blacktrigram 0.7.52 → 0.7.54

package/ARCHITECTURE.md

@@ -1220,34 +1220,34 @@ sequenceDiagram
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 graph TD
     subgraph PM["🔍 Performance Monitoring (Q1 2026)"]
-      PerfMon[📈 Performance Monitor]
-      FPS[📊 FPS Tracking - PerformanceOverlay3D]
-      Memory[💾 Memory Usage - Chrome DevTools]
-      GC[🗑️ GC Observations - Three.js Object Disposal]
-      AssetTiming[⏱️ Asset Load Times - Three.js Models & Textures]
-      ThreeRenderer[🎨 Three.js Renderer Stats - Draw Calls]
+      PerfMon["📈 Performance Monitor"]
+      FPS["📊 FPS Tracking - PerformanceOverlay3D"]
+      Memory["💾 Memory Usage - Chrome DevTools"]
+      GC["🗑️ GC Observations - Three.js Object Disposal"]
+      AssetTiming["⏱️ Asset Load Times - Three.js Models & Textures"]
+      ThreeRenderer["🎨 Three.js Renderer Stats - Draw Calls"]
     end
 
     subgraph OT["🚀 Optimization Techniques (Three.js)"]
-      OptEngine[⚙️ Optimization Engine]
-      Instancing[📦 Three.js Instancing - 1000+ Particles]
-      LOD[🎭 Level of Detail - Character Models]
-      ObjectPooling[🔄 Object Pooling - Three.js Objects]
-      GeometryReuse[🔺 Geometry Reuse - Shared Meshes]
-      CodeSplitting[📂 Dynamic import - Three.js Chunks]
-      AudioCompression[🎵 OGG/WebM Streaming - Web Audio API]
-      Debounce[⏳ Debounce/Throttle - useFrame Optimization]
-      Memoization[🧠 React.memo / useMemo - Component Optimization]
-      FrustumCulling[👁️ Frustum Culling - Auto Off-screen Culling]
-      MaterialReuse[🎨 Material Caching - Shared Materials]
+      OptEngine["⚙️ Optimization Engine"]
+      Instancing["📦 Three.js Instancing - 1000+ Particles"]
+      LOD["🎭 Level of Detail - Character Models"]
+      ObjectPooling["🔄 Object Pooling - Three.js Objects"]
+      GeometryReuse["🔺 Geometry Reuse - Shared Meshes"]
+      CodeSplitting["📂 Dynamic import - Three.js Chunks"]
+      AudioCompression["🎵 OGG/WebM Streaming - Web Audio API"]
+      Debounce["⏳ Debounce/Throttle - useFrame Optimization"]
+      Memoization["🧠 React.memo / useMemo - Component Optimization"]
+      FrustumCulling["👁️ Frustum Culling - Auto Off-screen Culling"]
+      MaterialReuse["🎨 Material Caching - Shared Materials"]
     end
 
     subgraph FS["🛡️ Fallback Systems"]
-      FallbackMgr[⚠️ Fallback Manager]
-      LowQualityMode[📉 Reduced Polygon Count]
-      ReducedEffects[❌ Disable Shadows & Post-Processing]
-      ProceduralAudio[🎹 Procedural SFX Fallback]
-      WebGLFallback[🖼️ Fallback to WebGL 1.0]
+      FallbackMgr["⚠️ Fallback Manager"]
+      LowQualityMode["📉 Reduced Polygon Count"]
+      ReducedEffects["❌ Disable Shadows & Post-Processing"]
+      ProceduralAudio["🎹 Procedural SFX Fallback"]
+      WebGLFallback["🖼️ Fallback to WebGL 1.0"]
     end
 
     PerfMon --> FPS
@@ -1699,7 +1699,7 @@ mindmap
       id3.3[Established martial arts franchises]
     id4(📉 Technical Debt)
       id4.1[Three.js object disposal complexity]
-      id4.2[Combat realism systems 100% complete (13/13)]
+      id4.2[Combat realism systems 100% complete 13 of 13]
       id4.3[State management complexity growing]
       id4.4[73.73% test coverage below 80% target]
     id5(🔒 CDN Security Risks)
@@ -1908,20 +1908,20 @@ mindmap
 ```mermaid
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart TD
-    Start([🎮 Game Load]) --> Loading[⏳ Loading Assets]
-    Loading --> Intro[🏮 Intro Screen]
+    Start(["🎮 Game Load"]) --> Loading["⏳ Loading Assets"]
+    Loading --> Intro["🏮 Intro Screen"]
 
-    Intro --> |New Game| CharSelect[👤 Archetype Selection]
-    Intro --> |Training| Training[🎯 Training Mode]
-    Intro --> |Settings| Settings[⚙️ Settings Menu]
+    Intro --> |New Game| CharSelect["👤 Archetype Selection"]
+    Intro --> |Training| Training["🎯 Training Mode"]
+    Intro --> |Settings| Settings["⚙️ Settings Menu"]
 
-    CharSelect --> Combat[⚔️ Combat Arena]
-    Training --> VitalPractice[🎯 Vital Point Practice]
-    Training --> StancePractice[☯️ Stance Training]
+    CharSelect --> Combat["⚔️ Combat Arena"]
+    Training --> VitalPractice["🎯 Vital Point Practice"]
+    Training --> StancePractice["☯️ Stance Training"]
 
-    Combat --> |Victory| Victory[🏆 Victory Screen]
-    Combat --> |Defeat| Defeat[💀 Defeat Screen]
-    Combat --> |Pause| PauseMenu[⏸️ Pause Menu]
+    Combat --> |Victory| Victory["🏆 Victory Screen"]
+    Combat --> |Defeat| Defeat["💀 Defeat Screen"]
+    Combat --> |Pause| PauseMenu["⏸️ Pause Menu"]
 
     Victory --> Intro
     Defeat --> Intro
@@ -2015,14 +2015,14 @@ graph TB
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 graph LR
     subgraph "☯️ Trigram Relationships"
-        G[☰ 건 Geon]
-        T[☱ 태 Tae]
-        L[☲ 리 Li]
-        J[☳ 진 Jin]
-        S[☴ 손 Son]
-        GM[☵ 감 Gam]
-        GN[☶ 간 Gan]
-        K[☷ 곤 Gon]
+        G["☰ 건 Geon"]
+        T["☱ 태 Tae"]
+        L["☲ 리 Li"]
+        J["☳ 진 Jin"]
+        S["☴ 손 Son"]
+        GM["☵ 감 Gam"]
+        GN["☶ 간 Gan"]
+        K["☷ 곤 Gon"]
     end
 
     %% Advantage relationships (→ means "has advantage over")

package/COMBAT_ARCHITECTURE.md

@@ -160,14 +160,14 @@ graph TB
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 graph LR
     subgraph "Eight Trigram Stances (팔괘)"
-        G[☰ 건 Geon<br/>Heaven]:::geon
-        T[☱ 태 Tae<br/>Lake]:::tae
-        L[☲ 리 Li<br/>Fire]:::li
-        J[☳ 진 Jin<br/>Thunder]:::jin
-        S[☴ 손 Son<br/>Wind]:::son
-        GA[☵ 감 Gam<br/>Water]:::gam
-        GN[☶ 간 Gan<br/>Mountain]:::gan
-        GO[☷ 곤 Gon<br/>Earth]:::gon
+        G["☰ 건 Geon<br/>Heaven"]:::geon
+        T["☱ 태 Tae<br/>Lake"]:::tae
+        L["☲ 리 Li<br/>Fire"]:::li
+        J["☳ 진 Jin<br/>Thunder"]:::jin
+        S["☴ 손 Son<br/>Wind"]:::son
+        GA["☵ 감 Gam<br/>Water"]:::gam
+        GN["☶ 간 Gan<br/>Mountain"]:::gan
+        GO["☷ 곤 Gon<br/>Earth"]:::gon
     end
 
     subgraph "Trigram System Components"

package/README.md

@@ -233,15 +233,15 @@ The combat loop is fully deterministic, frame-accurate, and side-effect-isolated
 
