jcreek/CosmicClash
1
0
Fork 0
mirror of https://github.com/jcreek/CosmicClash.git synced 2026-09-13 21:12:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: add workload-authenticated result API

Browse Source
This commit is contained in:
Josh Creek
2026-09-01 10:01:04 +01:00
parent a70a0ebc74
commit eebab1bc19
6 changed files with 150 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
multiplayer-next.md
+3 -1
View File
@@ -93,7 +93,9 @@ product policy are in [`docs/MATCHMAKING.md`](docs/MATCHMAKING.md).
inert/alerting. Pure Go credential-claim validation, binding, hashing,
reconciliation, and the atomic receipt/completion/outbox SQL boundary exist;
projected-token/JWT adapters, trusted-cluster verification, rating-lock
integration, and production alerting remain. A dependency-free projected JWT
integration, and production alerting remain. The API now exposes the
workload-authenticated server result route and delegates completion to the
durable receipt/outbox adapter. A dependency-free projected JWT
adapter now verifies the compact-token signature through an injected trust
boundary and delegates exact claim/time binding to the domain policy.
- [x] Complete the threat model for forgery, replay, queue/flood/bot abuse,