docs: define Autodesk launcher next architecture

2026-07-31 14:30:19 +03:00
parent 36178374db
commit 1127a8376f
30 changed files with 298 additions and 0 deletions
@@ -0,0 +1,9 @@
+# Target security model
+
+- Load managed assemblies only from validated local version directories, never directly from UNC.
+- Hash every packaged file with SHA-256 before activation.
+- Validate package paths against traversal and package-root escape.
+- Forbid Autodesk runtime DLLs in packages.
+- Detect Autodesk installations through a read-only registry abstraction with configuration override for diagnostics.
+- Do not change `TRUSTEDPATHS`, registry, profiles or production deployment without explicit approval.
+- Keep credentials/secrets out of source, manifests and telemetry.