Texas Hold'em strategy data laboratory

PRODUCT & RESEARCH NOTES

Security

Browser isolation, security headers, import boundaries, and responsible disclosure for FlopForge.

01

Security design

  • Static deployment with no account backend or remote solving database.
  • Long-running computation executes in Web Workers and WebAssembly.
  • Production responses enable origin isolation, content-type protection, frame denial, and restricted permissions.
02

User boundaries

Local execution is not a security certification. Your browser, extensions, operating system, downloaded files, and hosting network remain part of the trust boundary. Import only trusted cache files and never enter passwords, tokens, or personal information into spot fields.

03

Responsible disclosure

Use the publisher contact path at to provide reproducible steps, browser version, and affected URL. Do not publicly paste secrets, personal data, or exploit details for an unresolved issue.