Channel Flip loads a user-mode audio processing DLL into the Windows audio host after an explicit first-run confirmation and administrator approval. The current core is not WHQL certified. Its unsigned setup uses DisableProtectedAudioDG=1, affecting the system-wide protected audio path until the setting is restored.

The installed DLL and recovery metadata are stored in administrator-controlled locations. The shared state file allows local users to toggle processing; it is not a place for executable code or arbitrary DSP configuration. The callback validates its fixed layout and uses bounded audio buffers.

The application does not record or upload audio. Diagnostic reports contain local device names and endpoint IDs, so review them before posting publicly.

Elevated setup, removal and service restart share a machine-wide mutex accessible to Administrators and SYSTEM. Pending permission journals are recovered before the next operation reads or changes audio configuration. Original owner, group, DACL and transaction phases are flushed to an administrator-controlled registry journal before permissions are borrowed. Recovery refuses an unexpected security descriptor and retains its evidence. A conflicting entry needs administrator investigation; deleting the journal is not a recovery procedure. Registry-value backups remain separate and preserve external value edits.

The gate serializes Channel Flip operations; another administrator or service can still change the registry independently. Descriptor checks detect observed conflicts, but Windows registry APIs do not provide an atomic compare-and-set operation combining another process's ACL changes with ours.

For reports involving code execution, privilege boundaries, unsafe registry permissions, or failed restoration, use GitHub's private vulnerability reporting when available on the repository security page. If that option is unavailable, open an issue requesting a private contact without including exploit details or private logs.