dsh-windows-settlement-proof

Offline, content-addressed evidence that an approved Windows control-plane change actually settled across every required surface. It compares explicit redacted receipts for Service Control Manager, Task Scheduler, Event Log and policy projections against a fixed hash lock, chronology, freshness and restart-epoch policy.

This is a verifier, not an operator. It never runs PowerShell, sc.exe, registry commands or arbitrary subprocesses; it never reads Windows services, task definitions, Event XML or business payloads. Reports contain only public counts, booleans and SHA-256 values.

Boundary

• dsh-windows-readiness-proof asks whether a Windows host satisfies prerequisites before work begins.
• dsh-decision-effect-proof provides generic authorization/effect linkage.
• This plugin asks whether one approved Windows control-plane change converged across domain-specific surfaces, remained present at a required restart epoch, and has a matching success-event receipt.

It does not create a second action core and does not execute changes.

Manifest

The manifest pins a redacted target identity, target revision, request, approval and desired-state hashes; an expected state hash for each required surface; bounded observation receipts; an evaluation time; freshness; and the minimum restart epoch. See examples/settled.json.

Use

npm test
npm run check
node bin/dsh-windows-settlement-proof.mjs verify examples/settled.json
dsh plugin --profile proof add .

DSH tools:

• dsh_windows_settlement_inspect: inline, read-only metadata inspection.
• dsh_windows_settlement_verify: verifies a workspace-relative manifest and writes one content-addressed report only beneath an explicit workspace-relative artifactDir.

MCP tools expose inline inspection and verification without filesystem writes. The CLI exits 0 for settled, 1 for a valid but unsettled verdict, and 2 for invalid input or usage.

Safety

Manifest and artifact paths reject absolute paths, traversal and symlinks. Secret-shaped values and credential-named scalar fields are rejected. Artifact writes use exclusive creation, deterministic content addressing and read-back SHA-256 verification.

MIT licensed. See SECURITY.md.