A boundary around the working system.
HTTPS protects transport to this site. The public pages are open to visitors. Both enquiry forms use a short-lived anti-forgery cookie, server validation and private request limits. The live pages, media and game APIs are hosted externally so the last successful release can continue operating when the build computer is offline.
Game records use private databases outside the public document route. Public score responses expose a nickname and result rather than a player's deletion token. State-changing requests require the expected site origin and valid input; saving or deleting a result also requires the run's private token.
