PASS real Form.Shown event automatically installs default new account exactly once
PASS deployment UI enables stable automatic updates once without silently approving candidates
PASS fresh GUI requests one explicit production approval before installation
PASS new PC stays in maintenance account for local reader and first administrator enrollment
PASS empty roster opens automatic first-run entry and cancelled setup is retryable
PASS empty roster exposes the explicit elevated bootstrap-reset operation
PASS native save failure is not reported as successful binding and keeps repair actions enabled
PASS zero child exit without a saved administrator and device hash fails readback
PASS successful fixture enrollment is read back and disables bootstrap reset
PASS existing roster selects protected rebinding and never offers password reset
PASS existing old binding cannot be misreported as a newly saved reader after child exit
PASS automatic owned upgrade does not request a password reset or passwordless change
PASS owned GUI upgrade preserves existing environment write permissions and host address
PASS automatic installation failure remains visible and does not loop
Preview rendered only. No account, config, policy or installation was changed.
PASS preview never triggers automatic installation
PASS declined production GUI approval never calls the installer
