Document client authority boundary
This commit is contained in:
@@ -0,0 +1,11 @@
|
|||||||
|
# Client boundary
|
||||||
|
|
||||||
|
The Linux client is a Svelte/Tauri control surface for `trixie-server`. It
|
||||||
|
renders server-owned state and sends explicit user actions through the shared
|
||||||
|
versioned HTTP/WebSocket boundary.
|
||||||
|
|
||||||
|
The client never stores Twitch refresh tokens or the administrator password,
|
||||||
|
calls Twitch directly, executes plugin code, or treats local UI state as
|
||||||
|
authoritative. Local overlay drafts and display preferences are recoverable
|
||||||
|
presentation data only; the server remains authoritative for publication,
|
||||||
|
authorization, Twitch state, and durable history.
|
||||||
Reference in New Issue
Block a user