Skip to content

Security: Outer-Void/void.game

docs/security.md

Security Model

VOID.GAME is a proprietary AXIOM module. It is protected by a launch contract and runtime module signature gate, but no software protection should be described as hack-proof.

Release behavior fails closed unless a valid AXIOM launch payload and valid module signature are present. Debug builds may bypass only through BuildConfig.DEBUG for development.

Runtime signature path: filesDir/signatures/voidgame.sig.

The full cryptographic verification path and server-side signing are TODOs. Private keys must never be stored in the repo or APK.

There aren't any published security advisories