Windows Secure Toolkit v1.4.0

Highlights

• Adds read-only BitLocker status for the Windows system volume.
• Adds read-only UEFI Secure Boot status.
• Adds audit --json for automation-friendly JSON on standard output.
• Restores compatibility with valid v1.3.2 and v1.3.3 backup manifests.
• Aligns WinSecure.exe assembly and file metadata with version 1.4.0.

Verification

• Windows CI: passed on the merged main commit.
• Repository validation: 25 checks passed.
• Security regression gate: 19 invariants passed.
• Release build: 0 warnings and 0 errors.
• Extracted-package checks: version, self-test, JSON audit schema, BitLocker field, and Secure Boot field passed.
• Maintainer machine: Windows 11 Pro for Workstations build 26200 reported Secure Boot enabled. BitLocker was Unavailable from the non-elevated validation token; this is not reported as an unencrypted result.
• Apply/Restore behavior is unchanged from the paths already validated by the maintainer on Windows 10 and Windows 11.

Integrity and trust

• SHA-256: EB735CB2F871EA66E7570DE0CAC94C745121C1EB43AAF03D1AC33387E3BB0640
• Authenticode: not signed. Verify the tag, release source, and SHA-256 before use.