What changed at the table each month, and how we build the AI Game Master behind it.
The October changes you can feel while you play: buttons that click, opportunity attacks, a first fight that fits on a phone, imports that lose fewer maps, and the dungeon work that is built but not switched on yet.
OWASP LLM06 calls it Excessive Agency: AI tool calls that mutate state with no reversibility. Here's how I closed the only HIGH-severity item in our security debt log with a write-ahead log, 14 per-tool revert handlers, and a 50-line Undo button.
We were sending raw PDF binary to Sonnet at $12 per adventure. Three-pass pipeline with local text extraction and Haiku dropped it to $0.075. A 153-page module. Seven cents.
Every player action hit Claude Sonnet. Ordering ale, asking about the weather, walking through a door. I fixed it with smart model routing and prompt caching. ~80% cheaper narration, same combat quality.
We needed NPCs that remember how you treated them. Here's how we did it with zero new tables, zero external dependencies, and 300 lines of code.
