PLOT LUCKPlot Luck publishes public beta notes so testers and reviewers can see the work behind the map instead of having to infer it from a version number.
The Las Vegas map now contains ten physical Easter eggs tied to real places and stories: Springs Preserve, Old Las Vegas Mormon Fort, Harrison Guest House, Moulin Rouge, Golden Gate’s shrimp cocktail, Tupac at Flamingo/Koval, Gilbert Hyatt’s microprocessor-patent story, Mike Tyson/Tiger Mansion, the Welcome sign and Vegas Vic. Physical interaction uses trusted live Real GPS rather than Ghost, Active or cached location data.
The source notes behind those discoveries are now published as a crawlable Las Vegas Stories collection. Each entry explains the history, why it belongs in the map, responsible-location boundaries and links to official institutions or established reporting. No account or GPS permission is required to read the pages.
Las Vegas physical discoveries were standardized to a smaller Upgrade Token reward while preserving the stricter physical-visit gate. The location-agnostic Duck Song Easter egg remains a separate system.
The global auth/session listener was kept out of the explicit Create Account and Sign In takeover window so a legitimate foreground registration flow is not signed out while its profile is still being created. Active-device ownership lives in the private UID-scoped user record rather than the public gameplay profile.
Several recurring Firebase paths were removed or bounded. Returning players can reuse server-confirmed display snapshots, broad collection reads are not allowed on ordinary timers, and background/hidden sessions target zero recurring network work. Economy mutations remain server-authoritative at meaningful actions instead of every display tick.
A cross-token throttle that could reject legitimate rapid movement was removed while preserving per-token exactly-once cooldown authority. Mobile reward presentation was also tightened so actionable Dig and item rewards remain visible on compact phone screens.
Travel-trail rendering was isolated from the high-frequency live GPS marker, trail redraws were double-buffered, endpoint visuals were throttled and nearby grid chunks were cached/preloaded. The goal was to reduce flashing, unnecessary redraw work and device heat without changing location authority.
The Android Trusted Web Activity path was stabilized around the existing website and Firebase account. Testing specifically checks that delegated watchPosition() continues producing repeated movement updates rather than succeeding only on the first location fix.
Private profile information was separated from publicly readable game identity data. Plot ownership writes were restricted to the owning Firebase UID, and unknown Firestore collections remain denied by default.
Plot Luck can rebalance or retire experimental features as testing continues. Security, location trust and account ownership rules take priority over preserving a prototype behavior.