Push some logic server-side.
Tweak indexes.
First pass at checks and reveals.