Which Bastion build should I download? (Latest = v15.9.7 modular)

[jjames06]

Which Bastion build should I download?

Recommended for most users: the official site Download page (same as GitHub Latest):
https://www.operationlockedin.com/bastion/download

Current public Latest / recommended: v15.9.7 (bastion-hardening-v15.9.7.zip)

Why v15.9.7

Modular plain-text src\ for independent review + MANIFEST integrity (source is never encrypted):

• Named modules (Bastion.Dns.ps1, Bastion.Recovery.ps1, …) instead of one multi-thousand-line monolith — see Modular source (handbook)
• Forced black console theme, High-IL bat elevation, tools-run-bootstrap
• Works after LanmanServer / Server is disabled (hardened PCs)
• Help documentation color-coded headings/labels/body (v15.9.7)
• DPAPI only for Apply undo data (DNS snapshot / RDP host prior)

Release: https://github.com/jjames06/bastion-hardening/releases/tag/v15.9.7

Older tags (including monolith v15.8.4) remain available if you need to pin a prior build.

License

GNU GPLv3 - free software. Distributed modified versions must stay GPLv3 with complete corresponding source. See LICENSE + NOTICE in the zip. Older MIT-tagged release zips remain under those artifact terms.

Handbook

• Wiki: https://github.com/jjames06/bastion-hardening/wiki
• Modular source layout: https://github.com/jjames06/bastion-hardening/wiki/Modular-source
• In-app Help: main menu 11
• Site Help: https://www.operationlockedin.com/bastion/help

Install

1. Download the zip from the official site or GitHub Latest
2. Right-click zip → Properties → Unblock if shown
3. Extract → open the product folder → Run Bastion-Hardening.bat as administrator
4. Restore point (menu 13 / R) → Dry Run (1) → Apply (8) when ready

Always run Bastion-Hardening.bat (never the .ps1 alone under Restricted policy).