 ```mermaid
 flowchart LR
-    A[🎮 Input<br/>Keyboard · Touch · Gesture] --> B[☯️ Trigram Stance<br/>건태리진손감간곤]
-    B --> C[🦴 Skeletal Pose<br/>28 bones · 7 hand poses]
-    C --> D[🎯 Vital-Point Targeter<br/>70 points · 4 regions · 14 meridians]
-    D --> E[⚔️ Damage Calculator<br/>severity · accuracy · archetype bonus]
-    E --> F[🩸 Body-Part Health<br/>pain · consciousness · breathing · balance]
-    F --> G[🤖 Counter-Attack AI<br/>limb-exposure detection]
-    G --> H[🎨 Three.js Render<br/>60fps · trauma · particles · shaders]
-    F --> I[🔊 Audio Engine<br/>bone impact · breath · 국악]
-    H --> J[♿ WCAG 2.1 AA HUD<br/>combat readiness · haptics]
+    A["🎮 Input<br/>Keyboard · Touch · Gesture"] --> B["☯️ Trigram Stance<br/>건태리진손감간곤"]
+    B --> C["🦴 Skeletal Pose<br/>28 bones · 7 hand poses"]
+    C --> D["🎯 Vital-Point Targeter<br/>70 points · 4 regions · 14 meridians"]
+    D --> E["⚔️ Damage Calculator<br/>severity · accuracy · archetype bonus"]
+    E --> F["🩸 Body-Part Health<br/>pain · consciousness · breathing · balance"]
+    F --> G["🤖 Counter-Attack AI<br/>limb-exposure detection"]
+    G --> H["🎨 Three.js Render<br/>60fps · trauma · particles · shaders"]
+    F --> I["🔊 Audio Engine<br/>bone impact · breath · 국악"]
+    H --> J["♿ WCAG 2.1 AA HUD<br/>combat readiness · haptics"]
     I --> J
 
     classDef korean fill:#000000,stroke:#FFD700,color:#FFD700,stroke-width:2px

package/SECURITY_ARCHITECTURE.md

@@ -104,38 +104,38 @@ graph TD
         direction TB
 
         subgraph "Layer 1: Perimeter & Network Security"
-            L1A[🌐 CloudFront CDN<br/>400+ Edge Locations]
-            L1B[🛡️ AWS Shield Standard<br/>DDoS Protection L3/L4]
-            L1C[🔐 TLS 1.3<br/>HTTPS-Only Enforcement]
-            L1D[📡 Route53 DNSSEC<br/>DNS Integrity]
+            L1A["🌐 CloudFront CDN<br/>400+ Edge Locations"]
+            L1B["🛡️ AWS Shield Standard<br/>DDoS Protection L3/L4"]
+            L1C["🔐 TLS 1.3<br/>HTTPS-Only Enforcement"]
+            L1D["📡 Route53 DNSSEC<br/>DNS Integrity"]
         end
 
         subgraph "Layer 2: Application Security Controls"
-            L2A[🛡️ Content Security Policy<br/>XSS Prevention]
-            L2B[🔒 Security Headers<br/>HSTS, X-Frame-Options]
-            L2C[🔍 Input Validation<br/>Client-Side Sanitization]
-            L2D[🖥️ Browser Sandbox<br/>Origin Isolation]
+            L2A["🛡️ Content Security Policy<br/>XSS Prevention"]
+            L2B["🔒 Security Headers<br/>HSTS, X-Frame-Options"]
+            L2C["🔍 Input Validation<br/>Client-Side Sanitization"]
+            L2D["🖥️ Browser Sandbox<br/>Origin Isolation"]
         end
 
         subgraph "Layer 3: Data Protection & Key Management"
-            L3A[💾 SSE-S3 Encryption<br/>At-Rest Protection]
-            L3B[🔑 ACM Certificates<br/>Auto-Renewal]
-            L3C[🗝️ OIDC Federation<br/>No Static Credentials]
-            L3D[📦 S3 Versioning<br/>Recovery Capability]
+            L3A["💾 SSE-S3 Encryption<br/>At-Rest Protection"]
+            L3B["🔑 ACM Certificates<br/>Auto-Renewal"]
+            L3C["🗝️ OIDC Federation<br/>No Static Credentials"]
+            L3D["📦 S3 Versioning<br/>Recovery Capability"]
         end
 
         subgraph "Layer 4: Supply Chain & CI/CD Security"
-            L4A[🔍 CodeQL SAST<br/>Vulnerability Detection]
-            L4B[📦 Dependency Review<br/>SCA Scanning]
-            L4C[🔏 SLSA Attestations<br/>Build Provenance]
-            L4D[📄 SBOM Generation<br/>Transparency]
+            L4A["🔍 CodeQL SAST<br/>Vulnerability Detection"]
+            L4B["📦 Dependency Review<br/>SCA Scanning"]
+            L4C["🔏 SLSA Attestations<br/>Build Provenance"]
+            L4D["📄 SBOM Generation<br/>Transparency"]
         end
 
         subgraph "Layer 5: Monitoring & Compliance"
-            L5A[⭐ OSSF Scorecard<br/>Supply Chain Rating]
-            L5B[🕷️ ZAP DAST<br/>Dynamic Testing]
-            L5C[📊 Lighthouse Audit<br/>Best Practices]
-            L5D[📋 ISMS Alignment<br/>ISO 27001 / NIST CSF]
+            L5A["⭐ OSSF Scorecard<br/>Supply Chain Rating"]
+            L5B["🕷️ ZAP DAST<br/>Dynamic Testing"]
+            L5C["📊 Lighthouse Audit<br/>Best Practices"]
+            L5D["📋 ISMS Alignment<br/>ISO 27001 / NIST CSF"]
         end
     end
 
@@ -169,15 +169,15 @@ graph TD
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart TD
     subgraph "Frontend-Only Architecture (No Authentication)"
-        A[👤 Player] -->|"Direct Access"| B[🌐 Web Browser]
-        B -->|"HTTPS"| C[📦 Static Assets<br/>CDN]
+        A["👤 Player"] -->|"Direct Access"| B["🌐 Web Browser"]
+        B -->|"HTTPS"| C["📦 Static Assets<br/>CDN"]
 
-        C --> D[⚙️ Game Logic<br/>Client-Side Only]
-        D --> E[💾 Local Storage<br/>Session Only]
+        C --> D["⚙️ Game Logic<br/>Client-Side Only"]
+        D --> E["💾 Local Storage<br/>Session Only"]
 
