[Exmeaning]

Summary

• Remove the public spoiler override and add release-time checks to public content surfaces.
• Harden story and Live2D playback with region-specific MasterData authorization, same-origin proxies, and manifest-listed resource allowlists; cloud index presence alone does not authorize content.
• Filter character voice payloads and add regression coverage for direct IDs, unknown or unreleased models/stories, and runtime asset paths.
• Apply checks to search, detail/metadata, Markdown, and static-route data paths touched by this audit.

Validation

• Full test suite: 1,037 passed, 1 skipped, 0 failed.
• Typecheck: passed.
• Lint: passed; non-core locales report existing fallback-key warnings.

Remaining caveats

The application proxy cannot prevent direct requests to files already published on a public upstream bucket/CDN. Fully preventing pre-release distribution requires the upstream publisher to withhold those files or restrict access until each region's official in-game release. The broader audit of shop/exchange and remaining schedule surfaces is still in progress.