charter and project references validate on restore. The broad suite and browser/restart checks pass; the complete M0–M8 objective remains active. See implementation status.

Wetland drainage and retained basins — September 22, 2026

Implemented: A new Building-branch technique, Wetland drainage and retention, requires known Contour surveying and Irrigation, eight village days of practice, four research days, twelve timber, eight food and two tools. Adoption costs six timber and one tool; an engineer occupies one resident worker and consumes one food per village day. The operational commons supports the program. Knowledge and local adoption remain separate; loss of the engineer queues new or ongoing paid work without erasing completed terrain improvements.

Four additional marsh survey parcels use actual generated geography and exclude existing development regions, woodland founding offers, coastal starts and earlier mineral outpost offers. Each retains at least four natural field cells for its camp, housing, food and workshop path, plus an adjacent wetland pair with a verified downhill fall. Existing offer IDs, geometry and ordering remain stable; Frontier appends up to two nearby marsh opportunities. Surveyors, returned reports, charter review, eight actual founders, physical supplies and existing outpost rules still apply. No wetland is painted onto a save. The bounded camp well delivers twelve daily units; developing a local village does not grant spare yield. The returned report names the drainage opportunity and its source/basin hexes without granting local land surveys or works.

Drainage requires two surveyed, adjacent wetlands under the same charter: an empty source of generated moisture above 0.57 and at most 0.85, and a lower empty outlet with relative elevation fall 0.001–0.025. These are normalized generator values, not metres or degrees. The first available outlet in elevation/ID order is named in the authoritative quote and review. Both plots must retain compatible uses, have no mineral deposit or conflicting work, and remain inside the same controlled region. Approval reserves the outlet immediately and pays 32 timber, 24 bricks and three tools. Four residents complete four stages over four village days. Queueing, pausing, specialist loss and cancellation use the existing finite crew/material rules. No land benefit or extra water arrives early; cancelling unfinished construction releases the basin and refunds only unworked inputs that fit storage.

Completion records a version-one improvement separately from immutable natural terrain. Sound drainage changes its source's effective use to fields and lowers moisture by 0.10. It grants no fertility multiplier, crop, resident, mineral, household water or inventory. Normal placement, footprint, staffing, stock and crop rules still apply. Its outlet remains natural wetland, reserved exclusively as one plot's retention basin. New buildings, drainage, other land improvements and forestry cannot take that basin, even when drainage is worn or the settlement is unattended. The later wetland/routing rules above now couple these local works to recorded retention and discharge. They do not establish major river diversion or complete downstream rights. Soil preparation, terraces and irrigation cannot stack with this initial drainage project.

Works lose two condition per village day. Below 50%, their effective use returns to wetland, production on supported foundations stops, and new construction/rebuilding is blocked. Below 25%, each critically drained supporting plot inflicts five building-condition damage per village day. Only a running drainage repair/removal crew provides temporary shoring; paused and queued orders do not. Repair costs eight timber, four bricks and one tool, with four residents for one day. It restores drainage, not the building's condition. The existing explicit recurring maintenance instruction supports this repair under its accountant/engineer, available workforce, food buffer, material allowance and operating-budget checks; cancellation does not replenish cumulative authorization.

Restore drained wetland costs eight timber and one tool with four workers over two days. It requires empty ground, preserves the existing basin reservation during work, then removes the drainage overlay and releases the basin without salvage. Original terrain and depleted resources are never rewritten. Restore validation checks improvement condition/time, natural slope, both surveys, same-charter custody, exclusive basin use and pending project references. Older saves acquire no works, stock or reservation.

City review and Region markers distinguish the developed ground, its channel and reserved wetland basin. Failed works switch to warning markers; the underlying generated terrain remains unchanged. This advances the M4/M5 land-engineering and M6 site-opportunity requirements in the full plan. It supersedes earlier blanket statements that drainage is unavailable. Shared-well conduits are now implemented as described above. Larger regional waterworks, river rerouting, flood simulation, arbitrary regional road networks and bridges, steep-site engineering and the remaining M0–M8 gates remain open. Local roads are now implemented as described above. Current verification is in implementation status, with controls in the interface specification.

Regional equipment exchange and repair workshops — September 22, 2026

Implemented: Serviceable and worn handcarts are now separate, whole cargo resources in bilateral player trade, finite recurring agreements and owned-outpost delivery/collection. Each cart weighs eight against the trip's existing capacity, while occupying one ordinary warehouse stock unit. Cargo carts retain their condition during carriage, never equip their carriers automatically, and never provide extra capacity. The separate cart used by an equipped team follows its existing loan, wear and home-return rules. Dispatch requires enough serviceable stock for both any exported carts and that loan; the same cart cannot fill both roles.

This supports an actual regional repair business: a workshop manufactures and sells a cart; another community uses it; a physical agreement brings the worn cart back for paid repair; another delivery returns the restored cart. Recipient payment stays in local escrow until physical exchange. Cancellation releases uncollected payment once; goods on the road return physically. Whole equipment waits outside a full or fractionally free warehouse instead of splitting, disappearing or producing a fractional save. Routes, workers, provisions, fire, rights and storage retain their existing checks.

Governor mandates can deliver serviceable carts and collect worn ones under stock targets, retention floors and cumulative material ceilings. Loaned equipment is reserved separately before calculating exportable surplus. Exported and collected carts count against governor and shared logistics/operating allowances; the team loan remains separate. Missing new-resource allowances do not grant permission. Existing owner/outpost rights and separate consent for other players remain authoritative. This adds no warehouse goods or retrofit grants to existing saves.

The City trade selectors, recurring editor and outpost offer cards expose the two equipment states. Reviews explain whole cargo, eight-unit weight and separate team custody. Supply tracing includes purchased/transferred worn equipment as a source. Recurring save validation now shares the bilateral material catalogue, also fixing previously offered textile agreements that could not restore under its older five-material list.

This advances regional specialization and physical trade in M3/M6/M7/M8. It does not add NPC equipment purchases, credit, guaranteed repair contracts, roads or animal transport. The full M0–M8 goal remains active. Verification and current catalogue totals are in implementation status.

Handcart service and finite reuse — September 22, 2026

Implemented: Newly dispatched equipped cargo trips use version-two custody. After at least one actual route step, the cart returns to its home warehouse as one worn handcart. It retains its carrying capacity and stays with its team throughout the paid journey, fire delays and recall. There is no mid-route cargo deletion or capacity downgrade. An unused recall before the first step returns a serviceable cart. Either return requires one whole free storage place; full storage retains the cart and workers at home until unloading succeeds once.

The cartwright now selects Build handcarts or Repair worn handcarts, sharing the same staff and cycle. One repair worker uses one worn cart, four timber, one iron and one tool to produce one serviceable cart after a full village-day cycle becomes due. Two workers double that batch. Active Joinery, the staffed supporting institution, operational workshop, actual inputs, storage, local production allowances and optional regional operating ceilings still apply. Recipe changes spend nothing and restart the cycle. Missing inputs or services consume nothing. Repair is a physical transformation, not a free condition reset; input spending remains recorded across recipe changes.

Automatic outpost and player-agreement trips cannot silently borrow worn equipment. Their existing authorizations wait with a repair/manufacture explanation. Players may fund repair, manufacture another cart or review carrier-only transport and compatible cargo quantities. Trip loans remain separate from cargo spending; repair materials use ordinary production budgets. This is a service-after-excursion rule, not distance-specific wear, road simulation or a horse/feed system. The regional equipment-exchange extension above now permits whole-cart player trade and outpost cargo. A broader NPC equipment market remains unimplemented.

The equipment ledger migrates explicitly from version one to two without granting stock. Already underway version-one loans retain the serviceable return promised when accepted. Older cartwrights retain their manufacturing recipe. New custody validates its used flag and whole worn/serviceable stock; current missing or inconsistent ledgers reject instead of reconstructing equipment. The supply inspector explains the physical source of worn carts and both cartwright processes. This advances M3/M6/M7 transport sustainability; the full M0–M8 objective remains active. Verification is recorded in implementation status.

Progressive City navigation — September 22, 2026

Implemented: A founded community now presents five everyday destinations: Overview, Buildings, People, Production and Orders. Shared development presents Founding instead of People. All eighteen existing sections remain reachable; the other destinations are grouped under one native, keyboard-operable More city sections disclosure, with Economy, Knowledge & community, Land & defense, Regional management and Charter groups. A current-section label remains visible when the menu is closed. Disclosure state is remembered independently per settlement during the open session and across ordinary state refreshes; a page reload starts collapsed.

The server supplies read-only navigation hints from existing City projections. Plan ahead explains missing institutional or founding requirements; Activity on record draws attention to retained appointments, passage terms, district plans, forces and frontier records even after service interruption. These labels never authorize an order or prevent inspection. Current command/quote checks still decide authority, resources, staffing and readiness. Consented production stewards receive only the production-stewardship destination and no owner navigation metadata.

The introductory guide presents the first three incomplete suggestions while retaining all eight evidence-based steps in its expanded list. Completion, rewards, saves and simulation behavior are unchanged: the guide grants nothing. This delivers the progressive-navigation part of M1, not completion of the full onboarding or M0–M8 scope. See interface and implementation status for verification.

Coastal founding and fish meals — September 22, 2026

Implemented: Founding now offers three woodland parcels and up to three independently surveyed coastal parcels in the released frontier. Coastal candidates require a seven-hex nonoverlapping parcel, at least five moist field hexes, a shore-water fish location, no generated settlement/landmark feature, and a verified land route of at most sixty walking hexes to the existing waystation. Offers and reservations do not create residents, warehouses or fish stock. All released start types, including the farming package above, consume the same one-time account founding right; reserving another type changes the proposed package, not the entitlement. Coastal water cells remain ocean and cannot host land buildings.

The version-two coastal package grants the same forty residents, twenty-four workers, forty occupied housing places, 1400 storage, 720 prepared food, 260 timber, forty logs and eight tools. It supplies four operational buildings: village commons, a six-worker community field, a two-worker fishery and a two-worker smokehouse selected to cook meals. Ten residents work initially. It supplies no lumbermill and no raw fish inventory. A separately surveyed freshwater well provides sixty units per village day; ocean water is not a household supply. The initial staffed chain has a potential forty-five prepared food per village day: thirty-three from farming, plus twelve from cooking six fish with one log. Catching at two of three staff yields 6⅔ fish per village day. Production order, actual stock, labor, storage, damage, recipes and budgets govern real output.

The once-established fish bed holds 240 fish and recovers eight per four-real-hour village day, bounded by its recorded capacity. Its immutable survey, founding source, time scale and grant association are validated on restore; missing or incompatible coastal source records reject instead of regenerating fish. Fishing deducts actual available stock. Read projections calculate recovery without mutation. Existing Tidebreak development fish beds retain their previous time scale. Charter extraction timestamps record the actual village-day production tick, avoiding recovery counted twice after a staffing-change offset. Historical population admission checks now pass their actual tick into finite-stock food-capacity calculations, so offline replay cannot promise fish recovered later in the catch-up interval.

Cook fish meals is a second selectable smokehouse recipe. Preservation remains the default for older buildings and saves: five fish and two logs become four preserved fish. Cooking consumes six fish and one log for twelve ordinary prepared food, usable by households and existing supplied journeys/forces. Only one recipe runs; switching waits a full production cycle. Raw and preserved fish do not silently become household meals. Existing target/shared input budgets and the supply graph include these choices and the later preserved-fish meal recipe described above. Chartered fish stock now has finite age buckets; the earlier two-recipe scope is superseded by that extension.

The forty starting logs cover forty full cooking cycles if no other use consumes them. Fuel exhaustion blocks cooking and exposes its reason. Reassigning eight farmers restores forty-four basic food without another grant. The coast retains spare legal land for paid planting, delayed woodland growth/harvest and later building choices; it can also import along actual routes. Tests exercise planting and harvesting actual replacement fuel and a paid waystation trip for tools. Food reserves, carrier rations and finite counterpart stock still apply. New maritime transport, harbors, storms, drainage, salinity simulation, new coastal outpost tenure and naval combat are not claimed by this start.

The catalogue validates both starting packages, their actual assignments and selected recipes, first-cycle inputs, declared housing/storage and nominal food balance. Geography, renewable stocks, 24-real-hour absence, fuel recovery, historical migration, physical imports, one-time grants and restore corruption are covered by integrated scenarios. The full suite passes 506 tests across 62 files; the final 37 coastal/founding cases also pass. Browser founding, timed cooking, private access, narrow/desktop layouts and actual server restart are verified. See implementation status for evidence and exact scope. This delivers the planned second onboarding option within M0–M3; the full M0–M8 objective remains active.

Shared regional operating ceilings — September 22, 2026

Implemented, opt-in: A founding home's governor, public accountant and record keeper can authorize cumulative material ceilings shared with its retained outposts. This is a separate authorization from the existing logistics daily/total budget, public timber budget, and each local mandate; every applicable limit must permit a commitment. Existing saves receive an empty versioned ledger with no restrictions or manufactured resources. A current capability marker with a missing ledger is rejected.

Covered spending is explicit: actual producer inputs in both continuous and target modes; district construction materials and optional crew support; automatic building repairs; automatic soil/channel/headworks/terrace maintenance; and automatic food/governor shipments, including outgoing goods, travel food and reserved collections. Each whole operation checks the remaining shared allowance before payment and books only after success. Output, returned cargo, cancelled jobs and refunds never restore gross authorization. Partial staffing records its actual fractional inputs. Local warehouses, reserves, workers, rights and other allowances remain separate. Shipments are attributed to the ordering home, including their reserved outpost collections.

The operating budget now offers capped cumulative limits up to 10,000 units per material or renewing daily limits up to 1,000 units per material per home village day. Daily mode keeps cumulative spending and receipts, but only current-day commitments consume its renewed permission. Neither mode banks unused allowance, reserves resources, automatically replenishes stock, optimises priorities or transfers goods. Existing deterministic simulation order chooses the next eligible spender; reviewed local producer priorities can order production within each community day. Meals, raw production with no material inputs, manual orders, institution upkeep, care/refuge/clothing services and player barter or relief agreements are outside this ledger. Buyer coin payments for bilateral sales enter only when the owner opts into the separate coin ceiling. Pausing blocks new covered commitments; losing the regional office blocks new approvals and covered work except for producer inputs already authorized by an enabled daily-only book. Paid jobs and journeys finish. Food processing can stop when its other blockers or ceilings apply; City production status and household food capacity include the current shared-budget decision. A local food-capacity estimate accumulates provisional inputs so its producers cannot promise the same remaining allowance twice; it does not predict competition from other settlements or later orders.

The private Regional screen displays proposed ceilings, cumulative commitments by activity and ordering community, and the last forty receipts. Current authority and world revisions protect edits; reauthorization cannot reduce ceilings below past commitments. Read projections do not spend, reset or reserve anything. Paused ledgers retain their limits and history; council stewardship retains the accepted authorization without granting an unembodied player new signing authority. Configure rejects overdue regional day/district/dispatch catch-up. Restore validates ownership, scope, resource amounts, category/community totals and bounded receipt consistency.

Eight integrated scenarios cover paid home/outpost production and logistics competition, building repair/cancellation/manual recovery, paid district work, real improved-soil maintenance, rights/service/succession, old-save migration, corruption and stepped/offline equivalence. The district wake-up scheduler now rounds fractional crew completion times up before scheduling a new check, preserving its integer timestamp save contract. Browser and full-suite verification are recorded in implementation status. This extends M7; general estates, complete operating-service coverage and the remaining M0–M8 gates remain open.

Textile production and funded communal clothing — September 22, 2026

Implemented: Textile crafts is the twenty-third technology, in Culture, with learned Seed selection and Joinery as cross-branch prerequisites. Its three-day research requires six days of practice, two actual researchers and ten timber, eight food and one tool. Separate adoption costs six timber and four food; the clothier occupies one resident and consumes one food per village day. Research, materials, operating service and local authority remain distinct.

A paid Textile workshop adds a two-worker producer with selectable spinning, weaving and tailoring. Flax is a new crop choice on suitable existing community fields at moisture 0.45 or higher. Selection requires active Seed selection and Textile crafts; ongoing crop husbandry uses the existing seed specialist. At full staffing, flax yields twenty-four fiber per village day instead of food. It is not an emergency meal or travel ration. Existing soil, irrigation, terrace, staffing, storage and growing-time rules apply. A player must retain another food source or arrange imports.

Each workshop runs only its currently selected recipe; changing processes restarts a full production day. Multiple staffed workshops or physical imports can support parallel stages. Actual inputs and outputs scale with staff and use the existing production mandates, stock targets, storage checks, coordinated plans and scribe receipts. Loss of the operating clothier blocks new textile batches without consuming their inputs. The workshop has a semantic footprint-and-label presentation fallback; no dedicated final illustration is claimed.

Flax, yarn, cloth and garments are ordinary finite warehouse goods, each with one carrying-weight unit. They can travel on owned outpost supply routes or be offered in bilateral material trade and its existing recurring agreements. No NPC stock, buyer, garment money or free delivery is introduced. The verified two-player exchange carries eight newly manufactured garments to the buyer before that buyer receives them, with actual return payment and provisions. Supply chains exposes all refinement stages and the wardrobe's conditional use separately from fixed recurring demand. Outpost cards offer textile delivery/collection when local quantities permit.

People → Communal wardrobe authorizes new clothing issues with a one-to-eighty garment daily limit, retained warehouse stock and a cumulative garment allowance up to ten thousand. Issuing and pausing the policy cost no attention. Funding reserves no garments and cannot lower the allowance below prior spending. First enablement, or re-enablement after a pause, waits one full village day. Revising an already enabled service retains its original readiness time. At each household check, active Textile crafts, an operational local commons at 65% condition, whole garments above retained stock and remaining allowance constrain issuance.

Every issued garment leaves warehouse stock once and creates one local communal clothing place for seven village days, then wears out without salvage. This models a finite local service pool, not individually owned wardrobes. Existing places remain usable while new issues are paused or the clothier becomes unavailable. Unused places stay at the community and continue aging; they do not teleport with departing residents, become personal estate, return to stock or qualify as troop equipment. Current travelling carriers, scouts, military supply carriers and away soldiers are excluded from eligible residents at home. Returning people can use existing local capacity or receive a later funded issue.

Clothing supports daily health recovery only when food, water and shelter needs are all met. The extra recovery is covered residents at home divided by total residents, capped at one health per village day before the existing health cap. Clothing cannot replace missing essentials or create residents, workers, food or shelter. There is no compulsory early-game clothing penalty; this is an optional manufactured service with real costs and an observable recovery benefit. Worn clothing, exhausted budgets, lost service and absent stock have separate visible reasons.

The versioned wardrobe ledger records readiness, cumulative issue/spending, worn-out garments, dated unexpired batches and the last actual coverage/benefit. Its population capability marker distinguishes older worlds from missing current records. Older communities start with the service disabled and no garment grant, cohort, research or spending permission. Restore checks exact seven-day expiry, bounded ordered cohorts, issue/expiry conservation, budget consistency and historical coverage. Offline household checks follow the same production, issue and expiry boundaries as stepped simulation. Authority, world revisions and receipt replay protect funding; a successor inherits the community's existing policy and spending under ordinary continuity rules.

Nine dedicated scenarios verify actual crop-to-garment inputs and output receipts, delayed issue and retained/cumulative limits, a controlled-health recovery boundary, pause and seven-day wear, failure of basic needs and workshop service, a physical two-player exchange, actual away-carrier exclusion and return, authority/replay, preservation through death and lawful handover, and offline/migration/corruption. Regression and browser evidence are tracked in implementation status; controls and review wording are specified in gameplay interface.

This adds the first manufactured clothing service and extends M2/M3/M4. It supersedes earlier blanket statements that no clothing or advanced resident services operate. It does not claim full personal item ownership, household shopping, wage recirculation, clothing-specific weather simulation, broad livestock/wool/leather production, all advanced needs or completion of the full M0–M8 objective.

Authoritative account attention — September 21, 2026

Implemented: each authenticated account has a single strategic-attention allowance, shared across its communities and characters, capped at twelve. One point regenerates every two real hours, independently of the four-real-hour village day or accelerated construction fixtures. Time spent at the cap cannot be banked for an immediate refill after spending. The default initial allowance is twelve. This replaces the sample-only top-bar value; attention remains a capacity, never warehouse inventory or tradable money.

The command boundary charges only after the order's ordinary authority, revision, goods and work checks succeed, within the same rollback-capable transaction and persisted receipt. Insufficient attention rejects the whole transaction without retaining a structure, supply reservation, job, signature or payment. Failed, stale and duplicate commands do not spend it. Cancellation returns only the ordinary eligible resources, never attention; crew tools already consumed by immediate mobilization still remain consumed under existing work rules. Reconnect, death, embodiment, lawful handover and landless continuation do not replace the account ledger.

The version-one cost schedule is:

A request that has not committed an army is free; the force owner pays two when accepting relief. District approval pays two once; its separately funded buildings do not charge again as the scheduler starts them. Standing production, logistics mandates, recurring trade, upkeep and funded work continue at zero attention. Their materials, workers, rights, supplies and service requirements remain unchanged. New human commands consume only their listed cost; this schedule does not introduce unimplemented proposal costs from sample screens.

The durable account ledger records points, total spending, credited regeneration and time cursors, with conservation and elapsed-time validation. Its capability marker distinguishes an older world from a missing current ledger. Migration creates an empty account book whose initial allowance is twelve; it never replays charges for previous orders or converts sample UI values. Existing goods, people, jobs and physical routes remain unchanged. Current saves reject missing ledgers, out-of-range points, inconsistent totals and impossible regeneration. Projection is read-only and private to the authenticated account. The simulation credits due points and broadcasts updated overviews even when the event changes no map chunk, so clients receive exact server-driven refill updates. Offline catch-up credits only available capacity and agrees with stepped execution.

City order reviews display the server-defined attention cost and available balance. Confirmation is disabled when the latest balance cannot cover the order; authoritative acceptance still rechecks it. Free orders state their zero cost. The top-bar Attention control opens live City Orders, which explains the balance, next refill date and cost/recovery rules. Existing direct map construction/planting/rebuilding controls also disclose attention before submission. Sample management screens retain explicitly separate rehearsal balances and cannot overwrite or spend the live allowance.

Seven new scenarios exercise actual paid/cancelled construction to exhaustion, atomic rejection, zero-point staffing and composting, exact refill boundaries and no banking, current revisions/foreign authority/replay, death and lawful handover, shared home/outpost balance, actual relief acceptance/withdrawal, offline equivalence and save migration/corruption. The district scenario additionally verifies that scheduled buildings incur no second attention charge. Two browser accounts verify reviewed cancellation, real land surveys consuming the final points, disabled reviews at zero, independent balances, a timed server refill without reload, reload and 320–1440px layouts. Actual server restart preserves the balance, spending, credited refill and next deadline; the remaining point funds exactly one survey, with no reconnect reset. Verification totals are in implementation status.

This supersedes earlier statements that attention accounting is absent or the main counter is sample-only. It completes this pacing mechanism; attention tuning, broader recovery and the remaining M0–M8 systems still require the full implementation objective.

Ratified military passage and reviewed campaign routes — September 21, 2026

Implemented: a charter with active Land registry and a staffed operational registry can offer one other lawful founding community passage for relief campaigns. Clauses choose seven, fourteen or thirty village days and a maximum of two, four or six soldiers per campaign. This is one-way permission over the named grantor charter, not reciprocal access or permission across all that owner's lands. A village day is four real hours. No material, coin, population, troop ownership, warehouse inspection, civilian transport or hostile-attack right is transferred.

The offer reserves nothing and expires after three days. The other party can accept, decline or counter; either party can withdraw an unsigned negotiation. Each counteroffer replaces the pending terms, increments their revision and requires the other party's fresh ratification. Up to sixteen clause revisions are allowed before a new negotiation is needed. Commands bind both the current world review and exact clause revision. The persisted record retains the latest clauses and signatures; it is not a complete history of superseded drafts. Ratification needs a working grantor registrar and the same lawful character who signed the current proposal. An unsigned proposal cannot acquire authority merely because its proposer has a successor.

Ratified passage is a public obligation. It survives subsequent leader succession and registry interruptions until its fixed expiry or effective exit deadline. This differs deliberately from character-specific production steward appointments and relief-combat consent. Either current lawful party can give exit notice without restoring the registrar. Notice immediately prevents new campaign acceptance; an already accepted campaign retains passage until the earlier of original expiry or three days after notice. At that boundary it stops further combat and returns physically. Egress along the already funded route remains available even after passage expires. Existing paid food custody and wage contracts retain their own rules.

The donor reviews a direct route or a waypoint through another founding community. With a hosted depot, the path is home → optional waypoint → depot → camp, followed in reverse for return. Every actual route cell is checked: third-party charters other than the consenting host require current, ratified passage with sufficient troop capacity. Each newly accepted campaign freezes its waypoint, path and treaty/clause references. Geometry, actual food, depot service, fatigue, fire, preparation, contact and funded wages still govern eligibility and movement. A treaty can expire before a delayed or long campaign finishes; reviews disclose each term deadline and the possibility of forced withdrawal. No automatic extension is promised. A newly established foreign charter on an accepted route likewise stops further combat pending rights; the force may still leave physically.

A versioned transit ledger and capability marker validate charter parties, clause limits, signature references, dates, unique live negotiations and campaign references. Current saves reject missing ledgers, unsigned passage presented as accepted authority, missing campaign grants and forged clause revisions. Old accepted campaigns retain their already paid fixed routes as access version one, without fabricated treaties; unaccepted old offers undergo current passage checks when accepted. New campaigns use access version two. The City projection shares treaty clauses only with the parties and does not add foreign inventory access.

Seven scenarios verify actual paid research/registry and professional army preparation, a three-community waypoint march and cleared camp, counteroffer ratification, troop caps and authority, exact revisions/replay, notice with physical return, succession/service continuity versus unsigned consent, expiry, offline replay and save migration/corruption. Three browser sessions verify blocked passage, cancelled offers and ratification, a real counteroffer, reviewed route acceptance, unchanged goods on treaty signing, preserved wages, private inventory boundaries, reload and 320–1440px layouts. An actual server restart preserves the accepted revision, funded route, goods, payroll and muster deadline. Notice and host withdrawal retain their separate obligations; cancellation at home refunds only committed provisions once. Narrow views were inspected. Regression totals are recorded in implementation status; player controls are in gameplay interface.

This supersedes older blanket statements that no transit treaties exist. It delivers fixed military passage for consensual relief. Toll payments, open-ended or reciprocal diplomacy, civilian transit, shared sovereign institutions, territorial war, siege, occupation, chained depots, mobile field-rest camps and major waterworks remain outstanding in the full M0–M8 objective.

Hosted campaign supply depots — September 21, 2026

A relief host can now explicitly offer an operational local storehouse supported by active Field logistics, with a maximum authorization of sixteen, thirty-two or forty-eight food. Zero remains the default and grants no depot right. The immutable relief offer names the building and maximum; it reserves nothing until the invited force owner accepts. Acceptance rechecks both communities, current revisions, host household reserves, the host quartermaster/storehouse and actual goods. It atomically funds the donor's carried provisions and eight food per accepted soldier at the host, enough for two possible four-day refills. A four-member force therefore needs at least thirty-two food of host authorization. Food and people are not granted. Existing public material accounting remains gross; campaign cancellation never resets previous spending.

Hosted campaigns walk donor home → the named depot building → the recorded camp, then reverse the same physical route. Each edge retains the ordinary walking time, fire checks, fatigue and equipment wear. The donor starts with four carried ration-days. On each leg the unit can collect once, only when physically at the depot's route index, topping up to at most four days carried. Each actual receipt records time and amount. Goods move from the host reservation into carried troop rations; they never appear remotely in donor warehouse stock. The donor still feeds its own residents during home muster and from carried supplies while away. The host receives no troops, new population or civilian labor.

The first walking leg can be at most thirty-six hexes; the camp excursion must fit four ration-days including a quarter-day contact and one-day reserve. Arrival fatigue must remain below eighty, so not every geometrically reachable route is eligible. Supply-only agreements grant no rest. The optional version-three hosted rest described above adds explicit recovery stops; the paid wage term must cover muster, walking, authorized rest and contact. Outward return-reserve decisions use the funded depot checkpoint rather than assuming every mission must return directly home without refilling. A verified longer path takes thirty-six walking hexes each way via a depot at index twenty-nine; that camp is outside the unaided round-trip food limit. The old direct route and carrying rules remain for offers without depot permission.

Combat consent and committed return provisions are separate obligations. Either party can revoke combat permission, but food already committed to the force's return remains reserved until its physical return home. The unit can still take its one paid homeward refill. Neither revocation nor a changed consenting character lets the host reclaim that food early. Collection still requires a usable storehouse and active host quartermaster, and cannot cross a fire remotely. Losing depot service before contact orders withdrawal with currently carried food; it may leave a distant force short of supplies. Delays, blocked return routes and wage expiry retain their existing consequences. There is no guarantee of a safe return, teleport, automatic relief shipment or replacement food.

Held depot provisions continue to occupy host storage capacity and remain unavailable to household consumption, other orders or another campaign. Unused local reservations are released when the force returns to donor home, including cancellation while it is still home. Food that cannot fit after host storage loss remains held in the validated depot record. Only the host can later review Reclaim unused depot provisions; it releases the amount that fits and retains the rest. Repeated reclamation cannot pay twice. Food already collected belongs to the committed force and is consumed or carried home under ordinary troop rules. The depot does not cancel, refund or replace the separate wage contract.

Supply version two on an agreement binds its named depot, route index, maximum authorization, funded/held/delivered/returned totals and at most one collection receipt per direction. Their sums are validated on restore alongside the existing military agreement and physical route. Older unaided agreements migrate to supply version one without any depot right or allocation; deleting a current version-two depot or contradicting its receipts rejects the save. The building's normal destruction/repair lifecycle remains real. No new catalog building, resource or technology is needed: this gives the existing Storehouse and Field logistics a working cross-settlement supply role.

Seven new scenarios verify the actual paid building/research/army path, a target outside unaided range, both physical refills, host storage occupancy, preserved return entitlement after withdrawal, authority and protected-food rejection, loss of depot service, retained food after storage destruction, neutral migration/corrupt custody and identical offline replay. The storage-reclamation test isolates restored capacity; ordinary paid rebuilding is covered by the existing building tests. Two browser clients verify selected host authorization, cancelled/accepted reviews, sixteen donor provisions plus thirty-two host provisions for the prepared force, no early delivery, shared custody figures, private inventory boundaries, reload and 320–1440px layouts. Actual process restart preserves both reservations and the original muster deadline; host withdrawal while the force remains home returns the uncollected reservations exactly once while wages persist. The narrow layout is inspected. Full regression totals are in the implementation status.

This supersedes the earlier statements that all relief campaigns must carry the whole round trip or have no forward supply. It implements one explicitly consented hosted food depot, not unrestricted warehouse access. Intermediate chains of depots, mobile resupply, mobile field-rest camps, advanced equipment/ammunition, broader diplomacy beyond the passage described above, territorial war and major waterworks remain open within the full M0–M8 objective.

Consented professional relief campaigns — September 21, 2026

Two lawful players can now agree a professional relief campaign against one recorded bandit camp. The requesting founding village needs an active scout and an uncleared defense survey. It names another player's founding village, shares that camp's position/observed strength, and offers permission to clear it. This grants no warehouse access, troop command, settlement ownership, occupation or general authority over the host. The force owner accepts or declines through their own City. Both named characters and the immutable target are recorded. Offers expire after three village days without reserving food or troops. One unresolved request per host prevents overlapping commitments for the same camp; an already committed donor unit cannot accept a second campaign.

Acceptance requires ready, fully qualified paid infantry at its home, no wounds, at least 80 equipment/morale, at most 20 fatigue, active Standing service, Scouting and Field logistics. The existing wage contract must cover one village day of preparation, the walking round trip and a quarter-day contact phase. Acceptance reserves actual donor food after protected reserves and material-budget checks; wages stay in their existing separately funded contract. Carried food is the rounded-up round-trip demand plus one day of delay reserve, with already carried provisions credited toward the new payment. Four days of carrying capacity bounds reach to at most eighteen walking hexes each way. The host provides no automatic food, pay or new residents. Longer routes require future forward-depot work and are explicitly unavailable now.

The lifecycle is offer → accepted home muster → outward march → reconnaissance/contact → physical return → completed agreement. Home preparation lasts one village day, currently four real hours, and both participants can see the commitment before movement. The force stays physically at home and eats household food during muster; its travel provisions remain carried. Afterward it walks one adjacent traversable hex per twelfth day, with ordinary equipment wear, fatigue and ration consumption. Arrival starts a quarter-day contact phase. At resolution, current consent, professional funding, supporting services, readiness, fire and return provisions are checked again. The existing deterministic strength/wound rules resolve the observed camp. Victory clears that host's actual threat and stops its later caravan raids. Defeat wounds/wears the force and returns it without changing the camp. A camp already cleared by another valid action is not fought again. No player settlement is a permitted target.

Either participant can withdraw through the agreement; the force owner also retains ordinary recall. While the unit is still at its home hex it is released there and unused food returns subject to actual storage. Once away, withdrawal changes direction without changing position or crediting distant food. Changed character authority, lost scout/quartermaster/service, exhausted readiness or the return-food threshold also aborts further combat. Leader death during muster or contact respects the existing council's prohibition on new offensive action. The paid wage deadline can expire during a delayed campaign; the bonus ends and physical return continues. Fire can block either walking leg while rations keep being consumed. No emergency teleport, automatic resupply or invented wages are introduced. A completed battle cannot be undone by a later withdrawal.

The unit remains part of its donor's existing mobilized population and leaves civilian work only once. The host gains no workers or soldiers. Surviving soldiers, wounds, morale, equipment wear and unconsumed provisions return to the donor. Full home storage leaves surplus food with the returned unit. The existing professional term and earned household wages survive cancellation/completion; campaign withdrawal does not cancel wage service. The current field-supply rendezvous supports the local survey corridor and explicitly rejects these cross-settlement campaigns until a real forward-depot implementation exists.

The version-one relief ledger stores both parties/characters, immutable camp, expiry, acceptance, muster deadline, actual route, unit identity, provision commitment, outcome and return time. A matching unit record binds the active campaign. Restore validates consent references, walking continuity, capacity, phases, dates and one live force/request; a continuity capability marker distinguishes old saves from a missing current ledger. Older saves receive no agreement, movement, troops or resources. Commands require fresh world/target revisions and durable receipt replay. Simulation uses historical event time for consent/service checks, ensuring offline marching and payroll match chronological execution. Participants inspect only the shared agreement and committed force status; foreign City inventory and unrelated military records remain private.

Eleven new scenarios verify actual paid infantry from earned money, two independently founded communities, food commitment, visible muster, physical contact/return, real caravan benefits, host/donor withdrawal, foreign/stale/duplicate commands, both succession boundaries, fire/return reserves, wage expiry while trapped, offline equivalence and neutral/corrupt-save behavior. Two browser clients verify cancelled requests/acceptance/withdrawal, actual payment, unchanged wage custody, shared status and denied foreign inventory access. A real process restart preserves accepted consent, troop/cargo state and deadline; reviewed host withdrawal during muster returns carried food exactly once and retains wages and the uncleared camp. Reload and 320–1440px layouts pass; the narrow layout is visually inspected. Final full-suite totals are in the implementation status.

This extends the earlier local paid-infantry foundation into a working nonterritorial, consented cross-settlement campaign. It does not implement territorial war or bypass its specified twenty-four-real-hour declaration and twelve-hour siege-pressure windows. Broader diplomacy beyond the passage described above, paid military contracts, chained depots/resupply, broader formations, sieges, occupation, mortality and territorial settlement remain required by the full M0–M8 plan. Earlier blanket statements that all campaigns or allied assistance are absent are superseded only for the relief role described here.

Paid professional infantry service — September 21, 2026

Standing infantry service is the twenty-second working technology and fourth army topic. Learned Drill, Field logistics and Public accounting, eight practice days and an operational staffed Infantry barracks support three research days costing ten timber, eight food and one tool. Adoption costs six food and one tool, assigns one existing service officer and consumes one food per village day. The barracks occupies one cleared fields/forest hex, requires active Drill to construct, costs ninety timber, sixteen bricks, four iron, two tools and twenty-five food, and has one institutional staff place. Its 140 construction work and ordinary lifecycle apply. This institutional building creates no soldiers, labor, housing or output; its presentation uses a semantic footprint and label pending bespoke art.

The owner may fit their existing militia, including a reduced surviving cohort, for infantry service while it is fully basic-trained, ready at home, unwounded, at least 80 condition/morale and at most 20 fatigue. Initial fitting consumes one timber and one iron per member plus one tool per started pair, subject to existing material permissions. These are consumed equipment upgrades, not newly manufactured warehouse kits. Population and civilian mobilization remain unchanged. Two additional full village days of advanced training require active Standing service and Drill, food and household health of at least 65. Barracks or specialist loss and unmet food stop training. They do not suspend wages or extend the fixed term. Basic militia kit/refit, wear, wounds and recovery rules continue.

An explicitly reviewed seven- or fourteen-village-day contract reserves its complete coin bill from actual communal money. One coin per member is earned per started village day, beginning immediately on acceptance and including training, delays and waiting at home. A village day is four real hours. No starting money, credit, coin resource or population is granted. Coins are separate from warehouse capacity and material budgets. The finite 1,200-coin market endowment is conserved across the market treasury, communal balances, caravan money, held professional wages and earned military-household money. Earned wages currently accumulate in an aggregate household account; individual purses, household shopping, taxation and recirculation of those earnings are not simulated. Consequently available communal/market money can be exhausted; this release does not claim a closed, indefinitely sustainable monetary economy.

Qualified infantry under an unexpired funded contract has 25% greater effective strength on the existing patrol, corridor guard and moving-escort calculations. This improves actual encounter/guard outcomes while retaining condition, morale, wounds, minimum readiness, fire and provisions checks. It provides no immunity. New departure also requires active Standing service. The existing unit can perform watchtower duty, but that warning role gains no invented combat effect. Supply carriers still carry actual food/basic kits through existing routes; professional fitting does not manufacture extra field replacement supplies. Changing cohort size requires standing down before ordinary reinforcement.

Payroll executes chronologically with existing jobs and daily simulation, including during absence and council interregnum. At the exact term deadline, the strength bonus ends and outward, guarding, waiting, escorting or garrisoned infantry receives a physical return order. Escort/garrison links and outward supply teams withdraw through their existing rules. Current position, rations, condition and cargo remain real; fire or congestion can delay return. Returning beyond the paid deadline is part of the disclosed fixed service obligation and earns no extra coins. Already homeward troops continue home. Incomplete training remains recorded but cannot authorize departure. A fresh funded term preserves retained fitting and completed/partial advanced training; the new term still requires healthy readiness at home.

Ending the professional role is allowed at home while ready or in advanced training. It refunds only held, unstarted-day wages to the communal treasury, retains ordinary militia, wounds and equipment condition, and removes the professional fitting/training record without a material refund. Re-entry therefore pays fitting and training again. Ordinary demobilization at home also settles held wages, then returns surviving workers and usable basic kits under existing recovery/storage rules. Prior earnings never become communal funds again. Succession preserves paid contracts and money while ordinary character authority prevents new player orders until lawful handover.

The version-one professional book records each term, member count, paid/held/refunded amounts, earned-day count and fixed dates; units retain a versioned infantry qualification. Restore validates live unit links, training/phase coherence, dates, amounts, per-community earnings and global coin conservation. A capability marker rejects a missing current book. Older saves receive an empty book with no soldiers, qualifications, permission or money. Current world revisions and due-payroll catch-up checks protect acceptance; durable receipts prevent duplicate fitting and funding. Supply chains exposes one-time fitting inputs separately from monetary commitments.

Ten scenarios cover actual earned market money, imported/fitted materials, paid barracks/research, two-stage training, stronger supplied patrols, home refunds/demobilization, fixed expiry while guarding, barracks interruption, authority/stale review/replay, offline equivalence, neutral migration, corrupt payroll saves, succession and the guard-strength/fire boundary. The browser path verifies cancelled/funded reviews, precise material and monetary changes, training/treasury display, reload, actual process restart and reviewed stand-down; 320–1440px layouts fit, with the narrow layout inspected. Final regression totals are recorded in the implementation status.

This supersedes older blanket statements below that professional troops, advanced training or any military wages are wholly absent. It is a paid local infantry foundation for M5/M8. Cross-region campaigns, notice windows, territorial conflict/diplomacy, mortality, advanced equipment/ammunition, forward depots, field reinforcement, broader formations and major waterworks remain open. The complete M0–M8 plan stays active; paid local service does not complete professional campaigns.

Consented public production offices — September 21, 2026

Public offices is the twenty-first working technology and fourth politics topic. Learned Land registry and Public accounting, eight practice days and a staffed operational registry support three days of research costing twelve timber, eight food and one tool. Adoption costs six timber/one tool, assigns one existing registrar and uses one food per village day. It supports a real administrative choice without transferring title or forcing a political policy. Ordinary local institutions, specialist availability, research and manuscript diffusion apply.

A charter holder with that active service can offer one production steward appointment per community to another player's founding community. Both accounts must currently embody living, lawfully appointed founding-household leaders. This first release does not appoint arbitrary unregistered accounts, landless careers or NPCs. The offer records the particular issuer and recipient characters. It expires after three village days; the recipient must explicitly accept from their own founding community. Acceptance starts a seven-, fourteen- or thirty-village-day term, chosen by the issuer. Each village day is four real hours. Offers and acceptance reserve no goods or residents. The registrar remains an actual local worker; the other player is not teleported into or added to that population.

The accepted office permits inspection of this community's warehouse, producers, production mandates, workforce and food capacity, and four bounded authoritative operations: assign producer workers, select a supported workshop recipe, apply an existing two-to-eight-producer coordinated plan, or adjust an existing owner-funded stock target up to its retained ceiling. The steward can reduce food output and cause staffed workshops to consume real local supplies, so both consent reviews state these consequences. Releasing workers can start already funded queued work. Ordinary staff capacity, total labor, building condition/work, recipes, terrain, inputs, storage and specialist requirements remain authoritative. Changed assignments and recipes wait their normal full cycle. This is remote administrative coordination through the staffed registry, not a new personal journey, wage or migration mechanic.

The charter holder retains ownership, full management and all decisions outside that office. Delegates cannot assign registry/care/other service staff, alter reserves or migration, change production targets/pauses/budgets/priorities, spend on construction or research, issue trade or army orders, create land rights, manage family succession, or appoint another delegate. Existing production mandates, pauses, stock targets, input ceilings and spent counters survive delegated recipe/staff changes. Continuous producers retain their existing rules; accepting an office is not a new material budget. Plans cannot include another community's structures. The owner retains the ability to override producer settings through ordinary controls.

Authority is checked afresh for every command and city read. Expiry, owner revocation and recipient resignation remove access immediately without reverting applied staffing/recipes or cancelling funded work. Missing registrar service suspends access; the existing knowledge system restores an enabled service at a later valid daily upkeep check, or the owner may suspend/readopt it through normal controls. A change in either named character's lawful office invalidates the old appointment, including after death, embodiment and lawful handover. A successor must issue/accept a new appointment; account identity alone does not inherit the former character's consent. Revoking a suspended appointment does not require the registrar to be active. Offers cannot silently replace a pending or unexpired accepted appointment.

The version-one public-office ledger stores consent, issuer/recipient characters, fixed dates, status and a count of successful delegated orders. Its latest forty action entries retain command kind, affected structure IDs, actor, time and sequence. This is an order audit, not a complete before/after warehouse or staffing journal. Duplicate accepted receipts do not append twice. Restore validates charter ownership, household character references, allowed roles/terms, coherent consent and expiry dates, action references and ledger continuity. A capability marker distinguishes a missing current ledger from an old save. Older saves receive an empty book and no new rights, learned technology, goods or people.

Owner authority remains a separate predicate. Normal public-overview inventory remains private to its charter holder. An active appointment makes a separate production inspection entry available in the City settlement selector; its response uses an explicit limited field list. It omits the owner's family, linked outpost inventories, military, agreements, research ledger, regional administration and unrelated records. The delegated screen exposes production controls only, while the server independently rejects unsupported commands. The normal charter-holder interface remains intact. Local appointment records and audit are visible to the relevant parties; pending offers grant no production access.

City Public offices supports reviewed proposals, acceptance, decline, revocation and resignation. Recipient offers appear in their founding community. The limited Production stewardship screen shows stock, food implications, staff, recipes, retained mandates and coordinated plans, with the term deadline and resignation route. An expired client view is cleared; revocation during another client's review invalidates confirmation. The role grants no blanket access to the rest of the owner's realm.

Ten new scenarios pass, covering actual paid research/registry construction, two real founders, consent/privacy, true staff and recipe changes, preserved budgets, cross-community and command restrictions, expiration, replay, institution loss, continued actual harvests, succession, stale reviews, old saves and forged records. Controlled critical-illness boundaries exercise the existing death/handover system; the registry, technology and ordinary producer commands are paid and live. Browser checks cover two independent players, cancelled proposals/acceptance without rights, actual consent, restricted controls, a worker change visible to the owner, exact stock, audit, reload and 320–1440px layouts. An actual process restart preserves the accepted office and term; owner revocation invalidates an open delegate review, denies subsequent reads and survives reload. Final regression totals appear in implementation status.

This advances M4/M7/M8 public authority and supersedes blanket claims that another player cannot hold any live public office. Broader memberships, paid offices, NPC officeholders, territorial treaties, shared construction/war powers, professional campaigns, major waterworks and other M0–M8 gates remain open. See interface details and the full target plan.

Surveyed terraces and retaining foundations — September 21, 2026

Contour surveying and terraces is the twentieth working technology and fourth building topic. Learned Joinery and Crop rotation, six days of practice and an operational commons permit four days of research costing twelve timber, eight food and two tools. Adoption costs six timber and one tool, assigns one existing surveyor and consumes one food per day. Knowledge/manuscript rules apply normally. Loss of the specialist immediately queues paid land work, preserving remaining time, invested work and materials; healthy completed terraces keep their physical effect. Existing non-land development orders retain their own interruption rules.

Terracing requires an owned, surveyed, cleared plot with suitable field/forest/mountain substrate, moisture 0.30–0.85, elevation at most 0.78 and local relative relief 0.005–0.04. Relief is the maximum absolute difference from neighboring generated elevation, a normalized terrain measure not a physical slope in degrees or percent. Active minerals and unreclaimed worked ground are excluded. Existing channels must be retired first. New terraces allow an empty plot or an available operational community field; ordinary ownership, fire, occupation, crew and budget checks still apply.

Four residents commit 40 timber, 24 bricks, 16 compost and three tools for four village days: contour marking, retaining works, soil stabilization and verification. Nothing changes terrain early. On completion, maintained soil and retaining works make the effective plot fields while preserving its immutable generated origin. Healthy soil adds ten percent harvest and 0.03 moisture; healthy terraces add fifteen percent harvest and 0.04 moisture through rainfall retention. Together an eight-worker basic field can produce 55 food per cycle at sufficient moisture. Other crop outputs use the same physical yield factors and recorded production history accepts those exact factors. No new water source, neighboring territory, minerals, people or free buildings appear. Irrigation still competes with households and reserves eight units from the existing source.

Retaining works lose two condition per village day even while fallow. Below 50%, all production supported by that plot, new construction and rebuilding are blocked. At a daily check below 25%, each critical supporting terrace deals five condition damage to standing buildings. Ordinary condition, ruin and existing destruction rules apply; this can disable housing, storage and services as buildings deteriorate. A running paid terrace repair/removal crew shores its plot; queued or paused work does not. Fallow recovers soil only, and cannot stop retaining-wall wear. Healthy completed terrain effects do not require a permanently staffed surveyor, but new work does.

Repairing retaining works costs eight timber, four bricks, one tool and four workers for one village day. It can stabilize an occupied plot beneath an operational, damaged or ruined building when that building has no other job, including a supporting non-anchor footprint cell. The supported producer pauses during the work. Completion restores terrace condition and restarts any operational production on a full cycle; it does not repair building condition or soil. Ruined structures require stable retaining works before a separately paid rebuild. The existing authorized land-maintenance policy can fund terraces using the active accountant, surveyor, food buffer, actual materials, available crew and cumulative allowance rules. No allowance or spent counter is reset; bricks remain zero where previously omitted.

Decommissioning requires an empty terrace without irrigation and a paid four-person, two-day project costing eight timber and one tool. Its final stage removes terraces and prepared soil, restores the recorded origin and permits ordinary recovery. Old materials are not refunded and extracted minerals never return. Free soil retirement and tree planting are blocked until the terrace is decommissioned. Pause/cancel uses the existing unused-material refund rules and never grants incomplete terrain benefits.

Terraces originally extended the version-one land ledger with optional validated retaining-work records; version two retains them and adds only the whole-compost migration described above. Older saves gain no land, technology or materials. Restore checks actual suitability, recorded relief, conditions, timestamps, retained soil and paid job requirements. City Land shows the normalized relief, proposal costs/stages, condition, failure thresholds, distinct repair obligations and removal controls. City Production, construction eligibility and regional land exceptions explain unstable foundations. There is no custom terraced mesh yet; the effective terrain and semantic plot information provide the live presentation.

Nine new scenarios cover the real paid research/import/compost/construction/harvest chain, rights and stale review, specialist interruption, cancellation, fallow, deterioration, ruined-foundation recovery, paid removal, automatic repair permissions, malformed saves and stepped/offline equivalence. Controlled wear/damage boundaries are explicit in the tests; materials and resulting work use actual commands. Browser checks cover review/cancel, actual funding, unchanged origin before completion, pause/reload, completed condition/risk controls, paid repair, removal cancellation and 320–1440px layouts. Actual process restart preserves the paused order and exact stocks; resuming reserves no second payment. Final regression totals appear in implementation status.

This advances M4/M5 and supersedes blanket statements that terraces or all slope engineering are absent. Major drainage, river rerouting, flood simulation, steep-site engineering, roads, bespoke landwork visuals and the other M0–M8 gates remain open. See interface details and the full target plan.

Physical handcarts and cargo capacity — September 21, 2026

Handcarts are manufactured equipment with durable journey custody. An active Joinery woodwright enables the Cartwright workshop and its production. Base construction costs fifty timber, two iron, one tool, fifteen food and eighty work; the existing Joinery construction discount and optional support apply normally. The completed two-position workshop consumes sixteen timber/four iron/two tools to produce two handcarts per fully staffed cycle. One worker uses half those inputs to produce one whole cart. Staffing, service loss, condition, paid building work, inputs, mandates and storage follow ordinary production rules. No starting carts are granted. The workshop uses the semantic footprint/label fallback pending bespoke artwork.

Each chartered settlement can review Carriers only or Require a handcart for future two-person cargo trips. The default remains carriers with sixty weight including provisions. Requiring a cart raises that trip's payload capacity to one hundred weight including provisions, without increasing speed, route range, workers or access to terrain. One whole available home cart is required at actual dispatch. Its absence blocks departure; the system does not silently downgrade equipment or borrow a cart already held by another team. Founders, reoccupation, relocating households, evacuations, surveys, troops and personal journeys retain their existing equipment and limits.

The choice applies to waystation barter/coin caravans, bilateral player trade, separately consented recurring trade, manual home-to-outpost supply, automatic food mandates and governor exchanges. Cargo/ration/reserve checks use the selected capacity before spending. Existing quantity ceilings, material permissions, storage, workers, route/fire checks and consent still apply. Handcart mode adds larger waystation offers, including ten-lot material trades, and forty-timber/forty-log manual outpost options. Governor capacity calculations use the same equipment quote. Changing future mode does not change a paid journey's capacity or its borrowed cart; a carrier-only choice can make an unshipped large trade no longer fit.

The cart is a separate equipment loan, deducted once from available home inventory and attached to the paid journey. It is neither exported cargo nor purchased goods, and cannot become the recipient's payment or stock. Loan authorization is explicitly part of the reviewed transport choice and applies to already-authorized automatic routes. Because the cart is returned equipment, its reservation is separate from cumulative material/food spending ceilings; those limits and counters are unchanged. Each concurrent team needs a distinct available cart. Trip receipts and the active loan ledger prevent duplicated reservation on command replay.

Fire, return orders, storage waits and policy changes preserve the cart with its team. Only physical arrival home allows return to warehouse stock, requiring one free storage unit for the whole cart. It cannot be split across fractional free capacity. The team remains active if any cargo or equipment still lacks space. Once returned, the loan is removed exactly once. Under the version-two service rule above, newly used carts require paid repair before a later trip can borrow them; unused recalls and older paid loans retain their serviceable return. Horse/feed/handler service, road engineering and terrain-specific vehicle routing remain unimplemented. Legacy haulage and its consumers remain explicitly separate until their migration is implemented.

The version-one transport-equipment book stores per-settlement choices and active job-to-home loans. A logistics capability marker distinguishes a missing current book from an old save. Restore validates ownership, known choices, whole inventory carts, supported cargo journeys, phase/return state and both directions of the loan/journey association. Old saves gain an empty book and no equipment or standing loan permission; in-flight ordinary teams retain sixty weight. Applied settings and active loans survive actual process restart.

City Trade and Frontier show available/lent carts, the current future-trip choice and reviewed changes. Dispatch reviews identify the separately borrowed cart; journey cards retain the departure equipment after policy changes. Supply chains connects cartwright inputs/output and a conditional per-departure loan consumer, excludes loans from recurring consumption, and shows equipment separately from goods in relevant travelling routes. Food and cart conditional consumers have distinct units. The catalog now validates thirty buildings, nineteen technologies, thirty-nine resources and seventeen workshop recipes.

Twelve new tests pass: real paid Joinery/workshop/manufacture with imported iron, service loss, above-sixty-weight trade, fire/recall, storage custody, malformed/old saves, offline equivalence, separately owned player trade, an actual founder expedition and supplied outpost, competing requests for a lent cart, governor/food automation and recurring reuse without resetting material ceilings. Some automation tests use controlled existing-equipment/food boundaries; manufacture and both manual trade/outpost chains run through real commands. The 75-case transport integration run passed before the final two scenarios were added. Browser checks pass reviewed policy cancellation, unchanged approval-time stock, ten-lot dispatch with real reservation, future-policy changes preserving paid gear, reload and 320–1440px layouts; the 320px view was inspected. An actual process restart preserves paid cargo, cart custody and future policy exactly; reviewed recall then returns the same cart and survives reload. Catalog and client syntax validation pass. Final full-suite evidence is in implementation status.

This advances the M3/M6/M7/M8 transport loop and supersedes blanket claims that all live two-person cargo trips are fixed at sixty weight or that no physical transport upgrades exist. Roads, animal services, distance-specific wear, legacy haulage migration, wider trade/authority and the remaining M0–M8 gates stay open. The later handcart-maintenance section above implements service after each new used loan. See interface details and the full target plan.

Coordinated production staffing and recipes — September 21, 2026

City Production now provides a reviewed two-to-eight-producer plan within one chartered settlement. Players select completed producers, choose their whole-worker assignments and supported workshop recipes, inspect nominal material totals, and apply the complete change in one authoritative transaction. This can transfer already occupied workers between a mill, bakery and field or rebalance a kiln and smithy without requiring free workers for an intermediate assignment. Existing single-building controls remain available.

APPLY_PRODUCTION_PLAN requires the current world revision, current target revision and a separate revision for every selected structure. All structures must belong to the same authorized community, have a production recipe, be completed and have no building job. Rows cannot repeat, exceed staff capacity or exceed the settlement's actual net available labor. Unsupported recipes, stale structures, foreign property and invalid late rows reject the entire transaction. Ordinary character authority, catch-up, command receipts and rollback apply. A duplicate accepted command does not reassign workers or reset timers again.

Within the transaction, staffing decreases precede increases. Queued building crews and district work are scheduled only after all proposed assignments are in place, so they cannot take temporarily released workers halfway through the plan. Other workplaces, researchers, foragers, carriers and troops retain their assignments. A changed producer starts a full production cycle under the ordinary staffing/recipe rules; an unchanged selected producer retains its exact timer and revision. No inventory, seeds, production output or people are granted or reserved by applying a plan.

Existing production pauses, stock targets, cumulative input ceilings, spent materials and past receipts are preserved. Changing a recipe does not authorize a higher allowance or replace an incompatible target; such a producer stays blocked until its mandate is separately reviewed. Crop planting is still a separate paid order with its seed cost and growing timer. The first coordinated control has no automatic staffing governor, production priority ordering, cross-settlement authority or construction instructions.

The draft shows selected workers, net labor change and nominal gross input, gross output and net material quantities per cycle, scaled to proposed staffing. These standard recipe totals exclude unselected producers, soil bonuses, households, specialist upkeep and cargo. They assume the selected batches can run and do not prove a sustainable surplus: current inputs, service/land conditions, startup order, finite sources, storage and retained mandates still constrain actual work. Current operation is labeled separately from the proposed recipe. The review explicitly warns about food buffers and possible subsequent queued crews.

Drafts, focus and disclosure state survive ordinary refresh and cancelled review. Successful acknowledgment clears the matching draft, including recovered accepted receipts; consecutive edits start from refreshed authoritative assignments. No-change plans are disabled in the interface and rejected by the server. The applied result persists through ordinary structure settings and existing command receipts, so old saves require no additional ledger or migration and acquire no standing authorization.

Ten new tests pass, including fully occupied worker transfers, real grain refinement, rollback, per-structure/world revisions, duplicate replay, a separately founded foreign village, preserved spent limits and pauses, active building work, queued repair allocation and daily/offline equivalence. Browser checks verify nominal totals, cancellation without mutation, actual atomic staffing/recipe changes, consecutive edits, unchanged goods, no-op prevention, reset and 320–1440px layouts. The final 320px view was visually inspected. Actual server restart preserves staff, recipes, timers, policies, stocks and production history exactly; client syntax and catalog validation pass. The final broad-suite result is recorded in implementation status.

This delivers the first executable coordinated production plan in M3/M7 and supersedes earlier blanket statements that coordinated planning is absent. Forecasts accounting for every competing consumer, operating priorities, reusable automatic production instructions, complete warehouse flow accounting and the remaining M0–M8 gates stay open. See interface details and the full target plan.

Grain, milling and prepared food — September 21, 2026

The first food-processing chain is live: milling grain → flour → prepared food. Grain milling and baking is the nineteenth working technology and fourth agriculture topic. It requires learned Seed selection and Joinery, 88 food-production practice and an operational village commons. Research takes three village days and ten timber/eight food/one tool; adoption costs six timber/one tool, assigns one existing millwright and consumes one prepared food per day. Existing knowledge, specialist, research and manuscript rules apply. Older saves gain no learned topic, crops, buildings, supplies or people.

A Grain mill costs seventy timber/twenty food/two tools and ninety construction work; a Community bakery costs fifty timber/fifteen food/one tool and seventy work. Both require cleared eligible forest/field ground, an ordinary paid construction crew and active Grain milling and baking. Each has two production positions. The mill converts 16 grain into 12 flour; the bakery converts 12 flour and four logs into 48 prepared food per fully staffed batch. Partial staffing scales actual inputs and outputs. Inputs, storage, condition, crew work, production mandates and the millwright service can stop batches. Both buildings use the established semantic footprint/label presentation fallback pending bespoke artwork.

The researched Milling grain crop consumes the ordinary two-food seed payment and starts a full growing-day timer. Its fully staffed eight-worker field produces 32 grain at base yield with at least 0.45 moisture; soil and staffing apply normally. Four field workers can therefore supply one full mill and bakery at base yield. Selecting it replaces the field's direct prepared-food output. Construction time and the crop timer can put the first harvest after the next household check, so review explicitly requires a prepared-food buffer while the chain starts. Keep seed-keeping available; losing the millwright stops processing but does not erase an already planted grain crop or its ordinary harvest capability. The eight production workers plus required specialists are actual residents, not additional granted labor.

Prepared bakery output enters the existing food inventory used by households, specialists, reserves, travellers and troops. There is no separate bread stock or new ration conversion. Households use prepared food and existing gathered food first, then consume stored grain one-for-one for a remaining shortfall. This conditional fallback deducts real grain and records previous-day/cumulative grain meals; it never credits warehouse food. Flour does not supply this fallback. Grain remains outside prepared-food reserve floors, specialist upkeep, travel provisions and food-runway/admission stock checks. The later dated grain/flour extension above adds storage spoilage; diet diversity remains open.

Supply chains exposes each field crop as a separate source recipe, associates the actual planted field with its selected output, traces both processing stages and identifies household grain meals as conditional demand rather than a recurring rate. Production history validates and retains exact grain, flour, fuel and prepared-food receipts. A previous food stock target remains visible but blocks a newly selected grain crop until the player explicitly changes that mandate. Food capacity follows one potential staffed cycle in engine producer order using virtual intermediate stocks and actual input availability; shared inputs cannot fund two forecast batches. Missing fuel or service removes the promised bakery output. This is potential capacity, not guaranteed timing, storage clearance or future delivery.

Grain and flour are physical one-weight goods in owned-outpost delivery, collection and governor instructions. Twelve-unit manual offers require actual available stock. Cargo stays separate from local inventory until physical arrival and still requires prepared travel provisions. Shared automatic-logistics budgets now cover the complete manual outpost cargo catalog; omitted grain/flour ceilings remain zero, so existing budgets gain no permission to spend either. Bilateral player agreements now also support prepared food, grain and flour under the exact cargo and separately funded provision rules described above. The resource registry now contains 38 types, including the new technique's manuscript; catalog validation covers 29 buildings, 19 technologies and 16 workshop recipes.

Nine new scenarios cover paid research/construction/seed, actual refinement, service/fuel failures, emergency household meals, fractional staffing, storage blocks, mandate changes, migration boundaries, old saves, offline equivalence and real outpost carriage. Browser checks pass reviewed crop cancellation/funding, delayed harvest, source/refinement displays, actual receipts, dependent food capacity, specialist suspension, reload and 320–1440px layouts. The 320/390px views were visually inspected. Actual process restarts preserve both villages' inventory, paid seed, crop timer, receipts, staffing and suspended program exactly. Catalog and client syntax validation pass. Final full-suite evidence is recorded in the implementation status.

This advances M2/M3/M4 and supersedes earlier statements that grain processing is entirely proposed or that the current catalog contains eighteen technologies. The initial three-per-branch gate remains met. Broader recipes, coordinated planning, full warehouse accounting, transport/market extensions and remaining M0–M8 gates remain open. See interface details and the full target plan.

Recorded production and inspectable batch history — September 21, 2026

City Supply chains now distinguishes its existing potential production/demand figures from actual recorded workshop and crop batches. A chartered community with an active local Record keeping specialist retains its latest 120 completed production receipts across all resources. Each receipt captures the workshop, selected recipe/crop, actual staffing and capacity, building condition, effective soil yield factor, simulation time and exact goods consumed and produced. Recording happens after the engine has checked inputs, finite sources, production mandates and storage and has applied the real batch. Fractional staffed output and partial final extraction are recorded as actual quantities rather than replaced by a full catalog recipe.

Changing recipes, staffing, crops, soil condition or services does not rewrite past receipts. Paused, unstaffed, blocked and storage-limited workshops generate no completed-batch receipt. Without an active record keeper, production still follows its ordinary rules; a separate count discloses completed batches that lacked detailed records. Reactivating the scribe starts recording subsequent batches and never reconstructs the missing interval. Tracking begins with the first actual batch observed by this version. No research, inventory, production capacity, worker or resource grant comes from opening the history.

Selecting a resource filters retained receipts involving that input or output and reports their consumed, produced and net workshop contribution totals. These are sums of the displayed retained receipts, not time-based rates, complete warehouse movements or a prediction of sustainable surplus. Household food, specialist upkeep, foraging, forestry jobs, transport reservations/deliveries, construction, research and military crafting remain outside this production record. Empty history cannot prove zero production. Both omitted older receipts and batches without a scribe are disclosed. Totals remain distinct from current warehouse stock and the proposed full-staff recipe view.

The version-one ledger is private to the owning community and read-only through City projection. A capability marker distinguishes a missing current ledger from an older save, which gains an empty record book without retrospective receipts or changed stock. Restore validation checks settlement/building identity, bounded receipt sequence/counters, recorded times, supported recipes/crops, staff/condition/yield factors, exact scaled inputs and outputs, and finite extraction bounds. Quantities retain their precision in state; display formatting does not feed back into production. Historical catch-up uses simulation processing times and produces the same receipts and warehouse results as daily advancement.

The supply screen adds a collapsible history with totals first, full local dates, completeness information and individual material receipts. Controls link to the actual workshop, production management and Record keeping research. The existing resource selector, proposed-recipe mode, refresh behavior and disclosure preservation continue to work; changing view mode never converts recorded totals into a plan or executes an order.

Verification: 386 tests pass in the full focused gameplay suite, including seven production-history scenarios. They cover actual imported iron and locally burned charcoal refined by full/partial staffing, fixed historical recipes, record-keeper interruption/resumption, paused/input/storage-blocked production, private pure reads, old-save migration/corruption, daily/offline equivalence and explicit retention through more than 120 real harvest batches. Browser checks pass fractional tool receipts, source/plan selection, disclosure retention, read-only reload, reviewed scribe resumption without fabricated records and 320–1440px layouts. An actual server restart preserves inventories, all retained quantities/receipts/counters, the scribe program and workshop staffing/timing exactly. The narrow view was visually inspected; no browser errors or horizontal overflow occurred. Catalog validation passes.

This advances M3 measured production history. Coordinated production planning, complete warehouse flow accounting, broader materials/markets and all other outstanding M0–M8 gates remain open. It supersedes earlier blanket statements that measured production history is absent. See implementation status and interface details.

Funded automatic building repairs — September 21, 2026

City Orders now accepts an optional repair instruction for each standing building in an owned chartered community. The instruction fixes a 50–90% condition trigger, 0–24 additional idle workers, and cumulative whole-material ceilings of 0–10,000 each. Omitted materials have zero permission. Approval reserves no stock or people and changes no condition. An active Public accounting specialist is required to authorize/resume and to fund each subsequent repair. Pausing remains available without that service. The instruction is attached to the existing building identity and stays local to its community and owner.

At each village-day check, eligible buildings are considered from lowest condition upward, with building identity resolving ties. Existing building work and queued crews take priority. A new repair requires four genuinely available workers in addition to the configured idle-worker floor, a free building crew slot, contained fire across the footprint, no stationed tower garrison, and enough food to retain two household days above the protected reserve after paying five repair food. Current materials, daily public spending rules and all cumulative ceilings are rechecked before any deduction. A healthy building waits without spending; a ruined or cleared building reports that rebuilding or replacement requires a separate decision. These instructions add no new passive damage or wear rule.

The automatic order uses the ordinary repair implementation. Its material bill depends on actual damage and the original building recipe, with the current Joinery discount. It includes the existing optional tool and haulage support whenever that support is available, so these resources must also fit the authorized ceilings; limited funding never silently disables ordinary repair support. No inhabitants, resident livestock or work units are booked as material spending. Repair uses a real four-person crew, pauses the affected building's production and restores condition only upon completion. Building work, fire interruption, pause, cancellation and unused-material refund retain the existing job rules. Completion does not grant stock or extra population.

Every funded repair records its exact gross material commitment, including support, against the instruction and the paid job. Pausing, editing, cancellation refunds, later damage and destruction never reset this spending. Existing funded work continues when future funding is paused; Orders controls that work separately. Accepted instructions and paid repairs survive council succession, while new public edits remain subject to lawful character authority. Loss of accounting can require a manual repair of the institution that supports it; this authorization is not a way around failed local services. Land-maintenance checks precede building-maintenance checks on the same community day, and their ordinary crew commitments therefore compete normally.

The version-one ledger retains per-building ownership, thresholds, funding ceilings, gross spending, check times and twenty recent decisions. A separate capability marker prevents a missing current ledger from being treated as an old save. Older saves gain an empty instruction book without extra resources, retroactive charges or automatic repair authority. Restore validation checks the building/community/owner relationship, timing, material maps, the exact five-food-per-order total and live repair job payments/support. Ruined and cleared buildings retain instruction history without gaining permission to rebuild.

Orders presents collapsible per-building controls, conditions, exact current blockers, commitments and recent checks. Reviews explain delayed funding, food and workforce protection, production downtime, support costs and separate paid-work controls. Drafts, focused fields and open disclosures survive refresh; successful acknowledgments retain the authoritative edited values, including zero ceilings. Regional overview lists repair instructions and links blocked funding to local Orders; factual briefings report authorization and changed blockers or funded repairs.

Verification: 379 tests pass in the full focused gameplay suite, including eight new repair scenarios covering actual damage and repair, tool support, conservation, crew competition, cancellation/refunds, fire and resource boundary checks, ruins/rebuilding, ownership/revisions/replay, old-save migration/corruption, offline equivalence and council succession. Browser checks pass reviewed authorization/cancel, unchanged approval-time stock/condition, consecutive edits and retained zero ceilings, regional warnings, paused future instructions with retained funded work, reload and 320–1440px layouts. Actual process restarts preserve inventories, instruction terms/spending, building damage/staff and paid repair materials/crew/progress exactly. Reviewed resume then completes that same saved repair, restores condition and preserves inventories and gross spending. The narrow view was visually inspected; no browser exceptions or horizontal overflow occurred. Catalog validation passes.

This advances M5 recovery and M7 funded operations. General regional operating budgets, road upkeep, broader crisis recovery and all other outstanding M0–M8 gates remain open. It supersedes earlier statements that all automatic building repairs are still pending. See implementation status and interface details.

Finite recurring player trade — September 21, 2026

Differently owned home or registered local villages can now agree a bounded series of material exchanges in City Trade. A proposal fixes one outgoing and one different incoming material from timber, logs, tools, iron and bricks, with 1–40 units each, 2–6 rounds, a 1/2/3/7-day interval after each physical return, and a 7/14/30-day dispatch window after acceptance. A village day remains four real hours. Offers expire after three village days. The sender's proposal and recipient's separate acceptance authorize those exact terms; neither action reserves goods, assigns carriers or pays anything. The first funding check occurs one full sender village day after acceptance. Each village may have four unresolved recurring agreements.

Both villages need active Public accounting and Record keeping for acceptance and each fresh round. Every check requires current ownership, usable connected commons, caught-up communities, actual local goods, existing public budgets and food reserves, the sender's two available workers and its single shared caravan slot. Each complete shipment must fit the route and weight constraints. Quoted travel food is fixed per round; a changed provision requirement blocks the next round and calls for a newly negotiated agreement. Shortages or competing journeys reserve nothing, spend nothing and retry daily. Acceptance promises permission within finite bounds, not guaranteed completion or credit.

An automatic round uses the existing bilateral contract and physical caravan. Recipient payment is reserved in that recipient's warehouse; exports and travel rations leave the sender only when the whole dispatch can be funded. Goods exchange upon actual arrival, and payment reaches the sender's usable stock only after the return and successful unloading. A new round cannot start until that journey finishes and the agreed interval elapses. Gross sender commitments include every funded export and its rations; recipient commitments count every reserved payment. Returns, recalls and refunds do not replenish these agreed maxima. These bilateral limits are separate from the optional shared budget for owned outpost logistics.

Either participant can stop future rounds. Before exchange, a travelling round releases only its locally reserved recipient payment and physically recalls the sender's exports and carriers. After exchange, the collected payment continues home. A direct caravan recall also stops further automatic rounds. A stopped parent remains finishing until actual return, then becomes cancelled. Expiry has a different contract: the dispatch deadline prevents new spending while an already funded round continues its accepted exchange and return, even through fire delay or blocked unloading; after it finishes the parent becomes expired. With no outstanding journey, expiry closes immediately. Completing all authorized rounds within the window closes as completed. Accepted instructions and paid cargo survive council succession; fresh human orders still require lawful public authority.

The version-one schedule ledger records consent, immutable terms, offer/dispatch deadlines, next checks, gross spending and linked round receipts. A saved capability marker distinguishes older saves, which gain no recurring permission, from a missing current ledger, which rejects restoration. Validation checks owners, counts, exact costs, consent timing, intervals, child contracts and cargo custody. The latest one hundred closed parent agreements are retained globally with their linked round records; live parents and their children are retained. One-time trade cards exclude these child records to avoid duplicate decisions, while supply traces and physical caravan views retain their real cargo.

City Trade provides a collapsible proposal editor, reviewed bilateral maximum commitments, status/deadline/readiness cards, current cargo and payment custody, paid-round receipts and reviewed stop controls. Drafts and disclosure state survive refresh and cancelled review. Regional instructions, linked exceptions and settlement briefings expose invitations, blocked checks and funded travel without sharing private warehouses or authority. Cancellation text distinguishes returning original exports from an exchanged payment.

Verification: 371 tests pass in the full focused gameplay suite, including ten recurring-trade scenarios covering complete repeated exchanges, service/stock shortages without partial spending, either party's cancellation, exchanged-cargo custody, direct recall, offer and dispatch expiry, fire-delayed return after cutoff, competing schedules, authority/replay, old-save migration, malformed consent/costs and historical catch-up through succession. Two-account browser checks pass reviewed proposal/acceptance/cancellation, retained drafts, unchanged acceptance-time inventories, actual payment release and physical recall, reload and 320–1440px layouts. Actual process restarts preserve both inventories, terms, consent, spending, receipts and returning cargo exactly. The narrow cancelled-journey view was inspected, no browser exceptions or horizontal overflow occurred, and static catalog validation passes.

This advances M3 player logistics and begins the advanced-trade portion of M8. Broader goods and markets, transport upgrades, contract-law institutions, diplomacy, cross-region offices/authority, campaigns, major water engineering and all other outstanding milestone gates remain open. It supersedes earlier statements that all recurring player agreements and trade deadlines remain design-only. See implementation status and interface details.

Shared regional logistics ceilings — September 21, 2026

City Regional overview supports a reviewed shared logistics budget for automatic food-supply and governor-exchange routes and every load of an authorized exact outpost itinerary from one founding home. This adds combined control above each governor route's existing cumulative authorization. It does not pool inventories or turn a route permission into ownership of another warehouse. All currently supported manual outpost cargo materials have independently editable daily ceilings of 0–1,000; capped mode also uses total ceilings of 0–100,000, while daily-only mode has no shared lifetime stop. Omitted materials have zero allowance. Enabling a budget requires the active Regional institutions governor, public accountant and record keeper, including the staffed registry office required by those programs. Existing regions without this optional budget retain their previously accepted route behavior.

Every new governed or itinerary dispatch first quotes its actual route, local goods, reserves, storage and two available carriers, then checks the combined ceilings. The booked amount includes outgoing cargo, travel food, any selected draft feed and the goods reserved for collection at the outpost. Counts therefore describe gross authorized commitments, not net regional consumption: moving a log again is a new commitment even if it remains within the same region. No goods or workers are reserved when approving a budget or future itinerary loads. A shared-budget edit is rejected while a saved itinerary dispatch is already due but not yet simulated, so a new ceiling cannot govern an earlier departure retroactively; refresh after the pending check. An accepted dispatch books the exact commitment once and links it to the physical journey and original route instruction. A blocked proposal spends nothing and reports the relevant material, already committed amount, proposed cost and ceiling.

Daily allowance follows the founding home's existing four-real-hour village day. Unused daily allowance does not accumulate. In capped mode, renewal does not restore the total allowance; daily-only mode has no shared total ceiling. A saved itinerary that can fit its configured per-load daily ceiling but finds the remaining allowance spent stays pending until just after the next home-day boundary, then makes one ordinary physical dispatch attempt. Other automatic routes at that boundary keep their existing priority; if they consume the renewed allowance first, the itinerary waits another day without booking stock or a budget receipt. The full quoted shipment must fit; a shared cap does not silently alter an approved trip size or collection. Players can reduce that route's maximum cargo or deliberately raise the shared ceiling. At equal scheduled times, existing food-mandate checks precede governor-exchange checks; each category keeps its existing food-urgency/last-dispatch ordering. A three-community scenario proves one food dispatch can spend the shared daily allowance sufficiently to block a governor route until the next day without duplicating workers or stock.

Pausing the shared budget stops future automatic food, governor and itinerary departures. A new itinerary cannot start against a paused budget; a later load waits blocked until the owner reviews a budget change and retries that exact load. Paid journeys continue carrying the same goods, rations and residents. Resume and edits retain all gross lifetime commitments; same-day ceilings cannot be reduced below that day's spending. Switching from daily-only to capped mode requires total ceilings covering all prior commitments. Recalls, returned goods and cancellation refunds never replenish authorization. Independent manual owner-approved relief remains available, with normal physical and food-reserve checks. Household meals, local production, building/land work and single manual trips are outside this logistics budget; it is not yet a general regional treasury or wage/operating-cost system. Lost regional staffing blocks new shared-budget commitments; pausing remains possible without staff. Existing funded obligations and authorized bookkeeping persist through council succession, while fresh public edits still require lawful human authority.

The saved version-two ledger retains gross lifetime/current-day spending, forty recent dispatch receipts, timestamps and journey references; itinerary receipts use their own kind and active jobs retain both plan and budget identity. Projection is read-only, including daily rollover display. A separate saved capability marker distinguishes a genuinely older save from a missing new ledger; older saves gain an empty, unrestricted budget book with no retroactive charges. Malformed owners, material maps, ceilings, timing, counters, receipts and live journey links reject restoration. Version-one shared budgets migrate to capped mode without resetting spending; existing route budgets and shipments are not rewritten.

The regional screen uses a collapsible budget editor with actual daily/lifetime usage, a capped or daily-only period choice and per-material ceilings, next renewal and recent commitments. Review/cancel and focus/draft preservation follow the City command flow, with both target and world revisions. Regional instructions and route exceptions expose paused budgets, lost services and exact exhausted allowances. A factual briefing records budget authorization/pause. This advances M7 cross-settlement logistics management; broader operating budgets, appointments, rights, realm systems and other M0–M8 gates remain open. Verification: the 361-case focused suite passes, including seven shared-budget scenarios. The final fourteen budget/overview checks pass after the target-revision correction. Browser checks pass reviewed authorization/cancel, precise blockers, retained drafts through consecutive edits, pause/resume, no approval-time stock movement, preserved funded cargo and counters, reload and 320–1440px layouts. Actual server restarts preserve exact authorization, daily/total spending, dispatch history, separate warehouse inventories and physical cargo. Immediate acknowledgment drafts retain every material field, including zero ceilings. The narrow layout was visually inspected and static catalog validation passes. See implementation status and interface details.

Surveyed well access and maintained village growth — September 21, 2026

Registered local villages can now fund well headworks on their surveyed commons/source plot through City Land & water. The original woodland founding parcels begin with a recorded source limit of sixty units per village day; their starter camps access twelve. A later paid deeper-source survey for suitable founding homes, described at the top of this design, can separately verify one additional twelve-unit lens; it does not change these outpost headworks rules. Each completed extension accesses twelve additional units, to a maximum of four paid levels and sixty total. Released iron and clay parcels have a surveyed limit of twelve, so these works cannot increase their supply. No new groundwater yield, terrain, residents, territory or founding goods are invented. The settlement's original twelve-unit base access remains unchanged in its save; maintained extra delivery is recorded separately on the surveyed land plot.

An extension needs a registered local charter, developed operational commons at 65% condition, a free source plot, active local Irrigation, 24 timber, 18 bricks and two tools, and four actual workers for three village days. The ordinary construction queue stages lining, lifting/distribution works and verified sustained delivery. Existing delivery continues during work; no extra flow appears before completion. Local research still needs its real prerequisite learning, institutions and workers; materials must be produced or physically imported. Fire, lost specialist service or an unusable commons suspend paid work. Pause/resume/cancellation use existing active-work accounting and unused-material refunds. Destruction cancels unfinished works through the commons lifecycle without granting water or a refund windfall. Paid projects survive home succession under existing public-command authority rules.

Household drinking water has priority over crop channels. Each supplied channel still uses eight units, and household admission/care/regional warnings consume the same effective capacity. A demonstrated first extension supports an actual second four-person relocation from home: the developed settlement grows from twelve residents/eight civilian workers to sixteen/ten. People are deducted from home, travel with paid provisions and are admitted only after the existing housing, water, health, food and storage checks. Extra capacity itself grants nobody. One irrigated plot can then use the remaining eight units; a further household needs additional capacity or a different irrigation commitment.

All paid headworks share one condition value. They lose two condition per full village day; at 50% or higher they deliver the whole paid extension, and below 50% they deliver none of it. The baseline remains available only through usable commons/camp facilities. Drinking-water delivery is passive and does not require a continuously staffed water steward; new construction and repair do require that active program. Repair costs eight timber, four bricks and one tool, with four workers for one day, restoring the paid levels only at completion. This repairs access equipment, not the source's surveyed yield. Damage/evacuation retains the land investment, while a destroyed source building stops delivery. The existing paid reoccupation rules still govern rebuilding the camp; new extensions require restoring the developed commons first.

The existing daily land-maintenance instruction now includes headworks and a capped or renewing daily bricks allowance. An active public accountant and water steward, actual local materials, food above the protected reserve plus two days, four available workers and the chosen idle-worker floor are required at each new commitment. Older building crews take precedence. The most worn enabled improvement is considered first. Spent budgets are preserved through pauses, edits and cancellation refunds; inadequate allowances produce a visible blocker. Old soil/channel mandates without bricks remain valid and gain no authorization or material grant. Save validation checks level/source limits, local charter, timestamps, actual source structure, paid job references and the combined repair-spending ledger.

City Land & water distinguishes base access, current delivery, original surveyed limit, paid level and condition. Project review explains materials, stages, delayed benefits, household/crop competition and loss of extra flow through wear. The local-village card uses current effective water rather than repeating the old camp limit. Regional issues identify worn headworks and resulting household shortfalls. Soil and channel work still pauses harvest; well construction/repair preserves existing water service during the work. Bounded local drainage is now implemented above. Major river engineering, new-source discovery, downstream rights and the remaining M0–M8 gates remain open.

Verification: 354 tests pass in the full focused suite, including all nine new headworks scenarios, including actual workshop/research and traded/delivered materials, physical household growth, crop competition, the four-level source cap, an actual developed clay parcel's twelve-unit limit, wear/repair, bounded automatic maintenance, cancellation, authority, fire/succession, destruction, offline equivalence and malformed saves. Browser checks pass reviewed funding/cancel, actual stock and crew changes without early delivery, Orders pause/resume, reload, completed sixteen-person capacity, reviewed bricks allowances and automatic-maintenance pause/resume at 320–1440px. Actual server restarts preserve exact local inventories, residents, source limits, paid level/condition, survey, crew stage/payment/timing and maintenance authorization. The narrow maintenance screen was visually inspected; no horizontal overflow or browser exceptions occurred. Static catalog validation passes. This completes the bounded well-access delivery, not the overall implementation goal. See implementation status and interface details.

Developed local villages and retained charters — September 21, 2026

An established owned outpost can now become a registered local village through DEVELOP_LOCAL_VILLAGE. Authorization requires twelve actual residents including eight civilian workers, permanent housing and water for the present population, health at least 80, no latest food shortfall, staffed local field production covering daily needs, and an active local record keeper. Finite foraging is not a substitute for this production gate. The home must have an active registrar and staffed operational registry office. Pending incoming household journeys must finish before the resident community is registered. The existing camp must be operational at 65% condition or better and free of other work.

The project spends 120 timber, 30 food and two tools from the outpost's own warehouse, under its reserve and spending rules. Four actual local residents use the normal construction queue for three village days: extend foundations, build the commons/depot, verify facilities and registration. The existing camp remains usable during the addition, including its old housing, storage, water access and local record-keeping institution. It provides no new capacity during work. Orders supports normal pause/resume and cancellation with unused-material refunds and explicit overflow review.

Completion changes the existing camp structure into a village commons. Its housing capacity changes from eight to forty and storage from 400 to 1,400; those capacities replace the camp's values. Commons development alone retains the camp’s twelve-unit base water access, so housing alone cannot admit a larger population. The separate paid headworks described above can access spare surveyed yield. No residents, civilian workers, inventories, deposits, territory, founding grant or water source are created. The original regional title, home link, transport routes, supply mandates and administrative title count remain. A saved local charter records the owner, home, approving office, actual grant population, structure, first registration and completed restoration count. Settlement stage becomes village, but it remains linked to its original home and cannot sponsor additional outposts.

A registered local village with an operational commons at 65% condition may now participate in the existing five-material bilateral agreements with a different player's village. This extends the previous home-village-only scope. The same acceptance, reservation, paid carriers, physical exchange/return, private inventory, capacity and cancellation rules apply. Damage blocks new agreement authorizations until the commons is restored; already dispatched cargo and accepted obligations retain their custody and recovery rules.

Fire, loss of the local record keeper, an unusable camp, lost resident workforce or household hardship block paid development at stage checks. Recovery resumes the same funded job. Loss of the home office after authorization does not revoke its approval. Home succession preserves the paid local project while the existing command-authority rules block new human public orders. Destruction before completion removes the project through the normal destroyed-building lifecycle and grants no charter or refund windfall.

Legal registration survives later damage and evacuation. A usable retained commons can receive paid returning settlers. If the commons is destroyed or unusable, the existing reoccupation kit supplies only a basic camp: the structure returns to the camp definition and 400 storage, while the local charter history survives. A fresh paid development project, with its workforce/population/service gates, is required for larger facilities again. Ordinary repair/rebuild remains available while residents can staff it. A cleared original site follows the existing evacuation/reoccupation recovery path. The camp kit cannot restore the larger capacity for free, reset mineral depletion or erase retained goods; limited capacity may first require collecting stored goods.

City Frontier & charters exposes actual eligibility, reviewed local cost, workforce/time, stages, present job and charter history. Completed facilities read as operational rather than as a blocked repeat upgrade. Home site cards identify registered villages, and both funding/completion enter the saved local briefing. Existing building artwork follows the changed semantic definition only on completion. Earlier saves with ordinary camps remain unchanged; malformed project payments, stages, actor/office references and missing completed-charter records reject restoration.

Verification: 345 tests pass in the full focused suite; the final nine-case local-charter run also passes. The new scenarios build and staff the field/house, relocate a real household, research local records, build home registry support, harvest/refine timber and transport all supplies before funding. They cover three-stage completion, no early benefit/free residents/water, authority/reserves/services, paid cancellation, service interruption, actual local-village bilateral trade, offline equivalence, malformed saves, fire containment, succession, camp destruction, evacuation and paid basic-camp reoccupation. Browser checks verify reviewed funding/cancellation, actual paid work, Orders pause/resume, reload, completed capacities/trading access and 320–1440px layouts. Actual process restarts preserve the funded crew/payment/stage/timing and the completed charter/commons, with exact stock, population and water. Catalog validation passes.

This advances M6 from a supplied camp to a developed local charter. Larger water systems, local officeholders/membership, broader rights transfers, additional resource/geographic opportunities, regional operating budgets and the remaining M0–M8 work remain open. The full goal is not complete.

Bilateral material agreements and physical exchange — September 21, 2026

Two different players' founded home villages can now agree finite barter through City Trade. This first release supports timber, logs, tools, iron and bricks: one different material on each side, 1–40 whole units each, a walkable route of at most sixty hexes, and sixty carrying weight including paid food. A village can have at most eight unresolved agreements. Later additions above extend these agreements to developed local villages, material/equipment goods, manuscripts, prepared food, grain and flour, with separate finite recurring agreements. The monetary extension above now adds one-time player coin sales. Undeveloped outpost camps, credit, leases and broader legal enforcement remain outside this agreement type. Agreements confer no ownership, staffing or building authority over the other community.

Three commands separate consent from spending. PROPOSE_TRADE records fixed terms after checking present sender affordability and the route; it reserves no goods or workers. Only the recipient can issue ACCEPT_TRADE, which removes the exact payment from usable stock into a local reservation. Reserved goods still occupy that warehouse, so production and other orders cannot reuse their capacity. Public spending limits are checked/booked at reservation. The sender separately confirms DISPATCH_TRADE, rechecking exports, household food protection, spending rules, two available workers and current route conditions. It moves exports and paid rations into the existing caravan system. Payment remains physically at the recipient until collection, even though its reservation is recorded on the journey.

The sender uses its existing single carrying team and ordinary travel food/needs/labor accounting. Walking steps, known fire delays, scout reroutes, camp raids on provisions and storage waits follow existing caravan rules. Moving escorts support waystation routes and separately consented player-trade caravans. Player trade requires one-trip recipient military permission and appropriately scoped third-party passage; see the consented player-trade escort rules above. Arrival exchanges the exact materials only when recipient storage has room after releasing the payment reservation. Full storage holds the caravan at the recipient without transferring either side. Collected payment then travels home and becomes usable only as home storage accepts it. No NPC depot stock or treasury participates.

Either party may issue CANCEL_TRADE before exchange. Before dispatch this releases locally reserved payment; after dispatch it recalls the caravan and releases only the uncollected payment still at the recipient. Exports and remaining rations return physically. The sender's existing Recall caravan control has the same behavior. Once arrival exchange happens, cancellation cannot reverse it; funded return/unloading continues. Agreements have no automatic expiry in this release. Either party can close unresolved offers using its own authorized controls. Cancellation does not reset recorded spending allowances. Funded journeys survive succession; an account without current public office cannot issue new public orders.

The saved version-one contract book validates owners, terms, statuses, local reservations, exact outward/return material custody, exchange evidence, job links and recipient route endpoints. A marker in the logistics ledger distinguishes truly older saves from a missing contract book. Older saves gain an empty book without stock, workers or free exchanges. The latest one hundred closed contracts across the world are retained, with that bound stated in City; unresolved agreements remain until resolved. Existing receipt and world-revision checks guard replay and stale reviews.

City adds a proposal form with retained drafts/focus, reviewed recipient reservation, reviewed sender dispatch, either-party cancellation, and actual journey/status cards for both participants. Partner selection exposes village identities; agreement records are restricted to the viewed owned home. Other players' inventories and City commands remain private. Both communities receive saved factual briefings. Regional overview flags pending recipient decisions, accepted offers awaiting dispatch, and blocked incoming caravans. Local storage identifies trade reservations separately. Supply traces include incoming/outgoing agreement journeys without counting goods as usable stock or production.

Eight automated scenarios cover actual consent/delivery, competing reservations, authority and receipts, offer limits, reserve/worker protection, cancellation by either party, full warehouses at both ends, fire/offline progress, restoration/corruption, old-save migration, council continuity and recipient read models. The full focused suite passes 336 tests; a subsequent twenty-four-case trade/logistics/coin run verifies final custody checks. Separate-account browser checks pass proposal cancellation without spending, actual acceptance/storage reservation, reviewed dispatch without early credit, recipient cancellation, reload, private City denial and 320/390/640/1440px layouts. An actual server restart preserves both inventories, terms/reservations, caravan cargo/position/rations/timing and workers. Catalog validation passes.

This delivers the first M3 player barter agreement. Broader commodities, standing orders, deadlines, contract-law institutions, shared transport, regional markets, advanced realm trade and the rest of M0–M8 remain open. See implementation status and the full foundations plan.

Regional oversight and linked decisions — September 21, 2026

City now exposes a live Regional overview for the account’s home charter and retained outposts. It is the same account-scoped view when opened from any of those settlements. Existing ownership checks protect every included community; another account receives only its own network, and shared development City views expose no private regional payload. The projection does not advance simulation, change stock, acknowledge briefings, grant office or issue orders. Owning-account observers may inspect it during council stewardship under the existing read/command authority split.

Each settlement retains its own usable inventory, communal coins, available/assigned workers, health, permanent housing, ready temporary refuge, household water, food demand/potential balance, no-production cover, reserve, storage and next household check. Storage includes collection reservations exactly as in City, with reserved quantity identified separately. No stock or worker pool spans settlements. Potential output comes from the existing City/economy rules, remains subject to inputs, condition, policies, capacity and later changes, and excludes future deliveries. Overdue household processing is visibly marked as catch-up; reading does not process it.

The first issue set includes actual/recent food shortages, depleted local reserves, a negative current potential food balance, water/housing/health gaps, full storage, interrupted enabled services/research, staffed blocked producers, blocked paid land/building work, worn active land improvements, blocked upkeep/supply/governor instructions, inadequate regional administration and blocked district orders. District reporting now uses the same construction/material/support cost calculation as execution, including cumulative ceilings; waiting dependencies and deliberate plan pauses remain distinct from actionable blockers. Paused or target-held producers do not themselves create a producer exception. Ordinary queued work and travelling teams remain visible without being classified as blocked solely for waiting. Local food warnings remain based on actual local stocks and current potential output, independently of planned targets or promised deliveries.

Issues carry stable IDs, urgency, settlement and an actual City destination. A home-authorized supply issue also identifies its affected outpost, so filtering that outpost still reveals the relevant home decision. Controls open the exact settlement, plot and management tab through the ordinary read/navigation path. A regional click cannot issue a remote order or bypass review. The first 100 issues are retained in the response, with explicit omitted counts and full per-settlement severity counts; instruction cards retain twenty entries per settlement, active first, and disclose any further retained entries.

Instruction cards expose local producer, district and land-maintenance commitments plus home-authorized food/governor exchanges, with current status, exact spent amounts, total allowances and next check. The overview lists paid founder/reoccupation/relocation/evacuation journeys, outpost carriers, frontier caravans, surveys and military supply teams. Actual carried cargo, remotely reserved collection, rations and held coins are separate. Military supply includes its real food and replacement kits. Founder and household transfers are outside settlement population until admission or return; people already returned during storage-limited unloading are not counted twice. Militia and ordinary carriers remain in their recorded home population. Waystation household immigration stays in local People controls.

A journey’s next check is explicitly not an arrival promise. Current exhausted carried provisions trigger an urgent travel issue; old unmet-ration totals remain factual history rather than a permanent starvation alarm after recovery. Home unloading does not demand additional journey rations. Field militia with no current food is actionable; past hunger alone does not imply current starvation. Map links focus the actual journey hex while preserving its home management context.

City provides settlement/severity filters, local comparison cards, linked issues, expandable stock/instruction details and physical journeys. The phone layout keeps the opening concise, uses compact metrics and places counting rules in an expandable note. Filters, focus and open details survive ordinary rendering. Reading or navigating leaves local briefing cursors unchanged.

Verification includes seven new regional scenarios, plus assertions in the actual clay collection, military equipment delivery and district-ceiling scenarios. They compare all three actual community projections, prove pure reads and cross-account isolation, follow real founder/evacuation transfers, separate carried relief from usable stock, clear a food-shortage exception after the actual next meal, distinguish paused producers and work from missing inputs, preserve instruction allowances/authority links, mark catch-up and reject persistent warnings from past hunger. Browser checks cover three actual settlements, filters, outpost/home/issue navigation, journey map focus, unchanged inventories/unread counts through reload, separate-account denial and 320/390/640/1440px layouts. An actual process restart preserves all three local stocks/people, regional issues, unread counts, active supplies and routes exactly. The final full focused suite passes 328 tests; catalog validation also passes.

This advances M7 management through exceptions and makes existing recovery controls accessible across the network. It does not complete the full regional/realm gate: coordinated operating budgets, wider sustainable crisis recovery, officeholder delegation, broader trade/tenure, campaigns, diplomacy and major shared waterworks remain open. No realm sovereignty or shared stock authority is implied.

Funded recurring soil and irrigation maintenance — September 21, 2026

An owned surveyed plot with built soil or irrigation can now receive a saved maintenance instruction through SET_LAND_MAINTENANCE. The player chooses an enabled/paused state, a repair threshold from 50–90 condition, an idle-worker floor from 0–24 and capped timber/compost/tool allowances up to 10,000 each or renewing daily allowances up to 1,000 each. Authorization requires an active public accountant and changes no stock or workforce immediately. Past commitments survive changed thresholds, larger ceilings, pause/resume, retiring or rebuilding improvements and cancellation refunds. A paused instruction remains inspectable; pausing does not cancel paid work.

Each settlement checks its own instructions after its household-day update, using the historical check time during catch-up. A well due within three wear checks of losing extra water needed by residents goes before other due plots; remaining plots are considered from most worn, with cell ID as a deterministic tie-breaker. On a plot, the most worn eligible improvement goes first. Only enabled improvements at or below the threshold qualify. Fallow soil and disabled channels are skipped. Existing plot work waits without duplicate funding. New maintenance requires Public accounting and the relevant Crop rotation or Irrigation program, four available workers above the chosen idle floor, and a free building-crew slot without older queued building work. Current food must cover the reserve plus two household days, with a three-day minimum and no latest food shortfall. These checks prevent an automatic repair from immediately interrupting the last harvest without a buffer.

Accepted work uses the existing authoritative land-project path. Soil repair consumes two compost and two timber; channel repair consumes four timber and one tool. Both reserve a four-person crew for one full village day, pause any food plot on the site, progress through ordinary stages and change condition only at completion. Budget checks, actual stock, fire, rights and the existing project controls apply. No materials, water or workers are created. Only a ready project is committed; unavailable crews or materials produce a recorded exception and are reconsidered next day. Manual projects are outside the instruction ledger and still compete for the same people and stock.

