Collection viewport hydration now uses authenticated Cardmarket-only refreshes. It may read cached slab or blended values, but only a selected detail starts eBay research. This closes a quota leak where simply displaying holdings sent live=1. The public HTTP client regression first failed with cm expected and 1 received, then passed after the request-policy change.

Mobile PR: https://github.com/snag-tcg/poc-tcg-collector/pull/817

Lint reported zero problems; typecheck passed; 2,905 Jest tests passed and 11 were skipped. Seven paired client/API HTTP tests passed with PGlite and controlled upstream DTOs, including zero CompSniper calls from collection hydration. Native UI E2E was not run because no emulator was available.

Read-only production audit at 2026-10-21 15:44 UTC: 87 TCGgo and 30 CompSniper reservations over the last 24 hours, none in the previous 15 minutes. Ten passive ETB 151 reads returned 399 EUR with the original acquisition time; two unauthenticated live requests were rejected with HTTP 401. Provider ledgers were identical before and after all twelve requests. These observations demonstrate cache reuse, not a promise that cold detail searches are free.

Runtime caps: TCGgo 3,000 per rolling 24 hours, 25 per minute, worker 200 included in the total; CompSniper 200 per 24 hours, 10 per minute, conservative long ledger 8,000. Reservations are shared and atomic. Polling reads stored results; the TCGgo worker cannot enqueue CompSniper research.