ms-private/docs/STATUS.md

Delivery status — 2026-09-18

Update architecture supplement completed 2026-09-19: local OS inventory and offline bundle verification are implemented in Offline-Updates.ps1 and src/Wind.OfflineUpdates.psm1. Nineteen new tests passed in PowerShell 7 and Windows PowerShell 5.1. Real host inventory returned only OS version/edition/architecture. No real package download, authenticity validation, applicability scan, installation or network isolation was performed. The register now contains 85 controls/decisions, 21 identifier/data-channel entries, 19 tool/research entries, 20 claims, 24 remaining tasks, 12 supplied-script findings and a separate update-maintenance sheet. See docs/OFFLINE-UPDATES.md and docs/ADDITIONAL-CHANNELS.md.

A sourced blog draft and pinned-revision GDID research review are included. Workbook formulas were recalculated and tested with temporary status edits, then restored; rendered sheets and exported structure were inspected. No Excel desktop execution was performed.

The supplied script was parsed without execution. Three isolated in-memory probes reproduced its marker mismatch, malformed-marker truncation and ASCII conversion defect. No new OS policy, service, hosts-file, cache, firewall or application mutation was performed. The added repositories remain research leads, not independently validated identifier suppression.

Delivered

• Research and threat model with primary sources, implementation plan and release validation protocol.
• Three browser choices: Tor Browser, Zen and Helium; optional Mullvad and VeraCrypt installers.
• Local PowerShell policy engine: read-only audit, plan, explicit apply, recovery journal and conflict-aware restore.
• Home edition manual guide; no unsupported policy enforcement claims.

Verification performed

• 23 transaction/recovery tests passed in PowerShell 7.6.5.
• The same 23 tests passed in Windows PowerShell 5.1.
• Real journal create/atomic-replace/parse test passed using workspace files.
• All PowerShell source files parsed successfully during verification.
• Real read-only audit on this Windows Home (Core) build 26200 reported all 10 Standard profile controls as unsupported for automatic policy enforcement.
• Installer previews used -WhatIf; no package installation occurred.
• Live operating-system policy mutation, app uninstallation, firewall changes and telemetry suppression were not performed or claimed.

Compatibility testing found and corrected PowerShell 5.1 array enumeration differences and null-path behavior in journal replacement. Mock registry tests do not prove operating-system enforcement, privacy guarantees or absence of network traffic.

Remaining release work

The full wizard is not complete. VM policy behavior tests, physical sensor checks, measured network enforcement, GUI/AME packaging, data-preserving debloating, cleanup automation and lock-event integration are still pending as detailed in PLAN.md. No broad deployment or anonymity certification is implied by the prototype.