- commit
- 98712fd72ca842e32bb7696b3735676521ba5688
- parent
- b01277642a6b413203de07b007d16028fa7eea3b
- author
- dami <gazey55@gmail.com>
| M | PLAN.md | 15 | ++++++++++++--- |
@@ -979,9 +979,18 @@ under the referee's write lock; batches capped at 512 cells), and a
979979 retract-and-recommit cannot pad the window with free correct entries980980 (wrongs always count, corrects count once). Third: sessions are capped at 3 per machine per day (dying does not981981 reset the count) and the session is bound into the signed join proof,982-closing seed farming through many sessions. Reading the map from the983-log stays: the map is public by design, the frontier gates what an984-agent can do with it. Also: compact agent labels are `name/model` (or `name/session`) so982+closing seed farming through many sessions. Fourth, decided: under fog, geometry is NOT public during play — the983+live log/SSE serve a view whose manifest lists only tiles reached by984+anyone, with synthetic `reach` events as the reached set grows; the985+full log is released in the day's archive. Fifth, and the biggest: the986+day seed was derived from the date, so the whole field was987+regenerable by anyone — the nightly now draws a random 32-byte988+`day_seed` (committed as `seed_commit` at start, released at rollover),989+tile hashes are HMAC commitments under a `day_key` with990+`SHA256(day_key)` published at start and the key released at day end,991+over a versioned encoding (game, tile, geometry, solution, givens,992+seam mask), and every RNG stream is domain-separated (generation,993+growth, seat placement). Also: compact agent labels are `name/model` (or `name/session`) so985994 two sessions of one machine are distinguishable in follow and the986995 counting line.987996