Thanks for helping. Keep it small and safe.
- Safety first. Code that changes the system (
install,reinstall,restore,cert-remove) must keep its guards:--yes, Administrator check,--dry-run, protected classes, read-back after the change. Do not weaken them. - Tests never touch the system. Use the fake runner in
tests/test_fili.py. A test that runs a real command is a bug. Runpython -I tests/test_fili.pyandpython -I tests/test_bundle.pybefore every pull request; add a test for every change in behaviour (and, for a safety rule, check it fails when you remove the rule). - Real-install testing is manual, on a disposable VM or PC: follow
docs/piano-prove-installazione.mdand paste the results table in the pull request. Do not claim a real-install feature works without it. - Clean room. Do not copy or adapt code from Zadig (
zadig.c, GPL-3.0-or-later). Describe behaviour from the documentation or by observing the program. libwdi / wdi-simple (LGPL-3.0-or-later) are used only as a separate executable, never linked or pasted into this code. Seedocs/licenza.md. - Python standard library only (no third-party runtime dependencies), Python 3.9+, Windows target.
- One topic per pull request; describe what you ran and what you did not.