Files
Hunter B 896f0336e3 fix(installer): verify ownership before replacement and removal
The NSIS installer records an install-root marker and the uninstaller
refuses to remove a root, shortcut or registration it cannot prove owned,
checking every delete and preserving retryable state on partial failure.
The archive installer verifies its receipt, refuses foreign same-named
destinations, and accepts only the exact pre-receipt 0.10.1/0.10.2 layout
for upgrade, without weakening staging, hashes, backup or rollback.

Verification: makensis 3.12 compiled codewhale.nsi with and without
COMPILED_HOST; isolated PowerShell 7.6.9 suite 55 assertions/0 failures;
git diff --check clean. Native Windows lifecycle remains pending.
Refs #7091
2026-11-06 00:01:44 -08:00
..