Files
NotAlterra/docs/AUDIT.md
T

55 lines
1.8 KiB
Markdown

# Security Audit
**Project:** NotAlterra (Subnautica 2 save-file manager)
**Date:** 2026-06-01
**Scope:** Full source code — `src/`, `examples/`, build pipeline
## Summary
No malicious or exploitable behavior detected. NotAlterra is an offline
terminal application with no network access, no unsafe code, and
no data exfiltration surface.
## Audit Results
| Category | Finding |
|---|---|
| `unsafe` blocks | None |
| Network (sockets, HTTP, TLS) | None — zero network dependencies |
| Process spawning | `guard.rs` (tasklist / pgrep) — dormant, not called |
| Dynamic loading | None |
| `include_bytes!` / obfuscation | None |
| Thread spawning | Whale animation only — benign |
## Process Guard
`guard.rs` contains code to detect a running Subnautica 2 instance via
`tasklist` (Windows) and `pgrep` (Linux). This code is **dormant**
`check_game_not_running()` is never called from `main.rs`.
The intent is to prevent accidental save corruption by warning the user
if the game is running during backup or recovery operations.
This feature may be re-introduced in a future release provided it does not trigger false positives or interfere with normal system operation.
## File I/O
All file writes are confined to declared paths:
- `config.ini` — save-path cache, scan timestamp, disclaimer flag
- `NotAlterra_Backups/` — backup archives
- `transaction.log` — timestamped action log
No writes outside these directories. No reads beyond the Subnautica 2
Saved folder tree.
## Dependencies
No dependency introduces network access or code execution risks. Full
dependency tree is pinned via `Cargo.lock`.
## Conclusion
NotAlterra is safe to use. It operates entirely within the user's
local filesystem and performs only the save-management operations it
declares.