Risks

This page tracks the main operational and security risks for the launcher.

Security

• Account tokens must stay in the OS secret store only.
• Any change that touches auth or token handling needs a security review.

Data loss

• Avoid deleting local caches without a recovery path.
• Keep logs local and clearly label when they are pruned.

Platform compatibility

• Changes to auto-updates, signing, or packaging can break installs.
• Validate macOS notarization and Windows signing before release.

Performance

• Large downloads or log streaming can degrade the UI.
• Ensure background tasks remain cancellable and visible.

Operations

• Backend outages should surface clear user-facing errors.
• Graceful fallback when endpoints are unavailable.