| 1 | // Package winaclresidue cleans up ACL residue that the retired Windows sandbox |
| 2 | // backend (v1.38.8 to v1.38.10) left on user files. That backend applied |
| 3 | // temporary deny and grant ACEs and recorded each mutation in a per-process |
| 4 | // marker under %TEMP%; a crash left both behind. This package removes only |
| 5 | // those exact trustees from paths named in markers whose owner is provably |
| 6 | // gone, and repairs the one legacy DENY RX entry on the credential store when |
| 7 | // a dead-run marker proves its origin. It never creates markers or mutates |
| 8 | // ACLs for any other reason. Non-Windows builds are no-ops. |
| 9 | package winaclresidue |
| 10 |