From d458f6b9e4b646f22f808d49a01c02d523eccc57 Mon Sep 17 00:00:00 2001
From: ReaperOfVeriod <reaperofveriod@gmail.com>
Date: Sun, 25 Oct 2026 05:56:04 +0100
Subject: [PATCH] Document client authority boundary

---
 docs/architecture.md | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 docs/architecture.md

diff --git a/docs/architecture.md b/docs/architecture.md
new file mode 100644
index 0000000..5bd78d3
--- /dev/null
+++ b/docs/architecture.md
@@ -0,0 +1,11 @@
+# Client boundary
+
+The Linux client is a Svelte/Tauri control surface for `trixie-server`. It
+renders server-owned state and sends explicit user actions through the shared
+versioned HTTP/WebSocket boundary.
+
+The client never stores Twitch refresh tokens or the administrator password,
+calls Twitch directly, executes plugin code, or treats local UI state as
+authoritative. Local overlay drafts and display preferences are recoverable
+presentation data only; the server remains authoritative for publication,
+authorization, Twitch state, and durable history.