Boss battleapisHARD
API Debugging Boss
A public integration is timing out, retrying, and accepting suspicious webhook traffic. Keep clients whole.
XP
860
Coins
172
Minutes
72
Required clears
12
not started
Boss Run Control
Start a boss stage, save stage clears, and build a persistent boss history tied to your profile.
Current stage: Verify webhook trust0%
Recent boss events
No stage attempts saved yet.
Battle stages
1
Verify webhook trust
Validate HMAC signatures over raw body with replay protection.
hmactimestampraw-body
35% trust boundary
Open linked mission2
Design safe retries
Prevent duplicate state changes when clients retry after timeouts.
idempotencyrequest-hashconflict
30% retry safety
Open linked mission3
Return actionable limits
Shape 429 responses so clients can back off without guessing.
retry-afterquotarequest-id
35% client contract
Open linked missionGate design
Boss access is designed to require 12 clears across apis, security, system-design. The current local build shows the gate and linked stages; full timed boss persistence is stored through the BossBattle schema.