Changelog entry
Treaty API world-scope enforcement
2026-03-13
- Updated `/api/treaties` to require an authenticated nation context and always resolve treaty reads against the signed-in nation's world.
- Requests that target a different world (by `worldId` or cross-world `allianceId`) now fail with `WORLD_SCOPE_MISMATCH` instead of returning out-of-scope treaty data.