Repository navigation
REQ 128
The native live-assistance runner shall stage Windows prerequisites from a run-scoped, read-only artifact share through a per-user installer that verifies each payload before execution.
Epic #250 needs a real Windows desktop capture without requiring LabVIEW or VIPM. Direct guest downloads exceeded the available run window; a transient Guest Additions share can deliver already verified files without widening network access.
The host caches vendor payloads on internal NVMe with exact SHA-256 values and a verified VS Code publisher signature. A transient read-only share is bound to the exact VM UUID and removed before capture. The NSIS installer uses RequestExecutionLevel user, persists each step and exit code, returns nonzero on any failed verification or install, and never asks for interactive elevation. Actor VSIX version/source digest and installer payload hashes match the run manifest; firewall policy is applied separately by the host controller.
TEST-129 covers source/hash drift, invalid signature, missing share, silent failure, privilege prompts, log preservation, and exact run/VM share removal. Passing offline packaging tests does not prove a Windows installation.
SYS-REQ-033; epic #250; P2 #255
High
Planned NSIS compile and native Windows execution records with per-step log, process exit code, artifact hashes, signature status, resulting per-user tool paths, exact VM share identity, and cleanup confirmation. No successful install or native qualification is claimed.
Proposed per-user NSIS bundle and native Windows adapter; no public engine installer or live proof is approved by this design page.
Planned; implementation remains gated on independent design review.