first commit

docs/STATUS.md

@@ -0,0 +1,30 @@
+# Delivery status — 2026-09-18
+
+Update architecture supplement completed 2026-09-19: local OS inventory and offline bundle verification are implemented in `Offline-Updates.ps1` and `src/Wind.OfflineUpdates.psm1`. Nineteen new tests passed in PowerShell 7 and Windows PowerShell 5.1. Real host inventory returned only OS version/edition/architecture. No real package download, authenticity validation, applicability scan, installation or network isolation was performed. The register now contains 85 controls/decisions, 21 identifier/data-channel entries, 19 tool/research entries, 20 claims, 24 remaining tasks, 12 supplied-script findings and a separate update-maintenance sheet. See `docs/OFFLINE-UPDATES.md` and `docs/ADDITIONAL-CHANNELS.md`.
+
+A sourced blog draft and pinned-revision GDID research review are included. Workbook formulas were recalculated and tested with temporary status edits, then restored; rendered sheets and exported structure were inspected. No Excel desktop execution was performed.
+
+The supplied script was parsed without execution. Three isolated in-memory probes reproduced its marker mismatch, malformed-marker truncation and ASCII conversion defect. No new OS policy, service, hosts-file, cache, firewall or application mutation was performed. The added repositories remain research leads, not independently validated identifier suppression.
+
+## Delivered
+
+- Research and threat model with primary sources, implementation plan and release validation protocol.
+- Three browser choices: Tor Browser, Zen and Helium; optional Mullvad and VeraCrypt installers.
+- Local PowerShell policy engine: read-only audit, plan, explicit apply, recovery journal and conflict-aware restore.
+- Home edition manual guide; no unsupported policy enforcement claims.
+
+## Verification performed
+
+- 23 transaction/recovery tests passed in PowerShell 7.6.5.
+- The same 23 tests passed in Windows PowerShell 5.1.
+- Real journal create/atomic-replace/parse test passed using workspace files.
+- All PowerShell source files parsed successfully during verification.
+- Real read-only audit on this Windows Home (`Core`) build 26200 reported all 10 Standard profile controls as unsupported for automatic policy enforcement.
+- Installer previews used `-WhatIf`; no package installation occurred.
+- Live operating-system policy mutation, app uninstallation, firewall changes and telemetry suppression were not performed or claimed.
+
+Compatibility testing found and corrected PowerShell 5.1 array enumeration differences and null-path behavior in journal replacement. Mock registry tests do not prove operating-system enforcement, privacy guarantees or absence of network traffic.
+
+## Remaining release work
+
+The full wizard is not complete. VM policy behavior tests, physical sensor checks, measured network enforcement, GUI/AME packaging, data-preserving debloating, cleanup automation and lock-event integration are still pending as detailed in [PLAN.md](PLAN.md). No broad deployment or anonymity certification is implied by the prototype.