[squad:plan] Lattice Hollow — Security & Data Privacy Review: "Quiet Vault" (Kujan)
- Dominant language
- Go
- Stars
- 5.1k
- Forks
- 541
- Avg merge
- 5h 48m
- Merged PRs (30d)
- 773
Description
**Owner:** Kujan — Security Engineer
Part of the Lattice Hollow plan (#58481).
Goals:
- Review the demo's data handling and shipping posture, even for a low-risk single-player game.
- Deliverables: inventory of stored data, save-file review, third-party dependency check, telemetry decision record.
- Guidance on minimizing local data collection and avoiding unnecessary network behavior.
- Risk review for crash logs, user identifiers, and build distribution artifacts.
Depends on #58479 packaging approach.
Contributor guide
Research direction
Read the Lattice Hollow plan in #58481 and the packaging approach in #58479 first. Review the demo's stored data, save files, third-party dependencies, telemetry, crash logs, user identifiers, and distribution artifacts. Done means delivering the listed inventory, save-file and dependency reviews, telemetry decision record, and guidance on minimizing local data and network behavior.
Written by the indexing model from the issue text.
Assessment
- Domain
- security
- Issue type
- Documentation
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100