Only allow legal moves. Remove bootstrap from repo, add it to composer.json.