The moment a booking covers more than one room, most systems start leaking. The deposit sits against one of the rooms. The dates drift apart. Nobody is sure which of the three reservations is the "real" one when the guest calls to change something.
In Vestibel a reservation holds many rooms, each with its own nights and its own rate, and the whole thing settles onto one folio. Capacity is checked as a sum across the rooms selected, not room by room: four guests in two doubles is fine, five is not. Checking each leg in isolation would refuse a booking the property can genuinely take.
The deposit is a ledger, not a column. It is received against the reservation, then transferred onto the stay folio at check-in — a movement, not revenue. Only a forfeited deposit is revenue, and it posts as a real charge so the night audit can see it.
A per-leg occupancy override exists for extra beds and joined rooms, and it may only raise capacity, never lower it below what the room genuinely sleeps.