The additive version-one maintenance ledger retains per-plot ownership, dates, settings, exact cumulative spending, order count and the last twenty checks. Restore validates supported costs, spending ceilings, order/cost arithmetic, ordered history and tagged live projects. Old saves receive an empty ledger and no automatic orders. Changes require caught-up settlement state. Historical checks use their actual daily timestamp, making ordinary and bounded offline operation equivalent. Existing authorized instructions and paid repairs continue under council stewardship after death; new human orders still require lawful embodied authority.

City Land & water exposes editable limits, current blockers, exact costs, next check, cumulative commitments and recent decisions. A review distinguishes authorization from later spending and explains harvest downtime, food/worker floors and pause/cancellation. Drafts survive cancellation and rendering; field focus and open decision history are retained through refresh. Paid repairs remain manageable in Orders. Saved briefings record new funded repairs and changed blocking reasons, without repeating unchanged daily exceptions.

Verification: 321 focused tests pass, including six maintenance scenarios, and the final six-case run also passes after adding explicit continued instruction funding under council stewardship. Tests exercise actual research/compost/soil work, paid repairs, no premature condition gain, stopped harvest, exact inputs/workers, allowance preservation after partial cancellation, accounting/steward/food/workforce/crew/material blockers, fallow/disabled-channel behavior, irrigation repair, daily/offline equivalence, old-save migration, corrupted ledger/job rejection, owner rights, receipt replay, catch-up edit rejection, fire and succession. Browser checks verify review/cancel/drafts, authorization without immediate spending, real funded work, pause retaining the job and spending, reload and 320/390/640/1440px layouts. An actual server restart preserves instruction, costs, job stages/timing/crew, land condition and inventory exactly. Catalog validation passes.

This extends M5 stewardship and M7 funded operations; it does not claim the whole regional-management gate. Each plot uses its own community stock and cumulative authorization. It does not automatically make compost, import replacements, maintain buildings/roads or coordinate a realm budget. Multi-settlement crisis recovery, larger terrain works and the remaining M0–M8 requirements remain open.

Regional clay extraction and brick supply — September 21, 2026

The released frontier now includes up to four versioned lowland parcels (lowland-v1), with four available in the default world. Each is seven actual forest/field hexes around a moist field center. A non-center field with moisture at least 0.5 and elevation at most 0.5 receives a bounded, authored shallow clay bed of 240 units; this follows the original Greywood clay scenario and does not reinterpret a generated metal-resource marker. At least two other field plots remain. The release excludes every base region, original woodland offer and version-one upland offer, including unclaimed ones; separate lowland parcels cannot overlap. Existing starting grants, iron deposits, parcel identities, terrain and saved ownership remain unchanged.

City offers the nearest two lowland and two upland survey opportunities alongside seven woodland choices. Unsurveyed offers reveal neither a deposit nor quantity. Only a returned physical survey identifies the clay bed. Surveying and charter registration grant no stock. Founder travel and completed camp assembly activate the finite deposit under the existing eight-resident/six-worker transfer, twelve-unit well and 400-unit camp storage rules. The site remains expansion-only and uses all existing rights, reservations, claims, physical travel and camp requirements.

A paid, cleared and staffed Clay pit extracts twelve clay per full three-worker cycle until the 240-unit bed is exhausted. Clay already has two-unit carrying weight: home carriers can reserve and collect actual stock, with ordinary food, labor, route, fire, recall, storage and arrival rules. Kind-specific City offers now distinguish Food for extracted clay / Collect extracted clay from iron orders. Bricks still require a separately built staffed kiln: eight carried clay plus three actual logs produce six bricks. No market restock, free clay, automatic refinery or remote inventory transfer was added.

The original frontier deposit provenance validation applies to both kinds: retained outpost/site/cell/kind/initial quantity must match, missing activated beds are invalid and quantities cannot exceed the original amount. Older saves gain only available survey opportunities, with no activated deposit, resources or people. Extraction honors final partial batches and actual storage. Exhaustion survives offline catch-up, evacuation and reoccupation; retained stock must be collected to make room for a new expedition. Shallow-site reclamation continues to use its existing paid survey, demolition, clearing and engineering requirements.

Verification: 315 focused tests pass, including five new clay scenarios. They exercise actual surveys, camp/field/pit construction, extraction, carried clay, paid kiln refinement, finite storage/partial extraction, foreign access/wrong extractor rejection, restored provenance, complete depletion, offline equivalence, purchased replacement tools, evacuation, retained-goods collection and paid reoccupation. Browser checks use actual prepared saves to verify survey/map detail, kind-specific review/cancel/dispatch, reserved clay with no early home grant, reload and 320/390/640/1440px layouts. An actual server restart preserves the active clay shipment, route, food, escrow and both inventories exactly. Catalog validation passes. The release is authored scenario geology, not a general geological generator; larger quarries, stone/mortar, broader producers and the remaining M0–M8 gates remain open.

Move an existing household to a developed outpost — September 21, 2026

A home village can now relocate four existing residents, including two unassigned civilian workers and two dependents, into one of its populated established outposts. This develops the existing regional population rather than drawing another cohort from the waystation or creating workers through housing. A reviewed relocation is separate from automatic waystation admission and can proceed while that policy is closed. The sponsor must retain at least eight residents and its named household, have health at least 80 and keep its record keeper operating. The destination must be owned through the existing home/outpost link and caught up before dispatch.

The destination needs four spare permanent housing places, water for the larger population, health at least 80, no latest food shortfall, and stored plus carried food covering its larger reserve with a minimum of three days. All planned arriving food must fit its actual storage. The ordinary camp has eight places and twelve water capacity; building a real Town house can therefore support one additional four-person household, bringing the camp to twelve residents and eight civilian workers. Further growth still needs sufficient real housing and water. This command grants neither an upgraded local charter nor a new well, territory or founding package.

The household carries 32 food for settlement plus rounded-up provisions for both walking legs and two days of delay. It has a 120-weight limit, uses the existing at-most-sixty-edge outpost route search and walks twelve hexes per village day. Home stock pays the entire order under its existing food reserve/budget rules. Acceptance subtracts the four people and two workers from home once and records their location as the physical journey. The destination receives no population, workers or food until actual arrival. The two workers are members of the household, not an additional carrier team.

Existing travel rules consume dedicated rations before food cargo, including during fire delays. Low return reserves cause physical withdrawal. Recall sends the same cohort and unused food home along its current route. One resident journey may target an outpost at a time; normal supply carriers remain independent. An existing waystation household journey blocks the relocation, and an outward relocation blocks further automatic waystation admission. This prevents the two systems from promising the same housing/water capacity simultaneously. Outpost evacuation already requires resident journeys to finish or return.

Arrival rechecks the populated established destination, permanent housing, water, health, food reserves, storage and competing resident journeys. Any failed check turns the household back with its food; it does not silently overfill housing or grant workers remotely. Successful admission adds the same four residents and two workers, delivers all remaining food and joins the destination's existing household-day clock. Community health combines the existing residents with the travellers' recorded departure health and actual unmet travel food. The existing local day is not reset. Continued food production or supply is still necessary for the larger population.

Returning residents rejoin home once, even if material storage is full. Undelivered food remains at the home hex, and the returned crew remains unavailable for other work until unloading fits. An age-known crew member who dies there stops occupying labor; the stored goods remain. Subsequent unloading cannot add the people again. Returning residents may exceed changed home housing, as with existing founder/evacuation recovery; that remains a visible needs problem rather than deleting residents. The transfer records actual eaten/delivered/returned food, and paid food equals the sum of its current custody and consumed food throughout travel and completion.

The existing outpost job format gains the settlers role and a tagged household-relocation transfer record, preserving older founders, reoccupation, evacuation and supply journeys. Restore validates the four/two cohort, owned link, unique destination journey, physical route/phase, return flag, recorded departure health and paid/carried/consumed/delivered/returned food balance. A travelling record cannot claim its people have already rejoined home. Old saves gain no residents, supplies or completed relocation. Paid movement survives council succession while new public commands continue to require lawful character authority.

Frontier & charters adds Move a household from home under each retained outpost, with current admission blockers and a reviewed workforce, food, route and recovery contract. Existing journey cards/map focus and recall controls show the actual travelling cohort; map labels identify a Relocating household. The saved return briefing records departure, actual admission or a turnback for each affected community. Automatic migration reports a pending household relocation as a blocker.

Verification: 310 tests pass in the full focused suite, followed by a passing six-scenario relocation run after tightening return-flag validation. Fixtures use actual surveys, charters, transported building supplies, house construction and paid resident travel. The six scenarios cover one-time source removal/destination arrival, retained named household and real food conservation, rejected duplicate/private/low-reserve/insufficient-workforce orders, housing/storage failure at arrival, physical recall and repeated full-store unloading, competition with waystation migration, receipt replay, older saves, malformed routes/cohorts/custody, fire consumption, stepped/offline equivalence and a declared illness-death succession boundary. A seven-worker foraging assignment is rejected before relocation and produces real food after admission and a full work interval; the initial check was corrected to respect that interval. Edge checks review cancellation/funding, actual food and population transfer, no premature destination grant, physical map position/recall/reload and 320/390/640/1440px layouts without exceptions or overflow. Narrow review/card screenshots were inspected. An actual isolated server restart preserves the returning cohort, complete route/position/transfer link, food custody and both communities' population/workforce/stocks exactly.

This advances M6–M7 regional growth and specialization. Full local village charters, broader housing/water development, transfers between other communities, wider tenure, larger institutions and all remaining M0–M8 gates remain open in the implementation ledger. The full goal remains active.

First-session guidance and durable return briefings — September 21, 2026

City Overview now offers a village-to-region guide backed by authoritative state and recorded actions. Eight linked steps cover food, a completed building, a returned delivery, learned and adopted knowledge, a trained militia, protection of a real activity, a land improvement and an established outpost carrying food. Each step opens the existing live management tab and explains the actual workers, inputs, time or institution involved. The first unmet step is suggested; the complete list remains inspectable. These are optional guidance checks with no resource reward, forced policy or substitute execution path. All spending still uses the ordinary reviewed commands.

Checks distinguish outcomes from intention. Funding construction does not count as completing it; training must actually finish; recalling a caravan does not count as returning imported goods. A camp must be cleared or actual protection/detour evidence must exist for the protection step. Current food readiness can fall after releasing field workers, and outpost readiness requires a currently established populated site with food. A built land improvement remains evidence that the project was completed, not a promise that its current maintenance is adequate. The existing warnings, supply views and current projects remain the source of current operating detail. The guide reports that older actions may predate its historical record; retained current knowledge, force, land and outpost state can still establish applicable steps. Outpost city screens use their own briefing without repeating the home village's introductory guide.

A version-one city-briefing ledger records selected real engine events for each affected chartered settlement. Its whitelist includes founding, completed/repaired/ruined buildings and salvage, daily food consumption/shortfall, household movement, learned/adopted/suspended techniques and copied books, completed caravans and raids, resolved military outcomes, tower route briefings, completed land projects, outpost establishment/reoccupation/evacuation/return, death/handover and fire start/containment. Summaries contain bounded text, the affected local cell, source event sequence, recorded timestamp and the relevant management destination. Ordinary production batches, travel steps and inspection are omitted. This is a selected event record, not a complete resource-flow or monetary archive.

Recording happens during the existing engine transaction after canonical event sequences are assigned and follows its normal durable save/rollback path. Linked home/outpost events are attributed to each affected community, with independent read positions. Each settlement retains forty entries; type counters and the count of actual successful imported deliveries retain the limited historical evidence used by the guide. When unread history has overflowed, the screen explicitly warns that earlier entries are no longer retained and directs the player to current conditions. Timestamp labels say Recorded: catch-up recording time is not presented as an exact historical deadline. Current job deadlines remain in the normal Orders/project views.

Opening, refreshing or reloading City never acknowledges a report and never mutates these records. Mark these changes as read explicitly advances the selected settlement's saved cursor through the currently reviewed event sequence, using the normal durable command receipt and revision checks. A stale report cannot swallow newer entries; retrying an earlier acknowledged command cannot swallow events appended later. Recent history stays available after acknowledgment. Read markers change no goods, people, jobs, budgets or appointments and do not run the public-order scheduling hooks. They remain available to the owning account during council interregnum without granting any public character authority. Another account cannot inspect or acknowledge the private charter report.

Older saves with no briefing ledger migrate to empty records at their existing event cursor, without inventing a retrospective narrative or changing stocks/people/work. An existing ledger with a missing settlement record is rejected rather than silently losing unread history. Restore validates version, ownership, baseline/read/drop cursors, bounded ordered sequences, destinations/local cells, text/time limits and finite event/delivery counts. Shared Greywood/Tidebreak development scenarios keep their prior behavior and receive no private charter briefing.

The Overview keeps existing Next decisions and current projects ahead of the history/guide. The briefing shows recent unread entries, expandable older retained entries and recent history; a read action states how many retained changes it marks. The guide shows one suggested next step and an expandable eight-step list. Existing live tabs remain available independently. No browser-local read marker can replace the persisted server cursor.

Verification: 304 tests pass in the full focused suite. Six new briefing scenarios cover pure repeated reads, actual build/research/import/training/patrol results, recalled-delivery exclusion, food-readiness regression, explicit acknowledgment, stale reviews, durable duplicate receipts, bounded overflow, neutral old-save migration, malformed records, private rights and an explicitly prepared illness-death boundary with observer acknowledgment but no public authority. The existing physical-outpost scenario now checks independently attributed/read home and outpost reports and the live expansion guide check. A final 29-test briefing/outpost/city run passes after hardening missing-record validation. Catalog validation passes. Edge checks fresh and developed saves, guide navigation, read/reload preservation, explicit marking, gap disclosure, retained older history and 320/390/640/1440px layouts without exceptions or overflow. Narrow briefing/guide views were inspected. Restarting the actual isolated server preserves the read cursor/time, retained history/gap state, guide evidence, inventory and militia exactly.

This advances the plan's first-session objectives and factual return briefing. Broader playtesting, richer aggregated regional/resource-flow reports, notification policies and the remaining M0–M8 requirements remain open in the implementation ledger. The full goal remains active.

Staffed watchtower garrisons and departure warnings — September 21, 2026

The original tower role stations existing trained militia at a built watchtower; the finite-fortification extension above now also accepts keeps/castles and longer walking routes wholly inside the registered village charter. The tower must be operational, at least 65 condition, free of structural work and staffed by at least one actual civilian lookout. A separate active Scouting specialist is required. Up to four surviving militia fit; five and six do not. Soldiers need no wounded members, at least 50 condition/morale and at most 40 fatigue before departure. Existing civilian tower assignments remain unchanged and never become soldiers automatically.

A reviewed one- or two-village-day order allocates rounded-up food for both actual walking legs, duty meals and one soldier-day of return reserve, less any provisions already carried. The existing four-day carrying limit, communal budget and protected household food reserve apply. The same mobilized residents physically walk from the commons to the tower; tower duty is fed from carried provisions through the normal resident travel-food ledger. Arrival starts the fixed duty deadline and a quarter-village-day preparation period. No useful route warning exists before that preparation completes. The unit receives no tower healing, refit, extra people or territorial rights.

While the actual garrison, lookout, scout and sound tower remain ready and supplied, newly dispatched frontier caravans may receive a route briefing around the already surveyed armed camp. This is a concrete warning benefit: bounded pathfinding excludes the known camp and fire/water cells, allows at most six extra walking hexes and 120 total edges, and gives the normal caravan quote the actual contiguous path. Rations, carrying capacity, duration and acceptance all use that path. Dispatch records a briefing in defense history; merely opening a quote creates none. If no detour is found, the review explicitly says the original path remains dangerous, and normal fire checks can still reject dispatch.

The garrison supplies no remote combat immunity. Previously dispatched caravans retain their original routes and can still be raided. An accepted detour remains a real paid path if the garrison subsequently leaves, but later scout fire-rerouting can lead back toward the camp; the unchanged actual crossing rules still apply. The camp remains at its original strength. Two militia can prepare useful warnings despite being too weak to defeat that camp. This is a bounded village lookout role, not a fort holding a contested regional point or a professional frontier army.

Recall ends future briefings immediately and returns the unit physically. Loss of tower/lookout/scout, fire at the unit, readiness below the guard thresholds, or provisions reaching the actual return path plus one day triggers withdrawal at the next military/needs check; projection denies warnings immediately when requirements fail. The fixed deadline cannot be extended by remaining food. Structural repair, demolition, salvage and rebuild wait until the assigned unit has actually returned home; staffing can still be released, causing withdrawal. Separate field supply and reinforcement wait until this local garrison is home. Unused food returns subject to real storage; full storage leaves it with the ready militia.

An optional version-one garrison record binds the existing militia to its owned tower and exact adjacent two-cell route, ordered duration, departure/arrival/preparation/deadline times, active or returning state and finite briefing count. Restore validates those links, phases and timing without granting new people or stock. Old saves have no garrison and retain ordinary tower staffing. The existing military save format accepts the additional garrisoned phase only with a valid record. Paid defensive movement/duty survives council succession; it is excluded from the offensive-patrol recall rule while new public commands still require lawful character authority.

City provides a Fortification garrison card with actual tower options, preparation/readiness, duty limits, briefing count and reviewed costs/recall. Trade reviews show route warnings and their limits. Map markers label an active Fortification garrison and continue to locate its actual hex. Scouting describes this live capability. No new building, terrain or art asset is required.

Verification: the full focused suite passed 297 tests with six initial garrison scenarios; a final focused run passed all seven garrison scenarios after adding real two-member duty, six-member capacity rejection and an explicitly blocked depot-approach boundary. Together this verifies 298 distinct focused scenarios. Actual construction, staffing, research, imports, kit crafting and recruitment precede deployment. Cases cover paid walking/preparation/detours, unchanged camp and populations, no protection for existing caravans, lookout/scout/fire/readiness/reserve interruption, physical recall, structural-work exclusion, full-store provisions, ownership/receipts/reserves, malformed save records, unchanged older saves, stepped/offline equivalence and a declared illness-death succession boundary. Catalog validation passes. Edge checks review/cancel/fund, real food, no premature arrival, prepared watch, reviewed and accepted actual detour, map focus, recall/reload and 320/390/640/1440px layouts without overflow/exceptions. Narrow review/card screenshots were inspected. Restarting the actual isolated server preserves the tower link, arrival/preparation/deadline/briefing ledger, physical returning position, both ration stocks, paid caravan detour, cargo/escrow and home food exactly.

This advances M5's garrison and warning loop. Fort combat and broader campaigns remain open; keeps/castles, finite allied watches, standing owned-outpost orders, paid forces and hosted campaign depots are delivered by the later specifications above. All remaining M0–M8 acceptance work is tracked in the implementation ledger. The full goal remains active.

Moving escorts for actual frontier caravans — September 21, 2026

A ready, trained militia with an active scout can now accompany its settlement's actual frontier caravan. The player first dispatches the paid caravan, then reviews Escort caravan while both groups remain at home before its first walking step. A caravan already in the field cannot acquire an escort remotely. The militia must have no wounded members, at least 50 equipment condition and morale, and fatigue at most 40. Two/four/six existing soldiers remain mobilized; no extra soldiers or carriers are created. The same moving-escort mechanism now also supports an owned player-trade caravan with separate recipient and third-party permission, as specified above. Foreign-owned caravans and outpost supply routes remain outside this command.

The militia commits its own food: rounded-up consumption for both walking legs plus one soldier-day of delay reserve, subtracting any existing carried provisions. Total provisions must fit the unit's existing four-day capacity and preserve household food reserves. Routes exceeding this range are unavailable. Soldiers and caravan carriers continue their separate real food accounting. Trade cargo, reservations, money and physical arrival rules remain unchanged. The camp is not attacked or cleared by an escort.

The caravan leads actual adjacent walking steps; the attached militia occupies the same canonical hex and follows both outbound and return legs. Its independent needs checks consume food while waiting but do not advance it ahead of the convoy. Each walking step adds two fatigue, and every third route index costs one equipment condition, matching patrol movement. Protection is checked at the actual observed camp crossing: the attached unit must be present on that hex, have sufficient fighting strength/readiness and retain food for the current return path plus half a day. Each protected direction costs a further two condition and four fatigue. An outward-protected trip has no automatic immunity on its return. A weak two-person detachment can accompany a caravan but does not deter the stronger observed camp; review reports that limitation.

Fire holds both groups unless the existing scout finds a legal adjacent detour. Detour routes update the paired positions without skipped hexes; longer travel consumes the same finite provisions. Depot capacity is checked before the final arrival step so a full depot holds both groups together rather than moving one and rolling back the other. The original per-phase caravan theft and fixed-post guard rules remain available; the moving escort adds protection only for its own linked caravan.

Recall militia detaches it and sends it home physically along its current route; the caravan continues independently and loses escort protection immediately. Recall the outward caravan instead and both return together. Low escort provisions, fatigue at least 80, or equipment/morale below 50 trigger independent withdrawal. There is no indefinite escort guarantee, remote immunity or time extension. At home the militia resumes its normal recovery clock and returns unused food subject to storage; full storage retains its provisions, while the carrying team independently retains cargo until unloading fits. Separate field-supply rendezvous and reinforcement are unavailable until the escort returns home. Broader escorted resupply remains future work.

The optional version-one escort record binds the existing militia to its own actual caravan, assignment time, active/withdrawing state and bounded protected-passage count. An active record requires matching contiguous land route and current route index; an independently returning record retains its last valid route. Missing links, mismatched positions, malformed routes/states or impossible passage counters reject restoration. Old units/caravans without an escort remain unchanged. Paid defensive convoy protection survives council succession; it is not treated as a new offensive patrol order. Existing public-authority restrictions still apply after death.

Defense & patrol → Moving convoy escort shows eligibility, real food cost, route duration, known risk, linked caravan and actual crossings protected. Review explains recall, reserve withdrawal, readiness wear and broader limits. Map markers label the moving unit as Convoy escort, and militia map focus retains its home management context. The ordinary recall action explicitly explains when a caravan will continue unprotected. Scouting now describes this live capability alongside detours.

Verification: 291 tests pass in the full focused gameplay suite. Seven escort scenarios use actual research, imports, kit crafting, recruitment and paid caravans. They cover both protected legs with unchanged camp strength, finite troop/food/goods transfers, independent and joint recall, weak-force failure to protect, explicit fire delay and reserve withdrawal, actual scout detours/co-location, ownership/home-departure/receipts, malformed persistence and equivalent stepped/offline results. Explicit full-depot/full-home-store boundaries verify no movement rollback separation, retained cargo/provisions and recovery. A declared critical-illness succession boundary verifies retained defensive work. Headless Edge checks reviewed cancellation/assignment, paid food, paired position/reload, field map focus, independent physical recall and 320/390/640/1440px layouts without exceptions/overflow. Narrow review/card views were inspected. Restarting the actual isolated server preserves the paid escort link, paired routes/positions, both ration stocks, trade cargo/escrow and spent home food exactly.

This delivers the first moving escort role for M5. Fort garrisons, allied/outpost or contracted escorts, forward depots, field reinforcement, professional forces, broader threats and M8 campaigns remain open in the implementation ledger. The full M0–M8 objective remains active.

Reinforce an existing militia at home — September 21, 2026

A trained militia can add existing civilian residents to reach two, four or six members, keeping its unit identity and veterans. This includes one-, three- and five-person surviving cohorts under the field-casualty rules above. The unit must be ready at its home hex. Active Drill and an operational commons are required, along with one already crafted militia kit for each recruit. Recruitment requires healthy, unassigned civilians after accounting for the reduced workforce; named household civilians remain protected. This extends the recruitment/demobilization loop without requiring the old unit to be disbanded. It is home reinforcement; there is no new field march, remote recruitment or professional reinforcement network.

Acceptance commits the actual kits, removes the new residents from civilian labor, adds them to the same mobilized cohort and starts two full village days of training. Population and dependent counts stay unchanged. The whole unit remains home and cannot patrol, guard, refit, demobilize or start another recruitment order while reinforcement is pending. Household meals still feed every resident exactly once. Missing commons, Drill instructor or household food pauses progress at the next training check without refunds or free completion.

Veteran wounds, morale and fatigue retain their previous values during reinforcement. Equipment condition becomes the weighted value of the worn veteran sets and the new paid sets at 100 condition. This is real new gear entering the unit, not a repair of the veteran equipment. Training completion does not heal wounds or clear fatigue; existing full-day home recovery and refitting remain separate subsequent steps. Completed training removes the pending record, keeps the same unit identity and history, and records the number of trained additions. The legacy-policy tests include a genuinely wounded two-person patrol returning from its accepted nonfatal encounter, reinforcing to four, recovering normally and deploying again, plus a two-to-six case followed by demobilization with conserved residents and usable kits.

Cancel militia reinforcement is available before completion, including while the training is blocked. It returns only the pending recruits to civilian work and their complete, unworn kits to local stock, restores the recorded veteran size/condition/readiness and schedules a fresh full home-recovery day. Their partial training progress is not retained. Storage must hold every returned kit; otherwise the entire command rejects without releasing people or partially returning/discarding gear. The original veteran equipment and injuries never become refundable new equipment. Ordinary whole-unit demobilization remains available after completion and normal wound recovery.

The optional version-one reinforcement record stores its actual paid kit count, recruits, prior veteran cohort and readiness, start time and zero/one completed training day. Restore validates the supported combined size, mobilization/population constraints, kit count, retained injuries/readiness and weighted equipment condition. The record is legal only in the reinforcement phase; missing or contradictory cohort records reject restoration. Old units and saves without reinforcement remain unchanged. Funded training survives the existing succession boundary under lawful council stewardship; departed/deceased authority cannot cancel it or issue new military orders.

Defense & patrol → Reinforce this militia at home shows the actual civilian shortfalls to two/four/six with blockers, resulting civilian workforce and combined equipment condition. Reviewed acceptance shows kits, population transfer, two-day training, retained wounds and cancellation terms. Pending cards show completed training days and a reviewed cancellation action. The existing People/Workers mobilization ledger and Orders/Defense link use the updated real cohort. Drill's effect description now includes this live choice.

Verification: 284 tests pass in the full focused gameplay suite. Six reinforcement scenarios cover actual kits/imports and wounded-veteran growth, two-day completion and later redeployment, two-to-six recruitment and usable demobilization refunds, atomic full-store cancellation, instructor/commons loss and paid repair, an explicit food-shortfall boundary, daily/offline equivalence, ownership/stock/quantity/health/receipt checks, unchanged legacy units and corrupted cohort rejection. The succession case uses the established critical-illness death boundary explicitly rather than claiming a full new demographic history. Headless Edge checks real worn veterans and spare kits, review cancellation, paid workforce/kit transfer, no premature healing or training, reload, partially trained cancellation and 320/390/640/1440px layouts without exceptions or overflow. Narrow review and progress views were inspected. Restarting the actual isolated server preserves pending recruits/progress/time, veteran wear/wounds/readiness, kit stock and resident/civilian/mobilized counts exactly.

This advances the M5 recruitment loop. Field reinforcement journeys, fort garrisons, broader escort contracts, professional troops, wages/mortality, forward depots, campaigns and the remaining M0–M8 requirements remain open in the implementation ledger.

Physical militia equipment resupply — September 21, 2026

Field logistics now carries actual crafted militia kits alongside food. The unchanged quartermaster, operational home storehouse, two civilian carriers, legal surveyed route, food reserve and held rendezvous requirements apply. The supply command optionally accepts whole kits from zero through the unit's soldier count; a kit-bearing order may carry zero soldier-food, but still pays carrier rations. Kits must already exist in local stock and each uses two carrying weight. Food, carrier provisions and kits together cannot exceed sixty weight. An unworn unit cannot request replacement equipment. New kits are still made by the existing paid two-worker, full-day crafting process from two timber and one iron each.

Dispatch removes kits from local stock into the physical carrier ledger; it does not improve the unit remotely. At actual rendezvous arrival, while the unit is still waiting at that same hex, complete delivered kits replace worn equipment. A kit restores up to one soldier's share of equipment condition: 100 divided by the soldier count. Use at most the whole kits needed to reach 100 condition; a partially worn replaced set yields no salvage. Replacement happens at the arrival travel check, representing exchange of finished gear rather than workshop repair. Home refitting still consumes its existing raw materials and takes a full village day. Field kit replacement does not heal wounds, restore morale/fatigue, add people, extend a guard deadline or guarantee continued protection if other readiness checks fail.

Unused kits remain with the carriers and return on foot with excess food. Recall, lost rendezvous, guard expiry, food withdrawal and fire preserve the same physical return behavior. Full home storage retains kits and both carriers. Food may use fractional free storage; an indivisible kit unloads only when at least one whole storage unit is free. Accepted deliveries continue if the quartermaster later stops. Kit custody is accounted separately from consumed rations; carriers never eat, discard or turn kits into fractional inventory. A completed replacement writes a concise military history/event with actual kits used and condition restored.

Food-only supply journeys retain version one unchanged. Kit-bearing journeys use supply version two and a version-one equipment record containing paid, carried, fitted and returned whole kits, the supported unit size, and actual condition restored. Paid kits must equal carried + fitted + returned; initial combined cargo must meet capacity, outward trips cannot have delivered/returned kits, and restored condition must agree with fitted-kit bounds. Missing equipment records, incompatible versions, fractional/inflated custody or impossible payment stages reject restoration. Old food journeys, troop records, existing kit stock and training remain untouched; no migration grants gear.

Defense & patrol → Field resupply retains its food action and adds a reviewed equipment delivery using the currently needed replacement kits plus two soldier-days of food. Review shows real stock commitment, sixty-weight usage, possible condition restoration, whole-kit replacement/waste and unchanged troop/duty limits. Active cards show kits carried, fitted, returned and actual condition restored. Material supply-chain shipments include carried kits outside local stock. Existing map location, recall, worker ledger and durable order flows apply.

Verification: 278 tests pass in the full focused gameplay suite. Five equipment scenarios use actual imports/crafting, a genuinely worn patrol/guard, paid dispatch, physical arrival and surplus return. They verify unchanged people/wounds/morale/fatigue/deadline, no remote fitting, whole-kit handling at an explicitly prepared fractional/full-store boundary, receipts, authority, stock/quantity restrictions, corrupted custody rejection, unchanged old food saves, fire interruption and equivalent daily/offline movement and inventory. Headless Edge checks the actual worn guard and crafted stock, review cancellation, paid reservation without premature repair, reload, delivered/returning surplus and 320/390/640/1440px layouts without exceptions/overflow. Narrow review and delivery views were inspected. Restarting the actual isolated server preserves carried kits, paid food, route, unit condition/rendezvous, local kit stock and guard deadline exactly.

This delivers basic field equipment replacement within M5's supply loop. Forward depots, field reinforcement journeys, fort garrisons, broader escort contracts, advanced unit equipment/ammunition, wages, mortality and campaigns remain open. The full M0–M8 objective stays active in the implementation ledger.

Reclamation of exhausted shallow extraction sites — September 21, 2026

Worked mineral ground now has a persistent consequence for future construction in charter settlements. A deposit whose remaining amount is below its original quantity identifies disturbed extraction ground. New non-extraction footprints cannot include that ground until it is reclaimed; a compatible extractor may continue working its actual remaining seam. Soil preparation and new irrigation cannot bypass reclamation. This uses the existing depletion ledger rather than changing immutable terrain or creating a second ore balance. Existing accepted structures and funded orders retain their previous use, including older saves with no reclamation record. Shared development scenarios retain their existing construction rules.

Reclaim exhausted extraction ground requires a recorded local land survey, an exhausted deposit, adopted and staffed Crop rotation/soil stewardship, no remaining building or ruin, no old soil/channel improvements, cleared vegetation and no fire. The released project supports shallow field/woodland substrate only, elevation at most 0.68 and moisture from 0.30 through 0.85. It does not fill underground workings or convert mountains, wetlands or arbitrary slopes. Steep-site engineering, drainage and terraces remain separate unfinished work.

The project commits eight compost, twelve timber, eight bricks and one tool, plus an actual four-person building/land crew for four village days. Its four stages regrade retained local spoil, stabilize shallow edges, apply organic soil and verify the ground. Retained spoil is represented by this bounded work scope, not by a new tradable fill resource or a claim of volumetric excavation simulation. Materials enter the existing paid-work ledger; queues, crew competition, specialist loss, fire, pause/resume and unused-material cancellation apply. Demolition/salvage and research still require their own real supplies and workers. Completion alone records version-one reclamation and prepared soil; intermediate stages grant no building or food benefit.

Reclamation clears the construction restriction and provides the same maintained soil behavior as existing preparation: 100 initial condition, 10% potential harvest bonus and 0.03 moisture retention while sound; condition wears two per village day, fallow restores five, and normal paid maintenance applies. It grants no building, food, people, mineral stock or water source. A new farm must still be built, supplied and staffed. Retiring the soil removes its fertility benefit and effective conversion but retains the completed stabilization record. Minerals remain exactly exhausted through completion, wear, retirement, restore and later construction. A completion record binds to the surveyed plot, original deposit kind/quantity and zero remaining minerals; contradictory provenance or a live seam rejects restoration. Active restoration orders also require exhausted, unrestored ground.

Outpost carrying teams can now transport compost at one weight per unit in either direction, under unchanged sixty-weight/ration/escrow/storage rules. Mineral outpost cards offer a reviewed reclamation-material delivery containing the exact project bill. Additional research, demolition, salvage, food and new-building supplies are separate trips. Governors' existing selectable cargo list is unchanged; recurring compost mandates remain future work. This enables home compost production and finite brick/tool imports to support an exhausted regional mine's transition to food production.

Land & water shows remaining/original minerals, whether extraction has disturbed the ground, and completed reclamation. It explains retained old uses, required demolition/salvage, permanent depletion and shallow-site limits. Project cards and review expose stages, cost, crew, timing, before/after food potential and terrain-compatible building categories; ordinary footprint, shoreline, cover, technology and material requirements still apply. The review explicitly distinguishes those remaining requirements. Map geography remains immutable; restored effective soil uses the existing land-state projection and prepared-ground behavior.

Verification: 273 tests pass in the full focused gameplay suite. Five reclamation scenarios execute actual survey/founding/mining through full 210-unit depletion, real compost creation and brick/tool imports, physical regional material delivery, paid demolition/salvage, actual research/adoption, four-stage restoration and a new staffed field with positive food balance. They also cover partial-work refunds without land benefits, service/fire interruption with paid containment, equivalent daily/offline completion, ownership, accepted-command replay, an explicitly prepared live-seam rejection boundary, corrupt completion records, soil wear/fallow/retirement without mineral recovery and neutral preservation of an older accepted field. Browser checks against saves generated by those actual workflows verify exhausted/completed status, review cancellation, real paid crew orders without premature benefit, reload and 320/390/640/1440px layouts without exceptions/overflow. Narrow review and completed-ground views were inspected. Restarting the actual isolated server preserves paid stage, timing, crew, inventory, survey and exhausted seam exactly.

This extends M5 land projects and the M3/M6 regional resource lifecycle. Broader extraction ecology, deep/steep-site reclamation, drainage, terraces, downstream impacts and the remaining M0–M8 requirements stay open in the implementation ledger.

Finite funded market and communal coin treasuries — September 21, 2026

The frontier waystation now offers a bounded coin market alongside its existing barter and migration-relief deliveries. A single 1,200-coin NPC operating fund is created once per world, with no settlement cash grant. Coins are a separate monetary ledger, not material inventory, warehouse volume, work, or population. Each charter settlement keeps its own communal balance. Prices are posted per lot: sell one log for one coin, one timber for two coins or one preserved fish for three coins; buy one log for one coin, one timber for two coins, one tool for eight coins, one iron for four coins, or one brick for one coin. Logs and timber for purchase must first reach the depot from actual deliveries, as described above. Imports use the same finite depot stock as barter and personal exchanges. No automatic goods restocking or monetary refill occurs; actual player purchases return coins to the NPC fund.

All offers use the existing physical caravan command and its two workers, sixty carrying weight, actual route, allocated food, reserve and timber-budget checks, finite storage and one-team limit. At acceptance, a sale reserves the NPC's actual payment and removes the real export goods from local stock. A purchase removes actual communal coins and reserves real depot imports. Outward travel cannot make sale income spendable or purchase goods available at home. At the waystation a sale deposits its goods and sends the reserved proceeds home; a purchase pays the NPC and collects its reserved goods. At home, coins are credited exactly once, independently of material warehouse space; goods and workers still obey normal unloading rules.

An outward sale recall releases the NPC payment reservation immediately, while undelivered exports travel home. An outward purchase recall restores the depot's reserved imports, while the team's coins travel home before becoming spendable again. Fire and ration shortages retain ordinary movement/needs behavior. Full home storage may hold remaining goods and their team after a single coin credit. Durable accepted-command receipts, chronological offline replay and restoration cannot repeat that credit. These are communal funds: succession leaves them with the settlement and lawful steward. Already paid trade continues through interregnum, while deceased or unappointed characters cannot issue new public spending orders. Personal careers do not receive this treasury or a personal coin wallet.

Version-one market state records the fixed endowment, available NPC fund and balances. A matching logistics marker distinguishes pre-market saves from missing persisted funding. Pre-market saves receive the finite NPC fund once with zero communal balances, without changing existing goods or barter journeys. Existing market saves require the marker and ledger. Active market orders validate posted price/quantity, direction, exchange/recall/payment stage and their goods contract. Available NPC coins + all communal balances + all held order coins must equal exactly 1,200. Missing funding, inflation, unsupported amounts or contradictory cargo/payment stages reject restoration. Catalog validation checks all eight current posted offers, legal material/weight references, one-sided sale/purchase contracts and positive integer prices. Food sales remain disallowed until partial-delivery pricing can account for carriers eating exported food.

Trade & transport shows the settlement treasury, shared available NPC fund, per-lot prices, eligibility/blockers, reviewed coin commitments, active held/credited payments and completed payment history. Review explains recall timing and communal ownership. Existing barter remains available. Coins are intentionally absent from the material supply-chain graph; the current graph continues to describe material production and barter sources, while coin-funded offers appear in Trade.

Verification: 268 tests pass in the full focused gameplay suite, and the standalone catalog validator passes. Seven market scenarios execute real timber sales and subsequent purchases, both recall paths, full-storage exactly-once credit, competition for an explicitly bounded NPC fund, private spending authority, old-save migration/corrupt ledger rejection, accepted-command replay, fire interruption, daily/offline equivalence and an actual needs-driven succession crisis followed by paid sale completion. One additional catalog scenario rejects malformed market content. Headless Edge checks fresh and actually earned treasuries, disabled unaffordable purchases, sale/purchase review cancellation, paid purchase escrow without immediate delivery, reload and 320/390/640/1440px layouts without exceptions or overflow. Narrow review and treasury screens were visually inspected. Restarting the actual isolated server preserves communal/NPC balances, held payment, route progress, inventory and import reservations exactly.

This advances M3's funded-market gate. Player contracts, dynamic pricing, autonomous regional market production, wages/taxes, personal money/inheritance, road/vehicle capacity and broader economy balancing remain open. The full M0–M8 objective remains active in the implementation ledger.

Surveyed mineral outposts and regional ore transport — September 21, 2026

Expansion now includes bounded resource-survey parcels alongside the original woodland frontier. The versioned upland-v1 release searches within fifty-five hexes of the active Greywood anchor, uses existing generated resource features on mine-compatible land, and excludes all original founding parcels, development regions and overlapping new parcels. It admits at most six seven-hex parcels with a moist field anchor, another usable field and only fields/forest/mountain terrain with no represented settlement/customary feature. The current default world yields five parcels. This is an explicit scenario release; it does not authorize arbitrary atlas claims or redefine generated geography. The original woodland start offers and IDs remain unchanged, and resource parcels cannot award a founding grant.

City retains its seven nearest woodland opportunities and adds the two nearest available resource-survey opportunities. Exact seam location, mineral type and quantity appear in the private report only after two paid surveyors finish their on-site work and physically bring the report home. The existing report age, scribe, conditional charter, reservation, founder, route, rights and population-transfer rules apply. The bounded geological scenario classifies one existing generic resource outcrop as iron, as the Greywood scenario already does; this is not a new geologic simulation. Before actual camp completion there is no mutable deposit or mineral stock. On completion, the recorded geological scenario activates one 210-unit iron-ore seam at the actual generated resource hex, separately from the unchanged carried camp supplies. The camp still contains only the eight transferred residents, six civilian workers, twelve daily water units and four-hundred-unit storage. These parcels may have no woodland, making imported building timber/fuel a real dependency.

A normal paid iron mine, legal clearing where needed and actual staff extract the seam using the existing recipe: at most seven ore per village day with four workers. The seam decreases by exactly the credited extraction and never regenerates. Two other workers can staff a suitable food plot for eleven food per day, enough for the eight residents when maintained. The executed journey constructs and staffs both buildings from transported home supplies. Survey and charter alone cannot manufacture mine output, residents or inventory.

Outpost cargo now accepts iron ore and clay at two weight per unit, and charcoal at one, in either direction. The ordinary sixty-weight, two-carrier, food-reserve, storage, escrow, route/fire/recall and physical-arrival rules remain authoritative. City adds reviewed ore collection and food-for-ore trips; local clay/charcoal collection appears when that stock exists. Regional governors can select the same materials under their existing staff requirements and cumulative per-material allowances. No NPC ore buyer or free import was added. The command-only integration actually extracts ore, reserves it at the outpost, carries it home and consumes it with charcoal in a smithy to make iron and tools.

Production now caps finite extraction to remaining deposit/renewable stock before checking warehouse space. A final 1.5-unit seam can therefore fill two free storage units even though its nominal batch is seven; completely full storage consumes no deposit. The City production card shows remaining/initial deposit quantity and bounded next output. Rebuilding, evacuation, reoccupation and restore do not replenish the seam. Version-one frontier deposit provenance binds it to the actual established outpost and released site; missing, overfilled or forged records reject restoration instead of silently reseeding. Existing saves without these parcels gain no deposits or goods; prior woodland charters, jobs, cargo and depletion remain valid without a balance migration.

Verification: 260 tests pass in the full focused gameplay suite. Six mineral-outpost scenarios cover immutable releases and report privacy, actual survey/founding/supply/mine/refinement, population and material transfers, final partial-batch/full-storage behavior, provenance corruption, full 210-unit depletion with equivalent daily/offline results, and recall/evacuation/reoccupation without reseeding. The separate governor regression verifies real ore cargo, escrow, delivery and retained allowances from an explicitly prepared stock boundary. Headless Edge against isolated saves produced by the actual survey and mine workflows verifies report/map focus, charter review cancellation, ore review cancellation, paid collection escrow without remote stock arrival, reload and 320/390/640/1440px layouts without exceptions or overflow. Narrow cargo-review and mine-production views were visually inspected. Restarting the actual QA server preserves the paid ore escrow, route progress, home/outpost ore stocks and remaining seam exactly.

This adds a resource-producing regional specialization and advances M3/M6. Other minerals, broader terrain releases and tenure negotiation, additional regional supply networks, developed local charters, broader markets, vehicles, and the remaining M0–M8 requirements stay open in the implementation ledger.

Gameplay catalog dependency validation — September 21, 2026

The authoritative engine now validates authored gameplay content before creating or restoring a world. The same read-only check is available through npm run validate:gameplay. Buildings, resources, selectable recipes and technologies expose version-one catalog contracts. The resource registry names the seventeen existing base inventory types; the eighteen existing manuscript types derive from their actual technology IDs. Work, workers, housing, water access, population and attention cannot be referenced as material goods. The existing haulage and tradeGoods abstractions remain explicitly labeled legacy types; this validation does not reinterpret or migrate their stored values.

Validation reads the actual building, knowledge, workshop-recipe, crop, land-project, barter, construction-stage, founding-package and semantic presentation definitions. It checks references, positive finite material quantities and durations, staff capacities, extractor/resource compatibility, supported input-free land production, recipe defaults, connected canonical footprints, paid resident resources, rebuild/salvage limits and matching visual footprints, staff capacities and terrain. Every building retains an existing footprint-and-label fallback, and unfinished/damaged/ruined stages retain semantic fallbacks. This checks presentation contracts without loading or judging artwork.

Prerequisite checks reject both direct/indirect technology or building cycles and cross-system deadlocks, such as Literacy requiring the school that Literacy itself unlocks. Reachability treats an explicitly available alternative institution as an alternative, so the refuge/commons relationship remains valid. It follows possible construction, production, practice and finite-market exchange dependencies from the existing starting package, woodland logs and explicitly retained legacy horse stock. Unsupported recipe inputs and unreachable institutions/topics produce diagnostics identifying their authored location. This is a static possibility check: it does not grant resources, create routes, assume infinite market supplies, prove geographic access or promise sustainable throughput.

The founding package now declares the same actual assignments previously held in the founding function: eight food workers and two sawyers. Founding consumes this declaration directly. Validation checks all assignments against real granted structures and the twenty-four-worker cohort, verifies the input-free starting food recipe supplies forty residents (44 food per village day), matches the eighteen-day food reserve, and checks forty housing places and 1,400 storage capacity against the grant. Starting structures cannot require unavailable research. No balance, grant quantity, saved-state version or existing worker assignment changes; no new save migration is needed.

The ten catalog scenarios test deliberately broken resources, recipes, extraction, prerequisites, cross-institution cycles and their lawful alternatives, practice caps, unreachable inputs, founding needs, malformed footprints/stages, presentation mismatches and unsafe salvage. They also verify read-only live validation, unchanged save restoration, successful command-line reporting and rejection of a broken catalog during actual engine-module startup. The focused founding/research/recipe regression run passed 56 tests, including the existing executed zero-food/ruined-field recovery. The full focused gameplay suite passes 253 tests, including protocol/integration and save recovery with startup validation enabled; npm run validate:gameplay passes independently. The complete command is recorded in the implementation ledger.

This advances M0 and the shared architecture requirement. Static content reachability does not complete disaster recovery, physical logistics, demographic continuity, economic balance or the remaining M0–M8 gameplay gates. Hardcoded command behavior continues to require the simulation and integration scenarios; passing the catalog check is not a claim that every planned system is implemented.

Local landless recruitment and physical arrival — September 21, 2026

Landless continuation now offers a second real source when the waystation's unclaimed-worker roster is exhausted: an unclaimed civilian in an account-owned charter community. The reviewed origin can be the founding village or an owned outpost. Named living household workers, mobilized militia and residents committed to caravans, surveys, outpost carrying teams or military supply teams are unavailable for this choice. The origin must have a walkable route to the waystation and completed needs catch-up. Choosing a person from another account or a shared development settlement is not permitted.

First entry removes one resident and one civilian worker from the chosen community and places that same adult in the independent career record. It transfers no communal goods, food, equipment, title or public authority. Existing job/research funding remains intact; ordinary labor reconciliation can pause work or release staffing when the remaining workforce is insufficient. Resuming the career, changing embodiment, replaying accepted receipts and reloading never repeat the population transfer. The original waystation option still embodies an adult already at that location and does not require a journey.

A locally selected adult starts at the actual community anchor and walks the recorded contiguous land route to the waystation, one hex per twenty real minutes (twelve per village day). Personal meals continue on the existing four-hour cadence. Hunger changes subsequent walking intervals to forty real minutes (six hexes per village day); no automatic provisions are taken from the origin. Burning on the next hex holds movement and retries later. The adult is not present at the market until the last walking step resolves, so personal gathering, hewing and barter reject while travelling. Arrival enables the existing independent work/economy loop without creating goods or returning the adult to the unclaimed NPC pool.

Reviewed Pause journey holds the person at the current hex while meals continue. Resume journey starts a full current-speed walking interval; waiting time cannot be banked for instant movement. Observer/kin embodiment does not stop an already authorized journey. These remain personal account-scoped controls, separate from communal commands. Map focus selects the adult's actual current hex. This is the first one-way relocation journey, not arbitrary travel, private freight, hired transport or an inherited public office.

Career records are now version two with origin, current location and optional durable route/progress. Version-one stationary careers migrate to the waystation in place without changing identity, population, stock, meals or paid work. Restore validates origin rights, contiguous walkable edges, location/index agreement, minimum elapsed walking time, paused/arrived schedules and the exact personal-day cursor. Career goods use the existing small numerical tolerance to avoid floating-point residue incorrectly causing hunger, blocked exchanges or full-storage waits when travel adds intermediate simulation ticks.

City → Family & continuity → Landless work offers origins with availability reasons and travel estimates. Entry review names the chosen community, its one-resident/worker loss, preserved paid commitments, lack of transferred supplies and real walking requirement. While travelling, the panel shows progress, current hex, next check, hunger speed and fire/pause reasons; work/exchange controls stay disabled. Origin/name drafts and focus survive refresh and cancellation. Pause/resume, reload and map focus preserve the same adult. These personal controls remain usable while inspecting shared Greywood rather than requiring the former village to be selected.

Verification: 243 tests pass in the full focused suite. Six new personal-journey scenarios cover no-kin local continuation with an exhausted-waystation boundary, exact population/stock conservation, adjacent movement and arrival gating, pause/resume and hunger, fire interruption, stepped/offline equivalence, preserved funded research/construction, stale/foreign/deceased commands, named/travelling-worker exclusion, corrupt routes and neutral version-one migration. The empty-roster and minimal-workforce fixtures explicitly set those eligibility boundaries; the four-adult death history and subsequent walking/work execute through the existing simulation. Headless Edge in isolated origin/walking saves verifies review/cancel/name retention, exact local departure without stock transfer, blocked remote work/barter, pause/resume/cancel/reload, actual map focus and 320/390/640/1440px layouts without exceptions or overflow. A real server-process restart restores the paused character, route, inventory and history exactly. Narrow origin reviews and journey panels were visually inspected.

This extends the playable no-kin fallback beyond the waystation's finite roster. It does not invent an adult if neither the waystation nor any owned community has an eligible civilian. Invitations/adoption or other newcomer routes for that broader case, personal illness/combat mortality and estate claims/wills, broader travel/employment, total territorial-loss integration and other human offices remain required by the full M0–M8 goal. See the implementation ledger.

Independent waystation careers after succession — September 21, 2026

An account under council stewardship can now choose landless continuation, including after all four named household adults have died. First entry embodies one existing, unclaimed adult worker from the finite frontier-waystation cohort: the source loses one resident and one worker, and the separate career record holds that same person. The adult is twenty-four in this first template, with a chosen name, empty personal inventory and no public office. No village, territory, population grant, communal stock or starting personal goods are issued. The former community enters AI_CONTINUITY and retains its lawful steward and funded mandates.

Each account retains one living waystation career. Observation, choosing surviving kin, lawful handover and later resuming that career preserve its identity, personal stock, work, meals and history. A landless adult cannot claim the former office through the kin-handover command. Personal orders name the current embodied adult and address the account with current world revision; they do not use settlement ownership or a land/job target. City can therefore manage them while inspecting any accessible settlement. The family/council controls retain their separate authority checks. The original waystation choice embodies an adult already there; the local-origin extension above adds actual walking before the same work loop becomes available.

Personal work permits one reviewed, four-real-hour job at a time. Wild-food gathering produces up to five food; collecting fallen wood produces up to three logs; hewing reserves two personal logs and 0.1 tool-equivalent wear and produces two timber when completed. There is no communal workforce assignment. Craft inputs remain in personal escrow until completion and refund once on cancellation; cancelled unfinished work creates no output. Personal storage is sixty units including escrow. Full storage holds a job rather than discarding goods. Existing paid work continues when the player observes or embodies another adult, but only the embodied worker may issue new personal orders.

Wild food and fallen wood use one shared waystation commons. Up to four unoccupied, non-burning Greywood forest cells with at least 45% cover support capacity: ten food/five fallen logs per counted cell, regrowing 0.5 food/0.125 fallen logs per cell per village day. This is an explicit ecological resource pool, separate from settlement warehouse grants and standing-tree harvest. Habitat loss constrains capacity; daily historical checks bound regrowth. Reading potential supplies creates nothing. Orders can wait for regrowth in viable habitat, reserve no future harvest, and recheck actual availability at completion. Older waiting work receives supplies before newly submitted work, with account order breaking simultaneous ties. Two accounts therefore compete for one finite pool rather than receiving separate starter supplies.

The independent adult consumes one personal food every village day, even while another adult is embodied. A completed food job resolves before a meal at the same timestamp. Missing a full meal increases hunger: food gathering yields at most half, while wood collection and craft wait until a full meal restores capacity. Players can cancel held craft and gather food. No communal relief food is silently transferred. Personal hunger limits work and remains recoverable. Independent aging and natural death now follow the lifecycle above; natural death precedes personal work/meals due at that check. Independent illness/starvation mortality remains separate from the founding-household critical-illness rule.

Local personal barter exchanges existing stock at the waystation: four food or four timber for one tool, two timber for one iron, or one log for one brick, in one to ten lots. Personal food enters the real migration relief stock; other exports enter the existing depot; imports leave its finite inventory. Both personal storage (including work escrow) and the shared depot's existing capacity/cargo reservations constrain acceptance. These are co-located exchanges, not remote delivery, wages or a coin market. Public caravans and independent adults use the same depot stock. Completed work and exchanges retain a concise personal history.

The initial version-one career ledger migrated older saves to an empty account map and no claimed commons; the version-two record extension above preserves those stationary careers. Validation checks unique account/character identity, the continuity link, schedules, finite goods, work recipes/escrow, capacity and the per-resource equality between produced/received, used/given, inventory and escrow. The authoritative scheduler interleaves personal checks with village days, public jobs and mandates; bounded offline replay produces the same personal goods, meals and commons as stepped play. Durable receipts prevent duplicate claims/exchanges. Private projections expose only the requesting account's career.

City → Family & continuity → Landless work now exposes reviewed entry/resumption, a personal name, stock/capacity, meal timing/hunger, current paid work, three activities, exchange quantities, actual market supplies and history. Reviews separate personal inputs/output from former communal obligations. Cancel/reload preserve work and goods. The earlier Family/Succession rehearsals still link to live City.

Verification: the full focused suite passed 237 tests. Eight career scenarios cover an actual four-adult illness history followed by productive continuation, population conservation, earned food/tool/wood/timber/barter, timed work and hunger, role switching without rerolls, private authority/revisions, account-only targeting, escrow/refunds, malformed saves and neutral migration, shared-resource competition/priority, actual storage saturation/recovery, finite market stock and offline/receipt equivalence. The eight career cases pass again after separating personal commands from land authority. Headless Edge against isolated no-kin and earned-stock saves verifies reviewed entry/name/cancellation, restart/reload, no communal grants, timed work/cancellation, barter and paid craft refunds at 320/390/640/1440px without exceptions or overflow. A final restart verifies personal work/resumption while viewing shared Greywood, with no former-village selection required. Narrow work and review views were visually inspected.

This delivers the first playable landless loop and extends M7, without completing family continuity or the full M0–M8 goal. The waystation roster is finite. Local recruitment above now extends the fallback to eligible owned-community civilians; bounded household adoption, personal coin inheritance, mortality and physical career journeys are delivered in later sections above. Invitations/newcomer routes remain required when no eligible civilian is available; broader careers, total territorial-loss integration and other players' offices remain open in the implementation ledger.

Initial family continuity and lawful handover — September 21, 2026

The live village now distinguishes the persistent account, its embodied adult and the public office. A version-one continuity ledger annotates four existing founding residents: the founder, two adult chosen/adopted kin and an elder adviser. No residents, worker capacity, personal goods or second starter grant are created. Older saves receive these annotations against their existing civilian/dependent cohort without replaying earlier mortality. Named residents retain their home cohort when ordinary households emigrate, militia recruit or outpost founders depart. They can still contribute to ordinary civilian labor; personal occupational/field assignments are not simulated yet.

The initial legal template is council appointment. The founder holds office, the first adult kin is appointed successor and the elder is interim steward. A current lawful leader can review another living adult's appointment. During interregnum, choosing an adult changes embodiment only; observer continuation leaves no embodied character. Only the embodied council-appointed successor can review and accept public office. Handover leaves communal inventories, charter, research, job funding and spending ledgers intact. This is an initial fixed law, not elections, inherited kingship or other players' offices. The legacy ownerId remains the account's communal custody/inspection key; authoritative public commands additionally check the living character and office.

Illness was the first implemented mortality cause; natural household aging is now delivered above. At each home village day, the embodied adult accumulates one critical day while community health is at most 25. Health above 25 clears that adult's count. Eight consecutive critical checks cause death; warnings expose remaining checks in City and its map overlay. A village day remains four real hours. There is no logout penalty; the separate slow household age clock is described above. Existing funded care can improve health under its normal requirements. This illness rule evaluates the currently embodied adult, and switching adults retains each adult's critical counter. The separate aging rule now evaluates every living named household adult; wider NPC lifecycles remain open.

Death records cause, health evidence and one durable chapter; removes one existing resident and their civilian capacity if applicable; revokes the deceased character's commands; and, when the deceased held human public rule, enters AI_INTERREGNUM with the lawful interim steward in the same world-state transition. A relative’s death alone preserves a living ruler. Workforce reconciliation may pause work when illness/death leaves too few workers, but never deletes its paid progress. If an interim or successor is deceased, the council selects a surviving adult; if none survives, the institutional council retains stewardship and observer access. The waystation career above now supplies an initial playable landless path when no kin survives; the local recruitment/travel extension now handles an exhausted waystation roster when an owned community has an eligible civilian. Broader fallback and inheritance remain required before the family-continuity gate is complete. This slice does not claim mortality-ready public alpha status.

Stewardship preserves existing funded construction, research, deliveries, producer/district/governor instructions and defensive corridor orders under their current reserve and spending limits. It physically recalls discretionary outward/resupply-wait offensive patrols using ordinary return and provision handling; it never teleports people or goods. No new offensive or constitutional orders are generated. Chapter records capture retained jobs, withdrawn patrols and the existing reserve/budget settings. Later routine decisions remain in each existing mandate's ledger. There is no new treasury grant, debt forgiveness or spending reset. Historical empty founding-household estates remain unchanged. New earned stipend coins and personal wills now follow the independent inheritance rules above; household goods and land estates remain unimplemented. The independent adult above has separate living personal stock; it is not silently inherited by kin. Broader politics, estate law, wider human offices, births, named personal field deaths and broader landless careers remain open. Invited-resident aging and anonymous military field casualties are implemented above.

New public commands after the first death must name the current embodied character; stale deceased-character orders fail even after another adult takes office. Already accepted receipt lookups stay idempotent. City reviews capture character identity together with world/target revisions, and the direct map command path supplies identity and disables orders during interregnum. Private City/overview projection exposes the account's own household. City → Family & continuity shows adults, health risk, appointments, current public obligations and death chapters, with separate reviewed embodiment, observation and handover. The older Family/Succession destinations remain clearly labeled rehearsals and link to the live controls.

Verification: the full focused suite passed 229 tests, including seven new continuity scenarios for neutral migration/privacy, actual prolonged unmet-needs death, lawful versus unappointed embodiment, stale/deceased authority, conserved assets, funded building/research completion during interregnum, offensive recall versus defensive continuation, idempotent receipt replay, malformed saves and daily/offline equivalence. Controlled illness fixtures isolate the funded-work/military boundary; the separate shortage scenario reaches death through normal village-day health simulation. Headless Edge against isolated living/death saves passed appointment/cancellation/reload, actual death chapter, embodiment without authority, observer mode, lawful handover/cancellation/reload and unchanged inventories at 320/390/640/1440px without exceptions or overflow. Narrow controls and handover review were visually inspected. Full M0–M8 implementation remains active in the implementation ledger.

Sacred and civic architecture; temporary community refuge — September 21, 2026

Sacred and civic architecture completed the initial content count: eighteen working topics, three in each of the six branches. It is the third religion topic, alongside Organized charity and Care institutions. This early choice implements a sanctuary's refuge function with an equal public provision option; patronage and wider religious/civic institutions remain later work. Ritual calendars and owned or publicly invited foreign pilgrimage visits are now live. Learning it requires Organized charity, Timber framing, six village days of practice and an operational commons/camp. Research uses twelve timber/eight food/one tool, two learners and three days. Adoption costs six timber/one tool, assigns one existing sanctuary architect and consumes one timber-equivalent planning supply per day. Learning and adopting do not select anyone's belief or open a shelter automatically.

The twenty-seventh building, Community refuge, costs sixty timber/twelve food/one tool and ninety work, with two staff places on one cleared forest/field hex. Construction/rebuilding requires the adopted architect. It provides no permanent housing, population, food, water or storage grant. A staffed operational refuge at 65% condition can also host its architect if the commons is lost, avoiding a shelter-recovery dependency on the destroyed housing institution. The refuge-12 semantic recipe uses the existing cottage-pair motif and explicit footprint/label fallback as prototype art.

City → People → Temporary community refuge reviews an explicitly enabled public or faith-supported policy, with identical effects and a daily resident limit from one to forty-eight. Each assigned refuge worker prepares eight temporary places. Policy or staffing changes require a full village day; each actual household check rechecks the architect, sound staffed buildings, housing shortfall and available firewood. Each started group of four sheltered residents uses one log. Partial supplies/staffing provide partial coverage; no future nights are reserved or banked. Shelter consumes logs before community care, and both services share actual stock.

Temporary places cover only the shortfall for existing residents in that day's shelter-needs calculation. Normal household food and water remain required, and a destroyed commons still removes its well access. Permanent housing remains the basis for both migration departure and arrival; a refuge cannot attract new households by inflating capacity. Rebuilding permanent homes ends unnecessary firewood use. Closing refuge stops future shelter without deleting residents, past consumption, buildings or knowledge; hall workers and the architect retain separate assignments until released.

The version-one per-community refuge ledger stores explicit policy, readiness, cumulative shelter-days/log use and the last paid check. Older saves gain disabled empty records. Restore validates counters, limits, treatment quantities and staffed-building readiness. People displays permanent places separately from ready temporary capacity, actual shelter history and blockers. Supply chains traces estimated refuge firewood as a recurring use, with the usual future-readiness caveat. Reviews and drafts preserve revision protection, focus and the resident limit through refresh and reload.

Verification covers 222 distinct passing gameplay scenarios: the full focused run passed 221 of 222, with only an outdated expected catalog count failing; after correcting 26 to 27, all eleven City projection tests pass, including that case. Seven new refuge scenarios cover paid prerequisites/construction/readiness, partial firewood and staff, equal public/faith policies, condition/service loss, migration exclusion, save validation/migration, daily/offline equivalence, commons-loss fallback and a command-only arriving-household → lost house → paid refuge → rebuilt home journey. The latter conserves the finite population without editing stock or population directly. Headless Edge in isolated .data-refuge-qa and .data-refuge-active-qa verifies eighteen topics/twenty-seven buildings, reviews/cancellation/focus, full-day delay, unchanged immediate stock/staff, close/reload, actual shelter history, permanent-only admission and firewood tracing at 320/390/640/1440px without exceptions or overflow. Narrow People and review layouts were visually inspected.

This satisfies M4's initial eighteen-topic content count and extends M2 disaster recovery. It does not complete M4's broader institutional/training requirements or the full M0–M8 goal. Named specialist training, wider religion/culture systems, family continuity, markets, lawful governance and the other remaining gates stay in the implementation ledger.

Staffed regional governors and recurring exchanges — September 21, 2026

Regional institutions is the seventeenth working topic and third initial politics topic. It requires learned Land registry and Public accounting, eight village days of practice, and an operational staffed registry office at 65% condition. Three research days reserve twelve timber/eight food/one tool. Adoption costs six timber/one tool, assigns one existing resident governor and consumes one timber-equivalent administrative supply daily. The registry clerk remains a separate worker. This checkpoint retained twenty-six building definitions (the refuge above adds the twenty-seventh); the registry office is now also a regional administrative workplace. The refuge delivery above completes the initial eighteen-topic count; M4 still requires broader training, institutions and adoption work.

City → Frontier & charters → Governor exchange provides one independently reviewed instruction per owned established outpost. An active governor, public accountant and scribe can maintain one destination resource target and collect one different surplus toward a home target. Supported goods now match the complete manual outpost cargo catalog, including stone, textiles, equipment, compost and whole manuscripts. Targets are 0–1,000 units; zero disables that direction. Retained source stocks are 0–10,000 units, each leg allows 1–50 units before weight/provisions, and the home idle-worker floor is 0–24. Actual food-reserve policies at both ends also apply. Existing assigned farmers and other workers are never removed to staff a trip.

Each material has a cumulative allowance of 0–100,000 covering outward cargo, reserved collection and travel food together. This reviewed limit extends the former 10,000 ceiling without changing the version-one ledger, so existing saves and past commitments keep their meaning; a value above 100,000 rejects. The optional capped shared regional logistics total has the same new maximum while its daily ceiling remains 1,000; daily-only mode has no shared lifetime stop. At dispatch, the ordinary supply command pays home stock and reserves actual outpost collection; goods reach the destination/home only through the existing physical journey. Authorizing a mandate reserves nothing immediately. Changing resources or targets, pausing and recalling cannot reset past commitments; revised allowances must cover them. Earlier food-only instructions retain their own separate spending ledgers. Only one food-only or governor instruction may be active for a destination, while existing manual/paid teams keep their orders. Pausing future dispatches remains available without operating services; recall is a separate journey action.

Checks run after the home household day and use historical timestamps during offline catch-up. Among simultaneous governor instructions, lower destination food cover goes first, then the least recent dispatch and stable destination ID. Existing food-only checks run before governor checks at the same timestamp. Every new trip needs two genuinely available home residents, the idle-worker floor, a safe walking route, actual surplus, current rights, allowances and destination space. Ordinary governor range is twenty-four hexes; twenty-five to thirty-six requires active Field logistics and a required handcart policy as described in the current extension above. Walking distance still determines time and provisions. Shipment quantities shrink to available stock, allowance, carrying weight and receiving space. Home overflow on return uses the ordinary physical unloading hold. Office/service loss blocks new commitments but does not erase existing titles or paid journeys.

The version-one governor ledger adds no mandates to older saves. Restore validates ownership, route assignments, settings, spending ceilings, check/history timing and tagged journeys. Read-only projections expose current possible cargo/collection, provisions, commitments, blockers and the last twenty decisions. Satisfied targets and teams in transit are routine waiting; unavailable services, stock or funding become named exceptions. Drafts, disclosure state and field focus survive refresh and rejected reviews. Journey cards identify governor exchanges and retain map/recall controls. No new political sovereignty, named character officeholder, taxes, road maintenance or recruitment mandate is implied.

Verification: 215 focused gameplay tests pass, including eight governor scenarios built through actual research, institutions, forestry and travel. They cover two-way exchange, cumulative ceilings and recall, worker floors and office loss, competing instructions/manual teams, authority/revisions, malformed saves and neutral migration, distance limits, satisfied targets, historical offline equivalence and two instructions sharing a real workforce across three settlements. Headless Edge against isolated .data-governor-qa-v2 and .data-governor-flight-qa-v2 verifies the third politics topic, editable/rejected drafts, cancellation, refresh focus, unchanged immediate stock/labor, pause/reload and recall of a paid team already on the road at 320/390/640/1440px without exceptions or overflow. Narrow editor/review were inspected. An initial QA assertion expected an at-home recalled team to remain travelling; the final fixture first walks a real route step and verifies physical return instead.

This delivers staffed regional exchange delegation within M4/M6/M7. Cross-settlement operating budgets, wider governor duties and lawful appointments, roads, taxes, the specialization model, family continuity, wider religion/civic systems and all other M0–M8 gates remain open in the implementation ledger.

Food production and household admission — September 21, 2026

Household migration now uses the same current, policy-aware staffed food capacity as the City economy overview. Previously, production mandates correctly stopped the harvest and removed it from the economy forecast, but migration still counted that field. The shared read-only calculation excludes paused producers, satisfied stock targets, policy/service blockers, unsuitable crops, insufficient condition and active crew work. Staff ratios remain explicit. It describes potential output under current policies; storage, shared ingredients and future changes can still constrain actual batches.

Both departure and arrival recheck this capacity. A village feeding its current residents from reserves cannot attract another household using a stopped field's nominal output. Travellers whose destination loses qualifying production return on their existing route with prepaid return rations. Resuming continuous production restores capacity without granting food, releasing staff, bypassing other admission requirements or banking harvest time. This is a conservative current-state admission check: a satisfied target is held even if future consumption might restart it. No new ledger or save migration is required.

Verification: 207 focused gameplay tests pass. Three added regression scenarios cover: no departure during a real pause and recovery after resuming; arrival rejection, conserved people/provisions and matching offline replay after reload; and agreement between People and economy under food targets, accountant suspension, continuous production and partial staffing. Headless Edge against isolated .data-harvest-migration-qa verifies actual reviewed pause/resume, matched capacity, the visible migration blocker, reload and unchanged immediate stock/labor at 320/390/640/1440px without exceptions or overflow. The narrow People view was visually inspected. This repairs M2/M3 integration; remaining research, governance and all other milestone requirements remain open.

Bounded production mandates — September 21, 2026

City → Production → Production mandate controls each owned charter producer independently. Target mode requires active local or delegated Public accounting and reviews one current recipe output, a warehouse stock target from 1 to 10,000, and capped total input allowances from 0 to 10,000 or renewing daily allowances from 0 to 1,000 per material. Every actual staff-scaled batch rechecks the accountant, compatible recipe, current local stock, remaining allowance and ordinary production requirements. Reaching the target waits for real consumption to reduce stock. The final complete batch may exceed the target; co-products are retained. Goods travelling, reserved or held outside this warehouse do not satisfy the target.

Authorization reserves no goods and changes no worker assignments. Actual successful target-mode batches record consumed inputs, outputs, timestamp and cumulative spending. Editing targets or allowances, changing recipes and pausing never erase that spending; revised allowances must cover it. An incompatible selected recipe blocks until the player reviews the target or recipe. Pause retains staff and stops future batches without requiring an active accountant. Explicit Continuous production removes these limits for future batches; those batches remain outside the retained target-mode ledger. Returning to target mode keeps all previously recorded costs. Every mode or setting change restarts a full cycle, so paused or blocked time cannot be banked.

The original version-one ledger migrated older saves with no mandates and unchanged production; current mandates are version three as described above. Restoration checks structure ownership, supported resources, bounds, spending and batch records. Food forecasts exclude held or blocked producers rather than promising unavailable harvests. Satisfied targets and deliberate pauses are routine waiting states, while exhausted allowances and missing services are actionable blockers. Existing finite staff, stock, deposits, condition, storage and food-reserve rules still apply; target mode does not release workers or coordinate competing workshops.

The collapsible editor retains drafts, focus and open details through refresh and rejected orders. Reviews expose target overshoot, total versus past input spending, the full-cycle wait, continued staffing and food consequences. A ten-full-staff-batch estimate adds to past spending and requires review. Recipe changes rebuild compatible drafts while preserving the authoritative ledger.

Verification: 204 focused gameplay tests pass, including six new production-mandate cases covering actual tool consumption and resumed forging, allowance/service blocking, pause/continuous transitions, recipe incompatibility, food forecasts, private authority/revisions, malformed saves, neutral migration and stepped/offline equivalence. Headless Edge against isolated .data-production-mandates-qa verifies invalid drafts without spending, cancellation, authorization, refresh/focus, non-urgent satisfied targets, pause/reload/continuous mode and budget estimates. Layouts at 320/390/640/1440px have no page exceptions or overflow; narrow controls and review were visually inspected.

This delivers per-building stock targets and input ceilings within M3/M7. Multi-workshop coordination, measured flow history, cross-settlement operating budgets, governor powers, family continuity and the remaining M0–M8 gates remain open in the implementation ledger.

Selectable smithy production — September 21, 2026

City → Production → Smithy now offers reviewed recipe choices with real differences in material use. Each batch below uses three assigned workers at full charter staffing and one settlement production cycle. Partial charter staffing scales all inputs and outputs; retained shared-development rules still run one batch when staffed.

SET_PRODUCTION_RECIPE names an owned completed workshop and an allowed recipe, checks structure/world revisions and rejects incompatible buildings or ongoing building work. Selection changes no inventory, assignment or research. It restarts a full production cycle from acceptance; switching cannot bank earlier waiting time or immediately manufacture a backlog. Damaged workshops can be configured but still need the existing operational/condition checks before producing. Normal input availability, finite staffing, storage, repairs and daily catch-up continue to apply. Every batch pays all its staff-scaled inputs before crediting outputs. These refining recipes reduce occupied stock units, so a full warehouse may still admit a complete batch when its inputs free enough space.

The version-one production recipe catalog validates defaults against existing catalog recipes, unique choice IDs and positive material quantities. New and existing smithies default to Mixed metalwork. Older saves gain an explicit version-one choice without changing stock, staffing or due time; malformed versions/choices and recipe state on incompatible buildings reject restoration. Default compatibility is intentional: existing saves and balanced mixed production remain usable while players gain separate smelting and forging. No new resource, art definition or research reward is introduced.

Simulation, City readiness and resource-flow projections select the same recipe. Supply chains show every alternative as a possible path but attach a real workshop only to its chosen recipe; staff, input demand and output are counted once. An unselected path explains that no workshop is assigned and links back to Production. Proposed full-staff batches explicitly share the same building/workers. The review compares prior/new recipe, full-staff inputs/outputs, current assignment and reset timing; cancellation spends nothing. Selection survives reload, and keyboard focus survives the temporary disabled state during server refresh. Stale reviews cannot confirm.

Verification: 198 focused gameplay tests pass, including six new recipe scenarios. Command-only paths build a charter smithy/charcoal kiln, import finite iron physically and forge actual tools; a separate development path clears and mines real ore before choosing smelting. Coverage includes partial staffing, missing-input blocking, transformations at full storage, no immediate payment/output, full-cycle reset, receipt replay, private authority/revisions, neutral migration and forged-state rejection, single-count supply projections and stepped/offline equivalence. Headless Edge in isolated .data-recipes-qa verifies comparisons, cancelled/confirmed reviews, keyboard operation, unchanged immediate stock/staff, timing, reload, refresh focus, supply-chain assignment/navigation, stale reviews and 320/390/640/1440px layouts without page exceptions or overflow. Narrow controls and review were visually inspected.

This delivers the first industrial recipe choices within M3. The production mandates above now add stock targets and input ceilings. Broader industrial alternatives, multi-recipe planning, physical market/contract systems and all remaining M0–M8 gates stay open in the implementation ledger.

Timed defensive corridor guards — September 21, 2026

City → Defense & patrol → Guard the frontier corridor adds an actual defensive order alongside attacking patrols. A fully trained, home-ready militia can fund one or two village days on guard through GUARD_CORRIDOR. The current Scouting survey must still contain its observed armed camp, and the force must be strong enough to deter that group. Existing readiness, food reserves, authority and revision checks apply. No new soldiers, specialist, stock or territory is granted. The same mobilized residents remain outside civilian work.

The militia walks its existing surveyed route to the approach post (the penultimate route hex, or the first field hex for a two-hex corridor). Duty starts on physical arrival. Food allocation covers both walking legs, the chosen duty duration and one extra village day of return reserve, within the existing four-day carrying limit. Existing carried provisions reduce new payment. The guard holds this actual hex rather than attacking the camp. It protects only its home village's frontier barter caravans at this particular observed camp crossing; it does not grant protection to other routes, settlements, surveys, outpost expeditions or players.

Each crossing rechecks the guard's physical post, active duty deadline, field/resupply phase, equipment, morale, fatigue and carried food after elapsed consumption. The guard must retain more than the calculated return journey plus one day of provisions and still meet the observed group's strength. Successful deterrence prevents that crossing's theft, costs two equipment-condition points and four fatigue, and creates a report. It does not disperse the camp, wound or create residents, or grant the caravan permanent immunity. An outward-protected caravan can still lose its normal finite provisions on an unguarded return. A per-phase passage marker prevents repeat wear/reports from retrying the same crossing, but never bypasses the current protection check.

At the duty deadline, return-reserve threshold, fire at the current post or exhausted readiness, the unit switches to a physical return order. Automatic withdrawal starts a new walking interval before moving its first return hex. Recall can interrupt travel, guard duty or a resupply wait. Fire can still block the route home; it does not teleport the force or refund eaten food. At home, the ordinary recovery/refit/demobilization and storage rules apply. Resupply never pauses or extends the guard deadline. A quartermaster and storehouse may send the existing two-person food team to the guard's post; the guard can continue deterrence while holding for this rendezvous. Expiry or recall ends protection and sends outstanding supplies home physically, preserving the food ledger and people.

Older military jobs remain valid without a guard record. New orders carry an optional version-one guard record with fixed post, duty days, arrival/deadline and protected-passage count. Restore validates owner, route, phases, post, timestamps, duration, counters and resupply links; caravans validate optional unique outward/homeward passage markers. Historical caravan timestamps determine protection during bounded catch-up, so offline replay cannot use protection from a future or expired guard.

Reviews explain exact new food, post, duty/travel duration, reserve, equipment wear, protection limits and withdrawal. Cards show actual protection/reason, deadline and crossings. Orders retains the real military job; the map labels an active assignment Corridor guard. Locating militia or supply carriers preserves their home City context even when the selected hex falls inside another managed region; explicitly changing settlement restores normal selection. Narrow cards and reviews remain readable with native keyboard controls.

Verification: 192 focused gameplay tests pass, including six new guard scenarios. Command-only preparation researches actual institutions, imports iron, crafts kits, recruits residents and sends real caravans past a supplied guard. Tests prove guarded outward/unprotected return behavior, finite goods, unchanged camp/population, paid timing, deadline/food accounting, private commands, corrupt-save rejection, resupply expiry/return, fire/reserve withdrawal and historical offline equivalence. Headless Edge uses isolated ready-militia and holding-post worlds to verify review cancellation/keyboard, exact paid departure, reload, physical recall, active protection/deadline, linked resupply/recall, map location and 320/390/640/1440px layouts without overflow. The first browser run exposed loss of home City context after map inspection; the corrected holding-post flow passes without page errors. Narrow guard/review/map views were inspected.

This is the initial working defend a corridor role for M5. Fort garrisons, broader convoy escort contracts, broader defensive assignments, advanced forces, wages, mortality, depots, advanced equipment resupply and campaigns remain in scope. It does not complete M5 or the full M0–M8 goal; see the implementation ledger.

Live supply-chain tracing — September 21, 2026

City → Supply chains now traces a selected resource through local sources/refinement, warehouse stock, processing and consumers. Input/output buttons follow the recipe network in either direction. Desktop uses three ordered columns and narrow screens stack the same semantic lists; a complete resource-balance list provides another way to inspect and select resources. Production links to this live network instead of static example paths. The authoritative projection is settlement-local, owner-checked and read-only; it adds no stored simulation state or migration.

Each resource reports actual local stock, an upper bound for currently ready building output, assigned recipe input demand, resident/service demand, and stock coverage assuming no production or arrivals. Recurring figures use the settlement's simulation-cycle duration. Current building rows reuse the actual staff-scaled crop/production projection, condition and blockers. Finite deposit/stock remainder further caps the output bound. Multiple workshops may compete for the same inputs, so these figures are explicitly not a simultaneous executable forecast. Assigned demand includes blocked staffed workshops; unstaffed workshops contribute zero demand. Household food excludes people eating from actual journey or military supplies. Active specialist upkeep and currently possible care meals/firewood are included once. Optional food spending displays the protected amount separately.

Proposed full-staff batches shows one standard catalog recipe and its full staff/input/output requirements, including co-products, terrain and construction cost. This is separate from current warehouse/assignment metrics and does not authorize construction, reserve materials, assign workers or combine several recipes into a guaranteed plan. Selected field crops can differ from the standard catalog recipe. Actual construction discounts appear in one-time building requirements. Research, manuscript copying/study, equipment crafting and recruitment are separately identified project uses; copying and study read the same research project specifications as actual funding. Work, adoption, optional logistics support, operating costs and preconditions remain subject to their normal review screens.

Managed woodland explains finite, crew-driven log harvesting; foraging shows its separate bounded potential and readiness/habitat constraints. Frontier import offers explain real exchange inputs and physical carrying requirements. Owned-route movements expose current carried cargo, reserved exchange goods, separate travel food, phase, location and blockers. Outpost routes are visible from either participating settlement; unrelated owners' routes and stocks remain private. Military food carriers use their actual food ledger. Cargo, escrow and hypothetical imports are excluded from warehouse stock and recurring rates. The UI links to Workers, Buildings, Land, People, Research, Defense, Trade and Frontier controls without silently issuing orders. Resource/mode selection, disclosure state and selector focus survive refresh.

Verification: the full focused gameplay suite passed 185 tests; a subsequent six-test supply-only run includes an additional actual log-depletion scenario, for 186 distinct passing scenarios. Coverage includes staffing, household/away-carrier demand, finite starter logs becoming a real production bottleneck, physical barter/escrow/return, save restoration, no mutation/privacy, co-product/equipment/manuscript connections and unchanged shared-development rules. Headless Edge against isolated .data-supply-chain-qa verifies resource tracing, proposed batches, military/books, cargo versus stock, no spending/staff changes from inspection, cross-tab navigation, refresh focus/disclosures, reload and 320/390/640/1440px layouts without exceptions or overflow. Desktop and narrow plan views were visually inspected.

This delivers the initial inspectable M3 supply network. Smithy recipe alternatives are now delivered above. Multi-recipe production planning, broader industrial alternatives, measured flow histories, vehicle/road throughput, player contracts and broader market production remain open; the bounded funded market is delivered above, along with all other M0–M8 gates in the implementation ledger. Existing sample economy screens remain labeled design previews.

Funded district building plans — September 21, 2026

City → District plans now groups two to six construction orders in one owned settlement. The existing Construction planning foreman and Public accounting specialist must both be active before authorizing or starting new orders; no new technology, free administrative worker or building definition is introduced. Food and shelter, Storage and timber works, and Defensive post templates provide editable starting sequences. Every step names a building, canonical plot, orientation and earlier-step dependencies. The editor supports independent steps or one earlier dependency per row; the authoritative model accepts multiple earlier dependencies. Cycles, repeated dependencies, founding-only definitions, overlapping planned footprints and any footprint outside the settlement are rejected without spending. Occupied, uncleared or otherwise unsuitable owned plots can remain in a plan, but never start until their actual requirements pass.

Authorization records resource ceilings, not an escrow or stock grant. The reviewed default covers current discounted construction costs plus up to one tool and six haulage per building for optional support. It reserves no land, materials or people. On the next simulation tick, each eligible order independently rechecks settlement ownership, foreman/accountant service, completed dependencies, current terrain, techniques, institutions, real stock, protected food and the ordinary daily timber budget through constructionPlan. Actual building materials and available optional support are paid once and counted against the plan's cumulative ceilings. Missing optional tools slow work. Under the construction-handcart policy above, missing required carts block new funding; borrowing is separate from consumable ceilings. Lost discounts, future price differences or retries can require a reviewed ceiling revision. Unused authorization is not inventory; returned job materials never reset committed spending.

Accepted orders use the existing four-person building crews, slots and queue. Independent funded steps can use both foreman-supported crews; dependent steps wait for completed predecessor buildings. Site clearing, repairs, deliveries, operational staffing and land transformation remain real separately ordered work. Relevant local commands and completed job stages wake the plan for a fresh check; otherwise blocked work retries after the next household day. Historical scheduler timestamps preserve offline timing. Work already funded retains normal pause, cancellation/refund, damage, ruin and rebuilding rules even if plan services later fail.

One active or paused plan is supported per settlement. Pause new orders preserves funded jobs; Cancel remaining plan cancels unordered steps while funded jobs continue. Orders remains the place to pause/cancel actual construction and review its material recovery. A cancelled or destroyed construction attempt becomes a failed step rather than silently rebuilding itself. Review retry keeps all earlier attempts and commitments and rechecks the retained site; a ruin or obstruction may need separate recovery first. Review remaining funding proposes ceilings covering past spending plus current costs of unordered/failed steps, without immediate payment. Completed buildings remain unstaffed until assigned workers; shelter never grants residents.

A version-one districts ledger records plan identity/owner, exact steps and dependencies, status/check timestamps, resource ceilings, cumulative spending and each paid attempt linked to its real job and structure. Older saves receive an empty ledger and retain existing jobs/stock. Restore validates ownership, bounds, dependency order, footprint rights/overlap, attempt/job/structure links, orphan tags and summed spending; live paid orders survive reload. This is local construction authorization, not a transfer of governor power or household property.

The City editor retains drafts after validation errors and uses world/target revisions for reviews. Plan cards show per-step blockers, actual attempts/costs, committed resources, ceilings, progress and next check, with map/Orders/Workers navigation and explicit controls for future versus funded work. Active blocked plans appear in settlement priorities. Server refresh cannot erase a typed name or recursively rebuild the editor on blur; name and select controls have at least 44px touch height.

Verification: 180 focused gameplay tests pass. Six district scenarios cover a command-only research/adoption and dependent building journey, independent orders using two real crews, no automatic residents/staffing, no payment on authorization or blocked sites, exact materials/support ceilings, paused/cancelled plans preserving funded jobs, failed-job refund/retry without renewed authorization, service loss, rights/revision/shape validation, neutral old saves, restoration, and historical offline equivalence. An additional command-only scenario clears actual woodland through real forestry jobs before the waiting building can pay/start. Headless Edge against isolated .data-district-qa-v3 verifies template/step editing, overlapping-footprint rejection with preserved draft/stock, reviewed authorization and no-spend cancellation, stale-review protection/reopening, paid work completing while new orders are paused, reload, funding review, resume and completion, and 320/390/640/1440px layouts without page exceptions/overflow. Narrow editor, plan and review screenshots were inspected; a focused final check verifies the styled 44px name input.

This delivers initial local district templates, dependency scheduling and construction ceilings for M1/M7. Broader district specialization and operations, cross-settlement budgets, named governors and wider delegated powers, fuller family continuity and the other M0–M8 gates remain open. Research now stands at eighteen of eighteen and the building catalog now twenty-seven definitions. See the implementation ledger for final suite evidence and remaining scope.

Build eligibility filters and actionable requirements — September 21, 2026

The live City → Buildings catalog now implements Can build now, Missing materials, Needs technology, Needs terrain work and Needs rights, alongside All buildings and Other requirements. Filters intersect with the selected building family and show counts for the current plot and rotation. Buildings can match several categories at once. Empty results explain the intersection and offer Show all buildings without changing the plot. A selected plot is required for a buildable quote; without one, the catalog still shows settlement stock, technology and policy requirements without treating the city anchor as the intended construction site.

The authoritative engine collects structured blockers through constructionRequirements, shared by paid constructionPlan and the city projection. Each blocker carries a category, stable code, message, remedy and affected hexes when applicable. The existing first-priority message remains available, while Requirements to resolve exposes simultaneous failures rather than hiding later ones behind a single lock. Checks cover founding-only structures, researched/adopted techniques, moisture, complete footprint boundaries, incompatible terrain, occupied/busy hexes, fire, tree cover, shoreline, surveyed finite resources, prerequisite local structures, actual material shortfalls, food reserves and timber budgets. Outside-footprint cells expose only the management boundary; private state and unknown deposits remain undisclosed.

Missing materials means actual stock is insufficient. Protected food and exhausted public budgets are separate policy requirements under Other requirements, together with occupied plots, existing jobs, prerequisite institutions and founding-only buildings. Needs rights indicates a footprint outside this settlement's managed land; its remedy is a valid plot/rotation rather than an implied right to claim arbitrary land. Needs terrain work includes suitability requirements that may require choosing another site: clearing cannot create ore, a shoreline or unsupported terrain. Can build now means construction can be funded and accepted; an order may still queue for the existing finite crew. No classification grants labor, land, resources or technology.

Filters, orientation, current selection, expanded requirement details and keyboard focus survive ordinary server refreshes. Preview remains available for blocked options; confirmation remains disabled until a current authoritative quote succeeds. Existing world/target revisions and reviewed payment protect acceptance. No simulation save shape, migration or resource grant is introduced by this read/UI change. The building catalog now has twenty-seven definitions and research eighteen topics. Inner-hex plots, broader district operations, services and remaining recovery controls stay in scope; initial district building plans are delivered above.

Verification: 174 focused gameplay tests pass. Three new catalog scenarios cover simultaneous technology/terrain/material blockers, meaningful no-plot reads, protected food versus missing stock, essential food-building reserve exemption, local institution requirements, rotated boundary categories, read-only projection and agreement between every displayed blocker and authoritative acceptance. Existing footprint privacy, stale-review, construction/payment, rights, migration and complete gameplay tests remain green. Headless Edge against isolated .data-catalog-filter-qa checks every filter count against server data, family intersection and empty reset, actionable disclosures, keyboard controls and focus/detail retention through server refresh, blocked map preview/cancellation without spending, and 320/390/640/1440px layouts without page exceptions or horizontal overflow. The narrow requirement card was visually inspected. This closes the explicit M1 catalog-filter requirement; M1 and the full M0–M8 objective remain incomplete.

Independent regional food mandates and parallel carriers — September 21, 2026

A home can now authorize a separate recurring food mandate for each retained outpost (up to three after earning City status). Each destination retains its own stock target, shipment maximum, cumulative cargo-plus-provisions ceiling, enabled state, next check, spending totals and last twenty decisions. Active Public accounting and Record keeping remain required; Land registry governs new territorial expansion and does not revoke supply rights when stopped. Changing one instruction preserves the other's budget and schedule. Pausing addresses a specific outpost; legacy pause commands without a destination remain accepted only when exactly one mandate exists, otherwise they reject as ambiguous.

There is now one two-person carrying team per outpost destination, shared by its manual and mandated orders. Two concurrent teams therefore need four actual available home workers, separate paid cargo and provisions, and independent safe routes/storage. No extra carrier capacity or residents are granted by the second mandate. Returning or blocked teams still occupy their route and workers. Restore rejects duplicate teams for a destination or a team whose destination belongs to another home. Existing journey movement, consumption, recall, cargo custody and return rules are unchanged.

Checks remain once per home village day. Simultaneously due instructions prioritize the destination with fewer current food days, then the least recent dispatch visible in its retained history, then stable destination ID. Historical due times take precedence over urgency during catch-up. Every dispatch rechecks remaining workers and stock after earlier decisions. Routine target-satisfied and team-in-transit outcomes are waiting; missing services, exhausted authorization, reserve/storage/fire/worker failures are blocked. Only blocked active instructions appear in City priorities, named by destination. An individual failure spends nothing and never prevents another eligible destination from being checked.

The version-two mandate ledger is keyed by destination and records its home explicitly. Version-one home-keyed entries migrate without resetting spending, history, creation/check timestamps, pause state or funded journeys. The later tower-food planning delivery above upgrades this destination-keyed ledger to version three with neutral resident-only permissions; saves without mandates now get an empty version-three ledger. Existing journey tags still identify the funding home and are validated against the destination ledger. Research now stands at eighteen of eighteen and the catalog now has twenty-seven definitions after the refuge addition.

Frontier & charters shows an independently reviewed mandate card for each retained outpost. Draft inputs and keyboard focus are scoped to the destination across refreshes. Reviews name the chosen camp, disclose previous and remaining commitments, and explain shared labor/priority rules. Cancelling spends nothing; editing authorizes future spending without immediate resource reservation. A targeted pause leaves both existing teams in flight and leaves the other mandate running. Reload preserves committed state; unsent drafts are temporary.

Verification: 171 focused gameplay tests pass. The expanded command-only registry journey produces writing supplies, harvests real forest (including camp logs physically returned to the home mill), funds both mandates and models 24 village days / 96 real hours of absence. All forty residents remain at full health with no new food hardship during that interval; each camp receives multiple paid deliveries, both teams can travel concurrently, and actual food production, consumption, travelling cargo and stocks conserve the total. Offline replay through bounded catch-up matches all settlement simulation state, mandates and journeys; publication revision counters are expected to differ by batching. Separate cases cover scarce-worker priority, manual-route competition, targeted pause/authority, duplicate-team restore rejection and migration of a paid version-one mandate with a live team, both enabled and paused. The preparation and absence use commands rather than injected goods, terrain or population; scarcity-unit cases explicitly isolate input stock.

Headless Edge against isolated .data-regional-supply-qa verifies independent budget drafts/reviews/cancellation, changing only the chosen ceiling, targeted pause with two real teams still travelling, reload, focus/draft retention through a server-driven refresh, routine-wait filtering and 320/390/640/1440px layouts without page exceptions or horizontal overflow. The narrow mandate panel and review were visually inspected. This proves a prepared food-supply absence scenario, not indefinite resource self-sufficiency, broad regional crisis recovery or the full M7 gate. Initial district building plans are now delivered above; governor powers, broader specialization/operations, additional commodities, family continuity and other M0–M8 requirements remain open.

Land registry and a second owned outpost — September 21, 2026

Land registry is the sixteenth working topic and second initial politics choice. It requires learned Record keeping and Public accounting, six village days of practice, an operational commons/camp and three research days, reserving ten timber/six food/one tool. Adoption costs six timber/one tool, assigns one registrar and consumes one timber per village day. The separate single-hex Land registry office costs sixty timber/fifteen food/one tool and ninety work on cleared field/forest ground, requires active Land registry throughout construction/rebuilding, and has one office clerk. This checkpoint brought the catalog to twenty-six definitions (now twenty-seven with refuge); the existing cottage-pair motif and explicit footprint/label fallback in registry-11 remain prototype art.

A home with an active registrar and an operational staffed registry office at 65% condition, without ongoing building work, supports two retained outposts. An earned City with active Regional institutions supports three while those services remain active; an earned Regional capital supports four, five with a second distinct staffed sound office, or six with a third. Otherwise the home supports one. The additional sites each require a walking route of at most twenty-four hexes, a physically returned current survey, conditional charter, operating record keeper and all existing founder, health, materials, reserve and labor checks. Only one founder expedition can be active from a home. Each site receives eight existing residents/six workers and a physically carried paid camp kit; no new starting grant, territory without establishment, goods or population is created. Outposts cannot sponsor nested expansion. Falling below current capacity prevents new dispatches and never confiscates retained outposts.

Evacuated sites still count. Losing administration blocks further expansion but preserves existing property, funded founder journeys, evacuation, supply and reoccupation rights. Save restoration accepts retained titles above current operating capacity, while rejecting more than six retained sites or conflicting founder expeditions. Capability derives from existing research, program and building state; older saves gain no office, registrar or additional rights automatically.

City Frontier & charters → Regional administration shows retained titles versus supported capacity, exact service blockers, separate staffing, the second site's distance limit and retained-title rules. Building/founder reviews explain the commitment. Existing cards open each outpost's separate stocks and needs. The later regional supply delivery above replaces the original shared-team/single-mandate limit with one actual team and one independently funded instruction per destination. This delivery enables three owned settlements; it does not complete M7's sustainable, exception-driven three-settlement management gate. Broader mandates, cross-settlement budgets, governor authority, specialization and family continuity remain required; local construction ceilings are delivered above. Research is eighteen of eighteen after the refuge delivery above, alongside other M0–M8 work.

Verification: 168 focused gameplay tests pass. Three new command-based registry scenarios physically research, import tools, construct/staff the office, survey and settle a second parcel, and deliver supplies to both camps while conserving all forty original residents and the single starting grant. They cover service suspension, staffing loss, preservation of funded work/rights, route limits, ownership, read-only quotes and save validation. Headless Edge against isolated .data-registry-qa verifies sixteen topics, two live outpost cards, registry staffing changes, retained ownership, reload, outpost navigation and 320/390/640/1440px layouts without page exceptions or horizontal overflow. The narrow administration panel was visually inspected. This is a deterministic command-level test with accelerated construction, not a long-term regional playtest.

Care institutions and staffed community treatment — September 21, 2026

Care institutions is the fifteenth working research topic and the second initial religion-branch choice. It requires learned Organized charity and Literacy, six village days of practice, an operating commons/camp and three research days, reserving eight timber/eight food/one tool. Adoption costs four timber/four food, assigns one care coordinator and uses one food per village day. Knowledge and adoption do not enable treatment automatically. Regional institutions and the refuge above now complete the initial eighteen-topic count; broader M4 work remains.

The new single-hex Community care hall costs sixty timber/fifteen food/one tool and ninety work. It requires cleared field/forest ground and active Care institutions through construction/rebuilding. It has two staff places, without free housing, storage or residents. Existing paid construction, repair, damage, ruin, demolition, salvage and crew rules apply. care-halls-10 supplies an explicit cottage-pair prototype motif and footprint/label fallback; bespoke institution art is not claimed complete. This checkpoint introduced the twenty-fifth definition; Land registry raised the catalog to twenty-six; the refuge above now brings it to twenty-seven.

