jcreek/CosmicClash
1
0
Fork 0
mirror of https://github.com/jcreek/CosmicClash.git synced 2026-09-11 17:03:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs: complete multiplayer threat model

Browse Source
This commit is contained in:
Josh Creek
2026-08-31 20:58:11 +01:00
parent 217ae263cd
commit bbabd259b6
4 changed files with 63 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
multiplayer-next.md
+3 -2
View File
@@ -53,8 +53,9 @@ product policy are in [`docs/MATCHMAKING.md`](docs/MATCHMAKING.md).
identity; make identical duplicates idempotent and conflicting results
inert/alerting. Pure Go binding, hashing, reconciliation, and SQL boundaries exist;
production credential validation remains.
- [ ] Complete the threat model for forgery, replay, queue/flood/bot abuse,
workload/insider compromise, DDoS, supply chain and denial-of-wallet.
- [x] Complete the threat model for forgery, replay, queue/flood/bot abuse,
workload/insider compromise, DDoS, supply chain and denial-of-wallet
([THREAT-MODEL.md](docs/THREAT-MODEL.md)).
- [ ] Enforce restricted workloads/RBAC/networks/private stores/backups/secrets;
isolate SDR signing behind an audited non-exportable signer and add
volumetric edge defense, WebSocket limits and overload shedding.