Safety & Reliability

• Added stable disk identity fields from MSFT_Disk to disk records, CLI JSON, partition snapshots, and operation journals.
• Added target identity text to destructive wipe, sanitize, clone, restore, format, delete, layout, and queue-apply confirmations.
• Blocked queued operations and identity-pinned layout specs when the current disk no longer matches the saved target identity.
• Fixed disk enumeration by removing an invalid MSFT_Disk OperationalStatus WQL filter.
• Artifact SHA256: d63088ae68b36808577e33c8fb5bf2ffa957329aa750c9301c4d2591a3064c38
• Artifact is unsigned on this machine because no signtool.exe or current-user code-signing certificate was available.

Safety & Reliability

• Replaced whole-file encrypted image writes with a chunked PPENC2 AES-256-GCM container that keeps memory bounded for large WIM/VHDX images.
• Preserved legacy PPENC1 decrypt compatibility and added tamper, wrong-password, cancellation, and chunked round-trip coverage.
• Artifact SHA256: 556f0d5b4557096d2b1efdde810056e024b779b7a88d11931a8eaec6705eedca
• Artifact is unsigned on this machine because no signtool.exe or current-user code-signing certificate was available.

Safety release: apply-layout is now idempotent for matching disk layouts, creates only missing partitions when the existing prefix matches the spec, and blocks destructive populated-disk replacement unless --replace is supplied with the existing destructive confirmation. SHA256: f3c54a8cb9e0f9f90ce0a5d4e8aec7cc090babbb266f76a5ab9d6bd1595037e3

Safety release: declarative layout specs now fail closed before DiskPart scripts are emitted. Invalid or injection-shaped partition style, size, and drive-letter values return clear CLI errors before disk lookup or execution. Includes layout-diff tests for validation and normalization. SHA256: f18bf58bbc5ae280148e3902b9cd6692e1e1f705116017a6c8823e3273de6fda

Documentation and release hygiene: drained stale completed roadmap items, replaced current README CI language with local build instructions, bumped version strings to v0.9.1, and included pp.exe in the installer payload. SHA256: e71ba0af877907bc8043c50745f7e27480de053581558c18595d84ada83037c9