City → People → Community care lets the steward explicitly enable secular public care or faith-supported care and choose a daily patient ceiling from one to thirty-two. Both choices use identical welfare rules and do not change residents' beliefs. Policy changes and changed care-hall staffing require one full village day before treatment. The coordinator must be active; a hall must be operational, at least 65% condition, staffed and free of building work. Each ready hall worker supports four patients. Disabling treatment is always available to the owner; hall staff and coordinator remain separate assignments that the player can release/suspend.

The first care model treats workers currently unavailable through the existing illness calculation. It records treatment-days, not unique named patients or invented population. Each actual patient consumes one extra food above the protected reserve, one spare daily water capacity after households and supplied irrigation, and one log per started group of four for heat and warm water. Treatment is capped by illness, policy, staff, meals, whole firewood and remaining water. It occurs only when that day's basic food, water and shelter needs were met. Full coverage adds four community-health recovery; partial coverage adds 4 × treated / sick workers, on top of existing healthy-day recovery and any separately operated charity service. Multiple halls expand capacity without stacking unlimited health bonuses. No supplies are spent when there are no eligible patients or requirements fail, and missed treatment is never banked.

The versioned people.care ledger defaults to disabled on older saves, with zero recorded treatment or consumption. It preserves policy, readiness, food/log/water use and the latest daily result; hall staffing readiness survives restore. Validation checks versions, bounds, ledger relationships and staff readiness. Daily treatment runs through the existing chronological village-needs step. People shows current blockers, capacity, spare water, last treatment and cumulative supplies. The food forecast includes estimated treatment meals at current readiness and explains that actual treatment is rechecked after daily needs/production. Population and resources remain authoritative; wider dependent care, named patients, advanced medicine, broader religious institutions and later civic policy remain open.

The full focused gameplay suite passes 165 tests. Six new care scenarios pass, including a command-only village that researches and builds care, experiences actual food hardship, restores production/foraging and pays for recovery without editing its stock, health or population. Other cases isolate finite supply/water/staff limits, religious/secular equivalence, full-day readiness, service loss, owner/revision checks, malformed saves, neutral migration and daily/offline equivalence. Headless Edge against .data-care-qa verifies the actual prior treatment ledger, reviewed public/faith choices and limits, no immediate spending, stop preserving assignments, reload, the hall's map location and 320/390/640/1440px layouts without exceptions or overflow. The narrow People panel and stop review were visually inspected. Full-suite evidence is recorded in the implementation ledger; all remaining M0–M8 gates stay in scope.

Funded recurring outpost supply mandates — September 21, 2026

City → Frontier & charters → Recurring food supply mandate is the first operating delegation rule. The charter owner can authorize its existing public accountant and scribe to maintain food stock at each established owned outpost through an independently funded instruction, following the regional extension above. Both Public accounting and Record keeping must be active, with their existing specialists, institutions and operating supplies. This adds a real administrative choice to those existing topics; that checkpoint left research at fourteen of eighteen. Care institutions, Land registry, Regional institutions and the refuge delivery above now bring it to eighteen working initial topics. Broader governor offices, taxes and constitutional powers remain later work.

The reviewed mandate specifies a target of one to ten resident-days of stored food, a maximum of one to fifty food cargo per trip, and a cumulative food authorization of one to 10,000 covering both cargo and travel provisions. Changing the ceiling cannot lower it below previously committed food. Authorization reserves no stock or workers immediately. Once per home village day, after that day's needs and production, the accountant checks actual destination stock against current residents × target days. The later tower-food planning delivery above adds an explicit option to include finite scheduled troop meals above at least the household reserve. Resident-only orders retain the original target. Neither mode forecasts future harvests or food consumed during transit. The instruction schedules its first check after the next village-day boundary; editing an active mandate cannot accelerate checks or create an extra dispatch.

A successful check calls the same authoritative outpost supply path as a manual order. Two available home residents carry actual paid food along a walkable route; cargo plus provisions fits sixty weight. The amount is bounded by the stock deficit, reviewed per-trip maximum, remaining authorization, home food reserve, carrier capacity and free destination storage. The later regional delivery above permits one actual two-worker carrying team per destination, shared with manual deliveries; both routes compete for home workers and stock. The mandate cannot claim land, change population, collect exports, issue military orders or use another steward's resources. Fire, low provisions, later storage changes and recall use the existing physical journey rules.

Missing specialists/institutions, unsafe routes, an existing carrying team, exhausted authorization, protected reserves, full destination storage and evacuated/evacuating destinations produce visible no-spend exceptions. Checks retry the next village day. Pausing is always available to the owner even when the specialists are missing, and stops only future dispatches. Funded journeys continue until arrival or separately reviewed recall. Returned food remains real stock but does not replenish mandate authorization; funding further commitments requires a reviewed higher total ceiling. A resumed mandate starts checking at the next village boundary without banking paused checks.

The original state.mandates.version: 1 introduced an empty ledger without changing stocks, people, ownership or existing orders; the version-four migration and neutral defaults are documented in the tower-food planning delivery above. Each instruction preserves its original home/destination, owner, schedule, committed food/cargo, trip count and last twenty decisions. Automatically dispatched jobs retain their mandate home ID. Restore validates links, authority, limits, chronology, counters and tagged journeys. Checks participate in the bounded chronological scheduler; accepted jobs start at the historical check time during offline catch-up, not at its endpoint. City exposes current blockers, ceilings, past spending, next check and an auditable decision history; settlement priorities surface active exceptions. The existing outpost journey card identifies mandated supplies and retains location/recall controls.

Verification: 159 tests pass in the focused gameplay suite. Five mandate cases use real research, survey, charter, founding and supply commands for the main paths, then isolate reserve/storage/fire edge cases. They cover exact allocation, paid travel, no immediate grant, pause with a team in flight, exhausted ceilings, returns without renewed authorization, manual-team competition, specialist suspension/recovery, privacy/revisions, rejected malformed saves, neutral migration and daily/offline equivalence. Headless Edge against isolated .data-mandates-qa verifies reviewed authorization/cancellation, pause/resume and changed limits, unchanged immediate stock, retained journeys, editable drafts through refresh, reload/history and 320/390/640/1440px layouts without exceptions or horizontal overflow. The narrow mandate panel and pause review were visually inspected. This is a bounded food-delivery mandate, not completion of M7: multiple-outpost administration, other cargo and recurring exchanges, named governors, broader operating budgets, wider three-settlement exception management and lawful family continuity remain open in the implementation ledger.

Live construction footprint preview — September 21, 2026

City → Buildings → Preview on map now opens a regional placement panel for every catalog building, including currently blocked choices. The player can tap a canonical hex, choose a plot with the keyboard, rotate in 60-degree steps, inspect blocked hexes, cancel without spending, or open the existing paid construction review. A preview stays attached to its chosen settlement: selecting outside its managed region disables review and shows the management boundary, rather than silently switching to another settlement's stock. The preview is temporary UI state; accepted construction remains durable and uses existing revisions, receipts and recovery controls.

The city projection includes rotated footprint cells even when research, institutions, materials or other construction requirements fail. Shared engine spatial checks drive both authoritative acceptance and per-cell preview reasons: settlement boundary, terrain, occupation, active work, fire and uncleared trees. Outside cells disclose only a boundary failure and never inspect another steward's vegetation or occupancy. An overall authoritative reason still explains anchor-specific requirements, techniques, prerequisites, reserves and materials. Ready footprints are green; blocked hexes are red with an ×; spatially clear footprints with another missing requirement are amber. A marks the anchor and dashed hexes identify managed land. No preview clears vegetation, changes terrain, reserves a site or spends stock.

Fresh city and world revisions are required before review and confirmation. Moving or rotating clears the old ghost while requesting a new projection; stale reviews remain disabled even after a fresh city response. Successful construction removes the preview. The map panel preserves opened explanations and keyboard focus through refreshes. Narrow layouts shorten the map header and place the footprint in the visible gap above the controls, with 44px actions and an accessible plot selector. Global/Hex views offer a return to the regional footprint. This uses whole canonical hexes; arbitrary inner-hex plots remain future work; the catalog eligibility filters are delivered above.

Verification: 154 tests pass in the focused gameplay suite. Three added cases verify six distinct rotations, read-only rejected projections, per-cell blockers, no outside-state reads, agreement between quotes and accepted footprints, and steward-only projection. Existing stale-review, exact spending, idempotency and restore cases still pass. Headless Edge against isolated .data-building-placement-qa verifies actual rotated ghosts, no-spend cancellation, reviewed paid house construction, reload, genuine touch selection, outside-boundary blocking, retained disclosures and stale confirmation after a competing policy command. Desktop and 640/390/320px checks pass without exceptions or horizontal overflow; the final 320px view was visually inspected with the full footprint and all actions visible. The primary M1 preview gap is delivered; broader services, district operations and recovery work, plus all other outstanding M0–M8 gates, remain in the implementation ledger.

Field logistics and patrol rendezvous — September 21, 2026

The army branch now has three working initial topics: Drill, Scouting and Field logistics. This checkpoint brought research to fourteen of eighteen. Care institutions, Land registry, Regional institutions and the refuge delivery above raise it to eighteen working initial topics. Field logistics requires learned Scouting and Record keeping, six village days of practice, an operating commons/camp and three research days. It reserves eight timber/eight food/one tool; adoption costs six timber/one tool, assigns one quartermaster and consumes one timber-equivalent planning supply per day.

City → Defense & patrol → Field resupply uses an operational storehouse at condition 65 or more as the home supply depot. It requires active Field logistics, two available civilian carriers and an outward/homeward or guarding militia already at a field hex. Dispatch reserves actual food, holds the unit at that exact rendezvous and sends the carriers along the surveyed prefix of its existing patrol route. The village storehouse shares the existing finite village inventory; this is not a separate forward-depot stock network. The UI sends two soldier-days of food; the command accepts whole quantities up to the unit's four-day carrying capacity. Food-only trips need at least one food; the equipment extension above allows zero soldier-food when carrying real kits. Carrier provisions are ceil(round-trip hexes × 2 / 12) + 4 food; cargo plus rations must fit sixty weight. Routes advance twelve adjacent land hexes per village day.

The militia continues consuming carried food while waiting. Delivery happens only when carriers and the linked unit meet at the rendezvous. It fills the unit up to four soldier-days; excess stays with the team and returns home physically. Delivery ends the hold and restores the unit's previous outward/homeward order. Supply-team recall also releases the hold; patrol recall sends both groups home. Neither action teleports people, food or refunds. If the patrol exhausts rations it withdraws and the carriers return their undelivered supplies. Fire blocks movement and consumes waiting provisions; carriers can eat their food cargo after dedicated provisions, and low remaining provisions trigger return.

Accepted trips retain their supplies and obligations if the quartermaster is later suspended or its institution fails. Returning goods enter village stock only when physically unloaded. Full home storage retains the remaining food and two assigned carriers; those carriers then eat through household stock, not travel rations. Militia and carrier consumption is reconciled at village-day boundaries before household demand so travelling residents are not fed twice. Carriers remain civilian residents and reserved workers throughout the journey; they cannot be silently released by the crafting-worker illness handler. Soldiers remain mobilized separately.

Supply jobs use additive militaryVersion: 1 / supplyVersion: 1 state and a food custody ledger: paid food equals remaining cargo, carrier provisions, consumed food, delivered food and returned food. Restore validates finite nonnegative quantities, capacity, actual route prefix, one team per village, owner/home, and both sides of an active rendezvous link. Older militia state needs no inventory or population conversion. Shared command revisions, receipts and persistence prevent duplicate dispatch; a second trip waits for the previous team to return and unload.

Defense reviews disclose committed food, carrier labor, the held hex, carrying limit, physical return, fire and withdrawal. Workers counts the team under carriers; Orders links to Defense. The regional map marks Supply carriers at their actual hex separately from the militia. Field logistics is also available through the existing manuscript copying/delivery/study system. Forward depots, broader routes, advanced equipment/ammunition delivery, field reinforcements, fort garrisons and broader escort orders, wages and advanced forces remain outstanding; the food and basic kit rendezvous do not complete M5 or the larger campaign system.

Verification: 151 tests pass in the full focused gameplay suite. Five added military cases cover real research/depot/carrier requirements, immutable quotes, no delivery before physical arrival, held/resumed patrols, excess-food return, both recalls, rights/reserves/labor, supply and rendezvous corruption, continuation after service loss, fire/starvation, full-storage retention, restoration and daily/offline food equivalence. The prepared test village constructs on actual free field plots without terrain edits. Headless Edge against isolated .data-field-logistics-qa, seeded through commands, verifies review/cancel/dispatch, thirteen allocated food, two carriers, the held militia, reload, physical map marker, recall and 320/390/640/1440px layouts without exceptions/overflow. The final recall state was rechecked after correcting a case-sensitive QA text assertion. Mobile panel and regional marker were visually inspected.

The full M0–M8 plan and implementation ledger remain active, including broader institutions, economy/administration and lawful realm/family continuity.

Literacy, schools and physical manuscript diffusion — September 21, 2026

Culture implements Record keeping → Literacy → Scholarship. This checkpoint introduced topics twelve and thirteen; later logistics, care and registry deliveries bring the current total to eighteen with Regional institutions and Sacred and civic architecture. Building, agriculture, culture and army each have three; politics and religion now also have three. The initial eighteen-topic count is now met; later milestones remain part of the active goal.

Literacy requires learned Record keeping, four village days of practice, an operating commons/camp and three research days with two residents. It reserves eight timber/six food; adoption costs six timber/four food, assigns one teacher and consumes one food/day above protected reserves. The teacher unlocks construction/rebuilding of a Community school and archive on a cleared forest/field hex: fifty timber, twelve food, one tool and ninety base work units. Its one operating staff member is distinct from the teacher and from project learners. The school uses an existing cottage-pair motif as a prototype fallback; it grants no population, free labor or storage capacity. Losing Literacy queues unfinished school construction; completed buildings remain.

Scholarship requires learned Literacy, six village days of practice and a staffed operational school. Three research days reserve ten timber/eight food/one tool. Adoption costs six timber and assigns one scholar, consuming one timber-equivalent writing supply per day. School staff, teacher/scholar programs, learners, crews and transport all compete for actual residents. A functioning outpost camp now supports the same basic commons-based knowledge projects as a village commons at condition 65 or better; it does not replace topic-specific mills, fields, lodges or schools. This lets an outpost build its own educational capability using local research and delivered materials.

Copy manuscript reserves four timber/two food and two residents for two full village days at a staffed school with active Scholarship. The community must already know the chosen topic. Completion creates exactly one manuscript-<topic> item only if a whole storage unit is available; otherwise the completed project and its two residents wait, with no duplicated output. Copying is a physical material recipe using the existing timber-equivalent writing-supply abstraction; a separate paper/parchment industry remains future supply-chain work.

Study manuscript requires active Literacy, a staffed school, the topic's learned prerequisites, two residents, one actual matching manuscript, two timber and four food. It occupies the same single public project slot as research or copying. Two completed days teach the topic with manuscript-study provenance. The book is reserved on acceptance and committed to the class on its first completed day: cancelling before that point returns it; cancelling afterward does not. Study replaces production-practice and topic-specific research-institution requirements, allowing a school to teach an imported technique before its industry exists. It never bypasses prerequisites or automatically adopts the technique; actual application still requires its local institution, specialists, supplies and rights.

Books occupy one storage unit and one transport-weight unit each. Home/outpost supply trips can deliver or collect specific available volumes; cargo, destination escrow, recall, fire, storage and physical return use the existing transport rules. Delivery alone never teaches anything. Books are indivisible during storage credit/unloading and restored cargo validation. Evacuation's existing prioritized cargo list leaves manuscripts on site, disclosed with other retained goods; they can be collected through supply trips. Separately consented player barter and recurring manuscript exchange are now delivered above. Coin sales of books, licensing, broader educational diplomacy and travelling teachers remain outstanding.

Pause releases learners and retains completed work and unused supplies. Institution/service loss blocks learning immediately; automatic recovery waits for available residents and a new full day. Cancellation follows the existing checked refund path; completed-but-stored copying can be cancelled without creating a book or refunding invested materials. Additive knowledge.manuscriptVersion: 1 migration grants no books or knowledge and preserves older research projects lacking a kind field. Restore validates project type, exact cost/progress ledgers, known-versus-copying state and whole valid manuscript inventories. Existing learned knowledge keeps its original source.

City Research now shows persistent prerequisite names and research institutions, with a per-topic Manuscripts panel for actual stock, copy/study costs, blockers and reviewed controls. Current projects distinguish research, copy and study. Frontier cards expose delivery/collection offers for books actually in stock. School construction reviews use the generic technique requirement, without the framed house's fire warning. Old hardcoded topic counts are superseded by the current eighteen-topic catalog.

Verification: 146 tests pass in the full focused gameplay suite, including five education cases. The command-only integration path builds schools, copies Joinery, founds and supplies an outpost, physically ships/recalls/reserves books, studies the delivered copy and confirms adoption still needs a lumbermill. It preserves forty people, finite food and labor; the outpost releases a forager to make room for the actual four-person school crew. Additional tests cover institution interruption, refunds before/after book consumption, completed-copy storage blockage, whole-item capacity, malformed saves, neutral migration and daily/offline equivalence. Headless Edge against isolated .data-education-qa passed copy/study review and cancellation, exact refunds, pause/reload/resume, actual stock and delivery-option presentation at 320/390/640/1440px without exceptions or overflow. Narrow study review and manuscript panel were visually inspected.

The implementation ledger tracks named specialist training, larger institutions, broader diffusion/contracts and all remaining M0–M8 gates. Physical knowledge exchange now supports owned outposts and separately consented player trade. The full regional education network remains unfinished.

Timber framing and construction planning — September 21, 2026

The building branch implements Joinery → Timber framing → Construction planning, with Public accounting as a cross-branch prerequisite for planning. This checkpoint raised research to eleven topics; later education, logistics, care and registry additions above bring the current count to eighteen with Regional institutions and Sacred and civic architecture. Later progression remains outstanding; completing these three building choices does not complete M4.

Timber framing needs learned Joinery, nine recorded timber production, a staffed operational lumbermill and three full research days with two researchers. Research reserves twelve timber/six food/one tool; local adoption costs eight timber/one tool and assigns one framing specialist. It unlocks the Timber-framed house: one cleared field/forest hex, eight housing places, 110 timber/20 food/two tools and 140 base work units, subject to existing Joinery discounts and paid logistics support. It creates no residents or civilian workers. The ordinary four-place town house remains available without advanced research.

New framed-house construction and rebuilding require the active framing service. Losing it immediately queues that work with its footprint, materials, stage, remaining time and refund basis preserved. Re-enabling the service lets the queue allocate its four workers again. Completed houses retain shelter without a framing specialist; ordinary repair, demolition and salvage remain available for recovery. The larger material bill also increases repair costs, and fire deals 20% more damage to this structure. No new general maintenance simulation is implied. The new catalog/semantic recipe uses the existing cottage-pair motif as a disclosed prototype fallback.

Construction planning needs learned Timber framing and Public accounting, six village days of practice, the operational commons and three full research days. Research reserves ten timber/eight food/one tool; adoption costs six timber/one tool and assigns one foreman. The program consumes one timber-equivalent planning supply per full village day. It raises simultaneous four-person building/land crew slots from one to two; both jobs still need actual available residents and their own paid inputs. Forestry crews keep their existing two-person rules. The learned prerequisite does not automatically adopt a public-accounting budget; enabled budgets still govern every new commitment normally.

If the foreman, commons or daily supply is unavailable, the later running building/land crew returns to the queue. The older eligible crew continues; there is no free extra crew. Queued work can resume when the first finishes, or when planning recovers and workers are available. Manual pause still lets later work proceed. Suspended time does not count as work or reduce cancellation refunds. Land-specific interruptions retain their established stage-check behavior. Existing pre-crew saved orders preserve their previous timing; older knowledge ledgers gain no free discoveries or programs. No new state version or inventory conversion is required for these additive catalog entries.

City Research reviews disclose the actual effects, specialists and upkeep. Buildings shows housing capacity, required adoption, fire exposure and recovery; construction review shows the current crew-slot count and four-worker requirement. Workers shows available slots, and Orders exposes specific queue blockers. Script/recipe cache versions are updated. Verification: 141 tests pass in the full focused gameplay suite, including the integrated journey and new housing, capability-loss, two-crew, shortage/refund, restart and offline-equivalence cases. Headless Edge against isolated .data-framing-qa-2, seeded through actual research and imports, passed adoption review/cancel, two concurrent building crews, specialist suspension/queue, reload/resume and final housing 52 with population 40. Layout checks at 320/390/640/1440px found no overflow or page exceptions; the narrow research card was visually inspected.

The full implementation ledger retains remaining M0–M8 gates, including specialist training, larger workshops, broader district operations, wider institutions, logistics, administration and realm/family continuity.

Integrated village journey and outpost reoccupation — September 21, 2026

The first village → production bottleneck → supplied patrol → land improvement → supplied outpost journey now passes in one world through actual player commands. The scenario founds a village, sustains its households, researches and adopts techniques, imports finite goods, equips/trains/demobilizes a patrol, resolves a real mill input shortage, reclaims and irrigates woodland, and establishes and supplies an outpost. It exercises material and worker constraints rather than editing stocks, terrain or residents. Save restoration is checked at intermediate stages. The walkthrough records the sequence and its limits: a deterministic command-level acceptance scenario with accelerated construction, not a broad human playtest or completion of M0–M8.

Home City → Frontier & charters → Review reoccupation now sends eight existing residents/six workers back to an evacuated owned outpost. It uses the original charter, requires the same home health/record-keeper/workforce safeguards as founding, and carries 60 timber, four tools, 64 food plus travel/setup provisions. There is no second founding grant, new region or free population. An intact operational camp at condition 50 or more is reused on arrival without spending the repair kit; its existing condition is preserved. A damaged, ruined, dismantled or missing camp consumes 40 timber/two tools and takes two village days of assembly before residents arrive. Returning settlers perform that work themselves, so recovery does not require workers already living at the empty site.

Existing buildings, land improvements, retained goods, charter history and knowledge remain. Reoccupation begins a fresh full household day, closes migration initially and restores only the people and goods actually carried. The quote checks storage including a rebuilt camp; arrival/completion rechecks it. If space has disappeared in transit, people and goods physically return home and the site stays evacuated. Recall before repair starts returns the unused kit; already spent repair inputs are lost. New local mutation orders wait while settlers are outward/assembling, except fire response; journey recall remains available from home. Versioned transfer restoration accepts the new reoccupation role and validates its retained home/site relationship.

Supply trips can also visit evacuated retained sites, allowing paid provision deliveries and physical collection of retained timber/logs before resettlement. Collection reservations, carrier labor, rations, storage and recall use the existing finite transport rules. Home cards and reviews disclose camp reuse versus repair, costs, remaining property and journey state; the map labels the expedition Returning settlers. Selling/relinquishing an established site, wider administration and multiple outposts remain outstanding.

Verification: 137 tests passed in the full focused gameplay run, including the integrated journey and three new reoccupation cases. A subsequent outpost-only run passed all twelve cases, adding the changed-storage return case: 138 distinct passing scenarios. Coverage includes intact and dismantled camps, retained-property conservation, actual empty-site supply/collection, recall, owner checks, local-order exclusion, offline/reload equivalence and a new full household day. Headless Edge against isolated .data-reoccupation-qa passed review/cancel/confirm, reload, returning-settler markers, recall and retained-stock collection, with no exceptions or horizontal overflow at 320/390/640/1440px. Mobile and regional screenshots were visually inspected. The full goal remains active; remaining gates are in the implementation ledger.

Founder expeditions, supplied woodland outposts and evacuation — September 21, 2026

City → Frontier & charters now consumes a valid conditional charter to dispatch actual founders, establish a separately managed camp, exchange goods with home and evacuate its residents. The first supplied-outpost component of the integrated journey is playable; reoccupation is delivered above. M6 is still partial: the first outpost uses explicitly released seven-hex frontier parcels and existing owner identity. Land registry above now permits a second retained outpost with additional staffed administration and a distance limit. Wider tenure, multi-site logistics and government are not complete.

Dispatch requires the operating record keeper, community health at least 80, six unassigned healthy civilian workers and two dependents, leaving at least eight residents at home. Eight residents and six civilian workers are subtracted from home once and entered in a versioned transfer ledger. They are neither home labor nor home food demand while travelling. Existing migration policy remains in effect: freed home housing can attract real households from the finite waystation, and returning founders can consequently cause overcrowding. No extra founding grant, free residents or duplicated workers are created.

The expedition carries 60 timber, four tools, 64 camp food plus ceil(round-trip hexes × 8 / 12) + 32 travel/setup provisions, at most 300 weight. Food, tools and timber leave home stock on dispatch, respecting food reserves and public budgets. Founders walk twelve adjacent land hexes per four-hour village day. The dispatched expedition holds the exact parcel after consuming the conditional charter, so that charter expiry cannot enable a competing founding while the expedition is outward or establishing. Recall frees that hold as the people physically return.

Arrival starts two village days of assembly, represented by 24 chronological work checks. Forty timber and two tools are spent when assembly begins; recalling before arrival returns those unused materials, while recalling after assembly starts loses that camp kit. No building, land command authority or destination population exists before completion. Completion activates the canonical seven-hex region, creates the paid Outpost camp and depot, moves the eight travellers into its population, and transfers all remaining cargo/provisions to its private inventory once. Original woodland parcels add no mineral deposit or resource grant. For the separately released resource parcels above, establishment activates the recorded finite seam without adding ore inventory. Generated geography and the base manifest stay unchanged; the new region is validated durable charter state. Camp art currently reuses the existing domestic motif/fallback, not a bespoke finished camp illustration.

The camp supplies eight housing places, 400 aggregate storage and twelve units of the parcel's surveyed well capacity while operational at condition 50 or more. It has six civilian workers, ordinary daily food/health/storage rules, three protected reserve days, neutral research/defense ledgers and closed migration by default. It grants no farm or mill. Existing crew-based selective harvest/clearing produces real local logs and changes woodland cover/maturity. The player can use normal building, staffing, replanting, repair and land rules within the new owned region, subject to available people, supplies and institutions. Empty food stores reduce health; losing the camp removes its shelter/storage/water benefits. Home supply, local production and foraging remain actual player choices.

One two-worker carrying team per home village supports repeated trips to its own outpost. Each trip has sixty weight including rations, with a four-food delay reserve and food for the planned round trip. Supported cargo/collection resources are food, timber, logs, tools, iron and bricks. Both legs use actual walking time. Collection stock is removed from usable outpost inventory into a reservation that continues to occupy outpost storage. Deliveries enter the destination only on arrival; collected goods enter home inventory only after return. Full destination storage delays exchange, and full home storage retains goods with the carriers. Outward recall releases the collection reservation without duplicating it, then carries exports home. Fire delays consume provisions; low provisions trigger return, and food cargo may feed the team if dedicated rations run out. Daily accounting avoids feeding carriers twice.

The initial UI offers food plus a replacement tool, food/tools in exchange for twenty already-harvested logs, and twenty timber plus a tool for construction. These are repeatable reviewed trips, not automatic free imports or a standing scheduled convoy. The camp's stock, residents, workers, food runway and storage are visible from home; Manage outpost opens its separate live City and Manage home village returns to the parent. Journey markers distinguish founders, supply and evacuation at their actual hexes. Orders links to these controls.

Evacuation requires closed migration, released staff and completed/cancelled local jobs, research projects, military assignments and linked journeys. All remaining residents/workers leave the outpost once and walk home; an emergency departure is allowed without adequate food, with shortage effects disclosed and applied to arrival health. Carrying capacity is bounded by the remaining population/workforce and at most 300 weight; food, tools, iron, timber, bricks and logs are loaded in that order. The review lists exact carried goods, goods left behind and travel food needed. Buildings, charter history, rights and remaining inventory persist at the evacuated site. Arriving residents rejoin home once; two workers hold any cargo that cannot fit. The player can continue at home and reoccupy using the later implementation above; selling or relinquishing an established site remains pending. The one-outpost limit currently includes an evacuated site.

Version-1 outpost links and transfer ledgers migrate old saves neutrally. Restore verifies canonical regions, owner/home relationships, transfer sequence, population assignments, movement routes, cargo limits and assembly state. Camp completion, actual deliveries, recalls and returns use the existing durable command/event/receipt path and bounded chronological replay.

Verification: 133 tests pass in the full focused gameplay suite. Eight new outpost cases cover immutable quotes, actual founder transfer, no early territory/building, staged establishment, owner authority, selective harvest and two-way goods exchange, recall before/after kit spending, escrow/full-storage conservation, evacuation, offline/restart equivalence, malformed ledgers and duplicate receipts. Headless Edge against isolated .data-outposts-qa verifies reviewed dispatch/reload/recall, supplies, separate City management, evacuation, journey markers and 320/390/640/1440px layouts without exceptions/overflow. Mobile views and the activated outpost's regional view were visually inspected; the map capture waits for regional presentation and the camp's subscribed state.

Reoccupation and command-level verification of the combined one-world journey are now delivered above. Further work includes stronger recovery, remaining M0–M6 gates, four outstanding initial research topics after Field logistics, and the M7–M8 progression. The full implementation ledger and M0–M8 plan remain active. This delivery supersedes earlier statements that outpost expeditions, zone activation, goods exchange and evacuation are entirely unimplemented.

Physical frontier surveys and conditional charters — September 21, 2026

City → Frontier & charters now sends a two-resident survey team along an actual walking route, spends carried provisions, performs one full village day of on-site work and returns a durable report. This is the first M6 implementation. This checkpoint established survey/rights prerequisites; the later delivery above adds founder expeditions, camp activation, repeatable supply trips and evacuation.

The initial survey release offered the existing deterministic seven-hex woodland-frontier parcels; later mineral and coastal worksite extensions add separate versioned resource parcels. Their bounded scenario authority is released-frontier-v1: these parcels are explicitly available settlement land with no represented resident/customary claim. This is not inferred permission to occupy other unowned atlas cells. Existing founded regions, founding reservations and live conditional charters exclude a parcel. Candidate geometry and base world generation remain unchanged. The original woodland parcels retain renewable woodland and rain-fed fields. Later sections above describe the delivered iron, clay, building-stone and fish sites; broader NPC/tenure negotiation remains open.

The survey reserves two currently available residents and costs four timber, one tool and carried food. The food allocation is ceil(round-trip hexes × 2 workers / 12) + 6: it covers travel, a two-food day on site and a four-food delay allowance. Routes are adjacent walkable land, bounded to sixty hexes each way, at twelve hexes per four-hour village day. Instruments/writing materials are spent on dispatch, with no cancellation refund; unused food returns physically. A survey leaves population and civilian capacity unchanged while assigning two workers unavailable to production, research or other crews. Emigration cannot take those workers. Household daily accounting consumes travel food once and records shortages without double feeding.

The on-site day uses twelve movement-length checks. A report becomes available only after the team returns home, with resource/water suitability and the explicit tenure basis. Surveying gives no ownership, residents, buildings or extracted goods. If founding rights change while a team is outward/on site, it turns back without a completed report. Fire blocks movement; low provisions trigger return. Recall can interrupt outward travel or unfinished on-site work. Return follows the physical route and can itself be blocked. Full home storage retains unused provisions with the team until space exists; returned reports are delivered even if unloading food is delayed. Reports, active phases and up to twenty completed trips persist through reload and bounded offline replay.

A returned survey no older than fourteen village days plus an operating record keeper can register one conditional outpost charter per village. The charter reserves the exact released parcel for fourteen village days without activating territory. It pays no new materials; the existing scribe retains ordinary staffing/upkeep. A charter blocks both competing charters and first-village founding. Release is immediate without a refund and retains the report. Expiry automatically frees the parcel; a stale report needs a new physical survey. Current claims, site availability and ownership are revalidated on acceptance through the durable command path. These are conditional frontier rights, not the later public-office, purchase, lease, treaty or conquest systems.

The City tab reviews costs, people, walking time, survey duration, risks, rights and recovery. It displays team phase, current canonical hex, food, on-site progress, returned reports and charter expiry. Workers separates surveyors; Orders links to the survey controls. The regional map shows the owner's survey marker at its actual cell. Private City projections require the village owner. A version-1 expansion ledger is added neutrally to existing saves; active route/worker/phase records and conditional rights are validated on restoration.

Verification: 125 tests pass in the full focused gameplay suite, including nine expansion scenarios for actual travel and conservation, report return, charter prerequisites/exclusivity/expiry, competing founding, recall/fire/full storage, rights/revisions, idempotency, offline replay and additive save restoration. The twelve map/navigation tests also pass after adding the marker (reruns, not extra scenarios). Headless Edge against isolated .data-expansion-qa verifies reviewed registration/release, dispatch, finite tools/residents, reload, recall and the marker at 320/390/640/1440px without page exceptions or horizontal overflow. Mobile and map screenshots were visually inspected.

The later delivery above consumes conditional charters with real founder expeditions and adds outpost activation, repeatable physical supply trips and evacuation. The survey-only limits in this historical checkpoint describe its delivery stage. M6 and the full M0–M8 goal remain incomplete; see the current implementation ledger.

Staged land stewardship and finite well irrigation — September 21, 2026

City → Land & water now supports owner-checked plot surveys, compost batches, staged soil preparation and small irrigation, maintenance, fallow/cultivation, channel shutdown and retirement. Reviews show current versus completed suitability, actual materials, crew/time/stages, lost uses, water commitments, maintenance and recovery alternatives. Orders supplies the existing pause/resume/cancel and unused-material refund controls. Completed soil furrows and supplied/dry channels appear on the regional map above vegetation and beneath structures. The separate Terraforming planner remains a labeled sample interface.

The later Crop rotation field choice above can also produce four compost per full-staff village day alongside 32 prepared food. It replaces that plot's basic 44-food output and needs the active soil steward; the paid commons batch below remains an independent way to obtain eight compost from logs and food.

Generated biome, elevation, moisture, seed and manifest remain unchanged. The originally additive version-one land ledger, now version two after the whole-compost migration above, records the surveyed origin and completed improvements per canonical owned cell. Effective terrain drives new building suitability, footprint checks, crop selection and harvests. Previews are read-only and describe terrain eligibility; deposits, clearing, ownership, footprints and other prerequisites still apply. Old charter saves receive no free improvements or compost. Restore validates origins, ownership, conditions, water sources and funded job stages.

Land projects share the single four-person building crew and its FIFO queue; compost uses two residents. Materials are committed once. No benefit appears before the final phase. Work on an existing food plot suspends harvest while retaining its workplace assignments. Its land job does not disable the same institution's soil research service. Fire, unavailable adopted services or water commitments can queue interrupted work with paid materials and completed effort retained. Cancellation uses the existing proportional unused-material ledger; completed batches cannot create refunds and output together.

Soil preparation requires adopted Crop rotation and soil stewardship, a survey, cleared cover at most 20%, forest/field substrate, elevation at most 0.68 and natural moisture 0.30–0.85. Prepared soil prevents woodland regrowth, adds 0.03 effective moisture and 10% food output while condition is at least 50. The field substrate persists after fertility wears out. Fallow stops harvest and recovers five condition points per village day; cultivation resumes with a fresh growing day. Retiring soil requires an empty plot and retired channels, removes its benefits without refunds and restores the generated substrate without granting trees or minerals. Woodland planting requires retirement first.

Irrigation requires adopted Irrigation, suitable cleared fields and eight spare source units above households and existing completed/funded reservations. The operational commons provides its existing surveyed 60-unit well; this is a local capacity model, not hydrology. Each supplied plot adds 0.12 moisture. Households have priority; oldest completed eligible channels receive the remaining capacity. Disabled, fallow, under-work or worn channels do not draw water, and unavailable water stewardship stops delivery. Enabled completed channels and funded projects retain planning reservations until disabled, retired or cancelled. Migration sees actual irrigation use in remaining household capacity. Maintenance consumes supplies and time; condition below 50 removes delivery. Source loss stops irrigation. Current effective capacity also includes actual signed-conduit imports and deducts exports, as described in Shared village waterworks above. Local drainage and terraces are implemented under their maintained-project rules. Groundwater depletion, downstream watershed effects and major river waterworks remain future work.

These two agriculture topics raise research to nine of eighteen initial topics across six branches. Crop rotation requires learned seed selection, 88 produced food, three research days and {food: 8, timber: 4, tools: 1}; adoption consumes four food and one tool and assigns one steward. Irrigation requires learned crop rotation and joinery, four village days of practice, three research days and {timber: 10, food: 8, tools: 1}; adoption consumes six timber and one tool and assigns one water steward. Both share finite residents. Seed selection now also offers garden vegetables: 60 food per fully staffed plot/day at moisture 0.66. Irrigation can enable that crop; lost moisture stops its harvest instead of banking missed production.

Verification: 116 tests pass in the full focused gameplay suite, including ten land scenarios for materials/stages, effective construction, institution continuity, crew/refund conservation, water competition, crop interruption, fallow, wear/maintenance, rights/save migration and offline equivalence. Twelve map/navigation tests pass again after the final renderer-layer correction; these are reruns, not additional scenarios. Headless Edge in isolated .data-land-qa verifies reviewed survey/maintenance, pause/reload/resume/cancel, fallow/water changes, and 320/390/640/1440px layouts without exceptions or horizontal overflow. Mobile and completed-land map screenshots were visually inspected.

M4 and M5 remain partial. The later supplied-outpost delivery above completes the initial set of integrated-journey components; their combined one-world command-level journey is now verified above. The full M0–M8 plan and implementation ledger remain active. This section supersedes earlier absence-of-land-improvements statements and seven-topic counts; broad terraforming, research and regional expansion are not complete.

Resident militia and supplied patrols — September 21, 2026

City → Defense & patrol now connects physical iron imports and timber to equipment, researched/adopted Drill, recruited residents, training, a surveyed frontier patrol, wounds/recovery, refitting and demobilization. The owner’s militia appears at its actual canonical hex on the regional map. City and Orders can focus it. This is partial M5; the older standalone Military destination remains a labeled rehearsal for broader future systems.

Drill was the seventh implemented research topic. It requires two village days of practice, the commons, two research days and {timber: 6, food: 6, tools: 1}. Adoption costs four timber and one tool, then requires one instructor and one food/day. Subsequent deliveries above bring the initial eighteen-topic gate to eighteen working topics. A physical militia kit uses two timber and one iron. Two civilian workers craft a batch of two, four or six at an operational commons over one four-hour village day. Lost staff/infrastructure pause work while retaining paid materials; full storage retains completed kits with the team. Batch cancellation is not yet available and is disclosed before acceptance.

Each charter can mobilize one two/four/six-person force, with one kit per recruit. Recruitment requires healthy unassigned residents and transfers them from civilian laborBase into a separate mobilization ledger; total population, housing and water demand are unchanged. Six recruits remove one quarter of the starting 24-worker capacity. The unit leader is included. People distinguishes civilians, militia and dependents. Emigration cannot select mobilized members or caravan workers. All remaining crafting, service and production assignments share finite civilians.

Training needs two full days with operating commons, Drill instructor and household food. Interruption retains completed days and equipment. Units record people, training, wounds, condition, morale, fatigue and provisions. Training/resting members eat as residents; travelling members consume carried rations whose elapsed demand is subtracted from home consumption, preventing double feeding. Wounded members stay mobilized and cannot demobilize into productive workers. A functional home commons, met food needs and health of at least 65 recover one wound, twenty fatigue and ten morale per day.

A reviewed Scouting survey explicitly opens a finite frontier PvE scenario: up to six walking hexes toward the waystation and one small armed camp at the endpoint. There is no ambient bandit ecology or unlimited spawning. Unsurveyed villages gain no surprise raids. Once revealed, that camp can take up to four travel food from a passing caravan once per trip; contract export/import cargo remains intact. Stolen food is recorded in the camp ledger. The City shows observed risk bands rather than promising exact hidden enemy strength.

Patrol departure allocates actual round-trip food plus two delay days, within four food/person carrying capacity and the protected village reserve. Movement is one adjacent hex per twelfth of a village day. Fire blocks movement while food is consumed. Exhaustion changes the standing order to withdraw; recall walks the physical return route and a fire can still block retreat. Deterministic contact compares equipment/morale-weighted strength with the finite group. A supplied four-person patrol normally wins with one wound, two normally withdraw wounded, and six normally win without a wound. Contact wears equipment and morale, records the outcome and sends the unit home. Clearing the camp prevents its later caravan raids. PvP, annexation and combat deaths are not introduced in this first encounter.

Unused provisions enter finite home storage, with overflow held by the unit. Refitting consumes timber/iron proportional to wear and a full day at the commons. Home demobilization returns residents and whole usable kits in proportion to condition; the review discloses lost worn kits and refuses the complete transaction if storage cannot hold the refund. Wounds must recover first; training can be cancelled by demobilizing. This is community militia without a wage/coin system.

Version-1 defense/mobilization ledgers and military jobs migrate older charters additively with zero kits and zero mobilization. Restoration checks units against the resident-transfer ledger, batch funding, routes, phases, condition and rations. Owner/revision checks, durable receipts and bounded chronological offline replay apply. Military work does not occupy the commons hex as a construction footprint. The internal enemy-strength record is omitted from public overview and City settlement copies.

Validation: 104 tests passed in the full focused suite plus two additional passing military tests, 106 distinct scenarios. Nine military cases cover imports/crafting, real population/workforce transfer, Drill/training, consequential raids and clearance, wounds/refit, supply/recall/exhaustion, storage/refund conservation, private rights, interrupted work, emigration, offline equivalence and save validation. Twelve map/navigation tests also pass after adding the militia marker. Headless Edge verifies reviewed dispatch, food allocation, reload, recall, demobilization/recruitment, 320–1440px layouts and the live map marker without page exceptions. Mobile and map screenshots were visually inspected.

M5 still needs fort garrisons, broader escort arrangements and defensive roles, advanced unit equipment/training, wages, mortality, ammunition, forward depots and broader supply routes, advanced equipment delivery, field reinforcement and richer threats. Timed corridor guards, physical food rendezvous, staged soil/irrigation improvements and a supplied woodland outpost are now delivered above; later military and regional roles remain open. The full M0–M8 ledger remains active. This section supersedes earlier absence-of-troops statements; its seven-topic count and validation totals describe the military delivery checkpoint.

Community research and local adoption — September 21, 2026

City → Research & adoption initially delivered one public community experiment at a time. The academy implementation above now adds one separately funded research project while preserving that original slot. Six first topics, one per branch, are functional. This is partial M4 delivery; the complete first release still requires eighteen topics and its remaining institutions/actions. Starting construction, cultivation and transport remain available without research. The shared Greywood/Tidebreak scenarios retain their legacy rules.

Research needs two otherwise available residents, actual supplies above protected food reserves, and an operational institution in at least 65 condition; production institutions need assigned staff. Supplies are reserved on funding and progressively consumed at each completed experiment day. Topics take two or three full village days (four real hours each), with progress evaluated at village ticks. Practice comes from production, delivered tools and elapsed operation, is capped, and does not reward demolition loops. Public accounting additionally requires learned record keeping. There is no faith currency or mandatory religion.

Learning retains community knowledge but does not activate its effect. Adoption pays a separate initial installation cost and assigns operating specialists from the same resident pool. Disabling releases them and stops the benefit; re-enabling an installed program does not charge installation again. Institution loss or shortage interrupts programs, with automatic recovery when daily checks find staff and supplies. Illness releases researchers and specialists before ordinary work crews; invested research and learned knowledge remain. The public budget remains enforceable while its policy is enabled, including during a staffing interruption. Limits govern new gross commitments, so cancellation cannot replenish a day's spending allowance; existing funded work is preserved.

Pause releases the researchers and retains progress/supplies. Resume requires the institution and two residents, then waits a new full experiment day. Cancellation returns only unused supplies and is rejected if storage cannot hold the refund; the City never silently discards it. Owner checks, target/world revisions, durable receipts and bounded chronological offline advancement apply to research commands. A version-1 knowledge ledger is added to older charter saves with no invented historical practice or learned technologies; restore validates project funding, progress, program ownership and crop identifiers.

Changing an existing plot's crop costs two food, checks effective moisture and restarts its full growing day. Land improvements above now affect construction suitability and crop harvests. Selected crops pause if seed-selection service is unavailable, and missed harvests do not accumulate. Scout detours use canonical adjacent land hexes, retain real movement times/cargo/ration consumption and survive reload. Scouts cannot cross water or a burning destination, and detours can exhaust provisions. The military delivery above adds a bounded hostile encounter and supplied patrol; roads and broader military roles remain unfinished.

City food-demand and balance projections include active programs' food upkeep. Household admission requires lasting production for the larger resident population plus those active services, preventing a welfare program from hiding a projected food deficit.

Validation: 97 automated tests pass, including ten research scenarios for all six effects, real labor/material spending, private rights, pause/cancel/storage rollback, institution loss, additive save restoration, invalid funding rejection, crop timing, two-way fire detours and offline equivalence. Headless Edge verifies reviewed funding, costs/staffing, pause/reload/resume/cancel refunds, adoption, crop choice and suspension at 320–1440px without page exceptions. The 390px research panel was visually inspected.

The full implementation ledger and M0–M8 plan remain authoritative for outstanding work. Later army, agriculture, building, education, care and registry additions bring the current total to eighteen with Regional institutions and Sacred and civic architecture. Schools and physical manuscript copying, shipment and study are delivered above; named specialist training, larger institutions, broader knowledge exchange/licensing and government adoption remain unimplemented. This section supersedes historical statements below that all research or charter gameplay is design-only; its six-topic table and tests describe the original research checkpoint.

Frontier caravans and finite barter — September 21, 2026

City → Trade & transport now connects a chartered village to the frontier waystation with physical cargo journeys. Each village has one two-resident carrying team with 60 weight capacity including rations. Food/tools weigh one per unit; timber/logs/iron/bricks weigh two. The team walks the surveyed canonical route one hex per twelfth of a four-hour village day. Quotes show exports, reserved imports, travel food, workers, weights and round-trip time. Goods leave usable stock once at acceptance; imports remain reserved at the depot until the outward leg ends and enter the village inventory only after the return leg. This uses real time-bound carriers, not the prototype haulage-stock value.

The first depot has a finite 40 tools, 120 iron and 160 bricks, with 4,000 aggregate storage units shared with migration provisions. Fixed barter offers exchange four timber for one tool, two timber for one iron, or one log for one brick. Food-relief deliveries replenish the actual finite migration-food stock on arrival. Offered imports are deducted from available depot stock into shipment reservations atomically, preventing competing villages from buying the same goods. Migration and caravan stock commits share the authoritative world transaction path. This initial starter barter depot now also supports the bounded funded market described above; it remains finite and is not an automatically replenishing regional producer.

Each caravan persists its phase, route index, cargo, depot reservation, provisions and next movement time. Fire on the next hex delays movement; provisions continue to be consumed. Food cargo can feed carriers after dedicated rations run out, reducing the delivered relief amount. Unmet travel food contributes to the village's daily needs/health accounting; home consumption excludes food demand already attributed to travel, avoiding double feeding. Outward recall releases the depot reservation immediately, but exports return only when the team reaches home. Consumed food is not refunded. Goods stay aboard on full home storage and the team remains assigned until unloading completes. No automatic overflow discard or teleporting refund occurs. The city shows location/map focus, phase, cargo, reservations, delays, ration shortfalls and the last twenty completed trips.

State v3 gains an additive version-1 logistics ledger and versioned caravan jobs. Existing settlement stocks and migration provisions are unchanged; the new depot's finite bootstrap stock is created once. Restore validates routes, passability, timing, cargo, weight and one carrying team per village. Offline movement, daily consumption and existing jobs replay chronologically within the bounded scheduler, including long blocked trips and mid-exchange restart. Carrier assignments participate in the resident labor pool and are retained while ordinary crews/workplaces are released during illness.

Validation: 86 tests passed in the full focused run; the additional prolonged-blockage/shortage/catch-up test also passes (87 distinct scenarios). Nine delivery tests cover conserved barter goods, delayed imports, depot competition, rights/capacity/reserves, fire/recall, retained overflow cargo, migration relief, travel food accounting, restart/idempotency and additive migration. Browser checks cover reviewed dispatch, dedicated workers, reserved goods without immediate imports, caravan reload, home recall and 320–1440px layouts without page exceptions; the mobile caravan panel was visually inspected.

This historical M3 checkpoint is extended by the delivered sections above: player barter and coin sales, regional production, maintained roads, handcarts and perishable cargo now operate. The construction-handcart delivery above replaces haulage for new chartered structural orders; shared development keeps its prototype and already-paid jobs retain their terms. M3 still leaves maritime routes, broader disruption/security and migration of the remaining trade-goods shortcut open. This delivery enables replacement tools/materials for the first frontier villages and supplies the migration source; it does not complete the full M0–M8 goal.

Resident needs and travelling households — September 21, 2026

City → People now shows resident workers/dependents, illness, community health, food/water/shelter coverage, migration blockers, travelling households and the most recent forced labor changes. Daily needs use actual resident food consumption, operational housing and the commons' surveyed 60-person well capacity. Fully met needs restore four health per village day; unmet fractions subtract up to nine for food, six for water and three for shelter. Health is bounded at 20–100 in this first recovery-oriented model. Below 60 health, floor(residentWorkers × (60 − health) / 100) workers are unavailable. Births and maturation remain future systems; later sections implement illness death, care/refuge and the communal clothing service described above.

Labor reconciles after daily needs and population changes: researchers and program specialists are released first, then running crews return to the queue, then non-food workplace staff are released, then foragers, then food staff only if still necessary. Work progress/payment accounting survives this interruption. Unassigned operating staff require reassignment after recovery; the People screen retains an explanation. Queued work can restart when enough workers recover. Assignments never exceed available healthy residents.

New housing creates room, not residents. A household of four (two workers and two dependents) can start travelling after three healthy village days, with open migration, at least 80 health, four spare housing places, sufficient water, staffed lasting food production for the enlarged population, and the larger population's configured reserve (minimum three days). A finite NPC Frontier waystation, colocated with the baseline development anchor, starts with 120 people, 60 workers and 960 travel-food units. It is an explicit new source population; existing Greywood/Tidebreak residents are not deducted or reinterpreted. Dispatch deducts its people and both outward/return provisions atomically. Journeys follow a bounded surveyed walkable canonical-hex route, exclude ocean/lake crossings, and take at least two village days at twelve hexes per day.

Arrivals recheck current admission conditions. Accepted residents increase population and resident worker counts only on arrival; unused return provisions enter finite village storage. A closed policy or lost services sends the household back along the reverse route using its reserved provisions. After at least five hardship days and health below 65, households can leave at intervals of at least three days, with relief travel paid by the finite waystation reserve. Departure never reduces the village below eight residents in this initial recovery model. Departing people leave the local worker pool immediately and rejoin the waystation only after their journey. Census conservation covers villages, source and travellers across offline catch-up and reload.

Current waystation recovery rule: A new stepwise household that returns with recorded unmet travel meals rejoins the finite source population but remains unavailable for another departure. Its unused provisions return first; waystation stock then pays up to one meal per survivor. The cohort needs two full meals per survivor in total. A partial first serving counts toward the first meal, and one further serving opportunity occurs each village day. No food means recovery waits; paid food deliveries can resume it. Both named and unnamed resting workers are excluded from dispatch and from starting an independent career. If an age-known resting adult dies of old age at the waystation, their death reduces both the source population and the recovering cohort; the remaining people retain their paid meal progress. City → People shows total, available and recovering waystation residents, and the owner receives arrival and recovery briefings. The return receipt and continuing care ledger are saved as migration v8; older v7 returns are treated as already recovered. Village health remains separate from offsite recovery. See the wiki guide and technical notes.

State v3 gains additive version-1 population and migration ledgers; existing charter inventories, people totals, worker totals and day cursors stay unchanged and start with neutral health/no pending journeys. Persisted cohort counts, route endpoints, adjacency, passable terrain and one journey per village are validated. Shared legacy development scenarios retain their older population rules; transitioning them is still outstanding. Migration travel is distinct from the later physical trade implementation above; the relief source can now receive caravan food deliveries.

Validation: 78 focused tests pass, including eight new scenarios for delayed migration, census conservation, closure/return, source exhaustion, illness/forced reassignment, water/shelter loss, restore validation and offline equivalence. Headless Edge verifies People, admission-policy review/reload and 320–1440px layouts without overflow or page exceptions; the 390px needs panel was visually inspected. The full M0–M8 goal remains active; the ledger tracks the remaining scope.

Cancellation, reserves and food recovery — September 21, 2026

Chartered-village Orders can cancel queued or paused crew jobs. Running work must be paused first, making the reviewed refund stable. New jobs persist a versioned payment ledger and cumulative active work time. Refunds return the unused fraction of recorded materials, rounded down; tools/haulage return only if the job never started. Storage overflow is shown in the review and requires explicit acceptance before discarding. Cancellation releases workers and the entire footprint once, survives restart and cannot be replayed for another refund. Cancelled construction becomes cleared with no further salvage; cancelled rebuilding returns to the existing ruin. Cancelling repairs preserves current damage. Older crew jobs without payment evidence can be cancelled with an explicitly disclosed zero refund; older non-crew development jobs keep their original lifecycle.

Overview / Workers → Food reserve and emergency foraging manages a 0–30-day food reserve and up to 12 resident foragers. The reserve protects food from newly accepted optional construction/repair spending. Resident consumption, fire response and work on food-producing buildings are exempt so recovery cannot be blocked by its own reserve policy. Previously accepted commitments are retained. Foragers share the same finite labor pool as workplaces and crews; changing their assignment requires a full four-hour world day before gathering.

The first woodland-charter recovery model holds up to 120 wild food, with 60 capacity and 12 food regrowth per eligible woodland hex, capped at two hexes. Later W2 rules also require 50 woodland health and no inundation, and add living marsh at forty capacity and eight regrowth per eligible hex as described above. Each forager can gather five food per village day, bounded by available wild stock. Regrowth precedes gathering. Residents first eat stored food, then gathered food to cover unmet demand; surplus gathering enters finite storage and excess is recorded as discarded. This feeds residents even if other goods have overfilled storage, but it does not create room for rebuilding supplies. Clearing/building over woodland reduces habitat. Foraging is a temporary recovery buffer, not an unlimited food grant.

The induced-loss test starts at zero food with a ruined food plot, assigns foragers, feeds residents, rebuilds using gathered surplus, restores field staffing and returns to a positive food balance. Depletion, lost habitat, labor contention, assignment delay, reserve exceptions and offline/reload equivalence are tested. Broader disaster recovery after loss of all housing/storage/materials remains outstanding; health/emigration and first household migration were subsequently added above. State v3 gains explicit additive survivalVersion: 1 migration with zero initial foragers and unchanged inventory, labor and day cursor; payment ledgers are never invented for historical work.

Validation: 70 focused automated tests pass. Headless Edge verifies policy review and persistence, shared forager labor, construction pause/cancel with exact quoted refunds, released plots and 320–1440px layouts without page exceptions. The narrow cancellation review was visually inspected. The full M0–M8 goal remains active; see the current milestone ledger.

Finite work crews and resumable orders — September 21, 2026

New charter orders share residents with workplace staffing. Each village starts with one building crew of four workers for construction, rebuilding, repair, demolition or salvage; adopted and supplied Construction planning permits a second slot, and earned City status plus active Regional institutions permits a third as described above. Forestry orders need two workers each. Waiting orders start in acceptance order within their village when both the full workforce and a building-crew slot, if needed, are available. The head of the queue can be paused to let later orders proceed. Villages schedule independently. Materials and automatic logistics support leave available stock on acceptance, including queued orders; cancellation now returns unused recorded inputs as described above.

City → Orders and the overlay expose running, queued and paused work, crew requirements, and reviewed pause/resume controls. Pausing releases workers but retains the footprint, spent inputs, completed phases and remaining work. Resuming returns the order to the back of the queue. Completion and damage release crews; staff assignment checks active crews. Workers separates workplace staff, active crews and free residents. Quotes disclose crew requirements and exclude queue delays from work estimates. Queued/paused jobs have no promised finish timestamp.

Building work suspends that building's production while queued, active or paused; operating staff remain reserved until released explicitly. Other producers continue normally. Chronological offline advancement starts waiting work at the historical crew-release time. Owner checks, job revisions, idempotent receipts and durable snapshots cover controls; ambiguous multiple-target commands are rejected. The additive crewVersion: 1 job format preserves existing v3 saves: already accepted jobs without that field retain their previous timers and labor behavior until completion. All new charter orders use crews. Shared development scenarios retain their existing timing.

Validation: the focused suite includes seven new scenarios for contention, the single building-crew limit, pause/reload/resume, phase timing, payment continuity, authorization, stale controls, legacy jobs and offline release ordering. Headless Edge verifies a clearing order's pause, reload, resume, output and returned workers without page exceptions or overflow at 320–1440 pixels. The 390px paused-orders screen was visually inspected. See the implementation ledger for the current test count.

This advances M1; the full M0–M8 goal remains incomplete. Cancellation, reserves, first-food recovery, migration and the researched second crew were subsequently added above. Broader services and visual placement preview remain open. The sections below record earlier deliveries; this section supersedes their lack of finite crews.

Player founding and basic village economy — September 21, 2026

Implemented continuation: City → Founding & charter now reserves surveyed land for ten real minutes and establishes a privately managed seven-hex village. Offers come from a bounded woodland-edge frontier near the development area; each requires at least three usable field hexes, two woodland hexes, no existing generated feature and a moist central field for a surveyed shallow well. The current seed has seven eligible separated sites. These are actual canonical hexes with durable charter regions, not ownership of an entire map-planning region. Arbitrary founding and regional trade access remain future work.

Founding grants are versioned and permanent per persistent player identity. The first package provides 40 residents, 24 available-to-assign workers, 18 world days of food, timber/logs/tools and operational village commons, community food plot and lumbermill. Eight workers tend food and two staff the mill; 14 remain available. The commons includes housing, storage and the surveyed well; a storehouse can extend capacity. The catalog now contains 21 definitions. Starter structures use named existing motifs as explicit prototype fallbacks.

Charter checks cover all exposed land/structure commands. Other players cannot manage the village or read its private inventory/economy; they can see public identity. The one-time grant survives command-receipt eviction, reconnect and restart. Player identity is retained in the same durable world commit as its founding transaction. The current identity is the session-token player record; account linking is not implied by these checks. Invited resident starts and scoped public offices now follow the separately implemented rules above.

Chartered villages consume one food per resident per four-real-hour world day. A fully staffed eight-worker food plot produces 44 food against the starting demand of 40. Inputs and outputs scale with staffed capacity. Houses add housing space, not workers. Storage is a finite aggregate capacity; processing pauses if its net output will not fit, and new selective harvests reserve their quoted output. New woodland clearing reserves logs when the complete batch fits; otherwise its review records that the logs will be left uncollected so land work can proceed. Capacity loss queues storage-backed forestry and salvage jobs before work finishes; older funded jobs can still discard and record overflow. The city displays food demand, potential harvest, reserve duration without production, storage, housing and shortfalls. Healthy starter staffing survives a normal 24-hour absence.

Scheduled work and village days execute in chronological order. At most 64 village days catch up per advancement, retaining the next-day cursor through restart; pending catch-up blocks new village orders. Forestry regrowth uses the local village clock, and forester benefits are local to their settlement. Population growth, migration and health/emigration consequences remain outstanding; a recorded shortage is not a complete survival model. Finite crews, reserve enforcement and first-food recovery were subsequently added as described above.

State/manifest version 3 accepts validated additive v1/v2 upgrades. Existing shared Greywood/Tidebreak inventories, structures, population shortcuts and accelerated clocks remain unchanged; their mode is identified in the UI. The base geographic manifest stays fixed while validated axial charter identities and seven-cell footprints live in durable state. Invalid or overlapping restored charters reject loading.

Validation: 52 focused tests pass, including founding/reservation conflicts, ownership, private projections, one-time grants, offline food/storage, 70-day catch-up/restore, chronological jobs and v2 migration with player-identity recovery. Headless Edge verifies founding and reload, owner/other-player behavior and 320–1440-pixel layouts. The implementation ledger records the complete remaining M0–M8 scope; these are partial foundation milestones.

Authoritative City management — September 21, 2026

Implemented continuation of the gameplay foundations plan: City and /?screen=city now manage actual Greywood/Tidebreak settlement state. The map-side overlay and city Overview, Buildings, Workers, Production and Orders tabs display live inventory, labor, projects and recipe blockers. Building placement selects the same canonical hex as the map, with orientation, footprint size, material shortfalls and server-derived eligibility. Worker controls assign or release real structure staff.

src/living-world/city-projection.js supplies a bounded read model for one settlement. It runs behind pending durable transactions, never advances simulation, and derives quotes from the same construction validation used by acceptance. Confirmation rechecks target and quoted world revisions; stale proposals spend nothing. Reviews disclose construction inputs, automatically consumed logistics support, duration and the current lack of active-construction cancellation. Job views distinguish next-stage and estimated-completion times.

Command receipts now include the submitting actor for status lookup. Pending City orders survive a browser refresh in session storage; reconnect checks the actor's retained receipt without replaying the order. Missing/expired legacy receipts remain unknown. Sample screens no longer overwrite live resource counters, and the accelerated development clock is explicitly labeled. The later account-attention implementation above replaces the former sample top-bar counter.

Historical status at the original City delivery: partial M0/M1. Later sections above implement founding/charters, private rights, population consumption/migration, bounded storage, frontier cargo and the first six research topics. Actual troops and arbitrary regional expansion remain unfinished. Housing/stage-generated labor is still preserved specifically in the shared legacy development scenarios until explicit migrations replace it.

Validation: 24 focused domain/integration/sample tests pass, including read-only previews, stock/support accounting, stale revisions, worker contention, restoration and receipt isolation. Headless Edge verifies the live build/staff/bottleneck flow, reload, settlement switching, sample/live separation and 320–1440-pixel layouts. Two-browser checks verify stale reviews and lost-acknowledgment recovery without duplicate construction. See implementation status and remaining gates.

Gameplay foundations and regional progression — September 21, 2026

The full gameplay foundations plan proposes the player journey from a functioning starting village to a supplied outpost and a connected regional realm. It covers the city overlay and city screen, regional building placement, six technology branches, resource and equipment supply chains, armies, terraforming, expansion, and a gated implementation backlog.

Historical status of the original plan: design proposal. The delivered charter, economy, transport and initial research systems are described in the current sections above. The full plan remains incomplete, especially armies, broader transport, regional expansion and governance. Historical September 16 coordinates/checksums below describe earlier generation fixtures; use the current world manifest for all new work.

Proposed design decisions and refinements:

• Start with a functioning Village, managed through a destination called City, with a charter over one central and six usable nearby hexes. A 50–200-cell Region board is a navigation unit, not a free territorial grant. Woodland onboarding and supported timber production, coastal fishing/cooking, and the surveyed farming start are implemented as described above; river and flood mechanics remain planned. This supersedes the older universal first-farm onboarding sequence without removing farming from the roadmap.
• The City overlay shows population/housing, free workers, food runway, treasury trend, urgent causes, construction and deliveries beside the selected settlement. The full City screen manages the same authoritative settlement through buildings, people, production, knowledge, government/culture, defense and hinterland views. Extend existing screen roles; do not create a separate inventory or construction world.
• Keep canonical-hex building footprints for the first integrated game. Compact inner-hex plots remain a later versioned extension. Separate buildings, extensive land uses and route edges. Placement checks effective terrain, current rights, footprints, workers and supplied inputs; ordinary landmark artwork alone is not a protected site.
• Develop six connected knowledge branches: building/engineering, agriculture, army/logistics, culture, politics/administration, and religion/spiritual institutions. Starting survival capabilities are already known. Later research uses practice, institutions, specialists and supplies. Knowledge, local ability to apply it, and lawful policy adoption are separate; neither government forms nor faiths are a universal superiority ladder. Secular institutions provide alternatives for essential civic services.
• Build a readable flow from extraction through processing and transport to buildings, items, households and troops. Keep resources local; distinguish available, reserved and in-transit stock. Evolve prototype shortcuts such as housing-generated labor, accumulated haulage, combined smithy output and abstract fish-market trade goods only with explicit data migrations.
• Troops require actual people, equipment, training, food and continuing supply. Start with militia/scout patrols protecting useful economic activity before territorial warfare. Recruitment competes with civilian work; fortifications do not create soldiers or regional ownership.
• Expand through survey, rights, a supplied expedition, an outpost and eventual settlement development. The first outpost produces something useful while depending on home for other supplies. Trade, lease, treaty and settlement compete with conquest as expansion options. Influence and discovery never grant instant title.
• Land improvement remains a staged project with effective-terrain changes, upkeep and ecological effects. Prioritize clearing/replanting, soil improvement and small irrigation; major waterways wait for shared-impact and authority systems. Preserve accessible survival and recovery paths.
• Account attention now follows the authoritative implementation above; retain real/world-time labeling, newcomer protection and family/AI continuity. Suggested starting population, resources, project timings and growth bands in the new plan are playtest proposals, not replacements for current scenario fixtures.

City management, village subsistence and initial research now operate; see the implementation ledger for remaining acceptance work. The integrated target is one self-sustaining village, one meaningful production bottleneck, one small patrol, one land improvement and one supplied outpost. Their combined journey now passes a single-world command-level acceptance scenario, with the scope and timing limits recorded above. Full six-branch content breadth and advanced realm systems remain in scope; preserve the existing family-continuity gate before claiming mortality in a public alpha.

Unobstructed Global view — September 20, 2026

Implemented: Global fits the entire globe, including its atmosphere, into the space beside a narrow right-hand toolbar. Global/Region/Hex, zoom, and fit-world controls remain visible with at least 44-pixel touch targets. The heading is a compact corner caption. Metadata, directional controls, and selected-place actions are available under the ••• button; clicking the map or pressing Escape closes this panel. As of October 8, Region and Hex share this rail too; the wrapping header and its Hex scene offset are superseded at every scale. See the current responsive-controls contract below.

Place labels use 10–11-pixel type, collision avoidance, and margins that exclude the toolbar and heading. The whole-globe view shows at most three names on small screens or five on larger screens; closer views allow five or eight. Place names: On / Off in the options panel can hide them entirely. Projection, picking, and anchored pinch/wheel zoom share the new globe center. Geography, simulation, and saves are unchanged. See Three-scale map design.

Validation: responsive browser checks cover 320–1440-pixel widths, full-globe framing, touch zoom and all three view transitions with unchanged selection and no browser exceptions. Projection tests verify the atmosphere fits inside the reserved map area and anchored zoom retains its surface point.

Progressive startup and bounded client world data — September 20, 2026

Implemented: production clients no longer create 2,252,800 JavaScript hex objects or flood-fill all biome regions on the main thread at startup. A dedicated worker builds the same canonical planet textures, biome-region membership and double-precision averages, and strategic places. It first sends a small usable globe preview. The page can paint and start this worker before compiling GPU shaders. Global rotation and zoom remain available during preparation; a Region/Hex request waits for exact region data and then opens automatically. The art-review world retains its existing synchronous reference pipeline.

Detailed cells are generated from the unchanged generation-6 kernel on demand, with a 32,768-entry client cache. Visible-cell searches restrict both rows and columns. Globe border geometry and regional border ownership no longer require generating neighboring terrain objects; remote-player interpolation does not redraw the globe unnecessarily. The kernel's full scalar cache remains the default for simulation; the presentation worker and lazy client opt out. This supersedes the all-cell browser allocation and startup memory figures in the tenfold expansion record below. World size, seed, canonical IDs, terrain values, region averages, selected starting place, simulation and saves are unchanged.

One disposable IndexedDB presentation entry stores the completed textures and region data. Its identity includes presentation schema, generator version, seed and dimensions. A different world or incompatible schema regenerates it; no player state is stored here. Denied storage remains on the worker path. Missing or failed workers use a yielding fallback, and regenerated worlds reject stale preparation results. Asset compression uses shared asynchronous Brotli/gzip work, avoiding a synchronous compression pause in the simulation server.

Validation and measured results are recorded in startup performance results. Tests compare canonical values, complete texture fields, exact flood-fill ordering and averages, place selection, bounded cell eviction/reconstruction, cancellation and denied-storage recovery. Browser checks cover cached startup, the worker-less fallback, queued regional entry, Global/Region/Hex transitions, pinch zoom and responsive menus. Cold full-detail readiness remains a separate measurement from the early globe preview; these checks do not certify physical-device performance. See Three-scale map design.

Responsive map controls and touch zoom — September 20, 2026

Implemented, October 8, 2026: Global, Region and Hex share the compact right-side map rail with 44-pixel view, zoom, fit and ••• touch targets. This supersedes the wrapping header and measured-header offset. The canvas and Hex scene retain the full map panel; only a small noninteractive view title remains over the map. ••• opens a bounded, scrollable options panel with connection/City status, selected settlement and footprint, navigation guidance, metadata, eligible Region overlays and their legends, selection actions, and Hex concept-site buttons and explanations. Those Hex sites remain presentation-only. Secondary controls reserve no map space when closed. Escape or tapping the map closes the panel; changing scale closes it, while same-scale selection and City updates retain it. Scrolling inside options scrolls information without zooming the map. Short landscape layouts use two compact control columns to keep every target reachable. The beginner Region illustration now captures this interface in an isolated default-seed world after ordinary reservation and founding, with exact capture provenance in the wiki image manifest. The isolated release passes 24 focused map/touch/settings/wiki tests and 12 connected-world layouts from 320 to 1440 pixels, including landscape, without browser errors.

Touchscreens support two-finger pinch zoom around the gesture midpoint, with two-finger panning and continuous Global/Region handoff using the existing generation-6 thresholds. Globe zoom follows finger motion directly, while wheel/button easing remains unchanged. A 15% inward pinch in Hex returns to the saved Region camera, after which the same gesture can continue zooming outward. Lifting either finger resumes single-finger dragging without a jump. Pinching, dragging, cancelled contacts, and lost capture do not select a hex; a single tap still selects. Map gestures leave page zoom unchanged and do not disable browser zoom outside the map.

Validation: 21 focused gesture, projection, and three-scale tests pass. Local headless Edge checks at 320, 390, 640, 768, 1024, and 1440 pixels find no header-control overlap or clipping. Browser touch emulation verifies 1× → 2.5× → 1×, Global → Region → Hex → Region → Global navigation, unchanged selection, unchanged page scale, and no application exceptions. Physical-device testing remains outstanding. See Three-scale map design.

Tenfold world expansion — September 20, 2026

Current world: generation 6, seed GONZ-CONTINENTS-01, checksum b407e9b3. The planet now contains 2,048 × 1,100 = 2,252,800 canonical hexes, exactly ten times generation 5 and 200 times the original 128 × 88 map. Both axes expand by roughly √10, preserving the planet's proportions. The same spherical continent fields retain five large fictional continents and three smaller continents; the finer grid resolves 126 separate dry islands. Water covers 70.9976% of spherical surface area (1,701,903 ocean/lake hexes). This supersedes the generation-5 dimensions and counts below.

The world contains 17,775 connected, hole-free regions, all 50–200 hexes: 6,036 medium regions of 50–100 and 11,739 larger regions of 101–200. The two 122-row polar bands contain 2,518 regions, of which 2,428 (96.4%) contain exactly 200 hexes. Increasing map area increases the number of regions without increasing their membership cap.

Continuous globe/Region navigation remains available. To preserve the same local detail scale, globe borders now reveal from 9.375× to 12.5×, scrolling enters Region at 37.5×, and outward scrolling returns to the explored area at 31.25×. The renderer supports up to 64× internally. These distances supersede the earlier 3×/4×/12×/10× thresholds. Regional zoom, cross-border panning, selection, and the clear active-region outline retain their existing behavior.

Client memory scales through uniform cell objects, direct row-based lookup instead of a second string-keyed map, a typed visited array for biome regions, and lazily materialized planning-region membership sets. Planet workers receive a transferred 54 MB scalar field buffer instead of millions of cloned objects; the color/material textures and viewport rendering stay bounded. Server checksums and starting-site searches stream cells rather than allocating whole-world object arrays, with bounded caches of deterministic results. Local neighborhood searches scan only their actual radius. Explicit 128 × 88 art-review worlds retain their reference geography.

Generation-6 saves use <DATA_DIRECTORY>/world-v6/. Changing width changes canonical numeric IDs, so generation-5 saves remain untouched in world-v5/ and are not reinterpreted. This starts fresh player/settlement state on the expanded world. Greywood starts at cell 1471343 and Tidebreak at 451514; viable clay and iron deposits are at 1461102 and 1469294. See persistence and recovery and map contracts.

Local Edge checks confirm the full 2,252,800-cell globe, scrolling into Region, panning across regional borders, and scrolling back at the explored location. Observed first-load globe readiness was approximately 14 seconds; JavaScript heap use was approximately 626 MiB before loading regional artwork, plus approximately 86 MiB backing storage. This is a desktop observation, not a certification for smaller devices or a new performance budget.

Validation: all 775 tests pass. Checks cover the exact tenfold cell count, deterministic checksum, all-cell picking, region connectivity and no enclosed holes, max-size polar preference, water area and continent counts, transferred field rendering, large-coordinate replication, and isolation of generation-5 saves. Starting-site searches and deposit selection now require mine-compatible terrain; the actual forested iron seam must be cleared before mining. The complete extraction, brickmaking, charcoal, smithing, coastal, and settlement progressions pass on the expanded world's starting sites.

Continuous globe and regional navigation — September 20, 2026

The interaction contract remains current; the tenfold expansion above supersedes the numeric globe zoom thresholds and generation-5 save identity in this release record.

Implemented: mouse-wheel and trackpad zoom now move directly between Global and Region. At 12×, scrolling inward hands the pointed world location to the regional camera, keeping it under the pointer where world bounds permit. Regional entry scale follows the globe's local vertical scale, bounded to 0.30–0.75 for usable detail. Region wheel input and +/− controls continuously zoom up to 1.65; zooming below 82% of the entry scale returns to the globe at 10×, centered on the area just explored. The different thresholds prevent repeated mode changes near the boundary. Ctrl+wheel retains browser zoom. Double-click or Hex opens the selected local scene; returning from Hex restores the regional camera and zoom.

Region is now a continuous, north-up map across board boundaries. Dragging or arrow-key panning moves the camera without fitting or snapping to each board. The region under the camera center becomes active, with a strong gold outline; all visible region borders have a thin pale stroke over a dark backing. Any visible canonical hex can be selected. Selected hex identity remains independent of camera navigation. The old board-only camera clamp, outer black mask, neighbor dimming, and active-board-only picking are superseded. The canonical grid still ends at its existing world edges; this change does not connect opposite simulation edges.

Rendering and artwork interest follow the viewport plus cached overscan and at least three additional hex steps on every side. This replaces the former exactly-three-rings-only display: the surrounding map continues as far as the viewport reaches. Ecotones are prepared once per newly visible cell. Cached paintings translate and scale during movement; newly exposed terrain uses the base map until detailed composition finishes. Crossing an active-region boundary alone does not invalidate the scene. Dynamic layer cache keys include the actual visible objects, so moving through a chunk cannot reuse an incomplete overlay. Image and pixel-cache budgets remain in force. World generation, region membership, and saves remain generation 5.

Validation: all 774 tests pass, covering sustained scrolling in both directions, pixel/line/page inputs, browser zoom, pointer placement at projection handoff, unchanged selection, Hex camera restoration, border-crossing hit testing, and whole-world camera bounds. Local Edge checks confirm globe → Region scrolling, panning from region 712 into region 716, clear borders and continuous terrain, scrolling back to the explored area, and exact camera/zoom restoration after Hex. No application exceptions were observed. Detailed composition remains progressive; these interaction checks do not certify a new performance budget. See three-scale view contracts.

Five large continents, three smaller continents, and larger regions — September 20, 2026

Historical world: generation 5, seed GONZ-CONTINENTS-01, checksum b1fc095d; superseded by generation 6 above. The 640 × 352 planet retains 225,280 canonical hexes. Five large fictional continents each occupy 4.15–4.90% of the sphere; three smaller continents each occupy 1.14–1.38%. They are separate landmasses, surrounded by 121 islands ranging from tiny islets to substantial islands of hundreds of hexes. The landmass audit wraps longitude and includes inland lakes in continental footprints. Terrain uses seeded spherical continental shapes, indented coasts, elongated irregular islands, interior ridges, and climate fields sampled in three dimensions. It does not use Earth coastlines. Explicit smaller art-review maps retain their reference geography.

Water covers 71.0172% of spherical surface area, including inland lakes: 170,229 water cells and 55,051 land cells. The ordinary cell count is not the surface-area measurement, because polar cells cover less of the sphere. This supersedes generation 4's geography and checksum below. The enhanced globe graphics and continuous zoom remain in place.

The new planning partition has 1,769 connected, hole-free regions: 596 medium regions of 50–100 hexes and 1,173 larger regions of 101–200 hexes. No production region is below 50. Balanced spatial cuts with gently varying boundaries replace random frontier growth and its tiny leftovers; the 200-cell cap remains absolute. Geometry helpers still support tiny test worlds, where a region can be smaller than 50. Region view retains its three real neighboring rings, exact member selection, and clear gold active border.

The outer 39 rows at each pole (approximately beyond 70° latitude) use dedicated bands whose longitude width compensates for spherical compression. There are 128 regions per pole; 232 of the 256 polar regions are exactly 200 hexes, the others are 120–160. Mean polar size is 195. Each band uses the minimum number of regions allowed by the cap, sharing the final remainder rather than producing tiny fragments. The total is close to the absolute 250-region lower bound for all polar cells; preserving sensible latitude bands requires six additional regions. This replaces the stretched, fragmented polar borders.

Generation-5 saves live under <DATA_DIRECTORY>/world-v5/. The generation-4 and earlier directories remain untouched; this explicitly requested new map starts fresh player and settlement state. Greywood's viable starting region is centered on cell 55998 and Tidebreak on 45737. Clay and iron deposits are at 52798 and 57274, selected from actual fields and resource-bearing mountain terrain. Scalar terrain caching avoids recalculating geography during starting-site searches without sharing mutable cell objects. Server and browser defaults, generation identity, and script cache keys advance together. See persistence and recovery and three-scale map contracts.

Validation: all 772 tests pass, including deterministic geography, five/three continent counts, abundant islands across size classes, spherical water coverage, complete regional ownership, connectivity, absence of enclosed holes, region-size distribution, polar cap counts, viable industry and coastal starts, and preservation of generation-4 saves during multiplayer integration. Local Edge review verifies the new seed and 1,769-region layout, rotation to the north pole, close-range borders, and entry into a real polar board with three context rings.

Globe terrain, ocean, and atmosphere refinement — September 20, 2026

Global now uses richer deep-blue oceans, turquoise continental shallows, restrained green vegetation, warm dry terrain, and pale high-altitude snow. A separate material texture carries canonical elevation, land/water coverage, and moisture into the globe shader. Lighting follows elevation gradients, with fine rock ridges on uplands, subtle vegetation and dry-ground texture, a restrained water reflection, wispy clouds, and a thinner atmospheric rim. Procedural detail is sampled in three-dimensional planet coordinates so it remains continuous across the longitude seam and poles. Fine texture grows more visible with zoom, while clouds become quieter to keep close terrain readable.

Both opaque color and material maps are 2048 × 1024, with 512 × 256 previews prepared before the worker finishes. The worker transfers both maps together; synchronous fallback produces the same pair. GPU mipmaps reduce distant surface aliasing. The Canvas fallback uses the improved opaque color map. Region borders still reveal from 3×–4×; general borders and selection fill are more restrained, while the active gold outline stays clear. This is presentation only: canonical cells, picking, region membership and its three-ring context, zoom controls, generation-4 water proportion, simulation, and saves are unchanged.

Validation: all 770 tests pass. Material-map tests check elevation, land/water and moisture channels, identical longitude edges, continuous poles, opaque output, and unchanged input cells. Existing projection, region reveal, cursor anchoring, and Canvas fallback tests remain green. Local Edge review covers the whole globe, rotation, and close terrain and borders at 6.554×, with no application errors. Browser-extension errors are unrelated to the renderer. These checks do not certify a new performance budget. See Global view contract.

Globe zoom and distance-based region reveal — September 20, 2026

Historical zoom contract. The continuous navigation section above supersedes Global-only wheel zoom and semantic Region wheel transitions; distance-based border reveal remains current.

Global supports continuous 1×–18× globe zoom with the mouse wheel, trackpad, and +/− controls. A 180 ms eased transition keeps the world point under the pointer in place where the spherical projection permits it. Scrolling stays on Global at every zoom level. Far-away double-clicks zoom in by 2×; at 4× or closer, double-clicking enters the actual region under the pointer. Explicit Region/Hex buttons and 1/2/3 shortcuts remain available. Region/Hex retain their semantic wheel transitions.

Region borders and hover/selection footprints are hidden through 3×, fade in between 3× and 4×, and are fully visible from 4× onward. Visible region borders stay thin and clear, with a stronger gold outline around the hovered/selected region and no circular selected-hex cursor. Region view retains its three rings of neighboring hexes. Dragging and returning from Region preserve globe zoom and orientation. Direction-pad and arrow-key movement scales with zoom; Selected place centers at the current zoom, while N resets orientation and zoom and Whole world restores 1× centered on the selection.

The renderer draws only the viewport, capped at 1600 pixels on its longest edge for WebGL and 640 for the Canvas fallback, rather than allocating a zoom-sized globe image. Visible-region lookup limits candidate latitude/longitude ranges and rejects offscreen cells. The periodic 2048 × 1024 planet texture, canonical geography, generation-4 water proportion, simulation, and save format are unchanged. See three-scale map contracts.

Validation: all 769 tests pass, including pointer anchoring around the longitude seam and poles, zoom limits, gradual border reveal, visible-region coverage, the Canvas fallback at maximum zoom, and wheel input retaining Global. Local Edge checks confirm wheel zoom to 4.482×, button zoom to 11.473×, dragging without changing zoom, close double-click entry into Region, return with zoom preserved, and hidden borders again below 3×. These interaction checks do not certify a new performance budget.

Globe region hover and three-ring surroundings — September 20, 2026

Historical bounded Region contract. Continuous navigation above supersedes fixed framing, neighbor dimming, active-board-only selection, and the three-ring display limit. Exact three-ring geometry remains available; the current renderer covers the viewport and overscan instead.

At the close zoom levels specified above, Global highlights the hovered/selected region footprint without a circular selected-hex cursor. Managed-settlement locations use small diamonds; place labels and hazard markers keep their informational role.

Region now displays its actual members plus three complete rings of neighboring hexes, measured by shortest hex-neighbor distance from any member, including irregular and long thin regions. This supersedes the two-hex empty-margin rule below. The context stops at the canonical world edge and never wraps or invents tiles. The camera fits the actual context with a half-hex outer margin. Neighboring terrain and landmarks use the same painting pipeline, with slight dimming and thinner regional borders; the active region has a bright gold outline with a dark under-stroke, drawn above the hex grid. The active region's 1–200-cell membership is unchanged. Neighbor rings provide context; selection and gameplay actions remain on active members, and Global remains the way to choose another region.

Terrain preparation, artwork interest, static scene composition, ecotones, and available dynamic chunk overlays include this bounded context. Existing image and pixel-cache budgets remain in force. Geometry, the generation-4 water proportion, and saves are unchanged. Tests check exact three-step coverage, world-edge clipping, thin/irregular shapes, unchanged membership, camera bounds, asset interest, and absence of the globe selection circle. See three-scale map design.

Validation: all 764 tests pass. Local Edge confirms footprint-only hover on Global and clear region/context borders. The inspected 60-member region paints 227 actual cells including its three rings, with no browser errors.

Earth-like water coverage — September 20, 2026

Historical generation-4 release; superseded by the generation-5 continents and save namespace above.

The production planet now targets 71% water and 29% land by spherical surface area. Generator 4 raises raw sea level to 0.5257, then normalizes elevations above and below the shore so existing ocean-depth and land-biome bands remain meaningful. The same seed and terrain noise retain the underlying landforms; actual ocean/lake classifications, land features, and playable starting regions follow the new coastline. This supersedes the generation-3 geography and save status below. Explicit smaller art-review maps retain their reference geography.

For production seed GONZ-R155-0915-13, measured water coverage is 71.0006%: 68.9805% ocean and 2.0201% inland lakes. Measurement weights each latitude strip by its true sphere area; counting polar and equatorial hexes equally would give 77.5564% instead. There are 174,719 water hexes and 50,561 land hexes, still 225,280 total. The cartographic coast/pole blending is visual and may slightly alter apparent pixel coverage. The deterministic geography checksum is d3922d6c; Greywood starts at canonical cell 89300 and Tidebreak at 24689, selected from actual suitable terrain. Region membership remains connected, hole-free, and capped at 200 cells.

Generation-4 saves use <DATA_DIRECTORY>/world-v4/. Previous world-v3/ saves remain intact and are not replayed onto newly flooded terrain; the revised planet starts with fresh player and settlement state. The shared browser/server generator and browser cache key advance together. Tests cover the 71% area target, surviving biome diversity, deterministic geography, compatible starting regions, multiplayer replication, and preservation of the prior save directory. See multiplayer persistence and three-scale map design.

Validation: npm test passes all 762 tests. Local Edge checks cover the expanded oceans across the longitude wrap and Global → Region → Hex → Global navigation with zero browser errors. Industry tests verify extraction, kiln fuel from actual woodland, brickmaking, charcoal, and smithing at the new starting sites; coastal tests verify fisheries and settlement progression.

Continuous globe surface and visual polish — September 20, 2026

Global uses a dedicated, opaque 2048 × 1024 periodic planet texture, with a 512 × 256 initial surface while its worker prepares full detail. The previous rectangular atlas included empty padding and a world-edge outline, and its unrelated left/right edge terrain created the folded-map seam. public/planet-surface.js derives the globe surface from canonical biome and elevation fields, respects staggered hex centers, interpolates longitude continuously, and blends the outer eight columns and polar caps for a continuous cartographic presentation. Edge colors are a visual blend. This rendering-only release preserved generation-3 terrain and saves; the later Earth-like water change above advances the actual geography to generation 4.

The planet has deep-water and coastal color variation, subtle elevation relief and surface detail, continuous three-dimensional cloud shading, softer atmospheric light, and a restrained star background. Major-place candidates are spread across the world, with a maximum of 12 collision-filtered labels on the visible hemisphere. The zoom contract above supersedes the original selected-footprint-only overlay: Global hides region borders from afar and reveals visible borders plus the hovered/selected footprint up close. Region retains exact cell membership and its detailed paintings.

Projection, labels, and surface picking use the same padding-free world extent. Picking wraps the visual longitude edge to actual canonical cells, including staggered edge rows, and covers both polar caps. This does not add simulation travel across the bounded grid. Regression tests verify matching texture edge pixels, longitude-independent pole pixels, complete opacity, unchanged input cells, staggered sampling, all 225,280 cell centers, and visible-surface picking through the seam and poles. See three-scale map design.

Validation: the full npm test suite passes all 761 tests. The four planet-surface regression tests also pass after the final polar smoothing adjustment. Local Edge confirms the periodic 2048 × 1024 texture loads; observed Global readiness was approximately 4.4 seconds, not a performance-budget certification.

Spherical planet and expanded regions — September 19, 2026

Implemented and validated for release to Railway production. The GitHub WorldOfGonz / production deployment status records release completion. This supersedes the flat Global projection, 64-cell limit, and former 128 × 88 production dimensions. See three-scale map design and multiplayer architecture.

• The default planet contains 640 × 352 = 225,280 canonical hexes, exactly twenty times the former 11,264-cell world. The seed remains deterministic; generator version 3 identifies the new dimensions, geography, and canonical IDs. Explicit art-review URLs retain their original 128 × 88 reference geography. The starting woodland stewardship is chosen from actual forest terrain with nearby open fields and a resource seam so its existing clay/iron industry chains remain playable.
• Region boards contain 1–200 connected hexes with no enclosed missing cells. Seeded growth attaches along one continuous neighboring arc, preventing loops around empty or foreign cells. Rectangles, thin strips, single cells, and irregular silhouettes remain supported. Every canonical hex belongs to one board. Three surrounding rings now provide geographic context outside its clear border; there are no interior holes.
• Global wraps the strategic atlas onto a round, shaded sphere with atmosphere. Mouse/touch dragging rotates through all longitudes and both poles. Arrow keys and the on-screen direction pad rotate; N resets orientation and zoom and F / Selected place centers the selection. Double-clicking zooms closer until 4×, then enters the visible cell's actual region. Background clicks cannot select hidden cells. Wheel zooms the globe; 1/2/3 switch Global / Region / Hex, preserving selection and globe orientation.
• Projection and picking share the same spherical transform. Markers, managed regions, hazards, selection, and optional metadata use that transform and hide on the far side. No regional artwork is loaded for Global. The original 3072-pixel atlas is superseded by the periodic 2048 × 1024 planet surface above; WebGL handles sphere rotation with a bounded Canvas fallback when unavailable. Region ecotones are computed only for the entered board.
• This is a spherical view of the canonical offset hex grid. Simulation movement still uses its existing bounded grid; crossing the longitude seam or poles does not yet connect opposite boundary hexes. A full spherical all-hex topology is not claimed.
• Multiplayer protocol 2 uses 16-byte records and unsigned 32-bit quarter-unit positions, avoiding the old 16-bit position ceiling on the larger planet. Generation-3 saves live under <DATA_DIRECTORY>/world-v3/ (default .data/world-v3/). Earlier snapshots and event logs remain intact in their original folder, but are not replayed onto changed canonical IDs; this starts a new planet save.

Validation: deterministic coverage/connectivity and padded-complement flood-fill tests reject region holes on the full-size planet and thin edge cases. Projection/picking tests cover both hemispheres, longitude wrap, poles, unrestricted rotation, and off-planet rejection. Large-coordinate snapshot and multiplayer reconnect/persistence tests verify the expanded world. Browser checks cover mouse rotation, navigation, visible-cell selection, and Region/Hex transitions. Final verification: npm test passes all 757 tests. Local Edge shows no application errors during these interactions. Cold full-detail Global preparation was approximately 6.7 seconds in the observed desktop session; rotation draws were around 1 ms. These are observational timings, not a new performance-budget certification. Older performance receipts below apply to the former smaller map; they are not evidence for the new planet.

Mouse-wheel map navigation — September 19, 2026

Historical semantic-wheel contract, superseded by continuous globe and regional navigation above.

The map panel handles wheel input across Global, Region, and Hex, including the Hex artwork and local-site controls. The September 20 globe-zoom contract supersedes the original Global → Region wheel transition: Global now zooms continuously. Scroll up still moves Region → Hex; scroll down moves Hex → Region → Global. Each transition retains the selected canonical hex. The Hex overlay does not block wheel navigation. Pixel, line, and page wheel units are supported; semantic transitions accumulate small trackpad deltas, throttle same-direction bursts, and respond immediately to reversal. Ctrl+wheel keeps browser zoom behavior. Historical validation on September 19: 16 focused map tests and the local Edge browser/performance probe passed the former full semantic wheel sequence, including over the Hex image and local-site buttons, without changing selection or producing browser errors.

Variable region boards — September 19, 2026

Implemented September 19, 2026. This supersedes the fixed aligned 8 × 8 board and neighboring-terrain preview rules in the earlier strategic-atlas release. See three-scale map design.

• Each region is a connected, seeded shape containing 1–200 canonical hexes. Boards may be single hexes, thin strips, rectangles (including 4 × 6), or irregular cookie-like shapes. The cap is cell count, not width or height. They are not aligned to an eight-cell grid. Every world cell belongs to exactly one board, and the same world seed reproduces the same partition.
• Global reveals visible region borders and the hovered/selected outline only at close zoom levels, as specified above. Region identities are separate from biome patches, mutable settlement regions, and simulation chunks; the board partition itself does not alter terrain or simulation rules. The new planet generation and save namespace are described above.
• Region shows its member hexes and three rings of neighboring terrain, as specified in the current context contract above. The former two-hex empty margin is superseded. The world minimap remains hidden at this level.
• Selection and the active perimeter use actual membership, never a rectangular bounding box. Artwork interest and available dynamic chunk overlays include members plus exactly three neighbor rings. Camera framing fits that context, including boards at world edges. Panning stays within the context; use Global to choose another region. Returning from Hex retains the selected cell's board.
• Region UI reports its actual cell count and stable seed-derived board ID. Static/dynamic cache identities include that board ID, so irregular regions with overlapping bounds cannot share the wrong artwork.

Validation: 22 focused map, geometry, metadata, and world-kernel tests pass, including connectivity, deterministic partitioning, all-world coverage, single-hex and long/thin shapes, actual-member hit testing, world-edge camera bounds, and border deduplication. The local Edge performance probe passes with zero browser errors; Global/Region screenshots were visually checked. These local checks do not establish production timing.

Asset identity and purpose — September 19, 2026

The in-game metadata overlay is implemented locally. An explicit Metadata: Off / On button, off by default, displays compact tile labels and focused details with asset identity, purpose, background/gameplay role, coordinates and live structure state when present. Region labels follow the camera with collision avoidance and a 64-label bound; Global uses sparse vector-atlas labels, and Hex identifies its parent portrait while keeping local concept sites distinct. A compact generated index loads only on first enable and resolves declared runtime derivatives to source IDs. Disabling clears the overlay immediately; labels do not intercept map clicks, rebuild scene caches, preload artwork or alter simulation state. The detail panel links to the full asset library metadata. See the overlay contract and index maintenance.

Expanded metadata is implemented locally in schema 2. All 3,251 file records now include measured image dimensions/format/alpha capability/size/checksum, terrain and composition declarations, semantic tags, prototype bindings, lifecycle art coverage, source/variant/companion relationships, exact duplicate detection, provenance evidence and review gaps. The registry includes all 18 authoritative structure definitions with construction, staffing, production and stage fallback data. It preserves the distinction between a bound prototype motif, a related gameplay concept and a static site portrait. Family history never grants exact-file approval, filename associations are labeled, and unrecorded rights or author information remain unknown. Advanced metadata filters and expandable sections expose these fields without changing world rules or asset routing. Full schema, evidence conventions and maintenance are in asset metadata.

Implemented locally in the Art Atlas: all 3,251 inventoried image files now have a persistent WOG-A- ID, initial description, purpose, role and explicit gameplay-status metadata in tile-library/catalog-metadata.json. This covers the 3,210 released assets and 41 additional local files. Catalog entries also expose collection-qualified IDs, so classic and illustrated versions remain distinguishable. Cards show descriptions and purpose badges; expandable per-file records, ID/text search, a purpose filter and a full JSON download make the inventory usable for planning. See asset metadata conventions and maintenance.

Background/scenery includes marshes, deserts, ordinary forests, ground/detail companions and landscape transitions. Gameplay places/objects include settlements, productive land, resource sites, defenses and intended transport/exploration destinations. Runtime sprite sheets are rendering support; archived/reference sources remain separate. These roles are independent of production approval. All descriptions are initial editorial drafts, not a new art audit or evidence that a proposed mechanic exists.

Town art depicts a settlement composed of authoritative structures, population and systems. Lumber Village represents forestry settlement activity and references the existing lumbermill concept (delivered logs → timber); it is not a standalone placeable mill image. Related definitions are conceptual links, not direct image bindings. Verified prototype bindings are recorded separately: the lumbermill currently shares the farm-shed motif. Twenty runtime Hex landmark portraits now appear as gameplay assets in a dedicated collection instead of inheriting the old blanket public-assets reference classification. Ground companions stay scenery even beside a gameplay place, and the catalog's “World structures” means landscape geometry, not constructible buildings. No simulation rule, art routing, world state or deployment changes are part of this metadata update.

Strategic atlas implementation — September 19, 2026

Status: deployed to production on September 19, 2026 from f2d3c50e672bb658c1e4b4e895945990c050eb36 (GitHub deployment 6537240538, reported successful). This supersedes the shared Global/Region rendering and preload path in the historical performance notes below and extends the three-scale map design. Geography, canonical identities, authoritative simulation, and persistence are unchanged.

Live release verification: health remained healthy with production seed GONZ-R155-0915-13; the renderer, styles, atlas helper, and both workers matched the release SHA-256 hashes. Two fresh-browser probes completed Global/Region/Hex navigation, preserved selection, reused cached regional views, stayed within image/cache budgets, and reported zero browser errors. Global requested zero images; initial Region imagery was 1.46 MiB. Live timing targets did not pass: Global readiness was 7.95/6.66 seconds, first Region readiness 1.74/8.18 seconds, and maximum drag intervals 487/417 ms, despite drag p95 near 8 ms. One run did not expose an FCP entry (reported zero); this is missing evidence, not instantaneous paint. Production network, browser scheduling, worker startup, and cold-server costs need further profiling; local passing timings must not be presented as a production guarantee. See the live deployment receipt art-direction/strategic-atlas-live-20260919.json. The probe now records navigation and resource timings to support that follow-up.

