SourceCore now has an approved public/private host split: a public player-facing site, a private DM app, and a root domain that becomes the actual front door instead of a public sign pointing at a raw app hostname like some kind of goblin DevOps incident.
Intended hostname: player.sourcecorerpg.com. This is the shareable, spoiler-safe recap and chronicle surface. It is static-first, patch-friendly, and deliberately separated from private DM data.
Intended hostname: dm.sourcecorerpg.com. This remains the Campaign Manager Worker and should be protected with Cloudflare Access. The public site exists specifically so you do not have to hand out this app URL.
Intended hostname: sourcecorerpg.com. This becomes the umbrella launcher, brand site, download hub, and future entry point for additional campaign instances built from the same architecture.
workers.dev hostname is no longer the approved public launch surface. Use custom domains once attached, and keep the DM app behind authentication.