Device Guard Pilot 0.5.4

Device Guard Pilot 0.5.4 adds an explicit, administrator-controlled Google Play compatibility mode for applications that require the Play Store package. Strict store blocking remains the default. When compatibility is enabled, Device Guard keeps only Google Play available and requires a verified installation lock; any failed read-back hides the Store and prevents protection from reporting success.

This release also improves delayed HTTP/HTTPS handler verification, maintenance restoration safety, release automation, and public project documentation. The offline signed update drill, Android CI, lint, JVM tests, and CodeQL pass.

Security and deployment boundary

This is a public pilot prerelease. Google Play compatibility, kiosk containment, provisioning, recovery, and signed self-update still require recorded physical-device evidence for each supported firmware family. The Play Store package may remain visible on an ordinary launcher while compatibility mode is enabled; installation is what Device Guard blocks and verifies.

Traceability

• Google Play compatibility design and operator workflow
• Production roadmap and remaining hardware gates
• Feature request #64 and implementation PR #65
• Release preparation PR #66
• Signed channel metadata PR #67
• Protected publication run