# Red Team Pass, v1.1

## Issues found and addressed

1. Public image paths originally pointed into `data/`, which should be protected. Case images now live under `assets/cases/` while private ledgers remain in `data/db/`.
2. The case library could become overwhelming on mobile. The case browser now shows a limited set first, with search, pack filtering and Show more.
3. The play flow needed stronger escape states. The game now has Begin, Cancel, Pause, Resume, Abort and New run states.
4. Mobile mis-taps could punish players too harshly. A one-step Undo action is now available before the pawn advances.
5. Public placeholder images had production-unready text. These were replaced with thematic placeholders.
6. Admin prompts and growth tools remain hidden behind `admin.php`.
7. Player attribution per card was removed. Only player count matters.
8. Starter content was expanded from a small test library into a categorised 112-case seed library.
9. The public flow avoids designer/admin wording.
10. The result-share route now displays a shared result banner.

## Known limits

This is still a flat-file PHP product. It is suitable for early deployment, community testing and early audience growth. It is not an anti-cheat-secure enterprise backend. If the project blows up, the next backend step is a proper database and server-authoritative run logic.
