365Canopy 0.1.0-alpha.9

365Canopy 0.1.0-alpha.9 - app registration setup guide

Windows x64 desktop preview for observed SharePoint document-library permissions.

NEW IN ALPHA.9
Audit now includes an App registration setup button beside the Site details heading.
It opens an inline guide covering single-tenant desktop registration, localhost redirect,
delegated permissions, admin consent and tenant/client ID mapping. Links open Entra
admin center and official Microsoft guidance. Instructions remain available offline.
The guide starts collapsed so Run administrator audit stays visible.

Validated in light/dark layouts, packaged startup/import and user testing.

Includes recursive folders; optional file-level review; permission-source inheritance;
classic SharePoint and Entra group members/owners; resolved basic profiles where allowed;
HTML permission trees, CSV and JSON; encrypted named local connections; system/light/dark
themes; swaying audit indicator; and canopy executable/window/installer icons.

ONE-TIME SETUP
Installer includes .NET and official PowerShell 7.6.6, but excludes PnP and its Microsoft
components. Choose Set up audit dependency, review the linked upstream component terms,
then download PnP.PowerShell 3.4.1 directly from PowerShell Gallery. Internet access is
required for this setup. The reviewed archive SHA-256 is verified before extraction/import.
Future audits reuse the download under the current Windows account's LocalAppData.
Uninstall leaves downloaded dependencies and encrypted saved profiles in place.

TENANT SETUP
Configure your own native public-client registration and delegated consent. Consent
includes write-capable SharePoint Full Control; the collector uses read operations.
Canopy does not create tenant registrations, grant consent or change permissions in audits.
See README and docs/delegated-checkpoint.md for instructions.

DEPENDENCY REVIEW
All 82 PnP DLL/SO files matched the official Gallery archive. Ninety-two identified
runtime/module package-version pairs had no matching known advisories in the official
NuGet feed checked 2 October 2026. Nightly package labels are not fully resolved;
this dated review does not cover unknown vulnerabilities or certify security.
See licenses/DEPENDENCY_REVIEW.txt and licenses/dependency-review.json.

KNOWN LIMITS
Installer and app are unsigned previews; Windows may display a publisher warning.
Clean-machine install/uninstall is not yet verified. File contents and sharing-link details
are not collected; policy-aware effective access is not evaluated. Inaccessible/hidden
membership and failed reads can leave gaps. Discovery is bounded at 40,000 items.
Review Coverage with every result. Functional/privacy checks passed in development;
user testing of earlier builds does not certify every tenant scenario.

Assets: setup executable and matching SHA-256 sidecar. No live audit exports, tenant
screenshots, registration identifiers or saved profiles are included.

365Canopy 0.1.0-alpha.8

365Canopy 0.1.0-alpha.8 - first public alpha release

Windows x64 desktop preview for observed SharePoint document-library permissions.

Includes recursive folders; optional file-level review; permission-source inheritance;
classic SharePoint and Entra group members/owners; resolved basic profiles where allowed;
HTML permission trees, CSV and JSON; encrypted named local connections; system/light/dark
themes; swaying audit indicator; and canopy executable/window/installer icons.

ONE-TIME SETUP
Installer includes .NET and official PowerShell 7.6.6, but excludes PnP and its Microsoft
components. Choose Set up audit dependency, review the linked upstream component terms,
then download PnP.PowerShell 3.4.1 directly from PowerShell Gallery. Internet access is
required for this setup. The reviewed archive SHA-256 is verified before extraction/import.
Future audits reuse the download under the current Windows account's LocalAppData.
Uninstall leaves downloaded dependencies and encrypted saved profiles in place.

TENANT SETUP
Configure your own native public-client registration and delegated consent. Consent
includes write-capable SharePoint Full Control; the collector uses read operations.
Canopy does not create tenant registrations, grant consent or change permissions in audits.
See README and docs/delegated-checkpoint.md for instructions.

DEPENDENCY REVIEW
All 82 PnP DLL/SO files matched the official Gallery archive. Ninety-two identified
runtime/module package-version pairs had no matching known advisories in the official
NuGet feed checked 2 October 2026. Nightly package labels are not fully resolved;
this dated review does not cover unknown vulnerabilities or certify security.
See licenses/DEPENDENCY_REVIEW.txt and licenses/dependency-review.json.

KNOWN LIMITS
Installer and app are unsigned previews; Windows may display a publisher warning.
Clean-machine install/uninstall is not yet verified. File contents and sharing-link details
are not collected; policy-aware effective access is not evaluated. Inaccessible/hidden
membership and failed reads can leave gaps. Discovery is bounded at 40,000 items.
Review Coverage with every result. Functional/privacy checks passed in development;
user testing of earlier builds does not certify every tenant scenario.

Assets: setup executable and matching SHA-256 sidecar. No live audit exports, tenant
screenshots, registration identifiers or saved profiles are included.