Dev diary
Dev diary: why server authority is non-negotiable
We never trust the client. Damage, results, prices and permissions are always computed on the server.
In a competitive game, fairness starts with where the rules are enforced.
The principle
The game client only sends intent: "walk here", "use this ability". The server computes the outcome. Damage, gold, match results and store prices are never accepted from the client.
Why it matters
- It changes the economics of cheating: changing the client does not change the outcome.
- We fix bugs in one place.
- Replays and reports rest on a single truth.
Work that leaves a security hole is not done.
In the next diary we will walk through the signed patch manifest.
