4268a337f3
All checks were successful
Build SilverMetal Enhanced - Windows ISO / build (pull_request) Successful in 5m55s
Assert-IsoStructure.ps1 reused a fixed mount dir; a prior aborted run left a WIM mounted there, so Mount-WindowsImage failed with 'directory is not empty' and the persist-to-stable-path step was skipped (no ISO deployed). Now discards stale mounts + clears corrupt mount points + uses a unique per-run mount dir (mirrors build.ps1 Stage 0), and removes the dir after. Also asserts apps/catalog.json baked into the WIM. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
windows/tests
Verification gates for a SilverMetal Enhanced — Windows build
(../hardening-spec.md §6).
| Test | What it proves | Status |
|---|---|---|
| Hardening-baseline | All control gates pass | ../hardening/Verify-SilverMetalWindows.ps1 (M1) |
| Telemetry-leak | Captures egress on a clean build; classifies every Microsoft contact; publishes the residual (we do not claim zero) | TODO-M3 |
| VPN kill-switch | Tunnel-drop → zero egress | TODO-M1 |
| Update path | A test update applies + rolls back (update-or-die) | TODO-M3 |
The telemetry-leak test is the honesty gate: it documents the minimum-feasible Microsoft contact that remains, per design-principle #2.
Branding.Tests.ps1
Pester v5 unit + offline-integration tests for windows/branding/.
Requires an elevated shell (the offline-integration test uses reg load).
Run: pwsh -NoProfile -Command "Invoke-Pester windows/tests/Branding.Tests.ps1".