RAGOL LINK M1 · SECURITY MODEL

DISK
- Physical Xbox USB is opened GENERIC_READ only.
- No WriteFile or GENERIC_WRITE path exists in the reader.
- The USB is not mounted, formatted, repaired or modified.

SAVE
- PSO_CHARACTER must be exactly 65,536 bytes.
- PSO container/header CRC, V2 decrypt, payload CRC, signature and structural checks must pass.
- The extracted save remains on the local Windows PC.

BROWSER BRIDGE
- Temporary TCP listener binds only to 127.0.0.1.
- Random ephemeral port.
- Random 192-bit one-time token.
- CORS restricted to https://jrpg.world and https://www.jrpg.world.
- Bridge closes after browser confirmation or times out.
- JRPG.WORLD decodes the save in the browser. The raw save is not uploaded to Rico by the bridge.

WINDOWS
- Raw physical-disk reading requires Administrator access.
- The installer optionally compiles a tiny RagolLink.exe launcher locally using Windows PowerShell/.NET.
- The locally generated EXE is not code-signed and Windows may describe its publisher as Unknown.
