Server authentication

Verified context

The server accepts a short-lived signed context from platform-api. Player ID, account state and expiry are checked before any mutation.

Untrusted data

Browser JSON `playerId` fields are never trusted. Banned and unknown accounts receive an explicit denial instead of an anonymous fallback.