- The model, camera, and controls use different definitions of forward
- Draw the coordinate contract, inspect model axes and transforms, add a debug helper, and fix the root transform before reversing controls piecemeal.
- Parallel client and server agents implement incompatible message shapes
- Write the protocol and shared types first, keep work in separate branches or directories, and integrate through one thin vertical slice.
- Clients can spoof identity, position, speed, or arbitrary messages
- Validate and rate limit inputs server side, assign identities on the server, and keep the server authoritative over accepted state.
- Disconnected players or sockets remain visible and consume resources
- Implement heartbeat, timeout, disconnect cleanup, bounded state, and tests for abrupt tab close and reconnect.
- The 15 minute result is mistaken for an internet ready game
- Document missing authentication, abuse controls, persistence, scaling, observability, accessibility, security, and load testing.