Skip to content

Network limitations

The current network surface has these boundaries:

  • The CLI relay is intentionally unauthenticated. Relay-assigned peer IDs are connection-scoped and are not durable authenticated identities.
  • MessageCodec encryption is reserved and unwired. The standalone E2EEncryption helper is not integrated into general sync, peer, or authoritative-server paths. Do not describe ordinary relay traffic as end-to-end encrypted.
  • TURN authentication and a production identity/access-control service are deployment requirements, not supplied guarantees.
  • Peer CRDT sync means each peer receives the state needed by its document; confidentiality and hidden-information requirements need a separate design.
  • Reconnect buffering is bounded and in-memory. It is not a durable offline outbox.
  • The authoritative server centralizes dispatch and outbound projection, but the repository makes no blanket claim of cheat prevention. Game-specific rules, validation, and operational controls remain necessary.