Changelog entry
Authenticated world-scoping fixes for alliances and events APIs
2026-03-07
- Fixed authenticated alliance and public-events API reads so they now resolve world scope strictly from the signed-in nation's `worldId` instead of default-world fallback behavior.
- Added stricter auth guards so requests without an owned nation context fail with explicit reason codes rather than silently reading from another world.