PASS first run enrolls before business launch and rereads saved config
PASS configured restart skips enrollment and preserves administrator roster
PASS canceled enrollment never opens the business browser
PASS retry after canceled enrollment completes without permanent lock
PASS denied UAC propagates a retryable failure without business access
PASS saved card without physical reader binding cannot launch business
PASS saved config identity is revalidated after enrollment
PASS different Windows SID is rejected before enrollment
PASS identity mismatch never invokes elevation
PASS cashier role cannot enter the after-sales shell
PASS incomplete shell installation cannot report a working deployment
PASS missing roster is not silently treated as a fresh deployment
PASS invalid bootstrap is blocked without automatic reset
PASS unreadable configuration produces failure instead of opening business
PASS browser failure preserves completed enrollment for retry
PASS browser retry does not reenroll or reset existing cards
PASS 100 continuous restarts do not reset registration or duplicate initialization
PASS supervisor displays its protected cover before startup and retains retry on failure
PASS ordinary closing cannot dismiss the startup protection cover
PASS Windows logoff or shutdown can close protection without automatic relaunch
PASS actual enrollment callback hides the full-screen cover until the child exits and then restores it
PASS actual enrollment callback launches only the installed initializer visibly with administrator authorization
PASS denied enrollment elevation restores the cover without hiding it or leaving a child process
PASS immediately canceled enrollment restores its retry cover without starting another initializer
PASS Windows shutdown does not restore or reactivate the enrollment cover
PASS actual WinForms status callback reaches enrollment and browser phases without parameter shadowing
PASS actual status callback starts an already-enrolled session without reopening registration
PASS actual status callback preserves physical-card setup protection when enrollment is canceled
PASS actual status callback can retry a canceled first enrollment
PASS actual status callback reaches UAC refusal without opening business
PASS 100 repeated starts use the actual label callback without duplicate registration
