Currently, a client could submit any number of response cards with a response, regardless of how many are required by the current call. We should put some checking around this, and refuse to take the client's submission if it's not correct.
Additionally, we don't even check that the responses are in the player's hand; once we have server-side hand tracking (#5) we should do this verification as well.
Currently, a client could submit any number of response cards with a response, regardless of how many are required by the current call. We should put some checking around this, and refuse to take the client's submission if it's not correct.