feat: Live Share meets through a relay off the LAN, and no relay can tamper with it unnoticed
- snowbound-relay (crates/relay): a WebSocket rendezvous and relay, one static Linux executable for x86_64 and aarch64 (tools/release_relay.py), with a systemd unit and a deploy README for Caddy or nginx in front
- The relay limits wrong codes without learning them: the code's owner tells it who met, ten wrong codes a minute lock an address out for longer each time, and five burn a code
- Every live frame carries its number inside the seal, so a frame dropped, repeated, reordered or forged on the way is caught, never applied, and the peers meet again from scratch
- Presence reaches peers through a relay named by SNOWBOUND_LIVE_RELAY, by notebook or by a code the relay numbers (feature live)
Assisted-by: claude-opus-5.5
e2e4ea381fclover caruso committed on 10/2/2026, 10:45:09 AMparentbb9f2fb