- self-protected Windows x64 desktop build (requires the .NET 9 Desktop Runtime)
- expanded VM return shapes, instance operations, switches, and auto-selection
- Application Guard SDK with ECDSA-signed capabilities
- derived values and checkpoint-bound feature flows
- encrypted embedded resources, including flow-bound decryption
- Application License Issuer with DPAPI-protected private keys
- in-product Guard states, integration guide, starter-package export, and post-protection verification
- refreshed desktop layout and current screenshots
Normal binary protection does not require source changes. Application Guard is optional and requires source integration for strong value/flow binding. The integrity marker remains audit-only and is explicitly reported as not runtime-enforced.
See releases/SHA256SUMS.txt for the published package checksum.