TECHNICAL DETAILS FOR REVIEWERS
1) Privileged operations available to MAUS.exe --engine (closed list; any other operation name is rejected):
- Read-only: audit, single module, plan, journal, preferences, hardware inventory, drivers list, sensors, processes, memory details, DPC latency, frame-time capture (bundled PresentMon, SHA-256 checked), disk space scan of a local folder.
- Writes: (a) apply/revert fixes: the window sends only fix IDs; the engine recomputes its own plan and applies only the matching fixes, so registry targets come from the app's built-in catalog, never from the window. Targets: HKLM\SOFTWARE\Policies\Microsoft (Windows Update, Defender, Firewall, DataCollection, GameDVR...), HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System (UAC defaults), HKLM\SYSTEM\CurrentControlSet\Control (GraphicsDrivers, CI\Config, Session Manager), Start value of Windows Update services, Winlogon, AppInit_DLLs, Image File Execution Options (restore defaults only), HKCU Explorer/privacy/StartupApproved/GameBar; power scheme; visual effects (SystemParametersInfo); System Restore point. (b) Its own data: %ProgramData%\MAUS, %LocalAppData%\MAUS. (c) Optional weekly task MAUS\WeeklyAudit, only if the user enables it. (d) End a process the user selects (critical Windows processes protected; PID and start time re-read by the engine).
- Visible console windows, command lines built by the engine only: DISM /RestoreHealth + SFC; winget upgrade for IDs from the engine's own last list; winget install/uninstall of the PawnIO sensor driver (namazso.PawnIO, signed third party) only on explicit click; pnputil for the selected graphics card (instance ID from the engine's own driver list) or a backup made by MAUS.
2) Pipe: random name, FirstPipeInstance, ACL = current user only, Network denied. Each connection: client PID read with GetNamedPipeClientProcessId and compared to the window's PID, else closed. Inputs: typed JSON; IDs length-limited, no path separators or control chars; folder scan accepts only an existing local fully qualified path (no UNC or device paths). It cannot launch arbitrary commands, paths or scripts.
3) MAUS always starts without admin rights and without the engine. The UAC prompt appears only when the user clicks an action that needs admin rights (full audit, apply or undo a fix, Windows repair, driver actions, sensors through PawnIO, weekly task). Declining it cancels only that action; MAUS stays usable read-only. The engine then serves the session and exits after 15 minutes without a request or when the window closes (a later action asks again). No service is installed. No driver is installed by MAUS itself (PawnIO only through winget on user request, removable from MAUS). The optional weekly task runs MAUS.exe --scheduled-audit with highest privileges, read-only, at low priority, only from the protected package folder, and is removed by turning the option off.
Assurance: allowElevation and unvirtualizedResources will be used only for these purposes, and MAUS writes only to the locations listed above.
Support contact: alexandre00710012@gmail.com