HOSTILE WORK ENVIRONMENT - WINDOWS CLIENT
==========================================

SUPPORTED INSTALL / UPDATE
--------------------------
Use the Install / Update button at https://hwe.trazen.org/. Windows App
Installer verifies the publisher signature shown on the public page, installs the complete
executable-and-content release, and checks for signed stable updates before
launch. The package includes its required Visual C++ framework dependency.

The portable ZIP is a bounded transition fallback. Extract the complete ZIP
before launching HostileWorkEnvironment.exe; never move or run the executable
without its matching assets and content inventory. The ZIP does not provide
automatic update, repair, or uninstall behavior.

SETTINGS AND IDENTITY
---------------------
The client stores settings and one pseudonymous identity per server outside
the read-only installation directory. A normal package update preserves that
state. First packaged launch reuses the existing portable-client settings
namespace. Copying the remembered bearer credential permits impersonation;
deleting settings creates a new identity. This proof of concept does not
provide passwords or account recovery.

REPAIR / UNINSTALL
------------------
Use Windows Settings > Apps > Installed apps > Hostile Work Environment for
repair or uninstall. Repair restores signed package content without replacing
settings. If the client reports missing or corrupt content, repair it instead
of downloading individual assets.

REQUIREMENTS
------------
- 64-bit Windows 10 version 2004 or newer, or Windows 11, with current
  Windows App Installer support.
- A current 64-bit graphics driver with Vulkan or DirectX 12 support.
- Internet access to hwe.trazen.org over HTTPS/WSS (TCP port 443).
- No Rust toolchain, Cargo installation, local server, separate Visual C++
  redistributable, or loose-asset download is required.

SECURITY AND TROUBLESHOOTING
----------------------------
Confirm that App Installer names the signer shown on the public page as the publisher. Do
not install a package whose publisher, signature, version, or hash differs
from the public page and SHA256SUMS.txt. The stable package cannot routinely
downgrade and a required compatible update blocks activation. If updating
fails, Windows keeps the prior package usable and reports an actionable
system error. Confirm https://hwe.trazen.org/healthz is reachable when
diagnosing generic connection failures.