-        F[🔄 No Backend<br/>No Authentication]
-        G[🔒 No User Accounts<br/>No Persistence]
-        H[⚠️ No Access Control<br/>No Authorization]
+        F["🔄 No Backend<br/>No Authentication"]
+        G["🔒 No User Accounts<br/>No Persistence"]
+        H["⚠️ No Access Control<br/>No Authorization"]
     end
 
     style A fill:#2979FF,stroke:#0D47A1,stroke-width:2px,color:white,font-weight:bold
@@ -218,13 +218,13 @@ Black Trigram is a frontend-only web application with:
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart TD
     subgraph "No Auditing Architecture"
-        A[👤 Player] -->|"Action"| B[⚙️ Client Logic]
-        B -->|"Temporary"| C[💾 Browser Memory]
+        A["👤 Player"] -->|"Action"| B["⚙️ Client Logic"]
+        B -->|"Temporary"| C["💾 Browser Memory"]
 
-        D[📝 No Audit Trail]
-        E[👤 No Author Tracking]
-        F[📊 No Change History]
-        G[⏱️ No Persistence]
+        D["📝 No Audit Trail"]
+        E["👤 No Author Tracking"]
+        F["📊 No Change History"]
+        G["⏱️ No Persistence"]
     end
 
     style A fill:#2979FF,stroke:#0D47A1,stroke-width:2px,color:white,font-weight:bold
@@ -257,13 +257,13 @@ Black Trigram currently has:
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart TD
     subgraph "No Session Tracking"
-        A[👤 Player] -->|"Interact"| B[🖱️ Game Interface]
-        B -->|"Local Only"| C[📝 Browser State]
+        A["👤 Player"] -->|"Interact"| B["🖱️ Game Interface"]
+        B -->|"Local Only"| C["📝 Browser State"]
 
-        D[📋 No Session Metadata]
-        E[🌐 No IP Tracking]
-        F[⏰ No Time Tracking]
-        G[💾 No Storage]
+        D["📋 No Session Metadata"]
+        E["🌐 No IP Tracking"]
+        F["⏰ No Time Tracking"]
+        G["💾 No Storage"]
     end
 
     style A fill:#2979FF,stroke:#0D47A1,stroke-width:2px,color:white,font-weight:bold
@@ -296,13 +296,13 @@ Black Trigram session handling:
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart TD
     subgraph "No Security Event Monitoring"
-        A[🔓 No Authentication<br>Events]
-        B[🛡️ No Authorization<br>Events]
-        C[⚙️ No System<br>Events]
+        A["🔓 No Authentication<br>Events"]
+        B["🛡️ No Authorization<br>Events"]
+        C["⚙️ No System<br>Events"]
 
-        D[📝 No Event Storage]
-        E[🚨 No Security Alerts]
-        F[📊 No Security Dashboard]
+        D["📝 No Event Storage"]
+        E["🚨 No Security Alerts"]
+        F["📊 No Security Dashboard"]
     end
 
     style A,B,C,D,E,F fill:#9E9E9E,stroke:#616161,stroke-width:2px,color:white,font-weight:bold
@@ -332,21 +332,21 @@ Black Trigram security monitoring:
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 graph TD
     subgraph "AWS Network Security Infrastructure"
-        A[🌐 Internet] -->|"DNS Query"| B[🛡️ Route53 DNSSEC + Health Checks]
-        B -->|"Primary"| C[⚖️ CloudFront CDN]
-        B -.failover.-> D[📄 GitHub Pages DR]
+        A["🌐 Internet"] -->|"DNS Query"| B["🛡️ Route53 DNSSEC + Health Checks"]
+        B -->|"Primary"| C["⚖️ CloudFront CDN"]
+        B -.failover.-> D["📄 GitHub Pages DR"]
         
-        C -->|"Origin Fetch"| E[💾 S3 us-east-1 Primary]
-        E -.replication.-> F[💾 S3 Backup Region]
+        C -->|"Origin Fetch"| E["💾 S3 us-east-1 Primary"]
+        E -.replication.-> F["💾 S3 Backup Region"]
         
-        C -->|"HTTPS Only"| G[📦 Asset Delivery]
+        C -->|"HTTPS Only"| G["📦 Asset Delivery"]
         D -.DR.-> G
 
-        H[🔒 TLS 1.3] --> C
-        I[🛡️ WAF Protection] --> C
-        J[🔐 CAA Records] --> B
-        K[🔑 DNSSEC Validation] --> B
-        L[💚 Health Checks] --> B
+        H["🔒 TLS 1.3"] --> C
+        I["🛡️ WAF Protection"] --> C
+        J["🔐 CAA Records"] --> B
+        K["🔑 DNSSEC Validation"] --> B
+        L["💚 Health Checks"] --> B
     end
 
     style A fill:#2979FF,stroke:#0D47A1,stroke-width:2px,color:white,font-weight:bold
@@ -442,9 +442,9 @@ Black Trigram network security includes AWS CloudFront + S3 multi-region deploym
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart LR
     subgraph "DNS Security Monitoring"
-        A[🔍 DNSSEC Validation] --> B[📊 Query Monitoring]
-        C[📜 CAA Compliance] --> D[🚨 Certificate Alerts]
-        E[🛡️ Route53 Logs] --> F[📈 Security Metrics]
+        A["🔍 DNSSEC Validation"] --> B["📊 Query Monitoring"]
+        C["📜 CAA Compliance"] --> D["🚨 Certificate Alerts"]
+        E["🛡️ Route53 Logs"] --> F["📈 Security Metrics"]
     end
 
     style A,B,C,D,E,F fill:#00C853,stroke:#007E33,stroke-width:2px,color:white,font-weight:bold
@@ -465,9 +465,9 @@ flowchart LR
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart LR
     subgraph "No VPC Infrastructure"
-        A[🚫 No Private Subnets]
-        B[🚫 No VPC Endpoints]
-        C[🚫 No AWS Services]
+        A["🚫 No Private Subnets"]
+        B["🚫 No VPC Endpoints"]
+        C["🚫 No AWS Services"]
     end
 
     style A,B,C fill:#9E9E9E,stroke:#616161,stroke-width:2px,color:white,font-weight:bold
@@ -489,18 +489,18 @@ Black Trigram does not use VPC infrastructure:
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 graph TD
     subgraph "AWS Multi-Region High Availability"
-        A[📡 Route53 Health Checks] --> B{Primary Healthy?}
-        B -->|Yes| C[⚖️ CloudFront CDN]
-        B -->|No| D[📄 GitHub Pages DR]
+        A["📡 Route53 Health Checks"] --> B{Primary Healthy?}
+        B -->|Yes| C["⚖️ CloudFront CDN"]
+        B -->|No| D["📄 GitHub Pages DR"]
         
-        C --> E[💾 S3 us-east-1]
-        E -.replication.-> F[💾 S3 Backup Region]
+        C --> E["💾 S3 us-east-1"]
+        E -.replication.-> F["💾 S3 Backup Region"]
         
-        C --> G[🌐 Global Edge Locations]
+        C --> G["🌐 Global Edge Locations"]
         D --> G
         
-        H[🔄 Automatic Failover]
-        I[💚 Active Monitoring]
+        H["🔄 Automatic Failover"]
+        I["💚 Active Monitoring"]
     end
 
     style A fill:#FF6F00,stroke:#E65100,stroke-width:2px,color:white,font-weight:bold
@@ -557,13 +557,13 @@ As a static content application, Black Trigram benefits from inherent resilience
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart TD
     subgraph "Data Protection Strategy"
-        A[👤 Player] <-->|"🔒 TLS 1.3"| B[⚖️ CloudFront CDN]
-        B <-->|"🔐 HTTPS"| C[💾 S3 with SSE]
-        C -.replication.-> D[💾 S3 Backup]
+        A["👤 Player"] <-->|"🔒 TLS 1.3"| B["⚖️ CloudFront CDN"]
+        B <-->|"🔐 HTTPS"| C["💾 S3 with SSE"]
+        C -.replication.-> D["💾 S3 Backup"]
         