The pre-change local npm run test:map-performance run failed its initial image budgets: 230 image requests, 306.53 MiB encoded image traffic, and 228 planned preload assets, versus ceilings of 80 requests and 40 MiB. FCP was 532 ms; the sampled initial cache build was 19 ms, the Region transition build was 9.2 ms, and small-pan cache reuse passed. Source-image accounting reported 251 MiB against a 256 MiB budget; this is not total browser memory. These are local headless Edge measurements, not production-network measurements. Fast FCP measures initial content, not a fully usable map. The September 15 passing receipt below is historical.

The former viewportPriorityPlan() selected detailed Hero, companion, terrain, connector, and structural assets by viewport without a semantic-view gate. Fitting the whole world therefore loaded effectively world-wide artwork, much of which Global never painted. Global now bypasses that library and the regional scene-cache pipeline completely. A separate Region manifest loader also bypasses the obsolete full-world multi-hex Hero assignment pass; canonical cell features select compatible one-hex landmark plates directly. The detailed legacy renderer and original illustrated-place selection remain available on explicit art-review URLs.

Implemented visual direction:

• Global is a distinct strategic atlas: calm terrain masses, coastlines, mountain symbols, sparse named major places, a highlighted region footprint, and managed-region/fire information from the existing authoritative feed. No detailed paintings, ordinary hex grid, or redundant minimap are shown. Entering a region preserves the canonical selected cell. Ownership colors, authoritative trade-flow/route overlays, and illustrated region-preview thumbnails remain future additions; they are not fabricated from the terrain painting.
• Region is the primary home for the existing approved terrain and landmark paintings, composed into the selected 1–200-hex board. Preserve profile compatibility, one-parent-hex landmark bounds, and separate authoritative roads/rivers and mutable overlays. Richness comes from the existing asset library, quiet ground, and selective landmarks rather than filling every cell with a focal illustration.
• Hex remains the bounded local scene described in the companion specification. No new authoritative child simulation is implied by this proposal.

Implementation:

1. Global remains image-free. The original public/strategic-atlas.js flat composition is superseded by planet-surface.js and globe.js: the worker prepares a periodic 2048 × 1024 surface, with a usable coarse geographic fallback while it prepares. Markers and selection are cheap independent overlays. A hidden art-direction reference image loads lazily when its dialog is opened.
2. Region requests primary terrain materials and compatible 512-pixel WebP landmark derivatives for the selected region’s 1–200 members and three surrounding rings. It keeps the painted terrain composition and opaque one-hex landmark contract. Ordinary feature sites do not depend on the old sparse multi-hex Hero allocation. Camera movement stays within this bounded context; returning from Global/Hex restores the selected cell's board.
3. Global retains its own geographic surface. Recently completed static Region views have a 64 MiB pixel LRU, in addition to the two active composition surfaces. Mutable world chunks have a separate 32 MiB pixel LRU keyed by chunk revision, view, recipe version, and relevant motif availability. Units, selection, and grid remain live overlays. Source images retain the existing device-dependent 128/192/256 MiB limit, and derived source caches remain independently bounded. These are distinct budgets, not a claim about total browser/GPU memory.
4. terrain-preparation-worker.js prepares the existing feathered source stamps off the input thread without changing source RGB, dimensions, or camera. Unsupported or failed workers retain a main-thread fallback. Cancelled view builds cannot publish obsolete scene work. Incomplete artwork is not retained as a finished regional view when the library fails; re-entering Region retries its manifests.
5. npm run test:map-performance checks cold Global image traffic and readiness, first Region entry, small-pan reuse, repeated Global/Region/Hex transitions, selection continuity, sustained drag frame intervals, a large pan that stays within the selected region, and return to the earlier cached region. Screenshots are captured after timed scenarios so capture stalls do not contaminate frame measurements. npm run test:map-performance:stress uses DPR 2, 4× CPU slowdown, and a 10 Mbps connection with 80 ms latency. Desktop limits remain FCP/Global-ready ≤1.8 s and composition slices ≤12 ms; the explicitly separate constrained profile allows FCP ≤3 s, Global-ready ≤3.5 s, and slices ≤20 ms. Both require first Region readiness ≤5 s, drag p95 ≤34 ms, drag maximum ≤150 ms, and bounded caches.

The Global image budget is at most 5 MiB with zero detailed Region requests; the implemented default route uses zero image requests. Initial Region imagery is limited to 32 MiB by the probe. Measurements and validation are recorded in Strategic atlas performance receipt art-direction/strategic-atlas-performance-20260919.json. The local checks do not establish production-network latency or physical-device GPU performance. Existing multiplayer presence and chunk subscriptions are preserved; the view-specific subscription protocol below remains a separate server-side follow-up.

Hero semantic-scale calibration (implemented 2026-09-16): native landscape plates continue to derive their world footprint from authored source pixels, but an exceptional composition may now declare a validated nativeScaleMultiplier when the painted subject's semantic scale is visibly inconsistent with the rest of the map. The multiplier is explicit and family-specific; it is not inferred from category, role or a broad heuristic, so settlements and true area features retain their intended regional footprint. The selected-Hero diagnostics expose both the applied multiplier and effective semantic span for review.

The confirmed audited corrections now cover nine single-site outliers: oasis/caravan-well, resource/copper-mine, resource/iron-deposit, oasis/date-plantation, oasis/hidden-oasis, oasis/palm-oasis, oasis/ruined-oasis, oasis/sacred-oasis and ruins/haunted-battlefield. Their calibrated semantic cores fall between about 2.27 and 3.0 flat-to-flat hex widths instead of roughly 4–5 hexes, which had made individual wells, palms, springs, mine entrances and memorial stones read at town scale. The two older 1,536 × 1,024 oasis families also replace generic 72%-wide subject rectangles with measured bounds around the actual ruined or sacred compound. The full artwork, aspect ratio, blend contour and companions are preserved.

The audit compares active small-site resource, ruins, magical and oasis plates against the Market Town baseline. Broad quarries, settlements, lakes and terrain-area scenes remain unmodified because their larger footprint matches their semantic identity; the desert lake, canyon oasis and spring oasis already paint their focal features small within the native plate. This is a rendering-only correction: deterministic geography, Hero selection, companion topology, simulation state and persistence are unchanged.

Map performance architecture (implemented 2026-09-15): Edge profiling identified network and progressive-cache construction, rather than steady-state dragging, as the dominant map costs. The game now fetches the production manifests first and preloads only an overscanned viewport plan: one primary material for each supported terrain profile so the regional surface remains complete, plus secondary variants for visible profiles, visible Hero/connector art and visible structural families. Camera movement reprioritizes this plan instead of eagerly decoding the full Atlas. A parallel, generated atlas-v2-runtime manifest maps all 1,031 active Atlas v2 paintings to immutable WebP derivatives; full-resolution PNGs remain the review masters. The current runtime build reduces 3.20 GB of source PNGs to 223 MB (7.0%), preserves terrain and structural dimensions, and bounds Hero/companion derivatives to 1024 pixels on their longest side.

The static scene renderer now keeps a 25% overscan border (capped at 384 horizontal and 256 vertical pixels), reuses a completed cache while the camera remains inside those bounds, and rebuilds only after settled navigation exceeds them or changes zoom/revision. Progressive refinement spends the measured 7.5 ms frame budget across all pending terrain and structural work instead of imposing fixed per-kind task counts; the Edge gate records three slices and a 9.5 ms maximum slice on the implemented build, down from the profiled 26 slices and 540.6 ms wall-clock rebuild. Source images are governed by a device-sensitive decoded-pixel LRU budget (128/192/256 MiB), while derived terrain, structural and feathered-Hero caches have separate pixel budgets and close evicted bitmaps. The implemented cache is one reusable overscanned viewport surface; future mutable living-world layers still use the per-chunk revision model specified below.

Performance acceptance is now executable with npm run test:map-performance. It launches installed Microsoft Edge through CDP against an isolated local server, measures FCP and encoded image traffic, zooms to force progressive refinement, pans inside the overscan margin to prove cache reuse, and fails when runtime WebP routing or decoded-image limits are absent. Initial regression ceilings are FCP ≤1,800 ms, ≤80 image requests, ≤40 MiB encoded image payload, zoom-cache wall time ≤350 ms, cache work ≤80 ms, ≤10 slices and ≤12 ms for the longest slice. The first passing local Edge run measured 468 ms FCP, 64 image requests, 37.2 MiB encoded payload, a 146.8 ms zoom rebuild with 23.7 ms work across three slices, and successful small-pan reuse. These changes affect delivery, caching and renderer scheduling only; deterministic world generation, geography, illustrated-place selection, simulation state and persistence remain unchanged.

Art Atlas browser r155 update (2026-09-15): /tile-library/ now identifies the production manifest and regenerated world directly, separates the production-approved count from all 3,210 repository files, reports 243 illustrated places and 876 active paintings, and links to frozen checksum evidence. The default view excludes inactive history and the integrated Atlas layers whose manifest status is still review-pending. A dedicated usage filter exposes production-approved assets, active review-pending terrain/structures, archived or rejected source history, reference-only artwork, or everything; archive visibility never implies runtime eligibility. Filtering and search operate over the complete in-memory index while the DOM is limited to 48-card batches with explicit incremental loading, and overflow variations remain lazy. Returning browsers receive r155-specific script and stylesheet cache keys. This interface-only change does not alter map routing, simulation state or art approval.

Production world regeneration (2026-09-15): the authoritative deterministic seed is now GONZ-R155-0915-13, regenerating all 11,264 static hexes against complete manifest illustrated-places-166-r155. A bounded one-process comparison across 24 candidates selected this world for 50 Hero scenes, 42 distinct illustrated identities, all 11 terrain profiles, at most three uses of any identity and 328 profile-compatible companions. The regeneration changes static geography and visual placement but not map dimensions, generator version, simulation rules or persistence format. Existing player and marker records remain intact; no Railway snapshot or event history is deleted. Client cache keys now name r155 so returning browsers fetch the complete art library.

Art Atlas r155 production deployment (2026-09-15): the completed style-locked catalog is frozen at 3,210 images, 243 illustrated places, 584 companion motifs and 876 active paintings. Production targets the immutable Railway volume root /data/art-atlas-20260915/tile-library; /data/art-atlas-20260912/tile-library remains available for rollback. Git contains the catalog interface, manifests and SHA-256 inventory while the 6.15 GB originals stay on the mounted volume. Deployment 9084b466-bed 1-41f9-ae5b-375503185ce9 succeeded from commit fcc7b70c: all 3,208 volume-hosted images matched their frozen size and SHA-256, the two bundled assets completed the 3,210-file inventory, the focused 5/5 release gate passed, and live health, r155 manifest, inventory and Pilgrim Path endpoints returned the expected content. The release preserves the September 5-7 terrain-first art contract and changes no world simulation or player state.

Scenes-450 catalog completion (2026-09-14): manifest illustrated-places-166-r155 accepts the final legacy replacement, transport/pilgrim-path, at ATLAS-PILGRIM-PATH-014 q16/r27 (x2890/y2308, hills, five connectors, 46 Heroes). Its three exact 1536x1024 opaque RGB paintings follow the September 5-7 terrain-first contract anchored by Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet: a low three-stone devotional waystone with a faded ochre token and two disconnected foot-worn patches, one nearly flush offering-pebble detail, and identity-free hill ground. Direct plus genuine close/regional 1.65/0.845 composition review passed on the first attempt with exact focused/ready sources, zero tonal fallbacks, no browser/image errors and 10.2/6.5 ms maximum slice/frame. The 22/22 one-worker family gate, one-process raster verifier and final 703/703 one-worker catalog suite pass. This art-only fallback changes no simulation rule, topology, connection-layer state or player state. The authoritative replacement roster is complete at 240/240, with 243 logical modern Heroes, 292 Hero paintings, 584 companions and 876 active unique paintings. No load test ran during the art iteration; future additive art must retain the same style lock and bounded review policy.

Scenes-449 style-locked Coastal Road acceptance (2026-09-14): manifest illustrated-places-166-r154 replaces the legacy black-backed raised island, paved road, bridge, broad sea, cliffs, fences, conifers, boulder rim and glossy icon treatment with two compact widely separated cart-wear patches and a tiny salt-worn curb trace in continuous ordinary coastal meadow, one minute curb-stone detail and one identity-free ground. A one-process 40-seed scan found 10 central coast-category, fields-profile candidates; an actual-family audit selected ATLAS-COASTAL-ROAD-013 q108/r9 as the first exposing both companion layers and preserves one detail, three grounds, the 45-Hero total and generated geography. Four exact 1536x1024 opaque RGB paintings bind the canonical September 5-7 references; three are active. Direct review rejected Hero v1 because its scuffs formed one continuous diagonal track. Corrected Hero v2 derives from the accepted ground and passes close/regional 1.65/0.845 review with terrain dominance, exact focused/ready sources, zero tonal fallbacks and no browser/image errors. The r153 172-assertion baseline plus r154's combined 22/22 one-worker gate establish 174 relevant green assertions; the one-process raster verifier passes with 4.8/6.3 ms maximum recorded slice/frame. This art-only fallback changes no simulation rule, topology, connection-layer state or player state. Inventory is 239/240 repainted; transport/pilgrim-path is final. No broad suite or load test ran; the goal remains active.

Scenes-448 style-locked Trade Route acceptance (2026-09-14): manifest illustrated-places-166-r153 replaces the legacy black-backed route island, intersecting paved roads, bridge, river, giant signpost, conifers, boulder rim and glossy icon treatment with one tiny low pack-frame and dull trade bales beside two small separated wheel-scuff pairs in continuous ordinary straw-olive fields, one minute tally-peg trace and one identity-free ground. An initial 40-seed scan yielded only an extreme-edge fields candidate; the bounded central scan selected the real grassland-category, fields-profile site ATLAS-TRADE-SITE-005 q24/r13 and preserves six compatible companions, the 45-Hero total and generated geography. Four exact 1536x1024 opaque RGB paintings bind the canonical September 5-7 references; three are active. Close composition rejected Hero v1 because runtime cropping turned its diagonal ruts into an edge-to-edge road. Corrected Hero v2 derives from the accepted ground and passes final close/regional 1.65/0.845 review with terrain dominance, discontinuous scuffs, exact focused/ready sources, zero tonal fallbacks and no browser/image errors. The r152 170-assertion baseline plus r153's combined 22/22 one-worker gate establish 172 relevant green assertions; the one-process raster verifier passes with 8.1/2.5 ms maximum recorded slice/frame. This art-only fallback changes no simulation rule, topology, connection-layer state or player state. Inventory is 238/240 repainted with two remaining; transport/coastal-road is next. No broad suite or load test ran; the goal remains active.

Scenes-447 style-locked Ferry Crossing acceptance (2026-09-14): manifest illustrated-places-166-r152 replaces the legacy black-backed ferry island, broad blue watercourse, giant platform, tall posts, roads, fences, conifers, boulder rim and glossy icon treatment with one small low flat-bottomed wooden scow pulled onto a short muddy landing in continuous ordinary olive-grey, peat-brown and dusty sage wetland, one minute mooring trace and one identity-free ground. A sequential one-process 40-seed scan uses the first of 35 real coast-category, wetlands-profile candidates at ATLAS-FERRY-CROSSING-002 q84/r32 and preserves five compatible companions, the 45-Hero total and generated geography. Three exact 1536x1024 opaque RGB paintings bind the four canonical September 5-7 references and passed direct and close/regional 1.65/0.845 review on the first attempt. Final composition confirms terrain dominance, exact focused/ready sources, zero tonal fallbacks, no browser/image errors and no hard plate, broad painted water, giant ferry, long dock or route to an edge. The r151 168-assertion baseline plus r152's combined 22/22 one-worker gate establish 170 relevant green assertions; the one-process raster verifier passes with 6.8/1.0 ms maximum recorded slice/frame. This art-only fallback changes no simulation rule, topology, connection-layer state or player state. Inventory is 237/240 repainted with three remaining; transport/trade-route is next. No broad suite or load test ran; the goal remains active.

Scenes-446 style-locked Stone Bridge acceptance (2026-09-14): manifest illustrated-places-166-r151 replaces the legacy black-backed island, broad blue river, enormous masonry arch, towers, paved roads, conifers, boulder rim and glossy icon treatment with one low humble single-span fieldstone footbridge over a short shallow dry seasonal cut in continuous ordinary olive, straw and grey-brown hill pasture, one minute repair-stone trace and one identity-free ground. Because transport selection remains inactive while connection layers are disabled, a sequential one-process 40-seed scan uses the first real grassland-category, hills-profile candidate at ATLAS-STONE-BRIDGE-010 q43/r14 and preserves four compatible companions, the 51-Hero total and generated geography. Three exact 1536x1024 opaque RGB paintings bind the four canonical September 5-7 references and passed direct and close/regional 1.65/0.845 review on the first attempt. Final composition confirms terrain dominance, exact focused/ready sources, zero tonal fallbacks, no browser/image errors and no hard plate, broad river, giant arch, towers or edge-to-edge paving. The r150 166-assertion baseline plus r151's combined 22/22 one-worker gate establish 168 relevant green assertions; the one-process raster verifier passes with 4.5/2.6 ms maximum recorded slice/frame. This art-only fallback changes no simulation rule, topology, connection-layer state or player state. Inventory is 236/240 repainted with four remaining; transport/ferry-crossing is next. No broad suite or load test ran; the goal remains active.

Scenes-445 style-locked Rope Bridge acceptance (2026-09-14): manifest illustrated-places-166-r150 replaces the legacy black-backed gorge-island, waterfall, broad watercourse, giant posts, oversized bridge, conifers, boulder rim and glossy icon treatment with one short humble rope footbridge over a localized shallow reed-lined drainage in continuous ordinary olive-grey and peat-brown wetland, one minute maintenance trace and one identity-free ground. Because transport selection remains inactive while connection layers are disabled, a sequential one-process 40-seed scan uses the first real wetland-category, wetlands-profile candidate at ATLAS-ROPE-BRIDGE-001 q102/r28 and preserves five compatible companions, the 55-Hero total and generated geography. Three exact 1536x1024 opaque RGB paintings bind the four canonical September 5-7 references and passed direct and close/regional 1.65/0.845 review on the first attempt. Final composition confirms terrain dominance, exact focused/ready sources, zero tonal fallbacks, no browser/image errors and no hard plate, gorge, waterfall, broad river or monumental crossing. The r149 164-assertion baseline plus r150's combined 22/22 one-worker gate establish 166 relevant green assertions; the one-process raster verifier passes with 7.6/0.8 ms maximum recorded slice/frame. This art-only fallback changes no simulation rule, topology, connection-layer state or player state. Inventory is 235/240 repainted with five remaining; transport/stone-bridge is next. No broad suite or load test ran; the goal remains active.

Scenes-444 style-locked Mountain Pass acceptance (2026-09-14): manifest illustrated-places-166-r149 replaces the legacy black-backed island, bridge, river, waterfall, paved road, giant twin peaks, conifers, boulder rim and glossy icon treatment with two low unequal broken rock shoulders framing a shallow natural saddle in continuous ordinary mountain upland, one minute wind-scoured notch and one identity-free ground. Because transport selection remains inactive while connection layers are disabled, a sequential one-process 40-seed scan uses the first real mountain-category, mountain-profile candidate at ATLAS-MOUNTAIN-PASS-001 q41/r32 and preserves five compatible companions, the 61-Hero total and generated geography. Three exact 1536x1024 opaque RGB paintings bind the four canonical September 5-7 references and all passed direct and close/regional 1.65/0.845 review on the first attempt. Final composition confirms terrain dominance, exact focused/ready sources, no browser/image errors, no hard plate and no bridge, water, paved route or giant landmark. The r148 162-assertion baseline plus r149's combined 22/22 one-worker gate establish 164 relevant green assertions; the one-process raster verifier passes with 5.7/9.2 ms maximum recorded slice/frame. This art-only fallback changes no simulation rule, topology, connection-layer state or player state. Inventory is 234/240 repainted with six remaining; transport/rope-bridge is next. No broad suite or load test ran; the goal remains active.

Scenes-443 style-locked Forest Trail acceptance (2026-09-14): manifest illustrated-places-166-r148 replaces the legacy black-backed island, bridge, stream, continuous road, conifer wall, boulder rim and glossy icon treatment with three separated low-contrast scuffs embedded in continuous ordinary olive forest floor, one minute flush root trace and one identity-free ground. Because transport selection remains inactive while connection layers are disabled, a sequential one-process 40-seed scan uses the first real forest-category, forest-profile candidate at ATLAS-FOREST-TRAIL-001 q41/r63 and preserves five compatible companions, the 42-Hero total and generated geography. Six exact 1536x1024 opaque RGB paintings bind the four canonical September 5-7 references; three corrected sources are active and three rejected candidates remain as evidence. Direct review rejected an identity-free Hero and a detail that became a diagonal path with trunks and stumps; regional review rejected Hero v2's broad warmer brown island. Active Hero v3 and detail v2 derive from the accepted ground and therefore share one local palette and texture. Final close/regional 1.65/0.845 review confirms terrain dominance, exact focused/ready sources, no browser/image errors, no hard plate and no route-to-edge. The r147 160-assertion baseline plus r148's combined 22/22 one-worker gate establish 162 relevant green assertions; the one-process raster verifier passes with 6.7/9.1 ms maximum recorded slice/frame. This art-only fallback changes no simulation rule, topology, connection-layer state or player state. Inventory is 233/240 repainted with seven remaining; transport/mountain-pass is next. No broad suite or load test ran; the goal remains active.

Scenes-442 style-locked Stone Road acceptance (2026-09-14): manifest illustrated-places-166-r147 replaces the legacy black-backed raised road island, edge-to-edge paving, bridge, water, conifers, boulder rim and glossy icon treatment with exactly two short separated grass-broken cobble remnants in continuous ordinary straw-olive fields, one subordinate three-fleck trace and one identity-free ground. Because transport selection remains intentionally inactive while connection layers are disabled, a sequential single-process scan of 40 real grassland candidates uses the first central fields-profile site at ATLAS-STONE-ROAD-002 q70/r50 and preserves three compatible companions, the 42-Hero total and generated geography. Six exact 1536x1024 opaque RGB paintings bind the four canonical September 5-7 references; three corrected sources are active and three failed candidates remain as evidence. Composed review rejected Hero v1's continuous diagonal stripe and detail v1's oversized clipped curb; direct review rejected detail v2's upright square block. Final Hero v2/detail v3/ground v1 close/regional 1.65/0.845 composition confirms terrain dominance, exact focused/ready sources, no browser/image errors and no hard plate, route-to-edge or connector landmark. The r146 158-assertion baseline plus r147's combined 22/22 one-worker gate establish 160 relevant green assertions; the one-process raster verifier passes with 8.1/6.2 ms maximum recorded slice/frame. This art-only fallback changes no simulation rule, topology, connection-layer state or player state. Inventory is 232/240 repainted with eight remaining; transport/forest-trail is next. No broad suite or load test ran; the goal remains active.

Scenes-441 style-locked Crossroads acceptance (2026-09-14): manifest illustrated-places-166-r146 replaces the legacy black-backed raised route island, enormous paved X, circular stone enclosure, bridges, docks, fences, trees and glossy icon treatment with one localized irregular dirt-cart-track junction and tiny weathered fingerpost embedded in broad ordinary straw-olive fields, one subordinate partly buried fieldstone waymarker and one identity-free ground. No occurrence appeared in 18 standard seeds or 200 dedicated probes because transport category selection remains intentionally inactive while connection layers are disabled. Controlled grassland-category fallback uses a real fields-profile candidate at ATLAS-CROSSROADS-005 q46/r78, preserving five compatible companions, the 55-Hero total and generated geography. Initial detail v1 is retained but inactive because composed review exposed a duplicate wooden sign cluster; corrected detail v2 passes. Final 1.65/0.845 composition confirms terrain dominance, exact focused/ready sources, no browser/image errors and a localized route node joining open upland to the shoreline. The validated r145 156-assertion baseline plus r146's combined 22/22 one-worker gate establish 158 relevant green assertions; the one-process raster verifier passes with 8.3/0.8 ms maximum recorded slice/frame. This art-only fallback changes no simulation rule, topology, connection-layer state or player state. Inventory is 231/240 repainted with nine remaining; transport/stone-road is next. No broad suite or load test ran; the goal remains active.

Scenes-440 style-locked Desert Kasbah acceptance (2026-09-14): manifest illustrated-places-166-r145 replaces the legacy black-backed raised fortified-city diorama, dense walls, monumental towers and saturated orange palette with one modest low mudbrick defensive refuge embedded in broad continuous desert, one subordinate sentry-shade trace and one identity-free ochre gravel ground. No occurrence appeared in 18 standard seeds. A sequential one-process 200-seed scan found six natural legacy occurrences, all incorrectly routed to fields terrain; the replacement therefore uses controlled desert-only fallback at the real desert-category candidate ATLAS-DESERT-KASBAH-001 q0/r48, preserving four compatible companions, the 50-Hero total and generated geography instead of painting the mismatch green. Three exact 1536x1024 opaque RGB paintings bind the September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as immutable references. Direct and genuine 1.65/0.845 composition confirms terrain dominance, a small defensive identity distinct from Walled Oasis, Caravanserai, Desert Village, Mountain Citadel and Stone Castle, subordinate detail, exact focused/ready sources and no browser/image errors. The validated r144 154-assertion baseline plus r145's combined 22/22 one-worker gate establish 156 relevant green assertions; the one-process raster verifier passes with 6.7/4.2 ms maximum recorded slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 230/240 repainted with 10 remaining; transport/crossroads is next. No broad suite or load test ran; the goal remains active.

Scenes-439 style-locked Cliff City acceptance (2026-09-14): manifest illustrated-places-166-r144 replaces the legacy black-backed raised cliff island, monumental cathedral, dense multistorey city, castle walls, blue roofs, harbor, towers and hard rim with two terrain-first profile families. Tundra v1 uses six tiny low stone-and-timber dwellings fitted into two natural ledges, one subordinate watch trace and identity-free windswept ground. Initial arctic v1 passed direct inspection but created a bright circular snow plate at regional scale, so all three arctic v1 sources were rejected and retained as evidence; active arctic v2 preserves the same quiet ledge settlement while using cold ochre-grey and olive-grey tundra with sparse frost. No occurrence appeared in 18 standard seeds; a sequential one-process 200-seed scan found five tundra and one arctic occurrence, with the first of each profile at ATLAS-CLIFF-CITY-025 q7/r85 and -091 q41/r14 preserving the 54/63-Hero totals, eight/seven compatible companions and generated geography. Final tundra and corrected-arctic 1.65/0.845 composed review confirms terrain dominance, subordinate details, no hard plate or halo, exact focused/ready profile sources, zero tonal fallbacks and no browser/image errors. The validated r143 152-assertion baseline plus r144's combined 22/22 one-worker gate establish 154 relevant green assertions; the one-process raster verifier passes with 7.9/8.5 ms maximum accepted slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 229/240 repainted with 11 remaining; fortification/desert-kasbah is next. No broad suite or load test ran; the goal remains active.

Scenes-438 style-locked Desert Village acceptance (2026-09-14): manifest illustrated-places-166-r143 replaces the legacy black-backed raised desert island, dense multi-storey tower cluster, domes, oversized well, crop plot, bright awnings and hard rim with four tiny low one-storey mudbrick homes, one shared cistern, one shade frame and two restrained palms embedded in continuous ordinary desert, plus one subordinate shade/storage trace and one identity-free ground. No natural occurrence appeared in 18 recorded standard seeds or 200 dedicated probes, and no rural Hero naturally occupied desert terrain, so controlled alternate-category fallback GONZ-ATLAS-0902 q52/r37 lets the rural replacement use an explicit desert-category site already occupied by Singing Dunes while preserving five desert companions, the 47-Hero total and generated geography. Final 1.65/0.845 composed review confirms the unwalled modest village is distinct from Walled Oasis, Oasis Town and Caravanserai, terrain dominant, shoreline unchanged, exact focused/ready Hero/detail/ground sources, zero tonal fallbacks and free of browser-warning or image-error drift. The validated r142 150-assertion baseline plus r143's combined 22/22 one-worker gate establish 152 relevant green assertions; the final one-process raster verifier passes with 8.7/8.2 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 228/240 repainted with 12 remaining; city/cliff-city is next. No broad suite or load test ran; the goal remains active.

Scenes-437 style-locked Lumber Village acceptance (2026-09-14): manifest illustrated-places-166-r142 replaces the legacy black-backed river-mill diorama, oversized buildings, waterwheel, hard rim and isolated-icon treatment with three tiny lived-in cottages, one modest open saw shelter and restrained log stacks embedded in continuous ordinary forest-edge terrain, plus one subordinate work trace and one identity-free ground. No natural occurrence appeared in 18 recorded standard seeds or 200 dedicated probes, and no rural Hero naturally occupied forest terrain, so controlled alternate-category fallback GONZ-ATLAS-0902 q103/r35 lets the rural replacement use an explicit forest-category site already occupied by Woodland Waystone Sanctuary while preserving five forest companions, the 47-Hero total and generated geography. Final 1.65/0.845 composed review confirms the lived-in clearing is distinct from Timber Reserve, smaller and quieter than Forest Town, terrain dominant, exact focused/ready Hero/detail/ground sources, zero tonal fallbacks and free of browser-warning or image-error drift. The validated r141 148-assertion baseline plus r142's combined 22/22 one-worker gate establish 150 relevant green assertions; the final one-process raster verifier passes with 7.5/7.1 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 227/240 repainted with 13 remaining; rural/desert-village is next. No broad suite or load test ran; the goal remains active.

Scenes-436 style-locked Mining Camp acceptance (2026-09-14): manifest illustrated-places-166-r141 replaces the legacy black-backed industrial diorama, mine mouth, rail, crane, smoke, large buildings and hard rim with three tiny canvas tents, one open tool shelter, one timber stack and two restrained spoil heaps embedded in continuous ordinary muted hills, plus one minute off-centre support lean-to and one identity-free ground. No natural occurrence appeared in 18 recorded standard seeds or 200 dedicated probes, so controlled fallback GONZ-ATLAS-0902 q72/r34 uses an already-selected rural hills candidate while preserving six hills companions, the 47-Hero total and generated geography. Final 1.65/0.845 composed review confirms terrain dominance, subordinate detail, exact focused/ready Hero/detail/ground sources, zero tonal fallbacks and no browser-warning or image-error drift. The validated r140 146-assertion baseline plus r141's combined 22/22 one-worker gate establish 148 relevant green assertions; the final one-process raster verifier passes with 9.7/7.2 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 226/240 repainted with 14 remaining; rural/lumber-village is next. No broad suite or load test ran; the goal remains active.

Scenes-435 style-locked Aurora Expanse acceptance (2026-09-14): manifest illustrated-places-166-r140 replaces the legacy black-backed night-sky diorama, vertical aurora curtains, stars, saturated cyan, mountains, spires, lake, conifers, raised island and hard rim with exactly three separated faint matte desaturated celadon-grey and smoky mauve-grey color casts embedded in continuous ordinary Arctic snow, plus one minute diffuse dapple and one identity-free ground. No natural occurrence appeared in 18 recorded standard seeds; two appeared in 200 dedicated probes, and the first catalog-order hit ATLAS-AURORA-EXPANSE-110 q1/r5 preserves four arctic companions, the 64-Hero total and generated geography. Final 1.65/0.845 composed review confirms terrain dominance, subordinate detail, exact focused/ready Hero/detail/ground sources and no sky, curtain, glow, route, ribbon, pool, ring, browser-warning or image-error drift. The validated r139 144-assertion baseline plus r140's single combined 22/22 one-worker gate establish 146 relevant green assertions; the final one-process raster verifier passes with 8.8/6.5 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 225/240 repainted with 15 remaining; rural/mining-camp is next. No broad suite or load test ran; the goal remains active.

Scenes-434 style-locked Permafrost Flats acceptance (2026-09-14): manifest illustrated-places-166-r139 replaces the legacy black-backed raised ice island, turquoise cliffs, spires and hard rim with four nearly flat separated exposures of dull grey-brown frozen soil, thin broken frost edges and sparse embedded stone in continuous ordinary Arctic snow, plus one minute frost-rimmed soil detail and corrected identity-free ground v2. No natural occurrence appeared in 18 recorded standard seeds or 200 dedicated probes, so the arctic family uses compatible catalog-review site ATLAS-PERMAFROST-FLATS-001 q61/r14, preserving four arctic companions, the 56-Hero total and generated geography. Ground v1 is rejected because a smooth pale oval could read as a frozen pond when repeated. Final 1.65/0.845 composed review confirms terrain dominance, subordinate detail, exact focused/ready Hero/detail/ground sources and no island, spire, cyan, pond, browser-warning or image-error drift. The validated r138 142-assertion baseline plus r139's single combined 22/22 one-worker gate establish 144 relevant green assertions; the final one-process raster verifier passes with 5.3/10.1 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 224/240 repainted with 16 remaining; arctic/aurora-expanse is next. No broad suite or load test ran; the goal remains active.

Scenes-433 style-locked Snow Plain acceptance (2026-09-14): manifest illustrated-places-166-r138 replaces the legacy black-backed alpine snow island, tall peaks, frozen lakes, conifer groups and hard rim with exactly three low unequal snow swells embedded in continuous matte off-white snow, slate-grey stone and restrained ochre-grey grit, plus corrected minute half-buried natural stone detail v2 and one identity-free ground. No natural occurrence appeared in 18 recorded standard seeds or 200 dedicated probes, so the arctic family uses compatible catalog-review site ATLAS-SNOW-PLAIN-001 q56/r11, preserving four arctic companions, the 51-Hero total and generated geography. Detail v1 is rejected because its flat rectangular stone read as a cut slab or masonry step regionally. Final 1.65/0.845 composed review confirms terrain dominance, corrected subordinate detail, exact focused/ready Hero/detail/ground sources and no alpine, lake, island, slab, browser-warning or image-error drift. The validated r137 140-assertion baseline plus r138's single combined 22/22 one-worker gate establish 142 relevant green assertions; the final one-process raster verifier passes with 6.6/3.3 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 223/240 repainted with 17 remaining; arctic/permafrost-flats is next. No broad suite or load test ran; the goal remains active.

Scenes-432 style-locked Ice Spires acceptance (2026-09-14): manifest illustrated-places-166-r137 replaces the legacy saturated cyan crystal skyline, repeated needles, black backing, raised snow island and rim with three asymmetric weathered ice fins embedded in broad continuous off-white snow, slate-grey rock and ochre-grey grit, plus one minute partly buried fragment and one identity-free ground. No natural occurrence appeared in 18 recorded standard seeds or 200 dedicated deterministic probes, so the arctic family uses compatible catalog-review site ATLAS-COLD-001 q79/r15, preserving six arctic companions, the 51-Hero total and generated geography. Genuine 1.65/0.845 composed review confirms terrain dominance, a subordinate detail, exact focused/ready Hero/detail/ground sources and no cyan spectacle, glow, hard rectangular plate, browser warning or image error. The validated r136 138-assertion baseline plus r137's single combined 22/22 one-worker gate establish 140 relevant green assertions; the final one-process raster verifier passes with 8.3/4.1 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 222/240 repainted with 18 remaining; arctic/snow-plain is next. No broad suite or load test ran; the goal remains active.

Scenes-431 style-locked Cinder Cones acceptance (2026-09-14): manifest illustrated-places-166-r136 replaces the legacy black-backed raised volcanic island, circular rock rim, perfect cones, deep glowing craters, lava network and smoke spectacle with exactly three low unequal dormant cinder mounds in an open irregular triangle embedded in continuous ordinary ash-grey/grey-brown mountain upland, plus one minute collapsed-scoria detail and one identity-free ground. The native volcanic category routes at natural standard-seed site GONZ q89/r33, preserving five mountain companions, the 46-Hero total and generated geography. Direct and genuine 1.65/0.845 composed review accepts Hero v1 and its truly subordinate broken scoria shoulder with ordinary terrain dominant, exact focused/ready Hero/detail/ground sources, and no black backing, raised island, rim, perfect cone, deep crater, lava, glow, magma crack, smoke, steam, eruption, hard edge or detached plate. The validated r135 136-assertion baseline plus r136's single combined 22/22 one-worker gate establish 138 relevant green assertions; the final one-process raster verifier passes with zero browser/image errors and 5.4/7.1 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 221/240 repainted with 19 remaining; arctic/ice-spires is next. No broad suite or load test ran; the goal remains active.

Scenes-430 style-locked Geothermal Valley acceptance (2026-09-14): manifest illustrated-places-166-r135 replaces the legacy black-backed raised volcanic island, cone cluster, lava network, turquoise water, paths, rock rings and steam spectacle with exactly two separated unequal smoke-blue-grey mineral basins embedded in continuous ordinary grey-brown mountain upland, plus one corrected minute mineral-seep detail and one identity-free ground. With no natural occurrence in 18 recorded standard seeds, the native volcanic category uses compatible mountain catalog-review site ATLAS-GEOTHERMAL-104 q66/r59, preserving five mountain companions, the 56-Hero total and generated geography. Detail v1 is rejected because it was comparable to the Hero's smaller basin and risked a second landmark. Genuine 1.65/0.845 review accepts Hero v1 and detail v2 with broken muted cream, ochre and rust mineral feathers, two faint low steam wisps, ordinary terrain dominant, and no volcano, crater, lava, geyser jet, turquoise water, route, black backing, ring, island, halo, hard edge or detached plate. The validated r134 134-assertion baseline plus r135's combined 22/22 one-worker gate establish 136 relevant green assertions; the final one-process raster verifier passes with zero browser/image errors and 3.0/10.9 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 220/240 repainted with 20 remaining; volcanic/cinder-cones is next. No broad suite or load test ran; the goal remains active.

Scenes-429 style-locked Lava Fields acceptance (2026-09-14): manifest illustrated-places-166-r134 replaces the legacy black-backed raised volcanic island, tall cones, crater spectacle and saturated lava network with one modest low cooling field embedded in continuous ordinary grey-brown mountain upland, plus one corrected minute cooled-crack detail and one identity-free ground. With no natural occurrence in 18 recorded standard seeds, the native volcanic category uses compatible mountain catalog-review site ATLAS-LAVA-005 q1/r26, preserving six mountain companions, the 49-Hero total and generated geography. Hero v1 is rejected because the field dominated and clipped the close view; detail v1 is rejected because it read as a second small lava field at regional scale. Genuine 1.65/0.845 review accepts Hero v2 and detail v2 with three restrained ember fissures, two cooled lobes, ordinary terrain dominant, and no volcano, crater, eruption, smoke, lava river, glowing pool, black backing, island, rim, halo, hard edge or detached plate. The validated r133 132-assertion baseline plus r134's combined 22/22 one-worker gate establish 134 relevant green assertions; the final one-process raster verifier passes with zero browser/image errors and 8.6/8.2 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 219/240 repainted with 21 remaining; volcanic/geothermal-valley is next. No broad suite or load test ran; the goal remains active.

Scenes-428 style-locked Juniper Scrub acceptance (2026-09-14): manifest illustrated-places-166-r133 replaces the legacy black-backed raised circular conifer island, rock rim and generic tall evergreen wall with exactly eight low dusty blue-green junipers in an open asymmetric cluster on continuous ordinary cold highland forest ground, plus one corrected minute creeping sprig detail and one identity-free ground. With no natural occurrence in 18 recorded standard plus 200 dedicated deterministic seeds, the native conifer category uses compatible forest catalog-review site ATLAS-JUNIPER-010 q34/r71, preserving four forest companions, the 43-Hero total and generated geography. Detail v1 is rejected for excessive connector scale, Hero v1 because the stand dominated and clipped the close view, and Hero v2 because its correction introduced a ninth shrub. Genuine 1.65/0.845 review accepts Hero v3 and detail v2 with ordinary terrain dominant, the generated shoreline preserved and no tall conifer, black backing, island, rim, masonry, row, path, halo, hard edge or detached plate. The validated r132 130-assertion baseline plus r133's exact affected 22/22 and Juniper Scrub 2/2 one-worker gates establish 132 relevant green assertions; the final one-process raster verifier passes with zero browser/image errors and 6.9/4.6 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 218/240 repainted with 22 remaining; volcanic/lava-fields is next. No broad suite or load test ran; the goal remains active.

Scenes-427 style-locked Bristlecone Stand acceptance (2026-09-14): manifest illustrated-places-166-r132 replaces the legacy black-backed circular rock island, central monument and surrounding evergreen wall with exactly three small ancient bristlecones in a compact irregular unequal-pair-plus-one composition on continuous ordinary cold highland forest ground, plus one corrected minute sapling detail and one identity-free ground. With no natural occurrence in 18 standard plus 200 dedicated deterministic seeds, the native conifer category uses compatible forest catalog-review site ATLAS-BRISTLE-010 q42/r9, preserving four forest companions, the 51-Hero total and generated geography. Hero v1 is rejected for diagonal composition and squared masonry-like stones, Hero v2 for excessive close-view scale, and detail v1 for competing with the Hero at regional scale; its widened-crop experiment also failed because the enlarged footprint washed over the scene. Genuine 1.65/0.845 review accepts Hero v3 and detail v2 with ordinary terrain dominant and no black backing, island, ring, masonry, monument, clearing, path, halo, hard edge or detached plate. The validated r131 128-assertion baseline plus r132's exact affected 22/22 and Bristlecone Stand 2/2 one-worker gates establish 130 relevant green assertions; the final one-process raster verifier passes with zero browser/image errors and 13.6/7.3 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 217/240 repainted with 23 remaining; conifer/juniper-scrub is next. No broad suite or load test ran; the goal remains active.

Scenes-426 style-locked Snowy Pines acceptance (2026-09-14): manifest illustrated-places-166-r131 replaces the legacy black-backed circular conifer island, rock rim, dense pyramid and giant central tree with exactly five small snow-dusted pines in a natural asymmetric three-plus-two composition on continuous ordinary cold forest ground, plus one minute branch-snow sapling detail and one identity-free ground. With no natural occurrence in 18 standard plus 200 dedicated deterministic seeds, the native conifer category uses compatible forest catalog-review site ATLAS-SNOWY-011 q31/r16, preserving five forest companions, the 45-Hero total and generated geography. Hero v1 is rejected because connected ground snow formed a diagonal route; Hero v2 is rejected because separated marks became decorative snowflake glyphs. Genuine 1.65/0.845 review accepts v3 with snow confined to branches and no ring, route, glyph, halo, hard edge or detached plate. The validated r130 126-assertion baseline plus r131's exact affected 22/22 and Snowy Pines 2/2 one-worker gates establish 128 relevant green assertions; the final one-process raster verifier passes with zero browser/image errors and 8.5/6.5 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 216/240 repainted with 24 remaining; conifer/bristlecone-stand is next. No broad suite or load test ran; the goal remains active.

Scenes-425 style-locked Larch Forest acceptance (2026-09-14): manifest illustrated-places-166-r130 replaces the legacy black-backed circular conifer island, rock rim and dense pyramid of giant trees with exactly seven small slender golden larches in a compact natural four-plus-two-plus-one grouping on continuous ordinary forest ground, plus one minute sapling detail and one identity-free ground. With no natural occurrence in 18 standard plus 200 dedicated deterministic seeds, the native conifer category uses compatible forest catalog-review site ATLAS-LARCH-017 q60/r20, preserving five forest companions, the 46-Hero total and generated geography. Genuine 1.65/0.845 review confirms exact focused/ready sources without a ring, row, canopy wall, clearing, path, halo, hard edge or detached plate. The validated r129 124-assertion baseline plus r130's exact affected 22/22 and Larch 2/2 one-worker gates establish 126 relevant green assertions; the final one-process raster verifier passes with zero browser/image errors and 7.3/4.7 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 215/240 repainted with 25 remaining; conifer/snowy-pines is next. No broad suite or load test ran; the goal remains active.

Scenes-424 style-locked Fir Highlands acceptance (2026-09-14): manifest illustrated-places-166-r129 replaces the legacy black-backed conifer island, giant central firs, boulder monument and cliff rim with exactly six small firs in a compact open four-plus-two grouping on continuous ordinary upland forest ground, plus three tiny irregular bedrock flecks, one minute sapling-and-stone detail and one identity-free ground. With no natural occurrence in 18 standard plus 200 dedicated deterministic seeds, the native conifer category uses compatible forest catalog-review site ATLAS-REDWOOD-135 q12/r16, preserving six forest companions, the 62-Hero total and generated geography. Hero v1 and v2 fail close crop focus and v3 fails natural material language because squared stones read as masonry; genuine 1.65/0.845 review accepts v4 without an island, cliff, canopy wall, masonry, ring, row, halo, hard edge or detached plate. All 124 focused assertions are green via a one-worker 123/124 run plus a targeted 3/3 rerun after correcting its sole prompt-wording failure; the final one-process raster verifier passes with zero browser/image errors and 9.5/4.5 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 214/240 repainted with 26 remaining; conifer/larch-forest is next. No broad suite or load test ran; the goal remains active.

Scenes-423 style-locked Redwood Grove acceptance (2026-09-14): manifest illustrated-places-166-r128 replaces the legacy black-backed circular forest island, dense giant redwood wall, fallen log and rock rim with exactly five slender redwoods in a lopsided three-tree cluster plus a displaced unequal two-tree pair on continuous ordinary forest floor, plus one minute sapling detail and one identity-free ground. The native conifer category uses natural site ATLAS-REDWOOD-135 q6/r74, preserving six forest companions, the 62-Hero total and generated geography. Hero v1 is rejected because it enclosed an empty centre; genuine 1.65/0.845 review accepts v2 without a ring, canopy wall, row, halo, hard edge or detached plate. The 122/122 focused gate and final one-process raster verifier pass with one test worker, zero browser/image errors and 9.7/7.9 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 213/240 repainted with 27 remaining; conifer/fir-highlands is next. No broad suite or load test ran; the goal remains active.

Scenes-422 style-locked Spruce Taiga acceptance (2026-09-14): manifest illustrated-places-166-r127 replaces the legacy black-backed circular conifer island, dense canopy, giant central trees and rock rim with exactly seven small spruces in two open non-aligned groups plus one isolated sapling on continuous ordinary taiga floor, plus one minute two-sapling detail and one identity-free ground. With no natural occurrence in a bounded 200-seed scan, the native conifer category uses compatible forest catalog-review site ATLAS-SPRUCE-009 q69/r15, preserving four forest companions, the 53-Hero total and generated geography. Hero v1 is rejected for eight trees and Hero v2 for weak focused composition; genuine 1.65/0.845 review accepts v3 without a ring, canopy wall, row, snow, halo, hard edge or detached plate. The 120/120 focused gate and final one-process raster verifier pass with one test worker, zero browser/image errors and 8.4/8.2 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 212/240 repainted with 28 remaining; conifer/redwood-grove is next. No broad suite or load test ran; the goal remains active.

Scenes-421 style-locked Beechwood acceptance (2026-09-14): manifest illustrated-places-166-r126 replaces the legacy black-backed circular woodland island, giant trunks, dense canopy and rock rim with seven small beeches in two unequal open groups plus one isolated sapling on continuous ordinary forest floor, plus one minute two-sapling detail and one identity-free ground. The native forest category routes the family to ATLAS-BEECH-001 q104/r25 with six strictly forest-compatible companions while preserving the 47-Hero total and generated geography. Genuine 1.65/0.845 composition confirmed exact focused/ready land routes without a ring, orchard row, canopy wall, focal halo, hard edge or detached plate. The 118/118 focused gate and one-process raster verifier pass with one test worker, zero browser/image errors and 7.6/7.4 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 211/240 repainted with 29 remaining; conifer/spruce-taiga is next. No broad suite or load test ran; the goal remains active.

Scenes-420 style-locked Clover Field acceptance (2026-09-14): manifest illustrated-places-166-r125 replaces the legacy black-backed circular clover carpet, giant leaves, bright blossom balls and rock rim with three small widely separated dark-sage clover traces and two pinhead faded-cream flowers in continuous ordinary olive-and-straw grassland, plus one minute clover detail and one identity-free ground. The native grassland category routes the family to ATLAS-CF-005 q-11/r38 with five strictly grasslands-compatible companions while preserving the 53-Hero total and generated geography. Genuine 1.65/0.845 composition confirmed exact focused/ready land routes without repeated dots, crop geometry, a circular clearing, halo, hard edge or detached plate. The 116/116 focused gate and one-process raster verifier pass with one test worker, zero browser/image errors and 3.0/7.8 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 210/240 repainted with 30 remaining; forest/beechwood is next. No broad suite or load test ran; the goal remains active.

Scenes-419 style-locked Rolling Downs acceptance (2026-09-14): manifest illustrated-places-166-r124 replaces the legacy black-backed circular hill island, paths, hedges, conifers and rock rim with three short, separated, non-aligned shallow grass shoulders in continuous ordinary olive-and-straw grassland, plus one minute relief detail and one identity-free ground. Hero v1 remains inactive because focused composition exposed its long lit swell as a diagonal road-like band; corrected Hero v2 removes that route cue. The native grassland category routes v2 to ATLAS-RD-094 q8/r18 with six strictly grasslands-compatible companions while preserving the 44-Hero total and generated geography. Genuine 1.65/0.845 composition confirmed exact focused/ready land routes without a continuous stripe, terrace, route, halo, hard edge or detached plate. The 112/112 one-worker gate and one-process raster verifier pass with zero browser/image errors and 5.5/6.1 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 209/240 repainted with 31 remaining; grassland/clover-field is next. No broad suite or load test ran; the goal remains active.

Scenes-418 style-locked Wildflower Meadow acceptance (2026-09-13): manifest illustrated-places-166-r123 replaces the legacy black-backed circular grass island, rock rim, conifers and dense bright flower carpet with three small separated broken patches of muted flower flecks in continuous ordinary olive-and-straw grassland, plus one minute flower detail and one identity-free ground. The native grassland category routes the family to ATLAS-WF-046 q46/r69 with six strictly grasslands-compatible companions while preserving the 62-Hero total and generated geography. Genuine 1.65/0.845 composition confirmed exact focused/ready land routes without repeated dots, a circular clearing, flower carpet, route, halo, hard edge or detached plate. The 110/110 one-worker gate and one-process raster verifier pass with zero browser/image errors and 14.2/2.3 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 208/240 repainted with 32 remaining; grassland/rolling-downs is next. No broad suite or load test ran; the goal remains active.

Scenes-417 style-locked Misty Moor acceptance (2026-09-13): manifest illustrated-places-166-r122 replaces the legacy black-backed circular water garden, dead central tree, complete wet ring and boulder circle with three small separated ground-hugging mist traces in continuous muted moor, plus one minute mist detail and one identity-free peat-and-heather ground. The native wetland category routes the family to ATLAS-MM-018 q51/r16 with four strictly wetlands-compatible companions while preserving the 57-Hero total and generated geography. Genuine 1.65/0.845 composition confirmed exact focused/ready land routes without a pond, island, smoke trail, repeated overlay, halo, hard edge or detached plate. The 108/108 one-worker gate and one-process raster verifier pass with zero browser/image errors and 7.6/10.1 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 207/240 repainted with 33 remaining; grassland/wildflower-meadow is next. No broad suite or load test ran; the goal remains active.

Scenes-416 style-locked Salt Marsh acceptance (2026-09-13): manifest illustrated-places-166-r121 replaces the legacy black-backed floating oval, central white crystal monument, enclosed turquoise channels and hard reed rim with sparse salt traces, subdued brackish pannes and low reeds in continuous ordinary marsh, plus one restrained detail and one identity-free ground. The native wetland category routes the family to ATLAS-SM-089 q51/r51 with four same-profile companions while preserving the 62-Hero total and generated geography. Genuine 1.65/0.845 composition confirmed exact focused/ready land routes without a detached plate, authored route, salt monument, hard edge or halo. The 106/106 one-worker gate and one-process raster verifier pass with zero browser/image errors and 7.5/3.9 ms maximum slice/frame. This art-only routing changes no simulation rule, topology or player state. Inventory is 206/240 repainted with 34 remaining; wetland/misty-moor is next. No broad suite or load test ran; the goal remains active.

Scenes-415 style-locked Lotus Wetland acceptance (2026-09-13): manifest illustrated-places-166-r120 replaces the legacy black-backed oval pond island, willow landmark, complete dense reed rim, open blue-green water, many bright blossoms and focal rocks with one wetlands-profile Hero containing three micro-scale disconnected lotus cues and two pinhead dusty-rose blossoms in continuous muted wet meadow, one minute lotus detail and one identity-free wet-meadow ground. Six exact 1536x1024 RGB paintings bind the September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as immutable references; Hero v1 is inactive because its cues dispersed beyond the selected site, v2 because it became an oversized decorative cluster, and v3 because it remained wider than nearby terrain texture. The native wetland category routes active v4 only to ATLAS-LOTUS-001 q-9/r59. Strict wetlands compatibility preserves five wetlands companions and excludes one adjacent forest-profile legacy companion while preserving the 45-Hero total and geography. Genuine 1.65/0.845 composition confirmed exact focused/ready land-masked routes; the procedural map remains authoritative for wetland and coastline geography. No pond, shoreline, willow landmark, reed ring, raised island, black backing, detached plate or seam remains. The 104/104 one-worker gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 22.7/7.0 ms. This art-only routing changes no simulation rule, geography, topology or player state. Inventory is 205/240 repainted with 35 remaining; wetland/salt-marsh is next. No broad suite or load test ran; the overall goal remains active.

Scenes-414 style-locked Quaking Mire acceptance (2026-09-13): manifest illustrated-places-166-r119 replaces the legacy black-backed oval island, dead central tree, complete sedge ring, stones, lilies and open green water with one wetlands-profile Hero containing three tiny differently shaped damp turf depressions in continuous muted wet meadow, one pinhead flat compression detail and one identity-free wet-meadow ground. Five exact 1536x1024 RGB paintings bind the September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as immutable references; Hero v1 is preserved but inactive because its brown crescents read as repeated craters or rings, and Detail v1 is preserved but inactive because it became an oversized trench. The native wetland category routes corrected sources only to ATLAS-QUAKE-004 q85/r48, replacing Reed Marsh while preserving wetlands profile, four-companion topology, the 39-Hero total and geography. Genuine 1.65/0.845 composition confirmed exact focused/ready land-masked routes; the real procedural map remains authoritative for wetland shape and water geography. No complete ring, crater, trench, channel, pond, raised island, dead-tree monument, black backing, detached plate or seam remains. The 102/102 one-worker gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 7.4/5.9 ms. This art-only routing changes no simulation rule, geography, topology or player state. Inventory is 204/240 repainted with 36 remaining; wetland/lotus-wetland is next. No broad suite or load test ran; the overall goal remains active.

Scenes-413 style-locked Floodplain acceptance (2026-09-13): manifest illustrated-places-166-r118 replaces the legacy black-backed oval island, complete wetland edge, interlinked bright channels, raised reed islands, lilies, flowers and rocks with one wetlands-profile Hero containing three separated differently oriented low alluvial stains in continuous muted wet meadow, one subordinate silt detail and one identity-free ground. Four exact 1536x1024 RGB paintings bind the September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as immutable references; Hero v1 is preserved but inactive because its pale silt patches aligned into a readable diagonal route. The native wetland category routes corrected v2 only to ATLAS-FLOOD-003 q86/r51, replacing Quaking Mire while preserving wetlands profile, six-companion topology, the 50-Hero total and geography. Genuine 1.65/0.845 composition confirmed exact focused/ready land-masked routes; the real procedural map remains authoritative for water and shoreline geography. No road, trail, river, stream, continuous channel, pond, shoreline, raised island, complete ring, black backing, halo, detached plate or seam remains. The 100/100 one-worker gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 12.3/4.6 ms. This art-only routing changes no simulation rule, geography, topology or player state. Inventory is 203/240 repainted with 37 remaining; wetland/quaking-mire is next. No broad suite or load test ran; the overall goal remains active.

Scenes-412 style-locked Cypress Swamp acceptance (2026-09-13): manifest illustrated-places-166-r117 replaces the legacy black-backed oval wetland island, dense central wall of towering cypress trunks and bright blue pool with one wetlands-profile Hero containing two separated unequal open groups of small low cypress trees in continuous muted wet meadow, one subordinate tree-pair detail and one identity-free wet-meadow ground. Three exact 1536x1024 RGB paintings bind the September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as immutable references. The native wetland category routes the family only to ATLAS-CYPRESS-003 q72/r29, replacing Quaking Mire while preserving wetlands profile, four-companion topology, the 46-Hero total and geography. Genuine 1.65/0.845 composition confirmed exact focused/ready land-masked routes; the real procedural map remains authoritative for the coast and wetland shape. No circular pool, complete tree ring, raised island, dense canopy wall, giant trunks, black backing, halo, detached plate or seam remains. The 98/98 one-worker gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 1.0/1.0 ms. This art-only routing changes no simulation rule, geography, topology or player state. Inventory is 202/240 repainted with 38 remaining; wetland/floodplain is next. No broad suite or load test ran; the overall goal remains active.

Scenes-411 style-locked Peat Bog acceptance (2026-09-13): manifest illustrated-places-166-r116 replaces the legacy black-backed oval wetland island and closed raised sedge rim around a central blue pool with one wetlands-profile Hero of broken asymmetric saturated peat, low sedge and minute disconnected water glints, one subordinate peat detail and one identity-free muted wet-meadow ground. Three exact 1536x1024 RGB paintings bind the September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as immutable references. The native wetland category routes the family only to ATLAS-WET-002 q15/r18, replacing Reed Marsh while preserving wetlands profile, six-companion topology, the 52-Hero total and geography. Genuine 1.65/0.845 composition confirmed exact focused/ready land-masked routes; the real procedural map remains authoritative for the coast and wetland shape. No circular pool, complete sedge ring, raised island, black backing, halo, detached plate or seam remains. The 96/96 one-worker gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 20.4/2.5 ms. This art-only routing changes no simulation rule, geography, topology or player state. Inventory is 201/240 repainted with 39 remaining; wetland/cypress-swamp is next. No broad suite or load test ran; the overall goal remains active.

Scenes-410 style-locked Volcanic Lake acceptance (2026-09-13): manifest illustrated-places-166-r115 replaces the legacy black-backed circular crater diorama, complete mountain ring, active lava streams, smoke and saturated cyan water with one lake-profile Hero containing minute flat charcoal pumice and dull submerged mineral traces, one pinhead-scale companion and one identity-free muted lake ground. Three exact 1536x1024 RGB paintings bind the September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as immutable references. The native lake category routes the family only to ATLAS-VOLCANIC-001 q17/r59, replacing Forest Mere while preserving lake profile, five-companion topology, the 47-Hero total and geography. Genuine 1.65/0.845 composition confirmed exact focused/ready routes; the real procedural lake supplies all basin and shoreline geography. The identity remains subordinate without a crater, volcano, lava, smoke, glow, island, painted shore, ring, halo, black backing, detached plate or seam. The 94/94 one-worker gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 7.6/3.4 ms. This art-only routing changes no simulation rule, geography, topology or player state. Inventory is 200/240 repainted with 40 remaining; wetland/peat-bog is next. No broad suite or load test ran; the overall goal remains active.

Scenes-409 style-locked Mirror Lake acceptance (2026-09-13): manifest illustrated-places-166-r114 replaces the legacy black-backed enclosed conifer pond with muted continuous lake water and a focus-readable broken reflection cue. Close review rejected Hero v1 because its cue disappeared at runtime scale; corrected Hero v2, one subordinate detail, and one identity-free ground bind the September 5-7 contract and pass exact focused/ready 1.65/0.845 composition without an authored shore, forest ring, island, plate or seam. The 92/92 one-worker gate and one-process raster verifier pass; maximum slice/frame were 1.9/8.4 ms. Inventory is 199/240 repainted with 41 remaining; lake/volcanic-lake is next. No broad suite or load test ran.

Scenes-408 style-locked Reed Lake acceptance (2026-09-13): manifest illustrated-places-166-r113 replaces the legacy black-backed closed isometric pond, bright cyan-teal water, complete rocky shore ring, dense reeds and cattails, lily pads and surrounding land with one lake-profile Hero containing only two minute disconnected tawny reed cues in ordinary muted lake water, one pinhead-scale reed detail, and one identity-free muted lake ground. Three exact 1536x1024 RGB paintings bind the mandatory September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references. The native lake category routes the family only to ATLAS-REED-LAKE-001 q0/r61, replacing Forest Mere while preserving lake profile, six-companion topology, the 47-Hero world total and geography. Genuine 1.65/0.845 composition confirms exact focused/ready Hero, detail and ground sources while the real procedural lake supplies the shoreline. Ordinary lake water remains authoritative without a reed bed, cattail wall, lily-pad pond, authored shore, cyan jewel, black backing, detached plate or visible seam. The 90/90 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 7.0/2.2 ms and the final regional view measured 7.0/0.9 ms. This art-only routing changes no simulation rule, geography, topology or player state. The catalog diff leaves 42 identities and selects lake/mirror-lake next. No broad suite or load test ran; the overall goal remains active.

Scenes-407 style-locked Glacial Lake acceptance (2026-09-13): manifest illustrated-places-166-r112 replaces the legacy black-backed isometric terrain island, bright cyan pool, complete mountain-and-snow ring, floating ice blocks and conifers with one lake-profile Hero containing sparse disconnected cloudy mineral-grey glacial-flour accents in ordinary muted cold lake water, one subordinate mineral-wisp detail, and one identity-free muted cold-lake ground. Three exact 1536x1024 RGB paintings bind the mandatory September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references. The native lake category routes the family only to ATLAS-GLACIAL-001 q105/r45; the shortened seed stays inside the live runtime's 20-character input contract while replacing Forest Mere and preserving lake profile, five-companion topology, the 35-Hero world total and geography. Genuine 1.65/0.845 composition confirms exact focused/ready Hero, detail and ground sources while the real procedural lake supplies the shoreline. Ordinary lake water remains authoritative without a glacier, ice field, mountain ring, shoreline painting, cyan jewel, black backing, detached plate or visible seam. The 88/88 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 1.5/2.9 ms and the final regional view measured 1.5/0.8 ms. This art-only routing changes no simulation rule, geography, topology or player state. The catalog diff leaves 43 identities and selects lake/reed-lake next. No broad suite or load test ran; the overall goal remains active.

Scenes-406 style-locked Salt Lake acceptance (2026-09-13): manifest illustrated-places-166-r111 replaces the legacy black-backed isometric terrain island, bright cyan pool, complete white salt shoreline ring, large crystal, rocks and vegetation with one lake-profile Hero containing three tiny disconnected chalk-grey salt-scum flecks in ordinary muted lake water, one subordinate speck detail, and one identity-free muted lake ground. Three exact 1536x1024 RGB paintings bind the mandatory September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references. The native lake category routes the family only to ATLAS-SALT-LAKE-001 q86/r15, replacing Forest Mere while preserving lake profile, five-companion topology, the 35-Hero world total and geography. Genuine 1.65/0.845 composition confirms exact focused/ready Hero, detail and ground sources while the real procedural lake supplies the shoreline. Ordinary lake water remains authoritative without a salt ring, white shoreline painting, broad crust field, stepping-stone route, island, crystal monument, cyan spectacle, black backing, detached plate or visible seam. The 86/86 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 3.6/2.3 ms and the final regional view measured 3.3/1.2 ms. This art-only routing changes no simulation rule, geography, topology or player state. The catalog diff leaves 44 identities and selects lake/glacial-lake next. No broad suite or load test ran; the overall goal remains active.

Scenes-405 style-locked Oxbow Lake acceptance (2026-09-13): manifest illustrated-places-166-r110 replaces the legacy black-backed isometric terrain island, complete bright blue U-shaped water ring, central forest, outer shore, rocks and lilies with one lake-profile Hero containing only minute disconnected submerged silt traces in ordinary muted lake water, one subordinate speck detail, and one identity-free muted lake ground. Four exact 1536x1024 RGB paintings bind the mandatory September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; Hero v1 is rejected because two oversized olive silt masses read as broad mud patches or underwater land. The native lake category routes the family only to ATLAS-OXBOW-001 q56/r37, replacing Forest Mere while preserving lake profile, six-companion topology, the 39-Hero world total and geography. Genuine 1.65/0.845 composition confirms exact focused/ready Hero, detail and ground sources while the real procedural lake supplies the shoreline. Ordinary lake water remains authoritative without a complete U shape, crescent, ring, channel, island, painted shore, route, bright cyan, black backing, detached plate or visible seam. The 84/84 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 2.2/2.8 ms and the final regional view measured 1.3/0.8 ms. This art-only routing changes no simulation rule, geography, topology or player state. The catalog diff leaves 45 identities and selects lake/salt-lake next. No broad suite or load test ran; the overall goal remains active.

Scenes-404 style-locked Crater Lake acceptance (2026-09-13): manifest illustrated-places-166-r109 replaces the legacy black-backed circular isometric cliff bowl, saturated cyan pool and conifers with one lake-profile Hero containing only two minute volcanic-mineral traces in uniform muted lake water, one subordinate speck detail, and one identity-free muted lake ground. Five exact 1536x1024 RGB paintings bind the mandatory September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; Hero v1 is rejected because its oversized submerged mound read as a reef or underwater island, and Hero v2 because a broad pale tonal oval and halo remained. The native lake category routes the family only to ATLAS-CRATER-001 q62/r12, replacing Forest Mere while preserving lake profile, four-companion topology, the 53-Hero world total and geography. Genuine 1.65/0.845 composition confirms exact focused/ready Hero, detail and ground sources while the real procedural lake supplies crater geography. Ordinary lake water remains authoritative without a halo, mound, reef, island, painted shore, route, cyan spectacle, black backing, detached plate or visible seam. The 89/89 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 1.5/2.2 ms and the final regional view measured 1.1/1.4 ms. This art-only routing changes no simulation rule, geography, topology or player state. The catalog diff leaves 46 identities and selects lake/oxbow-lake next. No broad suite or load test ran; the overall goal remains active.

Scenes-403 style-locked Great Inland Lake acceptance (2026-09-13): manifest illustrated-places-166-r108 replaces the legacy black-backed isometric island, closed rocky and forested shore ring and saturated blue pool with one lake-profile Hero containing expansive muted open water and one broad diffuse field of short broken wind ripples, one subordinate disconnected ripple-patch detail, and one identity-free muted lake ground. All three exact 1536x1024 RGB paintings bind the mandatory September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references. The native lake category routes the family only to ATLAS-GIL-001 q43/r35, replacing Forest Mere while preserving lake profile, four-companion topology, the 68-Hero world total and geography. Genuine 1.65/0.845 composition confirms exact focused/ready Hero, detail and ground sources while the real procedural lake supplies the shoreline. Ordinary lake water remains authoritative without a route, stripe, painted shore, exposed land, island, ring, boat, dock, cyan spectacle, black backing, detached plate or visible seam. The 87/87 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 13.4/1.9 ms and the final regional view measured 8.0/1.4 ms. This art-only routing changes no simulation rule, geography, topology or player state. The catalog diff leaves 47 identities and selects lake/crater-lake next. No broad suite or load test ran; the overall goal remains active.

Scenes-402 style-locked Alpine Tarn acceptance (2026-09-13): manifest illustrated-places-166-r107 replaces the legacy black-backed isometric jewel-box island, closed mountain ring, saturated cyan pool and conifers with one lake-profile Hero containing a compact submerged two-chip cluster and a separate diffuse mineral-silt fleck, one minute single-stone-and-fleck detail, and one identity-free muted lake ground. Four exact 1536x1024 RGB paintings bind the mandatory September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; Hero v1 is rejected because its three pale stones align as a stepping-stone route. The native lake category routes the family only to ATLAS-TARN-009 q41/r44, replacing Forest Mere while preserving the lake profile, six-companion topology, 40-Hero world total and geography. Genuine 1.65/0.845 composition confirms exact focused/ready Hero, detail and ground sources while the real procedural lake supplies the shoreline. Ordinary lake water remains authoritative without a route, shore, island, mountain ring, cyan pool, stream, river, waterfall, black backing, detached plate or visible seam. The 85/85 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 3.6/6.2 ms and the final regional view measured 3.6/0.9 ms. This art-only routing changes no simulation rule, geography, topology or player state. The catalog diff leaves 48 identities and selects lake/great-inland-lake next. No broad suite or load test ran; the overall goal remains active.

Scenes-401 style-locked Sacred Headwaters acceptance (2026-09-13): manifest illustrated-places-166-r106 replaces the legacy black-backed isometric island, bright cyan river, paired waterfalls, staged cliffs and conifers with one mountain-profile Hero containing a tiny dull spring eye and one minute unlit clay cup, one subordinate chipped-stone-and-damp-fleck detail, and one identity-free grey-brown mountain ground. Four exact 1536x1024 RGB paintings bind the mandatory September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; Detail v1 is rejected because a pale circular object read as a second cup or bowl and would repeat the sacred icon. Because connection layers remain intentionally disabled, the validated placementCategories extension routes this river identity only to ATLAS-SH-001 q53/r19. Genuine 1.65/0.845 composition preserves mountain profile, four-companion topology, 51-Hero world total and geography. Ordinary mountain terrain remains authoritative without a shrine, altar, temple, monument, cairn, stone ring, route, continuous stream, river, waterfall, bright cyan water, glow, staged cliff bowl, masonry, black backing or detached plate. The 83/83 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 8.2/2.3 ms. This art-routing extension changes no simulation rule, geography, topology or player state. The catalog diff leaves 49 identities and selects lake/alpine-tarn next. No broad suite or load test ran; the overall goal remains active.

Scenes-400 style-locked Underground River acceptance (2026-09-13): manifest illustrated-places-166-r105 replaces the legacy black-backed cave-island diorama, bright cyan river and waterfall, glowing crystals, conifers and masonry-like platforms with one mountain-profile Hero containing a tiny flat charcoal seam and two differently sized offset damp flecks in a non-linear scalene triangle, one minute hairline-crack detail with a separate damp fleck, and one identity-free grey-brown mountain ground. Five exact 1536x1024 RGB paintings bind the mandatory September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; Hero v1 is rejected because its roofed opening and blocky stones read as a cave or tomb entrance with masonry, and Hero v2 because its shallow stones and damp trace connected into a short horizontal route. Because connection layers remain intentionally disabled, the validated placementCategories extension routes this river identity only to ATLAS-UR-002 q27/r40. Genuine 1.65/0.845 composition preserves mountain profile, four-companion topology, 60-Hero world total and geography. Ordinary mountain terrain remains authoritative without a cave, portal, tunnel, mine entrance, continuous fissure, river, route, path, road, channel, trench, cyan water, masonry, black backing or detached plate. The 81/81 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 3.7/2.1 ms and the final regional view measured 1.5/1.1 ms. This art-routing extension changes no simulation rule, geography, topology or player state. The catalog diff leaves 50 identities and selects river/sacred-headwaters next. No broad suite or load test ran; the overall goal remains active.

Scenes-399 style-locked Canyon River acceptance (2026-09-13): manifest illustrated-places-166-r104 replaces the legacy black-backed bright cyan river-island diorama with one mountain-profile Hero containing a compact Clay Pit-scale shallow erosion remnant and three disconnected subdued damp chips, one minute amorphous natural detail, and one identity-free grey-brown mountain ground. Five exact 1536x1024 RGB paintings bind the mandatory September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; Detail v1 is rejected because its squared blocks read as masonry, and composed review rejects Hero v1 because its tall walls and continuous wet cleft form an oversized monumental corridor. Because connection layers remain intentionally disabled, the validated placementCategories extension routes this river identity only to ATLAS-CN-001 q5/r55. Genuine 1.65/0.845 composition preserves mountain profile, four-companion topology, 48-Hero world total and geography. Ordinary mountain terrain remains authoritative without a continuous canyon corridor, river, road, canal, tall cliff monument, masonry, cyan water, black backing or detached plate. The 79/79 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 3.2/0.7 ms. This art-routing extension changes no simulation rule, geography, topology or player state. The catalog diff leaves 51 identities and selects river/underground-river next. No broad suite or load test ran; the overall goal remains active.

Scenes-398 style-locked Broad Delta acceptance (2026-09-13): manifest illustrated-places-166-r103 replaces the legacy black-backed bright cyan branching-water and conifer-island diorama with one wetlands-profile Hero containing a compact group of separated low silt deposits, one minute non-directional silt detail, and one identity-free olive-gold wetland ground. Five exact 1536x1024 RGB paintings bind the mandatory September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; Hero v1 is rejected because its broad pale silt bands read as a diagonal road or channel, and Detail v1 is rejected because its aligned pale chips read as stepping stones. Because connection layers remain intentionally disabled, the validated placementCategories extension routes this river identity only to the real procedural coast at ATLAS-BD-077 q70/r51 rather than painting invented branching water. Genuine 1.65/0.845 composition preserves wetlands profile, six-companion topology, 58-Hero world total and geography. The real coast remains authoritative without a painted river network, island chain, route, bright cyan water, black backing or detached plate. The 77/77 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 8.0/6.0 ms and the final regional view measured 6.6/6.0 ms. This art-routing extension changes no simulation rule, geography, topology or player state. The catalog diff leaves 52 identities and selects river/canyon-river next. No broad suite or load test ran; the overall goal remains active.

Scenes-397 style-locked River Ford acceptance (2026-09-13): manifest illustrated-places-166-r102 replaces the legacy black-backed broad blue river and continuous stone-crossing diorama with one fields-profile Hero containing a tiny non-linear flat-stone cluster and separated muted wet chips, one subordinate loose damp-stone detail, and one identity-free straw-olive fields ground. Six exact 1536x1024 RGB paintings bind the mandatory September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; composed review rejected Hero v1 because its diagonal wet patch read as a continuous stream or route, Hero v3's dark oval pockets read as ponds or hoofprints, and Hero v4 did not improve the identity over v2. Because connection layers remain intentionally disabled, the validated placementCategories extension routes this river identity only to explicit reviewed grassland-category site ATLAS-AT-022 q83/r64 rather than enabling global river overlays. Genuine 1.65/0.845 composition preserves fields profile, six-companion topology, 54-Hero world total and geography. Broad ordinary fields remain authoritative without a continuous river, road, pool, bridge, cyan water, black backing or detached plate. The 75/75 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 21.7/1.7 ms and the final regional view measured 7.6/1.1 ms. This art-routing extension changes no simulation rule, geography, topology or player state. The catalog diff leaves 53 identities and selects river/broad-delta next. No broad suite or load test ran; the overall goal remains active.

Scenes-396 style-locked Waterfall Gorge acceptance (2026-09-13): manifest illustrated-places-166-r101 replaces the legacy black-backed giant isometric waterfall-island diorama with one mountain-profile Hero containing a compact natural weathered rock break and short broad muted wet veil, one subordinate broken wet-ledge detail, and one identity-free grey-brown highland ground. Five exact 1536x1024 RGB paintings bind the mandatory September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; Hero v1 is rejected because its straight silver drop read as a nail, and composed review rejected v2 because its squared slab read as a small dam or ruin. Because connection layers remain intentionally disabled, the validated placementCategories extension routes this river identity only to explicit reviewed mountain-category site ATLAS-AT-004 q74/r46 rather than enabling global river overlays. Genuine 1.65/0.845 composition preserves mountain profile, six-companion topology, 59-Hero world total and geography. Broad ordinary highland remains authoritative without masonry, a dam, a route, a giant cliff monument, cyan water, black backing or a detached plate. The 73/73 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 3.8/5.0 ms and the final regional view measured 3.8/1.1 ms. This art-routing extension changes no simulation rule, geography, topology or player state. The catalog diff leaves 54 identities and selects river/river-ford next. No broad suite or load test ran; the overall goal remains active.

Scenes-395 style-locked River Rapids acceptance (2026-09-13): manifest illustrated-places-166-r100 replaces the legacy black-backed saturated cyan river-island diorama with one mountain-profile Hero containing two compact disconnected muted wet steps among low flat stones, one subordinate damp-stone detail, and one identity-free grey-brown highland ground. Three exact 1536x1024 RGB paintings bind the mandatory September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references. Because connection layers remain intentionally disabled, the validated placementCategories extension routes this river identity only to explicit reviewed mountain-category site ATLAS-AT-006 q9/r24 rather than enabling global river overlays. Genuine 1.65/0.845 composition preserves mountain profile, four-companion topology, 48-Hero world total and geography. Broad ordinary highland remains authoritative without a continuous river, waterfall, gorge, road, canal, foam ribbon, scenic platform, black backing or detached plate. The 71/71 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 8.5/1.7 ms and the final regional view measured 8.5/1.6 ms. This art-routing extension changes no simulation rule, geography, topology or player state. The catalog diff leaves 55 identities and selects river/waterfall-gorge next. No broad suite or load test ran; the overall goal remains active.

Scenes-394 style-locked Meandering River acceptance (2026-09-13): manifest illustrated-places-166-r99 replaces the legacy black-backed saturated cyan S-channel diorama with one fields-profile Hero containing a compact broken muted bend, one subordinate two-chip detail, and one identity-free straw-olive fields ground. Four exact 1536x1024 RGB paintings bind the mandatory September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; the first oversized U-shaped Detail is rejected and preserved. Because connection layers remain intentionally disabled, the validated placementCategories extension routes this river identity only to explicit reviewed farmland-category site ATLAS-AT-001 q-11/r24 rather than enabling global river overlays. Genuine 1.65/0.845 composition preserves fields profile, four-companion topology, 42-Hero world total and geography. Broad ordinary terrain remains authoritative without a continuous S-channel, road, canal, oxbow ring, scenic platform, black backing or detached plate. The 69/69 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 8.3/6.8 ms and the final regional view measured 4.6/1.7 ms. This art-routing extension changes no simulation rule, geography, topology or player state. The catalog diff leaves 56 identities and selects river/river-rapids next. No broad suite or load test ran; the overall goal remains active.

Scenes-393 style-locked Braided River acceptance (2026-09-13): manifest illustrated-places-166-r98 replaces the legacy black-backed saturated island-maze diorama with one fields-profile Hero containing three disconnected muted wet fragments, one subordinate two-chip detail, and one identity-free straw-olive fields ground. Seven exact 1536x1024 RGB paintings bind the mandatory September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; four earlier route-like drafts are rejected and preserved. Because connection layers remain intentionally disabled, the validated placementCategories extension routes this river identity only to explicit reviewed grassland-category site ATLAS-AT-006 q-8/r56 rather than enabling global river overlays. Genuine 1.65/0.845 composition preserves fields profile, four-companion topology, 48-Hero world total and geography. Broad ordinary terrain remains authoritative without a continuous river, road, canal, island maze, scenic platform, black backing or detached plate. The 67/67 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 8.4/2.3 ms and the final regional view measured 8.4/1.5 ms. This art-routing extension changes no simulation rule, geography, topology or player state. The catalog diff leaves 57 identities and selects river/meandering-river next. No broad suite or load test ran; the overall goal remains active.

Scenes-392 style-locked Mountain Spring acceptance (2026-09-13): manifest illustrated-places-166-r97 replaces the legacy black-backed isometric waterfall diorama with one mountain-profile Hero containing a small integrated damp rock hollow, one subordinate moist-stone detail and one identity-free muted grey-brown highland ground. Four exact 1536x1024 RGB paintings bind the mandatory September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; Hero v1 is rejected because its spring identity disappeared completely. Because connection layers remain intentionally disabled, the validated placementCategories extension lets this river identity route only at its explicit reviewed mountain site rather than enabling global river overlays. Genuine 1.65/0.845 composition at ATLAS-REEF-097 preserves q96/r34, mountain profile, five-companion topology, 48-Hero world total and geography. Broad ordinary highland terrain remains authoritative without a waterfall, bright pool, cyan stream, river/road stripe, cave portal, scenic platform, black backing or detached plate. The 62/62 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 4.4/2.6 ms and the final regional view measured 4.4/1.2 ms. This art-routing extension changes no simulation rule, geography, topology or player state. The catalog diff leaves 58 identities and selects river/braided-river next. No broad suite or load test ran; the overall goal remains active.

Scenes-391 style-locked Turtle Sanctuary acceptance (2026-09-13): manifest illustrated-places-166-r96 replaces the legacy black-backed tropical aquarium and posed-turtle diorama with one ocean-native Hero containing two minute incomplete submerged shell traces, one subordinate detail with a single incidental fragment, and one identity-free muted slate-teal ocean ground. Four exact 1536x1024 RGB paintings bind the mandatory September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; Hero v1 is rejected because its broad pale-green seabed halo and complete turtle silhouette formed a wildlife icon. Genuine 1.65/0.845 composition at deterministic catalog-review site ATLAS-REEF-097 confirmed exact focused/ready routes while preserving q-12/r56, ocean profile, six-companion topology, 48-Hero world total and geography. Broad ordinary water remains authoritative without a complete turtle, wildlife group, tropical aquarium, coral garden, island, platform, ring, black backing, pale halo or detached plate. The 60/60 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 1.4/5.2 ms and the final regional view measured 1.4/0.8 ms. This art-only routing changes no simulation rule, geography, topology or player state. The catalog diff leaves 59 identities and selects river/mountain-spring next. No broad suite or load test ran; the overall goal remains active.

Scenes-390 style-locked Crystal Reef acceptance (2026-09-13): manifest illustrated-places-166-r95 replaces the legacy glowing blue crystal monument and saturated black-backed coral-island diorama with one ocean-native Hero containing three minute embedded mineral chips on a tiny submerged pebble trace, one subordinate detail with a single pinhead glint, and one identity-free muted slate-teal ocean ground. Seven exact 1536x1024 RGB paintings bind the mandatory September 5-7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; Hero v1 is rejected for an oversized olive shelf and halo, while the initially accepted deep-navy v2 family is preserved because genuine regional composition exposed a broad dark oval tonal plate. Final Hero v3, detail v2 and ground v2 dissolve into the natural site palette. Genuine 1.65/0.845 composition at natural ATLAS-REEF-250 confirmed exact focused/ready routes while preserving q97/r53, ocean profile, six-companion topology, 53-Hero world total and geography. Broad ordinary ocean remains authoritative without giant crystals, a crown, skyline, glow, coral garden, island, platform, ring, black backing or detached plate. The 58/58 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors; maximum recorded slice/frame were 6.2/3.0 ms and the final regional view measured 1.5/0.7 ms. This art-only routing changes no simulation rule, geography, topology or player state. The catalog diff leaves 60 identities and selects reef/turtle-sanctuary next. No broad suite or load test ran; the overall goal remains active.

Scenes-389 style-locked Crown of Thorns Bed acceptance (2026-09-13): manifest illustrated-places-166-r94 replaces the legacy giant spiked crown arch and saturated black-backed coral-island diorama with one ocean-native Hero containing a minute flat smoke-brown crown-of-thorns seabed clue on a low submerged dead-coral patch, one subordinate detail with three disconnected thorn fragments, and one uniform identity-free ocean ground. Four exact 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; detail v1 is rejected because it reconstructed a complete radial star emblem. Genuine 1.65/0.845 composition at natural ATLAS-REEF-278 confirmed exact focused/ready routes while preserving q78/r57, ocean profile, six-companion topology, 49-Hero world total and geography. Broad ordinary ocean and the procedural coast remain authoritative without a giant crown, arch, repeated emblem, bright coral garden, island, platform, ring, tropical cyan, black backing or detached plate. The 55/55 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors and 1.7/8.9 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, topology or player state. The catalog diff leaves 61 identities and selects reef/crystal-reef next. No broad suite or load test ran; the overall goal remains active.

Scenes-388 style-locked Reef Channel acceptance (2026-09-13): manifest illustrated-places-166-r93 replaces the legacy saturated black-backed coral canyon with one ocean-native Hero containing two small unequal staggered submerged grey-olive rubble traces around a broad irregular local deep-water opening, one subordinate single-lip detail and one uniform identity-free ocean ground. Four exact 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; ground v1 is rejected because a coherent olive oval would have repeated as detached connector stains. Genuine 1.65/0.845 composition at deterministic catalog-review site ATLAS-REEF-096 confirmed exact focused/ready routes while preserving q10/r28, ocean profile, six-companion topology, 48-Hero world total and geography. Broad ordinary ocean remains authoritative without parallel banks, a canyon, gateway, corridor, wall pair, route stripe, island, platform, ring, bright coral, tropical cyan, black backing or detached plate. The 53/53 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors and 19.7/5.0 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, topology or player state. The catalog diff leaves 62 identities and selects reef/crown-of-thorns-bed next. No broad suite or load test ran; the overall goal remains active.

Scenes-387 style-locked Sponge Forest acceptance (2026-09-13): manifest illustrated-places-166-r92 replaces the legacy saturated black-backed coral diorama with one ocean-native Hero containing a minute low submerged grey-olive seabed trace and solid muted sponge nubs, one subordinate single-trace detail and one identity-free ocean ground. Five exact 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; Hero v1 is rejected after genuine 1.65 composition enlarged its shelf and hollow tubes into pipe-like markers, and v2 is rejected because it remained too broad with two hollow upright forms. Corrected v3 stays readable but subordinate at close and regional scale. Exact focused/ready routes at natural ATLAS-REEF-480 preserve q102/r44, ocean profile, five-companion topology, 62-Hero world total and geography while excluding adjacent lake cells. Broad ordinary water remains authoritative without a sponge garden, tube skyline, colorful coral display, island, platform, ring, wall, route stripe, black backing or detached plate. The 51/51 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors and 1.3/4.6 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, topology or player state. The catalog diff leaves 63 identities and selects reef/reef-channel next. No broad suite or load test ran; the overall goal remains active.

Scenes-386 style-locked Black Coral Shelf acceptance (2026-09-13): manifest illustrated-places-166-r91 replaces the legacy black-backed saturated coral showcase with one compact ocean-native Hero containing two low black-brown coral traces on unequal submerged rubble lobes, one subordinate single-trace detail and one identity-free ocean ground. Four exact 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; Hero v1 is rejected after genuine 1.65 composition enlarged its broad shelf and four thickets into an underwater landscape, while corrected v2 remains readable but subordinate at close and regional scale. Exact focused/ready routes at natural ATLAS-REEF-156 preserve q20/r58, ocean profile, six-companion topology, 50-Hero world total and geography. Broad ordinary water remains authoritative without a colorful coral garden, repeated forest, island, exposed cliff, ring, wall, route stripe, black backing or detached plate. The 49/49 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors and 2.5/5.8 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, topology or player state. The catalog diff leaves 64 identities and selects reef/sponge-forest next. No broad suite or load test ran; the overall goal remains active.

Scenes-385 style-locked Shipwreck Reef acceptance (2026-09-13): manifest illustrated-places-166-r90 replaces the legacy bright intact ship-and-coral diorama with one ocean-native Hero containing a compact low broken keel-and-rib archaeological trace, one subordinate timber-rubble detail and one identity-free ocean ground. Four exact 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; Hero v1 is rejected after genuine 1.65 composition enlarged its long ribs into a dominant half-viewport monument, while corrected v2 remains readable but subordinate at close and regional scale. Exact focused/ready routes at natural ATLAS-REEF-460 preserve its original q73/r27 coordinate, ocean profile, six-companion topology, 23-Hero world total and geography. Broad ordinary water remains authoritative without an intact ship, upright mast, sail, coral garden, island, reef ring, route stripe, black backing or detached plate. The 47/47 one-worker bounded gate and one-process raster verifier pass with zero browser/image errors and 1.3/2.1 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, topology or player state. The catalog diff leaves 65 identities and selects reef/black-coral-shelf next. No broad suite or load test ran; the overall goal remains active.

Scenes-384 style-locked Atoll Ring acceptance (2026-09-13): manifest illustrated-places-166-r89 replaces the legacy bright closed coral diorama with one ocean-native Hero containing a focus-readable broad broken low limestone shelf and two much smaller non-aligning submerged traces, one small broken-reef detail and one identity-free open-ocean ground. Five exact 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; Hero v1 is rejected after its opposing crescents reconstructed into a tidy viewport-sized ring at regional scale, and v2 is rejected because its main shelf disappeared from the close focused crop. Genuine 1.65/0.845 composition at deterministic ATLAS-REEF-042 confirmed exact focused/ready v3 routes. Broad ordinary ocean remains authoritative without a closed lagoon, near-perfect ring, opposing parentheses, necklace, island, sand, coral display, route stripe, black backing or detached regional plate. The 45/45 one-worker bounded gate and one-process raster verifier pass with zero browser warnings or image errors and 2.7/2.3 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, Hero total, topology or player state. The authoritative catalog diff leaves 66 unrepainted identities and selects catalog-order reef/shipwreck-reef next. No broad suite or load test ran; the overall goal remains active.

Scenes-383 style-locked Barrier Reef acceptance (2026-09-13): manifest illustrated-places-166-r88 replaces the legacy saturated black-backed coral display with one ocean-native Hero containing a broad branching cluster of unequal low fully submerged limestone-and-dead-coral rubble lobes divided by wide deep-water cuts, one tiny broken rubble detail and one identity-free ocean ground. Four exact 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; the first narrow diagonal Hero is rejected because it read like a route. Genuine 1.65/0.845 composition at the deterministic ATLAS-REEF-031 catalog-review site confirmed exact focused/ready routes. The real procedural coastline and broad ordinary navigable water remain authoritative without living coral spectacle, sea plants, starfish, fish, saturated cyan, exposed land, island, atoll ring, continuous barrier, route stripe or detached regional plate. The 44/44 one-worker bounded gate and one-process raster verifier pass with zero browser warnings or image errors and 4.1/7.8 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, Hero total, topology or player state. The authoritative catalog diff leaves 67 unrepainted identities and selects catalog-order reef/atoll-ring next. No broad suite or load test ran; the overall goal remains active.

Scenes-382 style-locked Saltwater Flats acceptance (2026-09-13): manifest illustrated-places-165-r87 replaces the legacy black-backed enclosed shallow-water diorama with one ocean-native Hero containing a broad irregular low-contrast field of fully submerged pale beige-grey saline silt divided by large slate-teal water corridors, one tiny broken saline-silt detail and one identity-free ocean ground. All three exact 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references. Genuine 1.65/0.845 composition at the deterministic ATLAS-CAT-001 occurrence confirmed exact focused/ready routes. Broad ordinary navigable water remains authoritative without exposed sand, land, salt crust, shoreline, beach, reeds, rocks, islands, lagoon enclosure, bright-white spectacle, continuous band, black backing or detached regional plate. The 42/42 one-worker bounded gate and one-process raster verifier pass with zero browser warnings or image errors and 2.8/4.6 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The authoritative catalog diff leaves 68 unrepainted identities and selects catalog-order reef/barrier-reef next. No broad suite or load test ran; the overall goal remains active.

Scenes-381 style-locked Brackish Bay acceptance (2026-09-13): manifest illustrated-places-164-r86 replaces the legacy black-backed enclosed pond diorama with one ocean-native Hero containing a broad low-contrast asymmetrical olive-grey, peat-brown-green and silt-teal mixing field, one tiny broken brackish detail and one identity-free slate-teal ocean ground. All three exact 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references. Genuine 1.65/0.845 composition at the deterministic ATLAS-CAT-024 occurrence confirmed exact focused/ready routes. Broad ordinary navigable water remains authoritative without painted shoreline, land, mudflat, reeds, river mouth, enclosed pond, island, continuous band, whirlpool, pollution slick, black backing or detached regional plate. The 40/40 one-worker bounded gate and one-process raster verifier pass with zero browser warnings or image errors and 1.2/1.0 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The authoritative catalog diff leaves 69 unrepainted identities and selects catalog-order shallow-sea/saltwater-flats next. No broad suite or load test ran; the overall goal remains active.

Scenes-380 style-locked Pearl Banks acceptance (2026-09-13): manifest illustrated-places-163-r85 replaces the legacy black-backed tropical-island and giant-pearl diorama with one ocean-native Hero containing one irregular muted chalk-grey and grey-olive submerged shell-gravel bank and two much smaller faint fragments, one tiny broken shell-gravel detail and one identity-free slate-teal ocean ground. All three exact 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references. Genuine 1.65/0.845 composition at the deterministic ATLAS-CAT-003 occurrence confirmed exact focused/ready routes. Broad ordinary navigable water remains authoritative without treasure, jewelry, giant shells, open oysters, round pearls, repeated white dots, bead rows, reef ring, atoll, island, black backing or detached regional plate. The 38/38 one-worker bounded gate and one-process raster verifier pass with zero browser warnings or image errors and 2.7/2.6 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The authoritative catalog diff leaves 70 unrepainted identities and selects catalog-order shallow-sea/brackish-bay next. No broad suite or load test ran; the overall goal remains active.

Scenes-379 style-locked Sandbar Chain acceptance (2026-09-13): manifest illustrated-places-162-r84 replaces the legacy black-backed exposed-island strip with one ocean-native Hero containing one medium and three smaller unequal, staggered, water-separated grey-tan tidal tongues, one tiny split sandbar detail and one identity-free slate-teal ocean ground. Six RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; three exact 1536×1024 landscape sources are active and three otherwise acceptable square drafts are rejected and preserved by the dimension gate. Genuine 1.65/0.845 composition at the deterministic ATLAS-CAT-023 occurrence confirmed exact focused/ready routes. Broad ordinary navigable water remains authoritative without a road, bridge, causeway, continuous stripe, repeated beads, atoll, bright beach spectacle, black backing or detached regional plate. The 36/36 one-worker bounded gate and one-process raster verifier pass with zero browser warnings or image errors and 22.3/3.7 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The authoritative catalog diff leaves 71 unrepainted identities and selects catalog-order shallow-sea/pearl-banks next. No broad suite or load test ran; the overall goal remains active.

Scenes-378 style-locked Turquoise Shoals acceptance (2026-09-13): manifest illustrated-places-161-r83 replaces the legacy black-backed tropical-island diorama with one ocean-native Hero containing one medium and two much smaller submerged grey-turquoise shelf traces, one tiny broken shoal detail and one identity-free slate-teal ocean ground. Five native 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; the first Hero is rejected for three parallel bands and the second for four evenly distributed stamp-like clusters. Genuine 1.65/0.845 composition at the deterministic ATLAS-CAT-040 occurrence confirmed exact focused/ready routes. Broad ordinary navigable water remains authoritative without an island, exposed sand, palm, reef ring, atoll, saturated tropical cyan, coherent stripe, four-corner balance, oval or detached regional plate. The 36/36 one-worker bounded gate and one-process raster verifier pass with zero browser warnings or image errors and 1.3/3.6 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The authoritative 240-identity catalog diff leaves 72 unrepainted identities and selects catalog-order shallow-sea/sandbar-chain next. No broad suite or load test ran; the overall goal remains active.

Scenes-377 style-locked Storm Sea acceptance (2026-09-13): manifest illustrated-places-160-r82 replaces the legacy black-backed rock ring, whirlpool, giant cloud and lightning with one ocean-native Hero containing a broken off-center field of confused chop, one tiny crest-crossing detail and one identity-free slate-teal ocean ground. Five native 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; the first Hero is rejected for an edge-to-edge rough-water band and the first detail for a dark oval tonal patch. Genuine 1.65/0.845 composition at the deterministic ATLAS-CAT-014 occurrence confirmed exact focused/ready routes. Broad ordinary water remains authoritative without a vortex, storm-cloud icon, lightning, rain curtain, coherent stripe, circular plate or detached regional patch. The 38/38 one-worker bounded gate and one-process raster verifier pass with zero browser warnings or image errors and 5.9/2.1 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The authoritative 240-identity catalog diff leaves 73 unrepainted identities and selects catalog-order shallow-sea/turquoise-shoals next. No broad suite or load test ran; the overall goal remains active.

Scenes-376 style-locked Whale Road acceptance (2026-09-13): manifest illustrated-places-159-r81 replaces the legacy black-backed rocky-island corridor and large-whale procession with one ocean-native Hero containing only three widely separated unequal surface signs, one tiny partial-back detail and one identity-free slate-teal ocean ground. All three native 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references. Genuine 1.65/0.845 composition at the deterministic ATLAS-CAT-064 occurrence confirmed exact focused/ready routes. Broad ordinary navigable water remains authoritative without an aligned procession, literal road, route stripe, long wake, foam corridor, coast, island ring, black backing, halo or detached regional plate. The 36/36 one-worker bounded gate and one-process raster verifier pass with zero browser warnings or image errors and 4.0/1.3 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The authoritative 240-identity catalog diff leaves 74 unrepainted identities and selects catalog-order ocean/storm-sea next. No broad suite or load test ran; the overall goal remains active.

Scenes-375 style-locked Sulfur Springs acceptance (2026-09-13): manifest illustrated-places-158-r80 replaces the legacy black-backed luminous volcanic diorama with one mountain-native Hero containing exactly three widely separated unequal muted grey-green seeps, one tiny stone-screened damp trace and one identity-free rocky upland ground. Four native 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; the first Hero is rejected because five similar circular pools, bright rims and pale links formed a designed set. Genuine 1.65/0.845 composition at the deterministic ATLAS-EXP-002 occurrence confirmed exact focused/ready land-masked routes. Ordinary ridges and olive-brown upland remain authoritative without a volcano, crater, lava, geyser, tall steam, neon pools, repeated basins, connecting route or detached regional plate. The 83/83 one-worker focused gate and one-process raster verifier pass with zero browser warnings or image errors and 5.1/9.2 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The established 18-seed historical audit now has zero legacy occurrences, but the authoritative 240-identity catalog diff leaves 75 unrepainted identities and selects catalog-order ocean/whale-road next. No broad suite or load test ran; the overall goal remains active.

