browser/openspec/changes/add-scum-game-player-intelligence/proposal.md

Why

SCUM login semantics are currently retained only as operational logs, so operators cannot safely review a local player's identity history, sessions, or suspicious access behavior. A server-scoped game-player projection turns declared SCUM login/logout events into reviewable evidence without conflating game identities with platform users or exposing network data.

What Changes

• Add a server-scoped local game-player domain with aliases, sessions, access attempts, and review-only security signals.
• Project declared scum.login and scum.logout semantic log events idempotently, including duplicate, renamed-player, out-of-order, and session-boundary handling.
• Derive a server-isolated irreversible network correlation fingerprint; do not persist raw IP addresses or raw fingerprints.
• Add authenticated player-profile, aliases, access-trajectory, and security-signal APIs plus SCUM console contracts and records.
• Define bounded retention and manual-review semantics for access evidence and risk signals.

Capabilities

New Capabilities

• scum-game-player-intelligence: Server-local SCUM player identities, event projection, privacy-preserving access evidence, and review-only risk signals.

Impact

• Affects Platform domain/model/repository/service/API/validation layers and durable metadata storage.
• Affects the SCUM plugin semantic-event schemas and page declaration, plus Platform Web API contracts, routing, and shared-console records.
• Adds no Platform account authentication, direct game-database access, raw network data, automatic moderation, Run protocol, or host/executor data exposure.