John SmithandClaude 18239bf7b5 feat(wave15): zero-trust hardening, real WFC, write-through Postgres, RBAC, Yjs default ...

Phase 1-5 remediation + four-gap closure:
- Authoritative engine: ids-only combat payloads (deny_unknown_fields),
  server-side stat blocks, ActionBudget consumption, cover->AC, LoS gating,
  difficult-terrain Dijkstra, HMAC auth middleware + strict CORS
- Honest metrics: live-engine synthetic playtest with trust-boundary probes,
  MCR = valid/(valid+rejected), benchmark script boots its own engine
- Mechanics: condition lifecycle timers, spell slot economy w/ damage caps,
  topological ModifierSource graph, reaction stack (Shield/Counterspell/OA),
  X-card full ledger replay restoration
- Persistence: sqlx write-through tailer to event_sourcing_log,
  snapshot persist/hydrate bridge, recursive CTE inventory functions
- vtt-wfc: dead solver activated (reseed-retry contradictions, flood-fill
  single-region guarantee, deterministic dressing); fixed template removed
- RBAC: role claims in gateway tokens, identity propagation, entity
  ownership, spectator/owner enforcement, fog layer ownership at WS
- Client: PixiJS v8 board layer, physics dice with server-predetermined
  faces, Silero VAD, HRTF PannerNode chain, Y.Doc CRDT default transport
  with HMAC-authenticated ysync relay and LWW fallback

Co-Authored-By: Claude <[email protected]>

2026-08-23 22:41:53 -04:00

..

assets

feat(wave15): zero-trust hardening, real WFC, write-through Postgres, RBAC, Yjs default

2026-08-23 22:41:53 -04:00

dice-box/assets

feat(wave15): zero-trust hardening, real WFC, write-through Postgres, RBAC, Yjs default

2026-08-23 22:41:53 -04:00

llms.txt

feat(wave13): UI/UX hardening — code splitting, dice history, a11y & honest ambience

2026-08-23 15:16:15 -04:00

robots.txt

feat(wave13): UI/UX hardening — code splitting, dice history, a11y & honest ambience

2026-08-23 15:16:15 -04:00