Start with the player loop, then mark trust boundaries
Write the actions a player repeats, the feedback time each action needs, and who must be able to verify the outcome. Only move a state transition on-chain when shared verification, ownership, settlement, or composability justifies the signing and operating cost.
- Separate authoritative game state from public asset state.
- Name which actions require a wallet signature and why.
- Design reconnect, retry, and duplicate-action behavior.