Sentinel 3.4.4

Sentinel 3.4.4

Fixed

• Prevent synchronous native firewall reconciliation and WMI watcher initialization from blocking the hosted-service startup path. Preserve policy verification and explicit failure reporting.
• Bound the complete IPC request/reply exchange, preserve the 16,384 characters unauthenticated request cap, and allow bounded full-roster replies. Distinguish SCM state from IPC readiness so a timeout is not labeled service stopped.
• Remove hidden-window-only ClickFix kill authority, including the reported tray-icon promotion false positive. Keep download/execute detection; add no name/path exemption.
• Correct About and architecture docs to list Service, Agent and Guard as three core processes.
• Present absent/unreadable certificate trust markers as review-only unverified metadata; exclude this context from attack correlation while retaining explicit distrust enforcement.

Evidence and validation

• Isolate synthetic pipeline fixtures from leaked live ancestry refresh timers and runner process IDs; preserve assertions/deadlines and include queue/engine diagnostics on timeout. The independent Windows release run remains a mandatory check.
• Local cross-build: zero warnings/errors; portable regressions: 476 passed, eight native Windows fixtures skipped; dashboard: 34 passed. See startup timeline, verified false-positive actions, certificate context and validation limits. Historical evidence packs are preserved. Windows validation and fresh target-host logs remain necessary.