Prepare ms-private 0.0.1 release candidate

docs/HOME-GUIDE.md

@@ -1,6 +1,6 @@
 # Windows Home and browser setup guide
 
-These are manual controls, not a claim that the prototype has applied them. Open Windows Settings and use the pages below. Labels vary by Windows build. Keep this guide open while configuring; the tool does not automatically open pages, install applications or alter this host.
+These are Settings-backed controls; the machine-policy engine does not pretend to enforce them on Home. Run `Home.ps1 -Page <name>` or use the graphical wizard's Home tab to open the supported Windows Settings page. Labels vary by Windows build, so verify the visible toggle and representative behavior. ms-private does not automate localized clicks or mark a setting complete merely because it opened the page.
 
 | Page / URI | Recommended choice | Verify |
 | --- | --- | --- |
@@ -19,7 +19,9 @@ These are manual controls, not a claim that the prototype has applied them. Open
 
 Also review Windows backup/settings sync, Phone Link, Widgets, online account use, notifications on the lock screen, browser location permissions and installed OEM utilities. A local Windows account reduces account coupling but is not an anonymity guarantee. Do not disable encryption or antivirus for performance/privacy presets.
 
-On eligible devices, Recall settings are under Privacy & security > Recall & snapshots. Review deletion effects before disabling by policy or removing the feature. Existing snapshot data is not backed up by Wind.
+Use `Accounts.ps1 -Mode Plan -Scope AllAppAccounts` to preview current-user Microsoft application sign-outs. Apply permanently resets the listed app packages and deletes matching stored application credentials; it does not convert or remove the Windows logon account. Existing work or school registration must be reviewed under **Settings > Accounts > Access work or school** because ms-private refuses changes on a managed device.
+
+On eligible devices, Recall settings are under Privacy & security > Recall & snapshots. Review deletion effects before disabling by policy or removing the feature. Existing snapshot data is not backed up by ms-private.
 
 ## Browser choices
 
@@ -34,7 +36,7 @@ Install only the selected browsers; none becomes the default automatically:
 ./Install-Apps.ps1 -App Tor,Zen,Helium
 ```
 
-WinGet contacts its community source and publisher download infrastructure and can produce local logs. WinGet and publisher installers have their own diagnostic/privacy settings; this installer wrapper does not override them. These installation connections are separate from Wind's offline policy engine. Verify displayed package identity/version/publisher before accepting installer prompts. WinGet manifests are community-maintained; their presence is not a security audit.
+WinGet contacts its community source and publisher download infrastructure and can produce local logs. WinGet and publisher installers have their own diagnostic/privacy settings; this installer wrapper does not override them. These installation connections are separate from ms-private's offline policy engine. Verify displayed package identity/version/publisher before accepting installer prompts. WinGet manifests are community-maintained; their presence is not a security audit.
 
 ## Mullvad and storage
 
@@ -42,4 +44,4 @@ Mullvad installation is optional: `./Install-Apps.ps1 -App Mullvad`. It needs an
 
 VeraCrypt installation is optional: `./Install-Apps.ps1 -App VeraCrypt`. Configure containers and unmount behavior within VeraCrypt. Keep system encryption and recovery keys; do not decrypt the OS as a prerequisite. Win+L does not wipe all RAM or revoke every session token.
 
-The source-backed rationale and limitations are in [RESEARCH.md](RESEARCH.md). All recommendations need practical verification on the actual Windows build and hardware.
+The source-backed rationale and limitations are in [PRIVACY.md](PRIVACY.md). Verify controls on the actual Windows build and hardware.