Define the session and trust model
Describe how players discover, join, leave and resume a session. Choose the supported player count and topology from the actual design constraints. For each shared state item, record who can request a change, who decides the authoritative value and how clients learn the outcome. Keep identity, authorization and game-state ownership distinct.