Scenes-374 style-locked Ash Plain acceptance (2026-09-13): manifest illustrated-places-157-r79 replaces the legacy black-backed erupting volcano with one mountain-native Hero of broad low wind-scoured ash across multiple valleys, one separated incidental ash trace and one identity-free rocky upland ground. Four native 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; the first detail is rejected because its pale deposit formed a diagonal road. Genuine 1.65/0.845 composition at the deterministic ATLAS-EXP-006 occurrence confirmed exact focused/ready land-masked routes. Ordinary ridges and olive-brown upland remain authoritative without a volcano, crater, lava, fire, smoke, road stripe, circular wasteland plate or detached regional patch. The 81/81 one-worker focused gate and one-process raster verifier pass with zero browser warnings or image errors and 15.1/3.5 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The 12-seed audit leaves volcanic/sulfur-springs as the sole observed legacy family and leaves 76 of the original 240 identities. No broad suite or load test ran; the overall goal remains active.

Scenes-373 style-locked Warm Current acceptance (2026-09-13): manifest illustrated-places-156-r78 replaces the legacy black-backed island vortex with one ocean-native Hero of broad broken muted-jade temperature variation, one tiny subordinate current trace and one identity-free medium-ocean ground. Three native 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references. Genuine 1.65/0.845 composition at the deterministic ATLAS-EXP-007 occurrence confirmed exact focused/ready Hero/detail/ground routes. The close scene remains coherent navigable slate-teal water without a road, ribbon, luminous stripe, spiral, whirlpool, coast or island; the regional scene dissolves into surrounding ocean without a tonal oval or detached plate. The 79/79 one-worker focused gate and one-process raster verifier pass with zero browser warnings or image errors and 1.6/12.3 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The post-acceptance 12-seed audit leaves two legacy occurrences in two volcanic families, selects volcanic/ash-plain next and leaves 77 of the original 240 identities. No broad suite or load test ran; the overall goal remains active.

Scenes-372 style-locked Iceberg Sea acceptance (2026-09-13): manifest illustrated-places-155-r77 replaces the legacy black-backed ice cathedral and vortex with one ocean-native Hero of low separated weathered floes, one tiny ice-chip trace and one identity-free cold-ocean ground. Eight native 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; three are active and five remain as rejected evidence. Two drafts used inactive Bluewater connector targets; genuine regional composition then rejected the first active trio because its dark water formed an oval plate. The corrected medium slate-teal sources passed a second 1.65/0.845 review at the deterministic ATLAS-EXP-007 occurrence with exact focused/ready routes. Broad navigable ocean remains authoritative around low matte floes, without towering spires, an arch, pack-ice wall, vortex, bright-cyan spectacle, black backing, halo or hard plate. The 77/77 one-worker focused gate and one-process raster verifier pass after the final tonal sources with zero browser warnings or image errors and 2.0/1.0 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The post-acceptance 12-seed audit leaves 3 legacy occurrences in 3 families, selects shallow-sea/warm-current next and leaves 78 of the original 240 identities. No broad suite or load test ran; the overall goal remains active.

Scenes-371 style-locked Tallgrass Sea acceptance (2026-09-13): manifest illustrated-places-154-r75 replaces the legacy black-backed grass diorama with one hills-native Hero of broad broken wind-bent tallgrass swaths, one tiny off-center ecological trace and one identity-free rolling-hills ground. Three native 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references. Genuine 1.65/0.845 composition at the deterministic ATLAS-EXP-006 occurrence confirmed exact focused/ready Hero/detail/ground routes. Muted straw, olive and sage tallgrass follows the real relief while ordinary short grass, stone, scrub and heather remain visible; the legacy isolated grass island, literal water, shoreline, crop rows, path, bright-gold spectacle, black backing, halo and hard plate are absent. The 75/75 one-worker focused gate and one-process raster verifier pass with zero browser warnings or image errors and 8.1/7.6 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The post-acceptance 12-seed audit leaves 4 legacy occurrences in 4 families, selects ocean/iceberg-sea next and leaves 79 of the original 240 identities. No broad suite or load test ran; the overall goal remains active.

Scenes-370 style-locked Savanna Grassland acceptance (2026-09-13): manifest illustrated-places-153-r74 replaces the legacy black-backed acacia diorama with one fields-native Hero of broad muted dry-grass mosaic, one tiny low thorn-sapling trace and one identity-free dry fields ground. Three native 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references. Genuine 1.65/0.845 composition at the deterministic ATLAS-EXP-001 occurrence confirmed exact focused/ready Hero/detail/ground routes. Dusty straw, faded olive, warm grey-brown soil, subdued stone and small widely separated thorn trees remain subordinate to the real coastal peninsula; the legacy isolated savanna island, watering hole, path, herd, giant acacia, bright-yellow spectacle, black backing, halo and hard plate are absent. The 73/73 one-worker focused gate and one-process raster verifier pass with zero browser warnings or image errors and 7.9/0.7 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The post-acceptance 12-seed audit leaves 5 legacy occurrences in 5 families, selects grassland/tallgrass-sea next and leaves 80 of the original 240 identities. No broad suite or load test ran; the overall goal remains active.

Scenes-369 style-locked Maple Forest acceptance (2026-09-13): manifest illustrated-places-152-r73 replaces the legacy black-backed saturated autumn island with one forest-native Hero of irregular mixed-season maple woodland, one tiny screened sapling trace and one identity-free forest ground. Three native 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references. Genuine 1.65/0.845 composition at the deterministic ATLAS-EXP-005 occurrence confirmed exact focused/ready Hero/detail/ground routes. Dull olive and moss green dominate, while muted ochre and smoked rust remain scattered accents within ordinary trunks, rocks, leaf litter, ferns and broken gaps; the legacy isolated autumn spectacle, bright orange/scarlet crowns, black backing, circular grove, path, halo and hard plate are absent. The 71/71 one-worker focused gate and one-process raster verifier pass with zero browser warnings or image errors and 2.2/1.0 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The post-acceptance 12-seed audit leaves 6 legacy occurrences in 6 families, selects grassland/savanna-grassland next and leaves 81 of the original 240 identities. No broad suite or load test ran; the overall goal remains active.

Scenes-368 style-locked Bamboo Forest acceptance (2026-09-13): manifest illustrated-places-151-r72 replaces the legacy black-backed decorative thicket with one forest-native Hero of irregular interwoven bamboo, one tiny screened cane trace and one identity-free forest ground. Three accepted native 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; a fourth first-pass Hero remains preserved as rejected evidence because its repeated diagonal clear lanes read as a plantation. Genuine 1.65/0.845 composition at the deterministic ATLAS-EXP-002 occurrence confirmed exact focused/ready Hero/detail/ground routes. Muted weathered canes, matte leaves, moss, fern, leaf litter and subdued rock remain integrated with the real forest coast, while the legacy bright isolated thicket, black backing, path, pond, plantation grid, halo and hard plate are absent. The 69/69 one-worker focused gate and one-process raster verifier pass with zero browser warnings or image errors and 7.3/1.0 ms maximum observed slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The post-acceptance 12-seed audit leaves 7 legacy occurrences in 7 families, selects forest/maple-forest next and leaves 82 of the original 240 identities. No broad suite or load test ran; the overall goal remains active.

Scenes-367 style-locked Wheat Fields acceptance (2026-09-13): manifest illustrated-places-150-r71 replaces the legacy black-backed crop island with one tundra-native Hero of broad broken low wheat patches, one tiny subordinate cultivation trace and one identity-free rocky tundra ground. Three native 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references. Genuine 1.65/0.845 composition at the deterministic ATLAS-EXP-010 occurrence confirmed exact focused/ready Hero/detail/ground routes. Short blunt pale-straw heads follow the cold relief and remain separated by rock, lichen, scrub and wet ground; the real procedural coastline forms the peninsula, while the legacy windmill, buildings, fenced rectangles, cart road, saturated crop island, black backing, halo and hard plate are absent. The 67/67 one-worker focused gate and one-process raster verifier pass with zero browser warnings or image errors and 6.8/2.2 ms maximum slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The post-acceptance 12-seed audit leaves 8 legacy occurrences in 8 families, selects forest/bamboo-forest next and leaves 83 of the original 240 identities. No broad suite or load test ran; the overall goal remains active.

Scenes-366 style-locked Cedar Woods acceptance (2026-09-13): manifest illustrated-places-149-r70 replaces the legacy black-backed conifer island with one continuous irregular old cedar woodland, one tiny subordinate moss-sunk fallen-trunk detail and one quiet needle-duff forest ground. Three native 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references. Genuine 1.65/0.845 composition at the deterministic ATLAS-EXP-004 occurrence confirmed exact focused/ready Hero/detail/ground routes. Layered spreading boughs, warm fibrous trunks, mossy rocks and interrupted natural gaps remain embedded in broad forest; there is no isolated conifer island, circular grove, plantation row, coherent road, black backing, halo or hard plate. The 65/65 one-worker focused gate and one-process raster verifier pass with zero browser warnings or image errors and 7.6/2.9 ms maximum slice/frame. The stale per-ID terrain-domain snapshot was replaced by a direct invariant over every active explicit-domain asset, avoiding recurring count maintenance while preserving coverage. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The post-acceptance 12-seed audit leaves 9 legacy occurrences in 9 families, selects farmland/wheat-fields next and leaves 84 of the original 240 identities. No broad suite or load test ran; the overall goal remains active.

Scenes-365 style-locked Industrial City acceptance (2026-09-13): manifest illustrated-places-148-r69 replaces the dense black-backed steampunk metropolis with one low dispersed arctic works, one tiny subordinate work-shelter detail and one neutral wind-packed snow-and-rock ground. Three native 1536×1024 RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references. Genuine 1.65/0.845 composition at the deterministic ATLAS-EXP-010 occurrence confirmed exact focused/ready Hero/detail/ground routes. Snow-rock terrain dominates around five squat workshops, a small open forge and compact lifting frame; the legacy dome, clock tower, tall smokestacks, smoke, pipe network, road grid, black backing, halo and hard plate are absent. The 69/69 one-worker focused gate and one-process raster verifier pass with zero browser warnings or image errors and 2.0/8.3 ms maximum slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The post-acceptance 12-seed audit leaves 10 legacy occurrences in 10 families, selects conifer/cedar-woods next and leaves 85 of the original 240 identities. No broad suite or load test ran; the overall goal remains active.

Scenes-364 style-locked Open Prairie acceptance (2026-09-13): manifest illustrated-places-147-r68 activates one hills-profile system of broad separated muted seed-grass islands, one tiny subordinate rounded prairie trace and one neutral linear-trace-free hills ground. Six generated paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references; two Hero attempts and one detail remain preserved as rejected evidence because they formed crop-like bands, inherited a 1254-square canvas or retained a directional straw strip. The accepted Hero is native 1536×1024. Genuine 1.65/0.845 composition covered both deterministic occurrences and confirmed exact focused/ready Hero/detail/ground routes. The family stays broad terrain-first open grassland without livestock, fences, standing stones, conifer ring, road, stream, black backing, halo or hard plate. The 67/67 one-worker focused gate and one-process raster verifier pass with zero browser warnings or image errors and 16.9/2.4 ms maximum slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The post-acceptance 12-seed audit leaves 11 legacy occurrences in 11 families, selects city/industrial-city next and leaves 86 of the original 240 identities. No broad suite or load test ran; the overall goal remains active.

Scenes-363 style-locked Harbor City acceptance (2026-09-13): manifest illustrated-places-146-r67 activates separate grasslands and wetlands families, each with a low working harbor, one subordinate cargo-edge detail and neutral profile ground. Six accepted full-bleed RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references. Genuine 1.65/0.845 composition covered both deterministic occurrences and confirmed exact focused/ready Hero/detail/ground routes. The grasslands coast and wetland channels stay dominant around modest warehouses, a square counting house, short landings and tiny workboats; the legacy castle, clock and church towers, blue fantasy roofs, giant dock network, sailing fleet, black backing, halo and hard plate are absent. The 65/65 one-worker focused gate and one-process raster verifier pass with zero browser warnings or image errors and 13.3/4.5 ms maximum slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The expanded 12-seed audit leaves 13 legacy occurrences in 12 families and selects grassland/open-prairie next; 87 of the original 240 identities remain. No broad suite or load test ran, and the overall goal remains active.

Scenes-362 style-locked Forest Town acceptance (2026-09-13): manifest illustrated-places-145-r66 activates separate hills and tundra families, each with a low woodland-interlocked town, one subordinate work-edge detail and neutral profile ground. Six accepted RGB paintings bind the mandatory September 5–7 contract and all four canonical references; one road-dominated hills-detail draft remains preserved as rejected evidence. Genuine 1.65/0.845 composition covered all four deterministic occurrences across cold coast, inland hills and hills-coast contexts. Exact profile Hero/detail/ground routes stayed focused/ready; the family retains low roofs, mixed tree cover and broad continuous terrain without the legacy clock tower, blue-roof spectacle, dense civic block, waterwheel, black backing, halo or hard plate. The 67/67 one-worker gate and one-process raster verifier pass with zero browser warnings/image errors and 24.7/9.0 ms maximum slice/frame. This routing changes no simulation rule, geography, Hero total, topology or player state. The expanded 12-seed audit leaves 15 legacy occurrences in 13 families and selects city/harbor-city next. No broad suite or load test ran; the overall goal remains active.

Scenes-361 style-locked Forest Town source checkpoint (2026-09-13): expanded deterministic discovery selected town/forest-town from four occurrences spanning hills and tundra. Six full-bleed RGB review paintings now provide a low woodland-edge town, one minor work trace and neutral ground per profile; every generation supplied Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual image references and embedded the mandatory September 5–7 contract. The first hills detail is retained as rejected evidence because its long diagonal lane overwhelmed the small lean-to; corrected v2 is road-free and subordinate. Direct review and the 9/9 one-worker source gate pass. Runtime remains on manifest illustrated-places-144-r65; Forest Town is still legacy and composed review, raster verification and routing remain pending. No broad suite, server, browser or load test ran for this source-only checkpoint, and the overall goal remains active.

Scenes-360 style-locked Mudflat acceptance (2026-09-13): manifest illustrated-places-144-r65 activates one wetlands-profile system of separated low-contrast umber-grey silt pockets, one tiny subordinate silt-and-water-notch detail and one neutral olive wetland ground at the deterministic CHECK-19 six-connector site. The first Hero is preserved as rejected evidence because its silt merged into a long diagonal road-like band; the corrected Hero, detail and ground bind the mandatory September 5–7 contract and all four canonical images. Genuine close/regional review confirms exact focused/ready routes and accepts the final family as continuous terrain without a road, coast, beach, cracked-earth icon, pond, black backing, halo or hard plate. The 69/69 one-worker gate and one-process raster verifier pass, with zero browser warnings or image errors and 7.6/6.8 ms maximum slice/frame. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The established 18-seed audit now contains zero legacy occurrences; 89 of the original 240 identities remain for expanded deterministic discovery. No broad suite or load test ran and the overall goal remains active.

Scenes-359 style-locked Fen Meadow acceptance (2026-09-13): manifest illustrated-places-143-r64 activates one low peat-and-sedge wetlands fen, one tiny subordinate hummock detail and one identity-free olive wetland ground at the deterministic ATLAS-AT-004 five-connector site. All three RGB paintings bind the mandatory September 5–7 contract and the four canonical images. Direct and genuine close review accept broken tea-brown seepage, rust-olive sedges and sparse dull cotton-grass specks as terrain rather than a pond or garden; the live Hidden Reach overlay suppresses fine detail at medium/regional zoom, where the family remains subordinate and creates no plate, ring or bright stamp. Exact Hero/detail/ground routes stayed focused/ready with a clean browser log and 7.6/2.3 ms maximum slice/frame. The 87/87 one-worker focused gate and one-process raster verifier pass. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The established 18-seed audit leaves one sampled legacy occurrence, wetland/mudflat, next; no broad suite or load test ran and the overall goal remains active.

Scenes-358 style-locked Caldera Basin acceptance (2026-09-13): manifest illustrated-places-142-r63 activates one broad shallow collapsed mountain caldera, one subordinate broken-rim erosion detail and one identity-free olive-brown upland ground at the deterministic ATLAS-AT-004 six-connector site. All three exact RGB paintings bind the mandatory September 5–7 contract and Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as actual immutable references. Direct review and genuine 1.65/0.845 composition accept an old cold basin embedded in continuous low ridges, with no legacy lava lake, steam vents, colored pools, perfect ring, tall cone, black backing, halo or hard plate. Exact Hero/detail/ground routes reached focused/ready, the browser log was clean, and maximum cache slice/frame were 7.6/2.3 ms. The 85/85 one-worker focused gate and one-process raster verifier pass after reconciling stale counts. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The established sequential 18-seed audit leaves 2 legacy occurrences in 2 families and selects wetland/fen-meadow next; no broad suite or load test ran and the overall goal remains active.

Scenes-357 style-locked Sheltered Sound acceptance (2026-09-13): manifest illustrated-places-141-r62 activates one terrain-defined quieter-water reach, one subordinate submerged rocky shoulder with a short lee, and one identity-free deep blue-green ocean ground at the deterministic ATLAS-AT-007 four-connector site. Direct review rejected the first Hero as a long pale shallow shelf; the corrected Hero uses subtle darker-blue lower-energy water. Genuine 1.65/0.845 composition reached exact focused/ready Hero/detail/ground routes with no browser or image errors, a 2.0 ms maximum cache slice and 7.9 ms maximum frame. At regional scale the real procedural coast forms the open sound while the family remains subordinate, without painted shoreline, island ring, cyan lagoon, tall cliffs, trees, black backing, halo or hard plate. The 69/69 one-worker focused gate and one-process raster verifier pass. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. A fresh sequential 18-seed audit leaves 3 legacy occurrences in 3 families and selects volcanic/caldera-basin next; no broad suite or load test ran and the overall goal remains active.

Scenes-356 style-locked Seagrass Meadow acceptance (2026-09-13): manifest illustrated-places-140-r61 activates one terrain-defined system of disconnected muted submerged seagrass patches, one subordinate current-bent trace and one identity-free deep blue-green ocean ground at the deterministic ATLAS-MF-003 four-connector site. The first Hero was rejected during genuine composition because its otherwise natural swaths merged into an oversized diagonal stripe; the corrected Hero passes close and regional review with broad dark-water separation, exact focused/ready Hero/detail/ground routes, no image or browser errors, a 7.6 ms maximum cache slice and 5.1 ms maximum frame. The 67/67 one-worker focused gate and one-process raster verifier pass. Aquarium-scale blades, floating weed, bright cyan water, black backing, halo and hard plate are absent. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. A fresh sequential 18-seed audit leaves 4 legacy occurrences in 4 families and selects shallow-sea/sheltered-sound next; no broad suite or load test ran and the overall goal remains active.

Scenes-355 style-locked Island Passage acceptance (2026-09-13): manifest illustrated-places-139-r60 activates one terrain-defined open water passage between two far-separated low mostly submerged banks, one subordinate shoal trace and one identity-free ocean ground at the deterministic ATLAS-AT-003 five-connector ocean site. Live 1.65/0.845 composition reached exact focused/ready Hero/detail/ground routes with no image errors, a 2.4 ms maximum cache slice and 4.6 ms maximum frame; the 69/69 one-worker focused gate and one-process raster verifier pass. The dark-water corridor remains the subject beside the real procedural coast while three or four tiny rock caps stay subordinate, without an island ring, enclosed lagoon, bright cyan water, tall cliff, treed archipelago, halo or hard plate. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The fresh sequential 18-seed audit leaves 5 legacy occurrences in 5 families and selects shallow-sea/seagrass-meadow next; no broad suite or load test ran and the overall goal remains active.

Scenes-354 style-locked Fishing Village acceptance (2026-09-13): manifest illustrated-places-138-r59 activates one terrain-embedded cold-coast fishing hamlet, one subordinate net-mending shelter and one identity-free tundra ground at the deterministic ATLAS-AT-002 seven-connector tundra site. Live 1.65/0.845 composition reached exact focused/ready Hero/detail/ground routes with no image errors, an 8.4 ms maximum cache slice and 5.3 ms maximum frame; the 67/67 one-worker focused gate and one-process raster verifier pass. Three or four low weathered cottages, incomplete net racks and two grounded skiffs remain subordinate to continuous tundra while the real procedural coast supplies all water, without an island, dock, harbour, lighthouse, tower, stacked settlement, black backing, halo or hard plate. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The fresh sequential 18-seed audit leaves 6 legacy occurrences in 6 families and selects shallow-sea/island-passage next; no broad suite or load test ran and the overall goal remains active.

Scenes-353 style-locked Coral Garden acceptance (2026-09-13): manifest illustrated-places-137-r58 activates one terrain-defined submerged coral system, one subordinate depth-softened rubble trace and one identity-free ocean ground at the deterministic ATLAS-AT-011 six-connector ocean site. Live 1.65/0.845 composition reached exact focused/ready Hero/detail/ground routes with no image errors, a 2.5 ms maximum cache slice and 7.7 ms maximum frame; the 81/81 one-worker focused gate and one-process raster verifier pass. Irregular dusty ochre, dull rust, olive-brown and chalky coral patches remain visibly beneath continuous muted water and stay distinct from Tidal Lagoon, Sargasso Drift, Bioluminescent Reach and Volcanic Seamount, without exposed land, an atoll or reef ring, aquarium silhouettes, saturated cyan, glow, halo or hard plate. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The fresh sequential 18-seed audit leaves 7 legacy occurrences in 7 families and selects rural/fishing-village next; no broad suite or load test ran and the overall goal remains active.

Scenes-352 style-locked Golden Veld acceptance (2026-09-12): manifest illustrated-places-136-r57 activates one terrain-defined wind-bent honey-gold veld Hero, one subordinate grass-screened natural trace and one identity-free ground at the deterministic ATLAS-AT-007 one-compatible-connector fields site. Live 1.65/0.845 composition reached exact focused/ready Hero/ground routes with zero browser warnings or image errors, a 4.8 ms maximum cache slice and 6.1 ms maximum frame; the detail source remains active but is not selected at this single-compatible-connector site. The 79/79 one-worker focused gate and one-process raster verifier pass. Irregular tall seed-head swaths remain embedded in continuous terrain and the real forest boundary, distinct from Dry Steppe, Pastureland and cultivated Barley Fields, without crop rows, roads, black backing, halo, hard plate or duplicate landmark. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The fresh sequential 18-seed audit leaves 8 legacy occurrences in 8 families and selects reef/coral-garden next; no broad suite or load test ran and the overall goal remains active.

Scenes-351 style-locked Dry Steppe acceptance (2026-09-12): manifest illustrated-places-135-r56 activates one terrain-defined wind-combed steppe Hero, one subordinate wind-scoured soil trace and one identity-free ground at the deterministic ATLAS-AT-006 four-connector fields site. Live 1.65/0.845 composition reached exact focused/ready Hero/detail/ground routes with zero browser warnings or image errors, a 12.3 ms maximum cache slice and 6.0 ms maximum frame; the 77/77 one-worker focused gate and one-process raster verifier pass. The old black-backed grassland icon is replaced by a subtle full-bleed terrain formation distinct from Pastureland and Golden Veld, without livestock, fences, crops, roads, halo, hard plate or duplicate landmark; the real coast and forest join remain authoritative. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The fresh sequential 18-seed audit leaves 9 legacy occurrences in 9 families and selects grassland/golden-veld next; no broad suite or load test ran and the overall goal remains active.

Scenes-350 style-locked Stone Castle acceptance (2026-09-12): manifest illustrated-places-134-r55 activates one broad low occupied stone hall, one subordinate turf-sunk ashlar trace and one identity-free hills ground at the deterministic ATLAS-AT-002 eight-connector site. Live 1.65/0.845 composition reached exact focused/ready Hero/detail/ground routes with zero browser warnings or image errors. Cold cache construction peaked at a bounded 29.1 ms slice and 12.3 ms frame; a warm regional reload peaked at 22.7 ms construction and 1.7 ms frame. The 75/75 one-worker focused gate and one-process raster verifier pass. The old black-backed blue-roofed fantasy castle is replaced by a terrain-first strongpoint distinct from Border Keep's tower, Ruined Castle's collapsed footprint and Mountain Citadel's rock-fused refuge, without tall towers, battlement crown, complete enclosure, halo, hard plate or duplicate landmark. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The fresh sequential 18-seed audit leaves 10 legacy occurrences in 10 families and selects grassland/dry-steppe next; no broad suite or load test ran and the overall goal remains active.

Scenes-349 style-locked Ruined Castle acceptance (2026-09-12): manifest illustrated-places-133-r54 activates one low meadow-reclaimed castle ground plan, one corrected turf-swallowed foundation trace and one identity-free grassland at the deterministic ATLAS-AT-007 seven-connector site. Detail v1's tidy two-course block row was rejected as a standalone wall object. Live 1.65/0.845 composition reached exact focused/ready routes with zero browser warnings or image errors, a 7.6 ms maximum slice and 5.0 ms maximum frame; the 73/73 one-worker focused gate and one-process raster verifier pass. The old black-backed tall fantasy castle is replaced by a broken ground plan distinct from Mountain Citadel's rock-fused refuge, without towers, battlement crown, banners, halo, hard plate or duplicate ruin. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The fresh sequential 18-seed audit leaves 11 legacy occurrences in 11 families and selects fortification/stone-castle next; no broad suite or load test ran and the overall goal remains active.

Scenes-348 style-locked Palisade Fort acceptance (2026-09-12): manifest illustrated-places-132-r53 activates one low open hills breastwork, one subordinate half-buried stump trace and one identity-free ground at the deterministic ATLAS-AT-010 seven-connector site. Live 1.65/0.845 composition reached exact focused/ready Hero/detail/ground routes with zero browser warnings or image errors, a 7.5 ms maximum slice and 4.6 ms maximum frame; the 71/71 one-worker focused gate and one-process raster verifier pass. The old black-backed circular fantasy stockade is replaced by short uneven timber runs and shallow earthwork following a natural saddle without tall towers, complete enclosure, blue banners, halo, hard plate or duplicate fort. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The fresh sequential 18-seed audit leaves 12 legacy occurrences in 12 families and selects fortification/ruined-castle next; no broad suite or load test ran and the overall goal remains active.

Scenes-347 style-locked Mountain Citadel acceptance (2026-09-12): manifest illustrated-places-131-r52 activates one low grasslands refuge fused into a diagonal rock shoulder, one corrected half-buried stone trace and one identity-free ground at the deterministic ATLAS-AT-006 seven-connector site. Detail v1's framed doorway was rejected because it read as a miniature second ruin. Live 1.65/0.845 composition reached exact focused/ready Hero/detail/ground routes with zero browser warnings or image errors, a 17.2 ms maximum slice and 3.1 ms maximum frame; the 69/69 one-worker focused gate and one-process raster verifier pass. The old black-backed fantasy castle is replaced by terrain-first weathered roofless masonry without tall towers, blue roofs, monumental stairs, waterfall, halo, hard plate or duplicate landmark. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The fresh sequential 18-seed audit leaves 13 legacy occurrences in 13 families and selects fortification/palisade-fort next; no broad suite or load test ran and the overall goal remains active.

Scenes-346 style-locked Hillfort acceptance (2026-09-12): manifest illustrated-places-130-r51 activates one low incomplete hills earthwork Hero, one subordinate buried bank-and-post trace and one identity-free hills ground at the deterministic ATLAS-AT-004 seven-connector site. Live 1.65/0.845 composition reached exact focused/ready routes with zero browser warnings or image errors, a 7.5 ms maximum slice and 4.6 ms maximum frame; the 67/67 one-worker focused gate and one-process raster verifier pass. The old bright concentric black-backed fortress icon is replaced by terrain-first archaeological earthwork without a central keep, intact enclosure, palisade crown, halo or hard plate. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The fresh sequential 18-seed audit leaves 14 legacy occurrences in 14 families and selects fortification/mountain-citadel next; no broad suite or load test ran and the overall goal remains active.

Scenes-345 style-locked Birch Grove acceptance (2026-09-12): manifest illustrated-places-129-r50 activates one asymmetric forest Hero, one subordinate pair of tiny background saplings and one identity-free forest ground at the deterministic ATLAS-MF-009 four-connector site. Detail v1's oversized bright foreground trunks were rejected and corrected to a small screened background trace. Live 1.65/0.845 composition reached exact focused/ready routes with zero browser warnings or image errors, a 4.6 ms maximum slice and 2.4 ms maximum frame; the 65/65 one-worker focused gate and one-process raster verifier pass. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The fresh sequential 18-seed audit leaves 15 legacy occurrences in 15 families and selects fortification/hillfort next; no broad suite or load test ran and the overall goal remains active.

Scenes-344 style-locked Vineyard Hills acceptance (2026-09-12): manifest illustrated-places-128-r49 activates one low contour-following tundra vineyard Hero, one subordinate vine-and-flat-windbreak trace and one identity-free ground at the deterministic ATLAS-AT-003 four-connector site. Detail v1's arched stone chamber was rejected and corrected to a flat incomplete lichen-buried windbreak. Live 1.65/0.845 composition reached exact focused/ready routes with zero browser warnings or image errors, a 6.2 ms maximum slice and 8.2 ms maximum frame; the 65/65 one-worker focused gate and one-process raster verifier pass. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The fresh 18-seed audit leaves 16 legacy occurrences in 16 families and selects forest/birch-grove next; no broad suite or load test ran and the overall goal remains active.

Scenes-343 style-locked Wind-Carved Badlands acceptance (2026-09-12): manifest illustrated-places-127-r48 activates one low broken desert Hero, one subordinate wind-cut rib trace and one identity-free ground at the deterministic ATLAS-AT-001 five-connector site. All three paintings bind the four canonical September references and replace the legacy black-backed arch-and-spire landmark with a broken diagonal field of shallow ribs, benches and gullies embedded in continuous ochre gravel. Live 1.65/0.845 composition reached exact focused/ready Hero/detail/ground routes with zero browser warnings or image errors, a 6.1 ms maximum slice and 7.6 ms maximum frame; the 65/65 one-worker focused gate and one-process raster verifier pass. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The fresh 18-seed audit leaves 17 legacy occurrences in 17 families and selects farmland/vineyard-hills next; no broad suite or load test ran and the overall goal remains active.

Scenes-342 style-locked White Desert acceptance (2026-09-12): manifest illustrated-places-126-r47 activates a corrected low chalk-and-gypsum desert Hero, one subordinate partly buried mineral trace and one identity-free ground at the deterministic ATLAS-MF-000 five-connector site. The regional gate rejected v1's broad pale oval; final v2 uses asymmetric diagonal mineral lobes, ochre corridors and a tighter irregular contact contour. Final live 1.65/0.845 composition reached exact focused/ready Hero/detail/ground routes with zero browser warnings or image errors, a 7.5 ms maximum slice and 8.1 ms maximum frame; the 65/65 one-worker focused gate and one-process raster verifier pass after correction. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The fresh 18-seed audit leaves 18 legacy occurrences in 18 families and selects desert/wind-carved-badlands next; no broad suite or load test ran and the overall goal remains active.

Scenes-341 style-locked Glass Desert acceptance (2026-09-12): manifest illustrated-places-125-r46 activates one low fused-surface desert Hero, one subordinate partly buried glass trace and one identity-free ground at the deterministic ATLAS-AT-004 six-connector site. All three paintings bind the four canonical September references and replace the legacy black-backed cyan crystal monument with smoke-brown and dusty-amber sheets embedded in continuous gravel. Live 1.65/0.845 composition reached exact focused/ready Hero/detail/ground routes with zero browser warnings or image errors and a 1.1 ms maximum observed frame; the 65/65 one-worker focused gate and one-process raster verifier pass. This art-only routing changes no simulation rule, geography, Hero count, topology or player state. The fresh 18-seed audit leaves 19 legacy occurrences in 19 families and selects desert/white-desert next; no broad suite or load test ran and the overall goal remains active.

Scenes-340 style-locked Canal City acceptance (2026-09-12): manifest illustrated-places-124-r45 activates a low desert canal settlement, one subordinate canal-and-footbridge trace and one identity-free ground at one deterministic seven-cell site. All three paintings bind the four canonical September references and preserve continuous terrain, replacing the legacy black-backed island city without a cathedral dome, skyline, broad turquoise water, hard plate or halo. Live 1.65/0.845 composition reached exact focused/ready routes with zero browser warnings or image errors, a 20.8 ms maximum slice and 1.2 ms maximum frame; the 29/29 one-worker gate and one-process raster verifier pass. This art-only routing changes no simulation rule, geography, Hero count or player state. The fresh 18-seed audit selects desert/glass-desert next; no broad suite or load test ran and the overall goal remains active.

Scenes-339 style-locked Ancient Metropolis acceptance (2026-09-12): manifest illustrated-places-123-r44 activates a compact desert Hero, tiny reused-masonry detail and identity-free ground at one deterministic seven-cell site. The v1 trio remains preserved but inactive because its executed prompt text omitted the mandatory style-contract ID; three v2 corrections bind that ID and all four canonical image references explicitly. Direct review and live 1.65/0.845 composition accept low weathered inhabited civic fabric inside continuous gravel desert, replacing the legacy black-backed monumental diorama without a palace, arena, tower skyline, complete enclosure, plate or halo. Exact sources reached focused/ready; browser warnings and image errors were zero, maximum slice was 11.7 ms and maximum frame 5.9 ms. The 29/29 focused one-worker gate and one-process raster verifier pass. This art-only routing changes no simulation rule, geography or player state. A fresh 18-seed audit selects city/canal-city next; no broad suite or load test ran and the overall goal remains active.

Scenes-338 style-locked Wind-Carved Snow acceptance (2026-09-12): manifest illustrated-places-122-r43 activates a cold-neutral arctic Hero, restrained sastrugi detail and identity-free ground at one deterministic site. Three Polar Icecap-ground edits, constrained by the four canonical September references, pass direct review and live 1.65/0.845 composition as low wind-worked snow within continuous arctic terrain, without the legacy black backing, cyan ice, sculpture, cornice, tower, arch, cliff, oval plate or halo. Exact sources reached focused/ready; browser warnings and image errors were zero, maximum slice was 7.7 ms and maximum frame 6.9 ms. The 33/33 focused one-worker gate and one-process raster verifier pass. This art-only routing changes no simulation rule, geography or player state. A fresh 18-seed audit selects city/ancient-metropolis next; no broad suite or load test ran and the overall goal remains active.

Scenes-337 style-locked Crevasse Field acceptance (2026-09-12): manifest illustrated-places-121-r42 activates a corrected cold-neutral arctic Hero, tiny fissure detail and identity-free ground at one deterministic site. The regional gate rejected the warmer v1 trio for exposing a broad oval scene footprint; its sources remain preserved but inactive. The Polar-derived v2 trio passes direct canonical review and live 1.65/0.845 composition as shallow broken cracks embedded in continuous arctic terrain, with exact focused/ready routing, zero browser warnings or image errors, a 1.4 ms maximum slice, the 31/31 one-worker focused gate and the one-process raster verifier. This art-only routing changes no simulation rule, geography or player state. A fresh 18-seed audit selects arctic/wind-carved-snow next; the overall goal remains active.

Scenes-336 style-locked Tidal Lagoon acceptance (2026-09-12): manifest illustrated-places-120-r41 activates one ocean-profile Hero, one tiny submerged-shelf detail and one identity-free ground at two deterministic sites. Three narrow Bluewater Expanse edits, constrained by the four canonical September references, pass direct review and four live 1.65/0.845 compositions as diffuse underwater sand shelves and narrow tidal channels within continuous matte sea. No exposed land, island outline, reef ring, bounded lagoon, plate, halo or saturated-cyan drift appears. Exact sources reached focused/ready; browser warnings and image errors were zero, maximum slice was 16.4 ms and maximum frame 10.3 ms. The 29/29 focused one-worker gate and one-process raster verifier pass. A fresh 18-seed audit selects arctic/crevasse-field next. No broad suite or load test ran; the goal remains active. This art-only routing changes no simulation rule or player state.

Scenes-335 style-locked Bluewater Expanse acceptance (2026-09-12): manifest illustrated-places-119-r40 activates one ocean Hero, one tiny wind-ripple detail and one identity-free ground across two deterministic sites. Six paintings were generated as narrow Abyssal Deep edits under the four canonical references; the first detail/ground pair and an interim detail remain rejected because the first regional composition exposed an oversized blue halo. The final v1/v3/v2 trio passes direct review and all four live 1.65/0.845 compositions as continuous open water without the legacy whirlpool, rock ring, black backing, hard cutout or saturated cyan drift. The 27/27 core family/global one-worker gate and one-process raster verifier pass; browser warnings and image errors were zero, maximum slice was 13.5 ms and maximum frame 1.2 ms. A fresh sequential 18-seed audit selects shallow-sea/tidal-lagoon next. No broad suite or load test ran; the goal remains active. This art-only routing changes no simulation rule or player state.

Scenes-334 style-locked Abyssal Deep acceptance (2026-09-12): manifest illustrated-places-118-r39 activates one ocean Hero, one restrained current-shadow detail and one identity-free ground across two deterministic sites. All three paintings are narrow edits of accepted Sargasso Drift art with Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet supplied as immutable references. Four genuine 1.65/0.845 compositions preserve Hero totals, topology and geography while reading as quiet bathymetric variation inside continuous ocean; no whirlpool, hard cutout, ring, void, glow, island or exposed seabed appears. The 25/25 core family/global one-worker gate and one-process raster verifier pass. The bounded regression gate is 107/108; its sole failure is the known stale broad native-terrain-domain exact-ID allowlist, unrelated to this ocean family. Browser warnings and image errors were zero, the maximum observed slice was 15.3 ms and the maximum frame 5.0 ms. A fresh sequential 18-seed audit selects ocean/bluewater-expanse next. No broad suite or load test ran; the goal remains active. This art-only routing changes no simulation rule or player state.

Scenes-333 style-locked Watchtower acceptance (2026-09-12): manifest illustrated-places-117-r38 activates exact grasslands/hills Heroes plus one tiny sentry-shelter detail and one identity-free ground per profile. All six paintings are narrow profile-matched edits of the accepted Border Keep set with Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet supplied as immutable references. Four genuine 1.65/0.845 compositions preserve both deterministic seven-cell sites, Hero totals and geography while reducing the landmark to one narrow roofed tower, tiny lean-to and short broken windbreak in dominant continuous terrain; no keep, enclosure, platform, plate, halo, black backing or scenic cutout appears. The active family gate and provenance gate pass 3/3 with one worker, the focused gate passes 59/59 with one worker, and the raster verifier passes in one process. Exact Hero/detail/ground sources reached focused/ready, browser warnings and image errors were zero, the maximum observed slice was 18.9 ms and the maximum frame 5.2 ms. A fresh sequential 18-seed audit selects ocean/abyssal-deep next at two ocean sites. No broad suite or load test ran; the goal remains active. This art-only routing changes no simulation rule or player state.

Scenes-332 style-locked Border Keep acceptance (2026-09-12): manifest illustrated-places-116-r37 activates exact grasslands/hills Heroes plus one tiny structural watch shelter and one identity-free ground per profile. All six paintings are narrow edits of trusted Monastery Hamlet production art with Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet supplied as immutable references. Four genuine 1.65/0.845 compositions preserve both deterministic 7-/8-cell sites, Hero totals and geography while keeping the squat tower and short irregular wall subordinate to continuous terrain; no castle mass, plate, halo, black backing or scenic cutout appears. The active family gate passes 3/3 with one worker, all 56 focused checks have passed across the one-worker run and targeted stale-count rerun, and the one-process raster verifier passes. Exact Hero/detail/ground sources reached focused/ready, browser warnings and image errors were zero, the maximum observed slice was 27.9 ms and the maximum frame 4.5 ms. A fresh sequential 18-seed audit selects fortification/watchtower next at grasslands and hills sites. No broad suite or load test ran; the goal remains active. This art-only routing changes no simulation rule or player state.

Scenes-331 style-locked Pastureland acceptance (2026-09-12): manifest illustrated-places-115-r36 replaces two legacy Pastureland sites with exact fields/tundra paintings derived by minimal edits from trusted Olive Groves and Glacier Field production art under the four immutable canonical references. Four genuine close/regional compositions preserve the real four-/five-cell topology, Hero totals and geography while keeping grazing animals incidental, terrain continuous and grounds identity-free; twelve scenic v1/v2 drafts remain rejected. The 3/3 family gate, 112/112 focused one-worker gate and one-process raster verifier pass, with zero browser warnings or image errors. This art-only routing changes no simulation rule or player state. A fresh 18-seed audit selects fortification/border-keep next; the overall goal remains active and its no-drift gate remains mandatory.

Scenes-330 style-locked Olive Groves acceptance (2026-09-12): manifest illustrated-places-114-r35 preserves both deterministic hills sites, Hero totals and their four connected cells while replacing the legacy black-backed fenced-house orchard diorama with a modest irregular grove, subordinate tree detail and identity-free hills ground. Direct canonical comparison, genuine close/regional review, the 3/3 family gate, the 83/83 one-worker focused gate and the one-process raster verifier pass; browser warnings and image errors were zero and the maximum observed slice was 5.5 ms. A fresh sequential 18-seed audit selects farmland/pastureland next at ATLAS-AT-001 q-11/r24 (fields, four connectors, 42 Heroes) and ATLAS-AT-003 q82/r7 (tundra, five connectors, 57 Heroes). No simulation rule or player state changes; the overall map goal remains active.

Art Atlas Git release follow-up (2026-09-12): the production Dockerfile packages the catalog interface and its frozen manifest/checksum snapshots from Git, while retaining originals at /data/art-atlas-20260912/tile-library. The static handler separates interface files from the art volume so future Git releases update the catalog UI directly; bundled asset repairs take precedence. catalog-assets.json records every released image's path, size and SHA-256. The previously empty Pine Forest v3 runtime sprite is rebuilt from its existing production PNG and bundled with the app. Implementation passes the five focused catalog checks plus multiplayer integration. The release procedure tests the clean Git checkout, pushes main, and verifies the corresponding Railway deployment and live asset checksums. The existing game's artwork routing and simulation remain intact.

Scenes-324 style-locked Fjord Coast acceptance (2026-09-12): manifest illustrated-places-111-r32 activates one fields Hero, one natural-detail companion and one identity-free ground companion across both deterministic sites. Direct canonical comparison and live 1.65/0.845 composed review accept the low inlet as continuous olive-gold coast terrain without a tall cliff, icon, plate, halo or repeated stamp. A scoped connector-terrain contract restores the legacy 4/6-cell coastline topology across fields, wetlands and ocean while leaving Hero selection fields-only. Exact sources reached focused/ready; the maximum slice was 5.9 ms, the raster verifier passes, and the focused one-worker gate passes 77/77. This visual-routing refinement changes no simulation rule or player state.

Scenes-326 style-locked Sea Caves acceptance (2026-09-12): manifest illustrated-places-112-r33 activates exact tundra/arctic Heroes and four profile-specific natural companions while preserving the ATLAS-AT-009 six-cell and ATLAS-MF-002 four-cell topology. Direct canonical comparison and four live 1.65/0.845 compositions accept the low cave notches as terrain, with a continuous olive-rock tundra coast and a coherent arctic snow-rock peninsula whose forest edge has no rectangular snow plate. The rejected first arctic detail remains inactive. Exact sources reached focused/ready, browser warnings and image errors were zero, the maximum slice was 8.3 ms, the raster verifier passes, and the focused one-worker gate passes 77/77. A fresh sequential 18-seed audit selects desert/gravel-desert next at ATLAS-AT-006 q33/r56 and ATLAS-AT-007 q12/r68. No broad suite or load test ran; the overall map goal remains active. These art-routing changes alter no simulation rule or player state.

Art Atlas completeness update (2026-09-12): /tile-library/ now reconciles its manifest collections against an inventory of every image in the shipped art directories and public reference assets. Additional source versions remain browseable in a separate collection and do not acquire production approval or change live-map routing. Cards expose every variation through expandable, lazily loaded previews. The inventory refreshes from deployed files, so new paintings no longer require a separate catalog entry. The frozen catalog release contains 2,259 images and 120 illustrated places; its catalog manifest snapshot preserves the deployed game's earlier map manifests. Railway rejected the measured 3.2 GB code bundle with HTTP 413, so the release stores original art on the existing persistent volume under /data/art-atlas-20260912/tile-library. Optional TILE_LIBRARY_ROOT selects that library while local development continues to use the project directory. No world-save location or simulation rule changes. Deployment 445ff507-751c-4f86-9bcb-c8a413e16480 succeeded: the live browser confirms 1,114 catalog entries, 2,259 art files, 240 classic tile types and 120 illustrated places. All 2,257 library images passed SHA-256 verification, the three catalog tests and multiplayer integration test pass, and the live health/manifest/image endpoints return HTTP 200. Exact release evidence is in Art Atlas release receipt art-direction/art-atlas-release-20260912.json.

Scenes-322 style-locked Glacier Field acceptance (2026-09-12): manifest illustrated-places-110-r31 activates one arctic Hero, one natural-detail companion and one identity-free ground companion while preserving both deterministic sites. Direct canonical comparison and live close/regional review accept the shallow old glacier embedded in rocky snow terrain, without an ice cliff, cyan icon, isolated plate or diorama edge. Exact sources reached focused/ready with no image errors and a 7.7 ms maximum slice. The focused gate passes 74/74 with one worker and the raster verifier passes as one process. A fresh sequential audit selects coast/fjord-coast next at two fields-profile sites. No broad suite or load test ran; the overall map goal remains active. These art-only changes alter no simulation rule or player state.

Scenes-320 style-locked Active Volcano acceptance (2026-09-12): manifest illustrated-places-109-r30 activates one full-bleed mountain Hero, one natural-detail companion and one identity-free ground companion across three deterministic sites. Direct canonical comparison and live close/regional review accept the low broad volcanic massif, tiny dull vent, short heat traces and modest smoke wisp as embedded terrain—not a glowing icon, steep cone or cinematic eruption. Exact sources reached focused/ready with no image errors and a 4.6 ms maximum slice. The focused gate passes 71/71 with one worker and the raster verifier passes as one process. A fresh sequential 18-seed audit selects arctic/glacier-field next at two arctic sites. No broad suite or load test ran; the overall map goal remains active. These art-only changes alter no simulation rule or player state.

Scenes-321 Glacier Field source checkpoint (2026-09-12): three inactive 1536x1024 RGB review paintings now cover the arctic Hero, natural-detail and quiet-ground roles. Direct canonical comparison accepts the shallow old glacier embedded in rocky terrain, the tiny melt/moraine trace and the identity-free ground; the 5/5 one-worker source/style-lock gate verifies exact hashes, dimensions, retained originals and both deterministic legacy sites. Manifest illustrated-places-109-r30 is unchanged; composed review, raster verification and production routing remain pending. These review-only files alter no simulation rule or player state.

Scenes-318 supersedes the current-state paragraphs below (2026-09-12): manifest illustrated-places-108-r29 accepts style-locked Caravanserai hills/tundra and Oasis Town hills families as nine exact production paintings. Six genuine close/regional views, the 68/68 one-worker focused gate and the single-process raster verifier pass while all six audited sites, Hero totals, geography and profile-safe connected placement remain unchanged. The accepted settlements use the locked simplified high-oblique, terrain-first art direction without icon plates, bright domes, photoreal environment art or oversized architecture. A fresh sequential audit selects volcanic/active-volcano next. No broad suite or load test ran. These art-only changes alter no simulation rule or player state.

Scenes-314 style lock, Hill Village repaint acceptance and Caravanserai review checkpoint (2026-09-12): world-of-gonz-atlas-v2-september-5-7-locked-v1 now SHA-256 pins Clay Pit, Copper Mine, Gold Vein and Monastery Hamlet as mandatory image references and makes direct visual comparison authoritative over technical test success. Manifest illustrated-places-106-r27 replaces the rejected photoreal Hill Village sources with three versioned simplified illustrated-atlas paintings. Exact routing preserves three deterministic sites; close/regional composition passes 2/2, the combined style/family gate passes 6/6 with one worker, and the raster verifier passes as one process. Six inactive Caravanserai hills/tundra Hero/detail/ground sources pass the same lock and await user review; legacy Caravanserai routing is unchanged. No broad suite or load test ran. These art-only changes alter no simulation rule or player state.

Scenes-310 supersedes the earlier current-state paragraphs below: Hill Village v2 is accepted in manifest illustrated-places-106-r26. One full-bleed tundra Hero and two terrain-native companions preserve all three deterministic sites and connected placement. Direct source review passes 3/3; genuine close/regional review passes 2/2 with exact focused/ready sources and no image error. The low loose croft cluster remains subordinate to continuous cold rocky tundra without an isolated diorama, bright roofs, fortification, platform, halo or hard plate. The active-family gate passes 3/3 with one worker and the raster verifier passes as one process. No broad suite or load test ran. Work is paused for user evaluation while the overall map goal remains active.

Scenes-308 supersedes the earlier current-state paragraphs below: Barley Fields v2 is accepted in manifest illustrated-places-106-r25. Three full-bleed profile Heroes and six terrain-native companions preserve all three deterministic hills/grasslands/tundra sites, exact profile routing and connected placement. Six genuine close/regional views, the 3/3 family guard, the 75/75 one-worker focused gate and the single-process raster verifier pass. Irregular contour-following barley remains subordinate to continuous native terrain without a crop tile, decorative quilt, platform, halo or hard plate. No broad suite or load test ran. The next action is a fresh sequential read-only catalog audit; these art-only changes alter no simulation rule or player state.

Scenes-306 supersedes the earlier current-state paragraphs below: Polar Icecap v2 is accepted in manifest illustrated-places-106-r24. One full-bleed arctic Hero and two terrain-native companions preserve all three deterministic sites, exact arctic routing and connected placement. Two genuine close/regional views, the 3/3 family guard, the 72/72 one-worker focused gate and the single-process raster verifier pass. The accepted low matte wind-shaped snow crown remains embedded in continuous rocky arctic terrain without an ice cliff, isolated island outline, platform, halo or hard plate; the rejected blue plate-like first pass remains provenance only. No broad suite or load test ran. The next sequential audit selects farmland/barley-fields at three hills/grasslands/tundra occurrences; these art-only changes alter no simulation rule or player state.

Document maintenance

This is the primary living world design document. Every change to world systems, gameplay concepts, player interactions, related UI designs or simulation architecture must update this file in the same task. Record current decisions and implementation status here; use linked companion specifications for additional detail and reconcile superseded rules.

Current illustrated-world implementation — September 10, 2026

Scenes-304 accepts University Town v2 in manifest illustrated-places-106-r23: two hills/tundra Heroes and four companions preserve four deterministic sites, exact profile routing and connected placement. Four genuine close/regional views, the 69/69 one-worker focused gate and the single-process raster verifier pass. The compact domestic-scale learning settlements remain embedded in continuous deterministic terrain without a monumental campus, authored island edge, wall, platform, halo or hard plate. No broad suite or load test ran. The next sequential audit selects arctic/polar-icecap at three occurrences; these art-only changes alter no simulation rule or player state.

The next bounded source checkpoint is scenes-303 University Town v2. Six full-bleed RGB review paintings cover hills/tundra Hero, single-building detail and identity-free ground roles; direct automatic review and the 2/2 one-worker source guard pass while preserving all four deterministic legacy sites. They remain inactive under manifest illustrated-places-106-r22 until genuine composed review, focused active-family verification and the single-process raster gate pass. This art-only staging changes no simulation rule or player state.

The active map manifest is illustrated-places-106-r22. The September 8 correction batch first accepted Irrigated Farms, Cursed Land, Portal Nexus and Celestial Crater at r19: 42 exact full-bleed 1536x1024 RGB paintings across 14 profile scenes, 28 controlled regional/close views, a curated 79/79 one-worker gate and a single-process raster pass after every integration. Floating Stones r20 then added four exact Heroes and eight companions across mountain, grasslands, desert and hills; Rocky Headland r21 added two fields/tundra Heroes and four companions. Mountain Town r22 adds two hills/tundra Heroes and four companions. Its four genuine close/regional views confirm exact focused/ready sources and compact weathered settlements embedded in continuous terrain without a fortress, wall, platform, halo or hard plate; its focused gate passes 66/66 with one worker. All three post-freeze families pass the raster verifier as one process.

All reviews used one local server, one simulation worker and one browser tab sequentially. No broad whole-directory suite or load test ran. The complete-map goal remains active. A fresh sequential read-only 18-seed audit selected town/university-town at four hills/tundra occurrences as the next bounded family; no University Town runtime route has changed. The authoritative continuation and historical evidence are maintained in Complete illustrated-world goal, handoff specification, correction integration order art-direction/september-8-course-correction-integration-order.json, and complete-map ledger art-direction/complete-map-ledger.json. The map remains deterministic and these art-only integrations do not change simulation rules or player state.

Current terrain and building decisions — September 2026

• Most ordinary tiles can be terraformed, developed, demolished or restored. The generated origin remains reproducible; effective terrain changes through durable projects.
• Building placement and operation depend on current biome and physical conditions. Woodcutters require local mature trees. Conventional fields require viable soil and reliable water, so untreated desert cannot support them.
• Terraforming is a separate staged investment. Clearing, planting and maturation, irrigation and soil restoration, drainage, and terracing change the uses a tile supports. Projects have costs, upkeep and ecological consequences; they cannot create water or mineral deposits from nothing.
• A broad building library covers extraction, farming, processing, housing, civic services, trade, transport and military uses. Processing buildings may import inputs, while extraction requires local resources.
• The next playable living-world slice is a dynamic woodland settlement, replacing the earlier plan to make a farm the first mutable object. It proves clearing, planting, elapsed-time forest growth, construction, damage, demolition, ruins and rebuilding with a minimal timber/labor/food economy. Farms follow once this common mutation pipeline is durable.
• Tower, smithy, stables, town house, castle, clay pit, forest lodge, forester's lodge, lumbermill, iron mine and fishery are all structures that can be constructed, damaged, ruined, repaired, demolished and rebuilt when rights and physical conditions allow. A fishing town is a settlement specialization produced by constituent housing, fisheries, landing, storage and trade buildings rather than one placeable building.
• Existing art has explicit projection roles. The 243 Atlas v2 Hero identities and their full-bleed companions remain macro place/terrain projections; they are not authoritative building pieces. The 32 transparent Hero-connector motifs can prototype individual dynamic objects. Final mutable structures require matched construction, working, damaged and ruined overlays, while mutable forests require cleared, sapling, young, mature, thinned and burned ground/vegetation states.
• Screens S24 Buildings & biome fit and S25 Terraforming planner compare present conditions with completed-project conditions, including uses enabled and disabled. The design now includes 25 screens, of which 24 are management destinations.
• Implementation status: the earlier 32-definition/10-plot planner remains a non-authoritative catalog preview. The live game now has two bounded authoritative regions, separate settlement inventories and 18 structure definitions. Greywood supports woodland, clay/brick, iron/fuel/smithing, horse/logistics and tower/keep/castle play. Tidebreak supports renewable fisheries and growth from landing camp to fishing town. Full terrain projects, production lifecycle art and unrestricted world-wide mutation remain future work.

Detailed rules, building families, art compatibility and acceptance scenarios are maintained in Mutable terrain and the building library; screen contracts are in MMO UI screens.

Gameplay design continuation — September 2026

The MMO gameplay design now defines mortal character embodiment, family and communal ownership, death-triggered AI interregnum, lawful handover, and landless continuity. Its sections 2 and 4 refine the organization-plus-envoy and action-clock proposals in this earlier engineering draft. Its section 5 replaces width-dependent cell IDs with stable world/axial coordinates before frontier expansion; fixed-map legacy IDs require explicit migration. Section 14 defines incoming-art compatibility, and the screen specification connects systems to player decisions. These are design contracts; the server does not yet implement them.

Product vision

World of Gonz should feel like a painted historical atlas whose geography remembers what players and inhabitants do. The base continent remains stable and recognizable, while settlements spread, forests are managed or burned, fields become farms, roads follow actual journeys, and abandoned works slowly return to the landscape.

The design is intentionally more systemic than Travian or Grepolis without becoming a simulation that updates every hex every second. Players should be able to read history directly from the map: a prosperous road, a burned woodland, a ruined border fort, or fields growing around a market town should all have a cause.

Three principles govern the design:

1. The world changes in coherent regions, not as random individual tiles. A settlement, estate, forest district, watershed, or road corridor is the main visual and gameplay unit.
2. Every durable change is server-authoritative and explainable. The client sends an intention; the server validates it, applies one ordered event, and records the result.
3. Most of the world sleeps. Movement can run at 20 Hz, but economies, ecology, construction, AI strategy, and decay use scheduled events or elapsed-time formulas instead of per-cell ticks.

What already exists

The current project is a strong prototype foundation:

• A deterministic 640 × 352 world (225,280 hexes) is generated from WORLD_SEED (generator 3).
• The browser builds biomes, regions, ecotones, rivers, static features, and optional roads.
• The illustrated-atlas renderer already separates coarse terrain, cached static detail, and dynamic players.
• The server accepts movement intentions and runs authoritative movement in worker threads at 20 Hz.
• A 16 × 16 interest grid limits player snapshots to nearby chunks.
• Player and marker state is evented, periodically snapshotted, and partitioned by player or chunk.
• Binary delta snapshots, reconnection tokens, backpressure limits, metrics, and a load-test baseline already exist.

The important boundary is that the server currently owns travelers and simple markers, but not the terrain semantics. Biomes, features, rivers, settlements, and roads are created inside public/game.js. The server therefore cannot yet decide whether a farm is legal on a cell, whether a road crosses water, or how a fire should spread. Markers are broadcast globally rather than through chunk interest.

The world model

The map should be represented as three layers of state.

1. Immutable geographic foundation

Terraforming refinement: immutable means the generated origin is reproducible, not that effective terrain is locked. Most ordinary tiles can change through durable terrain and waterway patches. All gameplay reads effective soil, tree maturity, water, slope, foundation and network topology. See mutable terrain and buildings for the patch contract and replacement of blanket landmark protection with explicit protected-site rules.

This is reproduced from the world seed and generator version and is never stored per cell:

• elevation, temperature, moisture, and basin values;
• biome and terrain profile;
• region and ecotone membership;
• coast, river, and ridge topology;
• natural resource potential;
• protected landmark anchors.

The generator must move from public/game.js into a shared deterministic module used by both the browser and server. The server must reject a world command when its generator version does not match the command's world version.

Use one canonical cell identity everywhere:

cellId = row * WORLD_COLS + col

Axial q,r coordinates remain useful for rendering and hex distance but should be derived from canonical col,row coordinates. A road edge is the sorted pair of its endpoint cell IDs.

2. Sparse durable world patches

Only changed cells and edges are persisted. An untouched cell costs no database row and is reconstructed from the seed.

CellPatch {
  cellId,
  revision,
  landUse,          // wild, farm, pasture, managedForest, burned, urban, ruins...
  condition,        // 0..100
  ownerId,
  settlementId,
  construction,
  hazard,
  changedAt,
  nextDueAt
}

EdgePatch {
  edgeId,
  revision,
  roadClass,        // trail, track, road, pavedRoad
  condition,
  trafficScore,
  ownerId,
  changedAt,
  nextDueAt
}

Settlements and structures are first-class objects rather than labels embedded in cells:

Settlement {
  id,
  anchorCellId,
  footprint,
  stage,            // camp, hamlet, village, town, city, capital, ruins
  population,
  prosperity,
  foodSecurity,
  safety,
  treasury,
  factionId,
  revision
}

This lets one city control a coherent multi-hex scene and lets its visual form evolve without replacing the underlying biome.

3. Ephemeral active simulation

Short-lived state stays in memory and is not written every frame:

• player and nearby unit positions;
• current input masks and combat actions;
• active fire frontiers;
• construction workers currently present;
• recent road traffic samples;
• local AI tactical state.

Durable checkpoints record only meaningful outcomes such as arrival, damage, completed construction, ownership changes, or a fire crossing into another cell.

The core game loop

The fundamental loop is:

1. Explore and survey. Discover resource quality, old sites, trade opportunities, hazards, and political control.
2. Establish influence. Found an outpost, join a settlement, negotiate rights, or claim an ungoverned site.
3. Develop the land. Build farms, lodges, mines, workshops, defenses, ports, and civic buildings through visible construction stages.
4. Connect and specialize. Move goods and people. Frequently used routes become tracks and roads; settlements grow around useful networks.
5. Respond to consequences. Fire, war, shortages, migration, prosperity, neglect, and seasonal stress change both play and appearance.
6. Leave history. Successful projects mature; neglected or destroyed works decay into abandoned fields, overgrown roads, ruins, and regrowth.

Players should influence change rather than directly paint arbitrary tiles. A farm requires suitable land, access, labor, materials, and permission. A city expands when its population and supply network support it. This keeps the world plausible and makes cooperation, trade, and conflict meaningful.

Visible transformation systems

Fields and farms

Suggested lifecycle:

meadow → surveyed plot → cleared field → working farm → improved estate
                                      ↘ neglected → fallow → meadow/scrub

Farms consume labor and tools, produce food seasonally, and need storage plus a route to a settlement. Several adjacent farms become a cultivated district with shared hedges, irrigation, orchards, barns, and field patterns. The renderer should show the district as one composed landscape, not repeated farm icons.

Forests, lodges, logging, and fire

Suggested lifecycle:

old forest → managed woodland → lodge or logging camp → thinned woodland
     ↘ drought + ignition → active fire → burned ground → scrub → young forest

A lodge supports hunting, scouting, forestry, and local defense. Logging increases timber supply but raises erosion and fire risk when overused. Fire is simulated as an event frontier: only burning cells and candidate neighbors are active. Spread depends on moisture, fuel, wind, firebreaks, and response effort. Regrowth is calculated from elapsed time, so burned regions do not need continuous ticks.

Settlements and cities

Settlement growth should follow thresholds with hysteresis so towns do not flicker between stages:

camp → hamlet → village → town → city → regional capital
  ↘ abandoned or conquered stages can become occupied ruins

Population, food security, housing, trade access, safety, sanitation, and governance determine growth. Buildings appear as a coherent settlement footprint around an anchor and roads connect to gates or market squares. Individual functional buildings can come and go inside that footprint, while the zoomed-out map shows only the settlement stage and prosperity.

Roads that emerge from behavior

Every unit journey contributes a small, decaying traffic score to traversed edges. Terrain, slope, ownership, danger, and existing roads affect route choice.

repeated passage → desire line → trail → track → maintained road → paved road
                                              ↘ neglect/damage → degraded track

Traffic alone may create a trail. Higher classes require construction and maintenance by players, settlements, or factions. Roads should be stored on edges and rendered as connected curves across multiple cells. This produces networks that reflect how the world is actually used rather than a collection of road tiles.

Buildings, war, and decay

Construction is a server-owned job with requirements, progress, and completion time. Destruction changes a structure to damaged and then ruins; it should rarely erase history instantly. Repairs are usually cheaper than rebuilding. Unmaintained buildings lose condition on scheduled due dates, not global ticks. Ruins may become salvage sites, monster lairs, heritage sites, or foundations for new construction.

Simulation clocks

Different systems require different cadences:

On waking a sleeping chunk, the owner applies all due events in deterministic order and analytically advances slow variables from their last update time. It never replays millions of empty ticks.

Server architecture

Logical flow

Clients
  │ commands, movement intentions, chunk subscriptions
  ▼
WebSocket gateway
  │ identity, limits, validation envelope, backpressure
  ▼
World router
  │ one authoritative owner for each zone
  ├─ Zone worker A ─ active entities + chunk patches + due-event queue
  ├─ Zone worker B ─ active entities + chunk patches + due-event queue
  └─ Zone worker C ─ active entities + chunk patches + due-event queue
        │ ordered domain events + transactional outbox
        ▼
Durable store
  │ chunk snapshots, events, players, settlements, structures, roads
  ▼
Delta publisher → interested gateways/clients

The existing gateway, worker, interest, backpressure, and metrics code can evolve into this shape. The main change is that a worker owns world patches and gameplay commands in addition to player coordinates.

For stateful gameplay, prefer contiguous zone ownership over the current hash that scatters neighboring chunks between workers. A fixed assignment table can keep adjacent chunks together while preserving stable ownership. Cross-zone movement is a handoff; a road, trade, or battle crossing a boundary uses a small reservation/commit workflow rather than shared mutable state.

Command contract

Clients submit intentions such as:

{
  type: "command",
  commandId: "client-generated-idempotency-key",
  kind: "START_FARM",
  target: { cellId: 4812 },
  expectedRevision: 17,
  payload: { farmType: "grain" }
}

The owning zone processes commands serially:

1. reject duplicates using commandId;
2. load the immutable cell and current patch;
3. verify revision, range, ownership, permissions, resources, and terrain rules;
4. reserve or consume resources;
5. append one or more domain events;
6. apply them to in-memory state;
7. publish deltas and acknowledge the command.

Important domain events include FarmStarted, StructureCompleted, FireIgnited, FireSpread, SettlementStageChanged, RoadTrafficAccumulated, RoadUpgraded, OwnershipChanged, and StructureRuined.

Single ownership avoids distributed locks for normal play. Cross-zone operations must be uncommon and explicit. Every accepted command is idempotent, and every entity or patch has a monotonically increasing revision to prevent lost updates.

Persistence path

The current NDJSON plus snapshot store is appropriate for a single-machine prototype. It should first gain chunk snapshots, revisions, compaction, and recovery tests.

Before running multiple application replicas for one seamless world, move durable authority to PostgreSQL:

• partition events and cell patches by world_id and zone/chunk;
• store settlements, structures, jobs, and road edges as indexed tables;
• use a transactional outbox so committed events are always published;
• retain snapshots so a zone does not replay its full history on startup;
• use Redis or a message broker only for ephemeral presence, routing, and delta fan-out—not as the source of truth.

Separate worlds can already run independently on separate machines. Multi-machine ownership of one world should wait until one machine approaches measured CPU, memory, or connection limits.

Planned chunk replication extensions

The initial welcome should contain the seed, generator version, world time, world revision, and only the player's initial interest area. It should not send every world mutation.

Add these messages:

• subscribe: client interest center and optional map-view regions;
• chunkSnapshot: full sparse patch state for one chunk at a known revision;
• worldDelta: ordered cell, edge, settlement, structure, hazard, and job changes;
• command: a player or AI intention with idempotency key and expected revision;
• commandResult: accepted/rejected state and authoritative revisions;
• resyncChunk: recovery after a revision gap;
• calendar: season, weather front, and world-time changes.

Each chunk has a monotonic revision. A client applies delta N+1 only after N; on a gap it requests one chunk snapshot rather than reconnecting to the entire world. Dynamic deltas use the existing interest grid, distance-based LOD, crowd caps, and backpressure protection. Slow clients receive coalesced latest state rather than an unbounded event backlog.

AI-controlled inhabitants and rivals

The current proposed player-facing realization combines cautious neutral Neighbour Houses with three major factions, summarized at the top of this document. It distinguishes independent factions from authorized governors and continuity stewards, and separates the initial neighbour economy from later polar quests, magical armies and continental expansion. The architecture below remains applicable; these proposals clarify its knowledge, authority and unattended-simulation boundaries.

AI must use the same command API and rules as human players. It must never write world state directly.

Use three layers:

1. Strategic governor: runs infrequently per settlement or faction, evaluates food, safety, wealth, expansion, diplomacy, and military goals, and allocates budgets.
2. Planner: turns a goal such as “secure winter food” into bounded jobs such as survey, acquire land, build farms, improve a road, or purchase grain.
3. Executors: units perform travel, construction, trade, or combat. Off-screen journeys resolve through departure/arrival events; detailed movement occurs only near observers or conflict.

AI work is budgeted per zone. Overload retains pending work for bounded catch-up; any reduced strategic cadence is a recorded regional policy change, independent of observer presence. Sleeping settlements may use aggregate formulas only when they preserve the same logical events and outcomes. Deterministic scoring and seeded choices make decisions reproducible in tests. An explanation record—goal, considered choices, chosen action, and cost—makes AI behavior debuggable and can power player-facing chronicles without disclosing private knowledge to other factions.

Rendering the living map

Preserve the painted atlas as the geographic foundation. Dynamic change should be a separate cached world-state layer between static terrain and moving entities.

Recommended canvas stack:

base terrain → static atlas scenes → cached dynamic world patches → live effects/entities/UI

The dynamic layer is cached per visible chunk and invalidated only when that chunk's revision changes. It renders:

• multi-cell farmland patterns and settlement footprints;
• connected road-edge curves;
• construction stages and scaffolding;
• condition variants, ruins, burned ground, and regrowth;
• low-cost animated smoke, fire, flags, carts, and workers on the live layer.

At low zoom, show state as regional composition: cultivated belts, forest loss, city size, road hierarchy, fires, and borders. At high zoom, reveal buildings, jobs, traffic, and local effects. Avoid placing a full hero image on every changed hex. Existing Hero art should identify major places; lower-key connector and overlay art should carry routine development.

Protected landmark anchors should not be casually overwritten. Dynamic districts may grow around them and their ownership or condition may change, but the art hierarchy remains intact.

Performance budgets

Initial engineering budgets should be enforced by tests and metrics:

• active zone simulation below 8 ms p95 within a 50 ms movement tick;
• ordinary accepted command below 150 ms p95 on the hosting region;
• compressed chunk snapshot below 64 KB in normal regions;
• no world-state traffic for unchanged subscribed chunks;
• background dynamic traffic below 2 KB/player/second outside crowds or major events;
• client rebuild of one dirty dynamic chunk below one animation-frame work slice;
• reconnect or chunk resync below two seconds under the existing concentrated load test;
• bounded catch-up work per waking chunk, with excess due events resumed over later slices.

Add metrics for command latency and rejection reasons, due-event queue depth, sleeping/active chunks, world delta bytes, dirty chunks, catch-up duration, cross-zone operations, AI decisions, persistence lag, and snapshot age.

Abuse and world stability

A persistent world needs guardrails so “dynamic” does not become visual griefing:

• construction requires rights, resources, adjacency rules, and capacity;
• settlements or factions control zoning and road maintenance;
• destructive actions create warnings, response windows, and durable evidence;
• protected regions and major landmarks have stricter rules;
• abandoned state decays gradually and can often be restored;
• rate limits apply per account, settlement, and target—not only per socket;
• moderators can inspect the event history and issue compensating events rather than editing hidden state.

The map should preserve consequences, but important failures should create new play rather than permanently deleting months of work.

Delivery plan

Milestone 0 — Shared authoritative geography

• Extract the deterministic cell generator, coordinate helpers, hex neighbors, terrain profiles, and immutable topology into a shared module.
• Generate the same checksum in browser and server tests.
• Introduce canonical cell and edge IDs.
• Make the server validate terrain-dependent commands.
• Keep current visuals and multiplayer behavior unchanged.

Exit criterion: browser and server independently produce an identical checksum for all 225,280 cells from the production seed.

Milestone 1 — One living-region vertical slice

• Add sparse versioned cell/edge patches and chunk snapshots.
• Add protocol v2 chunk subscriptions, command results, deltas, and gap recovery.
• Implement farms, forest lodges, construction jobs, fire, burned ground, and regrowth.
• Add one evolving settlement stage and trail/track roads.
• Add a cached dynamic render layer using restrained overlays and existing art.
• Restrict the slice to one test region or development world until recovery is proven.

Exit criterion: two clients can jointly develop a farm district, see a fire spread and recover, disconnect, restart the server, and return to the exact authoritative state.

Milestone 2 — Settlement economy and social control

• Add population, food, housing, storage, prosperity, safety, treasury, ownership, permissions, and maintenance.
• Add building footprints and coherent village/town/city visual stages.
• Add markets, production chains, trade jobs, and road traffic accumulation.
• Add event history and a player-facing regional chronicle.

Exit criterion: a settlement can grow, specialize, suffer shortage or damage, decline, and recover without administrator intervention.

Milestone 3 — Emergent networks and conflict

• Upgrade desire lines into maintained road classes.
• Add route finding over terrain, roads, danger, and border cost.
• Add factions, diplomacy, territorial influence, sieges, damage, repair, and ruins.
• Implement explicit cross-zone handoff and reservation workflows.

Exit criterion: trade and conflict visibly reshape settlement prosperity, road networks, borders, and structures while preserving authoritative ordering.

Milestone 4 — AI society and scale hardening

• Add strategic governors, planners, and unit executors through the command API.
• Add AI budgets, sleeping settlement formulas, and reproducible decision tests.
• Extend load tests with world commands, hot zones, fires, construction, reconnects, and persistence recovery.
• Profile before changing storage or deployment topology.

Exit criterion: AI factions can sustain and contest settlements for long unattended runs within the simulation and network budgets.

Milestone 5 — Multi-process and multi-machine world

• Move durable state to PostgreSQL with partitioned events, snapshots, and transactional outbox.
• Add a shared routing/fan-out layer and leases for stable zone ownership.
• Rebalance cold zones first and transfer hot zones only at safe boundaries.
• Test worker, process, and machine failure during construction, fire, trade, and combat.

Exit criterion: an owner process can fail and another can recover the zone without accepted commands being lost or applied twice.

First implementation sequence

The safest first code sequence is deliberately narrow:

1. Create a shared world generator and checksum tests without changing the map output.
2. Define CellPatch, EdgePatch, WorldEvent, Command, and chunk-revision codecs.
3. Replace global marker delivery with interest-scoped chunk snapshots and deltas.
4. Implement woodland CLEAR, PLANT and START_CONSTRUCTION commands in one bounded region, first rendering a town house, forest lodge, forester's lodge, lumbermill and watchtower through construction and condition stages.
5. Add forest harvest, event-frontier fire, elapsed-time regrowth, demolition, ruins, repair and rebuild; add START_FARM only after the shared terrain/structure path survives restart and resync.
6. Add traffic scores and trails only after cell commands, persistence recovery, and resync are reliable.
7. Turn one existing settlement anchor into a multi-stage settlement after the patch pipeline is proven.

This sequence proves the complete authoritative path—command, validation, event, persistence, subscription, rendering, restart, and resync—before broadening the game systems.

Continued analysis: pressure test and roadmap refinements

The vision is technically strong, but implementation should begin only after a small set of foundational product and consistency decisions. The largest near-term risk is not server scale. It is building sophisticated infrastructure before defining exactly what constitutes geography, civilization, player agency, and durable history.

Natural geography is not generated civilization

The phrase “immutable geography” must exclude generated human development. The current browser generator places cities, castles, villages, farms, cottages, and ruins as cell features, then derives roads from some of those generated settlements. Treating all of that output as immutable would make farms and cities simultaneously permanent generator facts and mutable game objects.

Split world creation into three categories:

1. Immutable natural geography: terrain, elevation, climate, water, natural resource potential, regions, ridges, and other physical topology.
2. Versioned world genesis: initial settlements, ancient ruins, initial roads, historical traces, and protected landmark anchors.
3. Mutable world history: everything players and AI subsequently construct, damage, govern, improve, abandon, or restore.

Initial civilization should be materialized once as bootstrap events or patches when a world is created. It is thereafter part of that world's durable history, not recalculated whenever the generator changes. Otherwise a generator upgrade could silently move a city or road underneath existing player state.

The existing fields biome should also become a natural semantic category such as meadow or grassland. Farm belongs to mutable landUse. The renderer may preserve the existing fields art profile so this semantic correction does not need to change the current visual output.

Player embodiment must be decided before ownership

The design must define whether a player represents an individual traveler, a settlement ruler, a household, a guild, a company, or some combination of these. This choice controls resource ownership, permissions, construction authority, diplomacy, defeat, offline play, and the relationship between human and AI actors.

A hybrid organization-plus-envoy model is the best fit for the current prototype:

• the player account controls a persistent household, company, guild, or comparable organization;
• the organization owns resources, projects, rights, relationships, and long-running jobs;
• a controllable envoy supplies immediate exploration and nearby interaction;
• workers, traders, settlers, and armies usually execute scheduled jobs rather than requiring continuous direct control.

Without this decision, a command such as START_FARM has no stable answer for who supplies labor, owns the completed farm, receives production, or can grant another player access.

Real-time movement and strategic travel are different systems

The current player simulation provides rapid continuous movement in world-space coordinates. It does not yet apply water collision, terrain cost, roads, political borders, or route validation. At the current map dimensions and player speed, an unobstructed horizontal crossing takes roughly 47 seconds.

Use two related movement models:

1. Real-time local movement for exploration, nearby interaction, and tactical scenes. This remains authoritative at the current fixed tick rate and may use client-side prediction.
2. Strategic route-and-arrival travel for trade, armies, workers, migration, and off-screen NPC activity. The server chooses or validates a route, records a departure, and schedules route-segment or arrival events.

Road traffic should come from authoritative strategic journeys or completed route segments, not from every 20 Hz avatar position sample. Nearby strategic units can temporarily materialize as detailed moving entities when observed or contested, then return to scheduled travel outside active views.

Durability must precede command acceptance

The prototype persistence store batches changes in memory before appending them to disk, while marker mutations can be sent to clients immediately. That is suitable for prototype markers but not for authoritative construction, resources, fire, or ownership. A crash could otherwise erase a change that clients had already observed as accepted.

Before the first durable world command:

• assign monotonically increasing event sequences;
• append the complete accepted event transaction before returning commandResult: accepted;
• record each snapshot's last applied event sequence instead of using timestamps as the replay boundary;
• make event IDs idempotent so crash recovery cannot apply an accepted command twice;
• persist scheduled work before acknowledging the command that created it;
• use dueAtWorldTime rather than wall-clock timestamps for simulation semantics;
• order equal-time scheduled events deterministically by due time, priority, aggregate identity, and event ID.

Random simulation outcomes must also survive recovery exactly. Either record the resolved random result in the event or derive it from stable inputs such as world seed, event ID, and simulation version. Do not draw fresh randomness when replaying an event.

Persist a world manifest

Every durable world needs an identity file or record containing at least:

WorldManifest {
  worldId,
  seed,
  cols,
  rows,
  generatorVersion,
  genesisVersion,
  simulationVersion,
  createdAt,
  worldEpoch,
  lastEventSequence
}

The server should fail startup or require an explicit migration when the persisted manifest conflicts with runtime configuration. It must never apply existing patches to a different seed, map size, or incompatible generator version simply because an environment variable changed.

Protocol 3 repeats the durable world-instance/player/session-epoch binding on every post-hello JSON request; seed and generator compatibility are established at handshake and save validation. This per-connection epoch is separate from the proposed durable worldEpoch above. Commands do not need to repeat the complete world manifest.

Separate transaction revisions from replication revisions

Chunk revisions solve client replication and resynchronization. They are not sufficient as the only concurrency control for domain commands.

For example, START_FARM may affect a target cell, a construction project, an organization's inventory, settlement permissions, and a resource ledger. The command must commit those changes atomically.

Use three kinds of ordering:

• Aggregate revisions for command preconditions on cells, projects, settlements, organizations, inventories, and other independently changing domain objects.
• Zone event sequence for authoritative processing and recovery order.
• Chunk revisions for publishing snapshots and deltas to interested clients.

An accepted domain event may increment several aggregate revisions and produce updates in several chunks. Clients use chunk revisions to consume those projections, while the server uses aggregate revisions and transactional validation to decide whether the command is legal.

Scheduled simulation needs durable queue semantics

Slow systems should use a durable due-event queue rather than a set of incidental timers. Each scheduled item should include a stable ID, owning aggregate or zone, world due time, expected revision or cancellation token, payload, and attempt state.

When a sleeping chunk wakes:

1. load its latest snapshot and event sequence;
2. analytically advance slow continuous values;
3. process due events in deterministic order up to a bounded work budget;
4. persist outcomes and newly scheduled work;
5. publish resulting chunk deltas;
6. continue excess catch-up work in later slices without blocking active movement.

Fire events need expected-state checks so a previously scheduled spread is harmless if firefighters, rain, land clearing, or another event has already changed the target. Road traffic should be aggregated per completed journey or checkpoint interval so event volume does not grow with every movement tick.

Dynamic rendering needs multiple visual stages

The current static scene cache combines terrain and illustrated scenes, while mutations and players are drawn afterward on the live canvas. Placing every form of development in one new layer above the static cache would allow roads, burned ground, and field textures to paint over protected buildings and landmark art.

Use this more precise composition:

natural terrain and geographic structure
→ cached dynamic ground changes: burns, farms, earthworks, roads
→ protected landmark art
→ cached dynamic structures and settlement footprints
→ live effects, units, selection, labels, and UI

The ground-change and structure-change stages may both use per-chunk caches. Each cache key should include the relevant chunk revision, zoom/LOD band, art version, and world presentation version. This preserves correct occlusion without requiring all dynamic content to be repainted every frame.

Burned or cleared terrain also exposes a limitation of immutable painted features: a forest landmark cannot convincingly burn if its trees are permanently baked into an opaque static scene. Protected landmark rules, stage-specific masks, and replaceable landmark states must define which illustrated scenes can change and which remain permanent anchors.

The map uses three explicit semantic views

Zooming into a region must be meaningfully different from navigating the world overview. The map now has three named views—Global, Region, and Hex—rather than exposing one continuous camera as the player's mental model. The same selected canonical world hex persists while moving between views. The server remains authoritative at every view, but the client should request, receive, and render only the detail that can be perceived and acted upon at the current scale. The full interaction and art contract is in Three-scale map design.

The player can switch with the three-part map control or 1/2/3, double-click a revealed Global region, and use wheel or double-click transitions within Region/Hex. Global wheel input and distant double-clicks change globe magnification under the current zoom contract above. Each switch between named views is a semantic transition with a stable target:

Continuous scale still exists as a renderer implementation detail. It must not create a fourth ambiguous gameplay state. Suggested internal bands are illustrative rather than permanent tuning:

0.075–0.24  Global projection
up to 1.12 Region projection fitted to the actual board and three surrounding rings
local scene  Hex projection, rendered as a bounded child scene rather than a larger world tile

The previous overlapping camera-band proposal is superseded as player-facing navigation. Hysteresis may still protect cache and asset transitions internally, but view changes happen only through an explicit semantic navigation action.

Global uses compact vector symbols and does not load regional paintings; the earlier hex-clipped miniature-painting rule is superseded by the September 19 strategic atlas. A Region asset is an opaque, full-bleed Atlas v2 terrain plate representing exactly one parent hex: its focal content stays inside a protected central area and the renderer clips the plate to the six hex edges. It is not a transparent object sprite or detached diorama. Hex view may reuse the same plate as the bounded parent-space anchor, but adds local sites and child entities around it. Region and Hex share the painting; Global shares the canonical identity and geographic location.

One-hex terrain plates are profile-specific. Their manifest declares allowed underlying biomes, and a plate must not render on an incompatible cell merely because its subject category matches. Additional biome coverage requires a separately authored variant in that terrain material; it must not be synthesized by tinting or allowed to create a visible foreign-terrain hex.

Navigation rendering

While the camera is actively panning, dragging, or zooming:

• transform and reuse the last completed caches instead of rebuilding them continuously;
• keep the low-resolution atlas foundation visible wherever a cache no longer covers the viewport;
• suppress minor labels, particles, workers, decorative animation, and nonessential building detail;
• render unit groups and settlement activity as inexpensive aggregates;
• coalesce camera changes into one requested frame;
• postpone expensive chunk composition until the camera has been stable for roughly 150–250 ms;
• cancel or supersede stale cache work when navigation resumes.

After the camera settles, progressively refine the visible area:

1. render the selected or central chunk first;
2. render the remaining visible chunks from near to far;
3. prewarm only the immediately adjacent likely navigation direction when budget remains;
4. restore labels, animation, individual units, and high-detail structures appropriate to the settled zoom mode.

The current scaled-static-cache behavior is a useful foundation for this contract. The living-world layers should adopt the same approach per chunk instead of invalidating or repainting the entire visible world whenever one patch changes.

Zoom-aware subscriptions

Camera interest and player-presence interest are related but distinct:

• the player's nearby local area always receives the state required for authoritative movement and interaction;
• a remotely inspected map area receives read-only strategic or regional data appropriate to its zoom;
• overview subscriptions return compact regional aggregates instead of every underlying cell patch;
• regional subscriptions return chunk snapshots and deltas without high-frequency individual movement outside the player's local area;
• Hex subscriptions may receive detailed child entities only within the selected parent hex and bounded visibility rules;
• remote inspection requests are rate-limited and capped so rapid map scanning cannot force unbounded server work.

Add a requested detail level to subscribe, for example global, region, or hex. Region interest includes the seeded board identity and its explicit member-cell IDs; Hex interest includes the canonical parent cell ID and a local-scene revision. The server may lower the granted level because of distance, permissions, crowding, connection backpressure, or load, and should state the granted level in the subscription response.

Zoom never changes simulation truth. A farm does not stop producing and a fire does not pause because nobody is looking. Zoom controls only projection, transmission frequency, aggregation, artwork detail, and animation. Commands continue to use authoritative object IDs and revisions rather than whatever simplified symbol is currently displayed.

LOD-specific performance budgets

Measure the zoom modes separately:

• strategic overview navigation should avoid dynamic chunk rebuilds and remain responsive using regional summary data;
• regional navigation should reuse transformed caches and start progressive refinement only after camera settle;
• Hex view should rebuild no more than one dirty local-scene layer per animation-frame work slice;
• changing one chunk must not invalidate unrelated visible chunks;
• overview and remote regional subscriptions must never receive 20 Hz individual movement streams;
• a dense crowd should degrade from individuals to groups before exceeding entity, byte, or frame-time budgets;
• switching between zoom modes must not create duplicate subscriptions, revision gaps, or a burst of full-world snapshots.

Current implementation status — strategic atlas and direction 02 regional art

• The client exposes Global, Region, and Hex controls and preserves the selected world hex across transitions.
• Global fits the complete known map, suppresses individual player and detailed mutable-object rendering, and uses sparse vector place symbols over cached cartography. Region imagery and manifests are deferred until a detailed view is entered.
• Region resolves the selected cell’s irregular 1–200-hex board, fits it with three surrounding rings, draws a clear active perimeter above the grid, and uses the one-hex landmark scale.
• Hex opens a bounded concept scene for the selected parent cell with four type-aware local interaction sites. The child sites are currently presentation-only; they do not yet mint authoritative local entity IDs or commands.
• Twenty opaque full-bleed landmark sources plus normalized 512 × 512 RGB WebP runtime plates cover settlements, strongholds, infrastructure, production, and discoveries. Each plate is clipped to exactly one parent hex in Region and may anchor a Hex scene; Global no longer loads these images. Direction 02's established Atlas v2 regional art replaces the rejected transparent parchment-diorama treatment. The manifest, binding prompt contract, and contact sheet live under public/assets/hex-landmarks/.
• Existing world generation, canonical cell IDs, mutable regions, multiplayer commands, and persistence are unchanged. The next authoritative step is the parent-hex/local-entity model described in the companion specification.

The first vertical slice must include a minimal economy

If economy begins only in Milestone 2, the first living-region milestone risks becoming a visual state demonstration rather than a game. Its systems should be connected by one deliberately small resource loop:

• farms consume timber and labor, then produce food on scheduled harvests;
• lodges produce timber, support forestry, and increase local fire detection or response;
• the settlement consumes food and can grow when its supply is reliable;
• trails reduce delivery time or transport cost;
• fire threatens farms, forestry, and the settlement's resulting supply network;
• recovery consumes resources and creates visible regrowth or reconstruction stages.

This gives every visible transformation a gameplay cause and consequence without requiring the complete later economy. A useful system design template is:

input and eligibility
→ visible warning or construction stage
→ opportunity for player/AI intervention
→ authoritative outcome
→ economic and visual consequence
→ recovery, adaptation, or lasting history

The vertical-slice exit criterion should therefore prove both the technical pipeline and the causal loop: two players create a small supply network, see it support settlement growth, suffer a fire-driven disruption, respond, disconnect, restart the server, and return to the exact same authoritative history.

AI requires an information model, not only command parity

Using the same commands and rules for AI and human players is necessary but not sufficient. Server-resident AI can accidentally become omniscient even when it pays the same resource costs.

AI decisions should operate on a faction knowledge projection containing only surveyed geography, observed threats, reports, remembered conditions, and appropriately delayed economic information. Each decision explanation should record the knowledge snapshot or relevant evidence used, not only the chosen action and score.

AI budgets should constrain decision frequency, search breadth, controlled unit count, and information freshness. This makes AI difficulty tunable without silently granting free resources or perfect knowledge.

Define world capacity and lifecycle early

The former 128 × 88 world contained 11,264 cells. A thousand persistent territorial players would have had only about eleven cells each before accounting for water, protected geography, settlement footprints, roads, and AI inhabitants. The existing thousand-client movement baseline demonstrates network and movement efficiency, not sustainable land capacity.

Before public persistence, define:

• expected concurrent and total active organizations per world;
• whether most players join shared settlements or claim independent territory;
• settlement and district footprint expectations;
• spawn distribution and crowding policy;
• inactive-player succession, decay, inheritance, and recovery rules;
• whether worlds are permanent, seasonal, periodically expanded, or archived into historical epochs;
• when a new world or shard opens.

Dynamic history will otherwise converge toward overcrowding, entrenched ownership, or an exhausted map even if the server performs perfectly.

Revised implementation architecture

Do not move durable world authority into worker threads solely because movement already runs there. The existing concentrated baseline reports substantial headroom for the current movement simulation. For the first slice, implement a pure ZoneEngine domain module and run it as a single writer in the main server process while existing workers continue handling real-time movement.

The ZoneEngine boundary should already communicate through explicit command, event, snapshot, and delta interfaces so it can move to a worker or separate process later without rewriting domain rules. This keeps the first recovery path simple and avoids introducing worker IPC, distributed persistence ownership, and cross-thread acknowledgement ordering before profiling demonstrates a need.

The shared generator extraction should also be narrower than moving all generation code out of game.js:

Pure shared world kernel
├─ seed/hash and canonical coordinates
├─ natural cell generation
├─ neighbors, cell IDs, and edge IDs
├─ regions, rivers, and immutable topology
└─ deterministic checksums and golden fixtures

Browser-only presentation
├─ canvas coordinates and caches
├─ artwork selection
├─ structural scene placement
└─ diagnostics and DOM datasets

One-time world genesis
├─ initial settlements
├─ ancient ruins and protected landmarks
└─ initial roads or historical traces

The shared kernel must not access the DOM, canvases, mutable browser state, artwork manifests, or timing APIs. Checksums should use a canonical representation with deliberately quantized numeric values. Golden fixtures for representative cells, topology, and the whole-world checksum should make generator changes explicit rather than silently blessing any output produced by the same shared implementation.

Milestone 0A — World invariants

Insert this milestone before shared authoritative geography:

• define player embodiment, organization ownership, and the human/AI actor contract;
• separate natural geography, world genesis, and mutable history;
• add and validate the persisted WorldManifest;
• define world time, event ordering, durability, and deterministic randomness;
• define aggregate revisions, zone sequences, and chunk replication revisions;
• choose the initial world capacity, lifecycle, and inactive-player policy;
• establish compatibility and migration rules for generator, genesis, simulation, and protocol versions.

Exit criterion: a written invariant and data contract answers who acts, what can change, how accepted history survives a crash, how a world retains its identity, and how clients recover ordered state.

Refined first implementation sequence

With Milestone 0A included, use this implementation order:

1. Persist and validate the world manifest before loading mutable world state.
2. Extract the pure coordinate, ID, seed/hash, and natural terrain kernel.
3. Extract immutable topology and add canonical checksums plus golden fixtures.
4. Move generated settlements, farms, cottages, castles, ruins, and roads into a one-time genesis layer without changing the displayed default world.
5. Define aggregate, event, job, command, and chunk-revision codecs.
6. Replace global marker delivery with interest-scoped chunk snapshots and ordered deltas as a low-risk replication proof.
7. Implement a single-writer in-process ZoneEngine with durable append-before-ack commands.
8. Implement the woodland settlement slice: effective vegetation state, manual timber gathering, CLEAR, PLANT, and generic structure construction for a town house, forest lodge, forester's lodge, lumbermill and watchtower.
9. Add scheduled forest harvest and maturation, settlement food/labor consumption, and one settlement growth transition.
10. Add fire warning, event-frontier spread, response actions, structure damage, ruins, demolition, repair, rebuild and elapsed-time regrowth.
11. Add START_FARM through the same terrain, job, footprint and rendering pipeline, proving that the system is general rather than forestry-specific.
12. Add authoritative strategic journeys, traffic aggregation, and trails only after persistence recovery and chunk resync are reliable.
13. Extend load tests immediately with commands, hot chunks, restart recovery, and delta traffic rather than waiting until the AI milestone.

This refined sequence keeps the original sparse-patch and scheduled-event architecture. PostgreSQL, a message broker, worker-owned world domains, and multi-machine zoning should still wait for measured pressure. The first deliverable should prove a small but complete living game whose visual changes, economic effects, multiplayer actions, and durable history all agree.

Next gameplay step — dynamic woodland settlement

Decision recorded 16 September 2026. The next step is not to expose the whole building catalog at once. It is one bounded woodland settlement in which the player can alter land, construct useful buildings, lose them, and recover. This is the smallest slice that proves the desired game rather than only a placement editor.

Implementation status — playable vertical slice

Implemented 16 September 2026:

• public/world-kernel.js is the shared pure generator and identity kernel used by browser, server and art-review probes. The production world checksum is pinned at 81e277f9; representative cells and the 91-cell development region have golden tests.
• ZoneEngine owns sparse vegetation, structures, inventories, staffing, jobs, fire-frontier events and chunk revisions. Commands are revision-bound and idempotent. Clearing, selective harvest, planting, analytical maturation, construction, production, damage, repair, demolition, salvage and rebuild all use this path.
• Accepted living-world changes append to durable storage before success is acknowledged. Snapshots retain the world manifest, exact domain state, receipts and revisions; startup rejects a mismatched seed/generator/checksum manifest.
• Multiplayer welcome, subscriptions, chunk snapshots/deltas and overview messages synchronize Greywood state. A full WebSocket integration test proves that a clearing order is persisted before acknowledgement and appears in another client's subscribed chunk.
• The selected-hex panel exposes the bounded region, real inventory, vegetation/structure revisions and contextual actions. A chunk-scoped client cache draws cleared, planted, thinned and burned ground plus planned, site-prep, foundation, frame, operational, damaged and ruined structures. Existing transparent motifs supply operational/ruin art and procedural fallbacks honestly cover missing lifecycle assets.
• Browser QA proved two-step clearing, timed construction, contextual controls and exact state recovery after reload. Automated domain tests cover all five first-slice buildings, one-time resource creation, staffing/production, damage/repair, ruin/rebuild, demolition/salvage, planting/regrowth and bounded fire spread.

Still outside the first-slice boundary: production-quality matched lifecycle artwork, automatic conflict/fire scenario scheduling, arbitrary generated-city conversion into constituent districts, and measured multi-machine scaling. Horse/logistics, a coastal fishing settlement and the fortified-center chain are now implemented continuation milestones rather than future claims.

Implementation status — regional readability and first industry chains

Implemented 16 September 2026 as the first continuation milestone:

• The current map footprint, generated geography and world identity do not change. Greywood remains the same 91 cells, two subscribed chunks and checksum 81e277f9; no generated biome, feature, road, settlement or Hero assignment is rewritten.
• Two surveyed deposits are derived deterministically inside that existing region: a shallow clay bed at cell 7222 (q26/r56) and the Greywood iron seam at the existing generated resource cell 7481 (q28/r58). Their remaining quantity, status and revision are sparse authoritative state. The original additive restore behavior is now restricted by the deposit-identity contract above: only an explicitly pre-deposit state/simulation-v1 save with no extraction evidence can receive initial seams. A present saved ledger must retain every expected seam; complete unmarked ledgers receive addresses only. Existing vegetation, structures, jobs and receipts remain unchanged. If a prior structure occupies a deposit cell, it remains authoritative and the extractor cannot be placed until that footprint is lawfully cleared.
• clay-pit → clay → brick kiln + logs → bricks and iron-mine → ore, logs → charcoal kiln → charcoal, ore + charcoal → smithy → iron + tools are complete interruptible production chains. Staffing, inputs, condition and deposit exhaustion can pause them. Extraction decrements the deposit once per production cycle; an exhausted deposit cannot mint material on later advances or restarts.
• Clay pit, brick kiln, iron mine, charcoal kiln and smithy use the existing staged construction, staffing, damage, repair, demolition, ruin, salvage and rebuild rules. Their server definitions remain semantic. The client recipe manifest maps the existing mine-entrance and farm-shed motifs where honest and uses explicit procedural fallbacks for the open clay pit and charcoal mound rather than presenting opaque Hero paintings as removable objects.
• Chunk snapshots and deltas now include surveyed deposits. The selected-hex panel identifies the deposit and remaining amount, exposes all new building definitions, and reports clay, bricks, ore, iron, charcoal and tools. The local map draws deposit symbols below structures; changed forest ground remains legible at regional zoom while tree/stump detail appears only at local zoom. The minimap now agrees about changed vegetation, deposits, intact buildings, damage and ruins.

