0.2.1 SELF-UPDATE VALIDATION — OCTOBER 6, 2026
See SELF-UPDATES.txt for the current feature and tests. The records below describe
the original 0.1.0 candidate and are retained as historical evidence.

Development candidate validation — 2026-10-05

PASS: .NET core and Windows application builds; x86 native game-bridge build.
PASS: 23 isolated checks covering signatures/tampering, expiry/channel, unsafe
paths, duplicate paths, HTTP rejection, download limits, baseline mismatches,
game-running guard, corrupt downloads, original backups, personal-file preservation,
rollback sequence protection, update lock, interrupted recovery, unexpected edits,
session parsing, TLS pin validation, fragmented TLS response, native handoff
requirement, and rejection of an invalid session before game startup.
PASS: Browser UI checks of scan/update/sign-in/create/password options/Play,
password-field clearing, plain-text news rendering, and three window sizes.
PASS: Packaged self-contained Windows application opens in WebView2, renders the
borderless artwork, connects its native message bridge, and exits after smoke test.
PASS: Signed two-file release installs into an isolated copy of the working client's
baseline files; both final hashes match and an unmanaged settings file is preserved.
PASS: Live login-server TLS handshake (TLS 1.3) matches the packaged certificate pin.
No account request or login was made by these tests.

Still requires owner testing: actual sign-in/registration/2FA against the game
server; Windower startup and injection; FFXI launch, character selection, gameplay,
and returning to the launcher. The tests do not establish end-to-end game readiness.

Public HTTPS hosting, Windows executable signing, self-update of the launcher,
automatic installation of Windower/WebView2, and complete retail-DAT inventory
validation are outside this initial candidate. No domain is configured.

No player files, server processes, live branches, or running admin tool were changed.
