← back to the game

Server source

Everything the browser talks to, published so the measurement can be read, not believed. Secrets come from the server environment; none are in these files.

Check: run curl -s https://extella.kz/api/robot/state, then a run through the page, and compare handler_sha with the sha256 of the handler text without its HANDLER_SHA line.