Sprint 27: Co-op, codebase audit, legal framework

Sprint 27 is closed.

Co-op multiplayer — two players, one board, real-time cursor sync, shared tile placement. Room codes for invites. Running on Convex with 25 passing backend tests.

Codebase audit — ran three independent technical auditors and four legal/regulatory auditors against the full codebase. Technical grade: C+. Legal grade: D. Fixed 10 findings the same night.

Legal framework — shipped a privacy policy, terms of service, and “The Promise” (7 commitments that fit on a business card). All released under CC BY 4.0. Also added a consent gate with age verification and account deletion.