Engineering MCP 0.3.7-preview.6

Engineering MCP 0.3.7-preview.6

This GitHub pre-release rebuilds the universal WPF/.NET Engineering MCP from protected main after the validated Microsoft.Build.Framework dependency update. It supersedes preview.5 without moving or replacing the immutable preview.5 tag or binaries.

Dependency and release integrity

• Updates Microsoft.Build.Framework from 17.11.48 to 17.14.28.
• Preserves the required win-x64 NuGet lock target and verifies solution and installer locked restores.
• Keeps the real WPF screenshot test fail-closed while allowing a bounded 30-second fixture startup on cold hosted Windows runners.
• Requires pull requests, current-branch testing, Windows CI, dependency review, and CodeQL before changes reach main.
• Protects main from force pushes and deletion and protects v* release tags from update or deletion.
• Release hardening rejects dirty or mismatched source and records the exact 40-character source commit in app-manifest.json.
• Packages include the Apache-2.0 license, mangyan1 ownership notice, SPDX SBOM, dependency inventory, security documentation, and SHA256SUMS.txt.

Universal WPF capabilities

• Discovers modern and classic built WPF executable projects without executing MSBuild.
• Reads safe literal in-workspace centralized property imports as inert XML.
• Offers an explicit executable fallback with managed WPF metadata, workspace-containment, and reparse-point validation.
• Creates durable workspace-specific policies with exact executable paths, bounded source access, network deny, PII masking, screenshot redaction, and destructive/privileged actions disabled.
• Provides 76 structured tools for WPF automation, bounded in-process diagnostics, runtime observation, source analysis, ASP.NET observability, and evidence-based cross-layer diagnosis.

Validation

• Release build: 0 warnings, 0 errors.
• Automated tests: 46 passed; 1 installed-package test intentionally opt-in in the ordinary suite.
• Static contract, licensing, security, neutrality, dependency, ownership, and signing-policy checks: 57 passed.
• NuGet advisory and sanitized secret scans: passed.
• MSI install, uninstall, and reinstall lifecycle: passed.
• Installed VS Code protocol and 76-tool acceptance: passed.

Artifacts

• EngineeringMcp-0.3.7-preview.6-win-x64-Setup.msi
• EngineeringMcp-0.3.7-preview.6-win-x64.zip
• SHA256SUMS.txt contains the final release checksums.

Signing notice

These preview artifacts are SHA-256 Authenticode-signed and RFC 3161 timestamped with the development certificate. The signature detects post-signing modification, but it does not yet establish a publicly trusted Windows publisher identity. Trusted SignPath signing remains pending approval.

Engineering MCP 0.3.7-preview.5

Engineering MCP 0.3.7-preview.5

This GitHub pre-release rebuilds the universal WPF/.NET Engineering MCP from the current main source after the repository ownership and publisher metadata moved to mangyan1. It supersedes the source-only v0.3.7-preview.4 tag; preview.4 binaries are not being republished.

Release provenance and trust

• The release tag, source version, package manifest, MSI, portable ZIP, and checksums identify preview.5 together.
• Release hardening requires the expected semantic version, rejects dirty or mismatched source for promotion builds, and records the exact 40-character source commit in app-manifest.json.
• GitHub CI restores locked application and installer dependencies, scans NuGet advisories, builds, tests, runs 57 static contract/security checks, and performs a sanitized secret scan.
• Dependabot covers NuGet projects, the optional VS Code extension manifest, and pinned GitHub Actions. Pull requests also receive dependency review.
• Packages include the Apache-2.0 license, mangyan1 ownership notice, SPDX SBOM, dependency inventory, security documentation, and SHA256SUMS.txt.

Universal WPF capabilities

• Discovers modern and classic built WPF executable projects without executing MSBuild.
• Reads safe literal in-workspace centralized property imports as inert XML.
• Offers an explicit executable fallback with managed WPF metadata, workspace-containment, and reparse-point validation.
• Creates durable workspace-specific policies with exact executable paths, bounded source access, network deny, PII masking, screenshot redaction, and destructive/privileged actions disabled.
• Provides 76 structured tools for WPF automation, bounded in-process diagnostics, runtime observation, source analysis, ASP.NET observability, and evidence-based cross-layer diagnosis.

Validation

• Release build: 0 warnings, 0 errors.
• Automated tests: 46 passed; 1 installed-package test intentionally opt-in in the ordinary suite.
• Static contract, licensing, security, neutrality, dependency, ownership, and signing-policy checks: 57 passed.
• NuGet advisory and sanitized secret scans: passed.
• MSI install, uninstall, and reinstall lifecycle: passed.
• Installed VS Code protocol and 76-tool acceptance: passed.

Artifacts

• EngineeringMcp-0.3.7-preview.5-win-x64-Setup.msi
• EngineeringMcp-0.3.7-preview.5-win-x64.zip
• SHA256SUMS.txt contains the final release checksums.

Signing notice

These preview artifacts are SHA-256 Authenticode-signed and RFC 3161 timestamped with the development certificate. The signature detects post-signing modification, but it does not yet establish a publicly trusted Windows publisher identity. Trusted SignPath signing remains pending approval.