Gate radio intel behind configurable site discovery; record Workshop 0.0.119

docs/admin-discovery-setting.md

@@ -21,3 +21,32 @@ Chat delegates the reveal alias to Core instead of defining a duplicate. Its `in
 `ERR_NativeAdminSettingsProbe.Run(ERR_GameMode mode)` is an opt-in WORKBENCH test awaiting central native execution. It checks actual authorized read/help dispatch and unauthorized/invalid mutation rejection. Valid changes exercise the same production setting-command handler with a separate `ERR_Settings` instance at `$profile:erri-native-admin-settings-probe.json`; they never mutate the active mission's settings. The fixture rejects already-existing fixture files, verifies native save/reload and unrelated values, then removes only its own fixture primary, backup and temporary files.
 
 A policy pass does not prove native script compilation, remote RPC ownership or readable chat presentation. Run the native probe inside Core-only and companion regression fixtures, then retain real-client administration in multiplayer acceptance.
+
+## Radio intel progression
+
+**Intel → Radio intel** configures `radioIntelSiteCount` (0–20, default 5).
+Use `/esc intel radiosites show|set N|help` from the same authenticated command
+path. Zero disables the requirement. The discovery service snapshots the saved
+value at round initialization; edits affect the next round. Older settings files
+receive the default without changing their other values.
+
+Only distinct, prepared, fully identified (`Knowledge() == 2`) non-radio sites
+count. Prison, extraction and sites marked `RevealOnEscape` are excluded. Rough
+clues and anonymous question marks do not contribute. After all background site
+preparation finishes, the effective requirement is capped at the available
+eligible site count. Once unlocked, radio intel stays unlocked for that round.
+The submenu shows this round's progress separately from the saved requirement.
+
+Ordinary document assignment and recovery exclude radios while locked. An issued
+ordinary folder already targeting a radio redirects to another unfinished site;
+its issued evidence identity is updated, but already queued or delivered enemy
+reports keep their copied contents. With no alternative, the folder remains
+unspent. Fixed objective documents keep their radio targets and are automatically
+read from player inventory after unlocking. A team notice explains the wait once
+per round. Normal exhaustion/cleanup behavior resumes after unlock.
+
+The gate applies only to document targeting. Physical observation, map question
+marks, radio interaction and radio defence retain their existing rules.
+
+Validation: `tests/test_radio_intel.py`, settings/menu/feedback regressions and
+[the isolated native mission evidence](evidence/radio-intel-2026-10-21/README.md).