autodesk/architecture/autodesk-launcher/as-is/security-model.md

AS-IS security model

Legacy code writes local support files and uses generated LISP plus NETLOAD. It relies on the corporate local trusted support convention, but this audit did not change or verify TRUSTEDPATHS, profiles, registry demand loading, or deployment permissions. Network source access occurs during installation/update. The audit does not establish code signing, strong validation, complete hash coverage, or secret handling. Treat all of those as gaps.