-        E[🔐 Encryption at Rest<br/>SSE-S3]
-        F[🔐 Encryption in Transit<br/>TLS 1.3]
-        G[🗝️ ACM Certificates<br/>Auto-Renewal]
+        E["🔐 Encryption at Rest<br/>SSE-S3"]
+        F["🔐 Encryption in Transit<br/>TLS 1.3"]
+        G["🗝️ ACM Certificates<br/>Auto-Renewal"]
     end
 
     style A fill:#2979FF,stroke:#0D47A1,stroke-width:2px,color:white,font-weight:bold
@@ -607,18 +607,18 @@ Black Trigram data protection:
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 graph TD
     subgraph "AWS Security Services"
-        A[⚖️ CloudFront CDN] --> B[🛡️ AWS Shield Standard]
-        A --> C[🔐 ACM Certificates]
+        A["⚖️ CloudFront CDN"] --> B["🛡️ AWS Shield Standard"]
+        A --> C["🔐 ACM Certificates"]
         
-        D[💾 S3 Storage] --> E[🔒 SSE-S3 Encryption]
-        D --> F[📋 IAM Policies]
-        D --> G[🔐 Block Public Access]
+        D["💾 S3 Storage"] --> E["🔒 SSE-S3 Encryption"]
+        D --> F["📋 IAM Policies"]
+        D --> G["🔐 Block Public Access"]
         
-        H[📡 Route53 DNS] --> I[🛡️ DNSSEC]
-        H --> J[💚 Health Checks]
+        H["📡 Route53 DNS"] --> I["🛡️ DNSSEC"]
+        H --> J["💚 Health Checks"]
         
-        K[🔑 IAM Roles] --> L[🎭 OIDC Authentication]
-        L --> M[🔧 GitHub Actions]
+        K["🔑 IAM Roles"] --> L["🎭 OIDC Authentication"]
+        L --> M["🔧 GitHub Actions"]
     end
 
     style A,D,H fill:#FF9900,stroke:#232F3E,stroke-width:2px,color:white,font-weight:bold
@@ -690,10 +690,10 @@ Black Trigram uses AWS infrastructure exclusively for static content hosting and
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart TD
     subgraph "No AWS FSBP Implementation"
-        A[🚫 No Config Service]
-        B[🚫 No Security Hub]
-        C[🚫 No GuardDuty]
-        D[🚫 No Inspector]
+        A["🚫 No Config Service"]
+        B["🚫 No Security Hub"]
+        C["🚫 No GuardDuty"]
+        D["🚫 No Inspector"]
     end
 
     style A,B,C,D fill:#9E9E9E,stroke:#616161,stroke-width:2px,color:white,font-weight:bold
@@ -716,9 +716,9 @@ Black Trigram does not implement AWS FSBP (uses AWS only for static hosting via
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart TD
     subgraph "No Threat Detection"
-        A[🔍 No Threat<br>Detection]
-        B[🔎 No Investigation<br>Tools]
-        C[⚠️ No Security<br>Findings]
+        A["🔍 No Threat<br>Detection"]
+        B["🔎 No Investigation<br>Tools"]
+        C["⚠️ No Security<br>Findings"]
     end
 
     style A,B,C fill:#9E9E9E,stroke:#616161,stroke-width:2px,color:white,font-weight:bold
@@ -747,9 +747,9 @@ Black Trigram threat detection:
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart TD
     subgraph "No Vulnerability Management"
-        A[🔎 No Vulnerability<br>Scanning]
-        B[📋 No CVE<br>Database]
-        C[🔧 No Patch<br>Management]
+        A["🔎 No Vulnerability<br>Scanning"]
+        B["📋 No CVE<br>Database"]
+        C["🔧 No Patch<br>Management"]
     end
 
     style A,B,C fill:#9E9E9E,stroke:#616161,stroke-width:2px,color:white,font-weight:bold
@@ -778,9 +778,9 @@ Black Trigram vulnerability management:
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart TD
     subgraph "No Configuration Management"
-        A[⚙️ No AWS Config]
-        B[📝 No Resource<br>Inventory]
-        C[📊 No Compliance<br>Rules]
+        A["⚙️ No AWS Config"]
+        B["📝 No Resource<br>Inventory"]
+        C["📊 No Compliance<br>Rules"]
     end
 
     style A,B,C fill:#9E9E9E,stroke:#616161,stroke-width:2px,color:white,font-weight:bold
@@ -808,10 +808,10 @@ Black Trigram configuration management:
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart TD
     subgraph "No Security Monitoring"
-        A[📊 No Log Sources]
-        B[📈 No CloudWatch]
-        C[🔍 No Security Lake]
-        D[🚨 No Alerting]
+        A["📊 No Log Sources"]
+        B["📈 No CloudWatch"]
+        C["🔍 No Security Lake"]
+        D["🚨 No Alerting"]
     end
 
     style A,B,C,D fill:#9E9E9E,stroke:#616161,stroke-width:2px,color:white,font-weight:bold
@@ -840,9 +840,9 @@ Black Trigram monitoring:
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart TD
     subgraph "No Automated Security Operations"
-        A[⏱️ No Maintenance<br>Windows]
-        B[🔄 No Patch<br>Management]
-        C[📊 No Security<br>Automation]
+        A["⏱️ No Maintenance<br>Windows"]
+        B["🔄 No Patch<br>Management"]
+        C["📊 No Security<br>Automation"]
     end
 
     style A,B,C fill:#9E9E9E,stroke:#616161,stroke-width:2px,color:white,font-weight:bold
@@ -870,13 +870,13 @@ Black Trigram automated operations:
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart LR
     subgraph "Frontend Application Security"
-        A[🛡️ Browser<br>Security Model] --> B[🔐 HTTPS Only]
-        A --> C[🔒 CSP Headers]
-        A --> D[🛑 Input<br>Validation]
+        A["🛡️ Browser<br>Security Model"] --> B["🔐 HTTPS Only"]
+        A --> C["🔒 CSP Headers"]
+        A --> D["🛑 Input<br>Validation"]
 
-        E[🚫 No Backend<br>Security]
-        F[🚫 No Authentication]
-        G[🚫 No Authorization]
+        E["🚫 No Backend<br>Security"]
+        F["🚫 No Authentication"]
+        G["🚫 No Authorization"]
     end
 
     style A,B,C,D fill:#00C853,stroke:#007E33,stroke-width:2px,color:white,font-weight:bold
@@ -909,10 +909,10 @@ Black Trigram application security:
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 graph TD
     subgraph "No Formal Compliance"
-        A[🏛️ No Compliance<br>Framework]
-        B[🔍 No NIST CSF]
-        C[🔐 No ISO 27001]
-        D[📋 No Regulatory<br>Requirements]
+        A["🏛️ No Compliance<br>Framework"]
+        B["🔍 No NIST CSF"]
+        C["🔐 No ISO 27001"]
+        D["📋 No Regulatory<br>Requirements"]
     end
 
     style A,B,C,D fill:#9E9E9E,stroke:#616161,stroke-width:2px,color:white,font-weight:bold
@@ -941,13 +941,13 @@ Black Trigram compliance:
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart TD
     subgraph "Simplified Defense-in-Depth"
-        A[🌐 Network Layer] --> B[🔒 HTTPS/TLS]
-        C[🖥️ Application Layer] --> D[🛡️ Browser Security]
-        E[👤 User Layer] --> F[🔍 Input Validation]
+        A["🌐 Network Layer"] --> B["🔒 HTTPS/TLS"]
+        C["🖥️ Application Layer"] --> D["🛡️ Browser Security"]
+        E["👤 User Layer"] --> F["🔍 Input Validation"]
 
