feat(welcome): author Daily-Driver/Privacy-Max/Journalist/Developer flavours

windows/flavours/daily-driver.json

@@ -0,0 +1,9 @@
+{
+  "id": "daily-driver",
+  "label": "Daily-Driver",
+  "description": "Balanced privacy and usability. Full hardened baseline; app control in audit.",
+  "isDefault": true,
+  "hardening": { "modules": ["00","01","02","03","04","05","06","07"], "params": { "wdac": "audit" } },
+  "appSet": ["SilverBrowser","SilverVPN","SilverKeys"],
+  "settings": { "autoLock": 120 }
+}

windows/flavours/developer.json

@@ -0,0 +1,9 @@
+{
+  "id": "developer",
+  "label": "Developer",
+  "description": "Hardened baseline with developer tooling allowances.",
+  "isDefault": false,
+  "hardening": { "modules": ["00","01","02","03","04","05","06","07"], "params": { "wdac": "audit" } },
+  "appSet": ["SilverBrowser","SilverVPN","SilverKeys"],
+  "settings": { "autoLock": 300 }
+}

windows/flavours/journalist.json

@@ -0,0 +1,9 @@
+{
+  "id": "journalist",
+  "label": "Journalist",
+  "description": "Privacy-first with duress + secure comms emphasis.",
+  "isDefault": false,
+  "hardening": { "modules": ["00","01","02","03","04","05","06","07"], "params": { "wdac": "enforce" } },
+  "appSet": ["SilverBrowser","SilverVPN","SilverChat","SilverDuress","SilverKeys","SilverSync"],
+  "settings": { "autoLock": 60 }
+}

windows/flavours/privacy-max.json

@@ -0,0 +1,9 @@
+{
+  "id": "privacy-max",
+  "label": "Privacy-Max",
+  "description": "Maximum lockdown. App control enforced, tightest toggles.",
+  "isDefault": false,
+  "hardening": { "modules": ["00","01","02","03","04","05","06","07"], "params": { "wdac": "enforce" } },
+  "appSet": ["SilverBrowser","SilverVPN","SilverKeys","SilverDuress","SilverChat"],
+  "settings": { "autoLock": 60 }
+}

windows/welcome/tests/SilverOS.Welcome.Tests/ShippedFlavoursTests.cs

@@ -0,0 +1,21 @@
+using SilverOS.Welcome.Core.Flavours;
+using Xunit;
+
+public class ShippedFlavoursTests
+{
+    private static string FlavoursDir()
+    {
+        var d = AppContext.BaseDirectory;
+        while (d is not null && !Directory.Exists(Path.Combine(d, "windows", "flavours")))
+            d = Directory.GetParent(d)?.FullName;
+        return Path.Combine(d!, "windows", "flavours");
+    }
+
+    [Fact]
+    public void All_shipped_flavours_are_valid_and_one_is_default()
+    {
+        var loaded = new FlavourLoader().Load(FlavoursDir());
+        Assert.Equal(4, loaded.Count);
+        Assert.Equal("daily-driver", loaded[0].Id);
+    }
+}