EscapistsReintroduced/docs/ground-depot-loading.md

# Finite camp ammunition and mine loading

The successor can assign an available original camp responder to carry one existing magazine or inert original PMN4 from that camp's cache to a nearby original ammunition truck. This is opportunistic access to existing outposts; no warehouse, porter, vehicle or ammunition is created for the job. RHS, WCS and BMP dependencies remain enabled.

Only exact magazine and authored PMN4 identities retained during successful outpost startup qualify. Escape-opening supply sites, objective-target stock and later cache deposits are excluded. The mission controller retains at most 96 source identities across at most 64 sites and starts at most 96 jobs, one at a time. Existing tactical, infantry, mounted, mine and mortar work gets priority.

An idle truck needs recorded expenditure from the matching finite allowance before it can request a camp item. The demand measure is a conservative count of committed, still-identifiable magazine identities beyond prior depot imports; it does not assert that ammunition was fired or that the live truck is empty. Mine expenditure cannot create magazine demand; magazine expenditure cannot create mine demand. Missing/unknown identities create neither. Imported magazines append to the existing shared truck allowance, whose lifetime 96-identity limit includes spent and lost entries. Arbitrary later truck deposits remain excluded.

HQ uses a fresh delivered truck report to select an authored camp within 150 metres. It sends a radio hold, verifies the truck has physically stopped, requests a new status and waits for its delivery before sending the original porter a separate radio order. That new reported position determines the destination. Local physical checks validate execution without silently updating HQ's contact knowledge.

The porter walks to the cache, picks up one unused compatible magazine or inert PMN4 through the native inventory API, walks to the reported truck position, delivers the same item and returns to the cache. Each leg has its own callback and exact storage proof. Native action anchors, three-metre access, line of sight, inventory capacity, original identities and unchanged ammunition count or inert mine state gate the move. There is no teleport, refill or automatic native-operation retry. Successful return requires cache proximity and at least six metres of truck separation; exceptional cancellation or deadline expiry does not promise that clearance.

The job holds the entire existing convoy column while loading. Its fixed deadline is at most 180 seconds, further bounded by the original report age. An uncertain submitted move retains the original group and truck claims after failure or Stop until callback/custody proof or deletion resolves it. Late proof permits cleanup only; it cannot resume the job or import ammunition after cancellation. All claims use exact tokens and retained original objects.

The initial four regression programs execute actual controller, lifecycle, transfer and provenance methods with native boundaries doubled. Independent review reproduced and fixed cancellation during an inline callback, and mutation checks reject removal of original-identity and unused-magazine guards. The successful 95-to-96 import can still complete its return because admission limits are separate from ongoing ownership checks.

## Validation and remaining work

At the 2 October magazine-only checkpoint, the full **277-program regression suite passed** before native compilation. The first native run exposed getter formatting and a helper-name conflict; its [failed evidence](evidence/native-2026-10-02-ground-depot-compile/report.json) is retained. After those behavior-preserving corrections, all four relevant programs passed again. The [corrected hidden/muted normal route](evidence/native-2026-10-02-ground-depot-integration/report.json) completes **63 assertions and one round**, with zero script/runtime failures and thirteen retained installed-resource errors. Cleanup and unchanged source/external inputs are confirmed. This qualifies compilation and normal-loop integration only. [Independent review, mutation evidence and preservation](evidence/ground-depot-loading-2026-10-02/review.json).

Physical navigation, actual cache/vehicle action-anchor reach, a successful autonomous two-leg native delivery and multiplayer inventory callbacks still need direct qualification. Available camps may be exhausted, busy, too far away or inaccessible. This does not complete the original extension's logistics feature set. Human escape, real multiplayer, comparative FPS and clean release qualification also remain unfinished.

## Compatible original porter selection — 3 October 2026

The loader pairs each eligible original cache magazine with the first compatible, fit original responder. A responder with an incompatible rifle no longer hides a later compatible member of the same original group. Selection also applies the same enemy-equipment eligibility used during execution, before claiming the truck or sending its radio hold.

The search keeps the existing 96-item and 32-original-member limits per camp/truck pair. Original attribution, availability and native AI utility remain required. No qualifying pair means no new job, item reservation, command or attempt; attribution checks can still record lost original slots. This changes selection only: fixed deadlines, finite stock, physical access and both native inventory-transfer legs retain their existing rules. Compatibility does not prove capacity, successful walking or physical delivery. The larger bounded search has not been benchmarked, and its per-pair limit is not a full planning-pass budget.

All **300 registered regression programs pass**. Actual-method tests reproduce the old mixed-roster failure and preserve the existing cancellation and finite-delivery checks. One hidden/muted normal Everon run compiles and completes **63 assertions and one round**, with **0 script/runtime failures and 13 retained engine-error entries**. Cleanup and unchanged source/external inputs are confirmed. This does not prove native autonomous delivery or clean release. [Implementation and evidence](evidence/depot-porter-pair-2026-10-03/review.json).

## Finite camp PMN4 delivery — 3 October 2026

Each of the five authored nonopening Everon outposts starts with two vanilla PMN4s, ten total. Startup creates those exact items once and remembers them separately from magazines. Later deposits, opening-cache items and targeted documents are excluded. The courier still captures at most 96 original sources and consumes at most 96 attempts, one job at a time; this is not a refill loop or new warehouse/staff system.

Mine demand counts only still-identifiable committed mine identities from the truck's original bound allowance and previous proved imports, beyond its separate mine import count. Magazine demand stays separate. A truck with no original mine allowance cannot bootstrap one; unknown/deleted items do not establish a new shortage. The mine allowance has a lifetime 96-identity cap and shares the existing 96-spent ceiling with magazines. These are conservative identity limits, not promises of available cargo or actual ammunition use.

A mine needs an eligible original porter but no matching rifle. Both native transfer legs pin the same item and cargo class. Inert readiness is rechecked before and after submission and at import, alongside exact storage/callback proof. Arming, changed ownership, cancellation or late proof cannot admit new stock. An unresolved submitted move keeps the existing claims until custody or deletion settles; cleanup never retries or refunds it. Imported mines flow through the existing truck-to-engineer rules and cannot grant new engineers or reopen consumed posts.

All **301 registered regression programs pass**. One hidden/muted normal Everon run completes **64 assertions and one round**, with **0 script/runtime failures and 13 retained engine-error entries**. The added read-only stock witness confirms **ten distinct original inert PMN4s stored in five camp caches**. Cleanup and unchanged source/external inputs are confirmed. Autonomous porter travel and native mine delivery, mine placement/arming, real multiplayer and comparative FPS remain unqualified. Existing missions, the index and packages are preserved; the ground-supply package predates this feature. The intermittent zero-radius issue remains unresolved. [Implementation, negative controls and native evidence](evidence/depot-mines-2026-10-03/review.json).