PASS default automatic policy is stable-only and tied to the after-sales SID
PASS candidate automatic updates require explicit one-time approval
PASS approved candidate policy survives later unattended upgrades
PASS explicit automatic pause is never silently reenabled
PASS policy cannot move to a different Windows role
PASS verified new release installs once after three idle observations
PASS business or login at idle observation 1 keeps downloaded release without installing
PASS business or login at idle observation 2 keeps downloaded release without installing
PASS business or login at idle observation 3 keeps downloaded release without installing
PASS same revision performs no download or install
PASS automatic updater never downgrades software
PASS closed stable feed does not install candidates
PASS publisher must explicitly approve automatic installation in the signed offer
PASS truthy text cannot authorize automatic installation
PASS offline or invalid signature leaves installed software untouched
PASS invalid download never reaches installer
PASS interrupted installer reports a persistent protected maintenance hold
PASS subsequent automatic runs never replay a partial installation blindly
PASS disabled policy performs no network or installation
PASS real file lease prevents updater from entering while either business launcher is alive
PASS one remaining business lease continues to block installation
PASS real exclusive update lease prevents a simultaneous browser launch
PASS browser startup resumes after completed update releases the lease
PASS interrupted software replacement cannot open an unverified business browser
PASS PowerShell 5.1 parse Automatic-Update.ps1
PASS PowerShell 5.1 parse Automatic-Update-Model.ps1
PASS PowerShell 5.1 parse Runtime-Model.ps1
PASS PowerShell 5.1 parse Install-AfterSales.ps1
PASS PowerShell 5.1 parse Launch-AfterSales.ps1
PASS 32 automatic updater checks