-        G[🚫 No Identity Layer]
-        H[🚫 No Data Layer]
-        I[🚫 No Infrastructure Layer]
+        G["🚫 No Identity Layer"]
+        H["🚫 No Data Layer"]
+        I["🚫 No Infrastructure Layer"]
     end
 
     style A,B,C,D,E,F fill:#00C853,stroke:#007E33,stroke-width:2px,color:white,font-weight:bold
@@ -982,10 +982,10 @@ Black Trigram's simplified defense approach:
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart TD
     subgraph "No Security Operations"
-        A[🔍 No Monitoring]
-        B[⚡ No Incident<br>Response]
-        C[🔄 No Security<br>Maintenance]
-        D[📊 No Threat<br>Intelligence]
+        A["🔍 No Monitoring"]
+        B["⚡ No Incident<br>Response"]
+        C["🔄 No Security<br>Maintenance"]
+        D["📊 No Threat<br>Intelligence"]
     end
 
     style A,B,C,D fill:#9E9E9E,stroke:#616161,stroke-width:2px,color:white,font-weight:bold
@@ -1014,13 +1014,13 @@ Black Trigram security operations:
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart TD
     subgraph "Minimal Security Investment"
-        A[💰 Low Cost] --> B[📦 CDN Costs Only]
-        A --> C[🔒 TLS Certificate]
-        A --> D[🛠️ Development Time]
+        A["💰 Low Cost"] --> B["📦 CDN Costs Only"]
+        A --> C["🔒 TLS Certificate"]
+        A --> D["🛠️ Development Time"]
 
-        E[💲 AWS Hosting Costs]
-        F[🚫 No Backend Costs]
-        G[🚫 No Operations Costs]
+        E["💲 AWS Hosting Costs"]
+        F["🚫 No Backend Costs"]
+        G["🚫 No Operations Costs"]
     end
 
     style A,B,C,D fill:#00C853,stroke:#007E33,stroke-width:2px,color:white,font-weight:bold
@@ -1053,21 +1053,21 @@ Black Trigram security investment:
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart TD
     subgraph "Security-Hardened CI/CD Pipeline"
-        A[🔒 Source Code<br>Security] --> B[🔍 CodeQL Analysis]
-        A --> C[📦 Dependency Review]
-        A --> D[⭐ OSSF Scorecard]
+        A["🔒 Source Code<br>Security"] --> B["🔍 CodeQL Analysis"]
+        A --> C["📦 Dependency Review"]
+        A --> D["⭐ OSSF Scorecard"]
 
-        E[🏗️ Build Security] --> F[🔏 SLSA Attestations]
-        E --> G[📄 SBOM Generation]
-        E --> H[🔐 Artifact Signing]
+        E["🏗️ Build Security"] --> F["🔏 SLSA Attestations"]
+        E --> G["📄 SBOM Generation"]
+        E --> H["🔐 Artifact Signing"]
 
-        I[🚀 Deployment<br>Security] --> J[🌐 GitHub Pages]
-        I --> K[🔆 Lighthouse Audit]
-        I --> L[🕷️ ZAP Security Scan]
+        I["🚀 Deployment<br>Security"] --> J["🌐 GitHub Pages"]
+        I --> K["🔆 Lighthouse Audit"]
+        I --> L["🕷️ ZAP Security Scan"]
 
-        M[🛡️ Runner Security] --> N[📌 SHA Pinning]
-        M --> O[📊 Audit Logging]
-        M --> P[🔒 Hardened Runners]
+        M["🛡️ Runner Security"] --> N["📌 SHA Pinning"]
+        M --> O["📊 Audit Logging"]
+        M --> P["🔒 Hardened Runners"]
     end
 
     style A,B,C,D fill:#2979FF,stroke:#0D47A1,stroke-width:2px,color:white,font-weight:bold

package/THREAT_MODEL.md

@@ -154,28 +154,28 @@ Following [Hack23 AB Asset-Centric Threat Modeling](https://github.com/Hack23/IS
 }%%
 flowchart TB
     subgraph CROWN_JEWELS["💎 Crown Jewels"]
-        EDUCATIONAL[🎓 Educational Integrity<br/>Korean Martial Arts Authenticity]
-        CULTURAL[🇰🇷 Cultural Content<br/>Traditional Knowledge & Respect]
-        GAMEPLAY[🎮 Game Experience<br/>User Engagement & Performance]
-        DOMAIN[🌐 Domain Trust<br/>Blacktrigram.com Reputation]
+        EDUCATIONAL["🎓 Educational Integrity<br/>Korean Martial Arts Authenticity"]
+        CULTURAL["🇰🇷 Cultural Content<br/>Traditional Knowledge & Respect"]
+        GAMEPLAY["🎮 Game Experience<br/>User Engagement & Performance"]
+        DOMAIN["🌐 Domain Trust<br/>Blacktrigram.com Reputation"]
     end
 
     subgraph ATTACK_VECTORS["⚔️ Primary Attack Vectors"]
-        CONTENT_POISON[💉 Content Poisoning]
-        SUPPLY_CHAIN[🔗 Supply Chain Attack]
-        CLIENT_EXPLOIT[💻 Client-Side Exploitation]
-        CULTURAL_ATTACK[🏛️ Cultural Misrepresentation]
-        DOMAIN_HIJACK[🌐 Domain Hijacking]
-        SESSION_ATTACK[👤 Session Manipulation]
+        CONTENT_POISON["💉 Content Poisoning"]
+        SUPPLY_CHAIN["🔗 Supply Chain Attack"]
+        CLIENT_EXPLOIT["💻 Client-Side Exploitation"]
+        CULTURAL_ATTACK["🏛️ Cultural Misrepresentation"]
+        DOMAIN_HIJACK["🌐 Domain Hijacking"]
+        SESSION_ATTACK["👤 Session Manipulation"]
     end
 
     subgraph THREAT_AGENTS["👥 Key Threat Agents"]
-        SCRIPT_KIDDIES[🐛 Script Kiddies<br/>Simple Web Exploits]
-        CULTURAL_TROLLS[🎭 Cultural Trolls<br/>Offensive Content Injection]
-        MALWARE_DISTRIBUTORS[🦠 Malware Distributors<br/>Browser Exploitation]
-        COMPETITOR_SABOTAGE[🏢 Competitor Sabotage<br/>Platform Disruption]
-        NATION_STATE[🏛️ Nation-State Actors<br/>Cultural/Political Agenda]
-        CRIMINAL_GROUPS[💰 Cybercriminal Groups<br/>Monetization/Disruption]
+        SCRIPT_KIDDIES["🐛 Script Kiddies<br/>Simple Web Exploits"]
+        CULTURAL_TROLLS["🎭 Cultural Trolls<br/>Offensive Content Injection"]
+        MALWARE_DISTRIBUTORS["🦠 Malware Distributors<br/>Browser Exploitation"]
+        COMPETITOR_SABOTAGE["🏢 Competitor Sabotage<br/>Platform Disruption"]
+        NATION_STATE["🏛️ Nation-State Actors<br/>Cultural/Political Agenda"]
+        CRIMINAL_GROUPS["💰 Cybercriminal Groups<br/>Monetization/Disruption"]
     end
 
