Alpha 0.3.14: A Steadier Frontier

[ael-dev3]

Summary

Consolidates and repairs the open renderer, worker-foundation, Water, and Lowlands work into one reviewable Alpha 0.3.14 release candidate.

• recovers the Realm renderer without losing camera or selection state, with progressive castle LOD fallback;
• adds selectable, read-only Water records and bounded moving-water presentation;
• refines the Lowlands palette and grass coverage without changing terrain authority;
• appends the hardened generic four-worker v12 foundation and owner-only UI behind an inactive, fail-closed realm gate;
• pins production database selection to the immutable identity and narrows browser network egress;
• hardens machine-local ignore boundaries for caches, deployment state, diagnostics, and credential-bearing file formats;
• updates only the minimal player-facing 0.3.14 release surface. The README structure and GitHub profile are unchanged.

Worker release boundary

Workers are not live in Alpha 0.3.14. Final v12 publication with empty new tables preserves the current expedition UI. No roster seed, backfill, activation, or production mutation is included.

Production currently has exactly 47 tables (refs 0–46) and no worker tables. The intermediate worker commit must never be published; production must upgrade directly from v11 to the final hardened v12 suffix, where assignment correlation, receipts, schedules, ownership, and accrual remain private.

Do not merge or deploy this draft until the separate additive-schema publication approval and coordinated release step are confirmed.

Verification

• root: 203 files / 1,810 tests, typecheck, production build, assets, provenance, file-size and production-exclusion gates;
• auth bridge: 173 Node tests + 4 Workerd tests, both typechecks;
• SpacetimeDB: 212 tests, typecheck, module build, exact generated bindings;
• real disposable v11 → final v12 populated migration proof with --delete-data=never, downgrade refusal, artifact SHA-256 45798052df64381197215ee414329d748aab328edaf6f53efb967be3dfad3956;
• rendered browser: 14 WebGL cases, 25 journeys, and High/Balanced/Compact castle LOD evidence;
• security: zero dependency advisories, 190 verified registry signatures, 61 attestations, and no Gitleaks finding across the 19-commit delta.

Supersession

This PR consolidates the reviewed intent of #80, #82, #84, #85, #86, #87, #88, and #89 with conflict repairs and final privacy hardening. Documentation drafts #81 and #83 are intentionally not copied; their relevant current-state guidance is either already on main or obsolete.