Scores the browser can't fake
Every answer is re-checked on the server. Patterns are capped at 64 characters and each match has 25 ms, so a pathological regex can't stall the server. A translator keeps JavaScript's regex rules on the Python side, so the board and the server always agree.

