21 lines
1.0 KiB
Markdown
21 lines
1.0 KiB
Markdown
# windows/tests
|
|
|
|
Verification gates for a SilverMetal Enhanced — Windows build
|
|
([`../hardening-spec.md`](../hardening-spec.md) §6).
|
|
|
|
| Test | What it proves | Status |
|
|
|---|---|---|
|
|
| **Hardening-baseline** | All control gates pass | [`../hardening/Verify-SilverMetalWindows.ps1`](../hardening/Verify-SilverMetalWindows.ps1) (M1) |
|
|
| **Telemetry-leak** | Captures egress on a clean build; classifies every Microsoft contact; **publishes the residual** (we do not claim zero) | TODO-M3 |
|
|
| **VPN kill-switch** | Tunnel-drop → zero egress | TODO-M1 |
|
|
| **Update path** | A test update applies + rolls back (update-or-die) | TODO-M3 |
|
|
|
|
The telemetry-leak test is the honesty gate: it documents the minimum-feasible
|
|
Microsoft contact that remains, per design-principle #2.
|
|
|
|
## Branding.Tests.ps1
|
|
|
|
Pester v5 unit + offline-integration tests for `windows/branding/`.
|
|
**Requires an elevated shell** (the offline-integration test uses `reg load`).
|
|
Run: `pwsh -NoProfile -Command "Invoke-Pester windows/tests/Branding.Tests.ps1"`.
|