# HyperTwist Alpha R19 Windows Installer Evidence ## Authority This directory is the durable evidence index for the first validated HyperTwist Windows installer above the Release 19 Shipping Alpha payload. Current operator delivery: - installer: `C:\Users\Anthracite Ace\Downloads\HyperTwist-Alpha-Test-20260723-R19-Setup.exe` - size: `851049086` bytes - SHA-256: `c31ed6b0b2ae1feb449c27e484d72dc2e07ba220e3cdafa4c3605429d638e0ea` - Authenticode: `NotSigned` The unsigned status is an explicit Alpha limitation. Production distribution still requires a trusted Authenticode certificate and signed-artifact proof. ## Installer Ownership The NSIS installer owns a per-machine, 64-bit installation with: - Windows 10 22H2 / Windows 11 and x64 preflight - a valid Microsoft-signed Visual C++ 2015-2022 x64 redistributable - the complete `143`-file Release 19 runtime payload - PDB and debug-manifest exclusion - a complete SHA-256 payload manifest - Add/Remove Programs registration - Start Menu app, readiness, and uninstall shortcuts - an optional all-users desktop shortcut - marker-and-registry-gated upgrade and uninstall ownership - a hard `HyperTwist` install-directory leaf contract - refusal of unowned non-empty install directories - user-visible, manifest-aware readiness reporting - preservation of settings, saves, replays, and diagnostics during uninstall The prior payload is not cleaned for upgrade until the bundled prerequisite has succeeded. Failed builds remove incomplete installer output rather than leaving a corrupt executable at the release destination. ## Validation The final build passed with: - NSIS `3.12` - `0` compiler warnings - payload files: `143` - payload bytes: `1585341236` - exact solver table: `676207080` bytes - exact solver SHA-256: `dc6de3d909a37afe2ba7f1f978543a13eae215bd20d954d66813524a8ca20034` - source readiness: `ready-with-warnings` - required readiness failures: `0` - optional warnings: unsigned desktop code and no active OpenXR runtime Bounded contract proof also passed: - all `3` PowerShell scripts parsed on Linux PowerShell and Windows PowerShell - disposable NSIS contract compilation completed with `0` warnings - an unsafe install-directory leaf was refused with exit code `13` - an unowned non-empty `HyperTwist` directory was refused with exit code `14` - the unrelated sentinel survived and no product registration was created - manifest traversal input was blocked as `invalid-path:../escape.txt` - manifest file-count and total-size tampering were blocked - the interactive readiness wait completed under redirected-input proof The final lifecycle used a path containing spaces and passed: - unowned-directory refusal - first silent install, exit `0` - first `143`-entry payload hash parity - Add/Remove Programs and product-registration ownership - resolved app, readiness, uninstall, and desktop shortcut contracts - installed readiness with `0` required failures - stock-Shipping launch diagnostics with runtime initialization - `0` fatal lines and `0` package-owned listeners - in-place upgrade, exit `0` - second `143`-entry payload hash parity - silent uninstall, exit `0` - user-data sentinel preservation - install-root, registration, and shortcut removal - final owned-process count `0` The validation class is `isolated-current-host`. No Windows Sandbox, clean Hyper-V VM, or base VHD was available, so this evidence does not masquerade as a fresh-machine proof. ## Failure Lineage `pre-release-shortcut-failure-report.json` records the intentionally rejected candidate whose readiness shortcut embedded the installing administrator's temporary path. That report proved first-install payload parity and successful failure cleanup. The final installer supersedes it with a per-user report path, manifest-aware arguments, an interactive wait, and resolved shortcut-target validation. ## Evidence Map - `windows-installer-build-report.json`: final build and installer identity - `windows-installer-payload-manifest.json`: complete payload hashes and sizes - `windows-installer-source-readiness-report.json`: source-host readiness - `windows-installer-lifecycle-report.json`: final install-to-uninstall proof - `installed-readiness-report.json`: installed-host and manifest proof - `installed-runtime.hyperdiagnostics.log`: Shipping runtime initialization - `installed-first-run-launch.log`: first-run menu launch authority - `manifest-hardening-positive.json`: full manifest reconciliation proof - `makensis.log`: final compiler transcript - `pre-release-shortcut-failure-report.json`: superseded failure lineage - `post-task-hygiene-report.json`: doctrine-ordered artifact disposition - `post-task-hygiene-reconciliation-report.json`: duplicate proof and final retirement of the formerly protected Windows staging roots ## Remaining External Gates - trusted Authenticode code signing - a genuinely fresh Windows VM install and first-launch proof - entitlement-backed public release URL wiring - update-channel, rollback, and staged-rollout proof - real headset/controller observation - configured-provider, microphone, and audible-TTS observation ## Staging Retirement The initial hygiene report conservatively retained `C:\HyperTwist_worktrees\phase10validate` and the package-production roots because complete duplicate proof had not yet cleared four relative symlinks. The additive reconciliation report closes that uncertainty. The follow-up compared `19,789` regular snapshot files, isolated all `4` symlinks, matched `19,723` files byte-for-byte against the current VPS source, matched another `28` changed tracked files to committed history, and proved the remaining tracked differences were strictly superseded. No unique unlanded source was found. The current Release 19 package then matched the retained Downloads delivery for all `145` package files and `1,920,300,068` bytes. The staging ZIP and installer also matched their retained Downloads copies exactly. This made every artifact under `C:\HyperTwist_worktrees` redundant, so the whole staging root was removed while the Release 19 operator deliveries, Release 17 rollback deliveries, and operator saved data were retained.