Security
The game runs locally but must respect the VORIVOX trust boundary.
Allowed boundary
The only platform interface: a loopback WebSocket and one-time token supplied by Launcher.
Do not
- connect directly to RS-485, the target controller or Cloud API;
- persist or reuse
session_token; - bypass Launcher or licensing;
- download executable code at runtime;
- put secrets in PlayerPrefs, crash metadata or analytics.
Network
The game must remain playable without internet. External network access is separately approved and must never delay hit processing or completion.
Files
Normalize paths, remain within assigned data directories, and ship SHA-256 checksums.
Dependencies
Pin package versions, verify third-party licenses and remove Editor-only tools from release builds.