     CONTENT_POISON --> EDUCATIONAL
@@ -221,35 +221,35 @@ Following [Architecture-Centric Threat Modeling](https://github.com/Hack23/ISMS-
 }%%
 flowchart TB
     subgraph TRUST_BOUNDARY_1["🌐 Internet Trust Boundary"]
-        USER[👤 Player/Learner]
-        ATTACKER[🎭 Potential Attacker]
+        USER["👤 Player/Learner"]
+        ATTACKER["🎭 Potential Attacker"]
     end
 
     subgraph TRUST_BOUNDARY_2["📦 CDN Trust Boundary"]
-        STATIC_CDN[📄 Static Asset CDN]
-        AUDIO_CDN[🎵 Audio Asset CDN]
-        APP_CDN[🌐 Application CDN]
+        STATIC_CDN["📄 Static Asset CDN"]
+        AUDIO_CDN["🎵 Audio Asset CDN"]
+        APP_CDN["🌐 Application CDN"]
     end
 
     subgraph TRUST_BOUNDARY_3["🖥️ Browser Trust Boundary"]
-        BROWSER[🌐 Web Browser]
-        REACT_APP[⚛️ React Application]
-        THREE_RENDERER[🎨 Three.js Renderer]
-        AUDIO_ENGINE[🎵 Audio Engine]
-        LOCAL_STORAGE[💾 Browser Storage]
+        BROWSER["🌐 Web Browser"]
+        REACT_APP["⚛️ React Application"]
+        THREE_RENDERER["🎨 Three.js Renderer"]
+        AUDIO_ENGINE["🎵 Audio Engine"]
+        LOCAL_STORAGE["💾 Browser Storage"]
     end
 
     subgraph TRUST_BOUNDARY_4["🏗️ Build Trust Boundary"]
-        GITHUB[📦 GitHub Repository]
-        CI_CD[🔧 GitHub Actions]
-        DEPENDENCIES[📚 NPM Dependencies]
-        ATTESTATIONS[🔏 SLSA Attestations]
+        GITHUB["📦 GitHub Repository"]
+        CI_CD["🔧 GitHub Actions"]
+        DEPENDENCIES["📚 NPM Dependencies"]
+        ATTESTATIONS["🔏 SLSA Attestations"]
     end
 
     subgraph TRUST_BOUNDARY_5["🌐 Domain Trust Boundary"]
-        DNS[🌍 DNS Resolution]
-        DOMAIN[🏷️ blacktrigram.com]
-        TLS[🔒 TLS Certificate]
+        DNS["🌍 DNS Resolution"]
+        DOMAIN["🏷️ blacktrigram.com"]
+        TLS["🔒 TLS Certificate"]
     end
 
     USER -->|🎯 T1: Malicious Input| BROWSER
@@ -332,53 +332,53 @@ Following [MITRE ATT&CK-Driven Analysis](https://github.com/Hack23/ISMS-PUBLIC/b
   }
 }%%
 flowchart TD
-    GOAL[🎯 Compromise Black Trigram<br/>Educational Gaming Platform]
-
-    GOAL --> PATH1[🚪 External Web Attack]
-    GOAL --> PATH2[🔒 Client-Side Abuse]
-    GOAL --> PATH3[🔗 Supply Chain Compromise]
-    GOAL --> PATH4[🌐 Infrastructure Attack]
-    GOAL --> PATH5[🏛️ Cultural/Social Attack]
-
-    PATH1 --> EXT1[🌐 Web Application Exploit]
-    PATH1 --> EXT2[🔌 CDN/Asset Abuse]
-    PATH1 --> EXT3[📧 Social Engineering]
-
-    EXT1 --> EXT1A[🔍 XSS/CSRF Attack]
-    EXT1 --> EXT1B[💉 Content Injection]
-    EXT1A --> EXT1A1[🎯 Session Hijacking]
-    EXT1B --> EXT1B1[📊 Data Corruption]
-
-    EXT2 --> EXT2A[📦 Malicious Asset Injection]
-    EXT2 --> EXT2B[🎵 Audio Content Tampering]
-    EXT2A --> EXT2A1[🦠 Malware Distribution]
-    EXT2B --> EXT2B1[🎭 Cultural Offensive Content]
-
-    PATH2 --> CLI1[🖥️ Browser Exploitation]
-    PATH2 --> CLI2[👤 User Session Abuse]
-    CLI1 --> CLI1A[🎨 WebGL/Canvas Attack]
-    CLI1 --> CLI1B[🔊 Audio System Exploit]
-    CLI2 --> CLI2A[💾 Storage Manipulation]
-    CLI2 --> CLI2B[🎮 Gameplay Disruption]
-
-    PATH3 --> SUP1[📚 NPM Dependency Attack]
-    PATH3 --> SUP2[🔧 Build Pipeline Compromise]
-    SUP1 --> SUP1A[🦠 Malicious Package Injection]
-    SUP2 --> SUP2A[🏗️ CI/CD Tampering]
-
-    PATH4 --> INF1[🌐 DNS/Domain Attack]
-    PATH4 --> INF2[📦 CDN Infrastructure]
-    INF1 --> INF1A[🏷️ Domain Hijacking]
-    INF1 --> INF1B[🌍 DNS Poisoning]
-    INF2 --> INF2A[📄 Asset Tampering]
-    INF2 --> INF2B[🔒 CDN Compromise]
-
-    PATH5 --> CUL1[🇰🇷 Cultural Misrepresentation]
-    PATH5 --> CUL2[🎭 Community Manipulation]
-    CUL1 --> CUL1A[🏛️ Offensive Content Injection]
-    CUL1 --> CUL1B[📚 Educational Misinformation]
-    CUL2 --> CUL2A[👥 Social Media Campaign]
-    CUL2 --> CUL2B[🗣️ Reputation Attack]
+    GOAL["🎯 Compromise Black Trigram<br/>Educational Gaming Platform"]
+
+    GOAL --> PATH1["🚪 External Web Attack"]
+    GOAL --> PATH2["🔒 Client-Side Abuse"]
+    GOAL --> PATH3["🔗 Supply Chain Compromise"]
+    GOAL --> PATH4["🌐 Infrastructure Attack"]
+    GOAL --> PATH5["🏛️ Cultural/Social Attack"]
+
+    PATH1 --> EXT1["🌐 Web Application Exploit"]
+    PATH1 --> EXT2["🔌 CDN/Asset Abuse"]
+    PATH1 --> EXT3["📧 Social Engineering"]
+
+    EXT1 --> EXT1A["🔍 XSS/CSRF Attack"]
+    EXT1 --> EXT1B["💉 Content Injection"]
+    EXT1A --> EXT1A1["🎯 Session Hijacking"]
+    EXT1B --> EXT1B1["📊 Data Corruption"]
+
+    EXT2 --> EXT2A["📦 Malicious Asset Injection"]
+    EXT2 --> EXT2B["🎵 Audio Content Tampering"]
+    EXT2A --> EXT2A1["🦠 Malware Distribution"]
+    EXT2B --> EXT2B1["🎭 Cultural Offensive Content"]
+
+    PATH2 --> CLI1["🖥️ Browser Exploitation"]
+    PATH2 --> CLI2["👤 User Session Abuse"]
+    CLI1 --> CLI1A["🎨 WebGL/Canvas Attack"]
+    CLI1 --> CLI1B["🔊 Audio System Exploit"]
+    CLI2 --> CLI2A["💾 Storage Manipulation"]
+    CLI2 --> CLI2B["🎮 Gameplay Disruption"]
+
+    PATH3 --> SUP1["📚 NPM Dependency Attack"]
+    PATH3 --> SUP2["🔧 Build Pipeline Compromise"]
+    SUP1 --> SUP1A["🦠 Malicious Package Injection"]
+    SUP2 --> SUP2A["🏗️ CI/CD Tampering"]
+
+    PATH4 --> INF1["🌐 DNS/Domain Attack"]
+    PATH4 --> INF2["📦 CDN Infrastructure"]
+    INF1 --> INF1A["🏷️ Domain Hijacking"]
+    INF1 --> INF1B["🌍 DNS Poisoning"]
+    INF2 --> INF2A["📄 Asset Tampering"]
+    INF2 --> INF2B["🔒 CDN Compromise"]
+
+    PATH5 --> CUL1["🇰🇷 Cultural Misrepresentation"]
+    PATH5 --> CUL2["🎭 Community Manipulation"]
+    CUL1 --> CUL1A["🏛️ Offensive Content Injection"]
+    CUL1 --> CUL1B["📚 Educational Misinformation"]
+    CUL2 --> CUL2A["👥 Social Media Campaign"]
+    CUL2 --> CUL2B["🗣️ Reputation Attack"]
 
