jcreek/CosmicClash
1
0
Fork 0
mirror of https://github.com/jcreek/CosmicClash.git synced 2026-09-13 21:02:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(multiplayer): submit allocated match results

Browse Source
This commit is contained in:
Josh Creek
2026-09-03 21:24:07 +01:00
parent 759dbe2b65
commit 8507472635
7 changed files with 169 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/THREAT-MODEL.md
+6 -4
View File
@@ -26,11 +26,13 @@ individual pod.
allocation state or exemptions.
- Game servers are authoritative for simulation but are not trusted for
identity, allocation ownership, or unrestricted result submission.
- PostgreSQL is the durable authority. Redis, Agones annotations and local
spool files are recoverable transport/cache state.
- PostgreSQL is the durable authority. Redis and Agones annotations are
recoverable transport/cache state.
- The offline SDR CA and online leaf signer are separate; API, matcher,
allocator and game-server workloads cannot read signer keys.
Every accepted residual risk above has an owner and a planned detection path.
Security incidents fail closed for identity/result ownership and degrade open
only for recoverable result delivery, where the signed spool is reconciled.
Security incidents fail closed for identity/result ownership. An allocated
server remains in its results state and retries its idempotent result request
until the control plane durably acknowledges it; it does not exit first and
silently lose the authoritative outcome.