This milestone deliberately does not enlarge the mutable boundary. Generalizing subscriptions now means every mutable component travels through the same chunk contract, not silently turning the entire static atlas into writable state. The next spatial milestone can add a second explicitly manifested zone and migration rules after the resource chains prove stable.

Implementation status — horses and construction logistics

Implemented 16 September 2026:

• Managed pasture is an authoritative structure that produces feed when staffed. Shared-development stables require two real horses during commissioning, retain them as structure inventory, consume feed and produce legacy haulage stock. Chartered stable production is now inactive as described in the construction-handcart delivery above.
• In the shared-development prototype, haulage and tools are spent once when structural work begins and reduce its duration. New chartered structural work uses optional consumed tools and the explicit borrowed-handcart policy above; retained haulage is inactive. Rejected commands restore those reservations with the rest of the transaction.
• Ruined or demolished stables no longer retain usable resident horses. Rebuilding requires replacement horses. The shared damage, ruin, salvage and rebuild lifecycle applies to both pasture and stables.
• Existing Pastureland paintings remain regional palette/reference material. The live pasture uses an honest procedural fenced-ground fallback; the stable uses the transparent generic farm-shed motif until a matched stable lifecycle pack exists.

Implementation status — two mutable regions, Tidebreak and fortified centers

Implemented 16 September 2026:

• Simulation/manifest version 2 adds mutableRegions while retaining developmentRegion as the exact Greywood compatibility alias. A verified additive migration accepts only a v1 manifest with the same seed, generator, checksum and 91-cell Greywood boundary. It then adds Tidebreak without rewriting or deleting old vegetation, structures, jobs, receipts or inventory.
• The unchanged generator deterministically selects Tidebreak Coast at cell 10060 (q37/r78). Its 61-cell radius-four region contains 31 fields and 30 existing ocean cells across chunks 4,4, 4,5 and 5,4. Geography checksum remains 81e277f9; no coast, water or settlement feature is invented.
• Region subscriptions now admit all manifested mutable chunks. Chunk snapshots/deltas carry vegetation, finite deposits, renewable stocks, jobs and multi-cell structures. The client can cycle between Greywood and Tidebreak, selects the correct settlement inventory, and draws fish stocks, footprints, damage and ruins at local, regional and minimap LOD.
• Tidebreak owns a separate labor pool and inventory. Three deterministic shoreline fish stocks recover analytically from their retained authoritative time. The renewable-stock identity boundary above now rejects missing or conflicting saved rows instead of recreating them at capacity. Staffed fisheries deplete them; landing, smokehouse and housing support fish → preserved fish. The fish market originally completed that chain as tradeGoods; the newer rule above retires that automatic output and sells preserved fish by dated physical caravan for finite communal coins.
• Tidebreak progresses from landing-camp to fishing-hamlet, fishing-village and fishing-town only from operational constituent structures. Ruining required fisheries regresses the settlement and records displaced population; rebuilding restores the specialization. “Fishing town” is therefore not a placeable sprite.
• Fortification progresses from operational watchtower to three-cell keep to seven-cell stone castle. Every footprint cell must lie in one settlement, have compatible cleared terrain and be unoccupied. Keep and castle consume bricks, iron, tools, timber and food created by prior chains. Damage leaves full-footprint ruins; repair/rebuild, demolition and material-specific salvage operate through the same durable command path. Greywood correspondingly progresses through camp, fortified-camp, stronghold and castle-town, and regresses if the required fortification is ruined.

Opaque Fishing Village, Port Town, Harbor City, Stone Castle and Ruined Castle paintings remain macro projections and art references. They are not swapped in as authoritative removable structures because their terrain, scale and compositions do not form matched lifecycle sets. Current operational objects use transparent motifs where semantically honest and named procedural fallbacks otherwise.

Why this slice comes first

Forestry connects the most important missing capabilities in one readable loop:

wild forest
→ selective felling or clearing
→ logs
→ sawpit/lumbermill
→ construction timber
→ houses, forestry buildings and defense
→ damage, ruins and salvage
→ repair/rebuild or returned land
→ planted forest and elapsed-time regrowth

It exercises mutable terrain, a renewable resource, processing, housing, labor, fire risk, destruction and rebuilding without needing the complete trade, metallurgy, animal or naval simulation. A small starting timber reserve or manual sawpit capability prevents the first lumbermill from depending on itself.

Existing art: use it by role, not by filename

The current library is valuable but was authored mainly to make a finished deterministic atlas, not a construction game. Treat the assets in three groups:

The current runtime assigns Hero art during deterministic client generation and bakes terrain, Hero scenes and companion motifs into a shared static scene cache. Multiplayer mutations are only flags drawn above that cache. A dynamic building must therefore come from authoritative structure state and a separate dynamic cache; changing cell.feature or swapping the selected Hero is not a valid implementation.

Existing art should be mapped to semantic presentation recipes instead of referenced directly by domain rules. Simulation says structure.definitionId = "watchtower", stage = "operational", condition = 82; the client chooses an allowed recipe for the terrain, climate, LOD and art version. Missing artwork falls back to an honest footprint, stage mesh or icon without changing simulation truth.

Forest state

Forest is an effective physical state, not only the generated forest biome or the presence of a forest painting. Persist only changed values:

VegetationPatch {
  cellId,
  revision,
  cover,             // 0..100
  maturity,          // 0..100; harvestability uses a threshold
  health,            // 0..100
  speciesGroup,
  management,        // wild, conserved, coppice, timber, recovering
  disturbance,       // none, thinned, clearcut, burned
  lastAdvancedAt,
  nextDueAt
}

Generated moisture, temperature, soil and species suitability remain inputs. cover and maturity advance analytically from lastAdvancedAt when the cell wakes. Planting creates saplings, not timber. Harvest removes a bounded quantity from cover/maturity and creates logs once. Forester work raises establishment and health or reduces fire loss; it never creates instant mature trees. Clearcut, thinned, burned and recovering cells have different erosion, habitat, visibility and fire behavior.

Rendering should form coherent forest patches from neighboring values rather than stamp one tree icon per hex. Use the existing mature forest materials for the mature endpoint. The minimum missing vegetation art is cleared/stump ground, saplings, young woodland, thinned woodland and burned/charred ground; grassland/open-ground material can support recovered clearings where compatible.

Structures and destruction

Structures are first-class entities with multi-cell footprints and must not be stored in the single CellPatch.structureId field proposed earlier. Replace that scalar with a per-cell occupancy index derived from structures:

Structure {
  id,
  definitionId,
  anchorCellId,
  footprintCells,
  orientation,
  ownerId,
  settlementId,
  stage,             // planned, sitePrep, foundation, frame, operational, damaged, ruined
  condition,         // 0..100
  staffing,
  inventory,
  jobId,
  revision,
  changedAt,
  nextDueAt
}

CellPatch continues to own land use, vegetation, soil, hazard and condition. A chunk-local occupancy index answers which structures touch a cell and is rebuilt from authoritative Structure records after recovery.

Construction and destruction use one persistent lifecycle:

planned → site preparation → foundation → frame → operational
                                                ↓ damage
cleared land ← salvaged ruins ← ruined ← damaged
                    └──────── rebuild from surviving foundation ────────┘

Damage reduces function before it changes stage. At zero structural integrity, a building becomes ruins; it does not disappear. Demolition is an authorized job with time, debris and bounded salvage. Enemy razing is repeated structure/district damage under war rules, not a magic “delete city” command. Roads, cellars, foundations, pollution, graves and ownership history may remain. Rebuilding can reuse sound foundations and should normally be cheaper than starting on untouched land.

Cities are settlements composed of structures, population, land use and networks. A fishing town or city is therefore not one destructible sprite. Razing enough constituent districts can change settlement.stage to ruins, displace inhabitants and stop institutions; rebuilding restores functions building by building and may create a different specialization.

Building lines and order

All requested structures belong in the game, but their dependencies define the rollout:

Forest lodge and forester's lodge have distinct purposes. The forest lodge supports hunters, scouts, fire watch and workers in a remote district. The forester's lodge or nursery plans planting, thinning and recovery. The lumber camp extracts logs; the lumbermill processes delivered logs. These may share early placeholder art but must remain different domain definitions.

Minimum new art contract

Do not commission another large set of finished place paintings before the stateful asset contract exists. Add a dynamic-recipes manifest with:

• semantic definitionId, terrain/climate tags, footprint and anchor;
• projection role: ground decal, vegetation, structure, damage, effect or overview symbol;
• lifecycle stage and condition band;
• world-space scale, orientation support, contact/shadow mask and occlusion bounds;
• source and runtime paths, alpha mode, art version and fallback recipe;
• compatibility tests showing every recipe on its intended terrain at regional and local zoom.

The first production pack should contain:

1. cleared/stump, sapling, young, thinned and burned forest treatments;
2. generic site-preparation, timber-frame, stone-foundation, scaffolding, rubble and salvage treatments;
3. operational/damaged/ruined silhouettes for town house, forest lodge, forester's lodge, lumbermill and watchtower;
4. small smoke, forge/fire, dust, work and occupancy effects kept on the live layer;
5. overview symbols or district textures so a changed region remains readable when individual buildings are hidden.

Use transparent, tightly cropped, premultiplied-alpha runtime WebP for individual objects. Authoring dimensions may vary with footprint; manifest world scale is authoritative. Full-bleed RGB landscape plates remain appropriate for terrain replacement and macro scenes, not toggled object sprites. Generic construction and rubble art should cover most stages so each building initially needs only operational, damaged and ruined silhouettes.

Interaction contract

Selecting a mutable cell or existing structure opens one consistent action surface:

1. inspect generated origin, effective terrain, land use, rights, occupants and known resources;
2. choose Manage forest, Build, Repair, Demolish, Salvage or Rebuild as applicable;
3. preview footprint, terrain changes, removed vegetation, inputs, labor, time, upkeep, risk and affected neighbors;
4. show unmet requirements with remedies and never hide unavailable definitions;
5. submit a revision-bound quote with an idempotent command ID;
6. track the accepted job on-map and in the order queue;
7. explain blocked, damaged, abandoned and completed outcomes from authoritative events.

Razing another owner's structure appears only through the conflict system with authority, target, warning and consequences. Peaceful owners receive demolition, not an unrestricted destroy button.

Slice boundary and acceptance

The development world contains one bounded mutable region; the rest of the production world remains visually and mechanically unchanged. The vertical slice is complete only when:

1. two clients see the same forest cover, structures, stages and inventories;
2. clearing creates logs once, changes effective vegetation and invalidates only affected dynamic chunks;
3. planting survives restart and matures from elapsed world time without per-cell ticking;
4. players can construct, staff and operate a town house, forest lodge, forester's lodge, lumbermill and watchtower;
5. output pauses when staffing, inputs or terrain requirements fail and resumes without recreating the building;
6. fire or a controlled raid can damage and ruin structures while leaving inspectable history;
7. repair, demolition, salvage and rebuild produce bounded material flows with no duplication exploit;
8. destroyed structures disappear from the operational projection, ruins remain, and the underlying terrain does not retain a baked intact building;
9. reconnect, server restart and snapshot/event replay restore the exact state and revisions;
10. regional and local LODs agree about cover, settlement extent, construction, damage and ruins within the existing frame and cache budgets.

Detailed asset-to-building mappings and catalog consequences are maintained in Mutable terrain and the building library. Implemented, M8/W2 receiving release flood screen (partial): For a graded exact outlet, each verified retained-window interval compares the receiving basin after proposed release against the same candidate reservoir interval with the outlet closed. The comparison fixes that interval's opening sediment bed in both branches, identifies receiver land newly wetted by release, and totals its current charter claims, standing structures, improvements and pending land projects. Source City shows the affected hexes and an explicit blocker when any are found. It does not equate all natural-versus-proposal flood changes with outlet damage, predict future high flows or clear the remaining W2–W4 engineering, rights and construction gates. See gameplay foundations, major waterworks plan, implementation status, player guide and technical reference. Implemented, M8/W2 receiver building-pressure comparison (partial): The paired graded-outlet replay now checks standing buildings in the receiving catchment for a higher depth-based flood rate even when their land was wet before release. It sums additional rate points across verified intervals, counts affected structures and newly wet usable well connections, and names present charter communities without exposing their private condition. The source review adds a specific blocker and includes those communities in the exact notice-party set, including when no land changes dry/wet status. City shows the added pressure beside newly wet hexes. This remains conditional recorded-window evidence, not a future design flood or permission for W3/W4 construction. See gameplay foundations, major waterworks plan, implementation status, player guide and technical reference.

Approved-only map artwork — October 7, 2026

Implemented: the asset library now stores a distinct 100% approved by AI per-file review, false by default and tied to exact SHA-256 bytes. The direct visual audit accepts 16 local terrain paintings and 15 compatible one-hex portraits; production labels and old review history do not grant this new approval. Five geography-conflicting portraits, six superseded terrain paintings and all missing/unreviewed artwork remain unapproved. The complete decision inventory and maintenance workflow are linked from Asset metadata.

The world presentation is regenerated from public/approved-world-art.json: both ordinary Region/Hex and explicit art-review views admit only whitelist image paths. Image loading and inspector previews enforce the same gate. Packed atlases, derivatives, neutral macro plates, connectors and structural paintings have no implicit exception. Global remains procedural/vector; forest, mountain and wetlands have no newly approved ground and retain procedural geography. Mutable structures without approved motifs retain procedural footprints and stage visuals. These routing rules supersede the earlier production-label-based art loaders; historical r155 release statements remain evidence of that release, not permission under this policy. Regeneration rebuilds visual presentation of the current seeded world, without changing canonical geography, structures, accounts or saves.

The Art Atlas now offers 19 sort criteria, ascending/descending order, AI approval and availability filters. Numeric size sorting uses the largest matching file, unknown values stay last, and sorting runs over the complete filtered index before pagination. Combined metadata filters match individual files and constrain previews and expanded metadata. URLs preserve all selections. Approval is an artwork judgment, not a claim that a planned gameplay object or whole-map performance gate is complete.

Landmark blending correction — October 10, 2026

Implemented: Region and Hex share public/landmark-composition.js, with individually authored subject/contact contours for the 11 retained approved landmarks. The renderer retains the subject and a narrow soft apron, exposing canonical terrain around it. It does not draw the source painting as an opaque hex, blur the building, or overlay a replacement ground tile. The contact cache is bounded to 8 MiB (2,097,152 RGBA pixels), shipped with client cache revision landmark-blending-2. Source bytes and their approval checksums remain unchanged; approval is for this composed use, not opaque terrain replacement. Four forest/mountain landmarks (forest shrine, lumber camp, iron mine and stone quarry) lose approval because no suitable painted base exists. The five previously withheld landmarks remain withheld. Allowed profiles are now explicit: fields for ten landmarks and desert for the caravanserai; the observatory and spring cannot spill into unreviewed terrain contexts. The current whitelist contains 27 files: 16 terrain sources and 11 landmarks. This supersedes the earlier one-hex plate treatment.

Hex exploration uses approved biome ground behind the same contact sprite, with procedural geography for profiles without reviewed paintings. Its floating hex clip, dark panel and decorative halo are removed; local concepts remain in More map options. Region/Hex controls, selected cell, geography, saved world and order eligibility are unchanged. See three-scale map design and the blending audit.

Feature-bound location illustrations (October 10, 2026)

Implemented: both Region and Hex select a shared illustration from the canonical cell feature, reviewed biome and required contact composition. Terrain and catalog category fallbacks are removed. Empty desert, dunes and natural oases no longer become caravanserais. Resource deposits cannot become markets; villages cannot become farm estates. Cities, towns, farmsteads, farmland and ruins have separate illustration pools. When no matching approved art exists, Hex keeps local terrain and identifies the real feature in its visible heading and More map options. The coordinate's generated place name is distinct from the reusable illustration's title; illustrations do not establish settlement ownership, capital status or playable local actions. This supersedes earlier biome-based Hex portrait substitutions. The 27-file approval whitelist, source bytes, saved world, seed and simulation remain unchanged. See three-scale map design.

Continuous evolving region composition — October 11, 2026

Implemented and locally accepted: a reusable world-space composer and woodland pilot, under the maximum October 18, 2026 deadline (04:18 UTC / 06:18 Copenhagen). See Continuous evolving regions for the acceptance evidence and limits. The supplied image remains the art direction; this woodland delivery does not claim its full world-wide richness.

Region boundaries never reset terrain or scenery. Neighboring views share the same terrain phase, canonical geography, fixed world-coordinate vegetation candidates, scale and light. Coherent density adds wooded masses and quiet gaps without using a planning-region ID as a seed. The woodland floor is calibrated at three hexes per source span after the landscape-mass review; shared lattice indices keep it continuous across camera movement and region selection. No client-only decorative river or road becomes authoritative geography. Existing water, land works and simulation remain the source of truth.

Ground, canopy and buildings are separate. Actual cover, maturity, disturbance and hazard change removable foliage; clearing/burning reveals softly blended ground, planting shows young growth and sparse cover retains a stable visible candidate. Actual occupied structure footprints remove canopy and replacement canonical portraits. Matched forest-lodge foundation, frame, operation/damage and ruin art replaces each prior stage, with calibrated contacts and depth ordering. Region and Hex use the same source and state; Hex identifies an actual structure's current stage instead of calling it open terrain. Unsupported art contexts retain procedural presentation.

Eight new exact woodland files passed native source, context and lifecycle review. The whitelist now contains 35 files (the prior 27 plus eight), and nine of eleven terrain profiles have reviewed paintings. Forest has a quiet canopy-free floor; mountain and wetlands remain procedural where matching approved ground is absent. Three framing/platform candidates remain unapproved. Approval binds exact bytes, role, biome, age/stage, structure definition and scale/anchor; it does not grant a gameplay action or another context. The asset library exposes Living region components with separate roles and lifecycle metadata.

Production and isolated preview use the same composer. Real disposable ZoneEngine commands verified clearing, planting, regrowth, construction, damage, repair, demolition, rebuilding and saved-state reload. Neighbor overlap and actual-command tests retain stable identities and clear occupied footprints. Mobile 390×844 and desktop 1250×720 checks reviewed forest/field transitions, neighbors and the lodge in Region/Hex. Quiet canopy bands use a bounded 32 MiB cache; bands containing sites retain individual depth-ordered objects. Warmed browser samples were about 10 ms mobile and 7.5 ms close desktop, with initial source/cache work separate; these are measured samples, not a universal device guarantee.

Saved world ID, generation, seed, ownership, stocks, structures, costs and timings are unchanged. The release regenerates approved artwork and client composition rather than replacing the simulation save. More biomes, additional matched building families and connected geographic water/road improvements remain planned and require contextual review. Full painterly reference coverage is not yet implemented.

Forest identity and observed-water composition foundation

Implemented: two existing paintings, forest shrine and lumber camp, now use reviewed foreground/contact contours over the shared woodland floor. Their outer forest plates are excluded. Only canonical forest magic/resource features select them; a resource illustration does not grant a working lumbermill. Real constructed structure footprints still take precedence. The exact-file whitelist now has 37 files, including 13 canonical landmark contacts and the eight woodland components; nine of eleven terrain profiles have approved paintings. Region/Hex and mobile/desktop contextual review passed. No location names, seed, generation or saved gameplay state change.

Implemented foundation: public chunk snapshots carry read-only retained surface water and latest completed transfer edges. Both ends of a crossing receive the same full edge identity; affected chunks receive wet and dry interval updates, and reload reconstructs the projection from the authoritative ledger. Retention uses abstract game-water units, not measured pond or flood depth. Potential watershed drainage and cumulative historical transfers are insufficient evidence for flowing rivers. Routing, rainfall, rights, inventories and simulation accounting remain unchanged.

Planned visual work: the first runoff painter failed review because dispersed runoff appeared as parallel blue channels. It was removed. No new river scenery is claimed playable or accepted. The broader painterly pilot, richer settlement families and geographic water/shore composition remain part of the active one-week goal, including seamless surrounding regions. See the current acceptance and decision log.

The library’s combined AI-approved and terrain filters also require the declared reviewed biome; broader intended compatibility alone cannot advertise approval for another context.

Matched village settlement artwork — October 11, 2026

Implemented: village commons, lumbermill workshop and community food plot now have separate transparent foundation, frame, operational, damaged and ruined sources. Fifteen exact files passed native alpha, actual command, neighbor, mobile/desktop and saved-reload review. The current whitelist has 52 files: 16 terrain sources, 13 canonical contacts and 23 living components. This supersedes the previous 37-file count, without widening painted terrain coverage. Commons and food-plot art is approved for the grassland rendering profile only; mill art also fits cleared woodland. Fields/hills and other unreviewed contexts keep simpler presentation.

Real structure definition, footprint, stage and review context choose the source in Region and Hex. Foundation interiors expose the existing terrain; food furrows end at an irregular contact rather than a hex plate. Dedicated damage sprites replace the generic crack on these families. Artwork changes only when authoritative structure state changes; planted-row illustration is not a crop calendar, stored food or extra yield. The commons remains one founding-provided structure, and the manual sawmill does not imply a waterwheel or river. Existing costs, staffing, production and ownership rules are unchanged.

The regional manifest is requested with the approval-release version and cache revalidation, preventing browsers retaining old source registrations after deployment. The live save and geographic seed remain preserved. Coherent geographic water/shore scenery, broader settlement context coverage and complete reference-level pilot acceptance remain planned under the active one-week goal.

Geographic shore composition — October 11, 2026

This milestone supersedes the prior 52-file / nine-profile presentation status: 55 exact files now cover ground for all eleven terrain profiles. Existing upland-ground-v4 passed contextual review; newly reviewed quiet wetland soil replaces painted channels. The first wetland soil draft was rejected for conspicuous repeating peat bands. The asset ledger is tile-library/shore-review-2026-10-11.json; approval remains exact-byte and role/context specific.

Region and coastal Hex views now share a canonical ocean/lake contact field interpolated between saved cell centers. Terrain phase, shore geometry and sparse low limestone contacts use world coordinates across surrounding administrative regions. An opaque ocean foundation no longer covers unpainted land. Geographic centers, playable cell ownership and world identity remain unchanged; regenerating presentation does not reset the saved simulation. The same mask preserves coherent land and water in neighboring views and after reload.

Shore details require the reviewed forest, mountain or wetland land profile, ocean/lake water domain, contact anchor and native width. Occupied construction footprints and reserved canonical subjects suppress bank details. Decoration creates no watercourse, building, resource, movement permission or survey result. Dynamic canopy and actual structure stages continue to use authoritative state.

The one-week regional goal remains active through October 18 at 04:18 UTC. Geographic shores are implemented; flowing river scenery, broader reviewed contexts and the complete reference-level pilot remain planned. The observed-water projection now feeds the restrained damp-earth presentation described below. See regional composition goal for acceptance and remaining work.

Observed wet-ground composition — October 11, 2026

The earlier data-only observed-water status is superseded for wet-ground presentation. Retained abstract surface water now produces restrained dark earth contact, and positive transfers in the latest completed observed interval produce narrow damp traces. Dry intervals remove old traces and lower retained quantities reduce the contact. Region and Hex use the same world-coordinate plan beneath vegetation and buildings. Geographic ocean/lake shore geometry remains separate and supplies land clipping; no wet-ground trace creates a perennial river, water inventory, gathering site, travel route or permission.

Public chunk projections are the only state source. Potential drainage, cumulative transfer history, rainfall guesses and unobserved intervals cannot create wet transfer art. Stable cell/edge identities agree across neighboring views and saved reload. Only changed surface projections invalidate the moisture plan; unrelated settlement changes reuse it. Caches are bounded to 32 viewport plans and eight MiB of raster contact, with images painted before eviction.

Real paid local surveys/stations and subsequent surface-water intervals reviewed wet, drying, dry and wet-again behavior in the production renderer. Desktop Region and Hex and the actual 390 by 844 mobile viewport passed review. A sampled warm mobile frame was 6.2 ms, with source preparation and interval repaint costs separate. World state and the 55-file approval whitelist are unchanged. The full one-week goal remains active; larger landscape forms, engineered waterway presentation and complete reference-level pilot acceptance remain planned. See regional composition goal.

Canonical landscape relief — implemented 2026-10-11

Region and Hex now compose broad transparent granite ridges at existing canonical mountain peaks cells. Two separately reviewed silhouettes use stable world seed/cell identity, exact ground anchors and native width 168. Region ownership, camera position and reload cannot reselect or reposition a ridge. Occupied structure footprints exclude this scenery. No additional mountain, resource, settlement, river or traversal rule is generated. Saved world identity and seed remain unchanged.

Three older transparent mountain candidates remain unapproved for this role: their closed oval bases stood apart from the ground at Hex scale. Two high-resolution siblings derived through built-in ImageGen from existing granite art and the already-approved upland material passed native, Region/Hex, surrounding fields/cold-region and mobile/desktop review. Their irregular rocky footslopes blend with the continuous upland foundation. The exact-file whitelist is now 57 images with eleven painted ground profiles. Review decisions are in tile-library/relief-review-2026-10-11.json; exact prompts and original locations are retained beside the sources.

Hex foreground now fills the map viewport and shares the ground projection, with framing that fits the selected broad ridge. This replaces its former 512-square window and offset inner stage, which cut off larger subjects and mismatched ground scale. Region uses bounded 256-pixel relief sprites within the existing eight-MiB shared sprite cache; Hex uses the reviewed native image. Warm mobile Region sampled roughly 10 ms; cold material preparation remains a separate larger cost. The full detailed pilot, evolving land-use/waterworks presentation and final acceptance remain within the active one-week goal. See regional composition goal.

Working land in regional composition — implemented October 11, 2026

Region and Hex now paint the same authoritative soil, fallow, terrace, local-road, irrigation, drainage, retention and currently projected major-waterworks records through a shared world-space working-land painter. Irregular translucent earth contact and restrained furrows replace the opaque hex soil plate. Paths use recorded usable neighbors and meet at a common midpoint across cells and region boundaries; removals remove the corresponding detail. Irrigation/drainage records show a short earth channel directed toward their actual recorded endpoint, without fabricating a surveyed route between distant cells. Reserved engineered sites show stakes, dry channels show excavation/accepted lining, closed controls retain their physical closure and foundation courses follow placed lifts. These illustrations grant no water movement, storage, new resources, permissions or construction completion.

Saved fallow soil suppresses the operational community-field crop image and retains a small field boundary over worked ground. Crop art remains a building illustration rather than a crop calendar or proof of production. Conditions, use and removal come from existing saved plots and effective-cell projections; ground patterns remain anchored to canonical cell IDs. Relevant chunk revisions invalidate the Hex ground cache, and land is painted beneath its living objects using the same projection. The saved world and all existing paid commands remain intact. See regional composition goal for acceptance evidence and the remaining reference-level pilot work.

Continuous ground and fuller woodland — implemented October 11, 2026

Region and mixed-terrain Hex now blend approved native materials using one canonical triangular cell lattice. Complementary weights add to opaque land coverage before the existing shared shore clip, removing the coarse continent-preview color bands that the old irregular inland masks exposed. Each canonical land center retains its native material; only the contact interpolates. Native texture phase, cell identities and shared neighboring triangles do not depend on the selected region. Ocean and lake geometry remain authoritative and unchanged. Ground accumulation is temporary, limited to four million pixels and released after painting. Geometry accepts at most 16,384 cells; extreme views retain the existing renderer instead of throwing.

The woodland composition lattice is denser at 32 world units while its 480-unit chunk span stays fixed. Existing two mature source families have balanced stable variation. Authoritative cover, maturity, disturbance, occupied footprints and source contracts continue to control appearance: sparse young regrowth does not become mature forest, and cleared construction land stays clear. This is a presentation version change; saved vegetation and gameplay are unchanged. All 57 exact approved images and eleven painted ground profiles remain the gate.

Desktop and mobile review covers both neighboring views, woodland/grassland/cold contacts, the actual coast, saved young regrowth and a paid fallow field. The full combined reference-level playable pilot and consolidated lifecycle/live acceptance remain within the active goal and original October 18 deadline. See regional composition goal.

Combined village and registry contact review — implemented October 11, 2026

The combined saved pilot now composes a real commons, food plot, lumbermill and staffed registry alongside maintained soil, irrigation, local paths, replanted/harvested woodland, returned runoff observations and the existing neighboring lake. Shared terrain, canopy positions and shore geometry continue across west/east planning-region boundaries. The same production composer handles Region and Hex; disposable fixture selectors and normal paid commands supply review state. No live inventory, geography, ownership or permissions are regenerated.

Five exact registry-office images replace its generic building fallback on the reviewed grasslands rendering profile. The office has a distinct roof, windows and noticeboard; foundation, frame, operational, damaged and ruined states retain the same transparent stone footing. Actual damage, repair, demolition and paid rebuild were reviewed at desktop and phone sizes. The approval whitelist is now 62 exact files; unreviewed terrain/stage contexts retain their existing fallback. Exact original image-generation outputs and prompts are retained, with checksum/stage/definition/profile contracts in the asset library.

The combined pilot also reviewed genuine programme supply shortages, woodland harvest/processing, worn paths and their paid maintenance, wet observations, dry intervals and renewed wet ground. This supersedes the earlier data-only observed-water statement: restrained damp earth is implemented; perennial river art remains planned. The repository retains combined acceptance evidence in docs/regional-review/acceptance.json. See regional composition goal for scope and the final deployment acceptance.

Selected regional pilot acceptance — completed October 11, 2026

The selected woodland/grassland/lake pilot and reusable composition system meet the one-week goal acceptance. Desktop and phone reviews cover close/ordinary Region, Hex and surrounding regions; canonical scenery and geographic contacts share world coordinates. One real saved pilot proves paid vegetation, construction, damage/recovery, working-land maintenance and wet/dry observations. The normal whitelist/reload audit, 63 scoped regressions, five wiki checks and live release verification pass. Source prompts, exact contextual approvals, command journal and screenshots remain in docs/regional-review/acceptance.json.

This completes the selected pilot toward the reference, with the October 18 deadline met early. Wider biome/building source families, additional landmark variety and permanent river scenery remain planned extensions. The live player save and geography are preserved; the disposable test village was not inserted into the live world.

Complete regional landscapes — new active goal, October 11, 2026

The user has requested completion of all remaining regional design gaps, beyond the accepted woodland/grassland/lake pilot. The new maximum one-week window runs from October 11 at 15:18:32 UTC through October 18 at 15:18:32 UTC (17:18:32 Copenhagen). Landscape richness, scenery across all eleven profiles, distinct canonical locations, connected state-grounded waterways, all supported building lifecycle families/contexts, and broad neighbor/mobile/desktop/reload/live validation are all required. The previous selected-pilot completion is historical baseline evidence and does not close this scope. See full completion goal and its six explicit gates. Existing saved geography, player commands and inventories remain unchanged; this paragraph records planned work, not new playable features.

Regional landscape increment — conifer ages and quiet ground contacts (October 11, 2026)

The current composer distinguishes authoritative conifer woodland from mixed broadleaf. Two native mature pine/fir silhouettes and matched young/sapling cutouts now have exact forest-only approvals. Native aspect and explicit foot anchors keep roots stable between Region, Hex and reduced sprites. Natural forest edges taper toward canonical neighboring nonforest terrain without reseeding at region borders. The retained candidate uses the same edge-weighted ranking at every age, so paid clearing and subsequent regrowth preserve world positions. Missing neighboring cells invalidate incomplete cached plans when they become available.

Small scrub and subdued low limestone contacts are approved only for natural forest/grasslands cells with no canonical subject. They are background detail, not new locations or resource stock. Ordinary open ground can have decorative low scrub while authoritative tree cover remains zero. Actual clearcut/burning suppresses living scrub; mineral geology can remain after tree clearing. Occupied structures and worked soil, irrigation, terraces, drainage and paths suppress both kinds. The existing actual state, costs and placement quotes still determine what players can do. Other landscape profiles, planted-field canopy contexts and fuller location/building/waterway coverage remain open in the full completion goal.

The production approval gate now contains 68 exact files, including these six unchanged native sources. Landscape roles require exact material kind, feature, profile, state, width and anchor approval. regional-composition-3 and regional-landscape-1 supersede the prior pilot's canopy/version policy; earlier version and performance notes remain historical capture evidence. The derived audit still has only 30/835 building stage/profile combinations and no complete building definition; natural detail covers two of eleven profiles. All six full-goal gates remain open. Local evidence distinguishes actual mature canonical woodland/phone rendering, the illustration age study and paid warm-woodland lifecycle tests; it does not claim a paid cold settlement or full-world performance acceptance.

Production verification on 11 October 2026 confirmed the landscape renderer, all 68 exact approved source hashes and unchanged world/instance identities at release 7cc8d4e. The library uses app.js?v=landscape-context-1 so immutable browser caches fetch its new landscape review descriptions. This verifies the increment, with every full-world completion gate still open.

Exact terrain contacts and shared observed-water junctions (October 11, 2026)

Five additional native transparent details passed actual canonical desktop and 375-pixel phone Region/Hex review: marsh reeds, dryland scrub, tundra moss/grass, quiet ocean/lake highlights and pale arctic snow stones. Dark arctic slate failed the real snow contact review and remains unapproved; the lighter replacement passed. Existing temperate scrub extends to fields/hills and subdued stone to mountain in reviewed contexts. That terrain-detail increment raised the exact whitelist to 73 files. All eleven profiles have approved ground and at least one low detail source, but that small-source inventory does not satisfy the broader richness, location variety, building family or waterway acceptance gates. Building coverage remains 30/835 stage/profile contexts, and all six full-goal gates stay open. See terrain review evidence regional-review/terrain-detail-increment.json and the completion criteria.

regional-landscape-2 keeps the original exact source approval contract and shared fixed lattice. Natural features receive one stable anchor owned by one world chunk, resolving reed beds that incidental scatter left empty. Real occupation, worked footprints, burning and clearing still suppress applicable contacts. The separate water-surface material admits only wild ocean/lake, feature none, and requires all six neighboring canonical cells to be water; unloaded or land neighbors suppress it. It creates neither water quantity nor a river route. Naturally bare ocean/lake never receive vegetation scars; low cover alone only indicates a cleared forest. Actual burned land and clearcut forest retain their truthful disturbance appearance.

The read-only surface-map projection now includes junction headings computed from the complete latest positive observed transfer graph. Both endpoint chunks receive identical normalized headings, enabling regional-moisture-2 to join damp-earth cubic curves at exact shared cell centers. Historical or dry intervals retire the contacts. Old projections retain the established curve fallback. No saved ledger, routing amounts, simulation identity or geography is changed. Paid station engine regressions cover wet/dry/reload; the local phone review advanced monitor ticks 110–114 and reloaded tick 114 with 168 visible transfer traces. That local run remained wet; it is not new dry/resumed UI or permanent-river evidence. Wider works/flow transition and worldwide acceptance remain open.

The native rural-place increment implements two distinct illustrations each for canonical village, cottage and farm features in fields, grasslands and hills. regional-places.js accepts exact regional-place-1 source/context contracts and selects by world seed, canonical cell ID and actual feature, independently of region or camera. Native transparent PNGs retain their aspect and reviewed foot anchors; ground remains the shared world material between every building. Region and Hex use the same source. Actual paid building footprints take precedence over static canonical illustrations. Small-screen Hex framing leaves the right-hand map controls clear. These portraits create no settlement, owner, stock, land project or constructible definition. Six sources passed actual canonical desktop/375-CSS-pixel phone Region/Hex review across eighteen source/profile contexts; a saturated earlier village was rejected and remains unapproved. The exact whitelist advances to 79 files. Rural source and composition evidence regional-review/rural-place-increment.json records the real coordinates and 72 captures. The full completion goal stays active: other location families, tundra rural contexts, broader scene richness, complete building lifecycle families and waterway acceptance remain open. Building coverage remains 30/835 stage/profile contexts; no full-goal gate closes on this increment.

The native urban-place increment adds two distinct town, city and castle layouts each on fields, grasslands and hills, following the rural family implementation. Transparent streets and castle courtyards reveal the unchanged shared terrain; exact existing canonical features determine the source, and active player structures still take precedence. The town UI label is now Town because the canonical feature does not assert an actual fortification state. Six unchanged native PNGs passed eighteen actual source/profile contacts across desktop and 375-CSS-pixel phone Region/Hex views, with 72 fully painted captures and a local authoritative-state reload. The exact whitelist advances to 85 files. Urban composition evidence regional-review/urban-place-increment.json records the actual coordinates. A full enumeration of all 2,252,800 canonical cells with whole-world region profiles found sixteen feature types across sixty-two actual feature/profile contexts; nineteen contexts now have two exact native sources. Location coverage regional-review/location-coverage.json keeps generic canopy pools and legacy plates separate. Inventory counts do not establish scene quality or completion. The single cold castle cell has only one stable variant bucket; city/tundra does not occur in this seed. Neither is replaced with fabricated geography for acceptance. Other city climates, cold rural/urban contexts, magic, ruins, resource sites, natural-feature variety, reference-level connected scene richness, building lifecycle coverage and waterway acceptance remain open. All six full-goal gates remain open; building stage coverage stays 30/835.

Landscape continuity now uses regional-landscape-3: smooth broad and fine world-coordinate masses place low detail with coherent gaps, independent of region ownership and viewport chunks. Actual canonical moisture changes temperate shrub density and elevation changes mineral density; sparse cold/dry contexts and the existing water-surface placement remain explicit. The woodland floor is re-reviewed at three hexes per source span, with unchanged native bytes, canopy anchors and complementary shared material masks. Paid land work, occupied footprints and burned/clearcut patches still exclude inappropriate foliage. This is a presentation increment with 85 exact approved sources and no geography or save migration. Eleven canonical profile contacts passed desktop/phone Region/Hex review, and four connected neighborhood views passed ordinary/close Region review. In-memory paid clearing/planting/construction/reload regressions pass; additional browser-funded tests remain pending explicit authorization after automatic approval review rejected the local clearing click. Landscape mass evidence regional-review/landscape-masses-increment.json records captures and scoped performance. The connected scene is still short of the painterly reference: banks, broader location/context variety, full building lifecycle coverage and comprehensive production acceptance remain open. All six goal gates remain open.

The sixth regional increment replaces legacy terrain-backed portraits at actual ruins, magic and resource sites with six exact native transparent stone subjects. Two distinct ruins and magic silhouettes are reviewed only on fields, grasslands, hills and forest; the resource outcrop/boulder pair also passes actual wetlands, mountain and desert contacts. Thirty source/profile contacts passed 120 desktop/375-CSS-phone Region/Hex captures. Shared ground remains visible around and through the masonry; stable seed/cell/feature selection preserves the layout across views, region approaches and reload. Resource art represents an unsurveyed natural site marker; it never creates a mine, commodity discovery, excavation, inventory, ownership or workers. Authoritative occupied footprints still suppress static illustrations. Existing geography and save bytes remain unchanged. The whitelist now contains 91 exact sources. The full census has34/62 actual feature/profile contexts with at least two exact native sources, an inventory measure rather than scene-quality completion. Cold locations, remaining ruin/magic profiles, natural-feature variants, full building lifecycle art and connected banks remain open. See site evidence regional-review/site-place-increment.json and completion goal.

Graduated canonical banks — reviewed shoreline increment

regional-water-2 adds native side-clipped soil and shallow-water washes to the existing exact canonical ocean/lake contour. Cold, sandy, mineral, marsh and ordinary soil palettes follow the current terrain profile; world-coordinate segment identities, cell centers, region borders and geography remain unchanged. Soft overlapping bands are painted below occupation, land work and structures. They cannot create water, runoff channels, settlements or inventory. Existing exact91 raster approvals stay unchanged. Nine actual land-profile contacts plus three connected coast approaches passed72 completed Region/closeRegion/Hex desktop1280 and phone375CSS captures. Initial camera-restoration captures were replaced with asserted0.3082/0.5617 scale pairs. Wet/dry observed transfers, in-memory funded vegetation/construction/reload authority and cache/ground regressions passed26 assertions; the local saved world remained byte-identical after read-only browser reload. This is a narrow accepted shoreline improvement: reference-level connected richness, water works/state acceptance, missing location and building families and broad world performance still remain required. All six full-goal gates stay open. See bank review evidence regional-review/connected-banks-increment.json and completion goal.

Shared geographic mountain relief — reviewed composition increment

regional-ridges-1 supplements rare canonical peak subjects with four native transparent ridge/cliff silhouettes on existing mountain terrain. The fixed shared240-unit lattice, irregular offsets and672-unit smooth mass field are independent of planning regions and camera. Canonical mountain biome and elevation control eligibility/density. Fifteen contact probes across each width336 footprint must retain mountain land, natural feature none/peaks and no actual occupied/worked ground; each checked cell and any missing neighbor participates in cache invalidation. Clearing vegetation does not erase geology. Native upper-left light, orientation and[.5,.8] anchor remain fixed. The new exact geographic-ridge contract cannot reuse a broad AI flag for another profile, semantic feature or scale. Existing geography, cell identity, travel rules, resource knowledge and saves remain unchanged.

Eight real source/feature contacts plus five connected coast/upland/woodland approaches were inspected in68 desktop1280 and phone375CSS ordinaryRegion0.3082, closeRegion0.5617 and Hex captures. The initial repetitive lattice was rejected; phone Hex framing now moves the entire shared projection clear of controls. Loading-stage captures were replaced before acceptance. Source files remain original built-in image_gen PNGs with native alpha and retained prompts; no offline image processing. Ninety-five exact files are now approved. Bounded source/plan/sprite caches, canonical land/occupation/works/missing-neighbor/reload checks and the unchanged saved local world support this limited acceptance. Full reference-level connected richness is still unfinished: forest composition, observed waterways/works integration, location contexts34/62, building stages30/835 and broad world/state/performance acceptance remain open. All six completion gates stay open. See ridge evidence regional-review/ridge-mass-increment.json and the full goal.

Shared woodland crown hierarchy — reviewed increment, 11 October 2026

The released candidate replaces the short-scale nursery appearance with shared 672/176-world-unit forest mass fields and a jittered 40-unit crown grid. Mature crowns vary from 84 to 128 units; early growth uses 64 to 84. A separately generated spreading oak supplies a single mature mixed-broadleaf silhouette alongside the existing grouped broadleaf and northern conifer sources. Source choice retains actual terrain profile, species group and age. Canonical forest borders taper toward their actual non-forest neighbors; ownership and camera position never reseed woodland. These are visual composition samples, not additional trees, timber inventories or editable world entities.

Living vegetation cover, maturity, disturbance, fire and occupied building footprints remain authoritative. Paid clearing removes the actual owned canopy samples; planting/regrowth and saved reload retain world root positions and show the appropriate growth age. Large crowns receive conservative viewport overhang and bounded depth-sorted caches. Hex portraits frame the larger native crown contacts rather than clipping them against the old centered sprite assumption. Native image alpha, aspect and reviewed root anchors remain intact.

Five mature source contacts and five connected coast/upland approaches passed 42 actual desktop/phone Region, close Region and Hex reviews. The exact new oak is approved only for mature mixed-broadleaf forest. Existing mature native sources were re-reviewed at the larger presentation range. Full reference-level richness, remaining biome/location coverage, waterways, building lifecycles and worldwide performance validation remain open; this increment does not complete any of the six full-goal gates. Details and limitations: woodland review regional-review/woodland-hierarchy-increment.json, full completion goal.

Matched building terrain contacts — reviewed increment, 12 October 2026

The five existing native building families now have exact approved foundation, frame, operational, dedicated damaged and ruined sources for all their legal rendering profiles: forest lodge on forest; village center and community field on fields/grasslands/hills; lumbermill and registry office on fields/forest/grasslands/hills. The forest lodge receives a native damage sibling with torn thatch, exposed rafters and broken lean-to planking, preserving its operational architecture, root anchor and footprint. The intact image is no longer assigned to damage. Unsupported definitions, terrain or early worksite stages retain truthful procedural presentation.

Structures now retain the image's native aspect ratio at the existing 110-world-unit width, with the reviewed anchor contacting the same ground point. No structure is stretched into a square. All appearance remains keyed to the actual saved definition, stage and legal terrain; image approval neither grants a build permission nor creates a settlement or resource. Fallow community fields retain physical boundaries without productive crop imagery. No geography, ownership, prices, jobs or persistent saves changed.

Thirty read-only contact sheets cover 75 exact stage/profile combinations on desktop and phone, using the production structure painter and approved ground material at canonical terrain coordinates. These are explicitly labeled illustrations, not saved live buildings or paid browser lifecycle proof. Paid in-memory construction, damage, repair, demolition and reload remain separate regression evidence. The full coverage audit advances from 30 to 75 of 835 stage/profile combinations, and from zero to five of 44 inventory-complete definitions. Thirty-nine definitions and 760 stage/profile combinations remain unillustrated; full scene/lifecycle/neighbor/performance acceptance and all six goal gates remain open. See building contact review regional-review/structure-context-increment.json, coverage audit regional-review/world-coverage.json and full goal.

Distinct housing and storage families — 12 October 2026

Storehouse, elevated storehouse, town house, timber house and stone house now have dedicated native transparent foundation, frame, operational, damaged and ruined sprites on every legal rendering profile: fields, forest, grasslands and hills. The small thatched dwelling, taller timber residence, masonry residence and broad plank warehouse remain distinct. Elevated storage keeps its stone piers, raised floor, entrance stairs and open undercroft through construction and collapse. Images contain no hex terrain plate; the shared geographic ground remains visible beneath them. Existing state gates and reviewed anchors supply placement. No build permission, stock, geography or persistent player state is granted by artwork.

Forty labeled read-only desktop/phone source-contact sheets cover100 new stage/profile combinations. Separate actual paid in-memory tests exercise founding, research/adoption, harvested/milled timber, finite waystation tool trade, supplied quarry and dressed-stone production, followed by construction, repair, ruin, rebuilding and saved reload at all five native stages for each family. A queued order required freeing an actual worker crew through mill staffing; no stocks, techniques or workers were granted. These are not persisted production orders or full neighborhood acceptance. See housing/storage review regional-review/housing-storage-increment.json, paid test evidence regional-review/housing-storage-paid-lifecycle.json and full goal.

The artwork inventory now covers10/44 definitions,35/167 legal contexts and175/835 stage/profile combinations, with122 exact approved files overall. Thirty-four definitions,132 contexts and660 stage/profile combinations remain unillustrated. Reference-level connected scenes, evolving water/actual works, remaining location varieties and broad world/device/neighbor/performance validation remain open. All six full-goal gates remain open; the deadline remains18 October2026 at15:18:32UTC.

Reviewed current-flow bank contact — October12,2026

Regional moisture v3 composes stronger current observed transfers into sparse graduated earth banks and muted moving-water contacts. Full latest-interval junctions supply shared tangent, width and opacity at both sides of a border. Actual terminal receiving legs continue to their receiver and fade with current incoming/outgoing quantities. Small transfers retain damp retained-ground contact; potential routes, accumulated history, isolated large legs and stale/dry intervals cannot invent rivers. Native ribbon sides clip to canonical land. Artistic width/visibility thresholds describe scenery only, never hydraulic capacity or new water authority.

Twenty-six actual read-only desktop/phone Region/close-Region/Hex captures review three connected flow approaches, the existing paid village, lake and coast. A dense first draft and truncated Hex receiver were rejected and corrected. Existing funded saved observation114 reconstructs the exact plan without save/accounting change; paid in-memory wet/dry/reload regressions remain separate. See bank evidence regional-review/observed-bank-increment.json. All six full completion gates remain open; coverage stays122 exact files,10/44 complete building families and175/835 stage/profile combinations. Rich reference-level neighborhoods, remaining contexts/buildings, live dry/resumed engineered-works acceptance and broad performance validation are still required by18October2026 15:18:32UTC.

Shared landscape detail ensembles — 12 October 2026

Implemented regional-landscape-4 replaces independent low shrub/mineral scatter with loose native-source ensembles in shared world coordinates. Fixed 160-unit centers, irregular elongated member offsets and shared smooth density fields preserve quiet gaps and continue through region boundaries. Each member independently follows its actual canonical terrain/feature, vegetation age and disturbance, occupied and worked land; clearing or occupying a center cannot remove valid contacts on neighboring ground. Exact source contracts, native aspect, palette, alpha and root anchors remain unchanged across122 approved files. Canonical natural features retain their stable anchors. Current painted observed-water segments exclude intersecting native root footprints; potential routes, history and dried intervals cannot exclude or invent a permanent channel. Neighbor materialization and current projection stamps invalidate affected detail plans. Region/Hex use the existing shared painter.

A restored scene now reports its actual zoom/resolution and the current-view serving predicate, allowing transitional fallback frames to be excluded from visual evidence. Thirty-two scoped checks and68 final native desktop/phone captures cover all eleven profile contacts, surrounding regions, existing occupied/worked plots, observed flow and reload; the read-only funded save is byte-preserved. Exact review regional-review/neighborhood-clumps-increment.json records accepted photos, rejected drafts, cache metrics and limitations. This is a compositional improvement, not reference-level production-neighborhood or worldwide acceptance. Full goal and all six gates remain open; matched building coverage remains10/44 definitions,35/167 legal contexts and175/835 stage contexts. No controls, costs, stocks, simulation rules or newly approved source files change.

Matched timber watchtower and forester lodge — 12 October 2026

Watchtower and forester-lodge now have separate native transparent foundation, frame, operational, dedicated damaged and ruined sources. The watchtower keeps its tall cross-braced timber legs, lookout cabin, balcony and four stone foot pads; the forester lodge keeps a low plank cabin, gabled shingle roof, porch and fixed base. Matched edits preserve the native canvas, isometric projection, family identity and contact positions. Each sprite contains its building alone; the independent geographic terrain remains visible beneath it. Watchtower contacts are accepted on fields, forest, grasslands, hills and mountain. Forester lodge contacts are accepted on fields, forest, grasslands and hills. Existing exact-byte/profile/definition/stage gates supply the approved source, with procedural presentation for early or loading stages.

Eighteen labeled actual desktop/phone source-contact sheets plus nine mobile bottom supplements cover all45 new stage/profile contexts at ordinary regional and close portrait scale. Native alpha and all ten original byte checksums are retained. Separate memory-only tests exercise actual funded construction, repair, collapse, rebuilding and inventory-preserving reload at all five stages for both definitions. Their existing funded founding/material-production baseline does not add research or masonry prerequisites to these timber buildings. No existing local or live save, geography, cost, crew, staffing or construction permission changes. See timber-family review regional-review/timber-families-increment.json, paid lifecycle evidence regional-review/timber-families-paid-lifecycle.json and completion goal.

Current exact inventory is132 approved source files,12/44 complete definitions,44/167 legal building contexts and220/835 stage/profile combinations. Remaining32 definitions,123 contexts and615 stage/profile combinations still need matched artwork. Location coverage remains34/62 actual contexts with two exact sources. Reference-level continuous connected production scenes, full water/actual-works state coverage and broad world/device/reload/performance acceptance remain required. All six completion gates stay open; the one-week deadline stays18 October2026 at15:18:32UTC.

Catalog verification also found three older retained candidate files missing permanent IDs. They now have reference-only records with approval false and no production contexts. The catalog test resolves the public-root regional manifest correctly; these inventory fixes leave the132-source whitelist and its exact approval version unchanged.

Canonical map-view links — connected-region review increment

Region and Hex now expose Link to this view at the top of •••. The ordinary game URL records the canonical selected cell, map scale and zoom; Region also records the independent camera center so a neighboring region can be inspected while retaining the selected location. It opens a new tab and can be bookmarked or copied using the browser. The link is bound to the currently prepared world seed, validates canonical cell and camera bounds, and is applied once after normal asynchronous world preparation. User navigation during preparation still takes precedence over its queued view. Art-review previews and Global have no link. Links contain no actor/session identifiers and issue no orders; live state continues to update normally on arrival.

This enables repeatable real production coast/forest and neighboring-region comparisons against the user's painterly reference. It does not regenerate geography or certify reference-level composition. The existing coast review still shows sparse architectural focal points and overly open connective space; richness and state-grounded composition remain open. Exact approvals stay132 files; building coverage stays12/44 definitions,44/167 legal contexts,220/835 stage/profile combinations. All six full-goal gates and the18October2026 15:18:32UTC deadline remain unchanged. See full acceptance scope.

Mobile control review also found that hidden overflow allowed focus to scroll the entire overscanned map container, clipping the top of the options panel. The map now uses non-scrollable overflow clipping; the options panel keeps its own scroll area, and page navigation stays available. Native desktop/phone review verifies the full link and map rail remain reachable.

Castle scale and quieter neighboring-region guides

The existing canonical castle sources now use visible architecture to calibrate their world scale. The round keep's substantial transparent canvas padding previously made its building markedly smaller than the courtyard variant. Both retain their original PNG bytes, aspect ratio and normalized foot; reviewed full-canvas widths are326 and192 world units, with160 world units of visible subject for Hex framing. These exact placement values are included in the approval manifest and must match the source declaration. On phones, the calibrated Hex portrait is offset slightly left to keep the map controls clear.

Region planning boundaries are finer and lower contrast. Neighboring guides omit shared ocean/lake edges; the selected region still has a quiet full outline. Global overview, selected-hex markers, settlement ownership, canonical board membership and gameplay remain authoritative. An empty Global art-interest request returns without loading scenery. Native source contacts on fields, grasslands and hills are recorded in the placement review regional-review/focal-scale-increment.json; ordinary local/live neighboring-region and control framing checks are separate evidence.

This is a focal hierarchy increment, with no new location family or building coverage. All six full-goal acceptance gates remain open; the18October2026 15:18:32UTC deadline is retained. Long stepped coastlines, repeated terrain pattern, reference richness, remaining colder/context families, evolving water and broad lifecycle/performance acceptance remain required.

Continuous coast curvature and truthful Hex readiness

Ocean/lake shore presentation now uses shape-preserving interpolation of canonical signed land/water samples in shared world coordinates. Small seeded variation is limited to mixed shore bands. Every canonical center retains its material; dry wetland does not become water, and there are no inferred rivers. Adjacent chunks and planning regions share the same field. This supersedes the previous linear-triangle shore interpolation; the underlying world generator, biome membership, elevations, board ownership and saves remain unchanged. Native terrain and bank paintings retain their existing exact approval contexts. The first radial interpolation candidate was rejected for repeated bead-like edges.

Hex inspection waits for the reviewed source catalog before choosing a location illustration. Pending views clear previous portrait pixels and source metadata. A shared-illustration label appears only after the matching source and ground are painted; asset-driven redraw also refreshes that label. This resolves the brief legacy-castle/loading-label mismatch found during the preceding release review.

Native local desktop and phone evidence, including deliberately delayed catalog loading, is recorded in the coast/readiness review regional-review/hex-shore-increment.json. This is an incremental silhouette and loading correction. Long canonical straight coast stretches, field-pattern repetition and reference composition richness remain unresolved. All six full-goal gates stay open, with the existing 18 October 2026 15:18:32 UTC deadline and unchanged asset/building coverage.

Natural fertile fields and state-bound cultivation

Undeveloped canonical fields now use the exact native natural-meadow-v1 painting as their continuous ground at the reviewed ten-hex world span. This supersedes the baked crop-pattern fields v1/v2 for natural land; those two sources are retained in the library with AI approval false and no runtime eligibility. Their previous reviews remain in the retirement ledger. The new source receives approval only for fields ground with regional-ground-1. Ground is shared between Region and Hex and blends using the existing canonical biome triangles and shared coast field across surrounding administrative regions. No geography or saved simulation is regenerated.

Cultivation remains the separate actual-state working-land projection: visible improved soil, condition and fallow status come from authoritative plots, not painted farm grids on every undeveloped cell. A paid in-memory soil-improvement regression checks real quotes, inventory deduction, completion, unworked absence and restored state; it is not evidence of issuing live paid orders. Existing farm/town/castle source families retain their semantic bindings. The transparent desktop navigation reminder no longer applies a blur strip over terrain.

The native review regional-review/natural-meadow-increment.json records original source/contact panels and fifteen actual normal-game desktop/phone coastal, neighboring-board, cold-contact, two Hex and reload captures. Grassland/forest is an unchanged control. Local read-only presentation is distinct from connected production acceptance. Exact approved inventory becomes131 files after retiring two and adding one; eleven painted profiles remain covered. Rich connected scene composition, remaining buildings/location contexts, evolving live waterways and broad performance remain unfinished under the full goal. All six gates remain open within18October2026 15:18:32UTC.

The meadow catalog approval now points to the completed exact contextual review; preliminary source/contact wording is superseded. Source bytes, placement context and simulation are unchanged.

The asset library now routes new native ground into Production inventory only when the current approved-world terrain manifest, exact catalog checksum and declared profile/span all match. This fixes the meadow being hidden as a reference despite actual map use. Library visibility remains separate from approval and gameplay implementation; rejected, missing or mismatched sources stay reference-only.

Cohesive canonical town composition — 12 October 2026

The current town decision supersedes the earlier detached town-street-v1 and town-square-v1 compositions. Two unchanged native transparent sources now form connected architecture: a winding market lane with a taller hall, and a gabled civic court with a bell turret. Restrained internal paving belongs to the town silhouette; the outside and open gaps retain separately painted canonical ground. Exact source hashes, foot anchors and measured visible widths are approved only for existing canonical towns on fields, grasslands, hills and tundra. The previous portraits retain their files and provenance but lose current AI approval for this role.

The seed/cell/feature selector, depth order, geography and player state remain authoritative. Town names do not determine artwork; existing paid structures continue to supersede the static place portrait. Source selection and world-phase ground do not reset at planning-region boundaries. Twenty-four normal local desktop/phone scenes cover actual variant choices, neighboring coastal regions, ordinary/close zoom and reloads; separate connected production verification follows deployment. This is a scoped improvement toward the reference, with all six full-goal acceptance gates still open. The census now has native pairs in 35 of 62 actual feature/profile contexts; the three rare tundra towns currently share one deterministic variant bucket, so two source files do not prove actual rare-location variety. See the contextual review regional-review/town-composition-increment.json and the full goal.

Matched keeps and stone castles — 12 October 2026

Player-built keep and castle now have distinct native transparent foundation, frame, operational, dedicated damaged and ruined families. The keep uses a dominant square tower and compact bailey; the larger castle uses round towers and a rear great hall. These saved player structures are separate from existing canonical castle portraits. Transparent courtyard gaps reveal independent shared terrain. Exact source contracts approve the ten originals only for fields, forest, grasslands and hills, their exact definition and saved stage. Sixteen native desktop/390CSS phone terrain-contact sheets and eight final-portrait supplements review all40 new stage/profile combinations. See fortress review regional-review/fortress-families-increment.json and full prompt set ../public/assets/region-composition/fortress-families-prompts.json.

The structure renderer now accepts an explicitly reviewed native canvas width:208 for the keep and260 for the larger castle. Original canvas aspect and stage-specific reviewed contact anchors are preserved; no source pixels are cropped, recolored or otherwise processed. The generated low castle foundation uses a .695 anchor to align its native lower contact, while its taller stages use .77. Legacy sources retain their established110 canvas width. Production acceptance rejects missing, mismatched, nonfinite or out-of-range explicit sizes; a manifest edit cannot silently enlarge an approval. Composer version6 and its client module URL refresh the changed presentation.

Separate actual engine construction, repair, collapse/rebuild and stage/inventory/footprint-preserving reload are exercised in memory. The fixture uses existing paid military charter/research commands and an explicitly seeded finite late-game stock boundary; it does not certify how that opening stock was produced, paid live fort commands or an existing saved neighborhood. All seven castle plots must pass actual clearing before construction. Existing local/live saves, canonical geography and gameplay prerequisites/costs remain unchanged. See bounded lifecycle evidence regional-review/fortress-families-lifecycle.json.

Current inventory has141 exact approved source files,14/44 complete definitions,52/167 legal building/profile contexts and260/835 stage/profile combinations. Thirty definitions,115 contexts and575 combinations still require matched artwork. Location census remains35/62 actual contexts with two native source alternatives. Reference-level connected region richness, cold/natural location gaps, evolving engineered waterways and broad world/device/performance acceptance remain unfinished. All six full-goal gates stay open within the18October2026 15:18:32UTC maximum deadline.

The full read-only memory scene review exposed a multi-plot origin bug: a keep was drawn around its anchor corner instead of its three-plot center, allowing adjacent woodland to hide much of it. The production painter now derives a compound ground origin from every actual footprint coordinate; all six orientations center correctly, while the symmetric seven-plot castle and single-plot buildings keep their established centers. Incomplete coordinate loading retains the stable anchor until the complete footprint is available. Cleared plots and natural neighboring canopy stay authoritative; no extra clearing is invented. The game client refreshes through fortress-origin-1.

Fortress Hex framing review: the close view now fits the exact reviewed keep/castle canvas around its actual footprint center and contact anchor. This fixes clipping caused by the previous single-plot camera span; phone framing reserves space beside the existing map controls. Other structure sizes and construction controls remain unchanged. The beginner, first-village and affected navigation tutorials were reviewed; this camera correction changes no prerequisites, orders, stock or timing. Actual live fortress lifecycle and full regional acceptance remain open.

Shared-world meadow habitats — 12 October 2026

Two unchanged native transparent sprites, meadow-herb-ribbon-v1 and meadow-broken-scrub-v1, add low decorative ground cover in fields, forest, grasslands and hills. Their exact feature is none and states are wild/regrowth. This decorative layer creates no timber stock, tree coverage, crops or water. Both sources retain original1536x1024 pixels, reviewed widths96/92 and anchors. Eight native desktop/390CSS phone source-contact sheets cover the four ground profiles. See habitat review regional-review/meadow-habitat-increment.json and complete built-in prompts ../public/assets/region-composition/meadow-habitat-prompts.json.

Regional landscape version5 retains fixed shared-world groups and smooth432/192-world-unit density fields. Reviewed wide temperate foliage now forms7–11 members over60–112-world-unit irregular ellipses with quiet gaps; mineral groups and other profiles retain their established size ranges. Material-kind selection precedes source selection so more foliage variants cannot dilute mineral groups. Each individual and grouped land sprite checks its center and four root-contact samples against exact source/profile/feature/state availability, occupation, worked land, disturbance and current painted water. Unknown terrain is tracked as a cache dependency and fails closed until it arrives. Existing192-world-unit overhang covers the larger ensemble. Reload and adjacent views never use a region-specific seed. The canvas diagnostic regionalLandscapeSources reports actual selected source IDs, not approval inventory. No authoritative simulation rule or saved geography changes.

Inventory becomes143 exact approved files. Building coverage remains14/44 definitions,52/167 legal contexts and260/835 stage contexts; location variety remains35/62 actual contexts with two native sources. Source contacts and focused shared-boundary/state regressions do not establish reference-level landscape, all terrain/location gaps, coherent evolving waterways, all building families or broad world/device/performance acceptance. All six full-goal gates remain open. The maximum deadline remains18October2026 15:18:32UTC.

The meadow habitat regression review also checks complete root-footprint exclusion and exact unaffected neighboring members. Cold sparsity is compared with the new reviewed temperate family; legacy cold group counts remain unchanged in the measured fixtures. Navigation, costs and tutorial success checks remain applicable.

Continuous geographic shoreline field — 13 October 2026

The current shoreline presentation uses regional-water-4. This supersedes the row/column shape-preserving field described in the earlier shoreline review: that method preserved material centers but left visibly stepped coastal silhouettes. An initial inverse-distance radial candidate was also rejected after ordinary desert coast review showed repeated circular lobes. The accepted candidate uses a broader normalized land/water domain field and disjoint smooth local constraints; it does not revive the rejected narrow radial method. Shared world coordinates determine the silhouette on both sides of every administrative border. Original source pixels, canonical land/water centers and authoritative geography remain unchanged.

The domain field uses positive compact Gaussian weights within 1.9 hex-center spacings and normalized signed material values. Within 0.4 spacing of a canonical center, a smooth convex constraint restores that center's signed shore value derived from saved elevation and material. The constraint vanishes before neighboring centers compete, maintaining continuity. A small fixed-seed mixed-contact variation operates near the shoreline only. Existing 24-world-unit triangulation, 480-unit chunks, native ground clipping and independently clipped graduated bank bands remain. Homogeneous land cannot acquire invented water, and homogeneous water remains water. No runoff route, river, engineering work or stock is created by this presentation.

Partial terrain loading is now an explicit shore-cache dependency. Each plan records missing world coordinates; both the ground mask and bank sprites reuse one versioned bounded 128-entry cache and rebuild when those coordinates materialize. This prevents an early partial shore from remaining in an adjacent or reloaded region. Administrative identity cannot change the field or cache revision.

See native shoreline review regional-review/curved-shore-increment.json. The review distinguishes unmodified local canonical browser views, exact released-client comparisons, and subsequent production verification. Canonical-center polygon checks cover 250 real mixed-profile positions; missing-neighbor, continuity, current-water, Hex readiness and renderer/cache checks are separate. All 143 exact source approvals remain unchanged. Full reference-level landscape, missing 30 building definitions/115 legal contexts/575 stage contexts, 27 location contexts without two native variants, evolving live waterways and broad performance/state acceptance remain unfinished. All six goal gates remain open; deadline 18 October 2026 15:18:32 UTC.

Canonical-node metadata is memoized within each sampler to reduce repeated work without changing field arithmetic. All polygons, bank segments, materials and missing-coordinate lists remain exactly identical across 53 chunks in ten real mixed-profile windows. The current building audit is recalculated and native location-source bindings are refreshed to approval version a57abc85a31655bf against the unchanged full-world census; current counts and location coordinates are unchanged.

Production shoreline verification, 13 October 2026: cdcffc2 deployed successfully as 28da7df0, with wiki check 38390689518 passing. Exact client/library/catalog/index, all 143 native source hashes and unchanged canonical world/instance are verified. Ten native connected desktop/390CSS phone views cover neighboring approaches, tundra/desert shores, forest-bank Hex and both reloads. These are actual unmodified production views; no gameplay orders were issued. Limited preparation slices still exceed a 16 ms frame budget in several views, so broad performance and all six whole-goal gates remain open. The initial guarded merge preserved the 3600385-byte design prefix; subsequent unrelated concurrent design edits are retained separately. Saved-world SHA 111bb4dda2ac5c8b40dcfe35f4962c6c9f96e5a63f022ad6e3a447b2dc2a154f and every catalog record/header remain unchanged.

Integrated regional mountain hierarchy — 13 October 2026

The current regional scene keeps each saved mountain/peaks cell authoritative while avoiding a second small peak illustration directly over a ready geographic ridge. regional-relief-hierarchy-1 requires both the exact canonical cell in the accepted ridge's root footprint and the peak ground contact inside its reviewed root-contact ellipse. An image's broad rectangular bounds alone cannot suppress a peak. Only actually loaded exact approved ridge sources participate; isolated peaks and unavailable ridge images retain the existing approved relief. Region and Hex use the same shared-world ridge plan, with no administrative region seed, source scaling, source-byte edits, approval broadening or simulation changes. Occupation and worked-ground restrictions still remove affected ridges.

This is a modest reduction in mountain clutter, not reference-level scene completion. The city–lake–forest–mountain neighborhood still needs stronger architectural focal composition and richer connecting landscape. See native comparison and bounded acceptance regional-review/ridge-hierarchy-increment.json and whole-goal gates. The inventory stays143 exact approved sources; building/location coverage and all six full-goal acceptance gates remain open.

Production mountain hierarchy verification,13 October2026:61aa209 deployed successfully as8427d132 with wiki38395470371 passing. Exact live renderer/library and all143 native source hashes match; canonical world and instance identities are unchanged. Ten native unmodified connected desktop/390CSS phone captures verify three neighboring approaches, the actual covered-peak Hex scene and map reload. No world-command was emitted. The guarded28-file merge preserved the3605579-byte shared design prefix, saved world111bb4dda2ac5c8b40dcfe35f4962c6c9f96e5a63f022ad6e3a447b2dc2a154f, every source catalog record/header and the shared Git index. Preparation slices still reach26.7ms desktop and25.2ms phone in this limited review; broad performance and all six goal gates remain open. Two denser native city candidates are retained separately for exact source/contact and ordinary-map review; they are unapproved and unused by the live renderer.

Twenty-fourth regional increment — connected canonical cities

Two original native transparent city compositions, city-cohesive-ward-v2 and city-cohesive-gate-v2, replace detached older city layouts. A connected civic-tower ward and a compact walled gate city preserve distinct silhouettes at ordinary regional scale. They bind only to existing canonical city cells in fields, grasslands, hills and forest, with exact regional-place-1 contracts, width 256 and anchor [0.5, 0.78]. The shared terrain remains visible around and through the architecture. Forest vegetation retains actual state; no clearance, roads, settlements, resources, construction permission or geography is invented. Occupied player structure footprints retain precedence. The deterministic cell/feature hash and shared painter preserve the same source across Region, Hex, neighboring views and reloads. Original predecessor PNGs remain unchanged in the library as unapproved references.

All 12 native contact sheets and42 explicitly controlled canonical proposal captures were visually reviewed before approval. Generated-whitelist normal-client and connected production evidence are recorded separately in city review regional-review/cohesive-city-increment.json; complete prompts and reference roles are retained in prompt provenance ../public/assets/region-composition/cohesive-city-prompts.json. Rebuilding the approved artwork source plan refreshes existing map presentation; saved terrain and authoritative simulation are preserved. The census still covers2,252,800 canonical cells and 62 location contexts; forest adds one paired context, giving36/62 with 26 remaining. Building coverage remains14/44 definitions,52/167 legal contexts and260/835 stages. Reference-level connected richness, all terrain/location/building/water coverage and broad world/device/performance verification remain unfinished. All six whole-goal gates stay open; deadline18 October 2026 15:18:32UTC unchanged.

Normal city release verification, 13 October 2026: the actual generated whitelist 0ade0a4393d177d8 contains 143 exact approved files. All 153 bounded regression checks pass, and all 14 native unmodified desktop/390 CSS phone captures were visually reviewed for both real forest-city variants, the connected grassland city, Region/Hex and reload. These supplement the earlier 12 contact and 42 explicitly controlled source-proposal captures; the evidence scopes remain separate. Source binding refresh confirms 36/62 paired location contexts against the unchanged full-world census, including 41 forest cities. No simulation, geography, saved world or player order changes. Connected production verification is still pending. All six whole-goal gates remain open.

Production city verification, 13 October 2026: 14d1446 deployed successfully as 252236b2 with wiki check 38406716030 passing. Exact live client, asset library catalog/sortable index, approved plan 0ade0a4393d177d8 and all 143 native source hashes match the release. Canonical world and instance identities are unchanged. Fourteen native connected desktop/390 CSS phone views were inspected for the main city, both neighboring approaches, both forest-city variants, main-city Hex and reload; no world-command was sent. The guarded 82-file merge preserved the 3607879-byte shared design prefix, unrelated catalog records/header, saved-world SHA111bb4dda2ac5c8b40dcfe35f4962c6c9f96e5a63f022ad6e3a447b2dc2a154f and the shared Git index. Limited preparation slices still reach 27.4ms desktop and 27.6ms phone. This confirms the city increment is live; all six whole-goal gates remain open, including reference-level connected richness,26 missing paired location contexts,30 building definitions/115 contexts/575 stages, evolving authoritative waterways and broad world/device/performance acceptance.

Reviewed bakery state artwork and complete small-building Hex framing,14 October 2026

The Community bakery now has five distinct original native transparent illustrations: low foundations with an attached oven base, timber frame, complete bakehouse, repairable damage and collapsed roof/oven ruins. The same architecture,110 world-unit canvas width and individually reviewed anchors persist through actual saved stage selection. Exact legal rendered ground contexts are fields, grasslands, hills and forest; source contact is reviewed on all four. Early planned/sitePrep work remains procedural. All native pixels and alpha remain unchanged. A ready approved small building now uses its real source frame in Hex, including the existing phone control clearance and center offset; unknown/loading sources do not claim that native frame. The initial phone-frame overlap was rejected and corrected before approval.

This is presentation only. The existing grain-milling technique, clearing, staffing, construction/repair/rebuild quotes, flour and log fuel inputs and food production remain authoritative. A bakery picture creates no goods or completed work. Actual normal-package founding, research, tool caravan, construction, repair, rebuild and five-stage inventory/footprint-preserving reload plus the grain/flour/fuel production receipt are verified in memory. Source contacts, explicitly controlled paid checkpoint views, normal generated-whitelist validation and production evidence remain distinct. See bakery review regional-review/bakery-family-increment.json and paid lifecycle regional-review/bakery-family-paid-lifecycle.json. Broader connected reference-quality landscape, cross-region transitions, evolutionary water and worldwide coverage/performance remain open; this family is not full-goal completion.

Bakery normal-whitelist verification, 14 October 2026: all 157 bounded checks pass. All 28 native actual paid local checkpoint desktop/phone Region/Hex/neighbor/reload captures were individually inspected using the real 148-file generated approval plan 679d19195b12c933, without source overrides. Complete corrected small-building phone framing is accepted; five-stage inventories and footprints remain unchanged on restore. Source-contact, controlled proposal, normal approved checkpoint and connected production scopes remain separate. Existing shared saves and geography are preserved. Production verification is still pending, and all six full-goal gates remain open.

Bakery production verification, 14 October 2026: release98e6c18 deployed successfully asb153af9f with wiki workflow38515204454 passing. Exact live client, approved plan679d19195b12c933, catalog/sortable index and all148native hashes match. World and instance identities are unchanged. All14native connected city/neighbor/forest/Hex/reload views and12native library captures were individually inspected; the latter include targeted phone-bottom supplements after lazy-loaded content grew. Five bakery sources, exact approval filtering, approval-date descending order and19sortchoices are verified. No production gameplay order was sent. Paid bakery lifecycle evidence remains local. Limited preparation slices still reach24.9msdesktop and24.8msphone, so broad performance acceptance remains open. The guarded112-file merge preserves the3614767-byte shared design prefix, unrelated catalog records/header, original saved-world hash and shared Git index. All six whole-goal gates remain open, including29remaining building definitions/111contexts/555stages and26missing paired location contexts. Final metadata/evidence follow-up verification remains separate.

Matched grain-mill state artwork, 14 October 2026

The grain mill now has matched original native foundations, open timber frame, operating windmill, repairable damage and collapsed ruin illustrations. Its gray-stone plinth and ground-contact position stay fixed; the full sail silhouette fits the existing desktop and phone Hex camera. Approval is exact grain-mill definition, five states, fields/grasslands/hills/forest,110canvas width and[.5,.9]anchor. Early planned/sitePrep work and unsupported/loading contexts retain truthful procedural fallback. No native pixel, alpha, camera or simulation rule is changed.

The windmill identifies milling visually; it adds no wind simulation, water connection or new prerequisite. Grain-milling technique, cleared suitable land, actual workers and grain stock remain authoritative. Actual ordinary founding/research/tool import, construction/repair/rebuild, explicit fixture damage and all five inventory/footprint-preserving reloads pass locally; the staffed receipt consumes16grain for12flour.32source contacts and28controlled paid checkpoint views are individually reviewed. One phone reload fade was rejected and recaptured after its real transition completed; normal whitelist and connected production verification remain separate. See grain-mill review regional-review/grain-mill-family-increment.json and paid lifecycle regional-review/grain-mill-family-paid-lifecycle.json. The reference-level connected scene and all six full-goal gates remain open.

Grain mill normal-whitelist verification, 14 October 2026: all 161 bounded checks pass. All 28 native actual paid local checkpoint desktop/phone Region/Hex/neighbor/reload captures were individually inspected using the real 153-file generated approval plan 3a2f7f9d3b9653ab, without source overrides. Complete native sail and phone framing is accepted; five-stage inventories and footprints remain unchanged on restore. Source-contact, controlled proposal, normal approved checkpoint and connected production scopes remain separate. Existing shared saves and geography are preserved. Production verification is still pending, and all six full-goal gates remain open.

Grain-mill production verification, 14 October 2026: release 99caa3b deployed successfully as 0af04f4c, with wiki workflow 38538941231 passing. The exact client, catalog, sortable index and all 153 native image hashes match the release; world and instance identities are unchanged. All 14 normal connected city, neighbor, forest, Hex and reload map views and 10 final native library previews were individually inspected. Each of the five approved grain-mill stages is visible on desktop and phone. The library retains 19 sorting choices and approval-date descending order. Two earlier gallery captures were rejected for incomplete asynchronous previews and replaced after explicit image decoding and settled scrolling. No production gameplay order was sent; actual funded grain-mill lifecycle evidence remains local. Limited preparation reaches 26.8 ms on desktop and 22.8 ms on phone, so broad performance acceptance stays open. The guarded 110-file merge preserves the 3618431-byte concurrent primary-design prefix, every old catalog record and its header, the original saved-world hash and the shared Git index. All six full-goal gates remain open, including 28 building definitions, 107 legal contexts, 535 stage/profile combinations and 26 missing paired location contexts. Verification of the final evidence-only follow-up remains separate.

The read-only reference ridge-density audit regional-review/reference-ridge-density-audit.json quantifies the next connected-scene priority. The approximate main desktop window has 11 canonical peak cells, seven shared ridge groups, two peaks integrated into those groups and nine isolated peak portraits. Western and eastern approaches also retain seven and ten isolated portraits. This records the current plan; it adds no geography or rendering behavior. Next work should integrate varied geological masses and slope contacts while preserving canonical peaks, exact source approvals and shared positions across regions.

Canonical geological masses across neighboring regions, 14 October 2026

Larger native geological groups now use actual canonical peak locations as focal points where their full fifteen-contact root band lies on unworked, unoccupied mountain land. Shared natural elevation and a world-seeded priority choose between nearby eligible peaks; planning regions and cache chunks cannot reseed positions or independently choose a competing mass. Existing background spines leave quiet ground near a valid peak candidate. A canonical peak retains its isolated portrait wherever a reviewed larger mass does not represent its actual contact, or its source is not ready.

The runtime is regional-ridges-2; the exact source approval contract stays regional-ridges-1. All original pixels, source anchors, widths, allowed profiles and feature contracts remain unchanged. Unknown neighboring geography fails closed and remains a cache dependency until it arrives; actual occupation and worked state also invalidate the plan. Clearing vegetation alone does not erase geology. Sixteen native controlled baseline/proposal desktop and phone comparisons cover the real city/lake/forest/upland neighborhood, both approaches, ordinary and close Region zoom, a promoted-peak Hex and reload. Normal release and connected production acceptance remain separate. See geological mass review regional-review/peak-masses-increment.json. This improves one composed landscape layer; full reference-quality richness, all world/context coverage, evolving water and broad performance acceptance remain open.

Geological mass normal-release verification, 14 October 2026: all 166 bounded checks pass, and all 14 native views through the normal accepted composer were individually inspected. Ordinary and close Region, promoted-peak Region/Hex, both approaches and reload are covered on desktop and phone, without module, source or approval overrides. Source approval stays 3a2f7f9d3b9653ab with 153 original native files; inventory and geography do not change. Limited preparation reaches 31 ms on desktop and 24.5 ms on phone, so worldwide performance acceptance remains open. These local canonical views contain no connected simulation or funded orders. Connected production verification remains separate. All six full-goal gates stay open.

Geological mass production verification, 14 October 2026: release aad0c95 deployed successfully as 68fd1d65, with wiki workflow 38548313843 passing. The exact composer, client, catalog, sortable index and all 153 native image hashes match; world and instance identities are unchanged. All 16 native connected desktop and phone views were individually inspected at ordinary and close Region zoom, both approaches, promoted-peak Region/Hex, city Hex and reload. The larger geological masses align with existing peak locations and retain the same shared positions across surrounding regions. No production world-command was emitted. Limited preparation still reaches 25 ms on desktop and 23.4 ms on phone. Some City panels show Refreshing, so this art review does not establish full City UI acceptance. The guarded 40-file merge preserves the 3622591-byte primary-design prefix, every catalog record and its header, the original saved-world hash and the shared Git index. All six full-goal gates remain open, with unchanged 16/44 building definitions, 60/167 legal contexts, 300/835 stage contexts and 36/62 paired location contexts. Verification of the final evidence-only follow-up remains separate.

Twenty-eighth increment — distinct desert cities and ruins, 14 October 2026: two city quarters (courtyard tower and twin-gate market) and two abandoned ruins (broken arches and dry cistern/chamber) now have exact native desert-only illustration contracts. Their irregular transparent feet reveal the same shared desert ground; no saturated orange hex terrain plate is added. Actual canonical feature and world/cell identity select the family and variant; coordinate names never create a city or ruin, and occupied player plots take precedence. All 30 accepted candidate desktop/390-CSS-phone ordinary/close Region, Hex, visible-approach and reload views were individually inspected. Four earlier large-offset approach frames are retained separately because they did not reliably keep the source visible. Original 1536×1024 RGBA bytes, native widths (city256, ruin128) and reviewed anchors [.5,.86] are preserved without raster processing. Normal release and connected production acceptance remain separate. Exact paired location coverage rises from36/62 to38/62; 24 location contexts still lack paired art. Building coverage remains16/44 definitions,60/167 contexts and300/835 stage contexts. All six full-goal gates remain open. See desert review regional-review/desert-place-increment.json.

Desert normal-release review, 14 October 2026: all30native desktop/phone source, ordinary/close Region, Hex, visible approaches and reload views were individually inspected through the normal157-file generated whitelist961cefcd17ed2ea2, without candidate/module/approval overrides. All four native sources retain their exact original bytes and desert-only feature contracts. No connected simulation or gameplay order was used in these local canonical checks. Limited preparation reaches38.7msdesktop/19.5msphone; some capture work overlapped the regression runner, so this is bounded observation, not isolated performance acceptance. All six whole-goal gates stay open. Connected production verification remains separate.

Desert production verification, 14 October 2026: release33c6ac0 deployed as8e0b9956 with wiki workflow38554319180 passing. All30native connected desktop/phone ordinary/close Region, Hex, fully visible approach and reload views were individually inspected. All157 native image hashes, renderer text, exact catalog and sortable index match; the existing153 sources are unchanged. World and instance identities are preserved. Desert city and ruin families remain distinct and share the actual surrounding ground. No production gameplay order was emitted. Limited preparation reaches39.9msdesktop/18.9msphone; this does not close broad performance acceptance. The guarded82-file shared merge preserved the3626109-byte primary-design prefix, every old catalog record/header, original saved-world hash and shared Git index, adding only the four approved source records. Location coverage is38/62 paired contexts; building coverage remains16/44 definitions,60/167 contexts and300/835 stages. All six whole-goal gates remain open. Final evidence-only publication verification remains separate.

Twenty-ninth increment — cooperative shoreline preparation, 14 October 2026: geometry staysregional-water-4, whilecooperative-shore-1 replaces atomic whole-chunk/global-path assembly with exact row steps and32-polygon independent chunk-path batches. A conservative known-uniform-domain proof skips only geometry that cannot cross zero. Finished native paths share the existing128-entry plan lifetime through weak references; partial work is never published. Missing geography arriving during rows or after an earlier path is assembled causes a retry before mask publication. Scene cancellation retains the exact active-revision guard. All136 released complete geometry plans remain byte-for-byte equal as serialized data, and all26 baseline/proposal completed terrain pixel buffers match exactly across52 individually inspected native desktop/phone-sized views covering all eleven actual rendering contexts and two rich neighborhoods. Maximum preparation slices fall49.2→12.0msdesktop and27.5→10.0msphone-sized viewport in this bounded comparison. The initial row-only proposal did not solve growing-path assembly; a separate diagnostic measured43.3ms path append versus0.1–0.2ms mask fill. A lake capture assertion was corrected after confirming the scene was already ready with cached geometry. No source, approval, simulation, geography or save changes. Normal release and connected production acceptance remain separate. This improves one required performance mechanism; all six full-goal gates remain open. See exact-geometry performance review regional-review/cooperative-shore-increment.json.

Cooperative shore normal-client review, 14 October 2026: all171 bounded regressions pass. All14 normal native desktop/390-CSS phone-sized views were individually inspected, including both600-unit neighboring approaches, ordinary/close Region, peak Region/Hex and fresh reload. The wide phone approaches establish adjacent terrain continuity; the central city is outside their frame. Quiet preparation samples reached12.6msdesktop and9.2msphone-sized viewport on one host. No source/module/approval overrides, connected simulation, funded orders or player-save changes. Geometry staysregional-water-4 and all157 exact native source approvals remain961cefcd17ed2ea2. Connected production and broad physical-device/worldwide acceptance remain pending; all six full-goal gates remain open.

Cooperative shoreline production verification, 14 October 2026: release 32d984f deployed successfully as c8f3d428-981c-4f8c-8c79-fb2a85ad1f2f, with wiki 38565645585 SUCCESS. Exact renderer/library/catalog/index and all157 original native image hashes match; world and instance identities are unchanged. All38 native normal connected desktop/390-CSS phone-sized views were individually inspected across13 actual canonical cameras per device, both600-unit neighboring approaches, close city, city/peak Hex and reload. Bounded normal live preparation maxima were12.2msdesktop/12.2msphone-sized viewport. This is distinct from the26controlled exact static-terrain pixel comparisons; broader physical-device/worldwide/navigation acceptance remains open. No production world-command was emitted; City panels may still show Refreshing and this art review does not establish full City UI or funded production lifecycle acceptance. The guarded77-content-write merge preserved the3629222-byte primary-design prefix, every catalog record/header, saved-world hash and shared Git index. All six full-goal gates remain open; coverage stays16/44definitions,60/167legal contexts,300/835stage contexts and38/62paired locations. Four initial Hex frames showed the procedural fallback and were rejected; targeted replacements additionally wait for loaded approved ground and a visible portrait, with original frames retained. The existing shore-adjacent fields castle remains crowded against the water edge and needs a separate footprint/clearance composition review; this preparation release preserves its previous placement and does not close full scene blending. Final evidence-only follow-up verification remains separate.

Thirtieth increment — full native castle feet on shared ground, 14 October 2026: two original castle layouts now carry exact reviewed convex ground-foot polygons. Stable world-coordinate placement keeps the anchor inside its original canonical cell, preserves full source pixels/aspect/light and prefers the largest fit on the unchanged regional-water-4 dry-land triangles. At the observed shore castle1483799, the round keep stays95%of nominal size and the courtyard80%, both shifted southwest within the same logical cell; Hex framing preserves full illustration detail. All54labelled contacts across both sources/all3legal profiles, ordinary/close Region, Hex, visible approaches and reload, plus8corrected boundary views, were individually inspected. Eight ordinary/close Region terrain pixel pairs remain exact. The2252800-cell audit resolves all518supported castles at75–100%of nominal scale; the existing unapproved tundra castle remains outside coverage. Nine new ground/cache/revision/occupation/depth checks and two material-edge regressions cover concrete counterexamples. Unknown in-world data waits; outside-world absence is permanent non-placeable ground. A full foot cannot cross a missing world parcel. Cooperative row/candidate work shares a1.5msframe budget and128entry numeric cache; jobs retain dimensions, not decoded images. Active player structures on any actually intersected foot parcel suppress the neutral illustration without moving its cached pose; planned work does not. Depth follows the fitted foot. The newregional-ground-2runtime extends only actual neighboring material color to playable world-edge half-cells, clipped to real parcels and the existing shore mask; regional-ground-1source contracts and all157original file hashes are unchanged. Two earlier eight-view edge proposals are retained as superseded, not accepted evidence. A preview strip outside playable parcels remains a separate world-boundary limitation. Normal and connected production verification are pending. All six full-goal gates stay open, with unchanged16/44complete definitions,60/167contexts,300/835stages and38/62paired locations. See ground-foot review regional-review/place-ground-increment.json.

Normal ground-foot review, 14 October 2026:182bounded regressions pass and all44normal native desktop/390-CSS phone-sized views were individually inspected. These cover both original castle variants in all3legal profiles, actual shore placement at ordinary/close Region and Hex, both visible neighboring approaches, reload and two real world-boundary roots. Full source framing and dry textured playable ground are retained. Actual source whitelist isf9a15a087bd8e6ad/157; only two exact footprint metadata contracts changed. No source, module, approval or painter overrides, simulation commands, saved state or funded orders. An unplayed world-edge preview strip remains visible separately. Limited maxima {"desktop":{"groundStepMs":1.7,"groundFrameMs":2.4,"terrainSliceMs":14.2},"phone":{"groundStepMs":2,"groundFrameMs":2.4,"terrainSliceMs":9.4}}do not close physical-device/worldwide performance. Connected production verification is pending. All six full-goal gates remain open.

Ground-foot production verification, 14 October 2026: release 3fe8c32 deployed successfully as ad8afd99-3cb0-432c-b7cf-0d2eb421ecf3, wiki 38590971865 SUCCESS. Exact client/module/library/catalog/index and all157native image hashes match; world and instance identities are unchanged. All44normal connected native desktop/390-CSS phone-sized Region/Hex/source-profile/coast-close/neighbor/reload/world-edge views were individually inspected. Full-source feet fit dry textured playable ground; numerical2252800-cell census resolves all518supported castles. Bounded live maxima {"desktop":{"groundStepMs":1.5,"groundFrameMs":2.5,"terrainSliceMs":12.1},"phone":{"groundStepMs":1.8,"groundFrameMs":2.3,"terrainSliceMs":14.2}}are one-host observations, separate from8exact controlled static-terrain pairs. Physical-device/worldwide/navigation/FPS acceptance stays open. No production world-command or funded order was emitted. Guarded140contentwrites preserve the3633333-byte original shared design prefix, all unrelated catalog records/header, source bytes, saved-world hash and shared Git index. Only2exact footprint annotations changed. Outside-playable-world preview strip remains a separate limitation. All six full-goal gates and unchanged16/44definition,60/167context,300/835stage and38/62paired-location coverage remain open. Final evidence-only follow-up verification is pending.

Distinct extraction worksites, 15 October 2026

Clay pits, building-stone quarries and iron mines now have dedicated matched foundation, frame, operational, damaged and ruined original illustrations. Transparent surroundings expose the independently painted world terrain; no fixed hex ground plate is introduced. A warm clay cut, stepped gray quarry and timbered iron adit remain visually distinct. Original1254square RGBA pixels stay unchanged,110world-unit fullcanvas width with fixed family contact anchors. Approval covers clay fields/grasslands/hills; quarry adds mountain; iron adds forest and mountain. Early/loading/unsupported states retain truthful procedural presentation.

Actual finite local survey/title/founder/supply routes, food support, paid construction/repair/rebuild and15inventory/footprint-preserving reloads pass in three independent earned-baseline branches. Staffed receipts produce12clay,6roughStone with.25tools, and7ironOre respectively. Explicit fixture damage does not establish a natural disaster.72source contacts and84controlled paid checkpoint native views were individually inspected, including neighboring material continuity and phone framing. Normal approved-whitelist and connected production acceptance are recorded separately. See extraction review regional-review/extraction-family-increment.json. All six full-goal acceptance gates remain open.

Extraction local acceptance:186/186bounded regressions pass in both isolated and merged workspaces. The real generated172-source whitelist6a7b2981c691313a passes36individually inspected normal approved-art local operational/reload/neighbor views. All prior shared catalog records, design prefix, save and Git index are preserved. These local checkpoint views are distinct from connected production verification, which remains pending.

Extraction production verification,15October2026:adeed1a deployed successfully asc7f77893, wiki38668551540 passed. All172native image hashes, exact client/catalog/sortable index,5generatedwiki pages andunchangedworld/instance identities match.14normal connected desktop/phone Region/Hex/neighbor/reload scenes and6native operational library views were individually inspected; all15stage previews per device load and19sortchoices remain available. Initialrollouthealth502was rejected; repeatedexactverificationishealthy. No production gameplay order was sent. Actual funded extraction lifecycle remains local. Limitedneighborhoodmaxpreparationslices are10.7msdesktop/11.1msphone; broadacceptanceremainsopen. All six full-goal gates remainopen, with25buildingdefinitions/95legalcontexts/475stagecontexts and24pairedlocationcontexts still missing. Final evidence-only follow-up verification remains separate.

Distinct marsh foliage and natural-feature framing, 15 October 2026

Two original transparent reed groups add a tapered bank ribbon and an open cattail crescent on wetland ground. They can decorate undeveloped wetland land and actual canonical reed features in the wild state only. Separately painted ground stays visible through roots and internal gaps; the pictures add no water, forest stock, ownership or goods. Canonical source selection and shared-world positions remain stable across reloads and neighboring views.

Natural-feature roots now use the same compatibility, disturbance, occupation, work and missing-contact checks as incidental vegetation. The current centered reed root probes remain inside their own canonical hexes; the broader root API check is a defensive contract, not evidence of an existing live boundary error. Hex rendering records exact ready landscape source IDs and invalidates when the displayed landscape plan changes. Ready natural-feature canvases fit beside phone controls: four initial clipped phone views were rejected and replaced without editing original pixels. Eight source comparisons and 28 canonical views are individually inspected. See marsh review regional-review/marsh-family-increment.json. Normal whitelist and connected production checks remain separate. The six full-goal gates remain open.

Marsh local acceptance: 190/190 bounded regressions pass in both isolated and merged workspaces. The normal generated 174-source whitelist ee4587b639179298 passes 28 individually inspected native canonical views, including full phone portraits, neighbor approaches and reloads. The initial cache-key regression fixture reused a VM scope; that fixture was corrected before repeating the full suite. Existing catalog records, primary design prefix, saved world and shared Git index remain preserved. Connected production verification remains separate and pending.

Marsh production verification, 15 October 2026: f9d100c deployed successfully as a831f4a0; wiki 38671919819 passed. All 174 original source hashes, exact client/catalog/sortable index, five generated wiki pages and unchanged world/instance identities match. All 28 connected desktop/390 CSS phone Region/Hex/neighbor/reload views of both actual canonical reed variants, plus four native live approved library previews, were individually inspected. Original alpha and native dimensions are preserved. The full source canvas fits the phone Hex controls. Limited maximum preparation slices are 18.8 ms desktop / 15.1 ms phone; broad acceptance remains open. Current root-probe checks support neighboring dependencies defensively; the present centered 96-unit reeds do not establish a previously observed neighboring-root bug. No production gameplay order was sent. All six full-goal gates remain open, including 25 building definitions / 95 legal contexts / 475 stage contexts and 23 paired location contexts. Final evidence-only deployment verification remains separate.

Distinct native palms on continuous desert terrain, 15 October 2026

Two original transparent palm groups add a leaning three-tree silhouette and an open four-tree silhouette only where canonical desert terrain already declares palms. Their roots and internal gaps expose the separately painted ground, including actual coast contact; no hex tile or soil platform is introduced. World-space source identity remains stable across administrative regions and reloads. Complete native canvases fit existing desktop and phone Hex controls without a renderer change. The original 1341 by 1173 and 1536 by 1024 RGBA outputs are retained byte-for-byte with full prompts and hashes.

The pictures create no usable water, oasis service, dates/food stock, land rights or new action. Actual occupation, land work and vegetation disturbance still govern presentation. Four source studies and28 canonical desktop/phone scenes were individually inspected. See palm review regional-review/palm-family-increment.json. Normal whitelist and connected production checks remain separate. All six full-goal gates remain open.

Palm local acceptance: 192/192 bounded regressions pass in both isolated and merged workspaces. The normal generated 176-source whitelist ab394a8476591f76 passes 28 individually inspected native canonical views, including full phone portraits, neighbor approaches and reloads. Existing catalog records, primary design prefix, saved world and shared Git index remain preserved. Connected production verification remains separate and pending.

Palm production verification, 15 October 2026: d128b69 deployed successfully as d67e5cfe; wiki 38673765263 passed. All 176 original source hashes, exact client/catalog/sortable index, five generated wiki pages and unchanged world/instance identities match. All 28 connected desktop/390 CSS phone Region/Hex/neighbor/reload views of both actual canonical palm variants, plus four native live approved library previews, were individually inspected. Original alpha and native dimensions1341by1173/1536by1024 are preserved. No renderer change was needed. The full source canvas fits the phone Hex controls. Limited maximum preparation slices are 14.6 ms desktop / 9.3 ms phone; broad acceptance remains open. No production gameplay order was sent. All six full-goal gates remain open, including 25 building definitions / 95 legal contexts / 475 stage contexts and 22 paired location contexts. Final evidence-only deployment verification remains separate.

