I make Minecraft infrastructure.

Each check is a named module with its own YAML. Operators tune one without a rebuild.

A companion plugin path and a Velocity-native session path, each with its own trust setup.

Pure models stay independent of X11 and Wayland, so they can be tested without a display server.

Packets are validated before they become objects. Decompression checks the claimed and the inflated size.

A 20-tick dispatcher handles a bounded number of spawners per pass, so a large farm cannot take over the tick.

A blocked parent scope returns early, so the cheap check runs before any further work.

Oversized or malformed frames are cancelled before a semantic packet is built.

Login checks run in a fixed sequence, and any check can disconnect before a backend sees the connection.

A blank secret or invalid retry value disables the bridge with a warning. The secret is never logged.