windows/tests
Verification gates for a SilverMetal Enhanced — Windows build
(../hardening-spec.md §6).
| Test | What it proves | Status |
|---|---|---|
| Hardening-baseline | All control gates pass | ../hardening/Verify-SilverMetalWindows.ps1 (M1) |
| Telemetry-leak | Captures egress on a clean build; classifies every Microsoft contact; publishes the residual (we do not claim zero) | TODO-M3 |
| VPN kill-switch | Tunnel-drop → zero egress | TODO-M1 |
| Update path | A test update applies + rolls back (update-or-die) | TODO-M3 |
The telemetry-leak test is the honesty gate: it documents the minimum-feasible Microsoft contact that remains, per design-principle #2.
Branding.Tests.ps1
Pester v5 unit + offline-integration tests for windows/branding/.
Requires an elevated shell (the offline-integration test uses reg load).
Run: pwsh -NoProfile -Command "Invoke-Pester windows/tests/Branding.Tests.ps1".