     style GOAL fill:#d32f2f,color:#fff
     style PATH1 fill:#ff5722,color:#fff
@@ -522,36 +522,36 @@ Aligned with [Security Architecture](SECURITY_ARCHITECTURE.md) implementation:
 }%%
 flowchart TB
     subgraph PERIMETER["🌐 Perimeter Security"]
-        HTTPS[🔐 HTTPS Enforcement]
-        CDN[📦 CDN Security]
-        SRI[🔒 Subresource Integrity]
+        HTTPS["🔐 HTTPS Enforcement"]
+        CDN["📦 CDN Security"]
+        SRI["🔒 Subresource Integrity"]
     end
 
     subgraph APPLICATION["📱 Application Security"]
-        CSP[🛡️ Content Security Policy]
-        REACT[⚛️ React Security Patterns]
-        INPUT[✅ Input Validation]
-        THREE[🎨 Three.js Security Context]
+        CSP["🛡️ Content Security Policy"]
+        REACT["⚛️ React Security Patterns"]
+        INPUT["✅ Input Validation"]
+        THREE["🎨 Three.js Security Context"]
     end
 
     subgraph BROWSER["🖥️ Browser Security"]
-        STORAGE[💾 Session-Only Storage]
-        PERMISSIONS[🔑 API Permissions]
-        SANDBOX[📦 Browser Sandbox]
-        CORS[🌐 CORS Policy]
+        STORAGE["💾 Session-Only Storage"]
+        PERMISSIONS["🔑 API Permissions"]
+        SANDBOX["📦 Browser Sandbox"]
+        CORS["🌐 CORS Policy"]
     end
 
     subgraph PIPELINE["🏗️ Build Security"]
-        DEPS[📚 Dependency Scanning]
-        SLSA[🔏 SLSA Attestations]
-        SAST[🔍 Static Analysis]
-        SBOM[📋 Software Bill of Materials]
+        DEPS["📚 Dependency Scanning"]
+        SLSA["🔏 SLSA Attestations"]
+        SAST["🔍 Static Analysis"]
+        SBOM["📋 Software Bill of Materials"]
     end
 
     subgraph MONITORING["📊 Security Monitoring"]
-        PERFORMANCE[📈 Performance Monitoring]
-        ERRORS[🚨 Error Tracking]
-        INTEGRITY[🔍 Content Integrity]
+        PERFORMANCE["📈 Performance Monitoring"]
+        ERRORS["🚨 Error Tracking"]
+        INTEGRITY["🔍 Content Integrity"]
     end
 
     HTTPS --> CSP
@@ -619,24 +619,24 @@ Following cultural authenticity requirements from [CRA Assessment](CRA-ASSESSMEN
 }%%
 flowchart TD
     subgraph EDUCATIONAL_THREATS["🎓 Educational Integrity Threats"]
-        MISINFORMATION[📚 Misinformation Injection]
-        CULTURAL_BIAS[🏛️ Cultural Bias Introduction]
-        TECHNIQUE_DANGER[⚠️ Dangerous Technique Promotion]
-        HISTORICAL_FALSIFICATION[📜 Historical Falsification]
+        MISINFORMATION["📚 Misinformation Injection"]
+        CULTURAL_BIAS["🏛️ Cultural Bias Introduction"]
+        TECHNIQUE_DANGER["⚠️ Dangerous Technique Promotion"]
+        HISTORICAL_FALSIFICATION["📜 Historical Falsification"]
     end
 
     subgraph ATTACK_METHODS["⚔️ Attack Methods"]
-        CONTENT_INJECTION[💉 Content Injection]
-        GRADUAL_CORRUPTION[🔄 Gradual Content Corruption]
-        SOCIAL_ENGINEERING[🎭 Social Engineering]
-        INSIDER_MODIFICATION[👤 Insider Content Modification]
+        CONTENT_INJECTION["💉 Content Injection"]
+        GRADUAL_CORRUPTION["🔄 Gradual Content Corruption"]
+        SOCIAL_ENGINEERING["🎭 Social Engineering"]
+        INSIDER_MODIFICATION["👤 Insider Content Modification"]
     end
 
     subgraph CULTURAL_IMPACTS["🇰🇷 Cultural Impacts"]
-        STEREOTYPE_REINFORCEMENT[📺 Stereotype Reinforcement]
-        CULTURAL_APPROPRIATION[🎭 Cultural Appropriation]
-        DISRESPECTFUL_PORTRAYAL[😠 Disrespectful Portrayal]
-        EDUCATIONAL_HARM[🎓 Educational Harm]
+        STEREOTYPE_REINFORCEMENT["📺 Stereotype Reinforcement"]
+        CULTURAL_APPROPRIATION["🎭 Cultural Appropriation"]
+        DISRESPECTFUL_PORTRAYAL["😠 Disrespectful Portrayal"]
+        EDUCATIONAL_HARM["🎓 Educational Harm"]
     end
 
