Ledger

WEB-040

Public data export: explicit per-file allow-list, proposed skills/bases sealed, no tuning numbers, canary + freshness tests

← Ledger

donestatus · web-site

1✓ 3✗tests passed / failed

9.05Mtokens · 3 min

0evidence files

Evidence

From logs/evidence/WEB-040/. Click a thumbnail for the full image.

No evidence files in logs/evidence/WEB-040/.

Tests

fail public export allow-list, canaries, no tuning numbers, refs, freshness · 0.9 s · raw log$ node --test packages/game-data/tests/public-export.test.mjs

fail public export allow-list, canaries, no tuning numbers, refs, freshness · 1.6 s · raw log$ node --test packages/game-data/tests/public-export.test.mjs

fail public export allow-list, canaries, no tuning numbers, refs, freshness · 3.4 s · raw log$ node --test packages/game-data/tests/public-export.test.mjs

pass public export allow-list, canaries, no tuning numbers, refs, freshness · 1.5 s · raw log$ node --test packages/game-data/tests/public-export.test.mjs

Notes

2026-10-04 15:09 UTC · scripts/export-public.mjs → public-data/ (12 files: skills, builds+paths, weapons, world, bestiary, items, controls, tips, release, roadmap, story, mounts). Hand-picked fields only; 47 proposed skills → sealed tiles (no name) in picks/hotbars/combos, sentences naming them dropped from playstyle text; numbers stripped (difficulty → Easy/Medium/Hard, applies → state names, no atLevel/effect/ranks/chance). Tests found and fixed 2 real leaks (sealed names in combo chains + playstyle text; '×2' multiplier). 5 tests: exact files + fresh, forbidden keys, canaries (briefs, mood, art prompts, roadmap internals, sealed names, ART-/OPEN-/ADR-, other games), no tuning numbers, refs resolve.