Confirmed scope

A live competitive platform built around authoritative state.

Kwaarena is a real-time competitive platform with gameplay, practice modes and tournament experiences. Lawrence's implementation scope covers React, Vite and TypeScript on the client and Express, Supabase/PostgreSQL and WebSockets across the application stack.

Evidence boundary: this technical case study describes confirmed scope, observed product behaviour and intentionally sanitized patterns. It does not publish internal code, measured results or private operational records.

Technical problem

Keeping a shared game state fair when clients are not in charge.

Competitive play needs one dependable interpretation of the current move, clock and tournament state, even while browsers reconnect or messages arrive out of sequence. The implementation therefore treats the server as the authority and the browser as a responsive presentation layer.

  • Game state is validated before updates are shared with connected players.
  • Reconnecting clients request the current server state instead of asserting local authority.
  • Client and server validation work together for time-bound tournament actions.
System map

Architecture and game flow

Simplified Kwaarena architecture A React client communicates over HTTPS and WebSockets with an application server, which coordinates persistent state and asynchronous application work. React / Vite Application API + WS Persistent state Async work
Simplified architecture. The server coordinates authoritative application state while connected clients receive current updates.

Sanitized interaction pattern, not literal production code:
validate action and server state -> persist canonical state -> publish the current update to connected clients.

Live product evidence

Live product overview

This controlled overview demonstrates Kwaarena's user-facing experience without exposing player information, financial records, private source code or operational infrastructure.

Selected engineering changes

Focused improvements in reliability, validation and deployment.

Kwaarena includes financial transactions and security-sensitive infrastructure. The examples below are intentionally summarized and sanitized. Private source code, payment controls, database policies and operational configuration are not publicly disclosed.

Background Worker Health Monitoring

Health checks detect stalled clock and tournament work rather than treating only an HTTP process as healthy.

Consistent Tournament Scheduling Validation

Matching frontend and server validation for registration windows prevents invalid values bypassing UI controls.

Reliable Third-Party CAPTCHA Loading

Turnstile timing diagnosis led to controlled loading, readiness checks, cleanup and token-reset handling.

Reduced Custom Security-Sensitive Code

Custom CAPTCHA lifecycle handling moved to a maintained React integration while preserving authentication behavior.

HTTPS Backend Routing During VPS Migration

Frontend API routing moved from direct server addressing to a dedicated HTTPS backend domain.

Reliability & deployment

Deliberate recovery and deployment boundaries.

The operating approach separates public routing, application execution, persistent state and asynchronous work so failures can be investigated by responsibility. Release steps are considered alongside migration and rollback needs, rather than treated as an afterthought.

Web clientHTTPS API domainReverse proxyApplication
Security & confidentiality

Evidence without exposing what should remain private.

Security-sensitive controls, transaction handling, database policies and production configuration are not included here. This keeps the case study useful to prospective collaborators without turning it into a roadmap for abuse or a disclosure of client infrastructure.

Next step

Need help stabilising a difficult product system?

Lawrence Otabongo is available for contained technical rescue and white-label delivery engagements.