Bounded regional display preparation and natural water review, 15 October 2026

A broad real saved-water neighborhood exposed a source-loading loop: the viewport required more full native images than the existing decode cache could retain together. Repeated preloading evicted another needed source and kept the detailed terrain waiting. The renderer now retains reusable regional displays in a separate32MiB pixel cache, using bounded resolution for zoom and DPR. Native source budgets remain128/192/256MiB according to the existing device tier. Hex continues to request the full original images; source files, alpha, hashes, approval contexts, native anchors and canonical building-foot aspect remain unchanged. Region waits on its actual display records rather than simultaneous residence of every full original.

A disposable saved-world clone naturally reaches wet flow at tick114, zero completed transfers at116 and resumed flow at119; JSON reload preserves public projections. No water or stock is injected and the original save is unchanged. Final native/low-memory/live review is pending. The current observed channel crosses a canonical cottage illustration; this contact remains explicitly unaccepted and needs separate presentation work. It is not hidden by changing hydrology or removing the logical location. See cache and water evidence regional-review/display-cache-water-increment.json. All six full-goal gates remain open.

Regional display local acceptance,15October2026:196/196 regressions pass in both isolated and guarded merged workspaces. All42 final native wet/dry/resumed Region/Hex/neighbor/reload captures,12 explicit128MiB-tier platform-emulation captures and6same-page authoritative updates were individually inspected. Two initial frames were rejected: an invisible static scene and a source-unready procedural Hex; replacements require actual visible serving/native source readiness. The old exact client loading loop is retained as rejected evidence. Canonical building aspect and full native Hex sources are preserved; all176 original approvals, catalog records/header and the original QA save remain unchanged. Observed channel/cottage contact remains explicitly unaccepted. All six full-goal gates remain open; connected production verification is pending.

Regional display production verification,15October2026: b312604 deployed successfully as22d845f5; wiki38676962073 passed. Exact176 original native hashes, client, source manifest/catalog/sortable index, five generated wiki pages and unchanged world/instance match. All28connected desktop/phone map views were individually inspected, including4explicit128MiB-tier platform-emulation views, mixed-region broad/close/west/east, reload, rich main, forest cities and full original city/castle Hex subjects. Separate display-cache maximum in these views is5.9MiB under its32MiB limit. No production gameplay order was sent. Actual wet114/dry116/resumed119 snapshots and6same-page updates remain local evidence only; canonical cottage/channel contact remains unaccepted. These cache diagnostics do not measure total memory or physical-device performance. All six full-goal gates remain open; final evidence-only deployment verification remains separate.

Cottage foundations and observed-water contact — 15 October 2026

The specific canonical cottage/front-foundation intersection recorded in the preceding cache/water review now has a presentation correction. Two unchanged exact original cottage sources carry individually reviewed normalized foundation polygons and original aspect, mirrored in their exact approval contracts. Current observed edge IDs, quantities, tick, scale, junction levels and simulation cell graph remain authoritative. At the coarse-cell illustration scale, deterministic shared junctions and short padded routes carry visible water around the reviewed solid foundation. Rounded route corners and the original geography clip preserve connected contact. No building moves, no water is injected and no bridge, flood protection, drainage work or supply is granted. Unsupported foundation families keep their existing presentation and remain a separate acceptance gap.

Region and Hex cache identity includes exact source/approval readiness and actual structure occupation; missing valid neighboring geography or an unresolved foot route is explicitly pending. Eight regressions cover source-contract rejection, actual wet/dry/resumed surface-only snapshots, shared multi-leg junctions, full bank clearance, original shore clipping, reload, occupation identity, loading and world edges. Forty-two native desktop/phone views and six same-page low-tier updates were individually inspected. The twelve first local offset-parameter frames were found to reset to the selected center: they were rejected as navigation evidence and replaced by real normal map drags with asserted camera positions. That also corrects the earlier local adapter offset claim; offset labels alone do not prove camera displacement. Foundation evidence regional-review/foundation-water-increment.json records the narrow scope and all remaining gaps. Water artistry, other location contacts, actual engineered-work states and all six full-goal gates remain open.

Cartwright identity and five native lifecycle states — 15 October 2026

The existing Cartwright workshop now has a distinct exact native five-stage family: low foundation, open timber frame, recognizable wheel/cart workshop, dedicated broken standing structure and collapsed ruin. Five unchanged1254square transparent originals share a110world-unit canvas and fixed contact anchor. The first foundation draft was rejected for a different front-post layout; the selected replacement follows its own frame. Twenty exact stage/profile pairs across fields/grasslands/hills/forest passed24native source/painter contacts. Actual finite founding, supported active Joinery, paid imports/construction/repair/rebuild, five inventory/footprint-preserving reloads and real handcart output drive the family. Twenty-eight candidate and twelve normal-whitelist desktop/phone map views were individually inspected, including sequential stage updates without reloading, operational reload and actual camera-asserted pans. The artwork grants no goods, land, workers or production. Existing code/simulation/geography and all earlier original source bytes are unchanged. Family evidence regional-review/cartwright-family-increment.json separates each scope.

The preceding cottage/current-water release7feba7f is now verified live: deployment e1af394b and wiki38679757334 succeeded; exact176original hashes, client/catalog/index/five wiki pages and unchanged world/instance identities match. All30connected native production frames were individually inspected, including actual linked neighboring regions, both cottage silhouettes in all six existing normal profile contacts, reload and four explicit128MiB-tier platform-emulation frames. Actual wet/dry/resumed water evolution remains disposable local evidence. Its production evidence regional-review/foundation-water-increment.json is retained here with the next authored release.

Cartwright expands inventory to181exact approved files,20/44complete building definitions,76/167legal contexts and380/835stage contexts. Paired canonical locations remain40/62. All six full-goal gates remain open; repeated upright geological groups, missing families/contexts, wider natural-water/works integration and broad world validation still need work.

A separate finite-resource engine replay also completed actual demolition and salvage, verified the cleared canonical plot and unchanged stock/occupation after save/reload, and paid for a new cartwright on the same cell. Supporting production and ordinary imports supplied the replacement; no goods were injected. This is engine evidence, not an additional inspected production lifecycle.

Cartwright local acceptance:204/204regional and approval regressions pass in both the isolated release and guarded merged workspace. The normal181-source whitelist66bd87cab00b4e02 passed12individually inspected operational Region/Hex/reload/actual-pan views after24source contacts and28paid-state candidate views. All previous shared catalog records/header, the3651431-byte design prefix, original saved world and root Git index are preserved. Exact live publication remains pending.

Geological backdrop hierarchy — 15 October 2026

Two unchanged native transparent low rock-slope originals now form quieter background geology in exact mountain contexts. Canonical peak focal masses keep their previous original source pool, world positions, priority and contacts; lower slopes can never suppress a semantic peak. This separates weathered shelves/talus from prominent mountains instead of repeating tall groups for both roles. Source bounds contain every original pixel above32alpha, with at most1alpha outside. Exact conservative rectangle/pointy-hex intersection checks every underlying canonical cell, including corner slivers: water, other profiles, named places, occupation, worked ground and missing geography reject placement. Original source pixels/alpha and all canonical geography remain unchanged.

Four palette sheets, ten exact prior-client comparisons, ten candidate Region/neighbor/reload views and four actual source-qualified Hex views were individually inspected on desktop and390CSSphone. The Dawn Hollow/Silver March transition retains continuous shared land and stable geological identities. This is a limited backdrop improvement; full reference richness remains open. Geological evidence regional-review/geological-slope-increment.json separates these local canonical scenes from normal/live verification.

Cartwright release17c2387 is now verified live as16ac8ef8, wiki38684069757SUCCESS:181exact originals/client/catalog/index/fivewiki pages and unchanged world identities match. All18connected-map and10native live library views were individually inspected. Paid lifecycle/output and separate demolition/salvage/replacement remain disposable local evidence, not production orders. Cartwright evidence regional-review/cartwright-family-increment.json records those scopes. The new slopes bring inventory to183approved files; coverage remains20/44building definitions,76/167legal contexts,380/835stage contexts and40/62paired canonical locations. All six full-goal gates remain open.

Geological slope local acceptance:209/209regional and approval regressions pass in both isolated and guarded merged workspaces. All14normal183-source whitelistfce85178ab5ead5d Region/Hex/reload/neighbor views were individually inspected after28source/comparison/candidate views. Exact canonical peak focal choices remain unchanged; lower slopes do not represent or erase a canonical peak. All previous shared records are preserved except five verified cartwright metadata/live-gap status updates; two new slope records are added. Primary design prefix, original saved world and shared Git index are preserved. Connected production acceptance remains pending.

Charcoal kiln and smithy: distinct evolving structures — 15 October 2026

Ten unchanged native transparent sources now represent the actual five construction/operational/damage/ruin stages of the existing charcoal kiln and smithy. Each family retains its own footprint and identity; no generic workshop is relabeled across these definitions. Exact contexts are fields, grasslands, hills and forest. The existing world-space painter exposes shared ground through original alpha and follows actual structure state across region borders. No geography, save, simulation or old source changes.

The disposable local engine check used a previously funded/surveyed/supplied iron-mine checkpoint, real staffed finite-deposit mining, returned ore collection, ordinary harvesting and staffed lumbermill production. Forty-nine resource-funded orders, ten stock/footprint-preserving restores, both actual recipes, demolition/salvage/cleared reload and separately paid replacements passed. Damage/collapse are explicit local fixtures. No real-money spending, resource injection or production orders. Metal-family evidence regional-review/metal-families-increment.json separates16source-contact sheets and56actual paid-state views from normal/live acceptance.

Geological release ef0205b /e997c368 /wiki38686348220 is verified live with183exact original hashes/client/catalog/index/fivewiki pages and unchanged world identities. All24connected Region,4Hex and4library views were individually inspected, including actual west/east approaches and explicit128MiB-tier emulation. Geological evidence regional-review/geological-slope-increment.json records the limits. New inventory193approved originals covers22/44building definitions,84/167legal contexts,420/835stages and40/62paired canonical-location contexts. All six full-goal gates remain open.

Metal-family local acceptance:209/209regional/approval/cache/navigation/lifecycle regressions pass in both isolated and guarded merged workspaces. All96native local frames (16contact sheets,56actual paid stages,24normal-whitelist views) were individually inspected. Existing gameplay costs/controls and all previous source pixels remain unchanged. Every old shared catalog record/header, original saved world, primary design prefix and root Git index are preserved. Connected production acceptance remains pending; all six full-goal gates remain open.

Tundra rural identities and coastal contact — 15 October 2026

Six unchanged native transparent originals add two actual canonical tundra cottage, village and farm layouts each. A long dwelling differs from a compact gabled cottage; the hamlets use open crescent and staggered-row layouts; farms use a broad barn or paired byres. Genuine alpha gaps preserve the existing tundra, shoreline and neighboring forest/arctic/fields ground. Names never create a settlement or award resources; authoritative occupation still takes precedence.

The first coastal review rejected the hamlets at142/154world-unit widths because an outer cottage reached neighboring water. Both full native canvases now render at100world units with their original fixed anchor, pixels and alpha. Twelve final source contacts and56finalcanonical Region/Hex/ordinary/close/reload/actual-pan frames were individually inspected on desktop/390CSSphone. Northern desktop west approach crosses Silver Wilds/Silver March with continuous shared geography; final normal/live acceptance remains separate. Cold rural evidence regional-review/cold-rural-increment.json retains the correction and limited scope.

Metal-family release12233ba /ca2addf4 /wiki38691485712 is verified live with193exact native hashes/client/catalog/index/fivewiki/world identities and44inspected connected/library frames; its49resource-funded orders and actual recipes remain disposable local evidence. New inventory199approved files brings paired canonical-location contexts to43/62; building coverage stays22/44definitions,84/167legal contexts,420/835stages. All six full-goal gates remain open.

Tundra rural local acceptance: 209/209 regional, approval, cache, navigation and lifecycle checks pass in both isolated and guarded merged workspaces. Twelve final source contacts and 56 final canonical frames were individually inspected. All 36 normal frames passed: 29 whole screenshot files match previously inspected candidate frames byte for byte, and seven additional native frames were individually inspected. Exact whitelist 29f861dcd75dc5b2 has 199 originals and 43/62 paired canonical contexts. All old source pixels, catalog records/header, primary design prefix, saved world and root Git index are preserved. Connected production acceptance remains pending; all six full-goal gates stay open.

Exact stone-site contexts and rejected layouts — 15 October 2026

Six existing unchanged native sources gain sixteen reviewed terrain contacts: paired magic sites in tundra, desert, mountain and wetlands; paired ruins in mountain and wetlands; paired neutral exposed-rock sites in arctic and tundra. These are exact source/profile permissions. Native transparent gaps expose the same shared world ground across neighboring regions. Geography, seed, player occupation, simulation and source pixels stay unchanged. Arctic magic was rejected for conspicuous warm mossy bases on snow. The tundra castle extension was rejected because its actual coastal layout crowds a neighboring town.

Forty native source contacts and84actual canonical desktop/390CSSphone Region/Hex/ordinary zoom/reload/real-pan frames were individually inspected, including rejected studies. Fifteen accepted actual locations cover the sixteen new source/profile contacts: only one canonical tundra magic cell exists, so its unused variant has native contact evidence rather than an invented second normal occurrence. Stone context evidence regional-review/stone-context-increment.json separates normal/regression/live acceptance.

Prior tundra rural releasefa9d120 /dd294ef8 /wiki38695595051 is verified live with199exact original hashes/client/catalog/index/fivewiki/world identities and48inspected connected/library frames. Paired canonical-location contexts rise from43to51of62. Building coverage remains22/44definitions,84/167contexts,420/835stages. All six full-goal gates remain open; richer connected scenery, remaining source contexts, building stages, actual waterways/works and broad world acceptance are still required.

Stone-context normal acceptance: all70source/camera/readiness assertions passed on desktop/390CSSphone.53whole-file screenshots match individually inspected canonical candidates;17additional native screenshots were separately inspected.209isolated regression checks passed. Final permissions cover six existing originals and sixteen source/profile contacts across eight paired contexts. Rejected arctic magic/tundra castle extensions remain excluded. Merged regression and connected production acceptance remain separate.

Stone-context release acceptance:209isolated and209merged checks passed;70normal canonical views accepted. The exact eight additional paired contexts bring location coverage to51/62; all six full-goal gates remain open. Connected production verification follows deployment and is not implied by local results.

Cold stone identities and compact coastal keeps — 15 October 2026

Six new unchanged native transparent originals fill four cold location contexts: paired bare-stone arch/round ruins in arctic and tundra, paired pierced/levitating monolith sites in arctic, and paired compact square/drum keeps in tundra. Open interiors and detached stones expose the same surrounding ground across region borders. Grey bare masonry replaces the unsuitable cold-context proposal of warm mossy bases. Both full-native keep canvases use72world-unit widths, keeping their foundations dry and separate from the actual neighboring town. No old source pixels, renderer, geography, seed, save, occupation precedence or authoritative simulation changed.

16native contacts and48actual canonical Region/Hex/ordinary/close/reload/real-pan desktop/390CSSphone frames were individually inspected. The sole actual tundra castle normally selects squarekeep; four explicit alternate-source study frames test drumkeep at that same location without inventing another castle. Cold stone evidence regional-review/cold-stone-increment.json separates normal/regression/live acceptance.

Prior1aa2457 /81e76a59 /wiki38699913447 is verified live with199exact original hashes/client/catalog/index/fivewiki/world identities and54inspected connected/library frames. Inventory now205approved originals; paired canonical contexts55/62. Building coverage remains22/44definitions,84/167legal contexts,420/835stages. All six full-goal gates remain open.

Cold stone normal acceptance: all40source/camera/readiness assertions passed on desktop/390CSSphone. 30whole-file screenshots match individually inspected canonical candidates; 10additional native screenshots were separately inspected.209isolated checks passed. Six new unchanged originals cover eight exact source/profile contacts/four paired contexts. The alternate drumkeep remains an explicit singleton contact study, never a second normal world occurrence. Merged regression/connected production acceptance remain separate.

Cold stone release acceptance:209isolated and209merged checks passed;40normal canonical views accepted. Six unchanged new originals bring approved inventory to205 and exact paired location contexts to55/62. Four alternate drumkeep study frames remain explicitly separate from the only normal tundra castle occurrence. All six full-goal gates remain open. Connected production verification follows deployment and is not implied by local results.

Compact cities on continuous cold and stone ground — 15 October 2026

Four unchanged native transparent city originals fill the arctic, mountain and wetland city contexts with paired silhouettes. Northern gateward and longward use cold slate and bare stone; neutral marketward and gatecluster suit mountain and wetland ground. Open crooked lanes and broken edge groups expose the existing shared terrain. Each source has an exact reviewed conservative convex foot envelope under regional-place-ground-1, using the existing dry-land fitter; this does not paint, clear or change land. Complete canonical enumeration found115cities in these contexts; all full envelopes fit dry land at their original scale and anchors, so this world required no coastal adjustment. No raw source pixels, old source contracts, renderer, seed, geography, saved state, occupation precedence or authoritative simulation changed.

12native contact sheets and42actual canonical desktop/mobile frames were individually inspected. City evidence regional-review/cold-city-increment.json separates full-world geometry from representative visual checks and normal/regression/live acceptance. Prior3bfa1dd /37c603ad /wiki38703929923 is verified live with205exact source/client/catalog/index/fivewiki/world identity checks and52inspected connected/library views. Inventory209originals; paired canonical contexts58/62. Building coverage remains22/44definitions,84/167contexts,420/835stages; all six full-goal gates remain open.

City normal acceptance: all36source/camera/readiness assertions passed on desktop/390CSSphone. 29whole-file screenshots match individually inspected canonical candidates; 7additional native screenshots were separately inspected.209isolated checks passed. Four unchanged originals cover six exact source/profile contacts/three paired contexts. All115actual city envelopes fit published dry land. Merged regression/connected production acceptance remain separate.

Natural identities follow current vegetation and shared ground — 16 October 2026

Eight unchanged native transparent natural landmarks add distinct paired dunes, ice formations, broadleaf groves and conifer stands. Their irregular silhouettes expose the existing shared terrain rather than adding enclosing soil tiles. Four tree sources have exact speciesGroups contracts: mixed-broadleaf groves and conifer stands follow current vegetation, with the canonical climate fallback used only when no authoritative species override exists. Species-only changes invalidate the landscape cache. Existing cover, maturity, disturbance, hazards, occupation, worked ground and water eligibility remain in force. Canonical neighbors revealed missing terrain triangles in ice portraits: the horizontal cell margin was only two radii, shorter than a slanted lattice face. Three radii now include the full face origins using real canonical neighboring cells, without filling unknown terrain or changing geography.

16native contact sheets and60corrected actual canonical desktop/mobile frames were individually inspected, including continuous ground across neighboring regions. Earlier species and padding studies were rejected rather than counted as final acceptance. Natural identity evidence regional-review/natural-identities-increment.json separates those studies, mask diagnostics, normal/regression/live checks. City release82790d3 /c99f840c /wiki38708253019 is verified live with209exact source/client/catalog/index/fivewiki/world identity checks and44inspected connected/library frames. Inventory217originals provides62/62paired canonical feature/profile contexts; this inventory milestone does not close any full-goal gate. Building coverage remains22/44definitions,84/167contexts,420/835stages; richer connected landscapes, state-grounded works/waterways and broad acceptance remain required.

Natural identity normal acceptance: all52source/camera/readiness assertions passed on desktop/390CSSphone. 39whole-file screenshots match individually inspected corrected canonical candidates; 13additional native screenshots were separately inspected.214isolated checks passed, including actual eight-source state and species regressions and complete canonical ice-border viewport coverage. Eight unchanged originals cover four paired natural identity contexts. Merged regression/connected production acceptance remain separate.

Distinct brick firing and fish preservation buildings — 16 October 2026

Brick kilns and fish smokehouses now have separate exact native transparent foundation, frame, operational, damaged and ruined sources. Their small irregular contact grounds sit on the shared regional terrain without enclosing hex soil tiles. The kiln shows its brick firing chamber, yard and chimney; the smokehouse shows a timber curing shed, racks and working materials. Kiln sources are approved only for fields/grasslands/hills/forest; smokehouses only fields/grasslands/hills/wetlands. These reviewed presentation contexts do not expand actual construction permissions. All original1536x1024RGBA files are unchanged, with nativeWidth110 and anchor[0.5,0.8]; no raster processing, simulation or renderer change. Existing stage, readiness, occupation and canonical neighboring-ground rules remain in force.

16native contact sheets and56corrected actual canonical desktop/mobile views were individually inspected. Two independent disposable local lifecycle branches used43resource-funded orders,10stock/footprint-preserving stage reloads, both demolition/salvage/replacement routes and actual brick/preserved-fish production receipts. Damage/collapse fixtures and accelerated deadlines are explicit; no real money or production orders. The initial QA camera study was rejected and corrected in the adapter, with exact canonical camera assertions on every Region capture. Evidence regional-review/firing-families-increment.json separates those checks from normal/regression/connected live acceptance. Prior natural identity releasefbf263b /4bd67b71 /wiki38838583745 is verified live:217exact originals and68individually inspected map/library frames. Inventory227sources,24/44building definitions,92/167contexts,460/835stages; all six full-goal gates remain open.

Kiln/smokehouse normal acceptance: all24normal source/camera/readiness assertions and all24individual native screenshot reviews passed on desktop/390CSSphone.217isolated checks passed, including exact stage/profile/native hashes, unavailable/loading rejection and complete phone Hex framing. Ten unchanged originals cover40reviewed stage/profile pairs. Actual finite local lifecycle receipts, reloads and demolition/replacement are separate from unobserved production building stages. Merged and connected live acceptance remain separate.

Coastal working families share the actual shore — 16 October 2026

The coastal fishery, fishing landing and fish market now use separate exact native transparent foundation, frame, operational, damaged and ruined sources. The fishery is a compact pair of boats and moorings on the existing coastal ocean; the landing is a small net/boat gear shelter on land; the market is two open fish sales stalls. Their irregular silhouettes and open gaps reveal the same continuous world terrain. Fishery art is restricted to ocean; landing and market to fields/grasslands/hills/wetlands, without expanding legal construction rules. All fifteen1536x1024RGBA originals retain nativeWidth110 and anchor[0.5,0.8], with no raster processing, renderer, simulation or geography change. The rejected first fishery painted water around the hulls; the selected object-only original lets canonical water supply the whole surrounding sea.

18native contacts and84corrected actual canonical desktop/mobile views individually inspected. Three independent finite coastal founding branches used17resource-funded orders,15stage reloads,three demolition/salvage/replacement routes and actual surveyed fishery output. Damage/collapse fixtures and accelerated deadlines explicit; no real money or production orders. Initial13frame independent-world cache study rejected; fresh pages between worlds and actual cached-stage assertions correct the QA adapter. Evidence regional-review/coastal-work-families-increment.json separates normal/regression/connected live acceptance. Prior kiln/smokehouse releaseb7040b5 /27dcfd09 /wiki38843870929 verified live:227exact originals and40individually inspected connected-ground/library views. Inventory242sources,27/44building definitions,101/167contexts,505/835stages; all six full-goal gates remain open.

Fishery/landing/fish-market normal acceptance: all36normal source/camera/readiness assertions and all36individual native screenshot reviews passed on desktop/390CSSphone.220isolated checks passed, including exact stage/profile/native hashes, unavailable/loading rejection and complete phone Hex framing. Fifteen unchanged originals cover45reviewed stage/profile pairs. Actual finite local lifecycle receipts, reloads and demolition/replacement are separate from unobserved production building stages. Merged and connected live acceptance remain separate.

Community buildings retain identity on shared ground — 16 October 2026

School, care hall, community refuge and tree nursery now have distinct exact native transparent foundation, frame, operational, damaged and ruined artwork. The school keeps its schoolroom/bell/books, care hall its low hip roof and open care porch, refuge its broad braced gable and sleeping benches, and nursery its separate potting benches. Open gaps reveal the independently painted shared terrain on fields, grasslands, hills and forest. Twenty unchanged1536x1024RGBA originals use nativeWidth110 and anchor[0.5,0.8], without raster/alpha processing, crop or conversion. Authoritative building identity, stage, plot suitability, moisture, research, staff and actual resources remain decisive; no renderer, simulation, geography or construction-rule change.

32native contacts and112actual canonical desktop/mobile frames individually inspected. Four independent finite local research/resource routes pass43paid orders,20stage reloads,four demolition/salvage/paid replacements and one actual sapling receipt. Research uses ordinary village days; accelerated construction and explicit damage fixtures are disclosed. Evidence regional-review/community-care-families-increment.json separates normal/regression/live acceptance. Coastal release36a777f /bc9f0f94 /wiki38848305890 verified live:242exact originals and60inspected connected-ground/library views, unchanged world/instance. Inventory262sources,31/44definitions,117/167contexts,585/835stages; all six full-goal gates remain open.

School/care/refuge/nursery normal acceptance: all48normal source/camera/readiness assertions and all48individual native screenshot reviews passed on desktop/390CSSphone.223isolated checks passed, including exact stage/profile/native hashes, unavailable/loading rejection and complete phone Hex framing. Twenty unchanged originals cover80reviewed stage/profile pairs. Actual finite local lifecycle receipts, reloads and demolition/replacement are separate from unobserved production building stages. Merged and connected live acceptance remain separate.

Connected mountain hierarchy — 16 October 2026

The regional renderer now reserves the largest mountain silhouettes for more widely separated dominant canonical peaks. Priority uses shared world coordinates and actual elevation, with all possible neighboring chunk competitors included. Secondary real peaks keep smaller approved relief; they do not disappear or become ordinary flat land. The exact source root contacts and low-slope exclusion remain unchanged, preserving actual places, water, occupied plots and worked land. No region ID selects or resets this hierarchy. Native source files, geography, simulation and saved worlds are unchanged.

Twenty-four released-baseline and twenty-four refined normal-approved native desktop/390CSSphone views compare the connected reference neighborhood, both neighbors, three zooms, reload and actual pans, with a separate mixed-terrain control. See composition evidence regional-review/connected-focal-increment.json. This is accepted local composition progress; regression/merge/live verification remain separate. The full reference-level landscape and worldwide performance gates remain open. Current inventory stays262exact originals,31/44building families,117/167legal contexts and585/835stage contexts;13families/50contexts/250stages remain.

The preceding nursery/school/care/refuge release3a90cb3 is verified live as8aac7b1f, with wiki38853206751SUCCESS. All262native hashes, client/library metadata, fivewiki pages and world identities match.40connected production ground views and40library previews were individually reviewed. The production ground evidence does not claim the locally exercised building stages were built on live. Earlier unaccepted natural-water draft notes are superseded by the verified foundation/water increment regional-review/foundation-water-increment.json, which already reviewed actual wet/dry/resumed observations114/116/119. Engineered works and broad combined acceptance still remain.

Workyards keep their identity on continuous ground — 16 October 2026

Mason workshop, textile workshop, livestock enclosure, managed pasture and waste yard have their own transparent foundation, frame, operational, damaged and ruined illustrations. Mason stone benches, textile loom/wheel, roofed enclosure, open pasture fence/trough and waste bins/cart retain distinct silhouettes through the lifecycle. Their open surroundings reveal the same independently painted terrain as adjacent cells and regions. Twenty-five unchanged1536x1024RGBA originals use nativeWidth110 and anchor[0.5,0.8]; no raster/alpha processing, crop or conversion. Mason/textile/enclosure/waste art is restricted to fields, grasslands, hills and forest; pasture to fields, grasslands and hills. Existing authoritative identity, stage, location, research, staffing and resources decide behavior. No renderer, simulation, geography or construction-rule change.

38native contacts and140actual saved-state desktop/mobile frames reviewed;66finite resource-funded orders,25reloads,five demolition/replacement routes and three actual production receipts. Evidence regional-review/workyard-families-increment.json separates normal/regression/live acceptance. Prior ada021a /5477abba /wiki38855954802 verified live with262exact sources and24native connected views. Inventory287sources,36/44definitions,136/167contexts,680/835stages and62/62paired location contexts. All six goal gates remain open.

Mason/textile/enclosure/pasture/waste-yard normal acceptance: all60normal source/camera/readiness assertions and all60individual native screenshot reviews passed on desktop/390CSSphone.225isolated checks passed, including exact stage/profile/native hashes, unavailable/loading rejection and complete phone Hex framing. Twenty-five unchanged originals cover95reviewed stage/profile pairs. Actual finite local lifecycle receipts, reloads and demolition/replacement are separate from unobserved production building stages. Merged and connected live acceptance remain separate.

Civic, culture and military identities on shared ground — 16 October2026

Academy, scriptorium, barracks and theater now have separate transparent foundation, frame, operational, damaged and ruined illustrations. The academy keeps its two-wing hall, scriptorium its copying porch, barracks its elongated hall/equipment porch and theater its open stage/separate benches. Their gaps expose the same continuous ground as adjacent cells and regions. Twenty unchanged1536x1024RGBA originals use nativeWidth110 and anchor[0.5,0.8] across fields, grasslands, hills and forest. Existing authoritative identity, stage, plot, research/adoption, staffing and resources still determine availability and behavior. No simulation, geography, construction-rule or renderer change.

32source contact sheets and112actual paid saved-state frames reviewed;95finite resource-funded orders and20stage reloads. All four paid construction/repair/rebuild/demolition/salvage/clearedreload routes passed; only scriptorium/barracks additionally claim a post-clear replacement. No academic-service, cultural-output or troop-training receipt is implied by artwork. Evidence regional-review/civic-families-increment.json separates normal/regression/live validation. Previous release1d429c9 /91dcddf1 /wiki38861929796 is verified live with287exact sources,50ground+50library views. Inventory now307sources,40/44definitions,152/167contexts,760/835stages and62/62paired location contexts. Four definitions and all six combined-goal acceptance gates remain open.

Academy/scriptorium/barracks/theater normal acceptance: all48normal source/camera/readiness assertions and all48individual native screenshot reviews passed on desktop/390CSSphone.225isolated checks passed, including exact stage/profile/native hashes, unavailable/loading rejection and complete phone Hex framing. Twenty unchanged originals cover80reviewed stage/profile pairs. Actual finite local lifecycle orders, reloads and demolition/salvage/clearedreload (two optional replacements) are separate from unobserved production building stages. Merged and connected live acceptance remain separate.

Complete supported building artwork inventory —16October2026

The stone civic works hall, secondary groundwater well, founded outpost camp and legacy stable each have dedicated transparent foundation, frame, operational, damaged and ruined illustrations. Hall buttress feet and planning porch, open well ring/windlass, canvas camp/depot and empty two-bay stable remain distinct on shared ground. Twenty unchanged1536x1024RGBA originals use110world-unit canvas width and anchor[0.5,0.8], across the fifteen legal terrain contexts; camp excludes forest. True transparent exterior/interior gaps expose the existing ground across neighboring cells and regions. Planned/site preparation stays procedural. No simulation, geography, construction availability or renderer rule changed.

30source contact sheets and112actual paid saved-state frames reviewed,299resource-funded orders/20stage reloads/fourclearedreloadroutes; no optional replacement. Camp new construction remains founding-only; stable QA is explicitly unchartered legacy development. Actual hall quarry/tool production and well surveyed moisture/Irrigation are documented separately from art. Evidence regional-review/final-families-increment.json separates normal/regression/live acceptance. Previous302105c2 /b58de239 /wiki38869169840 verifiedlive307originals and50ground+40libraryframes. Inventory becomes327exact sources,44/44definitions,167/167contexts,835/835stages and62/62paired place contexts. Allsixfull-goalgatesremainopen: connected reference-richness, evolving engineered waterways and broad combined worldwide state/occupation/navigation/cache/performance review still required.

Hall/well/camp/legacy stable normal acceptance: all48normal source/camera/readiness assertions and all48individual native screenshot reviews passed on desktop/390CSSphone.225isolated checks passed, including exact stage/profile/native hashes, unavailable/loading rejection and complete phone Hex framing. Twenty unchanged originals cover75reviewed stage/profile pairs. Actual finite local lifecycle orders, reloads and demolition/salvage/clearedreload (zero optional replacements) are separate from unobserved production building stages. Merged and connected live acceptance remain separate.

Combined regional composition and evolving works —16October2026

Regional scenery uses shared world coordinates across ownership and planning borders. The finer twelve-unit shoreline lattice refines close coastal curves while preserving the continuous water field and canonical geography. Decorative foreground canopy candidates leave the identifying core of an actual approved native location visible; surviving trees retain their positions and authoritative woodland is unchanged. Actual constructed outlet sections follow their surveyed neighboring cells through bends. A restrained wet center appears only for the latest completed, conserved commissioning interval; the next interval clears it while transfer history remains. Channel inspection describes that measured route transfer without claiming sustained flow.

The combined audit now covers all eleven actual mixed-profile neighborhoods and all sixteen canonical feature types. Both native conifer variants are additionally checked at actual cold Pinewood sites; warm current broadleaf stands remain truthful. Complete artwork inventory is327exact unchanged sources,44/44supported building definitions,167/167legal contexts,835/835matched stage contexts and62/62paired canonical location contexts. Cumulative actual resource-funded lifecycle evidence is retained per family; planned/site preparation and founding/legacy restrictions remain intact. Physical major-waterworks prerequisites are explicitly controlled integration fixtures, distinct from earned finite-resource building journeys; the authorized conserved transfer and following ordinary interval use actual engine state. Combined acceptance regional-review/combined-world-acceptance.json records146normal live baseline frames, rejected close shoreline/canopy defects,84corrective candidate frames, actual sparse arrival/retirement/reload checks and233passing isolated checks. These replace the earlier inventory-only assessment; final merged checks and exact updated production visual verification remain pending before the goal closes. No player/save/geography/source-byte changes.

Late native location readiness —16October2026

Canopy plan revisions now include the current native-place eligibility/width of their actual canonical cell dependencies. If the approved world arrives before its native-place manifest, a later unchanged manifest response rebuilds affected warm plans and their raster bands. Unrelated chunk plans can remain cached. Existing tree state and surviving positions, source pixels, geography and approvals are unchanged.

Release51(20471e7 /0d808b43/wiki38887684783) served exact327originals and preserved world identity. Its58connected Region/Hex frames were all reviewed; a phone Region floating-stone site remained hidden while Hex was clear, so full visual acceptance was rejected. Controlled network timing reproduces the underlying early plan on desktop/phone; releasing the exact unchanged manifest clears the native site, and normal reload/Hex agree. Two deliberately incomplete timing frames are not art acceptance; six final native frames are individually accepted. An actual renderer-cache regression fails with oldcomposer8 and passes with9. Readiness evidence regional-review/native-place-readiness-increment.json retains the rejected live frame and separately documents eight actual consecutive commissioning warm-cache updates. No implementation completion is claimed before corrected production verification.

Current regional visual acceptance: complete — 16 October 2026

The six documented regional visual-completion gates are accepted against the cumulative evidence, including corrected regional-composition-9 production 3bdf8c70c340e05d51061a39de86b525f3e2ed1c / 631509df-7ef2-4357-b5dc-566bcf647460 / wiki38891357235 SUCCESS. Regional ground and scenery continue across neighboring planning/ownership borders; native landmarks remain distinct and legible, current species/occupation/land use control scenery, matched building families evolve through their real stages, and waterways follow current authoritative geography and measured state. All 327 source originals and approvals remain exact. Existing player geography, ownership and saves are preserved.

Combined acceptance regional-review/combined-world-acceptance.json is the current implementation status and supersedes earlier dated inventory-only/open/pending assessments. Native-place readiness regional-review/native-place-readiness-increment.json retains the genuine release 51 phone loading failure and the corrected58-view current production acceptance. The supplied reference is art direction for coherent layered composition; actual geography is not rearranged to reproduce its exact picture. Physical major-waterworks prerequisite material stocks/household clocks are explicit integration fixtures, distinct from separately documented earned finite-resource building journeys; no injected water or production orders. Bounded headless desktop/phone cache/readiness review is recorded with actual preparation metrics, without claiming physical-hardware FPS certification or unrelated full City-panel acceptance. No source pixels, approvals, game prerequisites or simulation rules change in this completion record. The one-week maximum deadline remains18 October 2026 at15:18:32UTC; implementation acceptance is complete16 October 2026, and the goal service closes after this documentation-only release is verified.

Regional visual goal reopened — 17 October 2026

The user's fresh production comparison rejects visual parity with the original painterly region reference. This supersedes the preceding six-gate completion claim: implementation coverage and source review remain useful, but repeated ground motifs, smooth scalloped shores, beach treatment and isolated landmark surroundings are unresolved visual gaps. The goal is active again. Completion requires fresh neighboring-region, coast/beach and landmark production screenshots shown to the user before closure.

First candidate: full native ground stamps overlap on a fixed irregular world-space lattice with stable offsets, stable source orientation and scale variation. Identical regions, camera zoom and reload retain the same shared-world patch identities. No source file is changed or newly approved. Variable-width coastal presentation differentiates sandy ocean contacts, rocky/high ground, marsh, cold gravel and restrained lake banks on the existing authoritative water boundary. The next candidate also changes near-shore presentation interpolation to shared multiscale irregularity with an eight-unit mesh, preserving exact canonical centers and homogeneous land/water. Landmark surroundings remain open. It must pass normal local visual review, regression checks, and exact live verification before being described as released. Gameplay geography, costs, staffing, controls, stocks and saved state remain unchanged. See reopened visual review regional-review/reopened-regional-art-direction.json.

Landmark-surroundings candidate: a bounded shared-world halo finds actual approved native sites and places a few asymmetric low brush/mineral contacts on genuine neighboring terrain. Every root still checks exact source/profile/feature/state permissions, current work, occupation and observed water. Native identifying cores remain clear; no roads, buildings, resource stocks or authoritative vegetation are fabricated. Place-art readiness is a revision dependency. This is a candidate for direct visual review, not full visual completion.

First reopened increment local review: all fourteen native desktop/phone map panels are individually reviewed and accepted only as an improvement over the actual 17 October production baseline. The first uniform bright beach ribbon was rejected and is retained alongside the corrected frames. 197 affected checks pass; shared/live verification remains pending. The goal stays active: repeated microtexture, larger coastal composition, landmark context richness and cold planning/compositing still need work. Six unchanged historical reference/census test failures are explicitly separated in the review report; this is not a claim of a green entire test suite. No simulation rule or original raster file changes.

The first reopened visual increment now passes the same 197 affected checks in the isolated and guarded shared workspaces. Original historical design bytes are retained around a concurrently authored QA heading; catalog/header, saved world and shared Git index are unchanged. 35-source isolated and 37-source shared wiki generation/freshness pass. Exact connected production comparison remains pending, and the full artistic goal stays open.

Quiet native wetland floor and compact beach roots — 17 October 2026

The first reopened correction,36782aa, is verified on live production:327exact native source hashes, sixteen client modules/styles, five wiki pages, both catalog/index endpoints and fourteen individually reviewed connected desktop/phone map panels. World identity and instance are unchanged. Two live comparison screenshots were shown to the user. This supersedes the earlier pending-production note in the reopened review regional-review/reopened-regional-art-direction.json. The full artistic goal stays active.

The next increment replaces the visibly striped wetland-soil-v2 live foundation with the native opaque wetland-floor-v3 at eight hexes per source span. It paints quiet peat/moss earth only; real vegetation, water, resources and work remain independent. The old source bytes remain archived with approval revoked for live ground. Compact native dune-grass tufts, without an attached pale sand strip, are approved only for empty wild fields/grasslands sandy ocean edges. The first pale-strip grass draft and first diagonal floor edit were rejected after actual map review. Both selected files are unchanged built-in imagegen output, with prompts, provenance and exact hashes retained.

shore-props-2 requires nine real eligible dry roots and direction-aware inland setback. Unsupported features/profiles, lakes, missing geography, real occupation, managed work, burning and burned/clearcut/plowed disturbance exclude the grass. Current root eligibility and display readiness join the Hex cache key, preventing stale grass after neighboring work or deferred image preparation. Source selection is stable across camera, region, source-array order and reload. No vegetation stock, harvest action, road, buildable land or extra water is created.

All36canonical candidate panels were individually inspected:20beach Region/Hex/neighbor/reload plus16wetland, actual adjacent boards, mixed shore and Hex panels on desktop/390CSSphone. The accepted source contracts generate328approved originals, version3aa7bd09c724e94f. Normal-manifest, regression and connected-live evidence are recorded separately in the native coast/floor review regional-review/native-coast-floor.json. Contextual source approval is incremental art acceptance; upland repetition, broad shore massing/high-zoom contour facets, richer landmark surroundings and cold preparation performance remain open against the original vision.

Quiet dry earth and mountain phone framing — 17 October 2026

The preceding native wetland/coast increment,680e6ad, is verified on live production: all 328 exact source hashes, sixteen clients/styles, five generated wiki pages, catalog/index endpoints and 36 connected desktop/phone scenes. Three actual neighboring boards were inspected and two shown to the user, followed by a live sandy-coast phone screenshot. The saved world and instance remain unchanged. This supersedes the pending live status in native coast/floor review regional-review/native-coast-floor.json. The full original-vision goal remains active.

Two quieter ordinary-earth sources replace five older grassland/hill/mountain paintings with visible directional microstructure. Native hill-soil-v1 supplies shared dry grassland/hill earth; corrected mineral-floor-v1 supplies mossy upland mineral earth. Both use an eight-hex source span, no baked relief, vegetation, buildings, roads or water. Real elevation, native relief, living vegetation, resources, canonical subjects and work continue as independent authoritative layers. Source sharing here describes ordinary soil, not a shared landmark identity. The old originals remain archived with live approval revoked. The first grey mineral draft was rejected because it made the mossy feet of native rocks stand out; the accepted native edit matches the existing olive earth palette. All source pixels remain unchanged tool output.

Forty actual canonical material panels were individually inspected across three neighboring boards, three dry profiles, close/Hex/overlap/reload, mixed biomes, real ocean/lake contacts and native peaks on desktop/390 CSS phone. Phone review also found selected high peaks extending behind Hex controls. Ready selected relief now receives the existing phone subject framing and leftward offset; loading sources do not claim framing. A separate relief dependency key binds actual IDs, source, position, width and display readiness so root or readiness changes repaint the Hex. Two actual corrected phone captures and native-extent/cache regressions validate this adjustment.

The exact normal contract has 325 approved originals, version95d12af2e666dd9a. Normal, merged regression and connected-live checks remain separately recorded in quiet-upland review regional-review/quiet-upland.json. Coast massing and beach shading, remaining desert-material repetition, landmark surroundings and cold preparation performance still require reference comparison; the goal is not complete.

Actual-depth coasts, soft beaches and quiet sandy earth — 17 October 2026

The preceding quiet-upland incrementc3daf80 is independently verified on connected production: all325exact original hashes, sixteen clients/styles, five wiki pages, catalog/index, unchanged world/instance and40native desktop/phone scenes. Corrected phone peaks and neighboring regions were shown to the user. The original artistic goal remains active.

Coastlines now reconstruct the existing canonical elevation and lake-basin depths instead of smoothing equal land/water labels, which imprinted repeating hex scallops. regional-water-7 / canonical-depth-1 uses shape-preserving cubic reconstruction in three axial bases and takes their median to avoid a privileged row direction. Existing saved center classifications, true same-domain hex-neighbor connections and homogeneous triangle domains remain authoritative. Missing or inconsistent scalar metadata uses the retained bounded domain fallback. The world kernel, generator6, seed, water cells, land cells, ownership and saves are unchanged: this is a replacement cosmetic contour, not world regeneration. Geometry remains fixed in shared world coordinates through pan, zoom, neighboring regions and reload. Cooperative row/path preparation and dependency invalidation are retained.

Beach and bank shading uses finer bounded opacity ramps and narrower, quieter water washes. Beach widths and earth/rock/marsh/cold treatment follow shared world geology and local terrain rather than region identity. The unchanged native bank-stone source now has an exact typed empty/wild root contract:46world-unit canvas width ordinarily,84only on actual rocky treatment, a dry center and nine known appropriate land/water roots. Actual occupation, work, burning, burned/plowed ground, incompatible profiles and feature cores take precedence. Tree clearing alone does not erase decorative geology. A separate stable avalanched mineral-gap sample breaks adjacent triangle pairs and leaves quiet shore intervals; existing dune grass retains its dry, undisturbed temperate sandy-ocean eligibility. Decoration adds no harvest stock or building permission.

A quiet opaque native desert-soil painting at an eight-hex span replaces two approved archives with baked repeated dune/rock patterns. Actual dunes, palms, ruins, settlements and work stay separate state-grounded layers. The original tool output is copied unchanged; retired PNGs remain archived but cannot return as fallback. Exact native source/context approval is separate from proposed preview, normal generated manifest, merged checks and connected live acceptance. The resulting contract has324originals, version9bcb2751e6fd8a1e. Natural-bank review regional-review/natural-banks.json records real desktop/phone coast/lake/landmark/neighbor/Hex/reload comparisons. Final reference-level composition and preparation performance remain open; passing tests does not complete the artistic goal.

Quiet cold ground and integrated woodland floor — 17 October 2026

The preceding natural-bank releasecfdc498is verified on connected production: exact324originals, sixteen clients/styles, five wiki pages, catalog/index, healthy unchanged world/instance and50native desktop/phone panels. Ordinary pointer pan and Region/Hex return retain shared scenery and reuse the ready regional cache. Two real neighboring regions and a sandy coast were shown to the user. This supersedes the pending live status in natural-bank review regional-review/natural-banks.json.

Two quiet opaque native cold-earth paintings replace four tundra/arctic archives with repeated baked miniature rocks/ridges/mountains. These sources supply ordinary mineral soil or thin snow at an eight-hex span. Actual ice, outcrops, peaks, vegetation, canonical places and current work remain separate state-grounded native layers; quiet snowy or tundra gaps no longer imply fake raised terrain. A third native woodland moss/earth painting at a six-hex span replaces the directional strand floor. Initial reference edits retained too much directional grain and were rejected. A later flat khaki woodland draft was also rejected in real neighboring regions because it made trees look isolated. The corrected richer olive moss/humus pigment restores fine organic integration under actual tree feet without baked live plants, roots, relief or crisp grass strands. Rejected native outputs/captures remain evidence; selected source pixels are unchanged tool output. Five old originals remain archived with live approval revoked only after exact canonical acceptance.

Fifty actual canonical desktop/phone panels cover three adjacent boards, forest/tundra/arctic Region/Hex/neighbor/reload, six real ocean/lake contacts and actual ice/pines/magic/ruins surroundings. Native ordinary-earth sharing never changes landmark identity; each real canonical feature still selects only its exact approved profile/feature source. Current species, cover, maturity, fire, clearing, work and occupation retain precedence. There is no world-kernel, water geometry, terrain identity, physics, ownership or save change. The resulting322-source contract is version36c8e4b50c8cdeba. Cold/woodland review regional-review/quiet-cold-floor.json separates candidate, normal generated, merged and connected live acceptance. The original goal stays active until final production/reference comparison and screenshots are accepted; deadline18October2026 15:18:32UTC is unchanged.

Close coastal contours and bounded natural edge detail —17October2026

The quiet-cold-floor releaseba749b3is verified live with50actual connected native desktop/phone frames, all322exact source hashes and unchanged world/instance identity. Its richer six-hex woodland floor, quiet tundra/snow, distinct native locations and current player land use are retained. Final coast refinement now uses bounded physical-depth edge erosion and a2unit close-view mesh in120unit chunks; Region stays8/480. Both sample one shared world field across regional borders, retain60row preparation jobs and separate mesh cache identities. Saved canonical wet/dry centers, connected same-domain hex edges, uniform-domain triangles, existing ocean/lake topology, generator6and simulation remain authoritative. Beaches keep context-sensitive irregular widths, quiet shallows and native dry-root-safe grass/mineral groups; no uniform ribbon. All16private coast panels were individually reviewed, including phone Hex. Normal and connected live acceptance remain separate. Coastal evidence regional-review/close-shores.json.

Reopened regional vision accepted on live production — 17 October 2026

The reopened artistic gaps are accepted against the original reference traits after connected production review of 4e2d1452157a117e9787057dfc00a799f10e287e: three real adjacent regions, sandy/marsh/rock/cold coasts in Region and Hex, three lake contacts and grounded native landmarks on desktop/phone, plus ordinary live pan and Region/Hex/Region return. The eight exact new native sources replace thirteen repeated ground approvals; all retired originals remain unchanged archives. Current approval is 322 originals, version36c8e4b50c8cdeba. Forest clumps, quiet ground, low place contacts, relief and coast geometry share world coordinates across ownership and planning borders. Fine close shores resolve local facets while saved centers and topology remain authoritative. Distinct place categories have 38 unique original hashes with no cross-category identical-byte aliases. Current vegetation, occupation, working land, matched building stages and measured water state still control visible change.

217 affected checks pass in both isolated and guarded shared trees.32 normal and36 connected native live frames are accepted; exact322 hashes,16clients/styles,5wiki pages,2metadata endpoints, health and unchanged world/instance identity passed. Original reference and eight native live gallery images are retained unchanged in docs/regional-review/final-live. The reference guides composition and integration; actual geography and current player land use determine placement. Physical-device FPS and six retained legacy reference/source assertions are explicitly outside the affected-scope pass. Final reference comparison and cumulative evidence regional-review/reopened-final-acceptance.json supersedes earlier open-gap summaries without erasing their history. Final evidence/wiki publication and exact release verification precede goal-service closure.

Regional vision reopened: composition remains unfinished — 17 October 2026

The user reopened this goal after the17October completion claim. That claim is superseded: the current screenshots still have repeated bright low-slope chains, carpet-like woodland, detached landmark surroundings and smooth artificial-looking coast edges. The supplied original vision remains the visual target, and adjacent regions must blend. Tests, source counts and a minor placement correction are not sufficient for final artistic acceptance.

The first increment corrects correlated incidental landscape scatter: raw FNV member suffixes gave eight-member groups a mean angular range of only0.050turns, with none of256groups spanning three quadrants. An avalanche gives0.782turns and248groups spanning at least three quadrants. Existing canonical natural-feature silhouette selection is deliberately retained; a prototype that changed grove/reed/palm variants was rejected and corrected. Source pixels and322-source approval stay unchanged, as do saved geography, simulation and world identity. New relief drafts remain unapproved until actual canonical/normal/live review. Reopened evidence and remaining gaps regional-review/vision-distribution.json. The original18October2026 15:18:32UTCdeadline remains; the goal is active.

Quiet native rock shoulders; regional vision still open — 17 October 2026

The preceding distribution increment c38ba777 is verified live in16connected native frames, with322exact source hashes and unchanged world/instance. The next increment replaces only two repeated bright low-slope chain paintings with two compact connected native rock shoulders, unchanged from their generated originals. Both use256world-unit width and their complete positive-alpha root envelopes. They remain restricted to real unworked/unoccupied mountain ground with none/peaks context; missing dependencies suppress drawing. The two old paintings remain unchanged archives with approval removed. Current approval stays322originals, now version2eb19862a776fc08.

regional-ridges-5 uses one world-coordinate priority separation for low slopes and actual local elevation range plus the existing geological mass field for density. The same candidates and priorities cross regional borders; canonical focal peak identities and placement are retained. Twenty normal native desktop/phone panels accept this narrower improvement, with221affected isolated checks. Guarded merged and connected live acceptance are separate. The overall goal remains active: flat terrain, woodland carpet, landmark settings and synthetic coast/beach composition still fall short of the original vision. No geography, save, simulation, current land use or player control changes. Scoped evidence regional-review/vision-outcrop.json.

Woodland glades across neighboring regions — 17 October 2026

The native low-outcrop increment90229068 is verified live in20connected native desktop/phone panels, with322exact source hashes, current wiki/catalog and unchanged world/instance. The woodland increment now uses regional-composition-10: a continuous shared broad habitat field creates stronger glades, quiet mature interiors no longer force one decorative canopy into every hex, and open mixed woodland favors individual native crowns while dense interiors retain groups. Adjacent regions and reloads share candidates, mass fields, roots and source choices. Sparse living regrowth remains visible; clearing, burning, occupation, species and age still govern actual canopy presentation. No tree stock, resource yield or simulated clearing changes.

Eight actual normal native neighboring-region/upland panels accept the woodland-only improvement. The separate elevation-lighting study remains private and excluded. Current322originals/version2eb19862a776fc08 and every native source byte are retained. The warm-cache fixture now selects a genuinely visible crown before testing clearing/regrowth/construction, because its former arbitrary center can correctly be a glade. Scoped woodland evidence regional-review/vision-woodland.json. The original vision goal remains active for continuous relief, landmark settings and natural beach/coast composition; normal, merged and connected live acceptance stay separate.

Native granular beaches and shared shore refinement — 17 October 2026

Woodland7a9d5176 is verified on connected production in16native frames, with222affected checks in isolated/shared trees, exact322originals, current wiki/catalog and unchanged world/instance. The next increment adds one exact opaque RGB8 fine sand painting, reviewed in34private native canonical frames including actual meadow, dry grassland, desert and forest sandy ocean contacts in Region/Hex on desktop/phone. Approval becomes323originals/version4d8d1c59d90db875. The prior322source hashes and all archived images remain unchanged. This source has its own regional-shore-material-1 contract: sandy ocean bank underlay only, four explicit profiles, fixed768world-unit phase, exact land-side shore clip, and no substitution for general terrain, lakes, marsh, rock or cold banks. Native image loading, late readiness and eviction invalidate the close-view cache; per-profile bank grouping keeps permission independent of neighboring visible profiles.

regional-water-9/canonical-depth-3 adds a bounded world-coordinate mixed-contact erosion term which vanishes on same-domain hex edges and at saved centers. Homogeneous triangles, canonical wet/dry centers, real six-direction connections, world geography and simulation remain authoritative. Region8/480 and Hex2/120 retain bounded60row preparation and shared field/cache contracts. All136old coast fixture hashes were reproduced and retained;62physical contour chunks and25of272field samples intentionally change in the new fixture. Twenty-six focused normal checks pass; full affected/merged and actual normal/live visual acceptance remain separate. No source pixels are edited or recolored. The overall vision goal remains active for continuous relief, landmark settings and final adjacent-region/reference comparison. Scoped beach evidence regional-review/beach-material.json.

The asset library now recognizes the separate shore-material representation and explains its beach-only purpose. Its new exact native card brings the regional source-card count to305; the normal library continues to apply file-level approval and sorting.

Canonical terrain form and coherent landmark settings — 17 October 2026

Historical lighting behavior, superseded on 19 October 2026: The preceding native-beach increment is verified on production at commit 595be6048dd333ebabf3ac1f3933152ffb62722c, deployment 5996f161-ed21-4a14-aecb-0da60b961d24: 34 connected native panels, 323 exact approved originals and unchanged authoritative world/instance. This next renderer increment adds restrained directional relief lighting from actual canonical elevation. A compact world-space quadratic reconstruction preserves affine slopes without hex-grid lighting artifacts; neighboring viewports share the same 16-unit raster phase. Preparation yields after at most 256 samples inside the existing scene frame budget. Incomplete elevations remain neutral, oversized views fail safely, and cancelled builds never publish partial lighting. Lighting composites over existing ground before the authoritative shore mask; uniform inland Hex views use the same pass. Original source pixels, water topology, resource yields, saves and commands are unchanged.

Incidental mineral ensembles now contain one or two members and occur less often, particularly on temperate ground; canonical grove, pine, dune, ice, geology and resource identities retain their existing hash and anchors. Real native landmarks may receive at most two compact groups of three small compatible details. Material follows actual surrounding climate, the source width respects focal scale, and all root samples still reject water, occupied, worked or incompatible ground and missing source readiness. Existing natural state changes continue to clear and regrow eligible vegetation.

The optional Regional hex grid defaults off for fresh preferences, giving terrain a continuous presentation. Existing explicitly saved on/off preferences survive; Settings → Map & controls → Regional hex grid restores the grid. Selected-hex and regional boundary cues remain. Getting started, Beginner guide and Start guide were reviewed: selection, founding reviews, staffing, food and first-project requirements are unchanged. The overall original-vision goal remains active pending continued visual comparison, connected landscape and coastline review; this increment does not claim the painterly reference has been fully matched.

Hex native-source readiness — 17 October 2026

Connected production review of the terrain-form increment exposed premature Hex readiness: a cold-load portrait could be labelled ready while its approved ground or canopy was still loading. The artwork was able to refresh, but that state could falsely accept fallback graphics as a completed scene. Hex now tracks the exact selected/visible terrain and native object source requests, includes their readiness stamp in its portrait cache key, and reports preparing until those requests settle. Unavailable requested art is reported separately as fallback; unrelated distant requests do not hold the local view. Image errors trigger the same bounded refresh as successful loads. This changes no original image, geography, save, costs or gameplay orders.

Getting started, Beginner guide and Start guide: your first village were reviewed: keep Global / Region / Hex and current site-inspection controls; allow the reviewed illustration to finish loading before judging the terrain or landmark. Founding, food, staffing, first projects and their live quotes remain unchanged. Overall original-vision goal remains active. The preceding deployment e9677dc30b9b3c5c2f06d850ce374894a3c48a56 passed243isolated/merged checks and exact323source/18client/wiki/catalog/world checks, but its full cold-load live visual acceptance was withheld for this fix.

Native crown keep and independent ground variation — 17 October 2026

The terrain-form and Hex-readiness release3ad6f881 is verified on live production:42completed native panels,246isolated/merged checks, exact323images/18clients/library/wiki/catalog and unchanged world/instance. This increment retains the existing feathered world-space material painter while strengthening its patch-parameter hash. The previous x/y and y/size correlations(-.256 and-.445 over6904patches) fall to-.020 and-.016. Native image pixels, source angles, material scales, physical terrain and shoreline contours remain unchanged. Opaque native-phase experiments were rejected for visible tile edges.

One exact new native transparent crown-keep castle adds a stronger connected skyline and a transparent courtyard showing the actual ground. It is an additional existing-castle variant on fields, grasslands and hills; the original courtyard and round keep remain. The actual stable three-variant selection resolves all518eligible castles:164new keeps,178courtyards and176round keeps. Two narrow shores rejecting a forced larger source retain their round keeps under actual selection; no foot/anchor/scale or water guard is relaxed. Original source/context review covered20native panels, and material review covered30neighbor/terrain panels. Approval becomes324exact images and306regional library cards; every prior323image file and preceding catalog record remains unchanged.

Getting started, Beginner guide and Start guide: your first village were reviewed against current navigation, site inspection, separate order reviews, staffing, food and first projects. This is presentation only: it creates no settlement, building, ownership, stock or order and changes no cost or prerequisite. The overall original-vision goal stays active for broader connected landforms and natural coastline composition.

Finer native ground and quiet water — 17 October 2026

Historical lighting behavior, superseded on 19 October 2026: The crown-keep and independent material-variation increment 6d1a89f4 is verified on live production: 50 completed native views, 251 isolated and shared-tree checks, 324 exact source files and unchanged authoritative world/instance. The next scoped increment keeps the same geography and height lighting while reducing land material span to four hexes and using two quieter native ocean/lake sources at two-hex span. Four older broad-ripple water variants are archived and lose AI approval; their original files remain. Every other 320 approved original is retained. Approval becomes 322 exact images and 308 regional library cards. All 74 private native contexts were inspected, including neighboring regions, eleven terrain profiles, actual castle surroundings and sand, marsh and cold banks. A brighter ocean candidate was rejected.

Existing feathered material preparation continues up to a bounded 4,096-patch estimate so finer regional materials do not prematurely switch to hard rectangular native repeats. Sixteen-patch steps use the remaining existing eight-millisecond frame budget; slow work and cancellation retain their guards. Building placement always uses the full native source geometry, including when Region paints a smaller display image. Hex readiness includes the actual placement job as well as image loading; a loading fit cannot be labelled complete. Narrow coastal-castle checks also verify that the foreground really contains painted native pixels. Unavailable fits remain explicit fallback, without relaxing dry-ground or occupation checks. Old links and restored region cameras use the same lower zoom limit as ordinary Region navigation, avoiding a stuck oversized shoreline request.

Getting started, Beginner guide and Start guide: your first village were reviewed against Global / Region / Hex, site inspection, founding reviews, staffing, food and first projects. No cost, prerequisite, timing, saved world, ownership or gameplay order changes. This scoped increment does not finish the original-vision goal: broad landform composition and straighter marsh-shore segments remain under review. Native provenance and review regional-review/quiet-water-ground-increment.json.

Connected natural shores — 17 October 2026

The shoreline display now applies four gentle, seeded world-coordinate displacements to the previous canonical-depth field. This gives beaches and marsh banks less regular bends while preserving the existing field’s connected components. Each displacement has a conservative Lipschitz bound below 0.83 and is pinned at saved cell centers, every same-domain edge and uniform-domain triangles. A protected neighborhood around each saved center retains the complete previous eight-unit display triangle; this also preserves its actual painted material, rather than only the scalar at an infinitesimal point. Neighboring regions use the identical world function. A stronger additive erosion trial was rejected because it introduced an isolated water pocket beside an actual beach. The selected coordinate mapping leaves that witness connected. The mathematical guarantee concerns the continuous field; actual Region and Hex mesh output is separately checked.

Actual ocean/lake ownership and shore treatment still use the original point’s canonical neighbors. Geometry remains eight-unit Region / two-unit Hex, sixty resumable rows per chunk, with existing missing-geography, cancellation and occupied/worked-ground guards. The previous v9 module and 136-chunk fixture remain immutable regression history; the new v10 fixture covers the same locations. All 322 exact approved images, their pixels, source contexts and catalog records are unchanged. Existing worlds and player orders are unchanged.

This increment addresses coastline shape; the original-vision goal remains active through actual normal and connected production screenshots and final broad-landform comparison. See connected-shore evidence regional-review/connected-shores.json.

Mountain scale and current coastal verification — 17 October 2026

The connected shore release (12c835e) is verified on live production: 74 completed native panels, all 322 exact image hashes, client files, guides, catalog and healthy unchanged world identity. Both workspaces passed 264 scoped checks. Saved centers retain their complete coarse display neighborhoods; beaches, marshes and cold coasts share continuous neighboring geometry.

The two existing transparent granite peak sources now use a reviewed 104-world-unit width, replacing 168. Every actual secondary peak retains its canonical identity, position, anchor and full original aspect. Existing dominant 256-unit ridge masses, woodland, landmarks and actual living-world changes retain their own scales. This clearer size hierarchy makes repeated smaller silhouettes less prominent and leaves room around main terrain forms. Original source pixels, all other approval contexts and saved geography are unchanged. Both source shapes were inspected at actual uncovered canonical peaks in Region and Hex, alongside neighboring regions, eleven terrain profiles, castles and coasts: 82 private native contexts. Normal and connected production acceptance remain separate; the original-vision goal remains active until final live comparison. Scale review regional-review/secondary-relief.json.

Continuous Hex surroundings — 17 October 2026

The preceding mountain/shore release (75942ce) is verified live in 82 native desktop/phone panels, with all 322 exact image hashes and client, guide and catalog checks. Both workspaces passed 264 scoped checks.

Hex now gathers the same real canopy chunks, ridges, relief and landscape/shore props throughout its visible world bounds as Region. An inspected woodland glade can show neighboring trees rather than appearing bare because no tree is rooted in its center cell. Selected structures and canonical places retain their subject framing; natural woodland uses a wider context. Shared chunk revision keys and the foreground stamp follow actual neighboring growth, clearing, fire and occupation. Source readiness includes the whole painted foreground. The existing chunk budget is checked before surrounding cells are materialized.

A private full-context trial exposed oversized wetland reeds and was rejected. The three existing native reed sources now use widths24/40/40 instead of52/96/96, consistently in Region and Hex. Original pixels, approved climates/roles/states, saved geography and simulation remain unchanged. Private native visual acceptance is recorded separately from normal and live verification. The original-vision goal remains active until fresh production screenshots are assessed. Review regional-review/hex-botany.json.

Prepared terrain and close-view readiness — 17 October 2026

Shared Hex surroundings and smaller wetland reeds are deployed in 39e20e3. All 322 native image hashes, client files, wiki pages, catalog, health and world identity were verified; both workspaces passed 267 regional checks and 132 normal panels were accepted. Live visual review accepted 131 of 132 panels and rejected one magical-site desktop capture with flat green ground. Four fresh loads and 50 navigation views showed correct textured raw canvases; the cause of that single frame is not conclusively attributed. The failed frame remains recorded.

Hex readiness now waits for relevant terrain bitmap preparation as well as loaded source images. A late successful terrain bitmap increments a revision included in the Hex cache key and schedules a rebuild. Worker failure releases the preparation request into the existing main-thread fallback; unrelated jobs do not hold source readiness open. This closes an independently verified missing cache dependency without claiming a confirmed cause for the isolated rejected frame. Three behavior checks cover late completion, failure and relevant readiness. Eighteen private native desktop/phone panels were accepted, including actual ground-pixel diagnostics; normal and connected live verification remain separate. All source artwork, approvals, shared scenery identities, coast geometry, saves and simulation are unchanged. The regional art-direction goal remains active for final coast and original-vision review. Readiness review regional-review/hex-ground-readiness.json.

Natural connected coast composition — 18 October 2026

Current verified production is 'c84d012': 132 connected native desktop/phone panels accepted, including 96 textured Hex-ground checks, 322 exact approved image hashes, client/library/wiki/catalog and unchanged world identity. Both workspaces passed 270 scoped checks. The earlier single rejected flat-ground capture remains recorded; its cause is not conclusively attributed.

The next reviewed increment replaces broad fixed near-water strips with radial protection around saved centers and their complete coarse-mesh neighborhoods. Four broad and four fine bounded coordinate steps vary bays, beaches and headlands between those protected areas. Each step is nonfolding; all regions and both zoom modes sample the same world field. Original-point canonical land/water owners, geography, saves and simulation remain authoritative. Continuous topology, finite display meshes and saved-center protection are checked separately. All 518 canonical castle choices retain valid native footprints without relaxing the minimum fit.

Shore mineral groups now keep at most one already eligible group from the two triangles of a physical mesh square, chosen by stable world-seeded priority. Surviving identities and native artwork remain unchanged. This removes the paired copies found during actual lake review without a viewport or administrative-region seam. Existing climate-specific beach, marsh and cold-bank treatments remain in use. All 322 source images and approval contexts remain unchanged.

Private visual acceptance covers 132 native panels; normal and connected production verification are separate release gates. The original-vision goal remains active for final fresh-live comparison and any remaining visual work. See coast composition evidence regional-review/natural-coast-composition.json and completion goal.

Coast publication cache correction — 18 October 2026

The first pre-deployment readiness probe cached the prior shoreline module at the proposed new asset URL. Production now uses a fresh coastline cache version; no renderer logic, approved source, geography, saved world or gameplay instruction changes. The accepted132normal native panels and274scoped checks remain applicable to the identical renderer bytes. Fresh standard connected production loads must verify the new module before live artistic acceptance. Beginner and village-start controls, prerequisites, costs, timing and success checks were reviewed and remain unchanged.

Regional vision: accepted connected production — 18 October 2026

The regional composition implementation is complete and visually accepted on runtime 43ea180. West, center and east neighbors share continuous ground, woodland, relief and water geometry. Natural connected bays/headlands and terrain-specific beaches replace the earlier geometric shore emphasis; paired bank-rock copies are reduced. Native typed locations and alternative silhouettes retain their actual identities, with surrounding living scenery shared by Region and Hex. All 322 exact native image bytes and approval permissions are verified. Current material3, composition10, landscape10, ridges5, height1, shared Hex context and water11/depth5/props4 are authoritative; older pending entries are historical.

Both workspaces passed 274 scoped checks in 54 files; normal 132 and connected-live132 native panels are accepted, including 96 actual textured Hex grounds. Five unmodified production screenshots are published in the guide with capture provenance. Current review prose for the two smaller peaks and three wetland reeds now records their actual live verification; all 3575 technical metadata records and 3570 other catalog rows are unchanged. Saves, canonical geography, simulation, existing player projects and source pixels remain unchanged. The original reference is the visual direction for palette, coherent masses and contact; existing geography is preserved. Final completion follows exact publication verification of this evidence, not an invented concept-art world or a physical-phone performance claim. Current evidence regional-review/region-vision-production-acceptance.json.

Region background detail correction — 18 October 2026

The player reported blurred grass and desert backgrounds beside sharp buildings and borders, with two supplied Region screenshots. This supersedes the previous broad acceptance for background detail. Comparisons separated display sampling, physical grain scale and actual source texture. Full native sampling changed little; restoring larger former scales alone did not resolve the soft materials and enlarged close-view ground. Those trials are not shipped.

Three new exact native opaque 1254-square RGB8 materials supply crisply defined short grass/earth for grasslands and hills, granular desert earth for desert, and damp organic earth for wetlands including the Cinder Basin comparison. The wetland palette uses the final native imagegen output after a tool-generated palette refinement; there is no post-generation raster processing. They replace three overly soft sources whose original bytes remain archived with AI approval removed. All 319 other active native image hashes and their approval permissions remain unchanged. The active whitelist remains 322 exact files. All land material spans remain 4 hexes; water remains 2. Renderer code, terrain mesh, mask blending, source phase, camera scale, shore11/depth5, native landmarks and world simulation are unchanged.

Native source/context review covers 44 desktop/phone Region, neighboring, coast, castle and Hex panels. Normal-build and connected production checks remain separate publication evidence. The rendering regressions and exact approval checks must pass before release. Save and world identity remain authoritative; no world regeneration or gameplay order is part of this correction. Source/context review ../tile-library/ground-detail-review-2026-10-18.json.

Complete land-material family: style and detail — 18 October 2026

The user's reported mismatch between detailed native landmarks and the soft background also affected retained materials after the first three-source correction. Five additional exact opaque RGB8 native materials replace the meadow, woodland, upland, tundra and snow floors. They use the original region vision as a style/palette reference, with small clearly painted grass, leaf, mineral and snow surface marks rather than broad cloudy patches. The reference supplies art direction; actual geography, vegetation, elevation and buildings remain separate authoritative world features. The original five material files are retained unchanged as archives with active AI approval removed.

Together with the earlier three replacements, the eight land material sources cover all nine land profiles at their existing four-hex source spans. Ocean and lake keep their existing native files and two-hex spans. This release retains all 317 other active native source hashes and context permissions, 322 total active files, and all 3,578 preexisting technical catalog records. Renderer code, continuous world phase, triangle biome masks, geometry, shore treatment, landmark placement, dynamic land-use masks and simulation remain unchanged. Neighboring regions therefore share the same actual terrain materials and mask fields; no region-local replacement image is introduced.

The private review covers 54 unmodified desktop/phone panels: all nine land profiles in Region and Hex, shared neighboring views, castle surroundings and beach contacts. Normal-build and connected live acceptance remain separate evidence. This resolves a material-family mismatch; it does not declare the entire earlier region-design vision complete. Exact sources and review ../tile-library/vision-ground-review-2026-10-18.json.

Original world retained; separate world retired — 18 October 2026

The user's latest decision supersedes the separate-world rollout: worldofgonz.com is the live game address. Keep the original GONZ-CONTINENTS-01 geography, namespace gonz-world-v1:d755acd809b577448db348843599dff1, persistent instance and all existing settlements/progress. Apply artwork and renderer updates in place; do not reset or replace its save with the former GONZ-CONTINENTS-02 world.

The original world already uses the same reviewed 322 native AI-approved asset sources and region/shoreline renderer that the separate world used. This release refreshes the original deployment and current guidance; it introduces no additional artwork or geography changes. Region materials continue across shared boundaries under the existing world-space composition rules.

The separate Railway service WorldOfGonz-New-World (d88c3230-a725-440c-98ec-d91b03fd1f48), its public domain/deployment triggers and its dedicated 5 GB volume bb364848-7ca4-45de-a973-a7b075deb363 were removed at the user's request. The original service and volume a6027caa-5430-4cd2-90fd-864ec9715ee0 remain. No separate-world save was imported. Future live updates follow the original service's main branch and preserve its seed, instance and save ownership.

Complete Art Atlas input and readiness synchronization — 18 October 2026

The user-confirmed upload supplies 8,303 checksum-bound maintained files. All originals and uploaded permanent IDs are retained. Four unpublished local replacements were assigned new IDs to avoid upload collisions. Fourteen native corrections now have distinct identities and are published through the Art Atlas with their own review state: four source-approved backgrounds, nine user-accepted appearance candidates and a newly revised wetland candidate. Source approval is separate from renderer integration and observed live use. No game painting or world state is replaced by this catalog publication.

All existing mesh backgrounds remain in the full readiness goal. The local non-periodic renderer and its 34 connected desktop/phone captures remain local work; this atlas release preserves the deployed renderer and 322-entry game whitelist. The signature reader now measures PNGs before inspecting embedded SVG metadata. See the full asset goal for scope, pending gates and evidence.

Uniform terrain presentation; height shadows removed — 19 October 2026

The user rejected the uneven Region shadows. This revision removes the additional elevation-derived lighting overlay introduced on 17 October from the shared Region/Hex ground compositor. Ground is presented using its native material colors; the renderer no longer computes or applies that height-light raster. This supersedes the earlier regional-height-1 lighting rule and historical notes below. The globe lighting is a separate view and is unchanged.

Canonical region boundaries, cross-region material blending, shore masks/contact materials, landmark and vegetation placement, original image files, and the approved-art manifest remain unchanged. Native painted highlights and contact shadows within those original images are retained. No world regeneration, seed change, settlement reset, gameplay control or simulation rule changes accompany this correction. Live acceptance must confirm the overlay is absent in connected neighboring, coast and Hex views while retaining the original world instance and save.

Atlas quality review batch — 19 October 2026

This catalog-only batch adds two exact native corrections, bringing maintained files to 8,319 while preserving every uploaded original and published ID. The registry records 329 source approvals, including the reviewed wetland, hills and upland sources. Sixteen quality-update paintings remain discoverable after local renderer routing. Fifty classic runtime portraits retain their artwork for explicit role/contact review and have reciprocal intended native-source links; none gains approval or gameplay from a label. Eight further quiet grounds link to inspected compatible reviewed outputs, preserving original false approval flags.

The complete library goal remains active. Local non-periodic rendering, source detail-scale contracts and context captures remain distinct from production deployment. This Atlas-only publication preserves the current game renderer, 322-source deployed whitelist, latest terrain-lighting fix, simulation and saves. See the full asset goal.

Continued Art Atlas source synchronization — 19 October 2026

This Atlas batch preserves all 8,319 prior maintained IDs/native hashes, including the 8,303 uploaded originals, and adds six exact versioned native PNGs. Woodland and dark-slate grounds have separate source approval; two ecotones, a wetland apron and a stone watchtower remain explicit unapproved candidates. The Atlas contains 8,325 maintained files, 22 quality-update paintings and 331 source approvals. The 222 metadata updates include exact individual native/runtime findings and source-role links, without automatic derivative, stage, entity or full-readiness approval.

This catalog publication preserves the deployed game renderer, index, regional art/source routing, compact metadata overlay and 322-source game whitelist. Local nonperiodic rendering, performance experiments and the local 331-source game manifest remain separate. No world, save, canonical geography, simulation rule or player control changes. The full all-assets goal remains active; source approval and Atlas presence do not prove actual live-world appearance. See the release review.

Next 100 native asset reviews — 19 October 2026

Individually inspected WOG-A-003834 through WOG-A-003933 using complete native files and separate approved-art material/detail comparisons. Twenty families cover reefs, crater lakes, crevasses, crossroads, magical sites, cypress woodland/wetland, oasis palms/lakes, desert fortifications/paving/tombs/villages, volcanoes, dragon remains, steppe and dunes. Preserve all 100 originals: 29 retain their artwork for contact/draw-size checks, 69 need a canonical role definition before an artwork decision, and two have targeted edge-correction candidates. These are individual findings, not source or full-readiness approvals.

Two new transparent portrait PNG candidates remove conspicuous gray oasis perimeter rims while retaining detailed subjects; generative interior changes are explicit. Date-grove candidate WOG-A-008326 retains eight alpha-1 edge pixels requiring final cleanup. WOG-A-008327 has no edge pixels. Neither is approved or integrated. All 8,325 prior identities/native hashes, including the 8,303 uploads, are preserved. The catalog now has 8,327 maintained records, 24 update paintings and 331 source approvals. The complete local ledger has 8,371 records with 7,543 initial individual reviews remaining. Source approval, renderer availability and observed live-world use remain separate.

No repeatable mesh pattern, image compression/resizing, performance renderer, gameplay control, world/save, geography or simulation change is introduced. The deployed renderer and 322-source game whitelist remain unchanged. See the individual review and release evidence.

Local native-ground context evidence synchronized — 19 October 2026

The Atlas retains 8,327 maintained records, 331 source approvals, 24 update paintings and every prior native hash. Only WOG-A-008324/008325 gain newer explicitly local QA context evidence. Their normal desktop/phone Region/Hex reload, neighbor and return captures use the actual 331-source local whitelist; all 24 final screenshots match the prior baseline exactly, alongside eight exact Edge shoreline RGBA cases. Full-game readiness is still open: forest scene slices are 14.4/24.3 ms and slate 11/23.9 ms against unchanged desktop/phone limits 12/20. Both phone drag p95 values are 33.4 ms within 34. Phone evidence is Edge at 4× CPU throttling, not a physical-device result.

The local candidate caches pure resolved paths while checking current approval every time and starts each original complete shoreline contact pass on a fresh frame. Native image bytes/detail, material grain, stroke order, widths, colors and opacity remain intact. The renderer candidate is archived as local evidence, not activated. The deployed renderer/index/source routing and 322-source game whitelist, saves, geography, simulation and controls remain unchanged. Specific place/state/lifecycle, broader performance/device and production evidence remains pending. See context release evidence.

Following 100 native originals and a separate cavern repair — 19 October 2026

Individually inspected complete native WOG-A-003934–WOG-A-004033 against exact viewed approved-art detail/material references. The twenty families span ruined towers, farm/fishing villages, fens, crossings, magical groves/levitating stones, fir highlands, fjords, floodplains, folded mountains, forest lakes/temples/towns/trails, cities, frozen landforms, gem caverns and geothermal valleys. Nine retain their original art for contact/draw-size checks; 85 require canonical roles before an artwork decision; six have targeted color/alpha defects confirmed in separate native-size light/dark diagnostics. A filename never grants ferry behavior, active extraction, political freedom, magical mechanics, a flood state or multiple operational building bindings.

One separate Gem Cavern alpha-repair candidate, WOG-A-008328, repairs extensive see-through solid rock/crystals and a pale perimeter while retaining the detailed scene. It is unapproved: mostly alpha-253 interior, 34 alpha-1 frame pixels and four enclosed low-alpha pixels remain explicit cleanup/inspection work. Generative interior changes are recorded; no exact-pixel restoration claim. All 8,327 prior identities/native hashes and 8,303 uploaded originals are preserved. Current maintained catalog: 8,328 records, 25 update paintings, 331 source approvals. Full scope: 8,372 working records, 7,443 first individual reviews remaining, zero full-goal accepted.

No image resize/recompression, repeatable mesh pattern, deployed renderer/index/routing, 322-source game whitelist, simulation, save, geography or player-control change. New source-role findings and the candidate do not establish normal Region/Hex or live-world appearance. See individual review and native comparison evidence.

Five native artwork repair proposals — 19 October 2026

Five separately retained native 1254×1254 proposals address the water fringes on fishing village WOG-A-003967 and city WOG-A-004013, gray energy matte on floating stones WOG-A-003974, a magenta rear rock on forest trail WOG-A-004006, and steam/rim/stray-mark contamination on geothermal valley WOG-A-004033. Exact originals remain intact. Generative interior/linework differences are explicit; these retain the brighter outlined illustration style and do not inherit the approved muted native place/canopy style or approval. No repeating ground pattern is introduced.

Atlas: 8,333 records, 30 update paintings, 331 source approvals; full working scope 8,377 and 7,443 initial individual reviews remaining. Zero full-goal accepted. Most solid generated pixels have alpha253 and frame specks have alpha1, so technical cleanup/disposition remains open. Finite shoreline, route, magical/volcanic role, state/lifecycle, contact/draw size, normal Region/Hex desktop/phone, performance and actual world appearance remain required. The deployed 322-source game, renderer/server boundaries, geography, world and saves are unchanged. See repair review.

Canonical mask scheduling prototype — 19 October 2026

A separately archived local renderer prototype separates existing complete material paint passes and builds canonical masks in bounded groups of 64 faces. It keeps the original triangle order, gradients, paths, native source bytes, sampling, resolution and nonperiodic material algorithm. Nested saved drawing state is restored when cancelled; unfinished masks remain offscreen. The original default local renderer and all deployed renderer/server files remain unchanged.

62 targeted tests and 18 native raster cases pass. Two candidate contexts and two fresh original-renderer controls provide 48 normal desktop/phone Region/Hex, reload, neighbor and return captures. The slate prototype is within its latest tested budgets; forest still exceeds shoreline-stage budgets. Whole-world differences remain explicitly recorded and qualified; a large slate difference also reproduces with the unchanged original renderer. Neither isolated pixel parity nor a passing slate run is a universal performance/fidelity or lifecycle approval. See study.

The Atlas adds experimental evidence to two existing source records only: 8,333 maintained / 8,377 full working records, 30 update images, 331 source approvals, 7,443 initial reviews remaining and zero full-goal accepted. No source approvals, native images, world/saves, geography, rules or controls change. The deployed game remains at 322 sources.

Next 100 native paintings: original quality retained — 19 October 2026

Individually viewed and freshly decoded/hashed WOG-A-004034–WOG-A-004133: 42 retain original art for role/contact/draw-size checks, 52 require explicit canonical composite/resource/state roles, and six have localized color/cutout defects. Snow/ice, crystal desert, gold extraction, pastures, settlements, harbors, ruins, hop cultivation and fortifications do not create gameplay merely by appearing in a painting. Complete feature portraits must not become repeating mesh backgrounds. Actual style, scale, state/lifecycle, desktop/phone context and live appearance remain separate gates.

Two generated proposals are retained independently. Hidden Oasis WOG-A-008334 is rejected in favor of its original: the alleged gray sky-gap defect did not reproduce on light/dark backings. Great Dune Sea WOG-A-008335 repairs the damaged edge but changes fine paint; it remains unapproved, with mostly-alpha-253 solids and 37 alpha-1 frame pixels recorded. Neither replaces original art. No image downscale/recompression, renderer performance change, game integration, save, geography or controls change. 8,335 maintained / 8,379 working records; 331 source approvals, 32 update proposals/paintings, 7,343 first individual reviews remaining and zero full-goal accepted. See individual findings and comparison.

Native originals 4134–4233: preservation and targeted repair findings — 19 October 2026

Separately inspected 100 complete original paintings and freshly decoded/hashed each: 42 retain for role/contact/draw-size checks, 44 require an explicit canonical landmark/site/resource/state role, and 14 have localized color/cutout defects verified on native light/dark backings. Composite cities, irrigation, worked iron sites, lumber yards, observatories, active volcanoes, maelstroms and mana springs cannot create independent gameplay systems through painted objects. Full scene portraits must not become repeating mesh backgrounds.

Two separate native proposals repair the Island Passage purple/gray water perimeter and the Lava Fields flat pink smoke patch. They remain unapproved: generated fine paint changes outside the target are visible and most solid pixels have alpha 253. Both keep 1254×1254 native dimensions, true transparent exteriors and zero nontransparent frame pixels. Original images remain byte-identical; no artwork downscaling/recompression or renderer performance change. Actual normal desktop/phone Region/Hex style, contact, state/lifecycle, performance, integration and live-world appearance remain separate gates. 8,337 maintained / 8,381 working records; 331 source approvals, 34 update images/proposals, 7,243 first individual reviews remaining and zero full-goal accepted. See individual findings and comparisons.

Native originals4234–4258: source quality and role boundaries —20 October2026

Individually viewed25 complete native originals: five retain original art for scale/style/contact checks,14 need explicit canonical roles and six have localized cutout/smoke corrections. Autumn forests retain their detailed original crowns and roots; worked marble quarries, market towns, meandering rivers and mining camps require matching saved geography/site/state semantics. Painted goods, wagons, stalls, paths, smoke and cranes do not establish independent simulation objects, production or lifecycle stages. Native light/dark diagnostic pairs distinguish thin warm outlines from confirmed colored water edges, stray marks and smoke contamination. No original is overwritten/downscaled and no full portrait becomes a repeating mesh background. 8,337 maintained / 8,381 working records;331 source approvals,34 update images/proposals,7,218 initial individual reviews remaining and zero full-goal accepted. No renderer, control, world, save or canonical geography change. See the individual findings.

Atlas badges now describe catalogued variant/file counts instead of inferring “game ready” from five variants or runtime export location. Existing source-approval and actual game/live-use evidence remain separate; the filter behavior and game renderer are unchanged.

Native originals4259–4283: preserved landscapes and local repairs —20 October2026

25 individually viewed full native originals cover Mirror Lake, Misty Moor, Mixed Woodland, Monastery Hamlet and Mossy Woodland.14 retain detailed original art for contextual checks, six need canonical role definitions and five have confirmed localized edge/mist/foliage/smoke corrections. Light/dark native backings distinguish contact shadows and transparent branch gaps from pink cutout residue, hard mist edges and discolored plumes. Complete geographic and settlement portraits must match saved lake/stream/elevation/path/site semantics; painted bridges, waterwheels, crops, hives, wells and religious buildings do not create independent simulation objects or services. No original is overwritten, downscaled, recolored or repeated as a mesh pattern. 8,337 maintained /8,381 working records;331 source approvals,34 update images/proposals,7,193 first individual reviews remaining and zero full-goal accepted. No renderer, control, world, save or geography change. See the exact findings.

Native smoke repair preservation boundary —20 October2026

A separate native monastery-smoke edit removes the confirmed pale yellow/pink bulb, but native masonry crops and exact comparison expose changes beyond the smoke target.944,043 pixels outside the target differ, including912,604 visible RGB changes. The1038×1515 output has mostly alpha253 solids and15 alpha1 frame pixels. The broad generative output is explicitly rejected as an active replacement; all8,337 existing metadata records, artwork hashes and approval objects remain exact. The original chimney repair remains open. No generative output is downscaled,recompressed or alpha-normalized. 8,338 maintained /8,382 working records;331 source approvals,35 update images/proposals,7,193 first reviews remaining and zero full-goal accepted. No renderer,game whitelist,world,save,geography or player-control change.

Mountain source roles and native preservation —20 October2026

25 complete mountain-themed originals4284–4308 have individually authored exact-SHA source findings: six retain native art for context checks,17 need canonical roles and two need targeted correction. Native light/dark crops confirm blue-purple/gray outlet residue4286 and detached pale marks plus pale green/pink water-edge residue4306. Thin warm mountain outlines and coherent white/gray town smoke are retained. Mountain Pass4296 has14 dark partial-alpha frame pixels,max81; the inspected area shows soft shadow contact rather than opaque cliff clipping,so a margin/explicit-disposition gate remains. All source detail,dimensions and existing approval objects remain exact. 8,338 maintained /8,382 working records;331 source approvals,35 update images/proposals,7,168 first individual reviews remaining and zero full-goal accepted. Basins,springs,citadels,bridges and towns must match saved elevation,flow,route/site footprints and legitimate states. Painted gates,banners,bridges,quays,mines,mills,goods and smoke do not create independent gameplay permissions,ownership,production or lifecycle stages. No repeating mesh pattern,renderer,whitelist,world,save,geography or control change. See the exact findings.

Original-preserving smoke correction —20 October2026

The user explicitly authorized original-preserving masked edits. A separate1038×1515 native Monastery Hamlet repair replaces the yellow/pink smoke bulb using only a78×111 binary mask.4,835 pixels change;every decoded RGBA pixel outside the mask is identical to the authoritative original. The entire chimney masonry from native y351 down,all other structures,smoke,tree detail,water and transparent frame are preserved. The donor is the smoke portion of the previously rejected broad edit,not its changed masonry. Native light/dark and full-composition inspection accepts this localized smoke correction as a candidate. The original file and all8,338 prior complete metadata/approval objects remain exact.8,339 maintained /8,383 working records;331 source approvals,36 update images/proposals,7,168 first reviews and all role/context/state/lifecycle/nonrepeating-background/performance/integration/live gates remain open. No active replacement,whole-asset source approval,renderer,whitelist,world or save change. This explicit authorization supersedes the previous pending repair-method choice;the rejected whole-image version remains rejected.

Wetland/prairie source triage and exact volcanic smoke repairs —20 October2026

Twenty-five complete native originals4309–4333 were individually inspected with three approved references and four light/dark crop pairs:13 retain native detail for context,9 need canonical roles and3 need localized artwork repair. The mudflat cattail highlights remain intact;the oasis gap trace and two volcanic smoke defects are explicitly recorded. Two separate1254×1254 volcanic smoke candidates replace flat pink/gray patches while preserving every decoded original RGBA pixel outside their masks and all protected foreground rock/rim pixels. The lower smoke collar blends into the original warm vent transition;no resizing,detail filtering or whole-image generative replacement is used. An initial mask with a clipped plume was rejected and corrected before registration.8,341 maintained /8,385 working records;331 source approvals,38 update/proposal images,7,143 first reviews and all canonical role,style/scale/contact,state/lifecycle,existing nonrepeating mesh,complete performance,integration and actual live-use gates remain open. Zero source approvals,active replacements,original image overwrites or renderer/whitelist/world/save changes. Separate concurrent manual-review Atlas UI changes remain local and excluded from this asset batch.

Native source review4334–4433 and Oasis cleanup —20 October2026

One hundred complete native originals4334–4433 were individually inspected against three separately viewed approved references,with18 light/dark native crop pairs:37 retain native detail for context,54 require canonical role definition and9 require localized corrections. The Oasis Town v5 gap cleanup is a separate native1313×1198 candidate:750 decoded RGBA pixels change within a1520-pixel residue mask,679 positive-alpha pixels are removed,and every pixel outside the mask is exact. Palm fronds,trunk,architecture,rocks,water and paths remain intact. No resizing,detail filtering or whole-scene regeneration.8,342 maintained /8,386 working records;331 source approvals,39 update/proposal images and7,043 first reviews remain. Full canonical role,style/scale/contact,state/lifecycle,all existing nonrepeating mesh backgrounds,complete performance,integration and actual live-use gates remain open. Zero source approvals,active replacements,original artwork overwrites or renderer/322-source whitelist/world/save changes. Concurrent local manual-review Atlas UI is preserved and excluded.

Native palm-gap and Pilgrim smoke masks —20 October2026

Two separate native1024×1536 localized candidates correct Palm Oasis v4 inter-frond residue and Pilgrim Town v4 left-chimney smoke.3,902 and5,897 decoded pixels change inside explicit masks;every outside-mask original RGBA pixel stays exact. Original green palm pixels and their one-pixel neighborhoods,protected trunks,chimney masonry and adjacent rock remain exact. Full-weight local donor RGBA is exact;only the smoke’s five-pixel internal lower collar blends to original smoke. Three removal-mask attempts that left fragments or jagged leaf holes are rejected and retained;the accepted palm candidate uses a generated gap donor with original foliage preservation. The two full generated scenes are supporting intermediates and are excluded as whole-image replacements.8,344 maintained /8,388 working records,331 source approvals,41 update/proposal images and7,043 first reviews. No source approvals,active replacements,original overwrites,detail filtering,resizing or renderer/322-source game-manifest/world/save changes. All canonical role,actual style/scale/contact,state/lifecycle,existing nonrepeating mesh,complete exact-artwork performance,integration and actual live-world appearance gates remain open. Concurrent local manual-review Atlas UI remains preserved and excluded.

Native source review4434–4533 —20 October2026

One hundred complete native originals4434–4533 were individually inspected against three separately viewed approved references,with20 light/dark native crop pairs:38 retain native artwork for context,51 require canonical role definition and11 require localized artwork correction. All100 uploaded originals remain byte-identical. Findings preserve full native detail and require original-preserving masks for proven defects;no whole-scene repaint,downsampling or filtering. Two River Village smoke plumes contain confirmed pink residue;other coherent neutral plumes are retained. Reef/headland/harbor/wetland water repairs require a defined actual boundary before local fill or alpha edits. Sacred Oasis v5 has22 positive-alpha right-frame pixels including8 opaque rock pixels;Salt Lake v5 has18 partial-alpha neutral shadow pixels,max73,with no opaque frame contact. These cases require different margin decisions.8,344 maintained /8,388 working records,331 source approvals,41 update/proposal images and6,943 first reviews remain. No source approvals,active replacements,original overwrites,new native images or renderer/322-source manifest/world/save changes. Canonical role,style/scale/contact,state/lifecycle,all existing nonrepeating mesh backgrounds,complete exact-artwork performance,integration and actual live-world appearance remain open. Concurrent local manual-review Atlas UI stays local and preserved.

Original-preserving Ruined Oasis palm-gap repair —20 October2026

One separate native1024×1536 Ruined Oasis v4 candidate corrects gray/pink palm-gap residue.1,415 decoded pixels change inside a1,472-pixel mask;197 hand-reviewed empty-space mask pixels clear the faint thread and one isolated gray-green artifact. Every outside-mask original RGBA pixel,protected column and green foliage pixel outside that empty-space polygon stays exact. Three earlier mask studies are rejected:residual specks,faint threads or a stepped edge are not accepted. The full generated scene is supporting donor material only;whole-image color/composition drift is excluded. Original leaflets,trunks,masonry,water and native detail are retained without resizing or filtering.8,345 maintained /8,389 working records,331 source approvals,42 update/proposal images and6,943 first reviews. Zero source approvals,active replacements,original overwrites or renderer/322-source game-manifest/world/save changes. All canonical role,actual style/scale/contact,state/lifecycle,existing nonrepeating mesh,complete exact-artwork performance,integration and actual live-world appearance gates remain open. Concurrent local Atlas UI stays preserved and excluded.

Original-preserving River Village smoke corrections —20 October2026

Two separate native River Village smoke candidates preserve the original scenes. v4 retains1023×1537:4,732 decoded pixels change only in the upper-chimney plume mask;identity donor coordinates from1023×1538 support material are consumed above147,with the extra bottom row unused and a five-row internal collar. Chimney masonry and every row147 onward remain exact. v5 retains1254×1254:only131 pink plume RGB pixels are neutralized with their original weighted luminance;all original alpha values,plume shape and edge detail stay exact. Neither source is resized,filtered or overwritten. Every outside-mask RGBA pixel and all village detail remain original. The full generated donor scene is excluded.8,347 maintained /8,391 working records,331 source approvals,44 update/proposal images and6,943 first reviews remain. Zero source approvals,active replacements or renderer/322-source game-manifest/world/save changes. All canonical role,actual style/scale/contact,state/lifecycle,existing nonrepeating mesh,complete exact-artwork performance,integration and actual live-world appearance gates remain open. Concurrent local Atlas UI stays preserved and excluded.

River Village canonical placement experiment —20 October2026

Eighteen normal Region/Hex captures compare the approved village-lane source with exact native River Village smoke candidates8346/8347 at existing canonical coastal village1131528,including desktop1440,phone layout390 and Hex reload. A fresh disposable local QA world uses the deployed916dffcd renderer. Explicit browser-only synthetic manifests and exact-byte asset aliases enable preapproval testing;they are not production approvals. Both tested whole-scene placements fail water/ground contact;v4 also clips above the desktop Hex frame. The approved-only normal harness remains unchanged. Preserve native detail and resolve geography-aware role,framing,anchor/contact and subject scale/style before a new context test. No artwork file,source approval,active replacement,renderer,production322-source whitelist,canonical geography or save changes. All8,347 maintained records and44 update images remain. Performance,lifecycle,physical-phone and actual live-world acceptance remain open. See the context review.

Preserve native artwork in the next100 asset reviews —20 October2026

Individually inspected100 complete native originals4534–4633 against three separately viewed approved references,plus24 native light/dark diagnostic pairs:38 retain native artwork for role/context review,51 need canonical role definition and11 need targeted artwork work. All100 originals and all331 prior source approvals stay exact. Native alpha distinguishes actual Sea Caves v5 right-frame rock contact(8 opaque pixels) from Snowy Pines v1 faint alpha2 and Stone Castle v1 faint alpha1;castle backdrop RGB at alpha0 is already transparent. Preserve coherent deeper-blue Seagrass Meadow v4 water and neutral Salt Works v2 smoke. Spring Oasis v5 adds one original-preserving native1299×1211 candidate:clear13,252 alpha values across16 individually reviewed gray palm-gap components;every original RGB value,every pixel above alpha96 and all outside-mask RGBA stay exact. Earlier two incomplete mask drafts are not accepted. No generation,resizing or filtering. Ground-contact shadow remains untouched. This localized correction is not full-source/context approval.8,348 maintained /8,392 working records,45 update/proposal images and6,843 initial individual reviews remain;full-goal accepted0. Source approvals331 and deployed322-source game manifest remain unchanged. All canonical role/style/scale/contact,state/lifecycle,nonrepeating mesh,complete performance,integration and actual live-world appearance gates remain open.

