KeyValet Windows unsigned preview: corresponding source

This archive contains the exact 610 source files used for the native Windows/MSVC
preview with ZIP SHA256:
3cd969a332bb6eb1678ac48fb0e4d300bb12075e104c4bc13b0e0651acf344aa

Source fingerprint:
fbf22e994313d82d246b96ccc8e480441f4c048b4ad715f8f8c5bd828f87bf0b
The fingerprint is SHA256 over the ordered lines path + space + file SHA256 + LF
listed in SOURCE-MANIFEST.json. The two additional archive files are this README
and SOURCE-MANIFEST.json; they are not part of the build-input fingerprint.

This is a frozen working-tree source snapshot, not a claimed public Git commit,
GitHub Actions attestation, or SignPath-approved release. Source is Apache-2.0;
see LICENSE. Dependency versions are recorded in rust/Cargo.lock. Public test
key fixtures and synthetic credential patterns exist solely for automated tests;
they are not production account or device keys.

Rebuild on Windows x64 with Rust 1.99.0 and the Visual Studio MSVC C++ toolchain:
  cd rust
  cargo build --release --locked --target x86_64-pc-windows-msvc -p kv-helper -p kv-agent -p kv-cli -p kv-mcp -p kv-hook -p kv-server -p kv-relay-client
This requires network access to obtain dependencies. Building with another
toolchain can change binary hashes; bit-for-bit reproducibility is not claimed.

Packaging (from the snapshot root; this also runs the native release build):
  powershell.exe -NoProfile -ExecutionPolicy Bypass -File scripts\package-windows.ps1 -Tag v0.3.0 -AllowUnsigned
The downloadable preview also contains an additional WINDOWS-PREVIEW.txt,
describing its acceptance limits. The published ZIP has its own SHA256.

Before using credentials, configure Windows Hello and read docs/windows.md.
Unsigned Windows remote approval remains unavailable. Do not disable publisher
verification to start the relay service.
