jcreek/CosmicClash
1
0
Fork 0
mirror of https://github.com/jcreek/CosmicClash.git synced 2026-09-11 08:23:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: validate workload-bound result credentials

Browse Source
This commit is contained in:
Josh Creek
2026-08-31 21:20:12 +01:00
parent 8d1b407bb0
commit 79e66c7a95
7 changed files with 149 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
multiplayer-next.md
+3 -2
View File
@@ -51,8 +51,9 @@ product policy are in [`docs/MATCHMAKING.md`](docs/MATCHMAKING.md).
reconnect policies exist; production Steam/backend adapters remain.
- [ ] **IN PROGRESS:** Authenticate results with pod/GameServer-bound workload
identity; make identical duplicates idempotent and conflicting results
inert/alerting. Pure Go binding, hashing, reconciliation, and SQL boundaries exist;
production credential validation remains.
inert/alerting. Pure Go credential-claim validation, binding, hashing,
reconciliation, and SQL boundaries exist; projected-token/JWT adapters,
trusted-cluster verification, and production alerting remain.
- [x] Complete the threat model for forgery, replay, queue/flood/bot abuse,
workload/insider compromise, DDoS, supply chain and denial-of-wallet
([THREAT-MODEL.md](docs/THREAT-MODEL.md)).