# Windows Distribution

Draft for review by qualified legal counsel. Not final legal advice.

Trusted Windows distribution requires:

- Signed executable.
- Signed installer.
- Signed update manifest.
- HTTPS downloads.
- SHA-256 checksum.
- Version history.
- Release notes.
- Rollback support.
- Uninstall support.
- Clean data-removal option.
- Update verification.
- No unsigned executable replacement.
- No insecure HTTP update endpoint.

MSIX should be reviewed where practical, with a signed installer fallback and Microsoft Store feasibility review.

