The shared physical ground-drop helper can merge a recovered tool into another player's pile. This violates per-player conservation while global material quantity stays constant.
Reproduced through public scenario and dismiss commands on source cc702ac: player1 geologist at40,50 carries his actual hammer on player2 territory, where an ordinary scenario pile of3hammers belongs to player2. Initial audit is clean. Player1 dismisses the idle geologist. The command succeeds, player2's pile becomes4, and player1 has no hammer. Audit reports player1 missing1hammer and player2 possessing1unexpected hammer. No world edits or manufactured ledger changes were used.
dropToGround currently tests matching good and capacity without requiring matching owner. Repair that owning helper, not the caller or UI. Version the corrected merge policy so earlier saves/replays retain their exact rules. Same-owner merging should remain supported; foreign piles should keep their original quantity and ownership, with the dropped good placed separately through normal physical ground placement.
Acceptance: public-command foreign-pile regression, same-owner merging control, restored state and conservation, and source lint/types/tests/build/browser checks. The shared correction must also protect the real construction-tool recovery in #204, without grants or transferring another player's stock. No original Gold or native-presentation claim.
Refs #31, #42, #204 and #4. Current published profile0.11 remains frozen; the new engineering profile will make corrected ownership explicit.