[epcoa]

> and/or preempt them from implementing subtle logic bugs that only show up much later.

Validating a submitted move is distinct from listing valid moves. I assumed the server would need to validate regardless of providing a list to the client.

[perihelions]

It's still duplicated work, and clients are likely to get it wrong and create more work for both devs.