###100 further native asset decisions with retained detail —20 October2026

Individually inspected100 complete native originals4634–4733 against three separately viewed approved references,plus45 native light/dark crop pairs:28 retain native artwork for role/context review,48 require a canonical role definition and24 require targeted artwork correction. All8,348 maintained native identities and complete approval objects stay exact;no new image,source approval or renderer entry is added. Confirmed localized defects include flat pink sulfur/chimney smoke,purple water-edge bands,detached gray residue,a bounded blue-roof color patch and small oasis path/drain marks. Preserve coherent yellow/cream smoke,grass antialiasing,stone highlights,cool rock shading and intentional ground-contact shadow. Volcanic Seamount v2 has14 nonzero-alpha frame pixels,max213 and none fully opaque;do not describe this as opaque clipping. Cultivated,road,cave,wildlife and settlement composites need implemented canonical roles,state and actual geometry/contact before use. Specific complete island/road/field layouts must not be repeated across mesh backgrounds.8,348 maintained /8,392 working records,331 source approvals,45 update/proposal images and6,743 initial reviews remain;full-goal accepted0. Source approval,renderer availability and actual live-world use remain distinct. The deployed322-source game manifest and saved world stay unchanged. Full style/scale/contact,state/lifecycle,nonrepeating background,exact-artwork performance,integration and actual live-world gates remain open.

Native inspection measurements in this batch explicitly count every alpha>0 edge pixel and use inclusive maximum pixel coordinates. Earlier ledger edge measurements use alpha>32 and exclusive upper bounds;those earlier counts are preserved and labeled inside each inspection. This method difference explains Volcanic Seamount v2 having14 total nonzero-alpha edge pixels versus8 above alpha32;none is fully opaque. It grants no artwork approval.

Native vineyard correction registered separately —20 October2026

Vineyard Hills v2 adds one separate original-preserving1254×1254 candidate. Only2,014 alpha values across three individually reviewed exterior-gray components change;every original RGB,every outside-mask RGBA pixel and every original pixel above alpha200 remain exact. Native vines,grapes,cypresses,roof,masonry,cart,stone contour,bridge,water and proper ground-contact detail stay intact. Complete native light/dark and final1:1 contour comparisons accept the localized cleanup;unselected contour remains authoritative and full edge/context acceptance is not inferred. Exact-byte archived export7401 links to the same candidate while both original records remain preserved and its separate role/disposition review stays pending.8,349 maintained /8,393 working records,331 source approvals,46 update/proposal images and6,743 initial reviews remain;full-goal accepted0. No generation,resizing,spatial filtering,source overwrite or quality reduction for performance. No source approval,active replacement or deployed322-source renderer/world/save change. Canonical vineyard role,actual scale/style,terrain/water contact,state/lifecycle,nonrepeating meshes,complete performance,integration and actual live-world appearance gates remain open.

Native turtle upper-leaf correction and material-preservation guard —20 October2026

Turtle Sanctuary v2 adds a separate native1254×1254 upper-leaf candidate. Exactly2,501 alpha values change;all original RGB,outside-mask RGBA,strong original paint and rows223 onward remain exact. A guarded local collar and15 individually inspected disconnected residue components(42 pixels) reduce gray/pink matte around the selected leaf group. v1–v3 remain rejected;v4 is superseded by explicit inspection of five previously retained neutral fragments. Full native light/dark original/candidate/detail inspection accepts this bounded correction only. Remaining contour,canonical reef/scenery role,actual water/ground contact,scale/style,state/lifecycle,nonrepeating mesh,complete performance,integration and actual live-world appearance remain open. The complete turtle scene must not repeat across background meshes;painted turtles grant no simulated animals. A separate SHA-bound additive Walled Town v4 roof finding preserves the original until material intent is resolved;the earlier correction flag cannot trigger blind recoloring. All8,349 prior native identities and complete approval objects stay exact;only that additive guard changes prior metadata.8,350 maintained /8,394 working records,331 source approvals,47 update/proposal images,6,743 initial reviews and full-goal accepted0. No generation,resizing,spatial filtering,original overwrite,active replacement or deployed322-source renderer/world/save change.

Preserve native geothermal artwork while correcting plume cores —20 October2026

Sulfur Springs v4 adds a separate native1050×1498 candidate correcting two flat pink plume cores. Local fills constrained by unchanged original boundary pixels retain coherent gray volume and the thermal-lit transition. Exactly1,565 RGBA pixels change within1,566 selected pixels;all outside-mask pixels and rows499 onward stay exact. Pools,sulfur drips,rocks,trees,ground shadows and unselected detail remain original. Direct clones v1/v2 and median-calibrated v3 remain rejected;upper-only v4 is superseded and retained exactly in the two-plume v5. Complete native light/dark and both detail inspections accept the bounded repair. Independent PNG decoding and a different sparse boundary solver agree within one8-bit unit in one masked channel;outside-mask identity is exact. Small unselected rock-rim/boundary traces still need separate review. This finite geothermal composition must not repeat across generic mesh backgrounds.8,351 maintained /8,395 working records,331 source approvals,48 update/proposal images,6,743 initial reviews and full-goal accepted0. All8,350 prior complete metadata/native/approval identities stay exact. No generation,resizing,whole-scene adjustment,source overwrite,active replacement or deployed322-source renderer/world/save change. Remaining boundary,canonical role,actual scale/style/ground contact,state/lifecycle,nonrepeating meshes,complete performance,integration and actual live-world gates remain open.

Preserve native geothermal artwork while correcting plume cores —Sulfur Springs v5,20 October2026

Sulfur Springs v5 adds a separate native1254×1254 candidate correcting confirmed main-plume pink islands and transition plus five isolated right-plume pink pixels. Fixed original boundaries constrain the local premultiplied-RGBA fill. Exactly1,244 RGBA pixels change within1,260 selected pixels;all outside-mask pixels,rows346 onward and the protected orange vent rectangle remain exact. Complete native light/dark original/candidate and main/right detail inspections accept this bounded repair. Independent PNG decoding and a different sparse boundary solver match every decoded channel exactly. Pools,beige steam,minerals,rocks,trees,shadows and all unselected painting detail remain original. Upper-only v1 remains an unregistered incomplete study. This finite geothermal painting must not repeat across mesh backgrounds.8,352 maintained /8,396 working records,331 source approvals,49 update/proposal images,6,743 initial reviews and full-goal accepted0. All8,351 prior complete metadata/native/approval identities remain exact. No source overwrite,active replacement,resizing or deployed322-source renderer/world/save change. Unselected edge/material review,canonical role,actual scale/style/ground contact,state/lifecycle,nonrepeating meshes,full performance,integration and actual live-world gates remain open.

###100 native reviews and one original-preserving fragment repair —20 October2026

Individually inspected100 complete native originals3584–3683 against three approved native references and47 separate native light/dark diagnostic pairs:29 retain original artwork for role/context review,54 require canonical role definition and17 require localized correction. Add one separate1313×1198 Active Volcano v2 candidate removing a detached pink fragment:295 alpha pixels change,all RGB values and all outside-mask RGBA remain exact. Both complete native original/candidate light/dark views were inspected;only that bounded repair is accepted. The other16 confirmed repair targets include flat pink plume islands,blocky water-edge fragments and small ground/canopy residue. Retain legitimate thermal-lit smoke,foam,cool leaf/stone shadows,coral colors and star-bearing aurora sky pending role/lighting intent. Painted routes,ports,fields,settlements and animals need matching finite canonical roles,state and actual terrain contact;whole composed scenes cannot repeat across mesh backgrounds. All8,352 prior native identities and complete approval objects remain exact;100 metadata records gain independent findings and one pending candidate is added.8,353 maintained /8,397 working records,331 source approvals,50 update/proposal images,6,643 initial individual reviews and full-goal accepted0. Archive exact-byte links grant no role/disposition approval. Full style/scale/contact,state/lifecycle,nonrepeating backgrounds,performance,integration and actual live-world gates remain open. The deployed322-source renderer,canonical world and saves remain unchanged.

These100 native inspections distinguish fresh alpha>0 frame counts and inclusive pixel bounds from the retained earlier alpha>32/exclusive measurements. A nonzero frame pixel is a context/margin review flag,not automatic opaque clipping or an artwork failure.

Preserve native smoke opacity and shading in six local color repairs —20 October2026

Six separate native smoke-color candidates preserve every original alpha value,green-channel shading value and outside-mask RGBA pixel. They correct bounded pink cores in Active Volcano v3,Basalt Columns v2,Ash Plain v1/v3/v4 andBasalt Columns v5. Exactly 16,294 pixels change inside 23,364 selected mask pixels;only red/blue values change. Original dimensions and complete fine detail remain. Individual full/detail light/dark comparisons accept only these localized repairs. Native neutral/warm reference patches keep each plume palette;explicit column-cap rectangles and warm-material feather exclusions protect stone/tree colors. The first alpha-changing Active Volcano v3 draft is rejected for thinning the plume. Earlier narrow/incomplete masks andmismatched warm-reference drafts remain QA evidence,not catalog replacements. Unselected exterior flecks,boundary/material intent and whole-source style remain pending;retain legitimate thermal-lit cream/brown smoke andcolored rock shadows. These complete volcanic scenes need finite canonical footprints/state andcannot repeat as mesh backgrounds. All8,353 prior complete metadata/native/approval identities and all 8,397 prior ledger records are retained,including44 historical/unregistered records.8,359 maintained /8,403 working records,331 source approvals,56 update/proposal images,6,643 initial individual reviews and full-goal accepted0. No original overwrite,resizing,active replacement,source approval or deployed322-source renderer/world/save change. Full Region/Hex scale/contact,state/lifecycle,nonrepeating background,performance,integration and actual live-world gates remain open.

Eight bounded native repairs preserve original artwork — 20 October 2026

Eight additive native comparisons correct individually bounded artifacts in Abandoned Mine v3, Abyssal Deep v1, Ancient Metropolis v2, Ancient Oakwood v2/v3, Arctic Outpost v5, Bamboo Forest v3 and Barley Fields v5. Exactly 9,602 pixels change; every outside-mask RGBA pixel and native dimension remains exact. Five color repairs preserve all alpha and the original shading channel (green for four, blue for the cold-water repair). Three small alpha repairs change 697 alpha values while retaining every RGB value. No resizing, original overwrite, whole-scene filtering or performance-driven artwork reduction occurs. Water alpha-cleanup drafts are rejected for ragged gaps; blue-driven color drafts are superseded. Atoll Ring v2 and Barrier Reef v2 remain unregistered: neither reef study solves its wider cutout boundary. Retain all drafts and original/alias records. Unselected edge colors and boundary/material intent remain pending on the eight comparisons too. Complete scenes require finite canonical footprints and must never repeat as mesh material. All 8,359 prior complete metadata/native/approval identities and all 8,403 prior ledger records are retained, including 44 historical/unregistered records. The maintained catalog becomes 8,367 records, with 8,411 working ledger records, 331 source approvals and 64 update/proposal images. There are still 6,643 initial individual reviews; full-goal accepted remains 0. No source approval, active replacement, renderer/whitelist, game controls, save or canonical geography change is included. Full normal Region/Hex scale/contact, lifecycle, nonrepeating-background, performance, integration and actual game-world appearance gates remain open.

Next500: first165 sources and15 native candidates — 21 October 2026

The requested next500 batch has165 individually inspected native sources and335 sources still awaiting inspection. This progress release records the165 SHA-bound observations, including85 artwork targets (80 native diagnostic findings andfive visibly patterned backgrounds), and adds15 separate native candidates:11 exact masked local repairs andfour regenerated finite ground alternatives. Masked candidates change7,848 pixels in total; every outside-mask RGBA pixel and native dimension is exact. Alpha-only repairs retain every RGB value; color repairs retain alpha and original green-channel shading. The four full ground revisions use built-in image_gen and retain1536×1024 native dimensions; they carry no original-pixel-preservation claim. Arctic, grassland, forest and wetland revisions replace the individually observed repetitive layouts; site markers are omitted only from these ground alternatives, and the forest floor excludes standing canopy. Original site scenes remain preserved. The desert drafts retain unwanted masonry/path implications and remain unregistered. All8,367 prior native and approval identities and8,411 prior ledger records remain, including44 historical/unregistered records. Only the authored review field changes on165 existing metadata records; source approvals stay331, maintained records become8,382, working ledger records8,426 and quality update/proposal images79. Initial individual-review backlog becomes6,478. Full-goal accepted remains0. No original overwrite, resizing, performance-driven artwork reduction, active replacement, renderer/whitelist, game-control, save or canonical geography change is included. The322-source production whitelist and world versionab173645cf316d93 remain exact. Full-source boundary/style, canonical role, normal Region/Hex scale/contact, lifecycle, nonrepeating placement, performance, integration and actual game-world appearance remain open. The full500 request and the all-assets goal continue after this release.

Next 500: 265 sources inspected and five further native comparisons — 21 October 2026

The requested 500-source batch now has 265 individually inspected native sources, with 235 still awaiting inspection. This release adds 100 exact-source observations: 92 repetitive background compositions require artwork updates; eight finite scenes remain pending role, style and context review. Five separate native comparisons accompany those findings: four bounded Caldera Basin smoke repairs and one finite desert ground alternative. The smoke repairs change 6,672 pixels while preserving every original alpha value, green shading channel, native dimension and RGBA pixel outside the masks. Neutral gray collars and warm cream ash remain distinct; lava, water, mineral color, trees and lower artwork remain exact. The sixth desert revision retains fine ochre sand, stone and dry branches around an uneven natural shelf. It omits the ruin from the original oasis scene, which remains available, and makes no original-pixel preservation claim. Five earlier desert revisions, five wildflower opacity studies and one flower reconstruction remain unselected. Stored RGB at near-zero alpha did not reliably recover the original flower paint. All 8,382 prior native and approval identities and all 8,426 prior ledger records remain, including 44 historical records. Maintained records become 8,387; working records become 8,431; quality update and proposal images become 84. Source approvals remain 331; the initial individual-review backlog becomes 6,378; full-goal acceptance remains zero. Originals retain their dimensions and detail. Complete artwork review, normal Region/Hex role, scale, contact, lifecycle, placement, performance, integration and actual world appearance remain pending. This Atlas release changes no game controls, renderer, 322-source production whitelist, saves or canonical geography. The 500-source batch and all-assets goal continue.

Next 500: all source findings recorded and four finite ground comparisons — 21 October 2026

All 500 selected sources now have individually authored native-image findings. This release records the remaining 235: 204 require nonrepeating background artwork changes and 31 retain their finite compositions pending role and normal game context. Inspection does not count as an artwork update or approval. Four separate native ground comparisons are added: unequal broken blue-water swells, eroded dune ridges, unequal basalt outcrops and varied autumn leaf-and-moss woodland. Each is an unresized 1536 × 1024 opaque painting, compared at full size and in two native detail crops; independent PNG and Sharp decoders agree. Fine ripples, sand grain, natural polygonal basalt, leaf veins and small ground detail remain visible. The second water and autumn studies are selected; earlier repeated water bands and oversized autumn details remain unselected. These are new paintings, with no original-pixel preservation claim. Remaining crest, leaf and rock scale, contrast, material/style, terrain height, contact and world placement are recorded explicitly. Originals and exact-byte aliases remain available. All 8,387 prior native and approval identities and all 8,431 prior ledger records remain, including 44 historical records. Maintained records become 8,391; working records become 8,435; quality update and proposal images become 88. The initial individual-review backlog becomes 6,143; source approvals remain 331; full-goal acceptance remains zero. Across this 500-source batch, 24 native comparisons are locally registered; many individually identified artwork corrections and all required normal Region/Hex role, scale, contact, lifecycle, nonrepeating placement, performance, integration and actual world appearance checks remain open. No performance-driven resolution reduction or whole-scene filtering is applied. At preparation, GitHub has the preceding 265 findings and 20 native comparisons, while production is still verified at 165 findings and 15 comparisons during Railway’s new-build pause. This release does not change game controls, renderer, 322-source production whitelist, saves or canonical geography. The all-assets goal continues.

Next 500: ten more finite ground comparisons — 21 October 2026

Ten further native finite-ground comparisons address already recorded artwork findings within the 500-source batch: ochre scrub, snow, dry steppe, fey woodland, calm lake, natural desert shelf, mangrove floor, small-crag mountain ground, oak woodland and golden grass with bluish scrub. Each preserves its full unresized 1536 × 1024 opaque output and was inspected as a complete image plus two native detail crops. Independent PNG and Sharp decoders agree. Fine sand, gravel, grass curls, snow strokes, leaves, roots, acorns, white flowers, cyan light specks and brown leafless plants remain visible. One regularly spaced desert draft and two mountain drafts remain unselected; the mountain revisions reject a crag parade and a U-shaped slab that could read as an artificial foundation. Whole-frame repeated groups are replaced with unequal finite compositions. Reusing similar broad mass arrangements across different materials remains an explicit concern for the snow and steppe studies; residual smaller-clump cadence is flagged where relevant. Selection is for Atlas comparison, not final artwork or game-readiness approval. Scale, contrast, material/style, painted relief, canonical role, terrain and water contact, nonrepeating placement, lifecycle, performance, integration and actual normal Region/Hex world appearance remain pending. No performance-driven resizing, whole-image filtering or original-pixel preservation claim is made. All 8,391 prior complete metadata, native and approval identities remain exact. All 8,435 prior ledger records remain, including 44 historical records. Maintained records become 8,401; working records become 8,445; quality update and proposal images become 98. Across this batch, 500 sources have findings and 34 separate native comparisons are locally registered. Those inspections do not mean 500 artwork updates. Source approvals remain 331; the initial individual-review backlog remains 6,143; full-goal acceptance remains zero. At preparation, all 500 findings and the preceding 24 comparisons are on GitHub; production is still verified at 165 findings and 15 comparisons while Railway reports new builds paused. The release changes no game controls, renderer, 322-source production whitelist, saves or canonical geography. The all-assets goal continues.

Final asset outputs and storage retention — November 2, 2026

Art Atlas publishes 9,185 registered files with their permanent IDs, exact original checksums and individual findings. All 8,401 files in the preceding GitHub catalog retain identical artist bytes; 784 additional registered files are bundled without resampling or recompression. The complete 9,208-row readiness ledger (including 23 historical null aliases) is retained as a lossless audit output. The full-library goal remains active: 418 initial reviews remain pending, 3,177 explicit dispositions are recorded, and no all-gates game-ready promotion is inferred. The next 100 native sources have completed visual observations, retained separately without claiming their draft archive decisions were registered. Both Citadel outer hamlets and all original library artwork remain preserved. The preferred local Alpine Tarn V5, Caravan Well V5, Sargasso Drift V5 and Sunken Shelf V9 repairs, plus explicitly referenced working outputs, are retained separately. They do not acquire live-world approval by publication. The live renderer and its existing 322-source whitelist remain those of the preceding GitHub commit, including the blue atlas interface; unfinished private renderer/artwork experiments are not installed. No repeatable mesh background, artwork downscale or lossy reencoding is introduced. The user requested removal of temporary files, drafts and inputs because the local drive was full. Redundant QA baseline copies, native preview duplicates, raw readbacks and rejected attempts are retired after preservation checks. Historical seals describe the checks performed at their recorded time; they no longer promise the presence of every retired temporary artifact. Current artist hashes, final selected outputs, individual catalog findings, the complete pending ledger, final observation notes and cleanup receipts remain authoritative. No persistent world, save, original artwork or other project is a cleanup target.

Verified asset publication and final-output retention — November 3, 2026

The November 3 final-output publication is live at commit e5b1cf3e81b80d56e650df3b39f5109b1d6a3d8e. Art Atlas contains 9,185 registered files; live readback verified every one of the 784 newly published artist files and both Citadel outer hamlets. All original artwork and the 16 selected working outputs retain their exact bytes. Temporary QA inputs, repeated metadata snapshots and duplicate previews are retired under the user-requested storage policy. The full-library quality goal remains active: 418 initial reviews and all unresolved canonical qualification gates remain pending. The next 100 observations remain recorded without registering their proposed reference dispositions. Local source contracts (354) and the deployed renderer whitelist (322) remain distinct; no private renderer or artwork study is promoted by cleanup.

Retained native-export reviews and Sunken Shelf water-colour repair — November 3, 2026

The retained 100 individually authored native-export observations (WOG-A-007839 through WOG-A-007939, skipping previously reviewed records) are reconciled against current exact source/export bytes and the pure exporter mapping. Only their already archived copies receive internal reference dispositions; 100 canonical parents retain their source approvals and pending actions. Initial reviews decrease from 418 to 318, with WOG-A-007940 next. The complete catalog now has 9,187 artist files and the ledger 9,210 records. There are 3,277 explicit dispositions and zero new all-gates game-ready promotions. Sunken Shelf V9 is retained byte for byte as WOG-A-009253. Preferred V10 (WOG-A-009254) changes only 349 traced-domain water-colour pixels; all V9 alpha and outside-mask pixels remain exact at native 1,306 × 1,204. Other coloured residue, contact, finite role, scale, normal desktop/phone Region/Hex, performance, lifecycle and live-world gates remain open. All originals, both Citadel hamlets, source contracts and the 43 private runtime rows remain unchanged. No repeating mesh pattern, resampling, blur or lossy storage conversion is introduced. Asset review.

Canyon River outlet colour repair — November 3, 2026

Canyon River V4 (WOG-A-003757) and its named-export alias WOG-A-007873 retain their exact originals, approvals and existing actions. New WOG-A-009255 repairs 879 purple-stained RGB pixels in the finite lower outlet at native 1,024 × 1,536. All original alpha bytes, outside-mask RGBA pixels, cliff strata, needles, waterfalls and healthy foam remain exact; per-pixel luminance changes stay below 0.46. Native complete source/output and light/dark crop pairs were directly reviewed. Grey outlet residue remains; this is a preferred partial repair, with role, topology, relief/contact, scale, desktop/phone Region/Hex, performance, lifecycle and live-world gates open. The local catalog has 9,188 files and the ledger 9,211 records. The initial-review backlog stays 318 from WOG-A-007940; all 75 priority corrections and the complete pending ledger remain in scope. No source admission, world activation, gameplay change or quality waiver is introduced.

Native bridge and route art review — November 3, 2026

The November 3 bridge/route continuation individually inspected twenty native paintings and their exact named exports. The exports receive restricted internal-reference dispositions; the canonical scenes retain site/role and full qualification gates. Stone Bridge V5 has a separate 65-pixel conifer-fleck repair (WOG-A-009256), preserving original alpha and every outside-mask pixel. No road, river, trade, founding, inventory, geography or interaction behavior changes. The present finite road renderer accepts two declared ports; four-way junction paintings and embedded bridge/river scenes require truthful dedicated site/role contracts before any gameplay integration. The full asset goal remains active with 298 initial records plus the existing canonical, artwork, context, performance, lifecycle and live backlog. See individual findings.

Native ruins and aqueduct transparency — November 3, 2026

Twenty further native ruin/export pairs were individually reviewed: abandoned mines, ancient ruins, broken aqueducts and buried cities. Named exports receive restricted internal art-history/reference dispositions; each canonical painting retains its individual site/role, contact, scale/state and full qualification backlog. WOG-A-009257 retains the preferred Broken Aqueduct V4 study at native 1024 × 1536: 2,035 alpha samples cleared in bounded empty arch domains, with every original RGB byte and every outside-mask RGBA byte preserved. Both source and final remain catalogued. Painted rail carts, channels, portals and monuments do not introduce mine production, water supply, travel, exploration rewards or other player actions. Renderer permissions, geography and persistent saves remain unchanged. The full quality goal remains active with 278 initial reviews plus the existing artwork/context/performance/lifecycle/live backlog. See individual ruin findings.

Golden Veld fine-grain study — November 3, 2026

Golden Veld now retains WOG-A-009258, a separately catalogued 1536 × 1024 fine-grain painting study, beside exact originals 1891/2663 and the previous candidate 9252. The generated study reduces the strong diagonal lanes and four large shrub islands, but subtle curl/tuft recurrence, olive-thorn identity and its warmer dry palette remain unresolved. Forty normal local client frames compare approved meadow and three explicitly private field-slot diagnostics across desktop/phone Region, Hex, return and permalink reload. Selection follows the unchanged client regional elevation/moisture rules and actual empty natural fields; no terrain or entity is fabricated. Direct Hex witness review still shows diagonal recurrence in the control and study; the no-repeating-background requirement is not passed. These observations do not admit the study, approve its canonical biome, certify performance/lifecycle or imply production-world appearance. Every original, both hamlets and existing save data remain preserved; all remaining library gates stay active. See Golden Veld evidence.

Preserved ruins, Arctic outposts and biome materials — November 3, 2026

Twenty-four further named native exports and their exact canonical paintings were individually inspected: five Forest Temples, five Haunted Battlefields, four outstanding Lost Observatories, five Sunken Ruins and five Arctic Outposts. Their internal art-history/reference dispositions retain documented defects; canonical role, physical contact/scale/state and full qualification remain separate. The already-reviewed Lost Observatory V3 is not silently counted again. WOG-A-009259 preserves Lost Observatory V4 at native 1024 × 1536, clearing only 791 neutral partial-alpha samples in a bounded empty window; every original RGB and outside-mask RGBA byte stays exact. The original and existing Arctic Outpost V5 partial repair remain retained. Separately, 220 normal local client observations cover eleven natural biome profiles, current/private samplers, desktop/phone Region/Hex and return/reload. All tested return/reload canvases are exact, and all 22 cross-cohort Hex foreground pairs are exact. Region composites change and do not separately prove unchanged foreground. Visual nonrepetition, perceived grain/palette, full contact/state, performance/pressure/lifecycle and production runtime gates remain open. No ruins, astronomy, haunting, fishing, docks, cargo or flags gain new player behavior from their artwork. The full library goal remains active with 254 initial reviews plus the existing canonical/artwork/context/runtime backlog. See individual native findings.

Preserved rural settlements and biome scene review — November 3, 2026

Twenty further named native exports and their canonical paintings were individually inspected: five each of Fishing Village, Hamlet, Hill Village and Lumber Village. Keep detailed originals, varied native framing, both Citadel hamlets and all existing qualification actions. Named copies receive restricted internal-reference dispositions; canonical paintings still require their own roles, contact/scale/state, visual and lifecycle qualification. WOG-A-009260 is a separate 1254 by 1254 Lumber Village V3 smoke-colour study: 1,175 chromatic smoke pixels become neutral grey using rounded source luminance, with every alpha and outside-mask RGBA byte preserved. It does not repair smoke shape or establish a working mill. Eleven source-specific findings now document direct inspection of all 44 saved current/private desktop/phone Hex witnesses. Wider coverage loosens several diagonal rows, but recognizable motifs, directional grouping, physical grain and forest subject separation remain unresolved; Region visual review is separate. No sampler activation, source admission, new geography or gameplay is included. The complete goal remains active with 234 initial reviews plus the existing canonical and runtime qualification backlog. See individual native findings.

Preserved rural and shallow-sea originals — November 3, 2026

Twenty-three further exact named exports and their canonical paintings were individually inspected: three Mining Camps, five Monastery Hamlets, five River Villages, five Brackish Bays and five Island Passages. Preserve their native dimensions, fine architecture, water, vegetation and all existing qualification actions. Named copies have restricted internal-reference dispositions; canonical role, contact, physical scale/state, artwork and lifecycle requirements remain. WOG-A-009261 is a separate preferred Monastery Hamlet V3 study that neutralizes 215 tinted smoke pixels while preserving all alpha and outside-mask pixels. Existing V4 monastery and river smoke candidates remain linked rather than duplicated. Three factor-16 component findings and a 60-frame field/wetland normal-client comparison are now registered. All 24 retained desktop/phone Region-close and Hex witnesses were directly viewed. Wider sampling changes grouping but leaves visible diagonal motifs and grain/contact uncertainty; neither private experiment is activated. The goal remains active with 211 initial reviews and the complete existing canonical/runtime backlog. See individual native findings.

Preserved shallow-sea originals and water-colour study — November 3, 2026

Twenty-five more exact named coastal exports and their canonical paintings were separately inspected: five each of Pearl Banks, Saltwater Flats, Sandbar Chain, Seagrass Meadow and Sheltered Sound. Preserve their full native canvases and detailed sand, water, plants, shells and rocks. Named copies receive restricted internal-reference dispositions retaining known defects; all canonical role, physical scale/contact, state and runtime actions remain. Oversized pearl shells need a truthful physical or explicitly symbolic role; no resource or geography contract is inferred. WOG-A-009262 is a separate preferred Sandbar Chain V2 water-colour study: 6,722 purple perimeter RGB samples take nearby original water chroma at preserved luminance. All alpha, native dimensions and outside-mask pixels are exact. Residual boundary colour, ragged transparency, finite coast/depth/scale and normal-world qualification remain open. No sampler, source admission, simulation rule or saved geography changes are included. The full goal remains active with 186 initial reviews plus the complete canonical/runtime backlog. See individual native findings.

Private irregular material boundaries — November 3, 2026

Eighteen private CPU/WebGL2 component cases and 60 normal local-client frames compare current, extended and irregular blend boundaries without changing original artwork or the public renderer. Desktop/phone fields use span 1.25 and wetlands span 2 in the same disposable QA world. All 12 Region returns and Hex reloads are exact; eight cross-sampler Hex foreground comparisons are exact. Region foreground is not separately isolated. Complete scene review covers nine unique new witnesses plus 15 byte-exact previously viewed witnesses, whose duplicate files were retired after preservation checks. Irregular boundaries interrupt some long bands but retain clumps, diagonal chains and wetland contact/grain concerns. No nonrepetition, perceptual fidelity, full cost/lifecycle, admission or production activation is accepted. These findings are registered in the coastal/town batch with their unresolved visual and runtime gates intact. See private irregular-boundary evidence.

Preserved coastal and town originals — November 3, 2026

Twenty-five exact named exports and their canonical paintings were individually inspected: five each of Tidal Lagoon, Turquoise Shoals, Warm Current, Bridge Town and Caravanserai. Preserve their native dimensions, architecture, coral, vegetation, animals and water detail. Named exports receive restricted internal-reference dispositions retaining documented defects; all canonical role, physical contact/scale/state and runtime requirements remain. Two separate native studies retain the originals: WOG-A-009263 neutralizes 428 chromatic smoke samples above Bridge Town V3 chimney masonry; WOG-A-009264 reconstructs 3,649 purple lower/front water-edge samples in Tidal Lagoon V5 using nearby original water chroma. All alpha and outside-mask RGBA bytes remain exact. The upper lagoon rocky boundary was excluded when a trustworthy nearby water sample was unavailable; no rejected water output was produced. Three irregular-boundary component findings and two actual-span field/wetland context findings are registered with explicit nine-new-view and 15 byte-exact prior-view reuse provenance. Visible recurrence, physical grain and wetland contact remain unresolved, so public sampling and source admission remain unchanged. The full goal remains active with 161 initial reviews and the complete existing canonical/runtime backlog. See individual native findings.

Separate wetland painting study — November 3, 2026

A separate 1536 by 1024 opaque wetland floor painting study preserves the approved 1254-square original and its contract. The new painting retains fine angular stones, moss, stems and leaves but changes their distribution and palette. Twelve current/factor16/irregular component cases and twenty normal local-client frames compare the original control and an explicitly private unregistered source at the actual wetland span2 in the sole existing disposable QA world. Four return/reload comparisons and two Hex foreground comparisons are exact; all eight retained desktop/phone Region-close/Hex scenes were directly viewed. The study reduces long root loops but retains prominent plant/leaf clusters, diagonal grouping, warm/dry palette and weak wetland/reed separation. Equal physical grain/detail, water contact, nonrepetition and complete cost/lifecycle remain unaccepted. No public source replacement, sampler change or admission is made. The study and findings are now registered in the subsequent town/wetland Atlas batch with every visual and runtime gate retained; the earlier coastal/town release did not contain them. See wetland study findings.

Preserved town smoke and wetland diagnostic — November 3, 2026

Twenty-five exact native town source/export pairs are individually reviewed: Forest Town V1–V5, Market Town V1/V2/V5, Mountain Town V1–V5, Oasis Town V1–V5, Pilgrim Town V1–V5 and Port Town V1/V2. The two previously reviewed Market variants are excluded from this new-review count. Named exports receive restricted internal-reference dispositions with defects retained; each canonical role and existing next action remains open. Separate WOG-A-009266 and WOG-A-009267 smoke-colour studies preserve native architecture, foliage, water, transparency and all outside-mask pixels. WOG-A-009265 records the separate wetland ground diagnostic and its 12 component cases, 20 normal local-client frames and eight directly viewed full scenes. Recognizable clusters, prominent plant grain, warm/dry palette and weak reed contact remain unresolved. No replacement or new world-ready asset is approved. The full goal retains 136 initial reviews and every canonical/artwork/context/performance/lifecycle/admission/live requirement. See individual native findings.

Private wetland grain calibration — November 3, 2026

A private wetland calibration compares the exact original at its approved span2 with the unchanged original and existing separate diagnostic at span1.25. Thirty normal local-client frames at desktop/phone DPR2 retain every source byte, public sampler and on-disk source contract. All twelve complete saved Region-close/Hex scenes were directly reviewed. Finer original grain reduces the apparent size of ground marks, but diagonal groups and weak reed/ground contact remain. The separate diagnostic retains warm/dry colour and recognizable leaf/stem chains. Scale reduction alone does not establish equal detail or solve nonrepetition. Six Region returns are exact; five Hex reloads are exact and the desktop finer-original case has 32 changed ground pixels (maximum channel difference 245), with unchanged foreground. Keep that discrepancy open for focused diagnosis. Neither scale nor painting is selected or activated. The source-specific findings are registered in the later town/volcanic batch and await its publication; the preceding town/wetland release excludes this calibration. See calibration findings.

A separate focused desktop replay adds ten normal-client frames using only the unchanged original at spans 2 and 1.25. Both fresh Region returns and Hex reloads are exact. Four complete PNG witnesses match the previously viewed calibration scenes byte-for-byte and share their storage. The initial finer-original ground hash matches both replay captures; only the earlier reloaded frame has the distinct 32-pixel result. The original failure remains retained, its cause is not established and deterministic reload remains unaccepted. No player control, prerequisite, cost, staffing, timing or success check changes.

Registered town and volcanic native reviews — November 3, 2026

Twenty-five further complete native images and exact source/export pairs are individually reviewed: Port Town V3–V5, University Town V1–V5, Walled Town V1–V5, Active Volcano V1–V5, Ash Plain V1–V5 and Basalt Columns V1/V2. The findings are registered with restricted internal-reference dispositions; all existing canonical next actions and source approvals remain. Ash Plain pictures contain finite cones, vents and hot fissures, so they cannot be repeated as generic ground. A separate Walled Town V3 study changes 535 upper-smoke RGB samples while preserving all alpha, surrounding architecture and water. For Basalt V2, retain existing WOG-A-008355: its 2,059-pixel bounded correction covers every pixel of the weaker new 666-pixel trial. Reject and retire only that unregistered redundant trial and preview, preserving source, stronger final, exact hashes, compact findings and an explicit historical ledger disposition for WOG-A-009269. Complete boundary/style, finite role, physical scale/contact/state and full runtime qualification remain open. No new source or gameplay behavior is admitted. See individual native and selection findings.

Current registered scope supersedes earlier review counters: 9,201 present catalog files, 9,225 goal records, 111 initial reviews and 5,740 pending qualifications. One deliberately absent rejected private trial is accounted for by an explicit historical disposition, with its retained native successor still subject to complete qualification. No original artwork is unresolved as missing.

Registered remaining volcanic native reviews — November 3, 2026

Thirty-one further volcanic source/export pairs are individually inspected at native size: remaining Basalt Columns, Caldera Basin, Cinder Cones, Geothermal Valley, Lava Fields, Obsidian Flow and Sulfur Springs. Twenty linked candidates receive complete in-memory pixel comparisons and thirteen fresh complete native views. Broad terrain/alpha changes in Geothermal WOG-A-008333 and regenerated Obsidian WOG-A-008340/008341 clouds are explicitly unsuitable for an original-preserving colour selection; originals and catalogued diagnostic candidates remain retained. Two new studies, WOG-A-009270/009271, change only 4,255/8,001 selected smoke RGB pixels, retaining every original alpha, lower thermal smoke and outside-mask sample. Four full-native light/dark browser comparisons pass; residual colour, plume/rock/water boundary, finite role, physical scale/contact/state and full runtime/lifecycle remain open. These findings are registered after the preceding verified live release; no gameplay rule, renderer or permission changes. See individual native findings.

The latest registered scope is 9,203 present catalog files and 9,227 goal records: 80 initial reviews and 5,711 qualification records remain. Eighty-four metadata rows await the next focused publication. The deployed Atlas remains the separately verified 9,201-file release until that publication succeeds. All complete-source permissions, nonrepetition, physical grain/palette/contact, wetland reload and full runtime/lifecycle gates remain explicit.

Registered remaining wetland native reviews — November 3, 2026

Thirty-seven further wetland source/export pairs are individually inspected at native size, preserving Floodplain, Lotus Wetland, Misty Moor, Mudflat, Peat Bog, Quaking Mire, Reed Marsh and Salt Marsh originals. These are finite scenes, never repeatable mesh ground. Truthful clear/fog, flower/mineral and bubbling-water states remain separate from family names or gameplay mechanics. Two bounded current studies, WOG-A-009272/009274, correct1,213/428 selected semi-transparent red crown/branch-edge RGB samples using nearby original palette colours at original weighted luminance. All alpha, opaque painted detail and outside-mask RGBA stay exact. An audit rejects private trial9273 because109 neighbouring protected seed-head/stem samples changed; selected9274 restores them all, with no new changed region. Preserve the source/final, reserve9273 for explicit historical disposition and retire only its unregistered binary/redundant preview after exact comparisons. Four selected native browser comparisons pass; complete halo/edge/material, canonical role/contact/scale/state and normal-context/runtime gates remain open. Findings and selected studies are registered after the preceding verified live release; no source permission or renderer changes. See individual native and preservation findings.

The latest registered scope is 9,205 present catalog files and 9,230 goal records: 43 initial reviews and 5,676 qualification records remain. Seventy-six present metadata rows and one historical disposition await the next focused publication. The deployed Atlas remains the separately verified 9,203-file release until that publication succeeds. All complete-source permissions, nonrepetition, physical grain/palette/contact, wetland reload and full runtime/lifecycle gates remain explicit.

Registered final initial native reviews — November 3, 2026

All43 remaining initial-review records are individually inspected at native size: one opaque ten-scene style sheet,22 exact duplicate legacy runtime encodings and20 historical native studies. Native masters, catalogued historical originals, recorded rejections and preferred artwork remain preserved. The22 runtime encodings retain native dimensions but quantize source pixels, and recurring landscape groups remain visible. No filename, continuous label or runtime directory grants mesh nonrepetition, physical grain/contact/state, source admission or normal-world performance/lifecycle acceptance. The43 restricted reference/history decisions are now registered after the verified wetland release. No initial-review records remain; all5,633 other qualification records remain in scope. See individual native findings.

Ten further normal-client wetland frames use observation-only base-paint tracing at the existing natural desktop site, retaining original source bytes and public algorithm files. Current span2 and original span1.25 each match their reload in base and final ground for this repeat; four complete PNG witnesses are byte-identical to retained prior witnesses, so no new screenshots or raw readbacks are saved. Cumulative wetland evidence is50 frames:40 original-source and10 prior diagnostic-source frames, including30 private-contract frames. The original32-pixel discrepancy remains unresolved; no root cause, deterministic-reload, nonrepetition, fidelity, performance or lifecycle acceptance is granted. See wetland paint-stage evidence.

Art-review backdrop compatibility — 4 November 2026

The native-master/history gallery keeps its existing light/dark background button. Its handler now loads from a same-origin external script so it works under the production Content Security Policy. The policy, game renderer, source permissions, world placements, artwork bytes and simulation rules remain unchanged. Desktop and phone checks exercise pointer and keyboard activation with the exact production policy. See the release review. Correction1d9d6b9 is verified live,including70 native identities,88 Atlas views and four gallery layouts.

Registered Bridge Town and ground qualification — 4 November 2026

The verified preceding release1d9d6b9 is closed. The local Atlas registration adds preferred partial Bridge Town study9275,links original3714 and exact original export8110,records four full ground source/candidate role findings,and registers30 full-sequence wetland frames. The library now has9,206 catalog files and9,231 goal records,with5,634 qualifications open. The additional pending record belongs to the new partial study; no prior gate is cleared. The desert/meadow transition retains its intended1,191-unit extent rather than a512-unit patch substitute. The wetland apron remains a finite scene-ground proposal,and the original32-pixel reload failure remains unexplained despite the exact six-case repeat. No source approval,renderer,world placement,gameplay or save changes. See the native review.

Normal local town sampling verification — 4 November 2026

The exact approved Gabled Court source WOG-A-003363 is naturally selected at an existing,unoccupied grasslands town,cell248797,in the stock disposable local QA world. Fifty-two retained desktop/phone DPR2 observations include28 corrected cold/warm/Hex/return/reload frames and26 private-planner frames. All four corrected cold/warm source transforms match exactly at Region zoom1.16. The unchanged planner paints513×342 cold and1536×1024 warm; its foreground differs by81,836 desktop pixels and81,778 phone pixels. The private native-boundary planner uses the1536×1024 original in both histories and makes both foreground comparisons exact. Ten selected-source replays match the native image exactly. No original is repainted,resized,overwritten or repeated as a mesh background.

The initial mouse-wheel journey stopped at1.15,and a subsequent phone assertion caught fractional-height camera drift. Both limitations remain recorded;the corrected comparison uses the normal zoom handler and an ordinary full-precision map link to match actual transforms without a tolerance. Raw terrain/auxiliary cache surfaces still differ and are not a whole-scene fidelity clearance. Complete visible compositing,pressure,cost,lifecycle,wider biome/state and production applicability remain open. The public renderer is unchanged,and the prior Hex failures remain unexplained. Source approval is preserved;normal local observation is distinct from production-live appearance. See the source-bound review.

The preceding Bridge Town/ground release74e7569 is verified live:9,206 catalog files,46 exact native responses,22 Atlas record views and four gallery layouts. The partial study gains no new game-ready approval or world placement. The full ledger retains9,231 records and5,634 open qualifications.

Visible-map and cache-pressure qualification — 4 November 2026

The normal local map now has68 additional exact-source observations across desktop/phone DPR2:36 Gabled Court town frames and32 arctic/desert/forest/wetland primary-material frames. The cumulative client study contains120 observations,but the town's own-source scope is88. The visible-map panel is compared after actual browser composition;the two terrain-cache canvases swap active roles and must not be compared solely by HTML ID. All four matched cold/warm active terrain surfaces are exact.

The current planner changes81,513 desktop and81,196 phone displayed pixels between matched cold/warm views. Its pressure-return comparisons change81,521 desktop pixels and0 phone pixels. The private native-boundary candidate makes all four displayed-map comparisons exact,with14 native-exact source replays and93/70 actual native-cache evictions. Defaults remain256MiB native and32MiB display. The control-phone raw terrain buffer has4 differing pixels,max44,despite an exact displayed panel;localization and cause remain open without a waiver.

The tour visits four existing natural sites through normal Region/Hex controls. Region is restored before focusing a new destination,because direct focus from Hex can restore the old camera while changing selection. Viewport-dependent entry zoom and actual draw transforms are checked. The original artwork,source contracts,canonical geography and saves are unchanged. This is a scoped local fidelity result;no public renderer activation or production-world appearance is granted. Full controlled cost,aggregate native/GPU memory,lower128/192MiB adaptive profiles,crowded canonical contexts,lifecycle and all prior Hex failures remain open. Finite town portraits remain prohibited as repeating mesh backgrounds,and material nonrepetition/grain/contact is not accepted by these observations. See the bounded review.

The preceding sampling-finding releaseee6d764 is verified live:9,206-member metadata/inventory,four exact native responses including both hamlets,two Atlas record layouts and five generated wiki pages. Five new source-specific observations are registered locally for the next focused publication. The full9,231-record ledger retains5,634 open qualifications.

Adaptive cache profiles and separate cost qualification — 4 November 2026

The adaptive continuation records 204 completed normal local client frames across 12 cohorts, with 0 failed cohorts retained separately. The unchanged client selects its own 128/192/256 MiB native-cache limits from emulated 2/4/8 GiB deviceMemory hints. Both 1440-pixel desktop and 390-pixel phone layouts use DPR2. These hints do not cap physical RAM or certify physical phones.

The private planner has 12 exact displayed-map pairs and 42 native-exact isolated town replays in the completed cases. Gabled Court contributes 108 new own-source frames; arctic, desert, forest and wetland primary materials contribute 96. The cumulative completed client count is 324, and the town's own-source count is 196. Each material is source-hash bound and reported painted; final material pixels, nonrepetition, palette, grain, contact and state are not approved by source invocation.

The default-256 MiB control-phone pressure repetition is exact in this run. That does not erase the earlier four-pixel/max44 raw terrain finding or establish its cause. All prior wetland/Hex failures remain open. Exact-transform comparisons are distinct from rounded map-link reloads. The private planner remains unactivated and the deployed renderer differs. Finite town portraits remain prohibited as repeating mesh backgrounds. Original artist bytes, canonical geography and saves are preserved.

Owned-process OS CPU counters survive page-document resets. Browser/server private commit and working-set samples plus nonpeak GPU checkpoints are retained. Earlier diagnostic image reads can affect later allocation and garbage collection even when they occur outside timed operations. These are instrumented cost observations, not a controlled performance pass. A separate cost-only harness is prepared with a fresh browser per case, no diagnostic pixel readbacks or retained source-image references, and two counterbalanced repetitions. It has not earned performance acceptance merely by compiling. Shared pages, exited-process CPU bounds, physical hardware, crowded contexts and lifecycle remain relevant limits.

The preceding five-source release edc632141c32298b84ef57304ccd6ffe9e3a8646 is verified live: all 9,206 inventory members and exact metadata, eight native HTTP identities including both Citadel hamlets, ten desktop/phone Atlas finding views, six generated wiki pages and zero browser errors. Its five metadata rows are synchronized. The adaptive findings are a separate local continuation until their own registration and publication. The 9,231-record ledger retains 5,634 open qualifications; no source approval, admission, public renderer activation, artwork downgrade or production-world placement is made. See the source-bound adaptive findings.

Completed cost observations and natural place-selection inventory — 4 November 2026

The independent cost-only counterpart has completed24 cases and408 nonoverlapping measured operations across two counterbalanced repetitions of desktop/phone layouts and the128/192/256MiB native-cache defaults. Every case used a fresh owned browser without diagnostic image reads or a retained observer source-image reference. All216 town source-input/transform records match the separate204-frame pixel study. The408 metadata observations do not add408 pixel-fidelity frames.

The paired CPU difference changes sign between repetitions in3 of six profile/layout groups. Two repetitions do not establish statistical or whole-world performance acceptance. Browser/server OS CPU is a lower bound for exited processes. Sampled private commit and working sets are process observations;working sets can share pages,and private/working-set/GPU values must not be summed as unique physical memory. GPU checkpoints are outside timing and are not peaks. Emulated deviceMemory selects cache defaults without capping physical RAM or certifying phones. The shared server and machine background effects are not eliminated. Full cost/aggregate memory,crowded contexts and lifecycle remain open.

A complete scan of2,252,800 unchanged canonical cells now maps all51 admitted place descriptors across125 declared existing-state profile/feature combinations. Fifty descriptors and121 combinations have natural candidate sites;four tundra combinations have none. The1191 tundra cells include the relevant feature types,but their one magic site,three towns,three ruins and one castle deterministically select other eligible variants. The unmatched combinations are Floating Stones/magic,Gabled Court/town,Cold Roundwall/ruins and Drumkeep/castle. Drumkeep is the only source without any natural selection in this seed. Its artwork and approval are preserved;absence from this seed is not an artwork-defect finding. This candidate inventory supplies0 normal-client frames and grants0 new game-ready approvals. Effective occupancy and actual normal rendering are still required. Renderer admission,natural selection,actual source paint and final visual acceptance remain distinct. A selector audit never permits a finite portrait to repeat as a mesh background. The current generator and canonical geography stay unchanged. See the source-bound selection inventory and the cost observations.

The preceding349e1ac release is fully verified live and its five metadata rows are closed:exact9,206-member inventory and metadata,eight native image identities including both hamlets,ten desktop/phone Atlas views,seven wiki pages and0 browser errors. The new cost observations and source-selection inventory are local findings awaiting their next focused Atlas publication. All9,231 goal records,5,634 open qualifications,43 runtime entries,originals,preferred studies,both hamlets and saves remain. No public renderer activation,new admission or artwork downgrade is made.

First ten normal place-source reviews — November 4, 2026

Ten unchanged originals now have40 observed local Region/Hex frames across desktop and phone layouts. The village,cottage,farm,forest columns,tundra waystones,wetland strata,desert courtyard city,field castle,market town and mountain walls were each inspected at native source resolution and in all four context panes. Exact native HTTP identities and source bounds passed;20 native-dimension source replays were pixel exact. The other20 Region comparisons use the normal renderer's actual mip inputs and remain descriptive. These are emulated phone layouts,not physical-device certification.

The scoped subject reviews found no demonstrated reason to repaint these samples. They grant no whole game-ready approval. Directional/woven field and hills grain,coarse forest/mountain floors and particularly oversized wetland leaf/stem grain remain mesh-background quality concerns. Exact periodicity is unmeasured;an algorithm name does not prove nonrepetition. All declared profiles,physical scale,crowding,terrain contact in other settings,lifecycle,full performance and earlier raw terrain/Hex failures remain open. Finite architecture and scenery portraits must never be tiled as mesh backgrounds.

The complete plan retains125 declared combinations:121 have effective eligible candidate sites and four remain naturally unselected. This batch covers ten combinations,leaving111 eligible contexts. Candidate eligibility,actual local source paint,production-world appearance and final quality approval remain distinct. These local observations do not prove any new production-world appearance,change source admission or activate a public renderer.

Five native previews show exact red/yellow contour colours at alpha1–2 of255. No opaque boundary contamination was established in the sampled composites. The exact colour/alpha histograms are retained;no arbitrary low-alpha shadow,foliage or source pixel is removed. Every original,preferred final,both Citadel hamlets and persistent save is preserved. Ten bounded lossless context sheets are retained;raw pixels and full map images remained in memory. A proven duplicate progress payload was replaced by a pointer after exact comparison. See individual normal-context decisions.

Second ten normal place-source reviews — November 4, 2026

A second distinct ten originals have40 normal local Region/Hex desktop/phone frames and individual native/context reviews. Together the first two batches cover20 distinct sources and80 frames;101 effective eligible combinations and all four naturally unselected combinations remain. Twenty more native-dimension source replays are pixel exact. The20 normal Region mip comparisons remain descriptive. All ten browsers,twenty contexts and the owned QA server closed cleanly. No source,approval,renderer,canonical geography,production world or save was changed.

Matched-context replay withdrew the initial Squarekeep/town-occlusion attribution:all98,306 tested source-alpha128 pixels match across four source canvases. Its small Region presentation remains a scale/readability question. Desert Gate has confirmed source/control hit-area overlap in the sampled phone Region camera. Floating-stone outer rubble also approaches phone controls,so its clearance remains open. Actual source paint and map-bounds inclusion do not establish a readable unobscured subject. Preserve the detailed originals while investigating normal framing and crowded composition;do not conceal failures through repainting,lossy reduction,blanket shrinking,feature relocation or approval changes.

Wetland leaf/stem grain and grassland straw-like grain remain conspicuously oversized;forest,hills,mountain and field grain also need separate aesthetic and nonrepetition work. Exact periodicity is unmeasured. No whole-scene,physical-scale,all-profile,crowded-context,lifecycle or full performance acceptance is granted. Earlier raw terrain/Hex differences remain unresolved. Finite portraits must never repeat as mesh backgrounds. See individual second-batch decisions.

Thirty source reviews, visibility attribution and native tower study — November 4, 2026

The first three batches now contain30 distinct source/context combinations and120 normal local Region/Hex desktop/phone frames with individual native and four-pane visual reviews. Twenty further original sources are still naturally selectable but unobserved in this series;the complete plan retains91 eligible combinations plus four naturally unselected combinations. These counts cover admitted place art,not all5,634 remaining library qualifications. All source approvals and renderer contracts remain unchanged.

The initial claim that a town hides most of Tundra Squarekeep was withdrawn. Replaying its source over the actual before-draw canvas,with identical context attributes,reproduces98,306 source-alpha128 pixels exactly across desktop/phone Region/Hex. Its72-world-unit canvas remains a physical-scale/readability question. An initial Hex mismatch was caused within this diagnostic by different willReadFrequently context choices;matching them gives0 differences. The alpha255-only attempt tested0 pixels and grants no visibility evidence. None of this resolves earlier terrain/Hex failures or certifies CSS,other canvases,soft edges,performance or lifecycle.

Actual DOM control hit areas intersect2,347 Desert Gate,804 Cohesive Ward and1,599 Cohesive Gate source pixels in sampled phone Region cameras. They are source-alpha128 hit-area overlaps,not opaque UI-alpha counts. Sampled phone Hex/floating-stone views have0 such hits,so proximity alone is not called a failure. Mountain Gate Cluster overlaps ridge scenery and retains its contact/crowding gate. Round Keep phone Hex has one nonzero-alpha apron bounds exception;independently decoded alpha128 subject bounds fit inside the map. Both facts remain recorded.

The existing forest tower has heavier outlines,saturated yellow-green ground and a distinct ground disk relative to the approved material benchmark. Its catalogued original remains exact. A non-destructive V6 alternative now exists as an explicitly linked unregistered preferred study:1254×1254 RGBA PNG,unchanged generated native bytes,two independent decoders agreeing,758,407 fully transparent pixels and0 alpha128 border pixels. It is a generated style alternative,not a pixel-exact masked edit. Ground blending,alpha edges,projection/role/scale,all context views,performance and lifecycle remain unaccepted;its initial review had0 contextual frames. The later matched comparison now has4 private study and4 original-control views,with no admission or game-ready approval. The published catalog remains9,206 files plus this one explicitly tracked unregistered study. No finite portrait becomes a repeating mesh background. See third-batch individual decisions,visibility and method correction and tower study.

Next twenty Atlas reviews and private native tower comparison — November 4, 2026

The preserved V5 tower and the V6 preferred native study have now been compared at the same legitimate canonical site in four original-control and four private-candidate Region/Hex desktop/phone views. All four actual draw transforms and declared widths match. Both candidate native-dimension Hex source replays are pixel exact;the two normal Region mip comparisons remain descriptive. The native study and all eight panes were directly reviewed. Finer masonry,more restrained moss/ground colour and less disk-like contact are preferred in this sample. Original bytes remain exact.

The candidate used one browser-private source URL and matching permission replacement,with all other contracts unchanged. This is a preview binding,not public source admission or normal approved-source appearance. The old ground footprint was inherited only for preview;it is not approved for V6. Physical scale,alpha edges,broader/crowded contexts,lifecycle and full performance remain open. No production-world appearance,public renderer activation or game-ready approval follows. The9,206 published catalog files and original source remain separate from the one explicitly linked unregistered native study.

Twenty individually reviewed source records from the second and third batches now have registered normal-context findings and specific ledger next actions. They bind80 existing-source frames,corrected Squarekeep attribution,actual phone Region control-hit overlaps,the Round Keep apron/subject bounds distinction,Mountain Gate Cluster relief/contact and the tower’s style-study follow-up. All goal statuses,unreviewed rows,source approvals,5,634 qualifications and43 runtime entries are preserved. This new registration awaits its own focused Atlas publication and live verification. The preceding499e241 first-ten release is fully verified live:18 native identities,20 finding views and ten wiki pages. See next-twenty registration and native tower context evidence.

Native tower study registered in the Atlas — November 4, 2026

The exact native V6 tower PNG is now separately catalogued as WOG-A-009276,linked as a proposed alternative for preserved original WOG-A-008756. It is a reference/study asset with approved=false,whitelisted=false,no public gameplay binding and a pending qualification. Its four private candidate views and four original control views are recorded separately from normal admitted-source appearance. The original’s artwork and source contract remain unchanged. The Atlas can now show the actual V6 native image without granting world-use rights.

The local catalog has9,207 files and the complete ledger has9,232 records. Pending qualifications increase from5,634 to5,635 because the newly retained study is explicitly included;no older record or readiness gate disappears. All3,597 explicit dispositions,354 local source permissions,322 production permissions,43 runtime entries,originals,prior finals,both Citadel hamlets,canonical geography and saves remain. There are37 retained preferred outputs/studies and0 newly complete game-ready approvals. The21-row release includes the twenty source reviews plus the native study and awaits focused publication/live verification.

The native V6 bytes remain1254×1254 RGBA without resampling or lossy encoding. Sampled finer materials and less disk-like contact are preferred,but the inherited private footprint,physical scale,alpha edges,broader/crowded contexts,state/lifecycle and full performance remain open. This finite ruin portrait must never tile a mesh background. Earlier terrain/Hex failures and the recorded control/relief/bounds concerns remain explicit. The twenty reviewed next actions and the new study action are reflected in recomputed ledger action counts. See 21-record Atlas intake.

Fourth ten preserved sources in normal local contexts — November 4, 2026

Ten additional distinct original sources were directly reviewed at native resolution and in40 actual normal local Region/Hex desktop/phone frames. This brings the series to40 distinct sources and160 frames,with81 eligible profile/feature contexts and four naturally unselected declared contexts still open. These local observations do not establish production-world appearance. Artist bytes,source permissions,gameplay rules,geography and saves remain unchanged.

The Crown Keep phone Region sample visibly intersects the control column at its right round tower. The grassland arch Region sample has a foreground town roof overlapping its lower left base;no quantified final-source pixel attribution is claimed. Preserve both originals and review camera/control clearance and composition separately. Surrounding ground grain/nonrepetition,physical scale,broader/crowded contexts,lifecycle and complete performance remain unaccepted. The separate native tower V6 study also remains unapproved. The new ten findings remain separate and unregistered until the preceding21-record release completes live verification. See individual fourth-batch findings.

Fifty original-source contexts and explicit ground labels — November 4, 2026

Twenty additional preserved originals have80 individually reviewed normal local Region/Hex desktop/phone frames. The series now covers50 distinct naturally selected sources and200 frames;71 eligible profile/feature contexts and four naturally unselected declared contexts remain. Forty-eight actual native-dimension isolated replays are exact;32 Region mip comparisons remain descriptive. Exact replay does not make limited native detail sharp when enlarged. Chalk masonry8816,desert floating stones8827 and desert paving8831 retain close-Hex detail/contact gates. Crown Keep3573 retains its phone-control intersection;grassland arch8860 and paving8862 retain foreground-building composition gates.

All ten regional ground materials now derive their purpose and semantic family from the explicit ground role and profiles. Snow,desert,wetland,lake and ocean sources no longer inherit a woodland-floor classification. The compact descriptive UI labels receive the same ten purpose corrections. The isolated production index preserves every other published row and alias;the larger local index retains its unrelated queued changes. All43 runtime entries remain,with only the local index entry hash refreshed. Artist bytes,placement/scales,source approvals,renderer sampling,geography and saves are preserved.

The existing1520×1035 native masonry study9215 is visibly sharper than the preserved194×132 original8816. Eight private diagnostic views add no normal-source or production appearance. Four current independent native-image replays with actual canvas attributes reproduce184195 tested source-alpha128 body pixels exactly;default contexts produce144098 Hex differences,maximum16. The historical max31 phone failure is retained and is not retrospectively assigned a proved cause. Material/palette,finite contact,physical scale,alpha1edges,broader/crowded sites,lifecycle,full performance and source admission remain open. No new image was generated or resampled.

The previous21-record commit37e8ae0 is live and verified. This new31-record intake combines20 source reviews,ten ground-label corrections and one existing-study finding;it awaits its own publication and live verification. The complete scope remains9207 catalog files,9232 ledger records,5635 pending qualifications,3597 explicit dispositions,37 preferred outputs/studies,354 local source permissions and322 production permissions. There are0 new complete game-ready approvals. Every original,prior final,both Citadel hamlets and all earlier terrain/Hex failures remain. Ground nonrepetition and physical grain still require separate qualification;finite portraits must never tile a mesh background. See 31-record findings and preservation and current masonry replay.

Additional profile histories and two native desert studies — November 4, 2026

Ten preserved sources now have40 additional normal local Region/Hex desktop/phone frames at ten further naturally selected profile sites. Per-profile histories append to the prior findings. The series covers60 profile contexts and240 frames from50 distinct sources,with61 eligible contexts and four naturally unselected contracts remaining. No production-world appearance or approval is inferred.

Two separate native1536 by1024 desert studies preserve the small floating-stone original8827 and paving original8831 plus both full landscape parents. Floating-stone study9277 resolves finer fractures and masonry;its two Region camera transforms match the original while its two Hex focus transforms differ. Paving study9278 has finer low chipped slabs and a narrower sampled contact seam;all four camera transforms match. Its provisional alpha250 stone-body width/center/bottom proxy adjusts the preview footprint,not an approved physical-scale contract. Both studies retain their generated RGBA bytes with independent scanline/libvips decoder agreement. Four private views per study and reused original controls do not add normal-source context coverage.

The field farm fence extends into shoreline water,wetland city ground grain is oversized relative to its architecture,and forest waystones require canopy clearance/crowding checks. Preserve those originals while resolving placement,terrain support and ground presentation. Study alpha edges,palette,contact,physical scale,broader/crowded contexts,state/lifecycle,full performance and source admission remain open. Earlier terrain/Hex failures remain unresolved. There is no renderer activation,source approval,new complete game-ready classification or change to geography,saves or player rules.

The complete baseline now includes9,209 catalog files,9,234 goal records,5,637 pending qualifications and39 preferred outputs/studies. The two extra pending qualifications belong to the two added studies;all3,597 explicit dispositions and43 runtime entries remain. Fourteen changed records require focused Atlas publication and live verification. The preceding5f2d0e2 release is fully verified live:38 native identities,62 desktop/phone finding views,ten wiki pages and ten purpose-only compact labels. See the current intake.

Seventy reviewed terrain contexts and private ground grain — November 4, 2026

Ten further unchanged sources have40 new normal local Region/Hex desktop/phone frames at additional declared profile sites. All ten four-pane sheets were inspected;native hashes match prior individual native reviews without claiming a fresh native inspection. The reviewed series reaches70 contexts and280 frames from50 distinct sources. The latest ten profile findings and two exact-source private primary-ground findings are registered locally for Atlas publication,with51 eligible and four naturally unselected contracts retained. A dry grassland farm does not retire its field-profile fence-in-water failure. Wetland ground grain,coastal support,phone controls and moss-rich waystone material at a desert/grass transition retain explicit gates.

A browser-private primary-grain proposal compares1.25 against2 hexes for grass source3576 and wetland source3578 at a market,wetland columns and wetland city. All twelve actual foreground camera transforms,canvas sizes and selected-source-only replay RGBA hashes match the controls;all twelve map hashes change. The twelve panes were directly inspected and the finer sampled ground grain is preferred while native architecture remains intact. Secondary grass/wetland variations and the existing1.25-hex hills overrides remain unchanged. Native artist bytes,public renderer,production contracts and saves are untouched.

The initial twelve-frame test changed descriptive rows but missed the renderer terrain-variation binding. Its three sheets were byte-exact controls and were deduplicated after verification,retiring17,839,400 bytes;compact failure evidence and all frames remain. The corrected preview changes both primary terrain variations and matching private rows. Neither attempt adds normal-context coverage. Source-only equality does not prove whole final-composite fidelity. World-wide perceptual nonrepetition,physical scale,contact,crowding,lifecycle and full performance remain open;earlier terrain/Hex and pan-return failures are retained. No public activation or new game-ready approval is granted.

The preceding14-record94a4c6d release is fully verified live:9,209 catalog files,27 checked native identities,28 desktop/phone Atlas finding views and ten wiki pages. Both native desert studies are available in the Atlas alongside preserved originals and remain unapproved for world use. All9,234 goal records,5,637 pending qualifications,3,597 explicit dispositions,43 runtime entries,both Citadel hamlets,source permissions,geography and saves remain. See additional contexts and private grain evidence.

Ninety default-world context reviews and four alternate-world roles — November 4, 2026

Twenty additional declared default-seed contracts have80 newly reviewed normal local Region/Hex desktop/phone frames. The default-seed series reaches90 source/profile/feature contexts and360frames from50 distinct sources,with31 eligible contexts still open. Four additional tundra contracts were naturally selected in two legitimate disposable QA worlds using short seeds accepted by the normal client. Those16frames include the first normal local Drum Keep observation,bringing the combined review to94 context samples and376frames across51sources. These are observations of the current local renderer,not production-world appearance evidence.

The default seed still has four naturally unselected contracts. Alternate QA observations do not change those facts or canonical geography. No source variant was forced and no world command was issued to make art appear. Both owned temporary alternate worlds were retired only after their browsers and servers closed and the existing canonical QA save hashes matched. Long seeds rejected by the normal client contributed zero accepted frames. Production saves were not opened or altered.

Original fine stone,timber,slate and thatch details are retained. The Round Keep phone Hex all-nonzero-alpha apron crosses the map boundary;separately measured alpha128/250 body rectangles fit in all four eighth-batch maps,which does not prove full visibility or control clearance. Field-farm shoreline support,forest vegetation and ridge overlap,wetland grain/contact,phone controls,moss-rich material/state suitability,Drum Keep physical scale and broad translucent surrounds remain individual gates. Floating-stone red native-edge samples are all below alpha16;this descriptive color count does not prove an opaque world fringe. Source-only native replay equality does not prove final composited contribution. Physical scale,broader contact,nonrepetition,crowding,states,lifecycle,complete performance and earlier terrain/Hex/pan-return failures remain unaccepted.

The metadata-only intake appends profile histories without replacing earlier findings. It preserves9,209 catalog files,9,234 goal records,5,637 pending qualifications,3,597 explicit dispositions,39 preferred outputs/studies,43 runtime entries,354 local/322 production source contracts,all native artist bytes,both Citadel outer hamlets,gameplay rules and saves. No new source admission,renderer activation or complete game-ready approval is granted. The preceding42b570c release was verified live against28 native image identities,24 desktop/phone Atlas finding views and ten wiki pages;this new intake requires its own Atlas validation and live closeout. See scoped intake and alternate-world individual findings.

All declared place contracts sampled; readiness gates retained — November 4, 2026

The initial source/profile/feature context matrix now has individually reviewed QA samples for all125declared contracts. All121naturally eligible default-seed contracts have484 normal Region/Hex desktop/phone frames from50sources. Four naturally selected contracts in legitimate alternate QA worlds add16frames and one source,for500frames across51native sources. Four default-seed no-match facts remain unchanged. This completes initial context sampling,not acceptance of every contract,production-world appearance evidence or full-library game readiness.

The final31default-seed findings and three private canopy findings are registered on11existing source records for the next Atlas release. This supersedes the earlier local pending-registration note in the100-context review. All source/profile histories and earlier individual failures remain. The prior17-record81d2725release is fully live-verified:34native identities,34desktop/phone Atlas finding views and ten wiki pages passed. The new11-record intake requires its own publication and live closeout.

Phone Region controls overlap the large cities and Crown Keep. The Hills Cohesive Ward also has a neighboring farm overlapping its right-hand side. Forest crowns,other neighbor/ridge composition,coarse mesh-ground grain and perceptual nonrepetition,alpha/contact,physical scale,biome/season/state,lifecycle,complete performance and previous terrain/Hex/pan-return failures remain open. All84 final-batch projected nonzero-alpha bounds fit the map and42native Hex replays match exactly;neither proves final source contribution or phone clearance. Region mip comparisons remain descriptive. The nine distinct sources in the final21contract batch recur in different profiles and must not be collapsed into one approval.

The12-frame browser-private canopy study makes the walled city gateway clearer with identical native art. Ten foreground transforms,canvases and source-only RGBA hashes match controls;two ruin Hex cameras differ. Broader surrounding-crown removal,phone framing,whole-ruin clearance,shape/depth-specific exclusion,preservation of unrelated trees,cache/lifecycle and full performance remain unaccepted. The study is not activated. Public renderer,source permissions,simulated vegetation,canonical geography and saves are unchanged;private frames add zero normal-context coverage.

The full baseline remains9209catalog files,9234goal records,5637pending qualifications,3597explicit dispositions,39preferred outputs/studies and43runtime entries. Preserve every original,selected final,approved reference and both Citadel outer hamlets. No source admission,new native image,artist-byte change or new complete game-ready approval is granted. See final contract reviews and focused intake.

<!-- hex-physical-density-20261104 -->

Native place clearance and physical Hex detail — November 4, 2026

The renderer binds foreground body-clearance geometry for two existing forest city sources and a ruin to their exact native file hashes,dimensions,widths and anchors. The original quiet-core/background rules remain. Width,bounds and source revision share one natural selection. Composition revisions include geometry/source/profile identity,so a same-width source change cannot reuse stale layout. This is decorative visibility,not simulated tree clearing or a new building permission.

Hex ground and foreground now share a physical pixel layout at the existing selected resolution. DPR is part of scene cache identity;ground planning keeps logical dimensions,and both foreground branches retain the same CSS/world placement. Loading resets clear the full canvas with the identity transform. Original artwork,source selection,geography and gameplay rules are unchanged.

Forty normal Region/Hex desktop/phone candidate views across ten naturally selected production sources passed with zero browser errors. Twenty native Hex source-only replays are exact and both surfaces use physical DPR2 on the tested DPR2 display. Twelve paired body-site observations preserve CSS placement within0.001pixel;the six Region maps remain byte-exact and the six Hex maps change. Six actual pointer-return/reconnect checks reproduce exact maps/transforms. All panes were directly inspected;the earlier body-only DPR1 finding is superseded for this candidate.

These are scoped renderer checks,not complete game-ready asset approval. Phone control overlap,coarse ground grain/nonrepetition,shoreline/fence and neighbor/contact failures,physical scale,biome/material/state suitability,full state lifecycle,complete performance and earlier terrain/Hex failures remain explicit. Ten local Atlas source records preserve all prior individual findings. The full baseline remains9209catalog files,9234ledger records,5637pending qualifications,3597explicit dispositions and39preferred native outputs/studies. Source permissions stay354local/322production;no native image,new source admission or complete game-ready approval is created.

Readback-free headless Edge timing on one natural forest city measured published/candidate Region pointer p95 at19.4/19.5ms desktop and11.3/12.1ms phone. Three Hex switch samples stayed in a similar range. Those four pages used no source-paint hooks or RGBA readbacks and do not certify full-library performance. Disposable worlds were retired after browser/server terminal proof;compact findings and bounded decisive witnesses remain. See the review and verification record.

<!-- phone-native-ui-coverage-20261104 -->

Phone framing evidence — November 4

A local source-alpha/UI-matte follow-up confirms small strongly opaque navigation overlaps in two framed390px Region city views,while all ten measured Hex views are clear at the stated thresholds. Keep the native cities unchanged. Verify normal camera-pan framing at the same world scale before proposing an artwork or universal Hex-position change. Nine whole-map differences with identical foreground transforms remain unresolved;this study changes no gameplay rule and grants no asset approval. See the scoped review.

<!-- phone-native-ui-pan-20261104 -->

The two large forest-city phone Region overlaps have a verified normal camera remedy: a 40 CSS pixel left pointer drag at the same native width and projection scale clears the measured UI intersections,with the complete nontransparent image bounds inside the frame. Four follow-up Region/Hex phone measurements are clear at source alpha>=128 and UI opacity>=0.85. This proves a usable framing at two tested sites,not every camera or complete asset readiness. Preserve all composite,ground,contact,scale,state,lifecycle and performance gates. See the phone camera follow-up.

<!-- native-ground-viewport-20261104 -->

A controlled native-ground diagnostic proves the production stamped/repeating-fallback algorithm can change shared world pixels when a viewport-size threshold changes its backend. The existing nonperiodic native candidate keeps shared pixels exact in the measured tests for grass,wetland and meadow,but the finer span remains visually unaccepted for softness/mottling. Require native-detail,nonrepetition,normal contextual scale,contact,lifecycle and relevant performance evidence together before activating a replacement. No world or renderer change is made by this study. See the native ground diagnostic.

<!-- native-ground-context-study-20261104 -->

A private1.25hex calibration for three original grounds is preferred over their4hex control at the tested natural cottage,strata and courtyard-keep sites. Twenty-four effective Region/Hex desktop/phone frames were reviewed;the twelve finer views have observed span ratio0.3125,identical foreground placement/source-only pixels and six exact native Hex subject replays. Preserve the same original artist bytes. The candidate remains private while contact,material/state,broader contexts,final-composite attribution and relevant performance/lifecycle gates are resolved. An ineffective versioned-URL attempt is explicitly excluded. See the private native-ground context study.

<!-- native-ground-performance-followup-20261104 -->

The preferred private ground calibration remains performance-pending:four uninstrumented diagnostic pages at one natural grassland cottage measured a101ms extra desktop cold Hex switch and a115ms candidate long task,with similar Region pointer p95. Attribute native work and preserve artwork detail/physical density. See the scoped ground performance review.

<!-- native-ground-fixed-backing-20261104 -->

The private native-ground fixed-backing preview resolves the measured cottage cold Hex gap in the scoped comparison while retaining full selected density and artwork detail. Its twelve normal Region/Hex desktop/phone maps match the preferred1.25hex control byte-for-byte,and six actual pan-return/reconnect checks return exact maps. The rendering change reuses a bounded GPU backing across partial tiles;it changes no geography,source admission or gameplay rule. Keep all broader source fitness,state lifecycle,other-background and full hardware/performance gates open before production activation. See the native ground fixed-backing review.

<!-- native-palette-backing-parity-20261104 -->

Allocation parity now covers every current terrain-variation input in both production and local manifests:19unique source files,including10production inputs. Ninety-five complete real-GPU outputs preserve243,081,117pixels at native source aspect ratios and integer/fractional viewport extents. This extends a technical renderer gate only;all19individual visual,recurrence,biome/role/state,contact,lifecycle and performance next actions remain unchanged. Other catalog backgrounds remain in the full goal. See the terrain palette parity review.

<!-- native-lake-windpatch-context-20261104 -->

A new native lake wind-patch study, WOG-A-009279, is retained alongside both original lake sources. Twelve private normal Region/Hex desktop/phone frames at unchanged natural lake cell 262807 preserve fine painted detail, but similar bright bands remain visible in Region. This fails the pattern gate; the study has no source admission or live appearance. Preserve palette, recurrence, shore-contact, state, performance and lifecycle gates. Source-specific sampler coverage is the next investigation, not an established fix. See the native lake context review.

<!-- native-lake-sampler-coverage-20261104 -->

A source-specific lake sampler experiment broadens crop-center coverage while preserving native coordinate slope, world anchoring, flow direction and source bytes. The corrected default path preserves all 19 terrain inputs across 95 GPU outputs. Eight normal Region/Hex desktop/phone comparison frames still show similar bright bands and denser wave clusters, so the wider sampler is rejected as a visual replacement. No renderer or source permission changes. Keep the original lake artwork and current native study; investigate highlight grouping or a finite composition privately. See the lake sampler review.

<!-- native-lake-short-wavelets-20261104 -->

WOG-A-009280 is the current preferred native lake study at the inspected natural fields/lake context. Shorter isolated highlights reduce the broad similar bright bands seen in the prior wind-patch study, while retaining fine painted marks and native source scale. The colour-corrected selection was inspected in normal desktop/phone Region and Hex views. Both the original and prior study are preserved. This scoped preference grants no renderer admission or complete game-ready approval; wider recurrence, other shores, Hex shore contact, pan/reconnect, fallback and performance remain open. See the short-wavelet lake review.

<!-- native-lake-shore-domain-20261104 -->

WOG-A-009280 now has private source-bound comparison evidence at seven natural shore biome sites in desktop/phone Region and Hex. Fourteen valid shore pan-return maps and 28 corrected same-pose Share view reconnect maps are pixel-exact. Field interior and mountain desktop Hex witnesses now expose actual water and bank contact. The tested CPU fallback retains visible painted structure,but GPU/CPU maps are not pixel-identical;broader parity,fallback,state/shore coverage,perceived nonrepetition and physical-device performance remain open. No source admission,complete game-ready approval,public renderer change,world command or artist-file change follows. Originals,prior studies,both hamlets,geography and saves remain preserved. See the shore-domain review.

The related local metadata-index follow-up adds descriptive entries for the two existing planned lake studies. Every prior entry and alias is retained;renderer permissions and the production index remain unchanged.

<!-- native-ground-fine-wide-sampling-20261104 -->

Three unchanged native ground sources now have a private comparison of current crop sampling and wider coverage at the newer 1.25-hex logical span. Twenty-four normal-control desktop/phone Region/Hex views, 18 exact candidate lifecycle comparisons and six exact Hex foreground canvases distinguish ground changes from source or placement changes. The wetland source has a scoped site preference to investigate; grass and meadow improvement remains inconclusive. No public activation or full quality approval follows. Source profile labels and actual natural biomes remain distinct: these three controls occupy two natural biome types. See the fine-ground review.

<!-- native-wetland-bank-sampling-20261104 -->

The exact native damp-earth source now has a natural wetland/lake-bank comparison under current/wider sampling and GPU/CPU fallback: 16 normal-control desktop/phone Region/Hex views and 12 exact candidate lifecycle maps. The bank stays continuous, but conspicuous leaf/moss groups prevent transferring the earlier strata-site preference into a general wetland upgrade. Keep the original/current configuration preferred. Actual native-image context-loss recovery matches 3,387,488 independent CPU-reference pixels with no partial publication; whole-client recovery, broader wetness/contact/state quality and performance remain open. No public renderer, source permission, geography, artwork or save changes. See the wetland bank review.

<!-- native-mire-fine-ground-contact-20261104 -->

The retained finite Mire image WOG-A-009138 was compared once per ground surface against the finer native wetland floor at one fresh read-only 11-cell disposable-world footprint. Twelve normal desktop/phone Region/Hex views and 12 exact pan/shared-view reconnect maps preserve the artwork and actual Hex foreground. The smaller private placement reduces oversized marks; its darker oval/perimeter and wetness still need work. Keep the native art and raw original unchanged, with no repetition, source admission, public renderer activation or complete approval. The CPU display method and full original-RGB comparison remain narrowly scoped evidence. See native Mire contact review.

<!-- native-mire-perimeter-alpha-20261104 -->

The private native-alpha-mask Mire perimeter path is rejected: separate mask resampling changed 516 previously opaque display pixels in four native-image geometries, and the retained guard prevented those draws from publishing. Normal masked cohorts remained failed. Keep the native artwork and smaller study pose unchanged. A display-partial-alpha-only proposal preserves 1,111,595 opaque pixels in four isolated cases but still needs its own normal-world and visual checks. Correct the stale no-world-frames approval explanation without changing the false flag or remaining gates. See Mire perimeter rejection.

<!-- native-mire-display-fringe-alpha-20261104 -->

The corrected private display-fringe method preserves all opaque painted display pixels and passes 18 exact lifecycle maps across 12 desktop/portrait-phone/landscape-phone Region/Hex views. Direct inspection finds only a subtle fringe difference, with a visible darker patch boundary, so keep the original art and baseline rendering preferred. Normal portrait framing clips part of the unadmitted finite overlay; source/viewport geometry is recorded separately from screen visibility. No public activation or complete approval. See Mire fringe review.

<!-- native-mire-native-edge-repair-20261104 -->

The native edge-only Mire trial preserves every original RGB value and all 1,009,237 opaque native pixels. Twelve private normal Region/Hex views and 18 exact comparison lifecycle maps show no clear contextual advantage, so the original remains preferred. The canonical backlog now records the retained private footprint and scoped completed evidence separately from an admitted source contract. Visual role/contact, relevant GPU/state, performance and admission gates remain open. No public renderer, world geography or save changes. See native repair outcome.

<!-- native-arctic-finite-ground-20261104 -->

The unchanged finite arctic study WOG-A-008379 now has twelve actual normal desktop/portrait-phone Region/Hex views and twelve exact candidate lifecycle maps. A visible rectangular edge, oversized ice grain at larger scale and blue-ice contact against the landmark's white snow apron prevent admission. Three of four native Hex foreground comparisons are exact; the remaining desktop case changes 24,610 pixels and stays open. Keep the native study and current live ground. No repeated image, source crop, inherited blend polygon, artist change, geography edit or source permission is introduced. See arctic world outcome.

<!-- native-arctic-domain-study-20261104 -->

The preferred finite arctic derivative WOG-A-009281 preserves all 1,572,864 original RGB pixels at native 1536 × 1024 and changes only the inherited alpha domain. Sixteen private normal-client domain/alignment views favor quiet snow beneath the existing landmark; eighteen domain lifecycle maps are exact. The exported PNG has four candidate and four control desktop/portrait-phone Region/Hex views, with six exact candidate lifecycle maps. Its baked domain must not be applied twice. Direct HTML-image drawing fails all eight recorded geometry replays; one native-size canvas decode restores every replay exactly. The desktop limestone foreground mismatch of 24,610 pixels remains unresolved, including stable capture and full-size retests; no speculative renderer correction is activated. Keep both source paintings, both hamlets, geography, saves and existing approvals. Catalog 9,212; ledger 9,237; pending qualification 5,640; explicit dispositions 3,597 unchanged. This preferred study grants no complete approval, source admission or live-world appearance. Broader boundary/contact, role/biome/state, GPU and full cost/lifecycle checks remain open. Native study and evidence.

<!-- native-arctic-raster-attribution-20261105 -->

Five arctic source records now retain individual native-input/raster-attribution findings. Two separate four-view normal desktop Region/Hex diagnostics each have three exact lifecycle maps. A complete named-method trace has matching ten-operation sequences,context attributes and dimension reset,with an exact foreground pair. A minimal input observer reproduces the historical24,610-pixel difference despite four exact source PNGs and matching post-capture native RGBA across6,291,904pixels per cohort. Input reads leave the foreground unchanged;this does not prove image representation at the original draw instant or hardware raster cause. Bounds lie inside viewport/recorded clip rectangles;full UI occlusion is not proved. No public renderer correction or source admission is activated. Seven exact redundant artifacts were retired,reclaiming5,066,412bytes while preserving all observations,failures and the shared native witness. Keep the preferred native alpha-domain PNG,all originals,both hamlets,geography,saves and all5,640pending qualifications. Attribution evidence.

<!-- native-arctic-canvas-study-20261105 -->

The original limestone source3298now has a preferred private native-canvas representation study,with no public activation. Eight normal desktop/portrait-phone Region/Hex views have six exact lifecycle maps and two exact foreground pairs. All1,573,312decoded source pixels remain exact;independent current HTML/native-canvas replays match both actual viewports across4,168,400foreground pixels. The original-path desktop counterexample and older phone hash remain unresolved history;the latter is not reconstructed. The one-backing-per-page private helper does not qualify production cache replacement,permission changes,pressure,full cost,other roles or physical devices. Keep the native alpha-domain study9281separate until combined testing. Two source-bound findings add no artist asset,admission or complete approval;all5,640pending qualifications remain. Five exact redundant artifacts were retired,reclaiming2,479,571bytes. Private representation evidence.

<!-- native-arctic-owned-lifecycle-20261105 -->

The preserved limestone source3298now has a bounded preferred private owner tied to actual client LRU/approval checks. An80-check real-image fixture and16normal desktop/portrait-phone Region/Hex views retain native pixels,12regular lifecycle comparisons and8earlier-reference foregrounds exactly. Four real LRU trims reload a different image object;four revocations andfour fingerprint mismatches suppress the source,including path-allowed/hash-denied cases. All12restored foreground comparisons are exact. Native backing is reserved before allocation and included in the unchanged256MiBhost source pixel-cache model;one backing is at most6,293,248declared bytes. Lower memory tiers,total process/GPU memory,full cost/state scope,clean production integration and combined9281testing remain open. The harness is private native preparation,not an unmodified production performance benchmark. Six exact redundant files were retired,reclaiming9,591,558bytes while all16native crop witnesses remain exact through shared references. Two individual findings change no artist bytes,source contracts,geography,saves or player controls. Owned lifecycle evidence.

<!-- native-arctic-memory-qualification-20261105 -->

The arctic native-owner study now has actual128MiBclient-tier evidence. Across36observed normal views and23exact regular lifecycle maps,the desktop actual-LRU path changes25,098visible pixels across all three complete boulder rectangles over unchanged terrain. Raw foreground difference is25,434pixels;the four PNG/native-decoder pairs,six image draws and full-number transform/save/restore program match. Native source materialization and explicit-false context variants reproduce the failure;the frequent-read context is stable through12restorations but changes earlier foreground references and remains unselected. Most source interiors have partial alpha,so zero exact-alpha255changes is not an edge-only or interior-fidelity proof. Three individual source findings preserve all artwork,approvals,source contracts and pending gates. No renderer activation,geography/save change or playable control is added. Memory/visible-raster review.

<!-- native-cpu-and-tundra-20261105 -->

A nonrepeating Ice Bastion tundra study now preserves the original ruined wall,banner and immediate contact exactly across84,240native pixels while replacing recurring terrain bands. The full1536×1024original and preferred study are retained separately. Finite domain,parent/ruin-state,normal-context,contact and full performance/lifecycle qualification remain open. Three renderer experiments add24normal observations/18exact regular lifecycle maps:the bitmap route still fails desktop LRU;direct-original CPU differs from its phone replay;native-copy CPU passes independent desktop/phone references,12policy restorations and4complete visible-map/boulder comparisons. A24-case readback-free context-cost comparison remains scoped and excludes the preferred fine-ground/alpha9281combination. No public renderer,source admission,gameplay,save or geography change is made. Individual findings.

<!-- native-ground-family-20261105 -->

The Ice Bastion family now has a separate preferred native quiet-ground study,with unequal geology and fine tundra detail. Original parent,wall-detail and quiet-ground paintings remain preserved. A role audit shows that the legacy parent repeats wall-detail slots twice and ground slots six times,and its central crop excludes most of a complete landscape. Neither the parent nor companions have an active normal-world source contract. A parent alpha trial preserves every original RGB pixel but is rejected for a geometric terrain collar and opaque plate. In the separate combined arctic test,eight normal views/six exact lifecycles and exact Hex policy comparisons coexist with a missing desktop Region glyph landmark. This visual regression keeps the combined pipeline unaccepted;Region actual-body contribution and full combined memory/performance need explicit checks. No source admission,public renderer,gameplay,save or geography change is made. Individual family/context findings.

<!-- native-ground-family-region-followup-20261105 -->

Four further read-only Region observations and four exact pan/reconnect maps show the glyph present in this follow-up on desktop and phone. The normal painter receives a ready510×340display canvas in all four cases;both desktop native originals have already left the native LRU while the retained display still appears. Native-record absence alone therefore does not explain the earlier missing glyph. No forced loading,painting,placement or world-state change was introduced. The earlier native counterexample remains retained and the combined rendering is still unaccepted. The diagnostic raw completion flag remains false because an inherited eight-view predicate was not adapted to its four-view Region-only plan;observed coverage is independently counted. Follow-up evidence art-direction/display-cache-history-20261104/arctic-region-body-20261105/analysis.json.

<!-- native-matte-contribution-20261105 -->

A separate preferred Ice Bastion ruin matte now retains all 1,572,516 original RGB pixels at 1254×1254; only alpha changes. The complete original painting remains preserved. The selected silhouette retains roof, walls, blue flag, courtyard and irregular immediate ground contact. It still needs a precise finite tundra ruin/state hierarchy, scale, matching terrain, normal Region/Hex context, lifecycle and performance qualification. No working fortress, ownership or defensive action is inferred. Four private normal Region cases also measure actual arctic glyph contribution by omitting only its existing paint call and restoring it: visible pixels change within the complete projected source bounds and every full map restores exactly. Four pan/reconnect maps remain exact. These positive cases do not resolve the earlier missing desktop glyph counterexample or accept combined rendering. No production source admission, renderer, gameplay, save or geography changes. Individual findings.

Before publication, a full component audit removes 1,558 disconnected alpha-1-only specks; all 141,129 connected ruin/contact pixels and every original RGB value remain exact. The resulting alpha bounds are [314,412,915,832], rather than a nearly full-image speck domain.

<!-- ice-bastion-canonical-context-20261105 -->

The preferred native ruin matte is being qualified as a single finite existing-state canonical ruin on tundra. A complete unchanged-world scan finds three tundra and 55 arctic ruins; the proposed family contract remains tundra-only. The complete private pool of 40 canonical sources, including the proposed contract, naturally selects the candidate at tundra ruin 2035674 beside a village. The first retained site 2027561 instead selects the existing cold round wall and remains a negative selection witness. Full-source width 260 and anchor [0.49,0.65] yield about 124.8 world units of visible ruin, comparable to existing ruin portraits without source cropping. Four private normal desktop/phone Region/Hex views now retain the complete native ruin. Region uses a 512-square prepared image and fails native isolated replay; Hex uses the full 1254-square source and both isolated replays match exactly. These source replays are not final-pixel attribution. The contract and scale remain private proposals; Region fidelity and complete family/contact/hierarchy/occlusion, lifecycle and full budget qualification remain open. There is no playable fortress, ownership or defensive action, and no public permission, renderer, geography or save change. Canonical context qualification.

<!-- canonical-native-region-fidelity-20261105 -->

The proposed native tundra ruin remains a private existing-state contract, with no production source admission or renderer change. The preferred private canonical-place preparation retains the exact decoded native HTML image in the existing 32 MiB display cache; it performs no intermediate canvas copy, source resize or repaint. Eight whole-map comparisons at the same current initial/mode-return/pan-return/reconnect pose match direct original-native rendering exactly, while the published 512-pixel control differs in all eight. Actual native-cache pressure retains exact maps after 35 desktop/54 phone evictions and removal of the original target record; selected-paint omission/restoration and display rebuild also match. Native-sized CPU canvas copying failed its first isolated replay and is unselected. Raw initial-versus-return frame differences remain separately unresolved, including a changed phone pan camera transform. A complete 2,252,800-cell selector scan covers all 39 published canonical sources plus the private ruin across 114 declared profile/feature contracts:110 have natural sites and 4 require alternate-seed coverage. The generic change requires that broader regression and separate readback-free cost, travel/complete memory and device qualification before activation. Companion wall/quiet-ground studies receive no parent-only approval. Methods and retained evidence.

<!-- canonical-native-regression-20261105 -->

Direct original-native canonical-place preparation completes ten distinct source view sets: 40 normal desktop/phone Region/Hex views, 40 exact isolated native source replays and 80 exact same-current-state complete-map native-reference/restoration pairs. All four earlier holder readiness failures now complete this direct run at the unchanged 128 MiB phone / 256 MiB desktop native budgets and 32 MiB raster display budget. The generic holder remains rejected. Raw initial-return maps are separate: 21 of 60 are exact; the other differences and their pose records remain unresolved. The production selector has 39 sources and 113 profile/feature contracts; the private candidate pool has 40 sources and 114 contracts. Exact descriptors, permissions and original bytes match for every existing source, and 80 of 81 choice vectors agree. The sole changed pair is tundra/ruins: production naturally selects the original cold arch at cell 2035674, where the private pool selects the proposed Ice Bastion matte. Fresh read-only probes of all 509 retained cells preserve each engine snapshot and find 110 eligible production contexts, three production-pool absences and no other blockers. The private pool retains four absences. No canonical place is invented or forced. Full remaining context, contact/occlusion, raw lifecycle, complete memory/performance and device checks remain required; no public activation, source admission or artist change follows. Current evidence and complete scope.

<!-- canonical-village-native-cache-20261105 -->

The broader native-holder prototype is not accepted as the generic preparation policy. A real fields-village phone scene at the 128 MiB native / 32 MiB display budgets remains in loading-region after 13,991 native evictions, even though the original image itself paints at native size. Controls at the exact same site, pose, budgets and source bytes both settle: published reduced preparation records 19 evictions, while direct original-native preparation records 24. The latter keeps the full 1536×1024 input without charging a retained native holder against the raster display working set. This supports testing direct native preparation next; it does not establish whole-renderer performance or resolve every eviction cause. No production renderer change, budget increase, artist edit or source admission follows. Counterexample and source-bound controls art-direction/canonical-native-regression-20261105/village-cache-controls/analysis.json.

<!-- canonical-production-native-qualification-20261105 -->

Eleven unchanged original canonical-place assets now have thirteen normal contexts through the exact production pool of 39 sources and 322 permissions. Ten contexts use the default world; the three otherwise absent tundra floating-stone, gabled-town and drumkeep contexts occur naturally in one fresh disposable GONZ-CONTINENTS-04 world. All 52 desktop/phone Region/Hex views and isolated native source replays retain full native detail; 104 same-current-state complete-map native-reference/restoration pairs are exact. Of 78 raw return maps, 31 are exact; all remaining differences and pose records remain open. This actual-pool evidence covers 13 of the 113 production contracts; 100 remain. The earlier private-pool first-ten maps are not counted as public-pool maps, and all 114 private declarations remain explicit. Nearby settlements, vegetation, shore/snow contacts, foundation extent and UI state remain composition gates. No artist byte, public renderer, source permission, geography, save or player rule changes. Individual qualification and remaining scope.

<!-- canonical-native-followup-20261105 -->

Original-native contract continuation, November 5

The next ten actual-production-pool contracts and one separately scoped private alternate cold arch now have authored exact-hash native-context findings. The ten production contexts extend actual-pool fidelity coverage to 23 of 113 contracts; the remaining 90 default-world contracts are in a bounded sequential disposable-world run. Keep the private 40-source/114-contract plan separate from the production 39-source/113-contract pool. All 44 terminal views and 88 same-current-state reference/restoration pairs preserve native detail; 26 of 66 raw return maps are exact, and every remaining lifecycle/composition/performance gate stays open. These findings add no artwork approval, gameplay, source admission or public renderer activation. See the followup review.

<!-- canonical-lifecycle-settled-analysis-20261105 -->

The completed 34 native-source context sets now have an additional raw-versus-stable return analysis. Of 204 raw returns, 78 match, 27 mismatches later recover the exact stable initial PNG, 34 stable differences accompany a recorded pose/interaction change and 65 remain different at the same recorded visual pose. Every original raw finding remains intact. In the latter 65, captured scalar scene-cache state changes only in revision counters; the changed-pixel cause is still unproven. The direct-native reference toggle shares the original image path, so current-state parity must remain separate from final source attribution and initial-return equality. Diagnose same-state source/background/overlay contributions before choosing a fix; preserve native artwork and the complete production/private contract scope. Exact lifecycle classifications.

<!-- keep-rubble-native-matte-20261105 -->

The original low ruined-wall painting WOG-A-001710 now has a finite alpha study that preserves every1254square native RGB sample and the complete protected masonry/ruin region. Shared world ground is intended to supply the surrounding background;the site must be drawn once instead of repeating the painted ruin across terrain. Original and accepted historical lossy comparison WOG-A-005349 remain intact. The new WOG-A-009285 candidate is unapproved and unadmitted,with mountain/hills/grasslands parent intentions used only as proposed context scope. Normal role,scale,anchor,contact,edge,neighbor/UI,state,lifecycle,cost and live gates remain pending;the static browser proof adds no normal world frame or player behavior. Preferred study and exact preservation.

<!-- keep-lodge-native-matte-20261105 -->

The original keep service-lodge painting now has a separate finite alpha study,WOG-A-009286,that preserves every native RGB sample and the complete walled site. It removes the wide repeating outer landscape;shared world ground supplies the background. The site is unadmitted scenery with no new guardhouse,garrison,ownership or defensive behavior. Normal profile,scale,contact,neighbor/UI,state,lifecycle and performance qualification remain pending. See study evidence.

A prospective in-memory delivery check for the ruined-wall and lodge studies clears only RGB hidden under alpha zero. Both normal HTML image and ImageBitmap browser paths remain exact across every native pixel. This could reduce encoded transfer bytes while keeping artist files unchanged; decoded memory and all normal world/contact/lifecycle/performance gates remain open. See native alpha delivery evidence.

<!-- woodland-edge-native-matte-20261105 -->

The woodland-edge companion painting now has a separate finite three-tree/rock alpha study, WOG-A-009287. It preserves every original native RGB sample while hiding the repeated outer field. The complete original and historical derivative remain intact. Forest, hills and grasslands are proposed parent context scope only; normal contact, shadow, source/profile scale, neighbor/UI, state, lifecycle and performance gates remain open. It creates no harvestable forest or new vegetation/player behavior. See study evidence.

This Atlas update also corrects two inherited lodge classification labels to identify a finite keep service lodge. Artist bytes, gameplay rules, placement permissions and readiness gates are unchanged. Correction evidence art-direction/woodland-edge-native-matte-20261105/lodge-classification-refinement.json.