REAL TESTS.
REAL RESULTS.
The direct public front door, all approved catalog resources, representative game interactions and protected-route boundaries have been tested. This is a dated public summary of evidence, not a claim that every possible risk or feature has been certified.
The public can use all approved apps without a Tailscale app or private login. Passwords, owner controls, billing records and administrator endpoints stay restricted.
What was tested
| Scope | Measured result | Meaning / limit |
|---|---|---|
| Discovery | 74 canonical sitemap URLs, searchable 60-resource directory | Search indexing is controlled by external crawlers; not guaranteed. |
| Games | 18 SIMWORKS, 31 Matrix thought-only, 6 Factoryverse, 6 Infinite Matrix expansion and 3 SYSTEMVERSE grid missions exercised | Automated browser controls and a simulated thought mode—not human play sessions or 64/64 full game acceptance. |
| Factory OS | 8 unit tests, 786 game-rule assertions, 12 readiness gates, local isolated restore of 84 files | Source pipelines approved; encrypted independent full-VPS offsite restore is not proven. |
| Security | 31 protected request/path probes rejected; zero token-pattern flags in sampled bodies | No independent penetration test or exhaustive secret inspection. |
| Light concurrent load | 96/96 safe requests at 4 clients; 120/120 at 12 clients | Not a user-scale traffic benchmark or geographic latency claim. |
| Read-only local AI | Two real local model calls, one strictly valid first puzzle move | Not a provider-connected public inference API, full game win or autonomous worker. |
What is NOT done
Private owner authentication remains restricted. The new hostname relies on an external free wildcard-DNS service, not an independently owned domain. Unbounded public code execution, databases with personal information, credentials and paid inference are not enabled. Production recovery after VPS loss, physical device acceptance, hostile security testing and genuinely large-scale traffic certification remain separate work.
Honest scope: These tests prove the listed web resources and selected actions worked at the time of the checks. They do not prove absolute security or flawless operation under every workload.