v0.6.3 : Defensive Uninstall Policies, Authenticode Update Validation & Release Integrity

ApexSenseBridge 0.6.3

ApexSenseBridge 0.6.3 is a defensive installer and update-integrity release focusing on driver safety, safe uninstallation policies, and cryptographically verified updates.

---

🛡️ Defensive Uninstall Policies

• USBip Isolation: ApexSenseBridge never invokes the USBip uninstaller. USBip is a shared kernel prerequisite; users who intentionally wish to remove it must do so separately via Windows Settings.
• HidHide Protection: HidHide is kept by default. It can only be removed via an interactive prompt (defaulting to No) after validating the exact version, service state, and an installation provenance marker (HidHideOwnerProof).
• Data Preservation: User settings, Playnite profiles, logs, and learned executable bindings are preserved by default upon uninstall.

🔒 Cryptographic Update Verification

• Background Tray, Playnite extension, and PowerShell update scripts now validate downloaded setup files before elevation:
  • Strict HTTPS endpoint verification (ReynArts/ApexSenseBridge).
  • Strict Authenticode signature verification.
  • Pinned publisher/signer matching the running installation.

⚙️ Stability & Contracts

• Tray Concurrency: Fixed a shutdown race condition in ExecutableLearningService ensuring newly learned bindings are flushed to disk before exit.
• Version Consistency: Automated multi-target version validation across CMake, Inno Setup, Tray, and Playnite metadata.

---

See RELEASE_NOTES_0.6.3.md and RELEASE_CHECKLIST.md for complete technical and validation details.