Repository navigation
Conversation
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
A game-owned integrity check is needed so replacing Gua DLLs with a legitimate remote-enabled build cannot restore remote control in a normal game. This Draft starts with Windows x64 .NET policy compiled into the game assembly, checks expected native/managed files before native load, pins handles, and selects prebuilt off/testing/player modes without consumer CMake builds.
This is the Windows .NET foundation, not complete Unity/Godot/Web or package-distribution migration. It does not change public publication, overwrite v1.2.0, or claim release readiness. Implementation logic, trust and load boundaries, contract-to-test mapping, local evidence and remaining scope are in docs/game-owned-remote-integrity.md.
Validated locally: OFF local APIs; ON real WebSocket actions; Player bounds; OFF-to-ON native pair plus manifest rejected before load; deliberately early native load detected; automatic mode selection; OFF game IL without a remote-start reference; native environment overrides cannot replace pinned handles; full official v1.2.0 managed/native DLL set rejected before native load. Native local inputs are prior PR186 artifacts, not new-HEAD native evidence. Old official packages are reproduction inputs, not recommendations.
First focused read-only audit found trailing-separator handling and missing independent no-load observation; both were fixed, rerun and mutation-checked. Final focused audit and commit-specific CI remain pending.