# windows/tests

Verification gates for a SilverMetal Enhanced — Windows build
([`../hardening-spec.md`](../hardening-spec.md) §6).

| Test | What it proves | Status |
|---|---|---|
| **Hardening-baseline** | All control gates pass | [`../hardening/Verify-SilverMetalWindows.ps1`](../hardening/Verify-SilverMetalWindows.ps1) (M1) |
| **Telemetry-leak** | Captures egress on a clean build; classifies every Microsoft contact; **publishes the residual** (we do not claim zero) | TODO-M3 |
| **VPN kill-switch** | Tunnel-drop → zero egress | TODO-M1 |
| **Update path** | A test update applies + rolls back (update-or-die) | TODO-M3 |

The telemetry-leak test is the honesty gate: it documents the minimum-feasible
Microsoft contact that remains, per design-principle #2.