Release v0.0.1 · kad/WindowsBrowserGuard

Windows Browser Guard 0.0.1

Windows registry monitoring daemon that automatically detects and blocks forced
browser extension installations via Group Policy.

Real-time registry monitoring under HKLM\SOFTWARE\Policies
Chrome extension protection (ExtensionInstallForcelist → ExtensionInstallBlocklist)
Firefox extension protection (ExtensionSettings with blocked installation_mode)
Reads configuration from config.json next to the executable (or --config flag)
OpenTelemetry traces, logs and metrics via OTLP (gRPC or HTTP)
Self-elevating installer with Task Scheduler integration (runs as SYSTEM at startup)

Download the ZIP and extract all files to a folder
Right-click Install.ps1 → "Run with PowerShell" (or run as Administrator)
Follow the prompts — the installer configures OTLP endpoint and registers the startup task

See README.md for detailed documentation.

07476ab: feat: Add --log-file flag; installer always enables log file (@kad)
5634771: feat: Add --quiet flag to suppress stdout log output (@kad)
768ba2a: feat: Add comprehensive installer script (@kad)
66d45b2: feat: Add config.example.json; include in release archive (@kad)
d47899e: feat: Add maintenance scripts and OTLP configuration (@kad)
0825f5f: feat: Switch to cobra CLI, auto-detect OTLP protocol from endpoint URL (@kad)

7fdbe3e: fix: Restore missing goreleaser-check job name in ci.yml (@kad)
262e964: fix: Route all log output through OTLP pipeline (@kad)
50cc720: fix: Show elevated window and propagate exit code in installer (@kad)
d00ddd5: fix: Use version: latest for golangci-lint-action (v9 requires semver or 'latest') (@kad)

e7789db: cleanup allow list (@kad)
88fc51e: cleanup settings (@kad)
c1c0efa: don't store exe in git (@kad)
7af3cdc: fix (@kad)
dc2bfb9: fix (@kad)
a013961: fix dry run (@kad)
9e24574: fix dry run (@kad)
55c139a: fixed scripts (@kad)
c384d9e: go fmt (@kad)
630c979: improvements (@kad)
2f899af: initial otel tracing (@kad)
ceeb273: move from main to pkg (@kad)
db567a4: otel logging (@kad)
ca5f3b6: otel metrics (@kad)
f90d067: otlp endpoints (@kad)
fbc1640: refactor (@kad)
4fff0bf: refactor (@kad)
6364697: refactor: Read config.json from exe dir; task scheduler runs exe directly (@kad)
f730c05: removed debug (@kad)
5089043: restructured and dry-run (@kad)
456882b: update install scripts (@kad)

Full Changelog: v0.0.0...v0.0.1

Windows only (amd64)
Administrator privileges required
Task Scheduler runs WindowsBrowserGuard.exe --config="<install-path>\config.json" as SYSTEM

# Verify checksum (PowerShell)
Get-FileHash WindowsBrowserGuard.exe -Algorithm SHA256