     MISINFORMATION --> CONTENT_INJECTION
@@ -680,27 +680,27 @@ Following frontend-only architecture from [Architecture](ARCHITECTURE.md):
 }%%
 flowchart LR
     subgraph DEVELOPMENT["🔧 Development Phase"]
-        CODE[💻 Source Code]
-        ASSETS[📦 Static Assets]
-        DEPS[📚 Dependencies]
+        CODE["💻 Source Code"]
+        ASSETS["📦 Static Assets"]
+        DEPS["📚 Dependencies"]
     end
 
     subgraph BUILD["🏗️ Build Phase"]
-        SCAN[🔍 Security Scanning]
-        BUNDLE[📦 Asset Bundling]
-        HASH[🔐 Integrity Hashing]
-        SIGN[✍️ Asset Signing]
+        SCAN["🔍 Security Scanning"]
+        BUNDLE["📦 Asset Bundling"]
+        HASH["🔐 Integrity Hashing"]
+        SIGN["✍️ Asset Signing"]
     end
 
     subgraph DEPLOYMENT["🚀 Deployment Phase"]
-        CDN_UPLOAD[📤 CDN Upload]
-        SRI_GEN[🔒 SRI Generation]
-        CSP_CONFIG[🛡️ CSP Configuration]
+        CDN_UPLOAD["📤 CDN Upload"]
+        SRI_GEN["🔒 SRI Generation"]
+        CSP_CONFIG["🛡️ CSP Configuration"]
     end
 
     subgraph RUNTIME["⚡ Runtime Phase"]
-        BROWSER[🌐 Browser Load]
-        VALIDATE[✅ Integrity Check]
+        BROWSER["🌐 Browser Load"]
+        VALIDATE["✅ Integrity Check"]
         EXECUTE[▶️ Safe Execution]
     end
 
@@ -944,7 +944,7 @@ Following [Hack23 AB Threat Modeling Policy — AI-Enabled Threats](https://gith
 ```mermaid
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 flowchart TD
-    A[🤖 AI Threat Detection] --> B{Threat Category}
+    A["🤖 AI Threat Detection"] --> B{Threat Category}
     B -->|Content Manipulation| C[Cultural Review Gate]
     B -->|Supply Chain| D[SBOM + SRI Validation]
     B -->|Social Engineering| E[Contributor Verification]
@@ -953,7 +953,7 @@ flowchart TD
     D --> H[SLSA Provenance + Lockfile Audit]
     E --> I[Signed Commits + Code Review]
     F --> J[Rate Limiting + Shield Standard]
-    G --> K[✅ Safe to Deploy]
+    G --> K["✅ Safe to Deploy"]
     H --> K
     I --> K
     J --> K
@@ -982,10 +982,10 @@ Following [Hack23 AB Threat Modeling Policy — Maturity Framework](https://gith
 ```mermaid
 %%{init: {'theme':'base', 'themeVariables': {'primaryColor':'#2979FF','primaryTextColor':'#fff','primaryBorderColor':'#0D47A1','lineColor':'#00C853','secondaryColor':'#FFD600','tertiaryColor':'#FF3D00'}}}%%
 graph LR
-    L1[Level 1<br/>Ad-hoc<br/>✅ Done] --> L2[Level 2<br/>Repeatable<br/>✅ Done]
-    L2 --> L3[Level 3<br/>Defined<br/>✅ Current]
-    L3 --> L4[Level 4<br/>Managed<br/>🎯 2026]
-    L4 --> L5[Level 5<br/>Optimizing<br/>🔮 2027+]
+    L1["Level 1<br/>Ad-hoc<br/>✅ Done"] --> L2["Level 2<br/>Repeatable<br/>✅ Done"]
+    L2 --> L3["Level 3<br/>Defined<br/>✅ Current"]
+    L3 --> L4["Level 4<br/>Managed<br/>🎯 2026"]
+    L4 --> L5["Level 5<br/>Optimizing<br/>🔮 2027+"]
     style L1 fill:#4CAF50,color:#fff
     style L2 fill:#4CAF50,color:#fff
     style L3 fill:#2196F3,color:#fff

package/lib/components/screens/intro/IntroScreen3D.js

@@ -21,7 +21,7 @@ import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";
 import { Canvas } from "@react-three/fiber";
 //#region src/components/screens/intro/IntroScreen3D.tsx
-var APP_VERSION = "0.7.52";
+var APP_VERSION = "0.7.54";
 var MENU_ITEMS = [
 	{
 		mode: GameMode.VERSUS,

package/lib/components/shared/ui/SplashScreen.js

@@ -183,7 +183,7 @@ var SplashScreen = ({ onStart, width, height }) => {
 			}),
 			/* @__PURE__ */ jsxs("div", {
 				role: "contentinfo",
-				"aria-label": `Application version 0.7.52`,
+				"aria-label": `Application version 0.7.54`,
 				style: {
 					position: "absolute",
 					bottom: "20px",
@@ -192,7 +192,7 @@ var SplashScreen = ({ onStart, width, height }) => {
 					fontSize: "10px",
 					zIndex: 1
 				},
-				children: ["v", "0.7.52"]
+				children: ["v", "0.7.54"]
 			})
 		]
 	});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blacktrigram",
-  "version": "0.7.52",
+  "version": "0.7.54",
   "description": "Black Trigram (흑괘) - Korean Martial Arts Combat Simulator. Reusable game systems, combat mechanics, animation framework, and Korean martial arts data built with React, Three.js, and TypeScript.",
   "type": "module",
   "main": "./lib/index.js",
@@ -141,6 +141,7 @@
     "find:unused": "npm run knip",
     "test:licenses": "license-compliance --direct --allow 'MIT;ISC;0BSD;BSD-2-Clause;BSD-3-Clause;Apache-2.0;Unlicense;CC0-1.0'",
     "validate:mcp": "bash scripts/validate-mcp-config.sh",
+    "validate:mermaid": "node scripts/validate-mermaid.mjs",
     "docs": "typedoc --options typedoc.json",
     "docs:sitemap": "node generate-sitemaps.js",
     "build:test-reports": "node scripts/copy-test-reports.js",
@@ -187,7 +188,7 @@
     "three": "0.184.0"
   },
   "devDependencies": {
-    "@aws-sdk/client-bedrock-runtime": "3.1051.0",
+    "@aws-sdk/client-bedrock-runtime": "3.1054.0",
     "@eslint/js": "10.0.1",
     "@react-three/drei": "10.7.7",
     "@react-three/fiber": "9.6.1",
@@ -203,11 +204,11 @@
     "@vitejs/plugin-react": "6.0.2",
     "@vitest/coverage-v8": "4.1.7",
     "@vitest/ui": "4.1.7",
-    "cypress": "15.15.0",
+    "cypress": "15.16.0",
     "cypress-junit-reporter": "1.3.1",
     "cypress-multi-reporters": "2.0.5",
     "cypress-wait-until": "3.0.2",
-    "dependency-cruiser": "17.4.0",
+    "dependency-cruiser": "17.4.2",
     "dotenv": "17.4.2",
     "eslint": "10.4.0",
     "eslint-plugin-react-hooks": "7.1.1",
@@ -215,13 +216,14 @@
     "globals": "17.6.0",
     "jest-axe": "10.0.0",
     "jsdom": "29.1.1",
-    "knip": "6.14.1",
+    "knip": "6.14.2",
     "license-compliance": "3.0.1",
+    "mermaid": "11.15.0",
     "mocha-junit-reporter": "2.2.1",
     "mochawesome": "7.1.4",
     "mochawesome-merge": "5.1.1",
     "mochawesome-report-generator": "6.3.2",
-    "openai": "6.38.0",
+    "openai": "6.39.0",
     "playwright": "1.60.0",
     "postprocessing": "6.39.1",
     "react": "19.2.6",
@@ -237,7 +239,7 @@
     "typedoc-plugin-mermaid": "1.12.0",
     "typedoc-plugin-missing-exports": "4.1.3",
     "typescript": "6.0.3",
-    "typescript-eslint": "8.59.4",
+    "typescript-eslint": "8.60.0",
     "vite": "8.0.14",
     "vite-bundle-analyzer": "1.3.8",
     "vite-tsconfig-paths": "6.1.1",