The honest numbers
Teacher agreement (holdout)41.0 %
vs. random player85.2 %
vs. 1-ply heuristic37.2 %
vs. 2-ply lookahead24.3 %
vs. minimax41.8 %
600 games per arm. It beats random and still loses to a
three-line heuristic — that gap is the point of the project.
How this is hosted
The game is a session-scoped server on CPU: every visitor gets
an opaque HttpOnly cookie and their own board.
Nothing is shared between visitors.
Security headers are set by the app itself, and the public
deployment is checked by a script that runs against the
deployed process over HTTPS.