Document client authority boundary

2026-10-25 05:56:04 +01:00
parent 1043d4057b
commit d458f6b9e4
1 changed files with 11 additions and 0 deletions
@@ -0,0 +1,11 @@
+# Client boundary
+
+The Linux client is a Svelte/Tauri control surface for `trixie-server`. It
+renders server-owned state and sends explicit user actions through the shared
+versioned HTTP/WebSocket boundary.
+
+The client never stores Twitch refresh tokens or the administrator password,
+calls Twitch directly, executes plugin code, or treats local UI state as
+authoritative. Local overlay drafts and display preferences are recoverable
+presentation data only; the server remains authoritative for publication,
+authorization, Twitch state, and durable history.