Allow approved prerelease publication

.github/workflows/publish-nuget.yml

@@ -44,7 +44,13 @@ jobs:
 
       - name: Verify physical compatibility matrix
         shell: pwsh
-        run: .\build\Verify-CompatibilityMatrix.ps1
+        run: |
+          if ("${{ github.event_name }}" -eq "release" -and "${{ github.event.release.prerelease }}" -eq "true") {
+            .\build\Verify-CompatibilityMatrix.ps1 -AllowPending
+          }
+          else {
+            .\build\Verify-CompatibilityMatrix.ps1
+          }
 
       - name: Pack
         run: dotnet pack src\HyperVConsoleKit\HyperVConsoleKit.csproj --configuration Release --no-build --output artifacts\packages

build/Verify-CompatibilityMatrix.ps1

@@ -1,5 +1,7 @@
 param(
-    [string]$MatrixPath = 'validation\compatibility-matrix.json'
+    [string]$MatrixPath = 'validation\compatibility-matrix.json',
+
+    [switch]$AllowPending
 )
 
 $ErrorActionPreference = 'Stop'
@@ -8,6 +10,11 @@ $matrix = Get-Content -LiteralPath $MatrixPath -Raw | ConvertFrom-Json
 $pending = @($matrix.required | Where-Object { $_.status -ne 'Pass' })
 if ($pending.Count -gt 0) {
     $names = $pending | ForEach-Object { "$($_.operatingSystem) $($_.architecture): $($_.status)" }
+    if ($AllowPending) {
+        Write-Warning "Publishing an explicitly unvalidated prerelease with pending physical compatibility results: $($names -join '; ')"
+        return
+    }
+
     throw "Physical compatibility validation is incomplete: $($names -join '; ')"
 }
 

docs/COMPATIBILITY_VALIDATION.md

@@ -49,3 +49,7 @@ Repeat the probe under `LocalSystem`, using the same files and VM. Retain the JS
 process architecture, package version, per-check results, loaded managed assemblies, and loaded native modules.
 
 CI success is not a substitute for these physical-host results.
+
+An explicitly approved GitHub prerelease may be published while matrix entries remain pending so the exact package
+can be deployed for compatibility testing. Stable releases and manual publish-workflow dispatches remain blocked
+until every required matrix entry passes.